last executing test programs: 4.015784004s ago: executing program 4 (id=2714): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x3, 0xb, 0xa, 0x0, 0xffffffffffffffe8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r4, r3}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={&(0x7f0000000100)="9743703b803964faa0c7361d26d9dbb71b5dd10a3ebebc0f33a39f1593e08e96cce94cfc597ca645ad7c4700283527146a2aa72bc85255eb5bc4db5ed518ecd8cc6f3701a87159ca15", &(0x7f0000000240)=""/117, &(0x7f0000000400)="2a42fa8ab5b788f55abeaa861a3dde3c43910b7315eb52f8ad094b582961ca43d817387434b381921fd1bb33261ae786fd986498acd110afe3826ef83334c76656b4e087412b1def0cffb99cf20b13c23b0747d724beb49250d610d5d87ff30aae888253859160632eded1f181bd2b0dbca69d43c436d6155c19c0ad6be8c9223de795efaf394bf234c581f48a156cbd619af673756538dc6e7e442b622c5d312001953d18b720ca4167d327b95a18130b0e2b0bf7760eba67088b26d598f2d7f8679eb277da", &(0x7f0000000500)="b68a09400426e855e2a01d075436f78b2c9f546360dcc17abceacac6d3b9595e3a8528f29922be0d292bea7e79765cfafc4a255db8e9d139fc1010deaa28b99c99b9b1c9f32d0f1530c214d9c91383bf820579477183fa57da46f3458b313594ceb1a48afb9fefd168155b7cf70275439dc673d42e5109aa14d9f0886c5dd3a53b16", 0xaa1, r6}, 0x38) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRES64=r1], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000060a010400000000000000000a00000a0900010073797a31000000000900020073797a32000000203c000000080a010000000000000000000a00000608000940000000000900020073797a32000000000900010073797a31"], 0x88}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 3.816793685s ago: executing program 1 (id=2717): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @icmp={{0x11, 0x4, 0x1, 0x1, 0x58, 0x66, 0x0, 0x7, 0x1, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x1f, 0x97, [@empty, @local, @empty, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0xf, 0xbe, [@local, @remote, @multicast2]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0x1, 0x5, 0x82d, 0xc7}}}}}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002740)=""/4096, 0x1000}], 0x1}, 0x10002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r2], 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x802) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) syz_emit_ethernet(0x66, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @icmp={{0x11, 0x4, 0x1, 0x1, 0x58, 0x66, 0x0, 0x7, 0x1, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x1f, 0x97, [@empty, @local, @empty, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0xf, 0xbe, [@local, @remote, @multicast2]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0x1, 0x5, 0x82d, 0xc7}}}}}, 0x0) (async) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002740)=""/4096, 0x1000}], 0x1}, 0x10002) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r2], 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x802) (async) 3.25653285s ago: executing program 0 (id=2721): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000001e0001"], 0x1c}}, 0x4044090) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000001c0)={0x3, 0x72, 0x17c, 0x3, 0x80000}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000102", @ANYRES16=r6, @ANYBLOB="00042dbd7000fbdbdf2530000000050035000700000005003300030000000a0001007770616e30000000050034000e0000000500360001000000"], 0x40}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r6, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x30}}, 0x801) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000100)=0x4, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r10, 0x0, 0x0) setsockopt$inet6_int(r10, 0x29, 0x11, &(0x7f0000000400)=0x3, 0x4) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000004"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="d73b98a3d02f"}) write$tun(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r7, 0x110, 0x3) 3.094126746s ago: executing program 4 (id=2723): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x470bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdb", @ANYRES32, @ANYRESHEX=r1, @ANYBLOB="2e000000000000000000000000000027873ad5fe75e4acfc83f131d77f17d6609f4e7b588581c851f87e6b58c20a175f902051467745bb4b54465f88dca696bb89d4d03b4493c029a1e74c06ab7334d11d50ff26eeb662f3a9f04160d8d2c9be3a37f6bc55e543"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@private, @local}, &(0x7f00000002c0)=0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40880) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000500000018"], 0x44}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r5, &(0x7f0000000500), &(0x7f0000000080)=""/12}, 0x20) 3.025751695s ago: executing program 2 (id=2724): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1a8, r1, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x7f}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0x3c, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @peer_mgmt={0x75, 0x8, {0x0, 0x4, @val=0xf000, @val=0x4, @void}}, @random={0x4, 0x24, "69d55b5147c87e847ac405be5bf32c51d413dc1d73014c854bde53f1210aea1ca8c3c392"}]}, @NL80211_ATTR_IE={0x12e, 0x2a, [@fast_bss_trans={0x37, 0x8d, {0x1, 0x8, "27cd5ed5e8f9db993d927545771bcb43", "ed06362e18d4b4c48cc6ac2ea5df77d2a59e2b931879b3e7ea628fd5a02e4306", "46dd365f42e6634dab82b86d0bf8ddb51aa3eb94d543f941d6c52a1554ce305f", [{0x3, 0x3, "e50830"}, {0x2, 0x5, "fd574edabf"}, {0x2, 0x7, "d2a8a01ed84c1d"}, {0x3, 0xd, "3388064e844fc695b33aa4d733"}, {0x3, 0x4, "0717575e"}, {0x4, 0x5, "2aa3c73e12"}, {0x4, 0x3, "e118ab"}, {0x2, 0x3, "8d5ac9"}]}}, @challenge={0x10, 0x1, 0x1d}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @cf={0x4, 0x6, {0xa, 0x32, 0x9, 0x7}}, @measure_req={0x26, 0x8b, {0x50, 0x2, 0xb, "28c8d88ff7c56df5a0c26b463f985bd903fca3131436f126c204e7bd3b5872bcea13f17c55c4b14d6f692036a36ff9cb341167ddd764cdb789d3e3b636656b8b472069b48f9e144c098be7eaeca760a5137d1eebab7a8fdcbf57bbb63e2e7a7a2c8d05063edf436a718e16d32956a4f29fbae9204106367e021ae24581916b3c78afe64f04573ee0"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1a8, r1, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x7f}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0x3c, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @peer_mgmt={0x75, 0x8, {0x0, 0x4, @val=0xf000, @val=0x4, @void}}, @random={0x4, 0x24, "69d55b5147c87e847ac405be5bf32c51d413dc1d73014c854bde53f1210aea1ca8c3c392"}]}, @NL80211_ATTR_IE={0x12e, 0x2a, [@fast_bss_trans={0x37, 0x8d, {0x1, 0x8, "27cd5ed5e8f9db993d927545771bcb43", "ed06362e18d4b4c48cc6ac2ea5df77d2a59e2b931879b3e7ea628fd5a02e4306", "46dd365f42e6634dab82b86d0bf8ddb51aa3eb94d543f941d6c52a1554ce305f", [{0x3, 0x3, "e50830"}, {0x2, 0x5, "fd574edabf"}, {0x2, 0x7, "d2a8a01ed84c1d"}, {0x3, 0xd, "3388064e844fc695b33aa4d733"}, {0x3, 0x4, "0717575e"}, {0x4, 0x5, "2aa3c73e12"}, {0x4, 0x3, "e118ab"}, {0x2, 0x3, "8d5ac9"}]}}, @challenge={0x10, 0x1, 0x1d}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @cf={0x4, 0x6, {0xa, 0x32, 0x9, 0x7}}, @measure_req={0x26, 0x8b, {0x50, 0x2, 0xb, "28c8d88ff7c56df5a0c26b463f985bd903fca3131436f126c204e7bd3b5872bcea13f17c55c4b14d6f692036a36ff9cb341167ddd764cdb789d3e3b636656b8b472069b48f9e144c098be7eaeca760a5137d1eebab7a8fdcbf57bbb63e2e7a7a2c8d05063edf436a718e16d32956a4f29fbae9204106367e021ae24581916b3c78afe64f04573ee0"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8000}, 0x800) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2b, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.863887259s ago: executing program 0 (id=2725): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x15, 0x3, 0x80, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$nl_route_sched(r1, 0x0, 0x4044) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf46, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x2, 0x0, 0x8}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast1, 0x4f29, 0x3, 'rr\x00', 0x7, 0xc, 0x2c}, {@loopback, 0x4e23, 0x2000, 0x1, 0x1}}, 0x44) sendmsg$sock(r4, 0x0, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=""/4136, 0x1028}], 0x1}, 0x10100) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300000000000040000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1728}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xb, &(0x7f0000001180)=@framed={{0x18, 0x2}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xffffffff, 0x0, 0x19, 0x12, &(0x7f00000004c0)="66975a4257d1a2d89f26bd85d3d9e3291f528a4e2baa646e63", &(0x7f0000000540)="730ce5d7dfd5f8780cb601f24fef0aa16f3d", 0x2, 0x0, 0xe8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) write$tun(r0, &(0x7f0000000040)=ANY=[], 0x1f) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="e60d", 0x2}], 0x1, 0x0, 0x0, 0x10}, 0x10044001) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) 2.754838499s ago: executing program 1 (id=2726): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f00000000c0)=""/153, &(0x7f0000000080)=0x99) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv(r4, &(0x7f00000008c0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x5, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x400c844}, 0x2004c000) unshare(0x2a060400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$netlink(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) socket$inet(0x2, 0x3, 0x6) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000008040)={{{@in=@local, @in=@rand_addr=0x64010100, 0x4e21, 0x20, 0x4e21, 0x0, 0x2, 0x80, 0x80, 0xff}, {0x7, 0xfffffffffffffffb, 0x6, 0x800, 0x1ff, 0x100, 0x9, 0xff}, {0x6, 0x9, 0x6, 0x1000}, 0x1ff, 0x0, 0x1, 0xd64d5661df2588af, 0x1, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0xff}, 0xa, @in=@rand_addr=0x6, 0x3502, 0x4, 0x2, 0x6, 0x1, 0xffffffff, 0x1}}, 0xe4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0xffffffffffffff78, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x9, 0xfffffffa, 0x9, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x1000, 0xfffffff9, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0x40000, 0x0, 0x20000, 0x2, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4ff, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7f, 0xa847, 0x2, 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x573ecac7, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x3, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x404, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x8, 0x800, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0xff, 0x2}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) socket$inet6(0xa, 0x805, 0x0) 2.574926384s ago: executing program 2 (id=2728): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808006d020000000000006d3457845bd9110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000850000000c000000bf9800000000000056090000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x91) 2.367295567s ago: executing program 2 (id=2729): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x7, 0xff, 0x7, 0x0, 0x1, 0x9}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @igmp={{0xe, 0x4, 0x2, 0x0, 0x116, 0x65, 0x0, 0x2, 0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @loopback, {[@timestamp={0x44, 0x1c, 0xd6, 0x0, 0xa, [0x6, 0x2, 0xe, 0x3, 0x3, 0x2df675ea]}, @timestamp={0x44, 0x8, 0x62, 0x0, 0x4, [0x1]}]}}, {0x15, 0x5, 0x0, @remote, "891a59ba19161e256aa32f0b9d900adf06f8615180c440382bfcd02f00eee11613dccfce869df15913d05b9f0d0d086b8ef9b4d976272f99cb7019b38848d4c39a1c16d7abeac52b057b4d0896c0a0331ce1386c828f6303f1019a46d3aad74410e775bbc12061c1025fd36c1538fbf32a029402c0db7da1e1ba12f91b47fa42777461d403e2d1f655fcab172be9225065dda788e5f5261d7c49e57b52598be0a17d381d7acbdccd23dd5902b5bbd3112c3a72c3406ebf01ee53087f06fe3b5416d3e2a6a4a17b54815dd2efe11e2447773a68f8288a"}}}}}}, 0x128) 2.261821477s ago: executing program 1 (id=2730): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xc, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x3}, [@printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), 0x9) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffff000000019078ac1414bbac1414aa080090787f000d7636bf00014500fb624904a882b6e19e3abc9294ccb7613102a875ecd07506423d485a93592e781ea1cb147c7e7d3eb81fb3bafc7a34c8565567ae578541f77c74de86e6a59518c91924619b590b6c9fdbaa48343f253e51c58f9c7418fb5cd9d91a2bb5e4b786bb4d6f60396993eedd51"], 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x4c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r4, 0x300, 0x70bd29, 0x7, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0x7a}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r6, @ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x8) 2.038885412s ago: executing program 4 (id=2732): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x40044) r6 = socket(0x1, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r11, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x18, r10}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) 2.038238837s ago: executing program 1 (id=2733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async, rerun: 64) socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x400c881}, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x90}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) (rerun: 32) 2.028044188s ago: executing program 2 (id=2734): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='-\\&}\x00', 0x541900, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x80]}, {0x3, 0x200, 0x7, 0x4}}, 0x22a, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x5}, {[0xf, 0xb08fcabf, 0x4, 0x3]}, 0x3, 0x48, &(0x7f0000000100)=""/72}) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000200), 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x10, 0x20, 0x7f, 0x7fffffff, {{0x10, 0x4, 0x3, 0x7, 0x40, 0x68, 0x0, 0x6, 0x29, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4, 0x1}, @noop, @end, @end, @timestamp_prespec={0x44, 0x24, 0x4d, 0x3, 0x0, [{@multicast1, 0x7ff}, {@private=0xa010101, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@multicast2, 0x5}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0x94, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={r0, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x1, &(0x7f0000000240)=@raw=[@generic={0x57, 0x9, 0x5, 0x4e8, 0x2}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x83, &(0x7f00000002c0)=""/131, 0x40f00, 0x20, '\x00', r1, @cgroup_sock=0x22, r0, 0x8, &(0x7f0000000440)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xc, 0x7, 0x1}, 0x10, r3, r0, 0x2, &(0x7f0000000880)=[r4, r5, r0, r0], &(0x7f00000008c0)=[{0x3, 0x4, 0x7, 0xb}, {0x4, 0x5, 0xb}], 0x10, 0xe}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a80)={'tunl0\x00', &(0x7f00000009c0)={'erspan0\x00', r2, 0x20, 0x7800, 0x2, 0xfff, {{0x1d, 0x4, 0x0, 0x22, 0x74, 0x64, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@timestamp={0x44, 0x14, 0x14, 0x0, 0x4, [0x9, 0xc, 0x1, 0x2]}, @ssrr={0x89, 0x7, 0x13, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x23, 0x3, [{0x5, 0x4, '{D'}, {0x1, 0x7, "6dcfbff74e"}, {0x2, 0x9, "de2d446040ef2c"}, {0x0, 0x9, "7d53216e5df93c"}]}, @ssrr={0x89, 0x13, 0xef, [@dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010102, @rand_addr=0x64010101, @loopback]}, @noop, @generic={0x94, 0xd, "5d9a7d7e33afd603612806"}]}}}}}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000b00)=@generic={&(0x7f0000000ac0)='./file0\x00', r4}, 0x18) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e40)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x17, &(0x7f0000000c00)=@raw=[@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xac19, 0x0, 0x0, 0x0, 0xffffffce}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x47}, @call={0x85, 0x0, 0x0, 0x52}], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x91, &(0x7f0000000d00)=""/145, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x2, 0xc, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[r10]}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000f80)={'veth0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}) sendmmsg$inet6(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000fc0)="730327aed3d8a50de051", 0xa}, {&(0x7f0000001000)="061c47c95935bccd39ed23dd4f6b6a749b66d7e66bf96f02a2459785ba193ec9674d2b4675b50288e613011cd99bc45263e92c09cf2c951959fab38acb95d58ffcf8dfa47b73f9434a60c70aef8d4adedc06399cd15559e3f4111679c3fd06a5ec5f", 0x62}], 0x2, &(0x7f00000010c0)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x4, 0x3, '\x00', [@ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @local}, @pad1]}}}], 0x38}}, {{&(0x7f0000001100)={0xa, 0x4e24, 0x100, @empty, 0xaa}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001140)="6ec98688037078b4ddb449898bff78f668e621439f99201a227a660eb688aabd27601afdb1de7846f249414bfeba9ea951d257836435075c4994f8abbfc45eead02b3da50fffe4c24c38f2a2e126ffec316a13bbd61fbce3731335b7dc", 0x5d}, {&(0x7f00000011c0)="4b599978be36593a637a324586dbbc3538271796ee0ab7f77d9ed4dcd1df166dc2ddf71178c4b5aaf4f2d135e3561a1bcf7264cb4c0ac6af6e482d0dcadf0800049e10c09f89a3aad0afc0bbc1b415cd", 0x50}, {&(0x7f0000001240)="bd58", 0x2}, {&(0x7f0000001280)="e3c5b3e17264b31050ded3d45d25acfacc2db6101adb28757224bb271f638f63da1be86b4a2931956e8e1f72197005d37d609993213aeb655b5c1f91763bb246702d9d6dfd5edd6ff2087ec8", 0x4c}, {&(0x7f0000001300)="a9d23634", 0x4}, {&(0x7f0000001340)}, {&(0x7f0000001380)="cae5297f012d09d60ce22157b83a596a7af1590800165bd2b20574365db477b435d8c46665384e5abcf26c06c80ec775e38b3a9cafdaca5a5a0fc976cdacb377fe16de73a03cc145a73284dba76a544f11d997d210e19b417252d7ca9a18b8c5a4471ab4cce88a369e1520c2b4e7a4e160e2d5c5dc08b97961c4e131d14272eb709f5a9326b435a0aff6cbf0704795011fab87e7cb782f68d202182220ee5d6665f515abde2245d1e436ca2fc4dbc4a1fc96109ea94f85afeae1faabcb996fde89ccf7b2ac91166f67938ef786d5977815", 0xd1}, {&(0x7f0000001480)="da7dcd2c416914b2c0de341e54a1208ef30bc925e049c59cf166807fb457d31c41d088d66d257d1179d2d6b33d6845d3ec964e87af3c6ee512569860c5dbfba342fe33aec36c36328e97f5ad7912d3cceb77f14d11d549b343a83dea970f1d7c56a3525ba1d2fbc8d827d32e02c0b57e0887606e58a60db85d2b1b7dfe871a4eeb541a758f30be83539ed23a71557831f22b0316a880085f74573f18e0a2f8f82c13dbd377e913db615e397739", 0xad}, {&(0x7f0000001540)="cd38514e710d84a68fbc", 0xa}, {&(0x7f0000001580)="15af5a77e8016e9252d7f2f05c780015da82a6a3afec429e89de7294703ab6ffddb34b041886bf032a", 0x29}], 0xa, &(0x7f0000001680)=[@tclass={{0x14, 0x29, 0x43, 0x1ff}}, @dstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x33, 0x8, 0x0, 0x2, 0x0, [@private2, @loopback, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x6c, 0x6, 0x2, 0x2, 0x0, [@mcast2, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0xf8}}], 0x2, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001840), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f0000001a80)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001880)={0x1b0, r12, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x144, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x140, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '()-:)%:/@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(,.\xdd\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(/,\xa3$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'erspan0\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ':&/-\'{[(@\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\r}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x1b0}}, 0x8008000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002c00)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x1d, 0x13, &(0x7f0000001ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @exit, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001b80)='syzkaller\x00', 0x3ff, 0x1000, &(0x7f0000001bc0)=""/4096, 0x41100, 0x35, '\x00', r7, @lsm=0x2b, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002bc0)={0x5, 0x10, 0x6, 0x9}, 0x10, r3, r6, 0x9, &(0x7f0000002c40)=[r5, r5, r4, r13], &(0x7f0000002c80)=[{0x9a, 0x2, 0x3, 0x1}, {0x0, 0x2, 0xb, 0x1}, {0x1, 0x5, 0x5, 0xa}, {0x1, 0x4, 0xc, 0x8}, {0x5, 0x1, 0x8, 0x4}, {0x3, 0x5, 0xf, 0x4}, {0x4, 0x3, 0x8, 0x4}, {0x4, 0x3, 0xc}, {0x4, 0x5, 0xc, 0x4}], 0x10, 0x8}, 0x94) r14 = accept4$nfc_llcp(r0, &(0x7f0000002e00)={0x27, 0x0}, &(0x7f0000002e80)=0x60, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000002f00)) r16 = socket$packet(0x11, 0x1, 0x300) recvfrom$packet(r16, &(0x7f0000002f40)=""/171, 0xab, 0x40010042, &(0x7f0000003000)={0x11, 0x15, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000003080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000003180)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x7c, r9, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r17}, @val={0xc, 0x99, {0x7f, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bc819e56925c"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0033a3b0993f"}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x841}, 0x800) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000031c0)) bind$nfc_llcp(r14, &(0x7f0000003200)={0x27, r15, 0xffffffffffffffff, 0x3, 0x3, 0xff, "b4910f65b214bd09ec332de390e138173a0e3766d6249a08362fdd78af7b2e649fc6ff1580eb7c60113872bd9384fdf208295fa05b3a54ff75256cd14f7ae6", 0x9}, 0x60) 1.89808781s ago: executing program 0 (id=2735): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001280)={0xc4, r3, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xfffffdfe, 0x5, "7599c2ca42621bc742808ddcbdc2e4a092b380cfa2568df8e3474f983b75fbc211a28379b9b7e1134b3702a91384a051c00444642f0dce07468e7d9dd76d8cf927a5b75f60b194861525693932f76598f631f1fcc4a085b79cf8040c283682fb0bde7e94f0508c7dfda39c4f433f56ee6a559c244a3d30d6897f265982d73f07ea58fc4bd63e4dfc61"}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4801}, 0xc800) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000001240)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001200)={&(0x7f0000001780)={0x24, r4, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1e801}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x1d, 0x1, 0x1, 0x7ffff00c}]}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x50000}, {0x85, 0x0, 0x0, 0xaa}}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r9 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001400)=0x58) sendmsg$nl_route_sched(r9, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)=@newchain={0x64, 0x64, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9, 0xfff2}, {0xffe0, 0x8}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0x10}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff5}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_to_bridge\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}]}, 0x64}, 0x1, 0x0, 0x0, 0x200488c0}, 0x4040845) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001600)={0x4c, r11, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5000}, 0x800) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r13, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x49, &(0x7f00000003c0), 0x4) setsockopt$sock_int(r6, 0x1, 0x45, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0be8ff000000009500000000000000e14a47e9b225c1da3b8f9221b05dcc4dc796164621e0aabc4c11df424ca0b327ff42fc25cae59432889840c56d9145d9bf50a444d9768b0d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 1.873202192s ago: executing program 2 (id=2736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r1 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x48}}, 0x80) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000046001400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8914b3f677210a5bea7f3bea6c3", 0x0, 0x10012004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @private=0xa010102, {[@generic={0x7, 0x7, "044158a35b"}, @timestamp_addr={0x44, 0xc, 0x6, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r2, 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000100)) sendto(r7, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r6, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) 1.408947155s ago: executing program 3 (id=2737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{0x0}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r5], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a3a85977eb2786fffeb534c1de1d24d6df07560100008089107da77253b18b3dff35bfbf2edaa196ae266499cbcdc0e8d88ed44cfca9eb24cd569da7cf73022aee1e2e9f0d618ca49724f10c2bb166747dbd6cf2e536c9d9028f35e1ae11f89bb5ad2bdd188946e7fc5cdb704120638e8623c241710d0fa82ad3edc353845e411cd09c32792e395dfa8fe2943cc3b3123673a0adc055f130e4d275032336b5879fc6b505e78eb5a37e7ff5f876c0f55b770f6f06d2fdac254b2509a245cd0e0c2a06729e0d9795068be2655e", @ANYRESOCT=r0, @ANYRESOCT=r6, @ANYRES64], 0x24}}, 0x802) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800dd8d00000000000000000200000000000006000000000d4e17007f4a20c6b2020e73f176b9ffd7e1b0af3685c6239e3c1da4fc839d470d8cf89f00ff9f84725370dbf8210ed015ef094c4b0f4d3b40193aaa83629b9523120fdd8b28373b1e8ee2002751b248f80bbfa0048c052af2a5a7b8d7d125924337c2b7db2e4ac6ae3dc9861f58c3a0abe87d594a86cfe81ce4b43781048ca119fad44600"/170], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="08000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) shutdown(r4, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x80, 0xb, 0x4c, 0x2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x80, 0x101, 0x8}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000000080)={'vxcan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x2f, 0x4, 0xfffffffb, 0x0, 0x0, 0x6, 0x2, 0xfe, 0xd, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0x45, [0xf3, 0x100089ff]}}) socket$netlink(0x10, 0x3, 0xc) 1.407654547s ago: executing program 4 (id=2738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @nfc={0x27, r1, 0xffffffffffffffff, 0x5}, @xdp={0x2c, 0x6, r3, 0x34}, @phonet={0x23, 0x16, 0x2, 0x9}, 0x5, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='bridge_slave_0\x00', 0xfffffffffffffff4, 0x6, 0xd}) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 1.177285813s ago: executing program 4 (id=2739): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf252100070000006f000000000100000070687932000000"], 0x28}, 0x1, 0x0, 0x0, 0x80e1}, 0x20008014) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r5, @ANYBLOB="010002fffffffdffffff1d08000008000300", @ANYRES32=r4, @ANYBLOB="dc002f800c00020000000000000000000800010000000000c4000380050002000300000005000200020000000c00050005000000000000000c0005000300000000000000080001"], 0xf8}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000326bd7000fddbdf251f00000008000261", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e310000000a0001007770616e33000000"], 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r8, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040800) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r8, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, r6, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1000, 0x4f}}}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "ab833d52e0"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2bba2e3fcf"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x14014}, 0x48810) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f00000005c0)={&(0x7f0000000d40)={0x198, 0x27, 0x10, 0x70bd28, 0x25dfdbfb, {0x1d}, [@generic="37eb418df64500484ad22a304399e903f44d011bca3d5666e760068c054286974c0fc114d0c59b1d27f479b87d406bbf7e6ea9abbabd5471efd3730ec0040676973c3a7d11554f82a0b60c8b55", @generic="169e8f25de8ee8ceb23b8bff8978d0435788095aa2b9ab3db7805b10e21ce8829966d74bba840de4c80ec2c2367c4aaa4fb662ab69", @generic="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"]}, 0x198}, 0x1, 0x0, 0x0, 0x24000000}, 0xa091) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$kcm(r10, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000840)="c6ee1207b4314db8380ae7ade0c47b6d997c4de5aca72c74b85ba6b4b01eb0950b9dc22f30d55af7b980d3c23ff5eb57ccb3ee8b052c2dc15b4f70b35af79a15c9657676d16fdb72e5d085407e4981cfd21e0c79d1e8f7f60e47f8f3ef38118ba56368e1a7960e", 0x67}, {&(0x7f00000008c0)="92e78ecd6340b6f8d03e5a17cffacbaf9d074d2b4c90b6bbf117f8b4324bfd8ff0fb6059a0ec3368609bda5e4e89428dcf769bccda95453c498d738d24b99d63c4ed94d7f81046fb9db67bb6fb38c0f70b906957f71cf984d0a9c443019c11122ef6e037208d4c08751d", 0x6a}, {&(0x7f0000000940)="65f431b1fad97db55faff0d751da3d77584d3fdf88f2676977c8986e173b61c079f9d901a171ecdfb182c62a1ea2f92d4772b7606a5d9cdefa29b306bf97f71a65cb1cca4025cab746a64afdf7d066ca", 0x50}, {&(0x7f0000000b40)="71c4c914c8f9e35f3eaec631970fb8ed1246dc86ce21a0339c4fac1f49e4d321da987339f01d794e90946d686359b7ca7e178210b0be41be72085f9ad33dbf3f8050609c964ad8c20df284f0f8078de38e0c6db8b2313afe3ef9d8f370919a0176fd4db71621194e386bc8371810f1e37d944198a8227a1b8798b1a988df6467596dca55673afb68ca34ec823808da9ba54e550fa417870a2cab237b483b37dccef45131be2569014357dbb02af61b2a6bc7b28a58a3564c58cb394509e8edd9ee5a761bfe4ee3e4e281", 0xca}, {&(0x7f0000000c40)="4c39d99147720452", 0x8}], 0x5}, 0x4010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f26cfb33abaab152b28295af15d4c706000000000000000700000085000000830000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) 1.062288275s ago: executing program 3 (id=2740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'wlan0\x00', 0x5}) (async) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'wlan0\x00', 0x5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}, 0x1, 0x0, 0x0, 0x8020}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x76}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x44800}, 0x4800) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x14008000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x278, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa336f8232619445f}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x20044001}, 0x40000) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(&(0x7f0000000780)) (async) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r6, 0x0, 0x0) (async) bind$tipc(r6, 0x0, 0x0) recvfrom$x25(r7, &(0x7f00000007c0)=""/196, 0xc4, 0x100, &(0x7f00000008c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) recvfrom$x25(r7, &(0x7f00000007c0)=""/196, 0xc4, 0x100, &(0x7f00000008c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) getsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000900)=""/26, &(0x7f0000000940)=0x1a) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x8c, r9, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x8c}}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000bc0)) syz_genetlink_get_family_id$fou(&(0x7f0000000c00), r0) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000c00), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000c80), r8) (async) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c80), r8) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x3c, r12, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}}, 0x4) (async) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x3c, r12, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}}, 0x4) r13 = socket(0x2, 0xe, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r13) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r13) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x94, r14, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x24000004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r6) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f0000005940)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005900)={&(0x7f0000001000)={0x48c8, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x30}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x11f4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x84, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x80, 0x84, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x8000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xb}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5a3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x496c}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}]}]}]}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x10fc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x4}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast2}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast2}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xa0, 0x6, "a7efe2e5133406e92a1ef69bf57ccd0dc3d783aaace0e71487f500333d1cdecb5ba051da529abd2e77b736feaa62d6d37e17a5678e8e89dd4313e64cbc36f9fee04924412d6f08ac4890f30459e99dc515dc5397857a1fa8bfb631205eac4c99985ce42675393bad5e7506f6014d02c9fd25738c3ce882f01db11e4556ded6a3f247f681386927a6a750ca21f9d172e4a20ba57dfea18639a894742a"}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast1}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x4, 0xffff8000, 0x2}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x100c, 0x8, {0x1, 0x9, "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"}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x8, 0x6, "16abe41e"}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x60, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SUPP_RATES={0x50, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4b, 0x0, "4475b5c2dfc7e1c7a08b20e2ee80ebe1d31584e26ae9c4f04ed326b4cb48f51dbfde4fdc90e6cb2159957a5c62d286c4e79cdc965ac2dbe764a797c6f7e323d99997572993b58f"}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x67}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x336c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x3358, 0x4, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xe6, 0x1, "f34bb8f934cf87e09fdb7ed5738dd881e022b4a9f35472e7efa438f89758f643ac6da4467abe74688b421e60024becf7e46350907b903feb1ddc05e943b2aa5256002f1619438d257e821a97e285d913f4b806f50eab639fa8edcec7a21897ba2103b566e1a50a9d2332573dcc0d0e85134e1f861f3d065203bf3ec7ac22b9e6bb72dace4c84d8697d787712615d5c1bf5bf6f03576ca2984f55c29a102b2ddf8e5d10792643541f5eb8de1b1099a0f60303580704a63f3be9d1df33c1bb78befb303034c5c078412abc9a3447235ab2adb98bf7e0fd52c14121734ed192805eb864"}]}, {0x21f0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_PATTERN={0xa9, 0x2, "7f1a9da2ebb5614796550c45a12fee23aea1d69684520b4b95e779617466ecc8f7f889a5f3291a8cf32d001a211863f6e68472f618262ca1e4cf35bd9b70ee29b1f83901bfef8be91577c7ab03bde467c455cbe400e1d27de747661930b99f2703ad974b42aa04b5e517ed70e19b077b7127608cd0d06e7fdcfb7bfe9c5559d1c2a8965d6987886d03c34daa759e9bfe3003b54e9b43d1dcac44d6d728cdc4630cc9b28371"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_PATTERN={0x96, 0x2, "d916c9792128e70254f32f24206029e220549b8303d80d0e02978de72f9bc596e2c36c9004439c53ca1d292d9f988984eff1767738f307be1f85a4f3277563d4c8b8925234c7cae8793312b9733e0d997d9f638d228f4efbd9d9ab97a024d05d2faad88524d2586e1734854601a5a787a2b4718807f61171f9332d895468b7258ee20ad92c125292f4c6b2a077032c6af88b"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xf5}, @NL80211_PKTPAT_PATTERN={0x85, 0x2, "e9615e412b3f5aa90457c19ff6581f94b184c4ab858eafd3c4759f2c8cdfc3930dd68946655c2dcca987ac07f178b474c239c53fdb21a9793f4d0044d2faf8f7515c1b5ced179edeea2692124204046426af4edda7ed30cac29f0fdb01b399287d56130bfff22f98203f464975f15f2460300f2bb5933826a59f52b9431c984fd2"}]}, {0x1078, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x27, 0x1, "55b7655573fd368c2b077a18cff5f3665ddc776d5d12f26010fb4b77d6f78d440e74f7"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_PATTERN={0x48, 0x2, "880d1e4b19d8c8eab2f1eb2fcc89efe67877aa4d2d06f5a983c5b1205322c20d148a2365d4cbacb0a4206bfc0b7c8450439e068d46076df967480f367822bb25d7fe5d5c"}]}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x3c}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xa8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x38, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x63b, 0x101, 0x4}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x21, 0x8, {0x2, 0x5, "f14600e79a6803819843cfbd53f3972b0415909502"}}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x58, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x2}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0xf5c6}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x38, 0xa, "4d34e0b58b53ace33059ecddc29b35ccb395423fa7b16b395c8b4727e9cb6cde9a3fb7ecda22bd0fc9c0e07504f3ebe34d63c682"}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x21c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x110, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xf7, 0x6, "4ab468938a3c17a3ad92692b27110c62f7ec82fd4031de12096d58206d9cca84bf604c49c19ba708cc63033f544b3ca99fce3f46e65e08d2fcef3e5921b07b396571aeb059abda2b1bc996a9b26650a89d1a8ced98e4019124cb53bcb1d99d9927e51a3e9facc52167d5e60fdfa79b4fc0fe5bde956c58751b18570e1c1a383f17a92eca878f54dfac79e466a287e7d76a54dd361e7f2013a87986fbf355609b28c1e8d1e801b19de28200f8c35fa35fb6c125f84e644043f11c2dad60d35fe8ca65c4c4327d4ae9e9307a0b80a6748e6a421fed0d03c009eee3d01742f1667e7b05c0c74a82f047a296d28369379e08fedc22"}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xec, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xd5, 0x8, {0x4, 0x4800, "0dadeb396c066e818eb124d8a20b792511ac4d99f4fb308c2e3bc3b454ecfc453b8fe1ce841d42611c2fc4065ccb46795c0a4ffa9717d5132e02aaefae2b60945b924b4aa05b447577d6b09cf683d4ab5c09f62eedfe445f7235ef6c8ca611c9ed7b560464c0fcee18de7925e3370aabb11b730293c52fb04c93095b0acc940f800e88eed3cc08950ac544a3524b2be7ef6d9ce54209ac8f8a8e0f67632bdf02cf64558744d9b695b1e16ba2b888b8b75b5d81607a7f3313a45c49ab0156a02566f20ca158bdecddb3"}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x9, 0x80000000, 0x4}}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xc, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x3d}}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x48, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1c, 0x12, 0x0, 0x1, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x10, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}]}, 0x48c8}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) 1.04225844s ago: executing program 1 (id=2741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) socketpair(0x15, 0x3, 0x80, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$nl_route_sched(r1, 0x0, 0x4044) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf46, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x2, 0x0, 0x8}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast1, 0x4f29, 0x3, 'rr\x00', 0x7, 0xc, 0x2c}, {@loopback, 0x4e23, 0x2000, 0x1, 0x1}}, 0x44) sendmsg$sock(r4, 0x0, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=""/4136, 0x1028}], 0x1}, 0x10100) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300000000000040000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1728}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="1802000000000000000000008d0d0000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7031000010000008500000088000000950000000010000090ed9a1df93deaa2ec9b6e79695e62684614098fead8b19bf4c7de362f69421523f38143c09052f0c17fde7cdd4a99854e769c640b371cea2d38c944a046ea28eb5c8c4b05e2c11da3f3abec9541b6bc036ec00c242c96789d5a3b91dd551a288652b815996d"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xffffffff, 0x0, 0x19, 0x12, &(0x7f00000004c0)="66975a4257d1a2d89f26bd85d3d9e3291f528a4e2baa646e63", &(0x7f0000000540)="730ce5d7dfd5f8780cb601f24fef0aa16f3d", 0x2, 0x0, 0xe8}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x1, 0x4) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, 0x0, &(0x7f0000000080)) 875.515944ms ago: executing program 3 (id=2742): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) unshare(0x400) r2 = socket(0x2a, 0x2, 0x0) bind$pptp(r2, &(0x7f0000002b00)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) sendto(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x4004800, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) 747.619287ms ago: executing program 4 (id=2743): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket(0x22, 0x800, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x5, @remote, 0x1}}}, 0x108) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0ff000000000000f9ffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9720000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYBLOB="0000000400000000b7050000080000004608f0ff760000007d9800000000000056080000020000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4, 0x0, @mcast2, 0x40000000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) bind(r0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00000000000000000000000000001800028014000180080034803e000000080001000000000004"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000009000000000004000000850000005300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000280)="05", 0x1, 0x4009, 0x0, 0x0) listen(r5, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000402000000fddbdf25340000000c009900080000001f00000005002001560000001400fe00fe89ede89baecbfba4ecec51ab8d96aa1400fe00f979837eaa12c3addf861c8ab9fc73830600fd00db00000005002001170000000a000600505050506cb29a60d944b9c6eda14c1c49e1fd1bd32a3db8dba087a8c4b2af016de89fc7dd77a994bacdccb73f4fc3c65fec7b0d12e99f43d02e199cd90b61b6a63dfd6f718ab0053d5f8786a8040aa5ada1ac2ec61eb6835ff6034c8d41699e605eff447052ec5a00"/210], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRES8=r2, @ANYRES16=r3, @ANYRES32=r0], 0x60}, 0x1, 0x400000000000000, 0x0, 0x4000}, 0x40400d0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="b400028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff00000038004100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000a25ed559050003000300000008000400", @ANYRES32=r8, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0xd0}, 0x1, 0x0, 0x0, 0x40000004}, 0x4040) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 745.833179ms ago: executing program 0 (id=2744): socket$igmp6(0xa, 0x3, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8800) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00020000004e57e842d6844b65e4493c053c353c4062d2099acb8c2817820a2d2c3d14cf4309000000000400000000589c1e"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000007a00000055341eb800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @empty, @val={@void, {0x8100, 0x5, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002cbd7000ffdbdf255700000006009500830000000600950009000000060095000100000006009500ffff00000600950007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x200000c0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r6, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={0x0, 0x278}}, 0x40811) ioctl(r0, 0x4, &(0x7f0000000700)) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f00000000c0)) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) socket$inet_sctp(0x2, 0x1, 0x84) 717.270794ms ago: executing program 2 (id=2745): r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000060000009500000000000000665187c7adb1b7fc8d495f99f77c746aa0032c1e7ed22d7fc671fc82f85a7daaf721f8905abec7c0e05d2b391c6eb280da094c4002333eaa82cde822290545f39512063f285ef17ada77bd634d6cf7ee3d3ce49ff87ca90caf50e1c5e45a21902686ca80f49f1fa8c2b2a22d8ad695f4582bcc0c05bd954699c69a586a236fc84700"/169], &(0x7f0000000200)='GPL\x00', 0xe}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40001) (async, rerun: 32) r6 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRESDEC=r5, @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8015) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000ffdbdf25050900000018000180140002007465616d5f736c6176655f3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2820142b6b7ef621}, 0x40000) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x2, 0x0, {{0x13, 0x4, 0x3, 0x2, 0x4c, 0x66, 0x0, 0x5, 0x29, 0x0, @multicast2, @rand_addr=0x64010101, {[@rr={0x7, 0x23, 0x7b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101, @broadcast, @local, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}]}, @noop, @rr={0x7, 0x13, 0xd9, [@rand_addr=0x64010102, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (rerun: 64) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r14, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x30, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000002700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000005c00)=ANY=[@ANYBLOB="481a0000", @ANYRES16=r11, @ANYBLOB="000228bd7000fedbdf25080000001400018008000100", @ANYRES32=r12, @ANYRES16=r1, @ANYRES32=r13, @ANYBLOB="140002007665746831260000000000040000ff5b1e912cbf0180eff2a1dc7f1773e8c45f74", @ANYRES32=r15, @ANYBLOB="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", @ANYRES32=r16, @ANYBLOB="080003000200000008000300000000006402028053000500322f5873070bea6db33c555d144bf2c7817fad31482f0e3ee329206af7a529f422eebd7db083517e4657ae8965c3112b361b0a009c799b5e7cd3189308384f8a3c2e2b27dc4616725e012731c8c27600310004007de93344ce26079589ecac5211ec49a90d343154d1feaeb89407c6d2d6581ff1d2a6789ed85699e46ee6e9872e000000040001009e0005001ccde4b61a3f5ebfc4998b99821229effd3d10d596694f07e38886a5502b901527f187cf316e78c04534e23d43bdf97a4204318050a733438e678a2977bfdfbfdf1521cc86567306806e14e7398da0293221e11ee92449a52befa0b0ac856aa76cd3dd07859ee60eac69b1e7c218a5f4498ab3301ad485f3c5585169d9fac8456d59d6ab3a7510ccf48d7a807ff2666b6ebe4a02b6b506f6a6e80000080002000900000004000100b400050057a291dbd9b254badeb8b08c765599b09425315da22ea4ee3ce73db9c625ad032f5cf374734f25632df6a77e1317c19a88ac2792542f5e5a16a43d964a1cdede7dc97925aa22a85b437088e7d7c7f3815565c9d012a94d7052384aceaa5d85744ea9455fee6d06a247f9acf42c0f90c403ca832eb9fa3d032dd916889f63a72d5b1160b15c761255eead1a042ca19b00bc7fe16750881ffa3e51b41e522ef9c4c9db71e3e8ed277d2729ecf98d135d676800038020000180080001000f0000000800010081a700000c000200657468746f6f6c004400018004000300110002004e4c424c5f434950534f7634000000000c000200657468746f6f6c000c00020069705f7674693000080001000400000004000300040003000400010008000200c0ffffff"], 0x1a48}}, 0x40) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x22004801}, 0x20000000) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) splice(r0, 0x0, r17, 0x0, 0x1000800800f3d, 0x7) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r18) 240.346882ms ago: executing program 3 (id=2746): syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x62b, 0x5) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x10c2, &(0x7f0000001580)={@link_local={0x3}, @multicast, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x1b, 0x4, 0x3, 0x3d, 0x10b0, 0x68, 0x0, 0x3, 0x6, 0x0, @local, @rand_addr=0x64010100, {[@rr={0x7, 0x13, 0x2d, [@multicast1, @broadcast, @multicast2, @remote]}, @timestamp_prespec={0x44, 0x24, 0x4c, 0x3, 0xc, [{@multicast2, 0x7fffffff}, {@loopback}, {@multicast1, 0xf}, {@multicast1, 0x9}]}, @noop, @rr={0x7, 0xb, 0xb8, [@remote, @multicast1]}, @noop, @noop, @generic={0x44, 0x8, "c7423e4ee4f4"}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}, {{0x4e24, 0x4e23, 0x41424344, r1, 0x1, 0x0, 0x11, 0x10, 0xa470, 0x0, 0x9d81, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x4}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x100}, @sack={0x5, 0x1e, [0x8, 0x0, 0xd, 0xd791, 0x6, 0xbb, 0x9]}]}}, {"f56d739144506f97cd6c7cc5b53363f20be6b4742716229af1bd57210f47ddcb3e303dd2a6f771587f02a6fed2643a8c9ad158eb22442b9bfb640ab16b885a696548752a6468e4b31896a42e848310f5810f3bf3405a072bd77dce2cf0461fd522f6367fe7b55eac3741cfb21356d23085466db37aa019cf646c45be93355a2a1c6636ae0dbdf84516a42b72e103dbccf8ac853e9d19a871382c54381572ee9ffe4304ea574f2939705937e05489e740240e87284c211fd08f191b69364d8a4d8d46545f629f585eb53c2da2d609440edd1c33f798e36a89fc84499bd7f824cf367fcd8d72ea4ffc0891f297e48036291ddcbb864aa1234f98d0dfe6679ff5cb8f12355131f2508bcfe3290a8bc2bf0c1abf7c17e5f07c37efd619fb33c47f42c4cc45a351ba8e40735319d1765172167aa1c891394917de64b24b4dbb99c81be85680f533ab6a9e1820582b5e844d022b45db033094b4d7983b8bd6b4bba723c0bd30b3bb335d70f906453e112605796f3b3ba994daf1288155f19e6da1b4943e4cf9f29afce2f64916f56c0d9936ee87d146f628e617db70c168fafe0329508b8b13e743f1a3d11bf2576fc6b3cc4ddf3ba6f0086b4dd0f5a81a0043b46539a9684eefec26cf600cc75999661a6bb707f42f6f9a0413bec1582023ea54c52034da042c2ea73043133fe2dd32097ba94759516245d35828b1df9adb263f535e852cdb0204142a3b556547701ea5b7e0f540fcdd19182f0252a0f97f0548a666adcabdf9fbaf73d20ea232cecde1461f715f7e72f9859ed18f0b409576ba6cbbd333250d204fb328ae6a665d5abddaf0d137a95b42936b0d282b31de1d3384436f9ed720539f2b81431500400a17aeb209743257c9dece4f2e51275585eff244aaac0de2a00533712a2753c302a72d4e6697371c36c598de5a53c860f468029b36fcfbab5e0c99307214efec7e0ff8ab5fc67e54424b1d7a4ee91e47b6e689ee4315bb8da667178412c55b2e5615e5eb7f171cc89005f634cc5286eccfc044881e3da23d2d924a2963edca0126c521bdccba18a245d718696f6778f85020a87aec4c44a8b16e0dc981e8bfef640d80786d0d54282324e4b95571cf7ebea8f3442649a05f7d7276e43f7f42d08949568382e0c255dc65396f57583d09c6f1b07d9e3fecf05d4982a76381a22515ace48a978fb96fae449f4bf98d50cefd4f886a020689db4d931f3bf05236bca0dd409f03ebb6bc10d0d71a585d113405895a727e4f188312571e42a247229ea6f8056ce5723e472cb8e4972476750e5dcbc315a5e68c6bc7a163b1feb27e26e5426a2de112ff2b3f13e4326bfdeba3a82532b96890793a889fbb16809428306ebb5ff8297fbf4f68989099d90363c9cf0aaa23377809b6c573fb3f4ac2be948505afcb596534ca23456ebaeacbe7c8045015ac49e0a15c94e8a8345bc7d73eab1c6d88b6923d4d14ff3f03729be802a3c94629e0bbfd414ff384f180ae0b35982a60fa3856b83a649030383c5fa32c254e698b5e870df1fc0ca94cae39366f13429bf8d7f0a131c4b5713486fd5cc965690b69b67391be84d880f5b141fe6f74b4307dabfee4a3f47d9671dbead13b044743ed6ac1e4b26c84a3e6bd8a2bde154ba9ccd2fcc11109b129ae4de3dc985812b4d89f0a805f97dfe093028bd4cfcb37bb954d4f41cefe33af8cdc2f919b596a86d9ccb93353cb6b9528476c3ef5bb57d73c2e9be8431956efe968a8e9ae20600009a537615f559b09bac12cc66671fc5910ba6f94407c5e5155931223b3fc87a1e6c8541192d7bc75e0ced9b865d7fdfb7572c834e4a7b163f71e7a0f8d24350ab19e7120e3b42b8351c9cec93f1889b5c541fd848d4645275144079adbf6ddb27f37db93e6cdaeb993250661caf1460c3645772a52c8147519b427318690bcbc88451b9853a0d17ff21c45edc1d6e5e178770b9bb5e26992d56780bfbc1867f856c64c5e61166b61d5f11ebb5b855bcbc6ce2d16c117a6f3fb3ffa94f2d0c6c8480bbeed1e5a8b588c2ff008f2453c9d4c67587a2ea3362bda215359d11f53a2bd9bd72a8f611d6f9fde12ec3279990a8ac583754424a386ed8558a0437f15ca568b461ffa9b389891318a468fa725cce57ce37e8d183a332d31373b24323412fef746da5ce2e00f5008123908f666b582f9c78050a6bceee1deb97d608b09b66405ec03bc8463c8e48b46aa7d49842d34305dc1887b44c55d552d979949c3acec3e4bb4490042857213039b1fe0a5a90be56ba5b72b3b68a35f0dcf661b07f35617e7d3be3b7149d1e08b65dda2fe44721b8268ac52dfd5f18e0548918b1c0fc234744ceaa9675b128372b658e6796231ad7f86c2f147a39e34954ae1aaeee6294edb1e13cdc1f3a234756aa7346cbfa038acf0b2d4ccbfde8a8cba6d5c50a653bff917fe07242bdc1b1fc2ce854fd14dbc807a1f0cf78f4b8aaf4ef179bd87744baa35e2c9c7894378b137b68f28e29c534c5828abc4e6e6750e239fa25bfe6cf0fd43166df9cd35b90606065cedca604d3815d990916ceb8099ae93737d3f813b2c1b4cbc3be4364e1daf39b86246e400ed2f1c13734c308d75f5cbde498dd36c91bd162485ff878a1b930896a2d3675cd38b31a85297198536b797a7828b7160f6fe7d73a11b377d1773a763177c651f4bcb7b709e69674bef198913adafe3e43b661dd8d6319ec05844611a40e250bfb8029230d1b89f1a1d4dac3599f8990c40655471abdac9a5965f3b27b7252ba0792ee72843daa7ca66fbfa64f1f404bbd1ff908454bfdc24774d90533dc91e5e5aaff96799f9925ddbdcda357ea697991be1918a6ecc8069460bd34d448356a1616b4d88bdc2c83e0ca3077d5870ed5b406bb2b4045116d77e0068dc3fa766c46a2be64c98d3ee8912d7265afeab653778c776f700314afe6dcb272d7d070404b1713fef4229698eee602e4e82b9d12a1fe8ca55ac057ebbd4049cf1ab2f0ab6eb1fd55057b331bec540c63da8a1cbae372f6e11b7a3a02bbf3faefd5c048439e047a4396283faf1fb77feb1197b825222084fde3983f4adf66d630d41e2df40a5c4e1629e3386cb57f18e24c62d219b740203d4b643cca3b53d2e52dfa4de05b2f7908fd94f3ad775fc7a431b0d3c1274386a597114ba332f449ef8a9640f87247d526f59454de26d08d9ad62fffd93aa455861c2ac7c051433c35497b0531620ded3d82e0d0115b327b5c2336ed231c075390e7b5ff73ea8b4d8733cf8a99a4bf3407f73e2dca291eb5cb883936760db69330b7875ef0e4be05d762b4c67e6b297d46e864bbcfa4d5e45e4b5f252af39943a077886a11ac5a5f056311e0c1e8348948f3b937a8cde73a7f8f0171f07f9018ccf1e8d6c37c4cc9cb30709ee03c310c0ff7ea32339d952b32b3dde40b1552c03e01d98d117a0343061f7fe7c70813f1bc22b691069a2c14bac9b144e71febce8666125bda25f608730f82e8af427a5aa566ccfc9035a4ce5b0de5104d404306b32ab11cd514b1c5f92c0802c88ddefa808c2d860aa4cb9584ca78c494bed425628a1f706a626cf231a8fb3bfb6953c76291a62c69a53c1695c4d31bc947b744f7eb2f8b29775ef4f6ce75f0e4b60a89e7ce8232a5e3aa219c96841b47a9adb77943e500753f0223f9a81a1f1c20fd5d1cc040ad3caea2616db1cc3e683c74322423b07b4030620ac8a680b94b41a861cf7ca41c4aebecd2248c71e794c8a36fc98e0526af88d4650e79f56db8a33e04d25a30d167e0eeb269b5f6d4167cb3a08c031c9a190050080303342e2f123941b46098727c078cf83b21ac8299c594c94c8c8a924e46e3fb2f6dca6ca3991d30d401a93e382e2259e30d1c3dcc12495b762f90cfb8843094a41b5638ae51ca869cdb5a503c8c949ce790d42d34f902dcde18cb7865717afc7992e87ccee0fcfa4f45c27c35e97b4f3ea47b14e34b899112d6de6067bd7821348002b376f8c0c0429ceedcf2894f0326a7a24718283ca010f91a25659a3d99bc22d77c8d9f8ec4ad1da8c32755ccacfa1997f349b08673693798010e7fead7aae8b70d907619b1b504f3d1d682bbbe3dff83a3d542a53949857c2806d6396415e4070b9c440cab5707bbcf5fce4e9ffd37a07b7b7f366ebc59a921b625f6c6152e8c753f4ff9fa88f0bedc4eeef4be4352285f11c855e9c94cdaaa2ec656826b4d126e7ace4eddbd05b423503581637a20dfbadc43a1ea32bcd86caa84e7fd9a639c0c79fd2e59535051d46d4daf634881ff514e0111f88876686bda4fdf9abc57789b3548eacf0f94b9c212919635c62ad7df9caabf836061919c922be1fe5ec18d2a576d963ef7dfd36ea61c8bd33f19905003b9ff73eaf3a9b3e1a44f382f3eba6ac4f722cd3c4e8f24ca312fb25434e77c3b61b4e15ebc9e032594480e45f555935cad87e9150f63f1a63a86709c7df4805557cb01ace4802d593587b28cb3e07869dfdc8d07dbc8121ba0f7c5fa9a0f5ea53a0b75ef3c18310e51e238481756cc9c68cc433efd06d5d058876487e15ce4a1b3821e2e496c0f0ca0f9bd54c41b63a0ba2a25667d6925960ba88b1edd34b7371e2e185bc22c63bc24aa8fed7f9e986e1a488434638e405d993751b38137b2893dadaa5c6fea7ad4bd45a2767ca02e737752d66920e8d47357380abc68ea1250ca12374b8a270818f68cc59380878b68b9eb8385099fd9cac475d4fb7b0f493ca0b90c5e88af8be2e6a13fee95424ea1ce309c5f3543e630764126d9036bef53c7d400e5f7b6e496452d99454cb1a65d385c04371138c3eca0e386a2c10a48dee63e9acfe37fdbbf2e6bbb00af316b8916280d9e8bc182a69838ae5a2efb0890a68ffd7611f12dbc494ab3e8d2168cee340eb883880f3f86db0eec51d01a908d12ec358ad70e0545cb30324d4eeefd5abb754723221b4291c85f27bcd877e0b645f373bae2957ffbcf6fbe7f25e8c10b43b9752017917c21fac4a7c79deb1a17a48904dddd953466445f4c803ff676f27338369b1b4c2969d96b9904aedbc1e6d9611c2333db17aad9e99357ded754d0afa7df3d0fad873d9a69f6f6734b63cf1a942e406d664a5eb2b21038978789466afa1c6cb05d0cc99259f9b1ede6904fc3c6c902b7a11e2600010d8e51ae91384e96d3959fc9c9863c7af3c42d1c4e511ccbbc65d8bdcaefde9f32482feb61a67515267a935225e84af19ad4a10f3525788a12f1483fa336f5d067dd1489c00fb363bc3c0546cb5eec0b9ee8c04e41eea3155d75118b34c3ced944d1a773674e04fc0134fed8b44fdc3bdcb041cf345515bd122ba35f7478197aebebad40d1c092c2fb4f7304a120e3856a487e748dfb06b998b13848afde14330cbf1e5a7772e3e7c801e4b3759cedb8d73ddd24983a74815670071a58ca5396c06d10027c8c110ec7898c6961135354f8608c861e730ec803a1696359bbd82a5776951bb98e179ec881ceadb3d3861465a1704a00b6f405467c472b31ca1f44c076621c6a17929a3ff9fb9c14755e1acd6668640f6b5a75e25dcc97d2c002f21e845ba884f83c9040c605a2789f65a39abd577928025f8173bf1a1f450c997ae02026efb0f36614d948452e6029882ca96b4903ed87d3c449b3e2f9ed008c8550eb9a76ab8a4aa75c7eade577d5a7458c05ebf0524d7cafcbf4b4ca87d2bb874c7be1bd585a7d235b9dfd36060cb0b7d50ad6a5e1785080491d40a0b0fa6ba76e3c6f0b62c209bf4d20b077cf8add0084ecd9bee78"}}}}}}, 0x0) syz_emit_ethernet(0x5bf, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @val={@val={0x88a8, 0x6, 0x1, 0x2}, {0x8100, 0x2, 0x1, 0x2}}, {@ipv6={0x86dd, @esp={0x1, 0x6, "d0b620", 0x581, 0x32, 0xff, @remote, @private1, {[@routing={0x8, 0xc, 0x1, 0x1, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2]}, @hopopts={0x16, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x10}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0xcd}]}, @fragment={0x3b, 0x0, 0x2, 0x1, 0x0, 0x7, 0x68}, @fragment={0x3c, 0x0, 0xb, 0x1, 0x0, 0x2, 0x64}, @fragment={0x1, 0x0, 0x4, 0x1, 0x0, 0x5, 0x64}, @hopopts={0x3a, 0xc, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x2, 0x3, [0x3, 0x0, 0xc925, 0x7]}}, @ra={0x5, 0x2, 0x8}, @generic={0x9, 0x19, "bb0bf3318cdd799fdeaf4ad8cf07043766fb0b7907381120ea"}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {0x4d2, 0x503, @cc={0x1, 0x0, 0x0, 0x6, 0x8001, 0x51b, 0x8, [@runt="56518531f40b8b50f482283bde0976dfd810ba4cf48a94fc9916a920", @ipv6=@esp={0xe, 0x6, "7717dc", 0x3e1, 0x32, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@routing={0x33, 0x12, 0x2, 0xf2, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, @dev={0xfe, 0x80, '\x00', 0x35}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, @dev={0xfe, 0x80, '\x00', 0x16}, @private1, @private1, @mcast1]}], {0x4d5, 0x8000, @basic={0x0, 0x0, 0x1, [@ipv6=@tipc_packet={0xc, 0x6, "d3184c", 0x89, 0x6, 0xff, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, {[@srh={0xe, 0x4, 0x4, 0x2, 0x3, 0x8, 0x10, [@private2={0xfc, 0x2, '\x00', 0x1}, @local]}, @dstopts={0x0, 0x7, '\x00', [@pad1, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x10, {0x2, 0x2, 0x7, 0xb2a2, [0x4]}}, @ra={0x5, 0x2, 0xff}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}], @payload_conn={{{0x19, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x2, 0x8000, 0x0, 0x1, 0x7, 0x3, 0x0, 0x0, 0xff, 0x0, 0x4e24, 0x4e23}}, [0x0]}}}, @ipv6=@tcp={0x4, 0x6, "37ed14", 0x262, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x48}, @local, {[@hopopts={0x33, 0x7, '\x00', [@ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x28, {0x0, 0x8, 0x3d, 0x7, [0x5, 0x3, 0xfffffffffffffffe, 0x1a71]}}, @ra, @jumbo={0xc2, 0x4, 0x3}]}, @fragment={0x3b, 0x0, 0x6, 0x0, 0x0, 0x1, 0x64}, @hopopts={0x87, 0x7, '\x00', [@pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @padn={0x1, 0x1, [0x0]}]}, @fragment={0x32, 0x0, 0x86, 0x0, 0x0, 0x0, 0x66}, @dstopts={0x32, 0x9, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0xae, 0x5, [0x1ff, 0x3, 0x3, 0x4]}}, @generic={0x10, 0x15, "737152804ebccd40974e369fe3ae587b1fa5b411d8"}, @enc_lim={0x4, 0x1, 0xa5}, @ra={0x5, 0x2, 0x3}]}, @fragment={0x3b, 0x0, 0x0, 0x1, 0x0, 0x13, 0x67}, @dstopts={0x6c, 0x15, '\x00', [@enc_lim={0x4, 0x1, 0xc2}, @generic={0xa3, 0x8d, "c55ba83e98d0cb0558dcab41bc635f436bb51af66cc0e741df6342d72be061ec6fb84dc0ae250cf2796c2509654234ef60ddd86bc9037d3ece8236599de44aa4b65d1fcf24f9f94e214471d87a43f516c54f93b7fc8d5359de88ef951d0f10afab28cfcdb613ad8ccd8e37694e331dfa0661383c24d9b977de2ad715805ca14ae722921966b65e9d1c8a11082d"}, @pad1, @hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x1}]}, @fragment={0x16, 0x0, 0x9, 0x1, 0x0, 0x1d, 0x64}, @hopopts={0x1d, 0x2, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}]}], {{0x4e20, 0x4e20, r0, r1, 0x1, 0x0, 0x16, 0x80, 0x9, 0x0, 0x4, {[@sack={0x5, 0x26, [0x7f, 0x7, 0x6, 0x3, 0x3, 0xffffffc8, 0xfffff587, 0x401, 0x81]}, @sack={0x5, 0x1e, [0x6, 0x2, 0xff, 0x2, 0x1, 0x5, 0x6]}]}}, {"6d549ba533433de8439bf886ab8e3d408575a0a7239e6f60bd8642048031de19b0e6d0e6b0b5da08298692a489ecea64541be8f17d545f2379c61eee6d0afe530ce6"}}}}]}}}}, @runt="5bbc1258fc6b459f948610423c7a210b6f0c83", @runt="b122e870fb31195e273c18e2fd50247318d8702f9fcf56"]}, "35e292290f774f41", 0x8}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) close(0x3) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x44b, 0x0, 0xfffffffc, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x2c0e}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MTU={0x8, 0x4, 0x1bf}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x21, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) 139.807581ms ago: executing program 0 (id=2747): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYRESOCT], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008"], 0x90}}, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='highspeed', 0x9) (async, rerun: 32) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000950000000000000300"/25], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000100)='./file0\x00', r2, 0x4000, r0}, 0x18) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 120.660814ms ago: executing program 0 (id=2748): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x0, 0x1, 0x1, 0x0, 0x11}]}]}, @NFT_MSG_DELSET={0x208, 0xb, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_DESC={0x1e8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0xfffffffffffffe97, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_DESC_CONCAT={0x180, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2e3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1040}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7a9c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xa490}]}, @NFT_MSG_DELOBJ={0xf8, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0x7a, 0x8, "e7cc93bb8b5bf8a301f8d26b1963fdc8b39457efcc04ecca6f340c56ae24ceaff287f21e4a728646497f59316c46f1f667c95c303bc67ddc900dfc005efc8f6f636a139d2d999ea2d30272ef0a9cc96489302f75afdfe55d53123aac0e4ede34f6046fa75435300fe36913a40d883cdd5b6f463250b2"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x1a, 0x8, "e7086d9b56bfdb43c341b2b592dc5917e1c8d309d5bb"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x78, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x3c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x41c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000280)={0x0, 0x1, 0x5, r1, 0x4}, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000ddf7ffff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b509000001000000dbaaf8fff1000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000800000000000000008500000007080000b7000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, r8, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) 2.710523ms ago: executing program 3 (id=2749): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x0, 0xffffffff}, 0x70bd2a, 0x800000, 0x2, 0x4, 0x0, 0xe5}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x0, 0x0, 0x80ff}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x24004000) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000000a00)={0x8, 0x9, 0x6, 0x1000, 0xa, 0x7e, 0x72, 0x7f1c}, 0x0, 0x0, &(0x7f0000000ac0), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x258, 0x14, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x86, 0x8, "1c293675d708074ab5499ed0e3b45fff406fb51e741e9ad81b8f1b254acfe6101a7a26f4bc8fb767194b2c5ab7692da29afb6ce1b9c3e25c4b6c18e15d98f041c727312bdf635df77a4ff42a9faa47dd28472350be0ef4f45c7a6bf468766a0fa30670bbbcf5d7e6dd616a750db21ae78dac3570350e6b1e46f1e01590b2e3a51dbc"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xe7, 0x8, "73d3e08dd98082f5fafbb13e25e9d47a15e87286fae6623d8fe99b1e24ddba42e82981047f868edeb0ade5db529011185dbee791ccc82440c8ee382c6a39fb5940df34d0c635c182b3b92b6f21877946d23d5724292b3c4086ead782558fe85657593e34fe8e0906f9e1d60de24cd3f3caa4e08cb664517b9a82c7a890e677b457de70b3385136861081b07291734120c307bdac18e4c787e7d022dc6c3f4ce07bf0ffb9dc540c8d7ea3406d535388663061704f3c055a975220abbd4d475a6a62a4c54df2e239b5f13f48cec35340bad70216971bf39c520894129f7f6595c06bf4e1"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x97, 0x8, "57e640dbf3cdbd87d9e155829a1bb7d897c4914d1014bc1b0dfc7c1a470c145ee8ed16f7ecec28e1656a778499ee48485bd58cb60cfec47b5da330165e092b0f94007943ed1f5f9d5387430790aada5783f5981136b83b90b662945c227e98bd11bd4aebdc390f0f6a2939e77d9c240c5a688d9715c4cf727e074aa2d46bf96b2f0283ee28493d01d52745c6f6c82e683cdabf"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x280}}, 0x0) 822.625µs ago: executing program 1 (id=2750): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000380)={r1, &(0x7f0000000240)='GPL\x00', 0x80000, &(0x7f0000000280)={@_ha_fsid={[0x7, 0xc2]}, {0x0, 0xe, 0xa}}, 0x3, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0xd9b}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f0000000400)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[], 0x0) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, r4}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newqdisc={0x80, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xc, 0x0, 0xe, 0x4, 0x800}}]}}}]}, 0x80}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc8a1) 0s ago: executing program 3 (id=2751): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7b1a040000000000850000000500000079a1f8ff0000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)="6ed0cb0d66f864ef029b04de18485db105f0286b0977e0cf205eda15711b710222030d8ee4c9ecdadbfdf06b26601e8def98b51f823bfa7268e2ad0dd80a7a729cfcbdf17ac7fce6ebd5305662cd765fe6dedb2fe7637b085a819a40e41f969e26f2e8b8688e7875b5f2f2961b9c35970f47307c4eebfa9953ca03decaf6112b6e", &(0x7f0000000100)=@udp=r1}, 0x20) kernel console output (not intermixed with test programs): dv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.248441][T10833] batman_adv: batadv0: Interface activated: veth0 [ 201.269152][T10837] batman_adv: batadv0: Interface deactivated: veth0 [ 201.269173][T10837] batman_adv: batadv0: Removing interface: veth0 [ 201.301113][T10833] __nla_validate_parse: 3 callbacks suppressed [ 201.301132][T10833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1194'. [ 201.413375][T10816] Cannot find set identified by id 0 to match [ 201.435206][T10833] veth1_to_team: entered promiscuous mode [ 201.445196][T10833] gretap0: entered promiscuous mode [ 201.446850][T10833] debugfs: 'hsr1' already exists in 'hsr' [ 201.446868][T10833] Cannot create hsr debugfs directory [ 201.446883][T10833] hsr1: entered promiscuous mode [ 201.487995][T10824] lo speed is unknown, defaulting to 1000 [ 201.866414][T10842] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 201.877985][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 201.985467][ C0] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 201.985519][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 202.266195][T10852] netlink: 'syz.0.1196': attribute type 2 has an invalid length. [ 202.380788][T10864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1199'. [ 202.624794][T10872] syzkaller0: entered promiscuous mode [ 202.624843][T10872] syzkaller0: entered allmulticast mode [ 202.646961][T10883] netlink: 'syz.4.1203': attribute type 1 has an invalid length. [ 202.740280][T10883] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.869796][T10906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1205'. [ 203.585593][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 205.240778][T10888] bond3: (slave veth7): Enslaving as an active interface with a down link [ 205.254465][T10883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.261387][T10883] bond3: (slave batadv0): making interface the new active one [ 205.264022][T10883] batadv0: entered promiscuous mode [ 205.269643][T10883] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 205.298366][T10906] veth1_to_team: entered promiscuous mode [ 205.299427][T10906] gretap0: entered promiscuous mode [ 205.300294][T10906] debugfs: 'hsr1' already exists in 'hsr' [ 205.300312][T10906] Cannot create hsr debugfs directory [ 205.300326][T10906] hsr1: entered promiscuous mode [ 205.503665][T10938] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 205.552201][T10938] gretap2: entered allmulticast mode [ 205.564128][T10938] bond9: (slave gretap2): making interface the new active one [ 205.574187][T10938] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 205.746110][T10945] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1213'. [ 206.112987][T10945] bridge_slave_1: left allmulticast mode [ 206.126147][T10974] sctp: [Deprecated]: syz.4.1214 (pid 10974) Use of int in max_burst socket option. [ 206.126147][T10974] Use struct sctp_assoc_value instead [ 206.126344][T10975] sctp: [Deprecated]: syz.4.1214 (pid 10975) Use of int in max_burst socket option. [ 206.126344][T10975] Use struct sctp_assoc_value instead [ 206.280066][T10945] ip6tnl4: left allmulticast mode [ 206.282123][T10945] hsr1: left promiscuous mode [ 206.299896][ T5740] lo speed is unknown, defaulting to 1000 [ 206.299934][ T5740] syz2: Port: 1 Link DOWN [ 206.375840][T10892] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.377504][T10892] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.380125][T10892] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.381275][T10892] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.381329][T10892] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.381356][T10892] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.381390][T10892] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.381416][T10892] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.544123][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 206.578771][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 206.724482][T10999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1220'. [ 206.904490][T11009] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1225'. [ 207.044776][T11018] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 207.692808][T11028] syzkaller1: entered promiscuous mode [ 207.692847][T11028] syzkaller1: entered allmulticast mode [ 207.773111][T11036] netlink: 'syz.2.1231': attribute type 1 has an invalid length. [ 207.782110][T11040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1230'. [ 207.891094][T11036] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.961502][T11037] bond4: (slave gretap1): making interface the new active one [ 207.969165][T11037] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 208.023362][T11054] netlink: 'syz.4.1233': attribute type 2 has an invalid length. [ 208.066847][T11056] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1234'. [ 208.069023][T11054] : entered promiscuous mode [ 208.071814][T11056] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1234'. [ 208.357668][T11073] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 208.934097][T11097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1241'. [ 208.967985][T11097] veth1_to_team: entered promiscuous mode [ 208.978892][T11097] gretap0: entered promiscuous mode [ 208.988096][T11097] debugfs: 'hsr1' already exists in 'hsr' [ 208.994461][T11097] Cannot create hsr debugfs directory [ 209.000249][T11097] hsr1: entered promiscuous mode [ 209.352287][T11113] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1245'. [ 209.377641][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1245'. [ 209.892580][T11127] netlink: 'syz.4.1249': attribute type 4 has an invalid length. [ 209.930896][T11124] vlan2: entered allmulticast mode [ 209.930933][T11124] bridge3: entered allmulticast mode [ 209.955081][T11124] bridge3: port 1(erspan0) entered blocking state [ 209.957236][T11124] bridge3: port 1(erspan0) entered disabled state [ 209.957403][T11124] erspan0: entered allmulticast mode [ 209.993181][T11124] erspan0: entered promiscuous mode [ 210.010167][T11124] bridge3: port 1(erspan0) entered blocking state [ 210.010268][T11124] bridge3: port 1(erspan0) entered forwarding state [ 210.539677][T11157] netlink: 'syz.3.1255': attribute type 1 has an invalid length. [ 210.660625][T11157] 8021q: adding VLAN 0 to HW filter on device bond9 [ 210.671227][T11164] bond5: (slave veth0_to_bond): Releasing backup interface [ 210.671269][T11164] bond5: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 210.714501][T11164] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 210.773925][T11157] bond9: entered promiscuous mode [ 210.777280][T11157] bond9: entered allmulticast mode [ 211.085135][T11195] netlink: 'syz.1.1259': attribute type 1 has an invalid length. [ 211.085194][T11195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.222122][T11196] netlink: 'syz.3.1260': attribute type 4 has an invalid length. [ 211.452580][T11205] syzkaller0: entered promiscuous mode [ 211.452623][T11205] syzkaller0: entered allmulticast mode [ 211.574221][ T5619] Bluetooth: hci4: link tx timeout [ 211.574429][ T5619] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.587539][T11211] __nla_validate_parse: 4 callbacks suppressed [ 211.587557][T11211] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1263'. [ 211.613243][ T4935] Bluetooth: hci4: link tx timeout [ 211.620169][ T4935] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.629332][ T4935] Bluetooth: hci4: link tx timeout [ 211.635194][ T4935] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.657483][T11217] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 213.351979][T11225] Cannot find set identified by id 0 to match [ 213.408524][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1269'. [ 213.408577][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1269'. [ 213.454175][T11228] batman_adv: batadv0: Adding interface: macvtap2 [ 213.454214][T11228] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.454238][T11228] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 213.483661][T11232] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1281'. [ 213.597515][T11228] batman_adv: batadv0: Removing interface: macvtap2 [ 213.665633][ T5619] Bluetooth: hci4: command 0x0405 tx timeout [ 213.819861][T11251] netlink: 'syz.2.1275': attribute type 4 has an invalid length. [ 214.609769][T11277] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 215.809690][T11321] bond10 (unregistering): Released all slaves [ 215.859528][T11322] syzkaller0: entered promiscuous mode [ 215.859566][T11322] syzkaller0: entered allmulticast mode [ 215.907719][ T2158] block nbd1: Possible stuck request ffff888027e35080: control (read@0,1024B). Runtime 90 seconds [ 215.907778][ T2158] block nbd1: Possible stuck request ffff888027e35240: control (read@1024,1024B). Runtime 90 seconds [ 215.907819][ T2158] block nbd1: Possible stuck request ffff888027e35400: control (read@2048,1024B). Runtime 90 seconds [ 215.907845][ T2158] block nbd1: Possible stuck request ffff888027e355c0: control (read@3072,1024B). Runtime 90 seconds [ 216.076519][T11328] netlink: 'syz.3.1293': attribute type 210 has an invalid length. [ 216.207895][T11337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.219496][T11340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.233725][T11340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.242949][T11340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.262140][T11340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.271930][T11340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.279149][T11337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.295779][ T1123] batadv0: left promiscuous mode [ 216.400118][T11349] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 216.561396][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1298'. [ 216.561438][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1298'. [ 216.564820][T11362] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1298'. [ 216.629538][T11352] xt_CT: No such helper "snmp_trap" [ 216.969714][T11379] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1301'. [ 217.187336][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 217.542994][T11398] syzkaller0: entered promiscuous mode [ 217.543034][T11398] syzkaller0: entered allmulticast mode [ 217.546713][T11402] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1306'. [ 217.774746][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1310'. [ 217.774795][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1310'. [ 218.157282][T11428] netlink: 'syz.1.1314': attribute type 1 has an invalid length. [ 218.190079][T11421] xt_NETMAP: bad rangesize 37. [ 219.658390][T11418] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 219.661764][T11428] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 219.800619][T11438] xt_connbytes: Forcing CT accounting to be enabled [ 219.818318][T11438] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 219.826228][T11438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1318'. [ 219.875014][T11444] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 219.964306][T11436] lo speed is unknown, defaulting to 1000 [ 220.308071][T11463] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1326'. [ 220.440304][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 220.784919][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1329'. [ 221.216512][T11495] syzkaller0: entered promiscuous mode [ 221.223344][T11495] syzkaller0: entered allmulticast mode [ 221.233796][T11495] netlink: 'syz.0.1333': attribute type 1 has an invalid length. [ 221.266139][T11495] 8021q: adding VLAN 0 to HW filter on device bond11 [ 221.384818][T11505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1336'. [ 221.384866][T11505] openvswitch: netlink: Flow actions attr not present in new flow. [ 221.388091][T11505] openvswitch: netlink: Flow actions attr not present in new flow. [ 221.388215][T11505] openvswitch: netlink: Flow actions attr not present in new flow. [ 221.388331][T11505] openvswitch: netlink: Flow actions attr not present in new flow. [ 221.388448][T11505] openvswitch: netlink: Flow actions attr not present in new flow. [ 221.388573][T11505] openvswitch: netlink: Flow actions attr not present in new flow. [ 221.388688][T11505] openvswitch: netlink: Flow actions attr not present in new flow. [ 221.388820][T11505] openvswitch: netlink: Flow actions attr not present in new flow. [ 221.389035][T11505] openvswitch: netlink: Flow actions attr not present in new flow. [ 221.389157][T11505] openvswitch: netlink: Flow actions attr not present in new flow. [ 221.468334][T11508] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 222.093993][T11528] netlink: 'syz.3.1337': attribute type 21 has an invalid length. [ 223.346900][T11505] __nla_validate_parse: 64 callbacks suppressed [ 223.346966][T11505] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1336'. [ 223.374709][T11528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1337'. [ 223.374838][T11528] netlink: 'syz.3.1337': attribute type 1 has an invalid length. [ 223.573170][T11536] syzkaller1: entered promiscuous mode [ 223.573209][T11536] syzkaller1: entered allmulticast mode [ 223.767033][T11542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1340'. [ 225.181240][T11614] xt_hashlimit: size too large, truncated to 1048576 [ 225.294506][T11627] netlink: 'syz.3.1352': attribute type 3 has an invalid length. [ 225.420238][T11623] lo speed is unknown, defaulting to 1000 [ 225.608121][T11638] batman_adv: batadv0: Adding interface: veth0 [ 225.608158][T11638] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.608272][T11638] batman_adv: batadv0: Interface activated: veth0 [ 225.661333][T11641] batman_adv: batadv0: Interface deactivated: veth0 [ 225.661377][T11641] batman_adv: batadv0: Removing interface: veth0 [ 225.666192][T11646] netlink: 'syz.2.1357': attribute type 1 has an invalid length. [ 225.666210][T11646] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1357'. [ 225.670984][T11649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1356'. [ 225.727117][T11641] bond3: (slave batadv0): Releasing active interface [ 226.037637][T11629] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1352'. [ 226.127299][T11663] bond0: Device is already in use. [ 226.346575][T11683] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1360'. [ 226.905731][T11712] xt_check_match_common: 23 callbacks suppressed [ 226.913195][T11712] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 226.963137][T11713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1369'. [ 227.081118][T11716] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1371'. [ 227.081164][T11716] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1371'. [ 227.182791][T11722] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 227.774922][T11760] syzkaller0: entered promiscuous mode [ 227.774969][T11760] syzkaller0: entered allmulticast mode [ 228.471271][T11797] __nla_validate_parse: 1 callbacks suppressed [ 228.471324][T11797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1389'. [ 228.490419][T11797] veth1_to_team: entered promiscuous mode [ 228.494876][T11797] gretap0: entered promiscuous mode [ 228.498163][T11797] debugfs: 'hsr0' already exists in 'hsr' [ 228.498184][T11797] Cannot create hsr debugfs directory [ 228.498200][T11797] hsr0: entered promiscuous mode [ 228.537723][T11800] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1391'. [ 228.584694][T11800] siw: device registration error -23 [ 228.673257][T11805] tipc: Enabled bearer , priority 0 [ 228.684567][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 228.684622][T11805] netlink: 'syz.0.1391': attribute type 30 has an invalid length. [ 228.684635][T11805] netlink: 'syz.0.1391': attribute type 29 has an invalid length. [ 228.684645][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1391'. [ 228.760569][T11809] xt_hashlimit: size too large, truncated to 1048576 [ 229.071581][T11824] net_ratelimit: 56 callbacks suppressed [ 229.074035][T11824] netlink: ct family unspecified [ 229.074071][T11824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.134149][T11799] tipc: Disabling bearer [ 229.298731][T11833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1399'. [ 229.313261][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'. [ 229.328843][T11833] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1399'. [ 229.656122][T11856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1406'. [ 229.660001][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1406'. [ 229.826918][T11862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1405'. [ 230.721029][T11913] FAULT_INJECTION: forcing a failure. [ 230.721029][T11913] name failslab, interval 1, probability 0, space 0, times 1 [ 230.740127][T11913] CPU: 1 UID: 0 PID: 11913 Comm: syz.2.1419 Not tainted syzkaller #0 PREEMPT(full) [ 230.740154][T11913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.740165][T11913] Call Trace: [ 230.740173][T11913] [ 230.740181][T11913] dump_stack_lvl+0xe8/0x150 [ 230.740211][T11913] should_fail_ex+0x410/0x560 [ 230.740243][T11913] should_failslab+0xa8/0x100 [ 230.740266][T11913] __kmalloc_noprof+0xfe/0x720 [ 230.740292][T11913] ? tomoyo_encode2+0x28b/0x540 [ 230.740310][T11913] ? tomoyo_encode2+0x28b/0x540 [ 230.740335][T11913] tomoyo_encode2+0x28b/0x540 [ 230.740361][T11913] tomoyo_check_unix_address+0x39f/0x7e0 [ 230.740385][T11913] ? tomoyo_check_unix_address+0x16d/0x7e0 [ 230.740405][T11913] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 230.740436][T11913] ? lock_acquire+0x115/0x350 [ 230.740464][T11913] tomoyo_socket_connect_permission+0x189/0x270 [ 230.740495][T11913] security_socket_connect+0xc0/0x280 [ 230.740520][T11913] __sys_connect+0x294/0x450 [ 230.740549][T11913] ? __pfx___sys_connect+0x10/0x10 [ 230.740587][T11913] ? __pfx_ksys_write+0x10/0x10 [ 230.740622][T11913] __x64_sys_connect+0x7a/0x90 [ 230.740649][T11913] do_syscall_64+0x166/0x520 [ 230.740672][T11913] ? trace_irq_disable+0x3b/0x140 [ 230.740689][T11913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.740707][T11913] ? clear_bhb_loop+0x70/0xc0 [ 230.740730][T11913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.740748][T11913] RIP: 0033:0x7f91a399e159 [ 230.740766][T11913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.740783][T11913] RSP: 002b:00007f91a493f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 230.740804][T11913] RAX: ffffffffffffffda RBX: 00007f91a3c25fa0 RCX: 00007f91a399e159 [ 230.740818][T11913] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000004 [ 230.740829][T11913] RBP: 00007f91a493f090 R08: 0000000000000000 R09: 0000000000000000 [ 230.740841][T11913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.740852][T11913] R13: 00007f91a3c26038 R14: 00007f91a3c25fa0 R15: 00007ffc6a70b398 [ 230.740884][T11913] [ 231.244039][T11936] netlink: 'syz.2.1425': attribute type 1 has an invalid length. [ 231.341452][T11936] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.517465][T11954] Cannot find add_set index 0 as target [ 231.666433][ T44] page_pool_release_retry() stalled pool shutdown: id 78, 1 inflight 60 sec [ 231.765828][T11969] FAULT_INJECTION: forcing a failure. [ 231.765828][T11969] name failslab, interval 1, probability 0, space 0, times 0 [ 231.765882][T11969] CPU: 0 UID: 0 PID: 11969 Comm: syz.0.1433 Not tainted syzkaller #0 PREEMPT(full) [ 231.765901][T11969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.765911][T11969] Call Trace: [ 231.765917][T11969] [ 231.765923][T11969] dump_stack_lvl+0xe8/0x150 [ 231.765950][T11969] should_fail_ex+0x410/0x560 [ 231.765980][T11969] should_failslab+0xa8/0x100 [ 231.766000][T11969] ? do_getname_kernel+0x54/0x230 [ 231.766022][T11969] kmem_cache_alloc_noprof+0xa1/0x600 [ 231.766049][T11969] ? do_getname_kernel+0x54/0x230 [ 231.766074][T11969] do_getname_kernel+0x54/0x230 [ 231.766093][T11969] ? kern_path+0x1b/0x150 [ 231.766118][T11969] kern_path+0x25/0x150 [ 231.766150][T11969] unix_find_other+0x18d/0xb40 [ 231.766177][T11969] ? __pfx_unix_find_other+0x10/0x10 [ 231.766200][T11969] ? tomoyo_socket_connect_permission+0x189/0x270 [ 231.766225][T11969] unix_dgram_connect+0x2de/0xba0 [ 231.766252][T11969] __sys_connect+0x316/0x450 [ 231.766279][T11969] ? __pfx___sys_connect+0x10/0x10 [ 231.766315][T11969] ? __pfx_ksys_write+0x10/0x10 [ 231.766347][T11969] __x64_sys_connect+0x7a/0x90 [ 231.766371][T11969] do_syscall_64+0x166/0x520 [ 231.766394][T11969] ? trace_irq_disable+0x3b/0x140 [ 231.766411][T11969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.766432][T11969] ? clear_bhb_loop+0x70/0xc0 [ 231.766454][T11969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.766471][T11969] RIP: 0033:0x7fcbd4b9e159 [ 231.766488][T11969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.766504][T11969] RSP: 002b:00007fcbd5a5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 231.766523][T11969] RAX: ffffffffffffffda RBX: 00007fcbd4e25fa0 RCX: 00007fcbd4b9e159 [ 231.766536][T11969] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000004 [ 231.766548][T11969] RBP: 00007fcbd5a5a090 R08: 0000000000000000 R09: 0000000000000000 [ 231.766559][T11969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.766569][T11969] R13: 00007fcbd4e26038 R14: 00007fcbd4e25fa0 R15: 00007ffef4b0ce48 [ 231.766598][T11969] [ 232.010067][T11974] Bluetooth: hci0: invalid length 0, exp 2 for type 1 [ 232.020963][T11974] netlink: 'syz.2.1435': attribute type 1 has an invalid length. [ 232.039566][T11932] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 232.220601][ T115] nci: nci_rx_work: unknown MT 0x6 [ 232.221450][T11991] netlink: 'syz.4.1439': attribute type 4 has an invalid length. [ 232.282236][T11991] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 233.007782][T12012] FAULT_INJECTION: forcing a failure. [ 233.007782][T12012] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 233.007816][T12012] CPU: 0 UID: 0 PID: 12012 Comm: syz.0.1446 Not tainted syzkaller #0 PREEMPT(full) [ 233.007836][T12012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.007857][T12012] Call Trace: [ 233.007864][T12012] [ 233.007870][T12012] dump_stack_lvl+0xe8/0x150 [ 233.007898][T12012] should_fail_ex+0x410/0x560 [ 233.007923][T12012] _copy_to_user+0x31/0xb0 [ 233.007943][T12012] simple_read_from_buffer+0xe1/0x170 [ 233.007972][T12012] proc_fail_nth_read+0x1bb/0x230 [ 233.007997][T12012] ? common_file_perm+0x20e/0x2b0 [ 233.008026][T12012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.008060][T12012] ? rw_verify_area+0x24a/0x4c0 [ 233.008085][T12012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.008110][T12012] vfs_read+0x213/0xa80 [ 233.008140][T12012] ? __pfx_vfs_read+0x10/0x10 [ 233.008161][T12012] ? unix_dgram_connect+0x276/0xba0 [ 233.008189][T12012] ? __sys_connect+0x32f/0x450 [ 233.008216][T12012] ? __pfx___sys_connect+0x10/0x10 [ 233.008245][T12012] ksys_read+0x150/0x270 [ 233.008272][T12012] ? __pfx_ksys_read+0x10/0x10 [ 233.008307][T12012] do_syscall_64+0x166/0x520 [ 233.008329][T12012] ? trace_irq_disable+0x3b/0x140 [ 233.008346][T12012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.008371][T12012] ? clear_bhb_loop+0x70/0xc0 [ 233.008393][T12012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.008410][T12012] RIP: 0033:0x7fcbd4b5e98e [ 233.008426][T12012] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 233.008442][T12012] RSP: 002b:00007fcbd5a59fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.008461][T12012] RAX: ffffffffffffffda RBX: 00007fcbd5a5a6c0 RCX: 00007fcbd4b5e98e [ 233.008474][T12012] RDX: 000000000000000f RSI: 00007fcbd5a5a0a0 RDI: 0000000000000005 [ 233.008486][T12012] RBP: 00007fcbd5a5a090 R08: 0000000000000000 R09: 0000000000000000 [ 233.008497][T12012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.008507][T12012] R13: 00007fcbd4e26038 R14: 00007fcbd4e25fa0 R15: 00007ffef4b0ce48 [ 233.008536][T12012] [ 235.132249][T11983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.318559][T12024] __nla_validate_parse: 25 callbacks suppressed [ 235.324995][T12024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1449'. [ 235.471516][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1453'. [ 235.808111][T12058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1456'. [ 235.841432][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1455'. [ 236.024425][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1458'. [ 236.053775][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'. [ 236.172686][T12072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1460'. [ 236.192496][T12074] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1462'. [ 236.197783][T12079] veth0_macvtap: left promiscuous mode [ 236.333092][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 236.387530][T12080] syzkaller0: entered promiscuous mode [ 236.393268][T12080] syzkaller0: entered allmulticast mode [ 236.547505][T12095] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.1466'. [ 236.698529][T12108] lo speed is unknown, defaulting to 1000 [ 237.421050][ T5280] veth0_macvtap: entered promiscuous mode [ 239.571859][T12101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.995538][T12163] IPVS: length: 15 != 1360 [ 240.261327][T12178] ipvlan2: entered promiscuous mode [ 240.261515][T12178] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 240.261534][T12178] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 240.261675][T12178] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 240.343583][ T9351] bridge0: entered promiscuous mode [ 240.589363][T12194] __nla_validate_parse: 10 callbacks suppressed [ 240.595862][T12194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1482'. [ 240.602332][T12196] batadv_slave_0: entered promiscuous mode [ 240.602353][T12196] batadv_slave_0: entered allmulticast mode [ 241.449802][T12235] lo speed is unknown, defaulting to 1000 [ 241.725934][T12254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.920273][T12261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1498'. [ 242.451598][T12271] xt_CT: No such helper "syz0" [ 242.608346][T12294] netlink: 'syz.2.1509': attribute type 1 has an invalid length. [ 242.608380][T12294] netlink: 'syz.2.1509': attribute type 4 has an invalid length. [ 242.608855][T12294] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1509'. [ 242.610662][T12294] xt_hashlimit: size too large, truncated to 1048576 [ 242.814107][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1510'. [ 242.837753][T12300] lo speed is unknown, defaulting to 1000 [ 243.003659][T12304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1511'. [ 243.094540][T12306] x_tables: duplicate underflow at hook 1 [ 243.348016][T12319] netlink: 'syz.4.1516': attribute type 12 has an invalid length. [ 243.376476][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1516'. [ 243.400459][T12319] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1516'. [ 243.678578][T12340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1522'. [ 243.763524][T12339] gre0: Caught tx_queue_len zero misconfig [ 244.234654][T12372] raw_sendmsg: syz.3.1528 forgot to set AF_INET. Fix it! [ 244.770464][T12388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1533'. [ 244.854933][T12394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1535'. [ 244.861215][T12356] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 244.893308][T12359] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 245.073212][T12405] netlink: 'syz.3.1536': attribute type 13 has an invalid length. [ 245.073249][T12405] netlink: 'syz.3.1536': attribute type 17 has an invalid length. [ 245.230092][T12405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.298391][T12405] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.308952][T12405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.324736][T12405] A link change request failed with some changes committed already. Interface ip may have been left with an inconsistent configuration, please check. [ 245.989493][ T2158] block nbd1: Possible stuck request ffff888027e35080: control (read@0,1024B). Runtime 120 seconds [ 245.989549][ T2158] block nbd1: Possible stuck request ffff888027e35240: control (read@1024,1024B). Runtime 120 seconds [ 245.989590][ T2158] block nbd1: Possible stuck request ffff888027e35400: control (read@2048,1024B). Runtime 120 seconds [ 245.989616][ T2158] block nbd1: Possible stuck request ffff888027e355c0: control (read@3072,1024B). Runtime 120 seconds [ 246.053124][T12477] Cannot find add_set index 34 as target [ 246.065488][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 246.078237][T12453] netlink: 'syz.2.1547': attribute type 39 has an invalid length. [ 246.128311][T12477] tipc: Enabling of bearer rejected, failed to enable media [ 246.138099][T12477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1551'. [ 246.162043][T12472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1550'. [ 246.674563][T12508] netlink: 'syz.0.1556': attribute type 1 has an invalid length. [ 246.851697][T12515] netlink: 'syz.2.1559': attribute type 1 has an invalid length. [ 247.276759][T12527] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20003 [ 248.145495][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 248.334625][T12508] bond12: entered promiscuous mode [ 248.335058][T12508] 8021q: adding VLAN 0 to HW filter on device bond12 [ 248.364967][T12515] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 248.423413][T12522] 8021q: adding VLAN 0 to HW filter on device bond12 [ 248.423794][T12522] bond12: (slave gre1): The slave device specified does not support setting the MAC address [ 248.423812][T12522] bond12: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 248.431799][T12522] bond12: (slave gre1): making interface the new active one [ 248.431915][T12522] gre1: entered promiscuous mode [ 248.435584][T12522] bond12: (slave gre1): Enslaving as an active interface with an up link [ 248.799609][T12546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.871445][T12546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.871866][T12555] Bluetooth: hci0: unsupported parameter 5135 [ 248.871884][T12555] Bluetooth: hci0: unsupported parameter 8192 [ 248.871896][T12555] Bluetooth: hci0: unsupported parameter 5135 [ 248.871921][T12555] Bluetooth: hci0: unsupported parameter 8192 [ 249.417874][T12566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.699007][T12589] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 249.707202][T12589] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 249.790090][T12594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1580'. [ 250.407599][T12622] netlink: 'syz.1.1588': attribute type 83 has an invalid length. [ 250.789104][T12630] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 251.444911][T12654] openvswitch: netlink: IP tunnel dst address not specified [ 252.031160][T12670] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1596'. [ 252.152168][T12675] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1596'. [ 252.406459][T12686] netlink: 'syz.3.1599': attribute type 4 has an invalid length. [ 252.414460][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1599'. [ 252.449202][T12690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1600'. [ 252.583342][T12694] IPVS: set_ctl: invalid protocol: 8 172.20.20.23:3 [ 252.921511][T12710] netlink: 'syz.2.1604': attribute type 3 has an invalid length. [ 253.120306][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1606'. [ 253.131332][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1606'. [ 253.329326][T12725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.936896][T12768] sctp: [Deprecated]: syz.3.1618 (pid 12768) Use of int in max_burst socket option deprecated. [ 253.936896][T12768] Use struct sctp_assoc_value instead [ 253.963291][ T30] audit: type=1804 audit(1788023434.635:8): pid=12768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1618" name="/newroot/311/cgroup.controllers" dev="tmpfs" ino=1612 res=1 errno=0 [ 253.981394][T12764] ip6gre1: entered allmulticast mode [ 253.992886][ T30] audit: type=1800 audit(1788023434.665:9): pid=12768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1618" name="cgroup.controllers" dev="tmpfs" ino=1612 res=0 errno=0 [ 254.260574][T12776] xt_hl: Unknown TTL match mode: 237 [ 254.481212][T12782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1623'. [ 254.488848][T12796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1621'. [ 254.503065][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1624'. [ 254.512605][T12792] netlink: 'syz.1.1624': attribute type 21 has an invalid length. [ 254.950243][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1629'. [ 255.013005][T12821] netlink: 'syz.2.1630': attribute type 32 has an invalid length. [ 255.079170][T12830] netlink: 'syz.2.1630': attribute type 32 has an invalid length. [ 255.232324][T12840] netlink: 'syz.3.1631': attribute type 11 has an invalid length. [ 255.299581][T12821] bond6: option coupled_control: invalid value (10) [ 255.309666][T12821] bond6 (unregistering): Released all slaves [ 255.389997][T12830] bond6: option coupled_control: invalid value (10) [ 255.403522][T12830] bond6 (unregistering): Released all slaves [ 255.588496][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.588591][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.796788][T12866] netlink: 'syz.2.1637': attribute type 10 has an invalid length. [ 255.797569][T12866] dummy0: entered promiscuous mode [ 255.818542][T12866] vlan0: Port device dummy0 removed [ 255.824326][T12864] syzkaller1: entered promiscuous mode [ 255.824361][T12864] syzkaller1: entered allmulticast mode [ 256.286187][T12895] netlink: 'syz.0.1645': attribute type 2 has an invalid length. [ 256.387759][T12896] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 256.489949][T12905] xt_hashlimit: max too large, truncated to 1048576 [ 256.496978][T12905] xt_hashlimit: overflow, try lower: 0/0 [ 257.763829][T12951] __nla_validate_parse: 11 callbacks suppressed [ 257.772365][T12951] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1660'. [ 258.112586][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 258.142098][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1666'. [ 258.233527][T12975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1666'. [ 258.306764][T12986] syzkaller1: entered promiscuous mode [ 258.312374][T12986] syzkaller1: entered allmulticast mode [ 258.331857][T12983] lo speed is unknown, defaulting to 1000 [ 258.644469][T12993] openvswitch: netlink: Flow actions attr not present in new flow. [ 259.122345][T13012] IPv6: addrconf: prefix option has invalid lifetime [ 259.292930][T13015] ip_tables: iptables: counters copy to user failed while replacing table [ 259.662667][T13033] netlink: 'syz.2.1684': attribute type 1 has an invalid length. [ 259.711032][T13033] 8021q: adding VLAN 0 to HW filter on device bond6 [ 259.751576][T13033] sctp: [Deprecated]: syz.2.1684 (pid 13033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.751576][T13033] Use struct sctp_sack_info instead [ 259.804373][T13042] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1686'. [ 259.806101][T13033] bond6: (slave gretap2): making interface the new active one [ 259.807320][T13033] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 260.170624][T13052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1690'. [ 260.180599][T13051] syzkaller1: entered promiscuous mode [ 260.180639][T13051] syzkaller1: entered allmulticast mode [ 260.247359][T13054] pimreg: entered allmulticast mode [ 260.264570][T13053] pimreg: left allmulticast mode [ 260.819805][T13088] netlink: 'syz.0.1701': attribute type 1 has an invalid length. [ 260.871371][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1701'. [ 260.938781][T13088] bond13: entered promiscuous mode [ 260.939445][T13088] 8021q: adding VLAN 0 to HW filter on device bond13 [ 261.089647][T13097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1703'. [ 261.123089][T13093] netlink: 'syz.3.1702': attribute type 2 has an invalid length. [ 261.132431][T13094] netlink: 'syz.3.1702': attribute type 2 has an invalid length. [ 261.172478][T13093] þ: entered promiscuous mode [ 261.185062][T13100] netlink: 'syz.4.1704': attribute type 3 has an invalid length. [ 261.207002][T13100] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1704'. [ 261.207249][T13100] netlink: 'syz.4.1704': attribute type 8 has an invalid length. [ 261.207263][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'. [ 261.257259][T13115] netlink: 'syz.4.1704': attribute type 8 has an invalid length. [ 262.153531][T13166] hsr_slave_1 (unregistering): left promiscuous mode [ 262.927689][T13204] __nla_validate_parse: 7 callbacks suppressed [ 262.927740][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1725'. [ 262.944810][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1725'. [ 263.103866][T13210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.173661][T13214] netpci0: tun_chr_ioctl cmd 1074025681 [ 263.268732][T13226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1727'. [ 263.275866][T13225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1731'. [ 263.472017][T13240] vlan3: entered promiscuous mode [ 263.472042][T13240] bridge0: entered promiscuous mode [ 263.482855][T13242] syzkaller0: entered promiscuous mode [ 263.482881][T13242] syzkaller0: entered allmulticast mode [ 263.978887][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1737'. [ 264.013437][T13258] syzkaller0: entered promiscuous mode [ 264.013481][T13258] syzkaller0: entered allmulticast mode [ 264.236179][T13268] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 264.372082][T13284] ip6t_hbh: unknown flags AD [ 264.387798][T13281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1744'. [ 264.489272][T13288] netlink: 'syz.2.1746': attribute type 10 has an invalid length. [ 264.609626][T13294] syzkaller0: entered promiscuous mode [ 264.609671][T13294] syzkaller0: entered allmulticast mode [ 264.745741][T13305] netlink: 'syz.3.1749': attribute type 27 has an invalid length. [ 265.011078][T13320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1752'. [ 265.051732][T13326] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1754'. [ 265.361989][ T6392] udevd[6392]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 265.380498][ T6392] udevd[6392]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 265.520125][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 265.520181][T13321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1753'. [ 267.009753][T13321] geneve3: entered promiscuous mode [ 267.009801][T13321] geneve3: entered allmulticast mode [ 267.028207][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.028262][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.028318][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.028360][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.153373][T13338] x_tables: duplicate underflow at hook 2 [ 267.290630][T13348] lo speed is unknown, defaulting to 1000 [ 267.648571][T13369] lo speed is unknown, defaulting to 1000 [ 268.101368][T13392] __nla_validate_parse: 2 callbacks suppressed [ 268.101419][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1769'. [ 268.181611][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1769'. [ 268.199091][T13369] netlink: 'syz.1.1764': attribute type 23 has an invalid length. [ 268.256170][T13369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1764'. [ 268.256211][T13369] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1764'. [ 268.256587][T13369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1764'. [ 268.256779][T13369] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1764'. [ 268.340770][T13409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1774'. [ 268.443723][T13413] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1773'. [ 268.493229][T13413] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1773'. [ 268.639152][T13421] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1775'. [ 269.152298][T13448] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 269.260633][T13456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.270112][T13456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.561490][T13470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.574485][T13470] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.681443][T13470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.692707][T13470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.708702][T13470] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 269.737616][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.737775][ T115] bridge0: port 2(bridge_slave_1) entered listening state [ 269.883974][T13491] veth0_to_bond: entered promiscuous mode [ 269.925843][T13488] ip6tnl2: entered allmulticast mode [ 271.345102][T13552] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 271.434879][T13554] netlink: 'syz.3.1812': attribute type 1 has an invalid length. [ 271.509208][T13554] bond10: entered promiscuous mode [ 271.514868][T13554] 8021q: adding VLAN 0 to HW filter on device bond10 [ 271.525748][T13554] netlink: 'syz.3.1812': attribute type 11 has an invalid length. [ 271.551914][T13554] bond10: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 271.565873][T13554] bond10: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 271.565926][T13554] bond10: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 271.897656][T13578] netlink: 'syz.0.1817': attribute type 1 has an invalid length. [ 271.911344][T13580] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 271.956583][T13578] 8021q: adding VLAN 0 to HW filter on device bond14 [ 271.989248][T13587] bond14: (slave veth0_to_bond): making interface the new active one [ 271.999173][T13587] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 272.009921][T13578] bond14: entered promiscuous mode [ 272.009951][T13578] veth0_to_bond: entered promiscuous mode [ 272.010119][T13578] bond14: entered allmulticast mode [ 272.010132][T13578] veth0_to_bond: entered allmulticast mode [ 272.038198][T13578] macvlan4: entered promiscuous mode [ 272.038226][T13578] macvlan4: entered allmulticast mode [ 272.043798][T13578] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 272.049912][T13578] bond14: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 272.102354][T13586] syzkaller0: entered promiscuous mode [ 272.102383][T13586] syzkaller0: entered allmulticast mode [ 274.072754][T13614] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 274.232498][T13631] xt_REDIRECT: bad MAP_IPS. [ 274.405895][T13638] __nla_validate_parse: 18 callbacks suppressed [ 274.405947][T13638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1829'. [ 274.590914][T13652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1830'. [ 275.890717][T13691] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1835'. [ 275.926508][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 275.926553][T13690] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1834'. [ 275.955077][T13698] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1838'. [ 276.078677][ T2158] block nbd1: Possible stuck request ffff888027e35080: control (read@0,1024B). Runtime 150 seconds [ 276.078736][ T2158] block nbd1: Possible stuck request ffff888027e35240: control (read@1024,1024B). Runtime 150 seconds [ 276.078786][ T2158] block nbd1: Possible stuck request ffff888027e35400: control (read@2048,1024B). Runtime 150 seconds [ 276.078814][ T2158] block nbd1: Possible stuck request ffff888027e355c0: control (read@3072,1024B). Runtime 150 seconds [ 276.236098][T13715] xt_SECMARK: invalid mode: 9 [ 276.360427][T13724] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1844'. [ 276.371979][T13719] erspan0: left promiscuous mode [ 276.413662][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1846'. [ 276.455082][T13719] ip6gretap0: left promiscuous mode [ 276.472216][T13719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.481138][T13719] 8021q: adding VLAN 0 to HW filter on device vlan0 [ 276.490083][T13719] dummy0: left promiscuous mode [ 276.531496][T13719] batadv_slave_0: left promiscuous mode [ 276.542673][T13719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.560375][T13719] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 276.560456][ T9359] lo speed is unknown, defaulting to 1000 [ 276.560492][ T9359] syz2: Port: 1 Link ACTIVE [ 276.610219][T13735] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1848'. [ 276.947387][T10630] udevd[10630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 277.010995][ T6392] udevd[6392]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 277.358514][T13757] syzkaller0: entered promiscuous mode [ 277.358560][T13757] syzkaller0: entered allmulticast mode [ 277.779596][T13779] openvswitch: netlink: Flow actions attr not present in new flow. [ 279.959004][T13816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1867'. [ 279.960648][T13820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1867'. [ 280.440087][T13850] openvswitch: netlink: Actions may not be safe on all matching packets [ 280.478576][T13850] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1871'. [ 280.684758][T13867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1875'. [ 280.689178][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1875'. [ 280.802967][T13862] lo speed is unknown, defaulting to 1000 [ 280.837256][T13873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.030511][T13887] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 281.534716][T13914] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1887'. [ 281.534762][T13914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1887'. [ 281.534790][T13914] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1887'. [ 281.552650][T13921] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 281.584841][T13921] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 282.107453][T13948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1892'. [ 282.239275][T13952] bridge0: port 4(bond0) entered blocking state [ 282.239374][T13952] bridge0: port 4(bond0) entered disabled state [ 282.239526][T13952] bond0: entered allmulticast mode [ 282.239540][T13952] bond_slave_0: entered allmulticast mode [ 282.239556][T13952] bond_slave_1: entered allmulticast mode [ 282.255778][T13952] bond0: entered promiscuous mode [ 282.255800][T13952] bond_slave_0: entered promiscuous mode [ 282.255965][T13952] bond_slave_1: entered promiscuous mode [ 282.256932][T13952] bridge0: port 4(bond0) entered blocking state [ 282.257044][T13952] bridge0: port 4(bond0) entered forwarding state [ 282.356669][T13959] openvswitch: netlink: Flow actions attr not present in new flow. [ 282.473762][T13964] netlink: Unknown conntrack attr (0) [ 282.473816][T13964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.474176][T13964] netlink: Unknown conntrack attr (0) [ 282.474201][T13964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.474544][T13964] netlink: Unknown conntrack attr (0) [ 282.474568][T13964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.474891][T13964] netlink: Unknown conntrack attr (0) [ 282.474914][T13964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.730923][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'. [ 282.873776][T14000] team0: Port device veth9 added [ 282.982435][T14003] netlink: 'syz.0.1905': attribute type 11 has an invalid length. [ 282.991088][T14003] netlink: 'syz.0.1905': attribute type 4 has an invalid length. [ 283.269828][T14014] lo speed is unknown, defaulting to 1000 [ 283.610828][T14025] netlink: 'syz.2.1912': attribute type 26 has an invalid length. [ 284.400894][T14059] bond11: entered promiscuous mode [ 284.400937][T14059] bond11: entered allmulticast mode [ 284.461695][T14059] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 284.585092][T14061] lo speed is unknown, defaulting to 1000 [ 284.628738][T14082] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 284.778628][T14077] bond12: entered promiscuous mode [ 284.778668][T14077] bond12: entered allmulticast mode [ 284.991504][T14101] __nla_validate_parse: 11 callbacks suppressed [ 284.999706][T14101] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1929'. [ 285.026793][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 285.083989][T14089] syzkaller1: entered promiscuous mode [ 285.084024][T14089] syzkaller1: entered allmulticast mode [ 286.879607][T14104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1931'. [ 286.879644][T14104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1931'. [ 287.313284][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1937'. [ 287.415893][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 287.425153][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 287.588391][ T1123] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.588457][ T1123] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.588485][ T1123] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.588510][ T1123] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.010101][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1950'. [ 288.037899][T14186] net_ratelimit: 59 callbacks suppressed [ 288.045565][T14186] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 288.088111][T14182] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 288.099279][T14182] syzkaller0: entered promiscuous mode [ 288.104886][T14182] syzkaller0: entered allmulticast mode [ 288.150529][T14191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1952'. [ 288.150586][T14191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1952'. [ 288.154632][T14194] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1953'. [ 288.865084][T14233] xt_CT: No such helper "syz0" [ 289.852076][T14274] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 290.437224][T14309] __nla_validate_parse: 7 callbacks suppressed [ 290.437269][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 290.518259][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 290.544071][T14305] syzkaller0: entered promiscuous mode [ 290.550632][T14305] syzkaller0: entered allmulticast mode [ 290.566793][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 290.606833][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 290.641048][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 290.688466][T14322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1980'. [ 290.714459][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 290.767366][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 290.856766][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 290.895485][T14313] bridge3: port 1(erspan0) entered disabled state [ 290.926613][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 290.982031][T14327] syzkaller0: entered promiscuous mode [ 290.982077][T14327] syzkaller0: entered allmulticast mode [ 290.997334][T14327] netlink: 'syz.4.1983': attribute type 1 has an invalid length. [ 291.176832][T14334] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 291.248942][T14337] nbd: nbd1 already in use [ 291.253918][T14337] block nbd1: NBD_DISCONNECT [ 291.253973][T14337] block nbd1: Send disconnect failed -32 [ 291.254001][T14337] block nbd1: shutting down sockets [ 291.276400][ C0] blk_print_req_error: 54 callbacks suppressed [ 291.276440][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.276521][ C0] buffer_io_error: 138 callbacks suppressed [ 291.276537][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 291.276566][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.276626][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 291.276647][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.276703][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 291.276723][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.276780][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 291.279336][ T2158] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.279363][ T2158] Buffer I/O error on dev nbd1, logical block 0, async page read [ 291.279476][ T2158] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.279499][ T2158] Buffer I/O error on dev nbd1, logical block 1, async page read [ 291.279583][ T2158] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.279604][ T2158] Buffer I/O error on dev nbd1, logical block 2, async page read [ 291.279698][ T2158] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.279720][ T2158] Buffer I/O error on dev nbd1, logical block 3, async page read [ 291.279813][ T2158] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.279833][ T2158] Buffer I/O error on dev nbd1, logical block 0, async page read [ 291.279914][ T2158] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 291.279935][ T2158] Buffer I/O error on dev nbd1, logical block 1, async page read [ 291.297546][ T5634] ldm_validate_partition_table(): Disk read failed. [ 291.300120][ T5634] Dev nbd1: unable to read RDB block 0 [ 291.308974][ T5634] nbd1: unable to read partition table [ 291.399002][ T5634] ldm_validate_partition_table(): Disk read failed. [ 291.409980][ T5634] Dev nbd1: unable to read RDB block 0 [ 291.415489][ T5634] nbd1: unable to read partition table [ 295.097020][T14387] tipc: Enabled bearer , priority 0 [ 295.164591][T14396] netlink: 'syz.0.1997': attribute type 23 has an invalid length. [ 295.299627][T14387] syzkaller0: entered promiscuous mode [ 295.299673][T14387] syzkaller0: entered allmulticast mode [ 295.300382][T14387] tipc: Resetting bearer [ 295.530075][T14383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.554738][T14383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.564410][T14394] __nla_validate_parse: 11 callbacks suppressed [ 295.568445][T14394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1994'. [ 295.570160][T14383] bond0 (unregistering): Released all slaves [ 295.589706][T14411] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2001'. [ 295.641346][T14384] tipc: Resetting bearer [ 295.641813][T14413] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20004 [ 297.613272][T14384] tipc: Disabling bearer [ 297.785458][T14442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2006'. [ 297.966668][T14455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2011'. [ 297.973484][T14447] lo speed is unknown, defaulting to 1000 [ 297.988067][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 298.004906][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 298.098745][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 298.272968][T14457] hsr_slave_1 (unregistering): left promiscuous mode [ 298.398198][T10892] IPVS: starting estimator thread 0... [ 298.488660][T14477] IPVS: using max 36 ests per chain, 86400 per kthread [ 298.761253][T10892] IPVS: stop unused estimator thread 0... [ 298.824998][T14494] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20003 [ 298.854995][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2020'. [ 298.928682][T14501] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2022'. [ 299.083721][ T30] audit: type=1800 audit(1788023479.755:10): pid=14505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2023" name=680B20 dev="tmpfs" ino=2076 res=0 errno=0 [ 299.103418][ T30] audit: type=1800 audit(1788023479.755:11): pid=14506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2023" name=680B20 dev="tmpfs" ino=2076 res=0 errno=0 [ 299.261878][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2025'. [ 300.069654][T14557] can: request_module (can-proto-5) failed. [ 300.271745][T14565] netlink: 'syz.1.2039': attribute type 8 has an invalid length. [ 300.288321][T14575] netlink: 'syz.0.2042': attribute type 1 has an invalid length. [ 300.299365][T14575] bond14: (slave veth0_to_bond): Releasing active interface [ 300.299411][T14575] veth0_to_bond: left promiscuous mode [ 300.299575][T14575] veth0_to_bond: left allmulticast mode [ 300.385536][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.385579][ C1] bridge0: topology change detected, propagating [ 300.560702][T14583] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 300.570448][T14583] __nla_validate_parse: 5 callbacks suppressed [ 300.570499][T14583] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2045'. [ 300.869882][T14592] syzkaller0: entered promiscuous mode [ 300.878795][T14592] syzkaller0: entered allmulticast mode [ 300.989814][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2053'. [ 300.989852][T14601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2053'. [ 300.990621][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2053'. [ 300.990638][T14601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2053'. [ 301.149274][T14605] netlink: 'syz.0.2054': attribute type 10 has an invalid length. [ 301.269792][T14607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2055'. [ 302.190179][T14674] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2072'. [ 302.424191][T14692] syzkaller1: entered promiscuous mode [ 302.429948][T14692] syzkaller1: entered allmulticast mode [ 302.564212][T14694] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 302.564258][T14694] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 302.591176][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2081'. [ 302.600543][T14701] netlink: 'syz.0.2081': attribute type 11 has an invalid length. [ 302.609331][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2081'. [ 302.618472][T14701] netlink: 'syz.0.2081': attribute type 11 has an invalid length. [ 302.631463][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2081'. [ 302.636017][T14701] netlink: 'syz.0.2081': attribute type 11 has an invalid length. [ 302.639526][T14701] netlink: 'syz.0.2081': attribute type 11 has an invalid length. [ 302.890288][T14716] pimreg: entered allmulticast mode [ 302.909888][T14716] pimreg: left allmulticast mode [ 303.095945][T14726] IPv6: Can't replace route, no match found [ 303.719508][T14766] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 303.884376][T14780] lo speed is unknown, defaulting to 1000 [ 304.101430][T14784] syzkaller1: entered promiscuous mode [ 304.101468][T14784] syzkaller1: entered allmulticast mode [ 304.365099][ T1141] IPVS: starting estimator thread 0... [ 304.477353][T14801] IPVS: using max 39 ests per chain, 93600 per kthread [ 304.652792][ T1141] IPVS: stop unused estimator thread 0... [ 304.758538][T14810] lo speed is unknown, defaulting to 1000 [ 305.447344][T14859] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 305.542509][T14853] lo speed is unknown, defaulting to 1000 [ 305.691782][T14871] __nla_validate_parse: 7 callbacks suppressed [ 305.691819][T14871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2121'. [ 305.739835][T14874] sctp: [Deprecated]: syz.0.2122 (pid 14874) Use of int in maxseg socket option. [ 305.739835][T14874] Use struct sctp_assoc_value instead [ 305.740677][T14876] sctp: [Deprecated]: syz.0.2122 (pid 14876) Use of int in maxseg socket option. [ 305.740677][T14876] Use struct sctp_assoc_value instead [ 305.816266][T14868] lo speed is unknown, defaulting to 1000 [ 305.884203][T14879] netlink: 'syz.3.2124': attribute type 1 has an invalid length. [ 306.060802][T14879] bond13: entered promiscuous mode [ 306.061249][T14879] 8021q: adding VLAN 0 to HW filter on device bond13 [ 306.105873][T14886] 8021q: adding VLAN 0 to HW filter on device bond13 [ 306.106242][T14886] bond13: (slave xfrm1): The slave device specified does not support setting the MAC address [ 306.106261][T14886] bond13: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 306.112693][T14886] bond13: (slave xfrm1): making interface the new active one [ 306.112713][T14886] xfrm1: entered promiscuous mode [ 306.144817][T14886] xfrm1: left promiscuous mode [ 308.309847][T14856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.609771][T14943] tipc: Can't bind to reserved service type 0 [ 308.722018][T14943] bond7 (unregistering): Released all slaves [ 308.911033][T14961] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 308.923758][T14959] syzkaller0: entered promiscuous mode [ 308.923792][T14959] syzkaller0: entered allmulticast mode [ 309.059997][T14968] netlink: 'syz.0.2146': attribute type 29 has an invalid length. [ 309.067797][T14962] tipc: Enabled bearer , priority 0 [ 309.081399][T14968] bond0: (slave gretap0): Opening slave failed [ 309.196079][T14957] tipc: Resetting bearer [ 309.268478][T14957] tipc: Disabling bearer [ 309.407172][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'. [ 309.509704][T14985] gretap0: entered allmulticast mode [ 309.744763][T14999] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 309.806843][T15002] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 309.862190][T15009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2156'. [ 310.176476][T15018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2162'. [ 310.531126][T15034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2168'. [ 310.541901][T15034] bridge0: entered allmulticast mode [ 310.646448][T15038] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 310.971798][T15051] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2176'. [ 311.171981][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2179'. [ 311.234004][T15071] xt_hashlimit: max too large, truncated to 1048576 [ 311.434629][T15081] netlink: 'syz.1.2183': attribute type 29 has an invalid length. [ 311.552949][T15081] bond0: (slave gretap0): Opening slave failed [ 312.054960][T15118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2194'. [ 312.054998][T15118] openvswitch: netlink: Flow key attr not present in new flow. [ 312.123805][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2196'. [ 312.187649][T15130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2198'. [ 313.891248][T15134] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2200'. [ 313.891286][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2200'. [ 314.184371][T15137] lo speed is unknown, defaulting to 1000 [ 314.420899][T15175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2209'. [ 314.601792][T15189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2213'. [ 314.602666][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2213'. [ 314.668625][T15181] bridge0: port 1(erspan0) entered blocking state [ 314.668764][T15181] bridge0: port 1(erspan0) entered disabled state [ 314.668960][T15181] erspan0: entered allmulticast mode [ 314.706474][T15181] erspan0: entered promiscuous mode [ 314.710023][T15181] bridge0: port 1(erspan0) entered blocking state [ 314.710138][T15181] bridge0: port 1(erspan0) entered forwarding state [ 314.729466][T15175] bridge0: port 1(erspan0) entered disabled state [ 315.089593][T15208] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 315.233535][T15217] netlink: 'syz.4.2223': attribute type 1 has an invalid length. [ 315.241669][T15217] netlink: 'syz.4.2223': attribute type 1 has an invalid length. [ 315.557353][T15232] ip_tables: iptables: counters copy to user failed while replacing table [ 315.818536][T15258] sctp: [Deprecated]: syz.3.2236 (pid 15258) Use of int in maxseg socket option. [ 315.818536][T15258] Use struct sctp_assoc_value instead [ 316.005889][T15269] __nla_validate_parse: 5 callbacks suppressed [ 316.012315][T15269] netlink: 60795 bytes leftover after parsing attributes in process `syz.1.2239'. [ 316.031730][T15269] netlink: 16138 bytes leftover after parsing attributes in process `syz.1.2239'. [ 316.144001][T15277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.144190][T15277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.144414][T15277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.163925][T15279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.164074][T15279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.164236][T15279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.164469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.164871][T15281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.883414][T15320] x_tables: duplicate underflow at hook 3 [ 317.033837][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.033911][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.316553][T15343] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 317.452590][T15347] dvmrp0: entered allmulticast mode [ 317.510636][T15347] dvmrp1: entered allmulticast mode [ 317.525494][T15347] dvmrp0: left allmulticast mode [ 317.525607][T15347] dvmrp1: left allmulticast mode [ 317.630856][T15353] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 317.894457][T15370] bond8: option xmit_hash_policy: invalid value (12) [ 318.106478][T15370] bond8 (unregistering): Released all slaves [ 318.395000][T15389] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2266'. [ 318.486369][T15394] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2266'. [ 318.599601][T15405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2267'. [ 319.341305][T15452] netlink: 'syz.0.2283': attribute type 39 has an invalid length. [ 319.388496][T15460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2284'. [ 319.594416][T15471] netlink: 'syz.2.2288': attribute type 1 has an invalid length. [ 319.802747][T15491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2291'. [ 320.477243][T15540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2297'. [ 320.967750][T15561] syzkaller0: entered promiscuous mode [ 320.967786][T15561] syzkaller0: entered allmulticast mode [ 321.154960][T15578] siw: device registration error -23 [ 321.204733][T15579] gre0: entered promiscuous mode [ 321.204774][T15579] gre0: entered allmulticast mode [ 321.206361][T15579] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 321.223908][T15579] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2305'. [ 321.345503][T14836] net_ratelimit: 199 callbacks suppressed [ 321.345550][T14836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.489516][T15595] netlink: 'syz.1.2312': attribute type 3 has an invalid length. [ 321.512886][T15597] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2311'. [ 321.743577][T15609] netlink: 'syz.4.2315': attribute type 1 has an invalid length. [ 321.777958][T15609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.818787][T15612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2316'. [ 321.871440][T15615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2317'. [ 321.933673][T15616] A link change request failed with some changes committed already. Interface ip may have been left with an inconsistent configuration, please check. [ 322.007392][T15616] netlink: get zone limit has 4 unknown bytes [ 322.194272][T15621] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.2319'. [ 322.194348][T15621] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.2319'. [ 322.248239][T15627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.248687][T15627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.249132][T15627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.276654][T15627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.286287][T15627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.436884][T15634] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2321'. [ 322.570166][T15644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2324'. [ 322.845168][T15648] syzkaller0: entered promiscuous mode [ 322.845218][T15648] syzkaller0: entered allmulticast mode [ 323.264277][T15657] syzkaller0: entered promiscuous mode [ 323.270389][T15657] syzkaller0: entered allmulticast mode [ 323.286924][T15659] netlink: 'syz.2.2330': attribute type 13 has an invalid length. [ 323.396609][T15667] veth1_to_bond: entered allmulticast mode [ 323.483743][T15674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2331'. [ 323.690971][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2335'. [ 323.856291][T15681] netlink: 'syz.4.2335': attribute type 11 has an invalid length. [ 324.065945][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.066178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.324781][T15659] syzkaller0: entered promiscuous mode [ 325.330404][T15659] syzkaller0: entered allmulticast mode [ 325.333962][T15682] tipc: Enabling of bearer rejected, failed to enable media [ 325.846947][T15719] syzkaller1: entered promiscuous mode [ 325.852529][T15719] syzkaller1: entered allmulticast mode [ 326.126577][T15739] sctp: [Deprecated]: syz.2.2353 (pid 15739) Use of int in max_burst socket option. [ 326.126577][T15739] Use struct sctp_assoc_value instead [ 326.252041][T15742] netlink: 'syz.2.2354': attribute type 11 has an invalid length. [ 326.357624][T15746] netlink: 'syz.4.2355': attribute type 2 has an invalid length. [ 326.365593][T15746] netlink: 'syz.4.2355': attribute type 11 has an invalid length. [ 326.373509][T15746] __nla_validate_parse: 3 callbacks suppressed [ 326.379861][T15746] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2355'. [ 326.449415][T15753] netlink: 'syz.4.2355': attribute type 2 has an invalid length. [ 326.449459][T15753] netlink: 'syz.4.2355': attribute type 11 has an invalid length. [ 326.451844][T15753] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2355'. [ 326.519217][T15748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2356'. [ 326.956517][T15784] net_ratelimit: 1 callbacks suppressed [ 326.963737][T15784] openvswitch: netlink: nsh attr 1 has unexpected len 335 expected 8 [ 327.042678][T15790] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2360'. [ 327.132821][T15795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2364'. [ 327.465024][T15802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2366'. [ 329.140326][T15800] syzkaller1: entered promiscuous mode [ 329.140370][T15800] syzkaller1: entered allmulticast mode [ 329.288630][T15806] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2368'. [ 329.367462][T15809] netlink: 'syz.2.2370': attribute type 21 has an invalid length. [ 329.372809][T15806] netlink: 'syz.1.2368': attribute type 1 has an invalid length. [ 329.788989][T15837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2377'. [ 329.916823][T15844] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 329.924489][T15844] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 330.000533][T15846] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2379'. [ 330.042318][T15851] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2381'. [ 330.473456][T15885] Bluetooth: hci0: unsupported parameter 5135 [ 330.473502][T15885] Bluetooth: hci0: unsupported parameter 8192 [ 330.473532][T15885] Bluetooth: hci0: unsupported parameter 5135 [ 330.473543][T15885] Bluetooth: hci0: unsupported parameter 8192 [ 330.512699][T15885] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 330.564404][T15885] bond6: entered promiscuous mode [ 330.571244][T15885] bond6: entered allmulticast mode [ 330.578349][T15885] 8021q: adding VLAN 0 to HW filter on device bond6 [ 330.578916][T15887] tc_dump_action: action bad kind [ 330.617962][T15897] erspan2: entered allmulticast mode [ 330.659149][T15897] bond6: (slave erspan2): making interface the new active one [ 330.659194][T15897] erspan2: entered promiscuous mode [ 330.734423][T15897] bond6: (slave erspan2): Enslaving as an active interface with an up link [ 331.039339][T15911] lo: Caught tx_queue_len zero misconfig [ 331.613373][T15953] netlink: 'syz.3.2407': attribute type 1 has an invalid length. [ 331.650770][T15953] 8021q: adding VLAN 0 to HW filter on device bond14 [ 331.656119][T15955] sock: sock_timestamping_bind_phc: sock not bind to device [ 331.714718][T15956] bond14: (slave veth10): Enslaving as an active interface with a down link [ 331.739169][T15961] __nla_validate_parse: 10 callbacks suppressed [ 331.739317][T15961] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2408'. [ 331.764952][T15953] gre0: left promiscuous mode [ 331.764978][T15953] gre0: left allmulticast mode [ 331.777801][T15953] bridge0: port 1(erspan0) entered disabled state [ 331.839758][T15953] bond8: left promiscuous mode [ 331.839787][T15953] bond8: left allmulticast mode [ 331.839916][T15953] hsr1: left promiscuous mode [ 331.840050][T15953] bond9: left promiscuous mode [ 331.840062][T15953] bond9: left allmulticast mode [ 331.854773][T15953] bond10: left promiscuous mode [ 331.860311][T15953] bond11: left promiscuous mode [ 331.860330][T15953] bond11: left allmulticast mode [ 331.860449][T15953] bond12: left promiscuous mode [ 331.860464][T15953] bond12: left allmulticast mode [ 331.901359][T15956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.908252][T15956] bond14: (slave batadv0): making interface the new active one [ 331.909423][T15956] batadv0: entered promiscuous mode [ 331.916534][T15956] bond14: (slave batadv0): Enslaving as an active interface with an up link [ 332.027306][T15967] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 332.038764][T15966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2409'. [ 332.087820][T15967] xt_CT: No such helper "netbios-ns" [ 332.731894][T16000] tipc: Enabling of bearer rejected, failed to enable media [ 333.235494][T16039] gretap0: left allmulticast mode [ 333.294418][T16039] A link change request failed with some changes committed already. Interface ip may have been left with an inconsistent configuration, please check. [ 333.315013][T10895] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.315154][T10895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.322021][T10895] bridge0: port 3(vlan3) entered blocking state [ 333.322128][T10895] bridge0: port 3(vlan3) entered forwarding state [ 333.382903][T16039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2420'. [ 333.911142][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2426'. [ 333.911190][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2426'. [ 333.953394][T16069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2428'. [ 333.989592][T16082] FAULT_INJECTION: forcing a failure. [ 333.989592][T16082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.989639][T16082] CPU: 0 UID: 0 PID: 16082 Comm: syz.3.2430 Not tainted syzkaller #0 PREEMPT(full) [ 333.989659][T16082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.989684][T16082] Call Trace: [ 333.989691][T16082] [ 333.989699][T16082] dump_stack_lvl+0xe8/0x150 [ 333.989729][T16082] should_fail_ex+0x410/0x560 [ 333.989759][T16082] _copy_from_user+0x2d/0xb0 [ 333.989775][T16082] __sys_sendto+0x2a9/0x5a0 [ 333.989800][T16082] ? ksys_write+0x1e6/0x270 [ 333.989828][T16082] ? __pfx___sys_sendto+0x10/0x10 [ 333.989850][T16082] ? __mutex_unlock_slowpath+0x731/0x900 [ 333.989893][T16082] ? __pfx_ksys_write+0x10/0x10 [ 333.989919][T16082] __x64_sys_sendto+0xde/0x100 [ 333.989947][T16082] do_syscall_64+0x166/0x520 [ 333.989969][T16082] ? trace_irq_disable+0x3b/0x140 [ 333.989986][T16082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.990004][T16082] ? clear_bhb_loop+0x70/0xc0 [ 333.990026][T16082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.990044][T16082] RIP: 0033:0x7fc1e7f9e159 [ 333.990061][T16082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.990076][T16082] RSP: 002b:00007fc1e8d84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 333.990099][T16082] RAX: ffffffffffffffda RBX: 00007fc1e8225fa0 RCX: 00007fc1e7f9e159 [ 333.990112][T16082] RDX: 000000000000000e RSI: 0000200000000700 RDI: 0000000000000004 [ 333.990123][T16082] RBP: 00007fc1e8d84090 R08: 0000200000000800 R09: 0000000000000014 [ 333.990135][T16082] R10: 0000000004004002 R11: 0000000000000246 R12: 0000000000000001 [ 333.990147][T16082] R13: 00007fc1e8226038 R14: 00007fc1e8225fa0 R15: 00007fff4bd2ea28 [ 333.990176][T16082] [ 334.088509][T16085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2431'. [ 334.213264][T16087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2433'. [ 334.328738][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2434'. [ 334.583978][ T5634] udevd[5634]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 334.604849][ T6392] udevd[6392]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 334.862454][T16115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2439'. [ 335.048316][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.048530][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.048711][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.048892][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.064135][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.064348][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.064532][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.064738][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.064926][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.069243][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.069485][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.069673][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.069858][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.070038][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.072102][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.072294][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.072977][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.079739][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.079932][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.080115][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.080313][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.080497][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.080680][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.084133][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.084365][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.084554][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.084749][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.084936][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.086518][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.086768][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.088587][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.088808][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.088992][T16124] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 335.397330][T16137] netlink: 'syz.4.2442': attribute type 39 has an invalid length. [ 335.650123][T16152] Bluetooth: hci0: unsupported parameter 5135 [ 335.656688][T16152] Bluetooth: hci0: unsupported parameter 8192 [ 335.663014][T16152] Bluetooth: hci0: unsupported parameter 5135 [ 335.676884][T16152] Bluetooth: hci0: unsupported parameter 8192 [ 335.733555][T16152] syzkaller1: entered promiscuous mode [ 335.733601][T16152] syzkaller1: entered allmulticast mode [ 336.839649][T16208] netlink: 'syz.4.2462': attribute type 4 has an invalid length. [ 336.847526][T16208] netlink: 'syz.4.2462': attribute type 8 has an invalid length. [ 336.847544][T16208] __nla_validate_parse: 6 callbacks suppressed [ 336.847555][T16208] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2462'. [ 337.139221][T16225] netlink: 'syz.4.2466': attribute type 49 has an invalid length. [ 337.277552][T15868] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.278652][T15868] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.278684][T15868] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.278711][T15868] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.405759][T16234] syzkaller1: entered promiscuous mode [ 337.405847][T16234] syzkaller1: entered allmulticast mode [ 337.664150][T16246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2475'. [ 337.687001][T16246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2475'. [ 337.991518][ T5800] hid-generic 0005:0B57:0003.0001: item fetching failed at offset 0/1 [ 338.005151][ T5800] hid-generic 0005:0B57:0003.0001: probe with driver hid-generic failed with error -22 [ 338.419217][T16291] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2487'. [ 338.458386][T16291] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 338.458441][T16291] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 338.458475][T16291] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 338.515870][T16297] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2487'. [ 338.516071][T16297] 0ªî{X¹¦: renamed from gretap0 [ 338.551421][T16297] 0ªî{X¹¦: entered allmulticast mode [ 338.559168][T16291] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 338.564843][T16297] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 338.781604][T16316] syzkaller0: entered promiscuous mode [ 338.788980][T16316] syzkaller0: entered allmulticast mode [ 339.027186][T16326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2496'. [ 339.113393][T16332] netlink: 'syz.4.2498': attribute type 2 has an invalid length. [ 339.136729][T16330] bond13: (slave ip6tnl4): The slave device specified does not support setting the MAC address [ 339.150485][T16330] bond13: (slave ip6tnl4): Error -95 calling set_mac_address [ 339.207796][T16341] openvswitch: netlink: Missing valid actions attribute. [ 339.215026][T16341] openvswitch: netlink: Actions may not be safe on all matching packets [ 339.693542][T16366] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2504'. [ 339.813677][T16378] netlink: 'syz.3.2506': attribute type 1 has an invalid length. [ 339.850712][T16378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2506'. [ 340.104106][T16400] tipc: Enabled bearer , priority 10 [ 340.584386][T16427] syzkaller0: entered promiscuous mode [ 340.584423][T16427] syzkaller0: entered allmulticast mode [ 340.598850][T16427] tipc: Enabled bearer , priority 0 [ 340.606891][T16427] tipc: Resetting bearer [ 340.616643][T16426] tipc: Resetting bearer [ 340.629660][T16383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.656731][T16426] tipc: Disabling bearer [ 340.995089][T16455] netlink: 'syz.3.2524': attribute type 1 has an invalid length. [ 341.034453][T16455] bond15: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 341.047727][T16455] bond15 (unregistering): Released all slaves [ 341.229995][T16467] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2526'. [ 341.299753][T16472] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2526'. [ 341.917638][T16483] netlink: Conntrack attr has 4 unknown bytes [ 341.917690][T16483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.217262][T16485] __nla_validate_parse: 1 callbacks suppressed [ 343.223954][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2531'. [ 343.429565][T16470] bridge0: port 3(bond0) entered disabled state [ 343.429776][T16470] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.430388][T16470] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.261734][T16470] bridge2: left promiscuous mode [ 344.267975][T16470] bridge2: left allmulticast mode [ 344.277929][T16470] hsr1: left promiscuous mode [ 344.285761][T16470] vlan2: left allmulticast mode [ 344.290694][T16470] bridge3: left allmulticast mode [ 344.309090][T16470] bond12: left promiscuous mode [ 344.309114][T16470] gre1: left promiscuous mode [ 344.320814][T16470] bond13: left promiscuous mode [ 344.360891][T16470] bond14: left promiscuous mode [ 344.360918][T16470] bond14: left allmulticast mode [ 344.514994][T16482] vlan1: entered allmulticast mode [ 344.515039][T16482] bridge6: entered allmulticast mode [ 344.520377][ T9006] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.520405][ T9006] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.520442][ T9006] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.520463][ T9006] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.520495][ T9006] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.520516][ T9006] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.520554][ T9006] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.520575][ T9006] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.661158][T16485] hsr_slave_1 (unregistering): left promiscuous mode [ 344.882385][T16504] netlink: 'syz.0.2535': attribute type 4 has an invalid length. [ 344.891499][T16504] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2535'. [ 344.907113][T16513] openvswitch: netlink: Unknown nsh attribute 0 [ 344.941120][T16517] FAULT_INJECTION: forcing a failure. [ 344.941120][T16517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.941165][T16517] CPU: 1 UID: 0 PID: 16517 Comm: syz.3.2539 Not tainted syzkaller #0 PREEMPT(full) [ 344.941184][T16517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.941194][T16517] Call Trace: [ 344.941201][T16517] [ 344.941208][T16517] dump_stack_lvl+0xe8/0x150 [ 344.941236][T16517] should_fail_ex+0x410/0x560 [ 344.941269][T16517] _copy_from_user+0x2d/0xb0 [ 344.941286][T16517] ___sys_sendmsg+0x1c6/0x360 [ 344.941301][T16517] ? __lock_acquire+0x6df/0x2e50 [ 344.941322][T16517] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.941372][T16517] ? __fget_files+0x2a/0x420 [ 344.941394][T16517] ? __fget_files+0x3a2/0x420 [ 344.941425][T16517] __x64_sys_sendmsg+0x1b1/0x290 [ 344.941446][T16517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.941484][T16517] do_syscall_64+0x166/0x520 [ 344.941507][T16517] ? trace_irq_disable+0x3b/0x140 [ 344.941521][T16517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.941537][T16517] ? clear_bhb_loop+0x70/0xc0 [ 344.941558][T16517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.941575][T16517] RIP: 0033:0x7fc1e7f9e159 [ 344.941591][T16517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.941606][T16517] RSP: 002b:00007fc1e8d84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.941626][T16517] RAX: ffffffffffffffda RBX: 00007fc1e8225fa0 RCX: 00007fc1e7f9e159 [ 344.941638][T16517] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 344.941649][T16517] RBP: 00007fc1e8d84090 R08: 0000000000000000 R09: 0000000000000000 [ 344.941660][T16517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.941670][T16517] R13: 00007fc1e8226038 R14: 00007fc1e8225fa0 R15: 00007fff4bd2ea28 [ 344.941699][T16517] [ 345.249264][T16533] vxcan1: entered promiscuous mode [ 345.292657][T16531] netlink: 'syz.3.2541': attribute type 16 has an invalid length. [ 345.292702][T16531] netlink: 'syz.3.2541': attribute type 17 has an invalid length. [ 345.362104][T16531] 0ªî{X¹¦: left allmulticast mode [ 345.402861][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2545'. [ 345.444203][T16531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.559483][T16561] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 345.561802][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2546'. [ 345.584518][T16560] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 345.717861][T16531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 345.717913][T16531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.722608][T16531] A link change request failed with some changes committed already. Interface ip may have been left with an inconsistent configuration, please check. [ 345.851165][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2545'. [ 345.881269][T16568] netlink: 'syz.2.2547': attribute type 16 has an invalid length. [ 345.881309][T16568] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2547'. [ 345.899640][T16568] lo: entered promiscuous mode [ 345.902855][T16568] tunl0: entered promiscuous mode [ 345.917367][T16568] gre0: entered promiscuous mode [ 346.121012][T16568] erspan0: entered promiscuous mode [ 346.156474][T16568] ip_vti0: entered promiscuous mode [ 346.188177][T16568] ip6_vti0: entered promiscuous mode [ 346.212841][T16568] sit0: entered promiscuous mode [ 346.388762][T16568] ip6tnl0: entered promiscuous mode [ 346.519062][T16568] ip6gre0: entered promiscuous mode [ 346.540883][T16568] syz_tun: entered promiscuous mode [ 346.559494][T16568] ip6gretap0: entered promiscuous mode [ 346.592894][T16568] bond0: entered promiscuous mode [ 346.613010][T16568] vlan0: entered promiscuous mode [ 346.624604][T16568] dummy0: entered promiscuous mode [ 346.640419][T16568] nlmon0: entered promiscuous mode [ 346.650628][T16568] vxcan0: entered promiscuous mode [ 346.663352][T16568] vxcan1: entered promiscuous mode [ 346.676310][T16568] veth0: entered promiscuous mode [ 346.699623][T16568] veth1: entered promiscuous mode [ 346.726102][T16568] wg0: entered promiscuous mode [ 346.764039][T16568] wg2: entered promiscuous mode [ 346.775869][T16568] veth0_to_bridge: entered promiscuous mode [ 346.795372][T16568] bridge_slave_0: entered promiscuous mode [ 346.818022][T16568] veth1_to_bridge: entered promiscuous mode [ 346.822729][T16568] bridge_slave_1: entered promiscuous mode [ 346.829532][T16568] veth0_to_bond: entered promiscuous mode [ 346.835133][T16568] bond_slave_0: entered promiscuous mode [ 346.839266][T16568] veth1_to_bond: entered promiscuous mode [ 346.844674][T16568] bond_slave_1: entered promiscuous mode [ 346.849228][T16568] veth0_to_team: entered promiscuous mode [ 346.853286][T16568] team_slave_0: entered promiscuous mode [ 347.055152][T16568] team_slave_1: entered promiscuous mode [ 347.072595][T16568] veth0_to_batadv: entered promiscuous mode [ 347.097534][T16568] batadv_slave_0: entered promiscuous mode [ 347.099099][T16568] batadv_slave_0: left allmulticast mode [ 347.130059][T16568] xfrm0: entered promiscuous mode [ 347.147974][T16568] veth0_to_hsr: entered promiscuous mode [ 347.185052][T16568] hsr0: entered promiscuous mode [ 347.211012][T16568] veth1_virt_wifi: entered promiscuous mode [ 347.223318][T16568] veth0_virt_wifi: entered promiscuous mode [ 347.243780][T16568] virt_wifi0: entered promiscuous mode [ 347.256206][T16568] vlan1: entered promiscuous mode [ 347.261782][T16568] macvlan0: entered promiscuous mode [ 347.261957][T16568] macvlan1: entered promiscuous mode [ 347.262095][T16568] ipvlan0: entered promiscuous mode [ 347.262235][T16568] ipvlan1: entered promiscuous mode [ 347.284132][T16568] macvtap0: entered promiscuous mode [ 347.291548][T16568] macsec0: entered promiscuous mode [ 347.291684][T16568] geneve0: entered promiscuous mode [ 347.291836][T16568] geneve1: entered promiscuous mode [ 347.291997][T16568] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 347.292018][T16568] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 347.292142][T16568] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 347.292260][T16568] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 347.292379][T16568] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 347.292494][T16568] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 347.332262][T16568] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 347.332414][T16568] ip6tnl1: entered promiscuous mode [ 347.332519][T16568] macsec1: entered promiscuous mode [ 347.332629][T16568] vrf0: entered promiscuous mode [ 347.332798][T16568] vrf1: entered promiscuous mode [ 347.332932][T16568] bridge1: entered promiscuous mode [ 347.333048][T16568] syztnl0: entered promiscuous mode [ 347.333152][T16568] ip6gretap1: entered promiscuous mode [ 347.333256][T16568] syztnl2: entered promiscuous mode [ 347.333358][T16568] ip6tnl2: entered promiscuous mode [ 347.333458][T16568] bond1: entered promiscuous mode [ 347.333573][T16568] mac80211_hwsim hwsim17 wlan2: entered promiscuous mode [ 347.343104][T16568] bond2: entered promiscuous mode [ 347.343124][T16568] geneve2: entered promiscuous mode [ 347.343457][T16568] ip6tnl3: entered promiscuous mode [ 347.343560][T16568] ipip0: entered promiscuous mode [ 347.343708][T16568] bond3: entered promiscuous mode [ 347.343819][T16568] vxlan0: entered promiscuous mode [ 347.343926][T16568] macvlan2: entered promiscuous mode [ 347.344026][T16568] ip6tnl4: entered promiscuous mode [ 347.344126][T16568] hsr1: entered promiscuous mode [ 347.344260][T16568] sit1: entered promiscuous mode [ 347.360244][T16568] bond4: entered promiscuous mode [ 347.360265][T16568] gretap1: entered promiscuous mode [ 347.378877][T16568] gtp0: entered promiscuous mode [ 347.388325][T16568] bridge2: entered promiscuous mode [ 347.388471][T16568] mac80211_hwsim hwsim25 wlan3: entered promiscuous mode [ 347.397923][T16568] bond5: entered promiscuous mode [ 347.402259][T16568] ip6tnl5: entered promiscuous mode [ 347.402389][T16568] macvtap0.4: entered promiscuous mode [ 347.407574][T16568] bond6: entered promiscuous mode [ 347.407591][T16568] gretap2: entered promiscuous mode [ 347.419010][T16568] vlan2: entered promiscuous mode [ 347.434347][T16568] geneve3: left allmulticast mode [ 347.449815][T16568] ip6erspan0: entered promiscuous mode [ 347.455151][T16568] ip6tnl6: entered promiscuous mode [ 347.465803][T16568] bond7: entered promiscuous mode [ 347.466160][T16568] vxlan1: entered promiscuous mode [ 347.539996][ T9368] lo speed is unknown, defaulting to 1000 [ 347.540016][ T9368] syz2: Port: 1 Link DOWN [ 347.702220][T16631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2551'. [ 347.706076][ T9006] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.706108][ T9006] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.706145][ T9006] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.706167][ T9006] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.706199][ T9006] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.706220][ T9006] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.706251][ T9006] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.706274][ T9006] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.068057][T16644] lo speed is unknown, defaulting to 1000 [ 348.355903][ T9006] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.355971][ T9006] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.356019][ T9006] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.356053][ T9006] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.400398][T16666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2558'. [ 348.472592][T16671] syzkaller0: entered promiscuous mode [ 348.478514][T16671] syzkaller0: entered allmulticast mode [ 348.678577][T16672] bridge0: port 4(bond0) entered disabled state [ 348.679579][T16672] bridge0: port 3(vlan3) entered disabled state [ 348.679812][T16672] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.680380][T16672] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.873926][T16672] macvlan0: left promiscuous mode [ 348.883788][T16690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2559'. [ 348.919217][T16672] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 348.933988][T16672] ip6gre1: left promiscuous mode [ 348.940891][T16672] ip6gre1: left allmulticast mode [ 348.957200][T16672] ip6gre2: left allmulticast mode [ 348.986338][T16672] gretap2: left allmulticast mode [ 348.992270][T16672] hsr0: left promiscuous mode [ 348.992765][T16672] ip6tnl2: left allmulticast mode [ 349.201991][T16697] tipc: Enabling of bearer rejected, failed to enable media [ 349.231976][T16697] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 349.254943][T16697] tipc: Enabled bearer , priority 10 [ 349.279254][ T9006] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.279310][ T9006] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.279360][ T9006] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.279381][ T9006] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.279412][ T9006] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.279434][ T9006] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.279466][ T9006] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.279486][ T9006] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.362653][T16701] sctp: [Deprecated]: syz.2.2565 (pid 16701) Use of int in max_burst socket option deprecated. [ 349.362653][T16701] Use struct sctp_assoc_value instead [ 349.379840][T16700] ipvlan0: Caught tx_queue_len zero misconfig [ 349.498817][T16711] netlink: 'syz.3.2568': attribute type 34 has an invalid length. [ 349.507065][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2568'. [ 349.604622][T16711] bond15: option lacp_strict: invalid value (3) [ 349.614831][T16711] bond15 (unregistering): Released all slaves [ 349.859714][T16727] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2574'. [ 349.977783][T16744] FAULT_INJECTION: forcing a failure. [ 349.977783][T16744] name failslab, interval 1, probability 0, space 0, times 0 [ 349.990888][T16744] CPU: 0 UID: 0 PID: 16744 Comm: syz.1.2578 Not tainted syzkaller #0 PREEMPT(full) [ 349.990915][T16744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.990927][T16744] Call Trace: [ 349.990976][T16744] [ 349.991042][T16744] dump_stack_lvl+0xe8/0x150 [ 349.991183][T16744] should_fail_ex+0x410/0x560 [ 349.991281][T16744] should_failslab+0xa8/0x100 [ 349.991323][T16744] ? skb_clone+0x212/0x3a0 [ 349.991437][T16744] kmem_cache_alloc_noprof+0xa1/0x600 [ 349.991475][T16744] ? skb_clone+0x212/0x3a0 [ 349.991499][T16744] skb_clone+0x212/0x3a0 [ 349.991515][T16744] ? nfnetlink_rcv+0x4b0/0x28c0 [ 349.991583][T16744] nfnetlink_rcv+0x4de/0x28c0 [ 349.991605][T16744] ? kernel_text_address+0xa5/0xe0 [ 349.991648][T16744] ? __kernel_text_address+0xd/0x30 [ 349.991668][T16744] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 349.991704][T16744] ? arch_stack_walk+0xfb/0x150 [ 349.991754][T16744] ? stack_trace_save+0xa9/0x100 [ 349.991783][T16744] ? __lock_acquire+0x6df/0x2e50 [ 349.991811][T16744] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 349.991827][T16744] ? __lock_acquire+0x6df/0x2e50 [ 349.991864][T16744] ? __lock_acquire+0x6df/0x2e50 [ 349.991893][T16744] ? __netlink_lookup+0xc6/0x8b0 [ 349.991955][T16744] ? lock_acquire+0x115/0x350 [ 349.991973][T16744] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.991999][T16744] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.992018][T16744] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.992043][T16744] netlink_unicast+0x7bd/0x940 [ 349.992072][T16744] netlink_sendmsg+0x813/0xb40 [ 349.992102][T16744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.992130][T16744] ? apparmor_socket_sendmsg+0x98/0x360 [ 349.992209][T16744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.992229][T16744] sock_sendmsg_nosec+0x13a/0x180 [ 349.992304][T16744] ____sys_sendmsg+0x54e/0x850 [ 349.992327][T16744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.992355][T16744] ? import_iovec+0x73/0xa0 [ 349.992487][T16744] ___sys_sendmsg+0x2a5/0x360 [ 349.992504][T16744] ? __lock_acquire+0x6df/0x2e50 [ 349.992526][T16744] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.992578][T16744] ? __fget_files+0x2a/0x420 [ 349.992610][T16744] ? __fget_files+0x3a2/0x420 [ 349.992644][T16744] __x64_sys_sendmsg+0x1b1/0x290 [ 349.992664][T16744] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.992703][T16744] do_syscall_64+0x166/0x520 [ 349.992808][T16744] ? trace_irq_disable+0x3b/0x140 [ 349.992843][T16744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.992878][T16744] ? clear_bhb_loop+0x70/0xc0 [ 349.992901][T16744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.992919][T16744] RIP: 0033:0x7f7545f9e159 [ 349.992943][T16744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.992987][T16744] RSP: 002b:00007f7546dcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.993039][T16744] RAX: ffffffffffffffda RBX: 00007f7546225fa0 RCX: 00007f7545f9e159 [ 349.993052][T16744] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 349.993064][T16744] RBP: 00007f7546dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 349.993075][T16744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.993087][T16744] R13: 00007f7546226038 R14: 00007f7546225fa0 R15: 00007fffb0c7a0a8 [ 349.993117][T16744] [ 350.002396][T16730] syzkaller0: entered promiscuous mode [ 350.002418][T16730] syzkaller0: entered allmulticast mode [ 350.373109][T16754] netlink: 'syz.2.2580': attribute type 6 has an invalid length. [ 350.536748][T16759] Bluetooth: hci0: unsupported parameter 5134 [ 350.536789][T16759] Bluetooth: hci0: unsupported parameter 8192 [ 350.536801][T16759] Bluetooth: hci0: unsupported parameter 5134 [ 350.536812][T16759] Bluetooth: hci0: unsupported parameter 8192 [ 350.890351][T16776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2582'. [ 352.336341][T14832] tipc: Node number set to 3847750953 [ 352.535458][T16788] netlink: 'syz.0.2585': attribute type 1 has an invalid length. [ 352.719785][T16761] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.750707][T16801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2587'. [ 352.750904][T16801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2587'. [ 352.760279][T16801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2587'. [ 352.769692][T16801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2587'. [ 352.778692][T16801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2587'. [ 352.878646][T16761] veth0_to_bond: left promiscuous mode [ 352.880483][T16761] veth1_to_bond: left allmulticast mode [ 353.036055][T16761] hsr1: left promiscuous mode [ 353.067345][T16761] ip6gre1: left allmulticast mode [ 353.169186][T16761] bond6: left promiscuous mode [ 353.169241][T16761] erspan2: left promiscuous mode [ 353.169368][T16761] bond6: left allmulticast mode [ 353.174551][T16761] erspan2: left allmulticast mode [ 353.245641][T10895] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.266284][T10895] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.275432][T10895] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.275469][T10895] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.560841][T16818] FAULT_INJECTION: forcing a failure. [ 353.560841][T16818] name failslab, interval 1, probability 0, space 0, times 0 [ 353.591556][T16818] CPU: 0 UID: 0 PID: 16818 Comm: syz.3.2591 Not tainted syzkaller #0 PREEMPT(full) [ 353.591583][T16818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.591594][T16818] Call Trace: [ 353.591602][T16818] [ 353.591610][T16818] dump_stack_lvl+0xe8/0x150 [ 353.591642][T16818] should_fail_ex+0x410/0x560 [ 353.591674][T16818] should_failslab+0xa8/0x100 [ 353.591695][T16818] ? skb_clone+0x212/0x3a0 [ 353.591715][T16818] kmem_cache_alloc_noprof+0xa1/0x600 [ 353.591742][T16818] ? skb_clone+0x212/0x3a0 [ 353.591767][T16818] skb_clone+0x212/0x3a0 [ 353.591790][T16818] __netlink_deliver_tap+0x413/0x860 [ 353.591820][T16818] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.591843][T16818] netlink_deliver_tap+0x19c/0x1b0 [ 353.591865][T16818] netlink_unicast+0x781/0x940 [ 353.591895][T16818] netlink_sendmsg+0x813/0xb40 [ 353.591924][T16818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.591954][T16818] ? apparmor_socket_sendmsg+0x98/0x360 [ 353.591983][T16818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.592003][T16818] sock_sendmsg_nosec+0x13a/0x180 [ 353.592029][T16818] ____sys_sendmsg+0x54e/0x850 [ 353.592054][T16818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.592082][T16818] ? import_iovec+0x73/0xa0 [ 353.592114][T16818] ___sys_sendmsg+0x2a5/0x360 [ 353.592132][T16818] ? __lock_acquire+0x6df/0x2e50 [ 353.592155][T16818] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.592210][T16818] ? __fget_files+0x2a/0x420 [ 353.592233][T16818] ? __fget_files+0x3a2/0x420 [ 353.592264][T16818] __x64_sys_sendmsg+0x1b1/0x290 [ 353.592285][T16818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.592322][T16818] do_syscall_64+0x166/0x520 [ 353.592346][T16818] ? trace_irq_disable+0x3b/0x140 [ 353.592362][T16818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.592382][T16818] ? clear_bhb_loop+0x70/0xc0 [ 353.592405][T16818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.592430][T16818] RIP: 0033:0x7fc1e7f9e159 [ 353.592448][T16818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.592463][T16818] RSP: 002b:00007fc1e8d84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.592483][T16818] RAX: ffffffffffffffda RBX: 00007fc1e8225fa0 RCX: 00007fc1e7f9e159 [ 353.592496][T16818] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 353.592507][T16818] RBP: 00007fc1e8d84090 R08: 0000000000000000 R09: 0000000000000000 [ 353.592518][T16818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.592529][T16818] R13: 00007fc1e8226038 R14: 00007fc1e8225fa0 R15: 00007fff4bd2ea28 [ 353.592560][T16818] [ 353.892760][T16824] xt_TCPMSS: Only works on TCP SYN packets [ 353.920019][T16825] ip6t_rt: too many addresses specified [ 353.997426][T16833] bridge0: entered allmulticast mode [ 354.025437][T16832] bond0: left allmulticast mode [ 354.025481][T16832] bond_slave_0: left allmulticast mode [ 354.025496][T16832] bond_slave_1: left allmulticast mode [ 354.025509][T16832] bond0: left promiscuous mode [ 354.025517][T16832] bond_slave_0: left promiscuous mode [ 354.025768][T16832] bond_slave_1: left promiscuous mode [ 354.026086][T16832] bridge0: port 3(bond0) entered disabled state [ 354.084261][T16832] bridge_slave_1: left allmulticast mode [ 354.084316][T16832] bridge_slave_1: left promiscuous mode [ 354.084513][T16832] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.101407][T16834] __nla_validate_parse: 28 callbacks suppressed [ 354.101499][T16834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2595'. [ 354.142854][T16832] bridge_slave_0: left allmulticast mode [ 354.142896][T16832] bridge_slave_0: left promiscuous mode [ 354.143065][T16832] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.420090][T16859] veth0_macvtap: entered allmulticast mode [ 354.420227][T16859] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 354.523251][T16866] openvswitch: netlink: Unknown key attributes 2 [ 354.532392][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2600'. [ 354.607957][T16870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2601'. [ 355.095581][T16898] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2610'. [ 355.105802][T16898] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 355.329380][T16907] ip6tnl0: Caught tx_queue_len zero misconfig [ 355.719965][T16925] ip6t_rt: too many addresses specified [ 355.966021][T16930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.070354][T16938] netlink: 'syz.0.2621': attribute type 1 has an invalid length. [ 356.329250][T16945] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2623'. [ 356.728741][T16980] tipc: Enabled bearer , priority 0 [ 356.744904][T16982] tipc: Resetting bearer [ 356.773372][T16975] tipc: Disabling bearer [ 356.842874][T16985] ip6tnl4: entered allmulticast mode [ 356.857580][T10895] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 356.865439][T10895] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 356.885644][T14830] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 356.944394][T16979] lo speed is unknown, defaulting to 1000 [ 357.032360][T16994] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2632'. [ 357.044039][T16994] sch_fq: defrate 0 ignored. [ 357.216187][T14830] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 357.447847][T17011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2634'. [ 357.537036][T17012] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2636'. [ 357.620481][T17021] syzkaller0: entered promiscuous mode [ 357.626994][T17021] syzkaller0: entered allmulticast mode [ 357.906211][T14830] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 357.921504][T17035] netlink: 'syz.2.2642': attribute type 9 has an invalid length. [ 358.069022][T17045] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 358.244709][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2647'. [ 358.260452][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2647'. [ 358.458855][T17063] tunl0: Caught tx_queue_len zero misconfig [ 359.340105][T17110] veth0: entered promiscuous mode [ 359.468854][T17115] __nla_validate_parse: 3 callbacks suppressed [ 359.468904][T17115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2657'. [ 359.468922][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2657'. [ 359.543465][T17121] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 359.550961][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2659'. [ 359.609678][T17121] bond16: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 359.625230][T17127] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2659'. [ 359.663077][T17121] bond16 (unregistering): Released all slaves [ 359.739721][T17131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2659'. [ 359.783309][T17109] veth0: left promiscuous mode [ 359.839781][T17128] syzkaller1: entered allmulticast mode [ 360.047972][T17153] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 360.075959][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2667'. [ 360.183418][T17165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2670'. [ 360.193652][T17165] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2670'. [ 360.367412][T17176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2673'. [ 360.370996][T17176] x_tables: unsorted underflow at hook 4 [ 360.371203][T17176] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2673'. [ 360.945695][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 362.681065][T17132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.978117][T17215] Bluetooth: hci0: unsupported parameter 1280 [ 362.991958][T17215] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 363.027291][T17215] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 363.568449][T17243] lo speed is unknown, defaulting to 1000 [ 364.102353][T17278] syzkaller0: entered promiscuous mode [ 364.102401][T17278] syzkaller0: entered allmulticast mode [ 364.108895][T17280] syzkaller0: entered promiscuous mode [ 364.108915][T17280] syzkaller0: entered allmulticast mode [ 364.119266][T17280] tipc: Enabled bearer , priority 0 [ 364.153995][T17287] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 364.190045][T17290] tipc: Resetting bearer [ 364.358489][T17279] tipc: Resetting bearer [ 364.385702][T17279] tipc: Disabling bearer [ 364.513506][T17308] netlink: 'syz.2.2705': attribute type 3 has an invalid length. [ 364.694146][T17319] netlink: 'syz.0.2708': attribute type 39 has an invalid length. [ 364.769719][T17321] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 364.777226][T17321] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 364.784910][T17321] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 365.286382][T17333] netlink: 'syz.3.2713': attribute type 1 has an invalid length. [ 365.387861][T17334] __nla_validate_parse: 12 callbacks suppressed [ 365.394563][T17334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2713'. [ 365.509356][T17336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2713'. [ 366.385542][T17243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.698866][T17333] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 366.924970][T17356] netlink: 'syz.0.2718': attribute type 58 has an invalid length. [ 366.925014][T17356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2718'. [ 366.929688][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2714'. [ 367.394847][T17378] nbd: couldn't find device at index 65536 [ 367.403453][T17378] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2719'. [ 367.423367][T17378] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2719'. [ 367.426464][T17378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2719'. [ 367.469648][T17392] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2721'. [ 367.498015][T17392] syzkaller1: entered promiscuous mode [ 367.498066][T17392] syzkaller1: entered allmulticast mode [ 367.646983][T17402] netlink: 'syz.2.2724': attribute type 1 has an invalid length. [ 367.724927][T17402] bond8: entered promiscuous mode [ 367.726023][T17402] 8021q: adding VLAN 0 to HW filter on device bond8 [ 367.777962][T17397] bond0 (unregistering): Released all slaves [ 367.917018][T17416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2725'. [ 367.958595][T17403] 8021q: adding VLAN 0 to HW filter on device bond9 [ 367.967027][T17403] bond8: (slave bond9): making interface the new active one [ 367.967047][T17403] bond9: entered promiscuous mode [ 367.976809][T17403] bond8: (slave bond9): Enslaving as an active interface with an up link [ 368.118274][T17397] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2723'. [ 368.212801][T17400] netlink: 'syz.4.2723': attribute type 1 has an invalid length. [ 368.477384][T17436] IPVS: Error connecting to the multicast addr [ 368.820776][T17444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.868851][T17454] bond0: (slave ip6erspan0): making interface the new active one [ 368.880414][T17454] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 369.505462][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 370.303872][T17495] netlink: 'syz.0.2744': attribute type 4 has an invalid length. [ 370.535146][T17522] __nla_validate_parse: 9 callbacks suppressed [ 370.542360][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2748'. [ 370.587879][T17526] BUG: Bad page state in process syz.1.2750 pfn:7c21b [ 370.587935][T17526] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000000 pfn:0x7c21b [ 370.587970][T17526] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 370.588069][T17526] raw: 00fff00000000000 dead000000000040 ffff88801b191000 0000000000000000 [ 370.588089][T17526] raw: 0000000200000000 3fffffffffffffff 00000000ffffffff 0000000000000000 [ 370.588114][T17526] page dumped because: page_pool leak [ 370.588134][T17526] page_owner tracks the page as allocated [ 370.588143][T17526] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17526, tgid 17525 (syz.1.2750), ts 370587715424 [ 370.588172][T17526] post_alloc_hook+0x1f9/0x250 [ 370.588203][T17526] get_page_from_freelist+0x2209/0x2280 [ 370.588221][T17526] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 370.588241][T17526] __alloc_pages_noprof+0x10/0x100 [ 370.588260][T17526] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 370.588309][T17526] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 370.588412][T17526] page_pool_alloc_frag_netmem+0x563/0x9b0 [ 370.588437][T17526] skb_pp_cow_data+0xc2c/0x18e0 [ 370.588464][T17526] do_xdp_generic+0x78f/0x12f0 [ 370.588588][T17526] tun_get_user+0x24e7/0x44d0 [ 370.588733][T17526] tun_chr_write_iter+0x113/0x200 [ 370.588758][T17526] vfs_write+0x612/0xba0 [ 370.588790][T17526] ksys_write+0x150/0x270 [ 370.588813][T17526] do_syscall_64+0x166/0x520 [ 370.588837][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.588857][T17526] page last free pid 17525 tgid 17525 ts 370576047635 stack trace: [ 370.588872][T17526] register_dummy_stack+0x98/0x100 [ 370.588900][T17526] init_page_owner+0x2e/0x600 [ 370.588994][T17526] page_ext_init+0x511/0x550 [ 370.589043][T17526] mm_core_init+0x97/0xb0 [ 370.589092][T17526] Modules linked in: [ 370.589119][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.1.2750 Not tainted syzkaller #0 PREEMPT(full) [ 370.589141][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.589156][T17526] Call Trace: [ 370.589168][T17526] [ 370.589177][T17526] dump_stack_lvl+0xe8/0x150 [ 370.589207][T17526] bad_page+0x17f/0x1c0 [ 370.589232][T17526] __free_frozen_pages+0xd37/0xd90 [ 370.589271][T17526] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 370.589350][T17526] bpf_xdp_adjust_tail+0x1ce/0x210 [ 370.589433][T17526] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 370.589453][T17526] bpf_prog_run_generic_xdp+0x612/0x1560 [ 370.589504][T17526] do_xdp_generic+0xae1/0x12f0 [ 370.589526][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.589543][T17526] ? do_xdp_generic+0x6d9/0x12f0 [ 370.589572][T17526] ? __pfx_do_xdp_generic+0x10/0x10 [ 370.589631][T17526] ? tun_get_user+0x23ba/0x44d0 [ 370.589657][T17526] tun_get_user+0x24e7/0x44d0 [ 370.589704][T17526] ? aa_file_perm+0x4ed/0x15f0 [ 370.589759][T17526] ? __pfx_tun_get_user+0x10/0x10 [ 370.589787][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.589811][T17526] ? __pfx___futex_wait+0x10/0x10 [ 370.589857][T17526] ? ref_tracker_alloc+0x341/0x4b0 [ 370.589919][T17526] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 370.589949][T17526] ? lock_acquire+0x115/0x350 [ 370.589968][T17526] ? tun_get+0x1c/0x2f0 [ 370.589999][T17526] ? tun_get+0x1c/0x2f0 [ 370.590023][T17526] ? tun_get+0x1c/0x2f0 [ 370.590053][T17526] tun_chr_write_iter+0x113/0x200 [ 370.590082][T17526] vfs_write+0x612/0xba0 [ 370.590117][T17526] ? __pfx_vfs_write+0x10/0x10 [ 370.590155][T17526] ? __fget_files+0x2a/0x420 [ 370.590189][T17526] ksys_write+0x150/0x270 [ 370.590219][T17526] ? __pfx_ksys_write+0x10/0x10 [ 370.590259][T17526] do_syscall_64+0x166/0x520 [ 370.590283][T17526] ? trace_irq_disable+0x3b/0x140 [ 370.590301][T17526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.590321][T17526] ? clear_bhb_loop+0x70/0xc0 [ 370.590345][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.590364][T17526] RIP: 0033:0x7f7545f5e98e [ 370.590382][T17526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.590398][T17526] RSP: 002b:00007f7546dcefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.590418][T17526] RAX: ffffffffffffffda RBX: 00007f7546dcf6c0 RCX: 00007f7545f5e98e [ 370.590432][T17526] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 370.590445][T17526] RBP: 00007f7546035024 R08: 0000000000000000 R09: 0000000000000000 [ 370.590457][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.590469][T17526] R13: 00007f7546226038 R14: 00007f7546225fa0 R15: 00007fffb0c7a0a8 [ 370.590503][T17526] [ 370.590515][T17526] Disabling lock debugging due to kernel taint [ 370.590527][T17526] BUG: Bad page state in process syz.1.2750 pfn:73d41 [ 370.590541][T17526] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000035 pfn:0x73d41 [ 370.590561][T17526] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 370.590586][T17526] raw: 00fff00000000000 dead000000000040 ffff88801b191000 0000000000000000 [ 370.590613][T17526] raw: 0000000200000035 0000000000000001 00000000ffffffff 0000000000000000 [ 370.590625][T17526] page dumped because: page_pool leak [ 370.590635][T17526] page_owner tracks the page as allocated [ 370.590644][T17526] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17526, tgid 17525 (syz.1.2750), ts 370587697785 [ 370.590673][T17526] post_alloc_hook+0x1f9/0x250 [ 370.590698][T17526] get_page_from_freelist+0x2209/0x2280 [ 370.590717][T17526] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 370.590736][T17526] __alloc_pages_noprof+0x10/0x100 [ 370.590753][T17526] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 370.590778][T17526] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 370.590803][T17526] skb_pp_cow_data+0xc08/0x18e0 [ 370.590828][T17526] do_xdp_generic+0x78f/0x12f0 [ 370.590847][T17526] tun_get_user+0x24e7/0x44d0 [ 370.590870][T17526] tun_chr_write_iter+0x113/0x200 [ 370.590892][T17526] vfs_write+0x612/0xba0 [ 370.590914][T17526] ksys_write+0x150/0x270 [ 370.590936][T17526] do_syscall_64+0x166/0x520 [ 370.590959][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.591002][T17526] page last free pid 17525 tgid 17525 ts 370576055630 stack trace: [ 370.591019][T17526] register_dummy_stack+0x98/0x100 [ 370.591040][T17526] init_page_owner+0x2e/0x600 [ 370.591058][T17526] page_ext_init+0x511/0x550 [ 370.591080][T17526] mm_core_init+0x97/0xb0 [ 370.591097][T17526] Modules linked in: [ 370.591117][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.1.2750 Tainted: G B syzkaller #0 PREEMPT(full) [ 370.591142][T17526] Tainted: [B]=BAD_PAGE [ 370.591148][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.591158][T17526] Call Trace: [ 370.591164][T17526] [ 370.591172][T17526] dump_stack_lvl+0xe8/0x150 [ 370.591198][T17526] bad_page+0x17f/0x1c0 [ 370.591219][T17526] __free_frozen_pages+0xd37/0xd90 [ 370.591249][T17526] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 370.591279][T17526] bpf_xdp_adjust_tail+0x1ce/0x210 [ 370.591307][T17526] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 370.591323][T17526] bpf_prog_run_generic_xdp+0x612/0x1560 [ 370.591355][T17526] do_xdp_generic+0xae1/0x12f0 [ 370.591375][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.591392][T17526] ? do_xdp_generic+0x6d9/0x12f0 [ 370.591414][T17526] ? __pfx_do_xdp_generic+0x10/0x10 [ 370.591445][T17526] ? tun_get_user+0x23ba/0x44d0 [ 370.591467][T17526] tun_get_user+0x24e7/0x44d0 [ 370.591497][T17526] ? aa_file_perm+0x4ed/0x15f0 [ 370.591513][T17526] ? __pfx_tun_get_user+0x10/0x10 [ 370.591536][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.591554][T17526] ? __pfx___futex_wait+0x10/0x10 [ 370.591583][T17526] ? ref_tracker_alloc+0x341/0x4b0 [ 370.591621][T17526] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 370.591648][T17526] ? lock_acquire+0x115/0x350 [ 370.591665][T17526] ? tun_get+0x1c/0x2f0 [ 370.591691][T17526] ? tun_get+0x1c/0x2f0 [ 370.591712][T17526] ? tun_get+0x1c/0x2f0 [ 370.591735][T17526] tun_chr_write_iter+0x113/0x200 [ 370.591758][T17526] vfs_write+0x612/0xba0 [ 370.591784][T17526] ? __pfx_vfs_write+0x10/0x10 [ 370.591812][T17526] ? __fget_files+0x2a/0x420 [ 370.591837][T17526] ksys_write+0x150/0x270 [ 370.591862][T17526] ? __pfx_ksys_write+0x10/0x10 [ 370.591891][T17526] do_syscall_64+0x166/0x520 [ 370.591914][T17526] ? trace_irq_disable+0x3b/0x140 [ 370.591930][T17526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.591949][T17526] ? clear_bhb_loop+0x70/0xc0 [ 370.591969][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.591987][T17526] RIP: 0033:0x7f7545f5e98e [ 370.592003][T17526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.592019][T17526] RSP: 002b:00007f7546dcefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.592039][T17526] RAX: ffffffffffffffda RBX: 00007f7546dcf6c0 RCX: 00007f7545f5e98e [ 370.592053][T17526] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 370.592065][T17526] RBP: 00007f7546035024 R08: 0000000000000000 R09: 0000000000000000 [ 370.592077][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.592088][T17526] R13: 00007f7546226038 R14: 00007f7546225fa0 R15: 00007fffb0c7a0a8 [ 370.592109][T17526] [ 370.592121][T17526] BUG: Bad page state in process syz.1.2750 pfn:7d557 [ 370.592135][T17526] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7d557 [ 370.592156][T17526] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 370.592179][T17526] raw: 00fff00000000000 dead000000000040 ffff88801b191000 0000000000000000 [ 370.592197][T17526] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 370.592210][T17526] page dumped because: page_pool leak [ 370.592220][T17526] page_owner tracks the page as allocated [ 370.592230][T17526] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17526, tgid 17525 (syz.1.2750), ts 370587681793 [ 370.592259][T17526] post_alloc_hook+0x1f9/0x250 [ 370.592285][T17526] get_page_from_freelist+0x2209/0x2280 [ 370.592305][T17526] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 370.592324][T17526] __alloc_pages_noprof+0x10/0x100 [ 370.592342][T17526] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 370.592370][T17526] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 370.592395][T17526] skb_pp_cow_data+0xc08/0x18e0 [ 370.592421][T17526] do_xdp_generic+0x78f/0x12f0 [ 370.592441][T17526] tun_get_user+0x24e7/0x44d0 [ 370.592465][T17526] tun_chr_write_iter+0x113/0x200 [ 370.592489][T17526] vfs_write+0x612/0xba0 [ 370.592514][T17526] ksys_write+0x150/0x270 [ 370.592553][T17526] do_syscall_64+0x166/0x520 [ 370.592577][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.592605][T17526] page last free pid 17525 tgid 17525 ts 370576082902 stack trace: [ 370.592621][T17526] register_dummy_stack+0x98/0x100 [ 370.592641][T17526] init_page_owner+0x2e/0x600 [ 370.592659][T17526] page_ext_init+0x511/0x550 [ 370.592681][T17526] mm_core_init+0x97/0xb0 [ 370.592699][T17526] Modules linked in: [ 370.592719][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.1.2750 Tainted: G B syzkaller #0 PREEMPT(full) [ 370.592743][T17526] Tainted: [B]=BAD_PAGE [ 370.592750][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.592761][T17526] Call Trace: [ 370.592767][T17526] [ 370.592774][T17526] dump_stack_lvl+0xe8/0x150 [ 370.592799][T17526] bad_page+0x17f/0x1c0 [ 370.592820][T17526] __free_frozen_pages+0xd37/0xd90 [ 370.592849][T17526] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 370.592880][T17526] bpf_xdp_adjust_tail+0x1ce/0x210 [ 370.592909][T17526] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 370.592926][T17526] bpf_prog_run_generic_xdp+0x612/0x1560 [ 370.592959][T17526] do_xdp_generic+0xae1/0x12f0 [ 370.592979][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.592997][T17526] ? do_xdp_generic+0x6d9/0x12f0 [ 370.593019][T17526] ? __pfx_do_xdp_generic+0x10/0x10 [ 370.593053][T17526] ? tun_get_user+0x23ba/0x44d0 [ 370.593079][T17526] tun_get_user+0x24e7/0x44d0 [ 370.593112][T17526] ? aa_file_perm+0x4ed/0x15f0 [ 370.593130][T17526] ? __pfx_tun_get_user+0x10/0x10 [ 370.593155][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.593172][T17526] ? __pfx___futex_wait+0x10/0x10 [ 370.593199][T17526] ? ref_tracker_alloc+0x341/0x4b0 [ 370.593226][T17526] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 370.593251][T17526] ? lock_acquire+0x115/0x350 [ 370.593266][T17526] ? tun_get+0x1c/0x2f0 [ 370.593289][T17526] ? tun_get+0x1c/0x2f0 [ 370.593311][T17526] ? tun_get+0x1c/0x2f0 [ 370.593336][T17526] tun_chr_write_iter+0x113/0x200 [ 370.593358][T17526] vfs_write+0x612/0xba0 [ 370.593385][T17526] ? __pfx_vfs_write+0x10/0x10 [ 370.593414][T17526] ? __fget_files+0x2a/0x420 [ 370.593441][T17526] ksys_write+0x150/0x270 [ 370.593468][T17526] ? __pfx_ksys_write+0x10/0x10 [ 370.593498][T17526] do_syscall_64+0x166/0x520 [ 370.593520][T17526] ? trace_irq_disable+0x3b/0x140 [ 370.593537][T17526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.593555][T17526] ? clear_bhb_loop+0x70/0xc0 [ 370.593576][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.593594][T17526] RIP: 0033:0x7f7545f5e98e [ 370.593618][T17526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.593634][T17526] RSP: 002b:00007f7546dcefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.593654][T17526] RAX: ffffffffffffffda RBX: 00007f7546dcf6c0 RCX: 00007f7545f5e98e [ 370.593668][T17526] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 370.593680][T17526] RBP: 00007f7546035024 R08: 0000000000000000 R09: 0000000000000000 [ 370.593693][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.593704][T17526] R13: 00007f7546226038 R14: 00007f7546225fa0 R15: 00007fffb0c7a0a8 [ 370.593727][T17526] [ 370.593777][T17526] BUG: Bad page state in process syz.1.2750 pfn:679fd [ 370.593794][T17526] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x679fd [ 370.593813][T17526] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 370.593838][T17526] raw: 00fff00000000000 dead000000000040 ffff88801b191000 0000000000000000 [ 370.593857][T17526] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 370.593869][T17526] page dumped because: page_pool leak [ 370.593880][T17526] page_owner tracks the page as allocated [ 370.593889][T17526] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17526, tgid 17525 (syz.1.2750), ts 370587666306 [ 370.593917][T17526] post_alloc_hook+0x1f9/0x250 [ 370.593943][T17526] get_page_from_freelist+0x2209/0x2280 [ 370.593962][T17526] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 370.593981][T17526] __alloc_pages_noprof+0x10/0x100 [ 370.593999][T17526] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 370.594040][T17526] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 370.594066][T17526] skb_pp_cow_data+0xc08/0x18e0 [ 370.594093][T17526] do_xdp_generic+0x78f/0x12f0 [ 370.594112][T17526] tun_get_user+0x24e7/0x44d0 [ 370.594137][T17526] tun_chr_write_iter+0x113/0x200 [ 370.594161][T17526] vfs_write+0x612/0xba0 [ 370.594185][T17526] ksys_write+0x150/0x270 [ 370.594209][T17526] do_syscall_64+0x166/0x520 [ 370.594233][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.594253][T17526] page last free pid 17525 tgid 17525 ts 370576110014 stack trace: [ 370.594268][T17526] register_dummy_stack+0x98/0x100 [ 370.594288][T17526] init_page_owner+0x2e/0x600 [ 370.594306][T17526] page_ext_init+0x511/0x550 [ 370.594329][T17526] mm_core_init+0x97/0xb0 [ 370.594346][T17526] Modules linked in: [ 370.594366][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.1.2750 Tainted: G B syzkaller #0 PREEMPT(full) [ 370.594391][T17526] Tainted: [B]=BAD_PAGE [ 370.594397][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.594407][T17526] Call Trace: [ 370.594414][T17526] [ 370.594422][T17526] dump_stack_lvl+0xe8/0x150 [ 370.594447][T17526] bad_page+0x17f/0x1c0 [ 370.594469][T17526] __free_frozen_pages+0xd37/0xd90 [ 370.594500][T17526] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 370.594529][T17526] bpf_xdp_adjust_tail+0x1ce/0x210 [ 370.594557][T17526] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 370.594573][T17526] bpf_prog_run_generic_xdp+0x612/0x1560 [ 370.594614][T17526] do_xdp_generic+0xae1/0x12f0 [ 370.594634][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.594652][T17526] ? do_xdp_generic+0x6d9/0x12f0 [ 370.594675][T17526] ? __pfx_do_xdp_generic+0x10/0x10 [ 370.594708][T17526] ? tun_get_user+0x23ba/0x44d0 [ 370.594732][T17526] tun_get_user+0x24e7/0x44d0 [ 370.594766][T17526] ? aa_file_perm+0x4ed/0x15f0 [ 370.594784][T17526] ? __pfx_tun_get_user+0x10/0x10 [ 370.594809][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.594828][T17526] ? __pfx___futex_wait+0x10/0x10 [ 370.594858][T17526] ? ref_tracker_alloc+0x341/0x4b0 [ 370.594885][T17526] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 370.594913][T17526] ? lock_acquire+0x115/0x350 [ 370.594930][T17526] ? tun_get+0x1c/0x2f0 [ 370.594955][T17526] ? tun_get+0x1c/0x2f0 [ 370.594978][T17526] ? tun_get+0x1c/0x2f0 [ 370.595002][T17526] tun_chr_write_iter+0x113/0x200 [ 370.595026][T17526] vfs_write+0x612/0xba0 [ 370.595052][T17526] ? __pfx_vfs_write+0x10/0x10 [ 370.595080][T17526] ? __fget_files+0x2a/0x420 [ 370.595104][T17526] ksys_write+0x150/0x270 [ 370.595128][T17526] ? __pfx_ksys_write+0x10/0x10 [ 370.595159][T17526] do_syscall_64+0x166/0x520 [ 370.595181][T17526] ? trace_irq_disable+0x3b/0x140 [ 370.595198][T17526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.595216][T17526] ? clear_bhb_loop+0x70/0xc0 [ 370.595246][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.595264][T17526] RIP: 0033:0x7f7545f5e98e [ 370.595279][T17526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.595295][T17526] RSP: 002b:00007f7546dcefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.595313][T17526] RAX: ffffffffffffffda RBX: 00007f7546dcf6c0 RCX: 00007f7545f5e98e [ 370.595326][T17526] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 370.595338][T17526] RBP: 00007f7546035024 R08: 0000000000000000 R09: 0000000000000000 [ 370.595350][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.595361][T17526] R13: 00007f7546226038 R14: 00007f7546225fa0 R15: 00007fffb0c7a0a8 [ 370.595384][T17526] [ 370.595424][T17526] BUG: Bad page state in process syz.1.2750 pfn:7a0c9 [ 370.595439][T17526] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7a0c9 [ 370.595459][T17526] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 370.595484][T17526] raw: 00fff00000000000 dead000000000040 ffff88801b191000 0000000000000000 [ 370.595502][T17526] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 370.595515][T17526] page dumped because: page_pool leak [ 370.595525][T17526] page_owner tracks the page as allocated [ 370.595535][T17526] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17526, tgid 17525 (syz.1.2750), ts 370587650016 [ 370.595563][T17526] post_alloc_hook+0x1f9/0x250 [ 370.595589][T17526] get_page_from_freelist+0x2209/0x2280 [ 370.595616][T17526] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 370.595636][T17526] __alloc_pages_noprof+0x10/0x100 [ 370.595654][T17526] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 370.595682][T17526] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 370.595708][T17526] skb_pp_cow_data+0xc08/0x18e0 [ 370.595735][T17526] do_xdp_generic+0x78f/0x12f0 [ 370.595755][T17526] tun_get_user+0x24e7/0x44d0 [ 370.595780][T17526] tun_chr_write_iter+0x113/0x200 [ 370.595803][T17526] vfs_write+0x612/0xba0 [ 370.595827][T17526] ksys_write+0x150/0x270 [ 370.595852][T17526] do_syscall_64+0x166/0x520 [ 370.595877][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.595895][T17526] page last free pid 17525 tgid 17525 ts 370576137404 stack trace: [ 370.595910][T17526] register_dummy_stack+0x98/0x100 [ 370.595930][T17526] init_page_owner+0x2e/0x600 [ 370.595948][T17526] page_ext_init+0x511/0x550 [ 370.595972][T17526] mm_core_init+0x97/0xb0 [ 370.595989][T17526] Modules linked in: [ 370.596009][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.1.2750 Tainted: G B syzkaller #0 PREEMPT(full) [ 370.596034][T17526] Tainted: [B]=BAD_PAGE [ 370.596040][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.596050][T17526] Call Trace: [ 370.596057][T17526] [ 370.596064][T17526] dump_stack_lvl+0xe8/0x150 [ 370.596088][T17526] bad_page+0x17f/0x1c0 [ 370.596108][T17526] __free_frozen_pages+0xd37/0xd90 [ 370.596137][T17526] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 370.596166][T17526] bpf_xdp_adjust_tail+0x1ce/0x210 [ 370.596196][T17526] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 370.596212][T17526] bpf_prog_run_generic_xdp+0x612/0x1560 [ 370.596245][T17526] do_xdp_generic+0xae1/0x12f0 [ 370.596265][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.596283][T17526] ? do_xdp_generic+0x6d9/0x12f0 [ 370.596307][T17526] ? __pfx_do_xdp_generic+0x10/0x10 [ 370.596341][T17526] ? tun_get_user+0x23ba/0x44d0 [ 370.596365][T17526] tun_get_user+0x24e7/0x44d0 [ 370.596399][T17526] ? aa_file_perm+0x4ed/0x15f0 [ 370.596418][T17526] ? __pfx_tun_get_user+0x10/0x10 [ 370.596442][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.596461][T17526] ? __pfx___futex_wait+0x10/0x10 [ 370.596491][T17526] ? ref_tracker_alloc+0x341/0x4b0 [ 370.596519][T17526] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 370.596547][T17526] ? lock_acquire+0x115/0x350 [ 370.596564][T17526] ? tun_get+0x1c/0x2f0 [ 370.596589][T17526] ? tun_get+0x1c/0x2f0 [ 370.596619][T17526] ? tun_get+0x1c/0x2f0 [ 370.596643][T17526] tun_chr_write_iter+0x113/0x200 [ 370.596669][T17526] vfs_write+0x612/0xba0 [ 370.596697][T17526] ? __pfx_vfs_write+0x10/0x10 [ 370.596726][T17526] ? __fget_files+0x2a/0x420 [ 370.596753][T17526] ksys_write+0x150/0x270 [ 370.596778][T17526] ? __pfx_ksys_write+0x10/0x10 [ 370.596808][T17526] do_syscall_64+0x166/0x520 [ 370.596830][T17526] ? trace_irq_disable+0x3b/0x140 [ 370.596847][T17526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.596866][T17526] ? clear_bhb_loop+0x70/0xc0 [ 370.596886][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.596904][T17526] RIP: 0033:0x7f7545f5e98e [ 370.596919][T17526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.596935][T17526] RSP: 002b:00007f7546dcefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.596954][T17526] RAX: ffffffffffffffda RBX: 00007f7546dcf6c0 RCX: 00007f7545f5e98e [ 370.596968][T17526] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 370.596980][T17526] RBP: 00007f7546035024 R08: 0000000000000000 R09: 0000000000000000 [ 370.596992][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.597004][T17526] R13: 00007f7546226038 R14: 00007f7546225fa0 R15: 00007fffb0c7a0a8 [ 370.597027][T17526] [ 370.597038][T17526] BUG: Bad page state in process syz.1.2750 pfn:54df4 [ 370.597052][T17526] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2000001e9 pfn:0x54df4 [ 370.597072][T17526] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 370.597095][T17526] raw: 00fff00000000000 dead000000000040 ffff88801b191000 0000000000000000 [ 370.597114][T17526] raw: 00000002000001e9 0000000000000001 00000000ffffffff 0000000000000000 [ 370.597126][T17526] page dumped because: page_pool leak [ 370.597136][T17526] page_owner tracks the page as allocated [ 370.597145][T17526] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17526, tgid 17525 (syz.1.2750), ts 370587634480 [ 370.597174][T17526] post_alloc_hook+0x1f9/0x250 [ 370.597199][T17526] get_page_from_freelist+0x2209/0x2280 [ 370.597217][T17526] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 370.597235][T17526] __alloc_pages_noprof+0x10/0x100 [ 370.597252][T17526] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 370.597279][T17526] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 370.597303][T17526] skb_pp_cow_data+0xc08/0x18e0 [ 370.597329][T17526] do_xdp_generic+0x78f/0x12f0 [ 370.597348][T17526] tun_get_user+0x24e7/0x44d0 [ 370.597372][T17526] tun_chr_write_iter+0x113/0x200 [ 370.597396][T17526] vfs_write+0x612/0xba0 [ 370.597420][T17526] ksys_write+0x150/0x270 [ 370.597444][T17526] do_syscall_64+0x166/0x520 [ 370.597468][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.597488][T17526] page last free pid 17525 tgid 17525 ts 370576164860 stack trace: [ 370.597503][T17526] register_dummy_stack+0x98/0x100 [ 370.597523][T17526] init_page_owner+0x2e/0x600 [ 370.597540][T17526] page_ext_init+0x511/0x550 [ 370.597563][T17526] mm_core_init+0x97/0xb0 [ 370.597603][T17526] Modules linked in: [ 370.597623][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.1.2750 Tainted: G B syzkaller #0 PREEMPT(full) [ 370.597648][T17526] Tainted: [B]=BAD_PAGE [ 370.597655][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.597667][T17526] Call Trace: [ 370.597673][T17526] [ 370.597680][T17526] dump_stack_lvl+0xe8/0x150 [ 370.597706][T17526] bad_page+0x17f/0x1c0 [ 370.597728][T17526] __free_frozen_pages+0xd37/0xd90 [ 370.597759][T17526] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 370.597789][T17526] bpf_xdp_adjust_tail+0x1ce/0x210 [ 370.597818][T17526] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 370.597835][T17526] bpf_prog_run_generic_xdp+0x612/0x1560 [ 370.597868][T17526] do_xdp_generic+0xae1/0x12f0 [ 370.597888][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.597905][T17526] ? do_xdp_generic+0x6d9/0x12f0 [ 370.597929][T17526] ? __pfx_do_xdp_generic+0x10/0x10 [ 370.597963][T17526] ? tun_get_user+0x23ba/0x44d0 [ 370.597985][T17526] tun_get_user+0x24e7/0x44d0 [ 370.598018][T17526] ? aa_file_perm+0x4ed/0x15f0 [ 370.598037][T17526] ? __pfx_tun_get_user+0x10/0x10 [ 370.598061][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.598081][T17526] ? __pfx___futex_wait+0x10/0x10 [ 370.598110][T17526] ? ref_tracker_alloc+0x341/0x4b0 [ 370.598137][T17526] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 370.598165][T17526] ? lock_acquire+0x115/0x350 [ 370.598182][T17526] ? tun_get+0x1c/0x2f0 [ 370.598207][T17526] ? tun_get+0x1c/0x2f0 [ 370.598229][T17526] ? tun_get+0x1c/0x2f0 [ 370.598254][T17526] tun_chr_write_iter+0x113/0x200 [ 370.598279][T17526] vfs_write+0x612/0xba0 [ 370.598304][T17526] ? __pfx_vfs_write+0x10/0x10 [ 370.598331][T17526] ? __fget_files+0x2a/0x420 [ 370.598356][T17526] ksys_write+0x150/0x270 [ 370.598382][T17526] ? __pfx_ksys_write+0x10/0x10 [ 370.598412][T17526] do_syscall_64+0x166/0x520 [ 370.598435][T17526] ? trace_irq_disable+0x3b/0x140 [ 370.598452][T17526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.598470][T17526] ? clear_bhb_loop+0x70/0xc0 [ 370.598490][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.598508][T17526] RIP: 0033:0x7f7545f5e98e [ 370.598523][T17526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.598539][T17526] RSP: 002b:00007f7546dcefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.598558][T17526] RAX: ffffffffffffffda RBX: 00007f7546dcf6c0 RCX: 00007f7545f5e98e [ 370.598572][T17526] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 370.598585][T17526] RBP: 00007f7546035024 R08: 0000000000000000 R09: 0000000000000000 [ 370.598604][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.598616][T17526] R13: 00007f7546226038 R14: 00007f7546225fa0 R15: 00007fffb0c7a0a8 [ 370.598639][T17526] [ 370.598649][T17526] BUG: Bad page state in process syz.1.2750 pfn:568cf [ 370.598663][T17526] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x568cf [ 370.598683][T17526] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 370.598707][T17526] raw: 00fff00000000000 dead000000000040 ffff88801b191000 0000000000000000 [ 370.598725][T17526] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 370.598737][T17526] page dumped because: page_pool leak [ 370.598748][T17526] page_owner tracks the page as allocated [ 370.598757][T17526] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17526, tgid 17525 (syz.1.2750), ts 370587619115 [ 370.598787][T17526] post_alloc_hook+0x1f9/0x250 [ 370.598813][T17526] get_page_from_freelist+0x2209/0x2280 [ 370.598831][T17526] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 370.598850][T17526] __alloc_pages_noprof+0x10/0x100 [ 370.598868][T17526] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 370.598896][T17526] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 370.598921][T17526] skb_pp_cow_data+0xc08/0x18e0 [ 370.598946][T17526] do_xdp_generic+0x78f/0x12f0 [ 370.598966][T17526] tun_get_user+0x24e7/0x44d0 [ 370.598991][T17526] tun_chr_write_iter+0x113/0x200 [ 370.599015][T17526] vfs_write+0x612/0xba0 [ 370.599039][T17526] ksys_write+0x150/0x270 [ 370.599063][T17526] do_syscall_64+0x166/0x520 [ 370.599087][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.599105][T17526] page last free pid 17525 tgid 17525 ts 370576192599 stack trace: [ 370.599121][T17526] register_dummy_stack+0x98/0x100 [ 370.599141][T17526] init_page_owner+0x2e/0x600 [ 370.599159][T17526] page_ext_init+0x511/0x550 [ 370.599181][T17526] mm_core_init+0x97/0xb0 [ 370.599198][T17526] Modules linked in: [ 370.599218][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.1.2750 Tainted: G B syzkaller #0 PREEMPT(full) [ 370.599243][T17526] Tainted: [B]=BAD_PAGE [ 370.599249][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.599259][T17526] Call Trace: [ 370.599266][T17526] [ 370.599272][T17526] dump_stack_lvl+0xe8/0x150 [ 370.599297][T17526] bad_page+0x17f/0x1c0 [ 370.599319][T17526] __free_frozen_pages+0xd37/0xd90 [ 370.599348][T17526] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 370.599377][T17526] bpf_xdp_adjust_tail+0x1ce/0x210 [ 370.599406][T17526] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 370.599421][T17526] bpf_prog_run_generic_xdp+0x612/0x1560 [ 370.599453][T17526] do_xdp_generic+0xae1/0x12f0 [ 370.599474][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.599490][T17526] ? do_xdp_generic+0x6d9/0x12f0 [ 370.599513][T17526] ? __pfx_do_xdp_generic+0x10/0x10 [ 370.599547][T17526] ? tun_get_user+0x23ba/0x44d0 [ 370.599570][T17526] tun_get_user+0x24e7/0x44d0 [ 370.599608][T17526] ? aa_file_perm+0x4ed/0x15f0 [ 370.599626][T17526] ? __pfx_tun_get_user+0x10/0x10 [ 370.599649][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.599668][T17526] ? __pfx___futex_wait+0x10/0x10 [ 370.599695][T17526] ? ref_tracker_alloc+0x341/0x4b0 [ 370.599721][T17526] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 370.599747][T17526] ? lock_acquire+0x115/0x350 [ 370.599763][T17526] ? tun_get+0x1c/0x2f0 [ 370.599788][T17526] ? tun_get+0x1c/0x2f0 [ 370.599808][T17526] ? tun_get+0x1c/0x2f0 [ 370.599831][T17526] tun_chr_write_iter+0x113/0x200 [ 370.599853][T17526] vfs_write+0x612/0xba0 [ 370.599879][T17526] ? __pfx_vfs_write+0x10/0x10 [ 370.599908][T17526] ? __fget_files+0x2a/0x420 [ 370.599933][T17526] ksys_write+0x150/0x270 [ 370.599959][T17526] ? __pfx_ksys_write+0x10/0x10 [ 370.599989][T17526] do_syscall_64+0x166/0x520 [ 370.600012][T17526] ? trace_irq_disable+0x3b/0x140 [ 370.600029][T17526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.600048][T17526] ? clear_bhb_loop+0x70/0xc0 [ 370.600065][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.600081][T17526] RIP: 0033:0x7f7545f5e98e [ 370.600096][T17526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.600111][T17526] RSP: 002b:00007f7546dcefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.600131][T17526] RAX: ffffffffffffffda RBX: 00007f7546dcf6c0 RCX: 00007f7545f5e98e [ 370.600145][T17526] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 370.600157][T17526] RBP: 00007f7546035024 R08: 0000000000000000 R09: 0000000000000000 [ 370.600169][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.600180][T17526] R13: 00007f7546226038 R14: 00007f7546225fa0 R15: 00007fffb0c7a0a8 [ 370.600202][T17526] [ 370.600214][T17526] BUG: Bad page state in process syz.1.2750 pfn:56214 [ 370.600229][T17526] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888056214700 pfn:0x56214 [ 370.600248][T17526] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 370.600273][T17526] raw: 00fff00000000000 dead000000000040 ffff88801b191000 0000000000000000 [ 370.600291][T17526] raw: ffff888056214700 0000000000000001 00000000ffffffff 0000000000000000 [ 370.600303][T17526] page dumped because: page_pool leak [ 370.600314][T17526] page_owner tracks the page as allocated [ 370.600322][T17526] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17526, tgid 17525 (syz.1.2750), ts 370587593333 [ 370.600350][T17526] post_alloc_hook+0x1f9/0x250 [ 370.600376][T17526] get_page_from_freelist+0x2209/0x2280 [ 370.600394][T17526] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 370.600411][T17526] __alloc_pages_noprof+0x10/0x100 [ 370.600428][T17526] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 370.600454][T17526] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 370.600478][T17526] skb_pp_cow_data+0xc08/0x18e0 [ 370.600505][T17526] do_xdp_generic+0x78f/0x12f0 [ 370.600525][T17526] tun_get_user+0x24e7/0x44d0 [ 370.600548][T17526] tun_chr_write_iter+0x113/0x200 [ 370.600570][T17526] vfs_write+0x612/0xba0 [ 370.600590][T17526] ksys_write+0x150/0x270 [ 370.600619][T17526] do_syscall_64+0x166/0x520 [ 370.600643][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.600659][T17526] page last free pid 17525 tgid 17525 ts 370576219666 stack trace: [ 370.600674][T17526] register_dummy_stack+0x98/0x100 [ 370.600692][T17526] init_page_owner+0x2e/0x600 [ 370.600710][T17526] page_ext_init+0x511/0x550 [ 370.600731][T17526] mm_core_init+0x97/0xb0 [ 370.600749][T17526] Modules linked in: [ 370.600767][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.1.2750 Tainted: G B syzkaller #0 PREEMPT(full) [ 370.600791][T17526] Tainted: [B]=BAD_PAGE [ 370.600797][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.600806][T17526] Call Trace: [ 370.600812][T17526] [ 370.600818][T17526] dump_stack_lvl+0xe8/0x150 [ 370.600840][T17526] bad_page+0x17f/0x1c0 [ 370.600860][T17526] __free_frozen_pages+0xd37/0xd90 [ 370.600884][T17526] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 370.600912][T17526] bpf_xdp_adjust_tail+0x1ce/0x210 [ 370.600938][T17526] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 370.600952][T17526] bpf_prog_run_generic_xdp+0x612/0x1560 [ 370.600983][T17526] do_xdp_generic+0xae1/0x12f0 [ 370.601003][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.601020][T17526] ? do_xdp_generic+0x6d9/0x12f0 [ 370.601041][T17526] ? __pfx_do_xdp_generic+0x10/0x10 [ 370.601073][T17526] ? tun_get_user+0x23ba/0x44d0 [ 370.601094][T17526] tun_get_user+0x24e7/0x44d0 [ 370.601126][T17526] ? aa_file_perm+0x4ed/0x15f0 [ 370.601145][T17526] ? __pfx_tun_get_user+0x10/0x10 [ 370.601168][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.601188][T17526] ? __pfx___futex_wait+0x10/0x10 [ 370.601216][T17526] ? ref_tracker_alloc+0x341/0x4b0 [ 370.601241][T17526] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 370.601269][T17526] ? lock_acquire+0x115/0x350 [ 370.601286][T17526] ? tun_get+0x1c/0x2f0 [ 370.601311][T17526] ? tun_get+0x1c/0x2f0 [ 370.601333][T17526] ? tun_get+0x1c/0x2f0 [ 370.601355][T17526] tun_chr_write_iter+0x113/0x200 [ 370.601377][T17526] vfs_write+0x612/0xba0 [ 370.601404][T17526] ? __pfx_vfs_write+0x10/0x10 [ 370.601433][T17526] ? __fget_files+0x2a/0x420 [ 370.601459][T17526] ksys_write+0x150/0x270 [ 370.601484][T17526] ? __pfx_ksys_write+0x10/0x10 [ 370.601513][T17526] do_syscall_64+0x166/0x520 [ 370.601534][T17526] ? trace_irq_disable+0x3b/0x140 [ 370.601550][T17526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.601567][T17526] ? clear_bhb_loop+0x70/0xc0 [ 370.601587][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.601612][T17526] RIP: 0033:0x7f7545f5e98e [ 370.601627][T17526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.601641][T17526] RSP: 002b:00007f7546dcefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.601660][T17526] RAX: ffffffffffffffda RBX: 00007f7546dcf6c0 RCX: 00007f7545f5e98e [ 370.601673][T17526] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 370.601685][T17526] RBP: 00007f7546035024 R08: 0000000000000000 R09: 0000000000000000 [ 370.601696][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.601707][T17526] R13: 00007f7546226038 R14: 00007f7546225fa0 R15: 00007fffb0c7a0a8 [ 370.601729][T17526] [ 370.601741][T17526] BUG: Bad page state in process syz.1.2750 pfn:67145 [ 370.601755][T17526] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2000001e2 pfn:0x67145 [ 370.601774][T17526] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 370.601797][T17526] raw: 00fff00000000000 dead000000000040 ffff88801b191000 0000000000000000 [ 370.601814][T17526] raw: 00000002000001e2 0000000000000001 00000000ffffffff 0000000000000000 [ 370.601825][T17526] page dumped because: page_pool leak [ 370.601836][T17526] page_owner tracks the page as allocated [ 370.601844][T17526] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17526, tgid 17525 (syz.1.2750), ts 370587577332 [ 370.601871][T17526] post_alloc_hook+0x1f9/0x250 [ 370.601895][T17526] get_page_from_freelist+0x2209/0x2280 [ 370.601912][T17526] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 370.601931][T17526] __alloc_pages_noprof+0x10/0x100 [ 370.601948][T17526] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 370.601974][T17526] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 370.601998][T17526] skb_pp_cow_data+0xc08/0x18e0 [ 370.602023][T17526] do_xdp_generic+0x78f/0x12f0 [ 370.602042][T17526] tun_get_user+0x24e7/0x44d0 [ 370.602065][T17526] tun_chr_write_iter+0x113/0x200 [ 370.602087][T17526] vfs_write+0x612/0xba0 [ 370.602109][T17526] ksys_write+0x150/0x270 [ 370.602131][T17526] do_syscall_64+0x166/0x520 [ 370.602153][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.602172][T17526] page last free pid 17525 tgid 17525 ts 370576246764 stack trace: [ 370.602187][T17526] register_dummy_stack+0x98/0x100 [ 370.602207][T17526] init_page_owner+0x2e/0x600 [ 370.602225][T17526] page_ext_init+0x511/0x550 [ 370.602246][T17526] mm_core_init+0x97/0xb0 [ 370.602263][T17526] Modules linked in: [ 370.602282][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.1.2750 Tainted: G B syzkaller #0 PREEMPT(full) [ 370.602307][T17526] Tainted: [B]=BAD_PAGE [ 370.602313][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.602324][T17526] Call Trace: [ 370.602330][T17526] [ 370.602337][T17526] dump_stack_lvl+0xe8/0x150 [ 370.602362][T17526] bad_page+0x17f/0x1c0 [ 370.602383][T17526] __free_frozen_pages+0xd37/0xd90 [ 370.602412][T17526] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 370.602440][T17526] bpf_xdp_adjust_tail+0x1ce/0x210 [ 370.602467][T17526] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 370.602482][T17526] bpf_prog_run_generic_xdp+0x612/0x1560 [ 370.602514][T17526] do_xdp_generic+0xae1/0x12f0 [ 370.602576][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.602593][T17526] ? do_xdp_generic+0x6d9/0x12f0 [ 370.602622][T17526] ? __pfx_do_xdp_generic+0x10/0x10 [ 370.602655][T17526] ? tun_get_user+0x23ba/0x44d0 [ 370.602676][T17526] tun_get_user+0x24e7/0x44d0 [ 370.602709][T17526] ? aa_file_perm+0x4ed/0x15f0 [ 370.602733][T17526] ? __pfx_tun_get_user+0x10/0x10 [ 370.602757][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.602777][T17526] ? __pfx___futex_wait+0x10/0x10 [ 370.602806][T17526] ? ref_tracker_alloc+0x341/0x4b0 [ 370.602833][T17526] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 370.602860][T17526] ? lock_acquire+0x115/0x350 [ 370.602875][T17526] ? tun_get+0x1c/0x2f0 [ 370.602899][T17526] ? tun_get+0x1c/0x2f0 [ 370.602919][T17526] ? tun_get+0x1c/0x2f0 [ 370.602942][T17526] tun_chr_write_iter+0x113/0x200 [ 370.602965][T17526] vfs_write+0x612/0xba0 [ 370.602989][T17526] ? __pfx_vfs_write+0x10/0x10 [ 370.603013][T17526] ? __fget_files+0x2a/0x420 [ 370.603035][T17526] ksys_write+0x150/0x270 [ 370.603058][T17526] ? __pfx_ksys_write+0x10/0x10 [ 370.603084][T17526] do_syscall_64+0x166/0x520 [ 370.603105][T17526] ? trace_irq_disable+0x3b/0x140 [ 370.603120][T17526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.603137][T17526] ? clear_bhb_loop+0x70/0xc0 [ 370.603155][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.603172][T17526] RIP: 0033:0x7f7545f5e98e [ 370.603186][T17526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.603201][T17526] RSP: 002b:00007f7546dcefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.603219][T17526] RAX: ffffffffffffffda RBX: 00007f7546dcf6c0 RCX: 00007f7545f5e98e [ 370.603233][T17526] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 370.603245][T17526] RBP: 00007f7546035024 R08: 0000000000000000 R09: 0000000000000000 [ 370.603256][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.603266][T17526] R13: 00007f7546226038 R14: 00007f7546225fa0 R15: 00007fffb0c7a0a8 [ 370.603286][T17526] [ 370.603298][T17526] BUG: Bad page state in process syz.1.2750 pfn:7f59f [ 370.603313][T17526] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2000001e7 pfn:0x7f59f [ 370.603331][T17526] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 370.603355][T17526] raw: 00fff00000000000 dead000000000040 ffff88801b191000 0000000000000000 [ 370.603372][T17526] raw: 00000002000001e7 0000000000000001 00000000ffffffff 0000000000000000 [ 370.603384][T17526] page dumped because: page_pool leak [ 370.603395][T17526] page_owner tracks the page as allocated [ 370.603403][T17526] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17526, tgid 17525 (syz.1.2750), ts 370587561171 [ 370.603428][T17526] post_alloc_hook+0x1f9/0x250 [ 370.603453][T17526] get_page_from_freelist+0x2209/0x2280 [ 370.603472][T17526] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 370.603490][T17526] __alloc_pages_noprof+0x10/0x100 [ 370.603507][T17526] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 370.603534][T17526] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 370.603559][T17526] skb_pp_cow_data+0xc08/0x18e0 [ 370.603585][T17526] do_xdp_generic+0x78f/0x12f0 [ 370.603615][T17526] tun_get_user+0x24e7/0x44d0 [ 370.603638][T17526] tun_chr_write_iter+0x113/0x200 [ 370.603659][T17526] vfs_write+0x612/0xba0 [ 370.603681][T17526] ksys_write+0x150/0x270 [ 370.603704][T17526] do_syscall_64+0x166/0x520 [ 370.603727][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.603745][T17526] page last free pid 17525 tgid 17525 ts 370576274444 stack trace: [ 370.603759][T17526] register_dummy_stack+0x98/0x100 [ 370.603778][T17526] init_page_owner+0x2e/0x600 [ 370.603796][T17526] page_ext_init+0x511/0x550 [ 370.603817][T17526] mm_core_init+0x97/0xb0 [ 370.603834][T17526] Modules linked in: [ 370.603854][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.1.2750 Tainted: G B syzkaller #0 PREEMPT(full) [ 370.603877][T17526] Tainted: [B]=BAD_PAGE [ 370.603883][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.603892][T17526] Call Trace: [ 370.603898][T17526] [ 370.603905][T17526] dump_stack_lvl+0xe8/0x150 [ 370.603928][T17526] bad_page+0x17f/0x1c0 [ 370.603947][T17526] __free_frozen_pages+0xd37/0xd90 [ 370.603974][T17526] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 370.604003][T17526] bpf_xdp_adjust_tail+0x1ce/0x210 [ 370.604029][T17526] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 370.604045][T17526] bpf_prog_run_generic_xdp+0x612/0x1560 [ 370.604076][T17526] do_xdp_generic+0xae1/0x12f0 [ 370.604095][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.604110][T17526] ? do_xdp_generic+0x6d9/0x12f0 [ 370.604131][T17526] ? __pfx_do_xdp_generic+0x10/0x10 [ 370.604164][T17526] ? tun_get_user+0x23ba/0x44d0 [ 370.604185][T17526] tun_get_user+0x24e7/0x44d0 [ 370.604217][T17526] ? aa_file_perm+0x4ed/0x15f0 [ 370.604235][T17526] ? __pfx_tun_get_user+0x10/0x10 [ 370.604256][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.604273][T17526] ? __pfx___futex_wait+0x10/0x10 [ 370.604298][T17526] ? ref_tracker_alloc+0x341/0x4b0 [ 370.604322][T17526] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 370.604347][T17526] ? lock_acquire+0x115/0x350 [ 370.604363][T17526] ? tun_get+0x1c/0x2f0 [ 370.604386][T17526] ? tun_get+0x1c/0x2f0 [ 370.604406][T17526] ? tun_get+0x1c/0x2f0 [ 370.604428][T17526] tun_chr_write_iter+0x113/0x200 [ 370.604452][T17526] vfs_write+0x612/0xba0 [ 370.604477][T17526] ? __pfx_vfs_write+0x10/0x10 [ 370.604504][T17526] ? __fget_files+0x2a/0x420 [ 370.604529][T17526] ksys_write+0x150/0x270 [ 370.604554][T17526] ? __pfx_ksys_write+0x10/0x10 [ 370.604581][T17526] do_syscall_64+0x166/0x520 [ 370.604613][T17526] ? trace_irq_disable+0x3b/0x140 [ 370.604628][T17526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.604644][T17526] ? clear_bhb_loop+0x70/0xc0 [ 370.604663][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.604680][T17526] RIP: 0033:0x7f7545f5e98e [ 370.604696][T17526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.604710][T17526] RSP: 002b:00007f7546dcefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.604727][T17526] RAX: ffffffffffffffda RBX: 00007f7546dcf6c0 RCX: 00007f7545f5e98e [ 370.604741][T17526] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 370.604752][T17526] RBP: 00007f7546035024 R08: 0000000000000000 R09: 0000000000000000 [ 370.604761][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.604772][T17526] R13: 00007f7546226038 R14: 00007f7546225fa0 R15: 00007fffb0c7a0a8 [ 370.604793][T17526] [ 370.604805][T17526] BUG: Bad page state in process syz.1.2750 pfn:575d2 [ 370.604820][T17526] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2000001eb pfn:0x575d2 [ 370.604839][T17526] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 370.604862][T17526] raw: 00fff00000000000 dead000000000040 ffff88801b191000 0000000000000000 [ 370.604879][T17526] raw: 00000002000001eb 0000000000000001 00000000ffffffff 0000000000000000 [ 370.604891][T17526] page dumped because: page_pool leak [ 370.604902][T17526] page_owner tracks the page as allocated [ 370.604911][T17526] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17526, tgid 17525 (syz.1.2750), ts 370587544412 [ 370.604939][T17526] post_alloc_hook+0x1f9/0x250 [ 370.604964][T17526] get_page_from_freelist+0x2209/0x2280 [ 370.604983][T17526] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 370.605000][T17526] __alloc_pages_noprof+0x10/0x100 [ 370.605017][T17526] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 370.605044][T17526] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 370.605068][T17526] skb_pp_cow_data+0xc08/0x18e0 [ 370.605093][T17526] do_xdp_generic+0x78f/0x12f0 [ 370.605112][T17526] tun_get_user+0x24e7/0x44d0 [ 370.605135][T17526] tun_chr_write_iter+0x113/0x200 [ 370.605157][T17526] vfs_write+0x612/0xba0 [ 370.605180][T17526] ksys_write+0x150/0x270 [ 370.605204][T17526] do_syscall_64+0x166/0x520 [ 370.605226][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.605275][T17526] page last free pid 17525 tgid 17525 ts 370576301404 stack trace: [ 370.605290][T17526] register_dummy_stack+0x98/0x100 [ 370.605310][T17526] init_page_owner+0x2e/0x600 [ 370.605326][T17526] page_ext_init+0x511/0x550 [ 370.605347][T17526] mm_core_init+0x97/0xb0 [ 370.605364][T17526] Modules linked in: [ 370.605383][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.1.2750 Tainted: G B syzkaller #0 PREEMPT(full) [ 370.605406][T17526] Tainted: [B]=BAD_PAGE [ 370.605413][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.605422][T17526] Call Trace: [ 370.605429][T17526] [ 370.605436][T17526] dump_stack_lvl+0xe8/0x150 [ 370.605462][T17526] bad_page+0x17f/0x1c0 [ 370.605485][T17526] __free_frozen_pages+0xd37/0xd90 [ 370.605515][T17526] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 370.605542][T17526] bpf_xdp_adjust_tail+0x1ce/0x210 [ 370.605567][T17526] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 370.605581][T17526] bpf_prog_run_generic_xdp+0x612/0x1560 [ 370.605623][T17526] do_xdp_generic+0xae1/0x12f0 [ 370.605643][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.605659][T17526] ? do_xdp_generic+0x6d9/0x12f0 [ 370.605682][T17526] ? __pfx_do_xdp_generic+0x10/0x10 [ 370.605714][T17526] ? tun_get_user+0x23ba/0x44d0 [ 370.605738][T17526] tun_get_user+0x24e7/0x44d0 [ 370.605771][T17526] ? aa_file_perm+0x4ed/0x15f0 [ 370.605789][T17526] ? __pfx_tun_get_user+0x10/0x10 [ 370.605814][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.605833][T17526] ? __pfx___futex_wait+0x10/0x10 [ 370.605860][T17526] ? ref_tracker_alloc+0x341/0x4b0 [ 370.605883][T17526] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 370.605909][T17526] ? lock_acquire+0x115/0x350 [ 370.605925][T17526] ? tun_get+0x1c/0x2f0 [ 370.605949][T17526] ? tun_get+0x1c/0x2f0 [ 370.605971][T17526] ? tun_get+0x1c/0x2f0 [ 370.605993][T17526] tun_chr_write_iter+0x113/0x200 [ 370.606016][T17526] vfs_write+0x612/0xba0 [ 370.606037][T17526] ? __pfx_vfs_write+0x10/0x10 [ 370.606062][T17526] ? __fget_files+0x2a/0x420 [ 370.606088][T17526] ksys_write+0x150/0x270 [ 370.606112][T17526] ? __pfx_ksys_write+0x10/0x10 [ 370.606141][T17526] do_syscall_64+0x166/0x520 [ 370.606163][T17526] ? trace_irq_disable+0x3b/0x140 [ 370.606179][T17526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.606197][T17526] ? clear_bhb_loop+0x70/0xc0 [ 370.606217][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.606234][T17526] RIP: 0033:0x7f7545f5e98e [ 370.606249][T17526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.606265][T17526] RSP: 002b:00007f7546dcefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.606284][T17526] RAX: ffffffffffffffda RBX: 00007f7546dcf6c0 RCX: 00007f7545f5e98e [ 370.606298][T17526] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 370.606310][T17526] RBP: 00007f7546035024 R08: 0000000000000000 R09: 0000000000000000 [ 370.606321][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.606332][T17526] R13: 00007f7546226038 R14: 00007f7546225fa0 R15: 00007fffb0c7a0a8 [ 370.606353][T17526] [ 370.606376][T17526] BUG: Bad page state in process syz.1.2750 pfn:3526b [ 370.606387][T17526] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2000001ec pfn:0x3526b [ 370.606404][T17526] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 370.606425][T17526] raw: 00fff00000000000 dead000000000040 ffff88801b191000 0000000000000000 [ 370.606439][T17526] raw: 00000002000001ec 0000000000000001 00000000ffffffff 0000000000000000 [ 370.606449][T17526] page dumped because: page_pool leak [ 370.606456][T17526] page_owner tracks the page as allocated [ 370.606462][T17526] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17526, tgid 17525 (syz.1.2750), ts 370587527363 [ 370.606487][T17526] post_alloc_hook+0x1f9/0x250 [ 370.606509][T17526] get_page_from_freelist+0x2209/0x2280 [ 370.606526][T17526] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 370.606541][T17526] __alloc_pages_noprof+0x10/0x100 [ 370.606556][T17526] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 370.606581][T17526] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 370.606610][T17526] skb_pp_cow_data+0xc08/0x18e0 [ 370.606633][T17526] do_xdp_generic+0x78f/0x12f0 [ 370.606649][T17526] tun_get_user+0x24e7/0x44d0 [ 370.606670][T17526] tun_chr_write_iter+0x113/0x200 [ 370.606691][T17526] vfs_write+0x612/0xba0 [ 370.606712][T17526] ksys_write+0x150/0x270 [ 370.606733][T17526] do_syscall_64+0x166/0x520 [ 370.606753][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.606770][T17526] page last free pid 17525 tgid 17525 ts 370576328610 stack trace: [ 370.606782][T17526] register_dummy_stack+0x98/0x100 [ 370.606800][T17526] init_page_owner+0x2e/0x600 [ 370.606815][T17526] page_ext_init+0x511/0x550 [ 370.606833][T17526] mm_core_init+0x97/0xb0 [ 370.606848][T17526] Modules linked in: [ 370.606861][T17526] CPU: 1 UID: 0 PID: 17526 Comm: syz.1.2750 Tainted: G B syzkaller #0 PREEMPT(full) [ 370.606885][T17526] Tainted: [B]=BAD_PAGE [ 370.606891][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.606901][T17526] Call Trace: [ 370.606907][T17526] [ 370.606914][T17526] dump_stack_lvl+0xe8/0x150 [ 370.606937][T17526] bad_page+0x17f/0x1c0 [ 370.606957][T17526] __free_frozen_pages+0xd37/0xd90 [ 370.606987][T17526] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 370.607017][T17526] bpf_xdp_adjust_tail+0x1ce/0x210 [ 370.607045][T17526] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 370.607061][T17526] bpf_prog_run_generic_xdp+0x612/0x1560 [ 370.607093][T17526] do_xdp_generic+0xae1/0x12f0 [ 370.607112][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.607128][T17526] ? do_xdp_generic+0x6d9/0x12f0 [ 370.607150][T17526] ? __pfx_do_xdp_generic+0x10/0x10 [ 370.607183][T17526] ? tun_get_user+0x23ba/0x44d0 [ 370.607206][T17526] tun_get_user+0x24e7/0x44d0 [ 370.607239][T17526] ? aa_file_perm+0x4ed/0x15f0 [ 370.607256][T17526] ? __pfx_tun_get_user+0x10/0x10 [ 370.607280][T17526] ? __lock_acquire+0x6df/0x2e50 [ 370.607298][T17526] ? __pfx___futex_wait+0x10/0x10 [ 370.607326][T17526] ? ref_tracker_alloc+0x341/0x4b0 [ 370.607353][T17526] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 370.607379][T17526] ? lock_acquire+0x115/0x350 [ 370.607396][T17526] ? tun_get+0x1c/0x2f0 [ 370.607420][T17526] ? tun_get+0x1c/0x2f0 [ 370.607442][T17526] ? tun_get+0x1c/0x2f0 [ 370.607466][T17526] tun_chr_write_iter+0x113/0x200 [ 370.607489][T17526] vfs_write+0x612/0xba0 [ 370.607517][T17526] ? __pfx_vfs_write+0x10/0x10 [ 370.607545][T17526] ? __fget_files+0x2a/0x420 [ 370.607570][T17526] ksys_write+0x150/0x270 [ 370.607600][T17526] ? __pfx_ksys_write+0x10/0x10 [ 370.607629][T17526] do_syscall_64+0x166/0x520 [ 370.607650][T17526] ? trace_irq_disable+0x3b/0x140 [ 370.607666][T17526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.607684][T17526] ? clear_bhb_loop+0x70/0xc0 [ 370.607704][T17526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.607722][T17526] RIP: 0033:0x7f7545f5e98e [ 370.607735][T17526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.607749][T17526] RSP: 002b:00007f7546dcefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.607766][T17526] RAX: ffffffffffffffda RBX: 00007f7546dcf6c0 RCX: 00007f7545f5e98e [ 370.607780][T17526] RDX: 000000000000fdef RSI: 00002000000001c0 RDI: 00000000000000c8 [ 370.607792][T17526] RBP: 00007f7546035024 R08: 0000000000000000 R09: 0000000000000000 [ 370.607803][T17526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.607814][T17526] R13: 00007f7546226038 R14: 00007f7546225fa0 R15: 00007fffb0c7a0a8 [ 370.607836][T17526] [ 370.685832][T17526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2750'. [ 378.477060][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.477130][ T1314] ieee802154 phy1 wpan1: encryption failed: -22