last executing test programs: 5.373024308s ago: executing program 3 (id=355): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)={0x46c, 0x3f4, 0x4, 0x70bd2b, 0x25dfdbfe, {0x4, 0x1, 0x22, [0x5, 0xadbf, 0x1, 0x8, 0x7, 0x9, 0x0, 0x10, 0xffffffff, 0x63, 0x8, 0x8, 0x800, 0x2, 0x0, 0x1, 0x2, 0x2, 0x8, 0x1ab9, 0x9, 0x7, 0x6, 0xe, 0x7, 0x6f, 0xffff, 0x9, 0x400, 0xb2d, 0x0, 0x7, 0x6, 0x1ff, 0x46d, 0x9, 0x2, 0x1, 0x8, 0xfffffffd, 0x3, 0x7ff, 0x9, 0xfffffff7, 0x2, 0x7ff, 0x4, 0x5, 0x3, 0x7, 0xa, 0x10, 0x1ced4dfe, 0x0, 0x6, 0x5, 0x4d669ad9, 0x6, 0x8, 0x7, 0x6, 0xce4, 0xf, 0xcb1fb5b], [0x0, 0x9, 0x7, 0x10001, 0x8c07, 0x10, 0x602, 0x0, 0x9, 0x2, 0x7, 0x6, 0x8000, 0x5, 0x1, 0x5, 0x5ae, 0x4, 0x1, 0x8, 0x8, 0x1, 0x10001, 0x1, 0x401, 0x4, 0x8001, 0x5, 0xe5fe, 0x61b1, 0x1000, 0x9, 0xa113, 0x4, 0x0, 0x0, 0x4, 0x10000, 0x1af0, 0xe, 0x2, 0x3, 0xffffffff, 0x2, 0xffffffff, 0xfffff036, 0x1e, 0x6, 0x9, 0xe, 0x100, 0x2, 0x1, 0xcd7, 0x101, 0xe, 0x7f, 0x8, 0x6, 0xa, 0x8, 0x9, 0x0, 0x6], [0x7, 0x5, 0xecf2, 0x4d, 0x81, 0x6, 0x8, 0xfffffffa, 0x4, 0x4, 0x3, 0xf45a, 0x16b, 0x1, 0xd3, 0x5, 0x0, 0xd, 0xfffffff7, 0x22a1, 0x1, 0x9, 0x9, 0x7, 0x785, 0x4, 0xffffffff, 0x8000, 0x8000, 0xfffffff9, 0x5, 0x4, 0x400, 0x2, 0x7, 0x5, 0x100, 0xffffffff, 0x1, 0xd, 0x5, 0x0, 0xc5, 0x8000, 0xd48, 0x2000000, 0xfff, 0x3, 0x5, 0x7, 0xfffffffc, 0x8, 0x979c, 0x0, 0x4e, 0x3fc0, 0x8b, 0x8, 0x6, 0xffff, 0xa, 0x2911, 0x8, 0xa], [0x9499, 0xc, 0x3, 0x0, 0x1, 0x8001, 0x8001, 0x2, 0xd, 0x7, 0x1, 0x1, 0x3, 0x6, 0xfffffffa, 0x5, 0x80000001, 0x2c6c827d, 0x8, 0x4a69c2a1, 0x9, 0x1, 0x1, 0x8, 0x1, 0x6e8, 0xff, 0x2, 0x800, 0x2, 0x9, 0x7fffffff, 0xfffffffb, 0x3, 0xffffff8a, 0x16ca, 0x5, 0x7, 0xd2f0, 0xe76, 0x4, 0x40e, 0x9, 0x801, 0x3, 0x349, 0x4, 0x1, 0x9, 0x4, 0x2, 0xa43e, 0xc, 0x1, 0xffffff41, 0x2, 0x6, 0x9, 0x1, 0x40, 0x1, 0x1, 0x10000, 0xfff], 0x4c, ['./cgroup/syz1\x00', './cgroup/syz1\x00', './cgroup/syz1\x00', './cgroup/syz1\x00', './cgroup/syz1\x00', '!^/%\x00', '\x00']}, ["", "", "", "", "", ""]}, 0x46c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000580)={0x2, 0x4e23, @multicast1}, 0x10) socketpair(0x28, 0x800, 0x10000, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000680)={r1, r0, 0x1, 0x7c, &(0x7f0000000600)="d79ce720f0d3227888c5d529fd7d87cdca5dc8622939851f72d2770a9fad77a8dd10f7697ef1b9d9b23cb9bfbfe09f2532fd1d2af920b9658c5f6dae7057e2b11f59860d838d634e57c5e2128568b0983e3c5d1035910790379d2944b46d3c6dfda7c674f6c6d8e960390fdf95835ec36c2dffbe956e18b72938a1ec", 0x9, 0x4, 0x5, 0x4d, 0x6, 0x1, 0x3, 'syz0\x00'}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r3) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0x1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bind$packet(r4, &(0x7f0000000940)={0x11, 0x6, r6, 0x1, 0xf, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000980)={0x0, 'geneve1\x00', {0x3}, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000bc0)={&(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000a80)="fa0f9dcd1d1377a348bd6d03f2abbc968df0b508957220226fe10d8b27f3152c18e44b627ed5571f2363075ebb28a711422b1610c4c6964e8e2b4e8e0b27dd7a3ceb5eab158536bbc52e582911cd34f6eacc8c24e0fd00605ba459d2700ba2f05b2e2f97c4655ed86537fc48500c3bc5513f7e6f2fb238b9", 0x78}, {&(0x7f0000000b00)="ae06327706a0f425a26752d1ac6f867a68a54f57119677a216bcd41e14b199098006a447fee66edb5b8ac51f089263d0378d5cf49fc78fe9abc4cd0bbebe739f3416a701e2c440bd4d64a40de39f530b7448d658d7769109b2abd5", 0x5b}], 0x2, 0x0, 0x0, 0x40814}, 0x81) ioctl$XFS_IOC_SCRUB_METADATA(r7, 0xc040583c, &(0x7f0000000c00)={0x16, 0x12, 0x900000000, 0x3, 0x95e}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r4) sendmsg$key(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000c80)={0x2, 0x4, 0xb7, 0xc, 0x3a, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_x_sec_ctx={0x13, 0x18, 0x5, 0xc5, 0x90, "b1e3094689be75f5d6c4a6bca075e352dc15031b3d6858a048ef80d9ad271b0d8b3209a84a7b65ca1416465b5b930665d165fcd31faadd250ebf0baa4bd9a0aa3761b66200ebc6ff4b79594b5d75e7af964d9fe61058235f1b809f0c9d472bef0197650ab4237ced371e3bb30b57dbac1c16e1f514710e3a3a296943a8d00ff9725a677ad4d04e99bf7dab7dff071b90"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}, @sadb_ident={0x2, 0xb, 0x6a2e, 0x0, 0x4}, @sadb_ident={0x2, 0xb, 0x55, 0x0, 0xfffffffffffffffd}, @sadb_key={0x1a, 0x8, 0x628, 0x0, "219dcd7c713625d6caa24122b90c13e210e6f8f1d1885532288a3dd66566aaa25dbeac151158337ee1a59209150a3a56bcc9c855a80794cc15f928ae1a5c9d8a631e40192c012feeefd61bce68b84ef987c81d685460019c86d9449f856d613a5cbb3289f7ffa8dd866a64657dbbe5439a938fe5f9c55124d7b0b05594ad822374e78d1d563f0a5b1826ebfabba379a3f6a28b8bad1c764e9aa7a4b51cb1a732beb28d830cd1452c4eebc273c4af7556f759c842d65e966ea152e17bb48d63102fa239f36e"}]}, 0x1d0}}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f00)={'dummy0\x00', 0x0}) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f80)={0xe8, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc3a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff1a1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff4a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x63e6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe3}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000004}, 0x20040000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000001100)={0x0, 0x9}, &(0x7f0000001140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000001180)={r11, @in={{0x2, 0x4e22, @multicast1}}, 0x7f, 0x7}, 0x90) sendmsg$key(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x2, 0x8, 0x9, 0x6, 0x10, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_key={0xe, 0x8, 0x318, 0x0, "7d79912fcbb59dcf296767685171d038cdf3689f3709ae6d64aa80886eaa5d7334ca447dabd6c77cbe50c013c932a8f4404793b58e80c13692975032ec73bfb0e1ebece08957edd2273067be94dd5e0f657408b592c7b73bbdd46741723db9b5808424"}]}, 0x80}}, 0x1) sendmsg$nl_route(r3, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)=@delnexthop={0x30, 0x69, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001480), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000014c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r12, &(0x7f0000001a40)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001800)={0x1e8, r13, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x44}, 0x4008080) 4.86878714s ago: executing program 3 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x71f, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000040) (async) socketpair(0x1d, 0x5, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x8090, 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, 0x0, 0x0, 0x80800) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9ba}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}}], {0x14}}, 0xac}}, 0x4004010) 4.496606882s ago: executing program 3 (id=365): unshare(0x6a040200) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d000100000007000000250000000d0016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) connect$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000040)=""/67, &(0x7f00000000c0)=0x43) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000000)=0x401, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 4.3844451s ago: executing program 0 (id=367): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000004000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000040), 0x80000002, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000180)="0d9e69", &(0x7f0000000840)=""/40}, 0x20) 4.275838047s ago: executing program 2 (id=369): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0xa81f, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_out(r2, 0x5463, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r5, 0x1, 0x70bd2a, 0x65dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0xfffc}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x3) sendmsg$nl_route_sched(r12, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtaction={0x144, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x130, 0x1, [@m_mirred={0xfc, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x2, r11}}]}, {0xb0, 0xa, "a51cf8c7d2f04db8962ca3461821df387f4babac72a97764e669bd8d10e91abe4f95a7c987e612b144bdd89e4c9cbac8f42704da2511b6f067cab423c9db11ea56ecec87b0bee8ee2fe6364eeac859c965a6b56db16f27b90fe65f3453cf28228199d80862952e4ed645de622d82acdb24a74de990c87434792f858c702575ae1b9c7271001c419cbfeddee4eda22f81ac8e6512ffa6bfe1f1cf05e441d13a8cc1e8737cf0bbe28964d7f7d3"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 4.010767284s ago: executing program 4 (id=372): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) writev(r2, &(0x7f0000002100)=[{&(0x7f0000000100)="c0c98ccd106b89d18132ba2fe999f0", 0xf}, {&(0x7f0000000bc0)='\"', 0x1}], 0x2) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x50, r0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6f}]}, 0x50}}, 0x20000034) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000200)=[{0x3, 0x2, {0x1, 0xff, 0x3}, {0x1, 0xff, 0x3}, 0x2, 0x1}, {0x3, 0x2, {0x2, 0x1, 0x3}, {0x2, 0xf0, 0x3}, 0xff, 0x1}, {0x3, 0x2, {0x0, 0x0, 0x4}, {0x0, 0xf0}, 0xff, 0xff}, {0x2, 0x1, {0x1, 0x0, 0x2}, {0x1}, 0x0, 0xff}], 0x80) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@generic={0x66, 0x8, 0x0, 0xfffd}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x24, &(0x7f00000005c0)=""/229, 0x41000, 0x8}, 0x94) 4.010253226s ago: executing program 2 (id=373): r0 = socket$alg(0x26, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0) recvmmsg(r4, &(0x7f0000004d40)=[{{&(0x7f0000000440)=@generic, 0x80, &(0x7f0000003ac0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/33, 0x21}, {&(0x7f0000003900)=""/164, 0xa4}, {&(0x7f00000039c0)=""/213, 0xd5}], 0x4, &(0x7f0000003b00)=""/197, 0xc5}, 0x8}, {{&(0x7f0000003c00)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000004240)=[{&(0x7f0000003c80)=""/234, 0xea}, {&(0x7f0000003d80)=""/80, 0x50}, {&(0x7f0000003e00)=""/193, 0xc1}, {&(0x7f0000003f00)=""/24, 0x18}, {&(0x7f0000003f40)=""/46, 0x2e}, {&(0x7f0000003f80)=""/214, 0xd6}, {&(0x7f0000004080)=""/39, 0x27}, {&(0x7f00000040c0)=""/157, 0x9d}, {&(0x7f0000004180)=""/158, 0x9e}], 0x9, &(0x7f0000004300)=""/113, 0x71}, 0x9}, {{&(0x7f0000004380)=@rc, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004400)=""/48, 0x30}, {&(0x7f0000004440)=""/124, 0x7c}], 0x2, &(0x7f0000004500)=""/67, 0x43}, 0x55d20955}, {{&(0x7f0000004580)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004600)=""/79, 0x4f}, {&(0x7f0000004680)=""/245, 0xf5}, {&(0x7f0000004780)}, {&(0x7f00000047c0)=""/217, 0xd9}], 0x4, &(0x7f0000004900)=""/54, 0x36}, 0x40}, {{&(0x7f0000004940)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000004c40)=[{&(0x7f00000049c0)=""/127, 0x7f}, {&(0x7f0000004a40)=""/182, 0xb6}, {&(0x7f0000004b00)}, {&(0x7f0000004b40)=""/204, 0xcc}], 0x4, &(0x7f0000004c80)=""/152, 0x98}, 0x7fff}], 0x5, 0x40000000, &(0x7f0000004e80)={0x77359400}) (async) bind$can_raw(r3, &(0x7f0000000080)={0x1d, r2}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={r4}) setsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f00000004c0)={r5, 0x4}, 0x8) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r8) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x78, r10, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bond\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x20006091}, 0x40805) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="030f000000000000000034000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)) (async) write$ppp(r7, &(0x7f0000000400)='k\'', 0x2) (async) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r12 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xf8, 0x117, 0x2, 0xe4, "0c3f722c0aa85dfb7eb8dbd237dd072c36ec77ecdaef2aba55eb0a584d0d336773859ac5a3ecb7ed9bdcfb5f8d2df4177bbf436c6961ec5bf343682e6e9cde86d810acc11d0ad7d95799ec310e8f1908dd38c04c1f98a565b71db78bc8239fbf52fecdc16977e870b5cc0e54573d7dceea732bf6dfc89b6db07fe5ff458d2768966c491a58f1cfc8709cc25af9baac2cb3b92c7b46d8673db0bc7ae9dd8a47af73c1af1e91415b87ebe8a2d6eb7ce8a7feac1192dc2b27b2c8b240fb9aefb600e50d9e6811a1bddf3e7ef413b2caad655230d8261062d72f28a49e2ffb61dc027c0cffb5"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1140}, 0x14010887) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000380)={0x3, 0x10, '\x00', 0x0, &(0x7f0000000340)=[0x0, 0x0]}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r12) 3.930172644s ago: executing program 0 (id=375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r5, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="9a5be948f5fe13ee19cf97661a98fa33025197433e80884e3711ca03692a0ce9df1d", 0x22}, {&(0x7f0000000740)="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", 0x4af}], 0x2, 0x0, 0x0, 0xc4}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) close(r6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x40, 0x7800, 0x0, 0x80000001, {{0x2b, 0x4, 0x0, 0xb, 0xac, 0x65, 0x81, 0x3, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp_addr={0x44, 0xc, 0x32, 0x1, 0x9, [{@empty}]}, @lsrr={0x83, 0x2b, 0x9, [@dev={0xac, 0x14, 0x14, 0x26}, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @local, @private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1b, 0xe9, [@remote, @multicast1, @multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010100]}, @timestamp={0x44, 0x2c, 0x39, 0x0, 0x4, [0x40, 0xffffffff, 0x4, 0x3, 0x5, 0x3, 0x1, 0x4, 0x3, 0x5c6c]}, @end, @end, @timestamp={0x44, 0x10, 0x9d, 0x0, 0x0, [0x3, 0x1, 0x8]}, @ssrr={0x89, 0x7, 0xb0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f00000006c0)={&(0x7f0000000600)=[{0x7, 0xff, 0x2, 0x7, 0x1e}, {0x7, 0x1, 0x7ff, 0x6, 0x7}, {0xc, 0x0, 0x0, 0x6, 0x7}], 0x3, 0x28, 0x6, 0x8000000000000000}) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@getchain={0x4c, 0x66, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x7, 0x3}, {0x0, 0xfff1}, {0xe, 0xc}}, [{0x8, 0xb, 0x8b7}, {0x8, 0xb, 0xfffffffa}, {0x8, 0xb, 0xaa}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff6, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x7, 0x7, 0xfffff8d2, 0x1, 0x3, 0x1}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.870622345s ago: executing program 4 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) sendmsg$nl_netfilter(r2, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000880)={0x288, 0xa, 0x2, 0x5, 0x70bd27, 0x25dfdbff, {0x3, 0x0, 0x5}, [@generic="6aae6658c23a9e0d4730bc811a7636247f7b44c9d167a908babd765fd3c1f5e703786e248b31017f88423b6b4a02961ecae195bed1606b93bcd051fbd8e3620f8f47ddc3fd761d36eee047e5859d44ce2b3090b8f868a3d556f915821afa9000df6188c9ab21c401762f443c922bc1c748f9b7498686eaa0c543fd10f4b780af62afdc9dbed7a2a375f0277030c4650a98681a8aa7e0dcd693163bb6c865842aae2521c6a281161922989e8223cbcf81dfe8a2b2f7d8bcb7c01c93463f0beec2695d8cd113", @nested={0x15f, 0x167, 0x0, 0x1, [@generic="2c10fc5ad02e10cfaebe5f538253e792460196f3486000b92c5dbac192a550a2075ad0f4db9362d43cffd75a0510cd25210a5a5b9ff3c8e2c50b810770a4f500d712f2e14cde06434b7555f04516c3c47849934d607b72e7ef16661782b2d8f5aeb530855bf478c9c62d0c5fcb061d3484ea5f8100daa0e80b7119e3e059f1dc4b1b085763bdf1b768f918d8ec9e1dfc9374136924a149bf94e923326d23e4618d7fbd9758ac67e8c4fef2aac288e041f5a7d65b1986d04e3828400e1aa495737ddfddca37f24909b48d", @nested={0x4, 0x9d}, @generic="b1305b9a", @generic="c62f1a1dfa8371cb3ccfbba2939a3f8d96d3f29946f199441e9ed18299c936b15026316d6f0ee5503a67224b3fd88e6746b0cea0634ba7bafe8a7dedebdbd90f2bb7c33fd84da289c4", @nested={0x4, 0x68}, @typed={0x8, 0x63, 0x0, 0x0, @uid=r3}, @nested={0x4, 0xae}, @generic="7a7a014a5f7130d2f24e0b1306ee21305f600d9214ede040a1aeb5cb9c90a6178b10eaa6af17bdb0032c28c3", @nested={0x4, 0xc3}]}, @generic="23c29c77d83ee4d1cdaa037c0a49f7f3620ae7d9fba348c85a2bf02a00693cac59a6ab238b65a7bb841a8c1e892318f27db425bb5ba2db41542837eafb7356f98187f7455a738f2d228f5aaa45de"]}, 0x288}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 3.457054541s ago: executing program 4 (id=378): r0 = socket(0x10, 0x80002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000003b80)="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", 0x621}], 0x4}}], 0x1, 0x4000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000340)={{r0}, "558579cd0a4d221ab3f98a1752f92fd4c543733bd5facac4092254b7660ab45fe583dd52340ac3f8297102413102d0f1c310f74d5fa732555b1e83a78b6f216f5881c3638a0ebfeded4bf7fe8fcd401ddc9c365e97ed3001dbdb51172aabd6a8d8beea4825c7dff4de8c6c8130566c9d6588995e0d5cf9e1d84c26d968a4d5fe4c3d475b7e9465d7879b496f3a6b6afb4cfa4d0d1db97485a5934448fcd83219fdc413de0ef1704128bdf9b78f5818106768a2c788b2cfcbe6460b3b75e7789a2f4d8ccde5f2c6c142e2aa639d71ad5a6cb60b119b30ce21fa7505cb42d66bfe46a88841e67f77205b2967afb87c8bbef5219e43d40634169cf98a9724a07233754b0552b8a7253bd2dbf7af56adb17ab0d37a2baea2ca0e42f7608d243e67cb2d4df6a4c3778767af0bfb946ef38ef86782c3e282bfb42be6fe1bb0eeae5ff41027d16f68b53f2a0f18fd9c1b71cddb2401224ed03a652e038222be83c76df8d5564fafee32e05a84d1912f53c712d3958a664cc91b52eb6250c8b8c97a728a744d18756a72dfe2331b4f699113014af39a926885cf697d933605806b0fa783bf506ad764cea0dd1c00be4b981bd46f294d841818d92e44bf2dc415cf6a334921b5dd47235e590daf8803479da2205b8466620299cd415a996c7dbae690c72985c434de7edb1d3da2400f07b6ebbbacaff3cd355b9b2dbb24e40a4982a8c68153410140b123eefcf8ebef8e61aab32569ba67e671fdb284fe48e618485e6fe9187239d1b4bc1000c3da15e3967594b2e62ad3d27ef5f8dbc9fa90d29dfd0c57e7470c099057353dfde8b8202c181fcabe16d7b2489d2ee7a5a98bf90f07ea23619ecf2d9bf25518278d9975b8b29c323c499225aab9f7e97dd989f83a0827f85773dc9b568d147b5c6592f9bb9a6c369a6c9b771d9dc73a01b6c2dbd9b2825accb6fd1c7745bd57c98a34954eab2d8320f6ae02c494cf7bb86e18e8f66ec4ad2d1495a9dff7cd0cd12baff46b3b0798d1bb13eba31c3f315ad6626ceb72a16c98cbc1e197ffa5c9f6e3dcb825508b1323d2d15198f360c2d1e6880ce0e804b971c3d1db27cbdc56781e9c9aa19bb82deaf50889f380eed54204276576d945e272f5874cd938bef467a8ab848af6b9db9f2384d40282de0a76c9a558ba0274da5b6f6bba52f515540430a9494e29bb0278868be10fc56dd136887fdcc09e4c9416c3688f5a6ed801c29d58e2a6c1819af7dbca7dcf6600980f881bbdb31f7dc98032ed569d3120a6f5796ef8ebc9018e7b1a555f5a0bb9fa79781580a81a8f7c5d6cdc042d5dc7d753ff53de4ca78ea75bee05ce57dc73c0d9eb49b75cbba402da6fa69d34a4ef544d4a9e6cb00942593793605fc531e22f5d99e4796fdec57ce5e9317e5e82ff734daa40f380edbd94072a3447b1007d38fffb6447c7ccd44b638ea9362038d07dc390322027b4572d07f5dbe9b455109b833c336b04d4e4dae3c83c2be84c8e9d5e464bc4089735c949d5f721191a925861e4629214511f3ea0d30203af1fc0804a85d05b4376af24ce28a4c7557fb13a380f7a2cf115ab0e437ac73c04fec166bc2617e18774c4b54e7da9da8d0cf2d649a9b6a14016aa990d30ac7e3adf66c472256bb23348d164f354056c4b950ceaa0864b0bf5f720e9d68824e6b68f48b7e232984198c7e54d92341f24a15b446d80dff863e537caef462b1ca1c1adf49b4e7360016af8eee04b6c9550572b8e6c2ed742d974d80199cc132eb7ecd9ad3f95ef939f13db1460e881614e1b25bd00290f851aa60347894b0447ab8c6e5746c23391b2f2f550f44212916ecaf0b389ebdc78288feb6285419d9fbbe18261e1c733319fa70c6db596f7b3e048287ee974c0b23637a903cd950bb68e21bee3893b3d9d88e2a065431172259bf610e29267d291b043473020e79f04cb9232d62959d4aa1cc7aa4295044b04babdf2d3036ae48b8dbbcd5736aad6ca82124b015a7ff52d4198f9f149bd9205ae0118e9dd8e177d26b5a8222dd35e0e576160ea111b49cf9a35b1f9996f616934ab24617f3f620f59e0e45bfb11fbc379937a5c060ad9c19f2466d1c2ca10a8eb07c245042369301421e7c16e1339c2328178d284e69cd02ea275667db4227389c2a6d427b8aa6f3bbaa25871cdc4858eabe3fc10007dedd1c134aaa37850d39e87002e30310cebed6e96f72a64e8b0c512ba4401d38a482932d2459919a2fc64ecc4b2be7bacaca07d6d89539fc7751162479bcb93b4b43224f53d0af8c952688f9ef7e2849f846555b6ebc9d2baa845d3c78da5229af3b9659b753716c389b821a3ce59668d40aff1ab85265d4177ec074b90314ab6a89325f096a00ca2f8e49da5a4623fe1874293b837921dc095b4cec29934625e72c09d64ccf055782664d7139b22219675c1afe0bf3d14379e6e336c8b1ea5574397cda49aaa79bad551868651a5afc17b01b5ce00dff2778fe2cb6e86b7298f1c645cf34cb4c318a60dc88e63720a31a8c526c35e3d06d90829190b5db65950ec08029ff0eba5ede926e9f0507deff8e0d3098c23f1ce94f2944b7c9c7da3920d55e65c774397f93808f1a12673d91663bc01346b12ad485ae93e9a0447ae0e4cbf7b91ce72d4001591371f48c5db19ce5b356b7e890f3f75dfd6e6e4ba161652775aa6ab2ddc63297335875179819bc283a4c720b7d4b57e6b3b8385958c972ce7bc5e611b1d1121bf15863404f2fcece03c28bd2babc33119a2812edfa0dc6a6ae2f8fb4904425b8cc5b0550006f40fb508cd85b4905944b996ad3df5f7cbb23d6bf276c48819f15b600770f50231e5ff6424db4481433de89d87e0d09add0213fba718be71f72590fbb54b15cfa7b6d10c7e201f13d16f076eb2a07fbcdacbde77205dce9e6f0db44d7a8a9d1969a9cced5e9b01e669677da045f65b56b1980539db4eee01777ff9569080c0e7d4a72f3da8cb8b7d592cba81c3250c10a945053268b1203420d11c8f12c1bcf21e4a0662d4039b37598fc17534304842c9eb9090e00ef6dae2ddfce0051715c60203c00e52d00f168d293b2d7a882504cac5f455ea603959d11a6b2fed4200413938a95545b200e293238307b052c8b9a62f11d57a33b5f5fe2bc0b79964b37f2541c020cec1ce04ad882e545356789afaad75517d049b771912655c6407a382387ba3e8f018d4050006f9a7f138baabaac50aeffac5e7e67927db8e41ea1fb2211f95cb3339367f06acf45394e9ae7341685336d96f75973a35461a0ad5c115329b7bbe365d71053dde4020d89830f45d007771870814bcbcbaed03f2eba61cd2b24dd43aba4165905a4b68dd48aa4f03390322895d8ea32367f448e4362f3eb86e6bc991a6b7f93d49ea28edc91b0cde264ca652bfa889208078b1c6b22041239cf41db4d1dd8bcc7729787c82bba8d358ea1c869667084e951bdd54ed613c6787c729c1fc0d82b3ba59053434f00f8df9b43b23b78701f8255ba34f752ee18802647c540443f46add01a69c537bc9d19c9c66ccfb9e312d20bdb6a5cdd8135d7d523d7134d951f5844de8e1fa933bae1f3702490c36e527c01b7fdbf62bb7988b0232ad2670aa1793ca5dbd208afc1c8b018dc77c3e79da9372a5a895efa283f77020bb8dffcfdcf3ccf358ffcd8dc76f076d35fbe68bf7983f4791ce9a61d95c649c4ccb8958f9a45775e3c285841fe5adf5edf82c398b215500b3f2175106d5468242a97160132bd6a7e963f20a0a97e58b2660452707f19764b28ae284b6ab13aa4153a611f09d21bea82109d1d928d6cf6ca2d2540ac6cdbaf93c698f4f039592e81114c1340816df0261fd0b816db930dae1302e53d04a6bc6f0260e59945b883ebfeee090b99a90d498b8f7cc1992448b4ade26d266be06bdb11a7dcd91aaef37db112b5b694e373ecad1a2d852d23c9eab8eaa6c60b43a2ae23ccd7457757cb44aeeca09abc7cbd2a4afd2e6aa607c66621b6ed6d84b64c170a0b03dddaccf4f9580ec0109e7c5fb2030ea4ff848ed25570419e1414f30fafb8105086a57f8850901e691f03f30804c7a4527e34b5f6133b20380d533985f0375a7a3b4b0e02f237833e67f75e9e9616659ba590b1ff1b841ab965946e17cab7824a585551ce897658206471270fce37e3f842e1c9bb3561062ccdea013a94f3edb8427fc1089ae0763ae552eab02a38c6dc952251fef76b438292951fa15329fb67aed364bd692db6e773ef83834e2fd0534a63bae47e6480f61096b6042f4dadb94c036461669d5ab9dfbdf3a89785aeed5b7ae31859ee460c07646a224a0063929a07b9338ab2e4265c565e86f1af2cac6289298343b4be7f0654e1741008538d44b26b480aa57854cd77ee7b83c3a714cda4378cbeec7ad0dbec08d93d4348d67a136ba22fea8f99e2f2a312b8e372f25406da104bcef28a6ac701b27ac0413d02916f886d1deca974b32f0b9eaff9233a542785c6d9d53c658241e7fd904ea502a7ac6acf1871d9e624d9ee049384094acf28b18cf225d1a458fa43f9745579be9ca68673daf0907245384d62fd35dc0321dea09b5e792840455e29e1af592420fd568c960d7c76400d03a5e083caa4d60785cab1bbae25f0fa3abc21666b3b048517c02edf838ad82c813824cc6b4036a8fa3e9e8bde0716bb6d977f308a9f16b4a964299601969d756480322ab88a6e3d0567569da8112af312cd995294c5e21b0d157231cdca18bf523aff9f85251678fb2ff5fd02aec0ade3c99d2ba0803f7c97a54dd1923165bf6fe5764770de039ddd466b0a8155a526a5414675cac879abc21ebf387f8d36d7843bfd67eeabd31a57d5ba240b4a2e2aff461599b3d6fe075920edd5a9e5dae1e203eafc353e399189f1db10a695fee93489a624f41aaeca5789419b5b44e5a7510f0badc6c3be7492b9c19402fdf3abcb3884bd7761171124c0e82e8cd12faee3f440473b0ec4d2fc7200a0c6d21aae14de5d72de12fa37c61f4119dc02a72809f8e4056ebe1cde304d31250c5174d967262c1274adc007b1951f04c6c36a016b87d0360d2fc168a3a0df6d28a42bad26b7aa3d82575dd2fa6e951d752c00be7650ed69b5ef299d0f8b8a0327de50ceb38178ad48c1288aea61bd50a6d26cc4567b5f3c08fc0b1284e19383eda9a5cfe1a9f5e9ea1ad5ccd158094f20ddabf3bd96f073222d41a32f15d37da775e2185ba44450f5335e4e62627b3288c8b21ca68309ccae717b2584180d58a675d1d3bb1f5733d2af419543b9ec6aaa8988920bed7d2927481188da93483415b61bf759cbcf4ceac9551e0d0fd7ae4d77a122b769e87dd0a1c54e96fbaabd5af2637186d1848efc4da6614dbb8a828aacf6f49c2961e17c18e222e9531176fb805b916c037d398f2d5ac354a41821c57e96ad26ca1361ee87cf9eb85cf3983d1718c83b4d37296a3e1d27e539ae4be368a13f53074b74d2685ee3adbc2a333376163b7aa7c75894ba64416d2e6b0d9df00ad206e84de3ed8f6a22b978ed9b67cd8dca5bc5abd9db2fb0b486ae87a52a7b1f0a5023d4be644857eb3437f5a1605bd0bec146f9953904485eb8a157a137b02534534b33c9760bac597e686f7de14976a5d633beba4cddfe02dad1f99f9a0c3531b92156c801d64d2edbaeb46db04fb02de3526337e190e3e3a799dbb7c14c9da0235733adf8bde3bce3c723e2f87ba2a068ccf39c54cea91e6f74c144a325d4458571cdb9cd25df306328dc311879962b8e425e560"}) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.427323964s ago: executing program 2 (id=379): r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000100)=@tipc=@id, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000002e80)=""/86, 0x56}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/194, 0xc2}, {&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f00000005c0)=""/131, 0x83}], 0x8}, 0x1000}, {{&(0x7f0000000700)=@caif=@util, 0x80, &(0x7f0000002c80)=[{&(0x7f0000000780)=""/144, 0x90}, {&(0x7f0000000840)=""/198, 0xc6}, {&(0x7f0000000940)=""/43, 0x2b}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/81, 0x51}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x6, &(0x7f0000002d00)=""/95, 0x5f}, 0x1}], 0x2, 0x2000, &(0x7f0000002e00)={0x0, 0x3938700}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0)=[{{0x2, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x1}}, {{0x0, 0x1, 0x1}, {0x4, 0x1, 0x1}}, {{0x4, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x38) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000bc0)={'bridge_slave_0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x2710, @hyper}}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002f00)={0xc, 0x0, 0x0, 0x0, 0x20003, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x200}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000000340)=ANY=[@ANYRES32], 0x7c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x86, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a"}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x4008001}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="8310f600ec5faedaaf0fe473d59de8f2adbf832e27681b6452acaab4e73c3f697a361e2201ecb6513b2130b29be5a9a434ad66bd327fe2c675836128f153146d4c3b4799c51d1a85fb8718260bf82f024c585910137a4e8ffd39d769ca40c2b7c4ee0c0b1d176c89c8b502dd35bacd39763615d463c283eaba349f066a3d9e96aa34df8951803d664c5fa1761f2c2cdf617b1059d6a04359b874669757122e66c360b4f8089bc5853fadf3f4", @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000540000001b006d000000b298c3b5efa1a37780db868741aa99f5d1154100ec0575a6f2712c517a01660f000200bdfa989ce520cdc39a22ca87fc64f1d11d89f1c4070000007f122b9279bea5885c85ae37557f741b472caff30be85343736cd95123b571030000000000000096a500263794874f9cad9c4f6c9fc5226b213809c6a170f4cbaa53d4c4"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) 3.368878945s ago: executing program 0 (id=380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) clock_gettime(0x3, &(0x7f0000000380)={0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="050000000300000004000000ff01000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pselect6(0x40, &(0x7f0000000300)={0x1, 0x3, 0x4, 0x100000001, 0x9, 0x9, 0x6, 0x9}, &(0x7f0000000340)={0x5, 0x4, 0x4103, 0x0, 0x0, 0x9, 0xffffffffffffd777, 0x9}, &(0x7f0000000440)={0x8b, 0x7, 0x6, 0x22b2, 0x30c, 0xff, 0x9, 0x7}, &(0x7f0000000540)={r1, r2+60000000}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x200]}, 0x8}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r5], 0xaf) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r4, @ANYRES16=r4, @ANYBLOB="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", @ANYRES8=r7, @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRES8=r5, @ANYRES64=r6, @ANYRESHEX=r6, @ANYRESDEC=r4], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r8, &(0x7f0000000180)}, 0x20) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r9, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r10, &(0x7f0000000200)="179326d796", 0x5) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x4b, &(0x7f0000001cc0)=ANY=[@ANYBLOB="0380c2000300bbbbbbbbbbbb08004800003d0003000000019078ac1414aaac1414aa0c0b347f000001ac1414bb00030490781200183f250000000000000000010004e0000001e000000100d8e274390ec43a99e2cd7d3bf1701ea269addd3b284efb8d20ab222576381cebda36613cde8e48ca8183eb574cdc86a435358793077cca5bc132c5087bf7b48948d0f261091422956900574a3053e3fbb91dc08148e8c3415fae487cba014db19d865fe6c80a24"], 0x0) r13 = socket(0x2, 0x80805, 0x0) r14 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r13, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r15, 0x3, 0x7}, 0xc) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r11, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1ff, 0x18}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x20048081}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000200)=""/254, 0xffffbffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, r16, 0x1, 0x0, 0x0, {{0x8}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc080}, 0x4000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="58000000e000278e1060bbcc862add4fdde460a1836273aa7817af4b4336737fea7647c4e0218f4b9921b9a8412c37e3338bb28c7fe805f51a9a38af5bbccc4b507e495acc389429901afbaa09ce8d5d2ab5740d550db061aecba448849bc73e93a1b99d1300211272e831265d606678356c6de7a416757b338a640a2d2eb461b27a20858ba80c1b11c494e480a557c40be2217152d710369f20c0e06e97c1ac79b5ac69f9afef7686452f316fd1e10151ce3058da669739b3cfa07361a638e536ba25ad1d91ddc8348dbc863baba91a65889d23dfdbb731124d0eabe411cd6d7fa99a23398b7ed7fb6040edf666da9ae0fb195efcb4158c13", @ANYRES16=r16, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x41) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000800), 0x2, 0x0) 3.224767466s ago: executing program 4 (id=382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000ffff2bbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="abc5000080000000200012800b000100697036746e6c00001000028004001300050009002900000008000400052000"], 0x48}, 0x1, 0x0, 0x0, 0x20008084}, 0x40014) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000340)="e8", 0x1}, {0x0, 0x2000000}], 0x2) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x1, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x8671a2b61da64513}, 0x1400c0d0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd29, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x8, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4894}, 0x42042) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r9, 0x0, 0x0, 0x40800) socket$inet_sctp(0x2, 0x4, 0x84) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000c6b9e7c5855d64b3f811c92d3dc56998a3ef5100c8bf6bcee4176572baf8451f3f2280b42438a1ed68c36fc45669e9aec4e55ec5bf1662d1d29c8bae6d85e8318edd31afe5f934c3ec1b08027bddf81bbf0f188778d7673dfffebde75bbe8896092c5ea968984bc5cd30c3b2ee127d3524aa1953f9bf371cc6ce8d4a5c", @ANYRES16=0x0, @ANYBLOB="01001f0e506dd33a1f4fbf00ffdbdf252e00000008000308", @ANYRES32=0x0, @ANYBLOB="6070c17e71f62db0d1c75471113925e6ded9e9c8063dcaf7c8fee74fea9d78b9fccec35b2637338de9afdaeeea5414930cab5e33634cdef7a2651bdd9622ef26d36309db760c341d3154e6da9603c0aa523d7c5c0d8cbef8beea424a09000000fe1b17383bdff9d84c6e9d8d6710d606551d803f0f249fdbab3987fdee12de07b529148a77f500000000000000000000f770450d8ebebd81edd7004559713978f9450b9fc91ca3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r10, 0x8b2c, &(0x7f0000000040)) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) 2.975913997s ago: executing program 0 (id=383): bpf$PROG_LOAD(0x5, &(0x7f00000032c0)={0xf, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="4b5397a987f7bd801b0819a00c8525e2760f0595bdf3de64ddc9e4286fb26ecd9d2ce428ef6ebbc03aa91be2900ea0ddde26a8ccb3808b123615cdc43e2453f5daccc14cec8d65191ace47cfe93d", @ANYRESOCT=r2], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14, 0xec4d40d1dd2873f0) sendto$packet(r7, &(0x7f0000000400)="03ce3db0b629a3fcb8df10e12f4d9c2999aa941edbd7a8a42bd641ffb7911ca92177fd44a4e0fc9b71c9653cdeaa6312b6f82a4b09c79b655c731f038a6a4f3cdb5fe63d64cd284e3d99080f6eef6ca2f8690ea9172166dbc5e1fb82c309c655641f86f2740e3859c772f8996b02376776ff0a91b610ed33d9909475984a0afe93ee8c21", 0x84, 0x10, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x128}, 0x40005) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000950000f0cadd4f00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r9, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r9, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000304000000000000000006000000", @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000280012800a00010063616e"], 0x48}}, 0x0) unshare(0x24060400) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x10, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) vmsplice(r0, &(0x7f0000000940)=[{&(0x7f00000001c0)="263d1b47200634bf45", 0x9}, {&(0x7f0000000340)="06b6ccd99257510b730beadd2c4491abc80f79e76a710c0ee32aabe606df497632908b656fe23049557583a390cbcd7f678a81555a386057ed3c8adf32bf12ccdb572e4f488b54c0f3953700d8b76f14f6aab72916d9205899dab85329d2583bc44d3d998f70786c1d5e8c5d", 0x6c}, {&(0x7f0000000500)="b95c51ddc7c26187eb3f5f8cab14d44953072258bfa9c686c65f1855f0b52f3e5e7a5c3fb1b9a4f830527c8fea023d405edcabf10d5bab8e9bf86c11b8cf89b39d79a61331b003c746e8934cf3a020006c8cecaff322d9b3b08649b919969044b83d7e27bef5c31403ffe1a716c3a005a8b59724a964737f", 0x78}, {&(0x7f0000000800)="87ffc1cbb9db93c644623f64f619f5c4e1944beea0940483a32d5863d723578ef6a1623d3ea4161dd732b457394d8e3614b0339164179e3c1db24131e304a74f2de34d7cdf5407e9a179994872c4bfeebf8da123b95aa10ab740737ee51db913ec5208f719e38db03dae14349938b94a53fa3d9ff2c8d27e2f5da5936e9050d0dbc4f1adebf20ca3985c0d8179053bf29ce5e079dc9612141676b7570ab5eade5b446cb2363c8e0775255144ffd3ed94eb1d2a7b571d77dd59b0dea6e19e1964b1387238b32280f8fb9ba839651594569e4cd0986c6190a9554631f77e701410286436de2b119dd0a1", 0xe9}, {&(0x7f0000000900)="ea2135b182f82e3cdd5fdd33de9ebdaa229ff9efb09c033a4528ba19542bb40765a6fdbf08887ef6c5", 0x29}], 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r12, 0x58, &(0x7f0000000600)}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast2}}) 2.876279445s ago: executing program 1 (id=384): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)='}', 0x1}], 0x1, 0x0, 0x0, 0x40000}}], 0x1, 0x0) 2.766300709s ago: executing program 1 (id=385): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) recvmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)=""/87, 0x57}, {&(0x7f0000000280)=""/179, 0xb3}, {&(0x7f0000000340)=""/82, 0x52}, {&(0x7f00000003c0)=""/85, 0x55}], 0x4}, 0x10000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000010000280012800b0001006272696467650000180002800c002e0003000000030000000500260010000000"], 0x48}}, 0x0) 2.416095568s ago: executing program 2 (id=386): r0 = socket$inet(0xa, 0x801, 0x84) (async) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x84, 0x487, 0x0, 0x0) (async) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'bridge0\x00', 0x10}) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x10, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x6, 0xffe0}, {0xffff, 0xffff}, {0x2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004405c}, 0x24000000) socket$netlink(0x10, 0x3, 0x2) (async, rerun: 64) r13 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x703d2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff3}, {0xffff, 0xfff2}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x3, 0x4, 0xffff, 0x9, 0x7fffffff, 0x1, 0x1, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0xc001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0x8}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x88cc}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) write(r2, &(0x7f00000002c0)="04", 0x1) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 2.415814273s ago: executing program 1 (id=387): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000002400090243bd7000fedbdf25080000000600040058"], 0x1c}}, 0x8800) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001900674c0000000000000000fc010000000000000000000000000001fc010000000000000000000000000000000000004e2200020a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff01000000000000000000000000000000000000000000000000000000000000000081d391f34107247da238220cdd486fab00"/128], 0xb8}}, 0x48000) 2.330808481s ago: executing program 1 (id=388): unshare(0x2c020400) unshare(0x18020c00) r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 2.222382927s ago: executing program 1 (id=389): setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 2.031910564s ago: executing program 0 (id=390): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000006c0)={{r0}, "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"}) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="06adf5782541580a114a4a16bbdc1b7a0eb449ee903e6c8f80e401bfd6ab796dbb09416a0084743822f6272c296880d18d75caa8efb5353e537f61d87743e7420092d7805336234572438399d4cd6a"], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xc, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x73}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x8a}], &(0x7f00000002c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000440)=""/221, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xb, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x5, 0x5, 0x10, 0x6}, {0x3, 0x1, 0x3, 0xc}, {0x2, 0x3, 0x10, 0x8}, {0x4, 0x3, 0xb, 0xc}, {0x1, 0x3, 0xc, 0x9}, {0x5, 0x4, 0x3, 0xb}, {0x3, 0x4, 0x10, 0x7}], 0x10, 0xf}, 0x94) writev(r7, &(0x7f0000000040), 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r1, @ANYBLOB="0600000021a500000c003a"], 0x2c}], 0x1}, 0x0) 604.119868ms ago: executing program 2 (id=391): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200021100000000000100000000000200080008000000f100000000000000020001000000000000000500000000a0050006003c0000000a004e210000000700000000000000000000ffffac1414aa000880ffffff000005000500000000000a004e240000000e00000000000000000000ffffe0000002280b000000000000010014"], 0x88}, 0x1, 0x7}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x103, &(0x7f0000000140)=""/259}, 0x94) 548.330952ms ago: executing program 4 (id=392): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0x100, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4002000}, 0x40000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x10000, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffff41, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe}, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, 0x0) setsockopt$inet_int(r6, 0x0, 0xe, &(0x7f00000004c0)=0xfffffff9, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000040)={'veth1_to_bond\x00', @remote}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000e14000125bd70000300000008003c0004000000080c00000000000008003c000100000008000300000000000800030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x10) 455.566686ms ago: executing program 1 (id=393): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe09, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000e8"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000075f7c855c4c4933a5d8b7c4f000000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10, r9}, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000c40)={'ip_vti0\x00', 0x0, 0x8, 0x0, 0x7fff, 0xffff, {{0x7, 0x4, 0x0, 0x2, 0x1c, 0x0, 0x2, 0x0, 0x5e55b37311de6d89, 0x0, @remote, @local, {[@cipso={0x86, 0x6, 0x3}]}}}}}) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet6(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="54f2085ec863d66e229ea25d8df7ff6c864f3ac08fb45c4cae7d14f466f1032bb35ab1949a4cd788fe74a1181de494f413c549c2986df1ae20992c", 0x3b}, {&(0x7f00000001c0)="474eeeff39b25ad196a0af4d3561572d7b31", 0x12}, {&(0x7f0000000600)="7ec8c6add8038dbb741c496d79bf9fb8fc07f196c9685f36b9a5eda115779dd9d0ea1a1eff3c4046e30f4e0741580d8c541ac44f825a10517706fb83804d1e4cdccaa40e2ea0d717ae715b79b8a9bc7f733718b4a0c29dda214f7c28d2935b8bdfe2bd4fd4a0aec837c576d12b8b9c", 0x6f}], 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x4000) sendmsg$netlink(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001140)=ANY=[@ANYBLOB="140100003e0001030000000000000000010100800c000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000fc8000009800", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000c6005b2a00000000a200", @ANYRES32, @ANYBLOB="0000c300000000800000d6800000002e8000004b000a000000000000000000db8074dae68f5db3db3c801f777d40d7fa8025b70dd5243e59a8fdf2f0504c11a7ed7252d44743a615df3b2d02cc8548b772f9587df4852ccc12fcba5bc0411caafa38de00000000000000"], 0x13a}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) accept(r0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f00000006c0)}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 453.688881ms ago: executing program 0 (id=394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) r2 = epoll_create1(0x0) socket$inet6(0xa, 0x3, 0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000008}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) accept4(r0, 0x0, &(0x7f0000000180), 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000100037e500"/20, @ANYRES32=r5, @ANYBLOB="c30803000b2ebe262800128008000100736974001c00028008000300e000000206000f000100000006001000af0d0000"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r9, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, 0x8) sendmmsg$inet6(r8, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x1}, 0x8) sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x800}, @NFTA_QUEUE_TOTAL={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x40) 394.097871ms ago: executing program 3 (id=395): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) listen(r3, 0x1) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0x1000000000000, 0x0, 0x10, r2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x4c, 0x18, 0x200, 0x1000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0x24, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x1e, 0x2, 'c\auacct.usage_percpu_user\x00'}}}]}, 0x4c}}, 0x240448d0) 306.422471ms ago: executing program 4 (id=396): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1cdd6744100700001b00000800", @ANYBLOB="e00000026401010000000000100000000000000b"], 0x30}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8001}}, 0x80, 0x0}, 0x54890) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b00", 0x34}], 0x1}, 0x200488c4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r5, r6, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x7e, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0e81003b0088486dae71fe00442ffffe880000000000000000000000000001fe8000000000000000000000000000aa0c20880b00000001040008000c0086dd080088be000000001d09d8080100000000000002080022eb00000003250675050200000000000003005f10170800655800000000"], 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r8, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000400)=""/108, 0x6c}, {&(0x7f0000002000)=""/4096, 0x1000}], 0x2}, 0x60}, {{0x0, 0x0, 0x0}, 0x100040}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x22, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000003b000b0026bd7000024000000f"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080046de0cd2006700000b069078ac1414bbac1414bb44048d114e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50026071907800e7cb208c3545823bbd700dc6f648471ef3cc4abebedb41e4daadf4df1d5bf010c827aa182f89014165016a32c9837bd74d7d58"], 0x0) 228.394996ms ago: executing program 2 (id=397): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ac41, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffff70, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x3, 0x3}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000080007b9af8ff00000000d6090000002000007baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608ffff010000008500000005010000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000080007b9af8ff00000000d6090000002000007baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608ffff010000008500000005010000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaaaa0288a832008100170086dd6600000000491101fe8000000000000000000000000000fdfe8800000000000000000000000001014e244e2400499078a20100001fdd221e18e6189f65be6fba31a735ba050fef73bbcd85839d15615486cd8c3e8c5d69495f1b8235b4c82483b355fd3670"], 0x8b) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x600, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x600, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 199.701911ms ago: executing program 3 (id=398): r0 = socket$inet6(0xa, 0x80001, 0x0) sendto$l2tp6(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000600)={0xa, 0x0, 0xfffffdbb, @remote, 0x1}, 0x20) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000000)="d2f15270c1f2824de5ea159eadf70f75a80d6c68", 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x14, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7f}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) close(0x4) 0s ago: executing program 3 (id=399): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000520001b9a9"], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd627}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. [ 73.191454][ T5605] cgroup: Unknown subsys name 'net' [ 73.297630][ T5605] cgroup: Unknown subsys name 'cpuset' [ 73.306947][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.641771][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.685456][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.694858][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.704922][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.714781][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.728496][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.785118][ T4938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.794579][ T4938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.802645][ T4938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.811096][ T4938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.819792][ T4938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.836162][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.849910][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.858362][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.872693][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.885554][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.935576][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.945119][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.953346][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.965343][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.974068][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.985409][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.992629][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.007397][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.019276][ T4938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.030964][ T4938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.483310][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.491488][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.499134][ T5617] bridge_slave_0: entered allmulticast mode [ 78.508807][ T5617] bridge_slave_0: entered promiscuous mode [ 78.550167][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.557393][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.566116][ T5617] bridge_slave_1: entered allmulticast mode [ 78.573823][ T5617] bridge_slave_1: entered promiscuous mode [ 78.610589][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.618807][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.626109][ T5622] bridge_slave_0: entered allmulticast mode [ 78.633102][ T5622] bridge_slave_0: entered promiscuous mode [ 78.670912][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.678323][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.686910][ T5622] bridge_slave_1: entered allmulticast mode [ 78.694754][ T5622] bridge_slave_1: entered promiscuous mode [ 78.711341][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.725026][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.795229][ T4938] Bluetooth: hci0: command tx timeout [ 78.843822][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.860580][ T5617] team0: Port device team_slave_0 added [ 78.871424][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.879815][ T4938] Bluetooth: hci1: command tx timeout [ 78.885627][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.892773][ T5631] bridge_slave_0: entered allmulticast mode [ 78.900113][ T5631] bridge_slave_0: entered promiscuous mode [ 78.909244][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.934802][ T5617] team0: Port device team_slave_1 added [ 78.951117][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.959551][ T4938] Bluetooth: hci2: command tx timeout [ 78.959835][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.974485][ T5631] bridge_slave_1: entered allmulticast mode [ 78.981596][ T5631] bridge_slave_1: entered promiscuous mode [ 79.035041][ T4938] Bluetooth: hci3: command tx timeout [ 79.041359][ T5622] team0: Port device team_slave_0 added [ 79.064835][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.072037][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.079512][ T5624] bridge_slave_0: entered allmulticast mode [ 79.087034][ T5624] bridge_slave_0: entered promiscuous mode [ 79.108938][ T5622] team0: Port device team_slave_1 added [ 79.114716][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.121829][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.129215][ T4938] Bluetooth: hci4: command tx timeout [ 79.134439][ T5633] bridge_slave_0: entered allmulticast mode [ 79.141657][ T5633] bridge_slave_0: entered promiscuous mode [ 79.150412][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.157544][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.183690][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.195869][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.203045][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.210337][ T5624] bridge_slave_1: entered allmulticast mode [ 79.217383][ T5624] bridge_slave_1: entered promiscuous mode [ 79.226854][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.245680][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.252817][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.260738][ T5633] bridge_slave_1: entered allmulticast mode [ 79.269083][ T5633] bridge_slave_1: entered promiscuous mode [ 79.280351][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.287472][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.313670][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.337720][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.391244][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.398470][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.424795][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.449686][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.473266][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.480526][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.506522][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.526840][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.538190][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.549326][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.559916][ T5631] team0: Port device team_slave_0 added [ 79.601660][ T5631] team0: Port device team_slave_1 added [ 79.612005][ T5617] hsr_slave_0: entered promiscuous mode [ 79.618606][ T5617] hsr_slave_1: entered promiscuous mode [ 79.680055][ T5633] team0: Port device team_slave_0 added [ 79.687737][ T5624] team0: Port device team_slave_0 added [ 79.703073][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.710221][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.736272][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.749045][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.756342][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.782313][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.798433][ T5622] hsr_slave_0: entered promiscuous mode [ 79.804956][ T5622] hsr_slave_1: entered promiscuous mode [ 79.811070][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 79.817099][ T5622] Cannot create hsr debugfs directory [ 79.825621][ T5633] team0: Port device team_slave_1 added [ 79.833617][ T5624] team0: Port device team_slave_1 added [ 79.911467][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.918715][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.945279][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.978821][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.986103][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.012451][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.024126][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.031443][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.057433][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.092496][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.099553][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.125586][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.199076][ T5631] hsr_slave_0: entered promiscuous mode [ 80.205738][ T5631] hsr_slave_1: entered promiscuous mode [ 80.211764][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 80.217650][ T5631] Cannot create hsr debugfs directory [ 80.340308][ T5624] hsr_slave_0: entered promiscuous mode [ 80.346868][ T5624] hsr_slave_1: entered promiscuous mode [ 80.353193][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 80.359353][ T5624] Cannot create hsr debugfs directory [ 80.386603][ T5633] hsr_slave_0: entered promiscuous mode [ 80.392836][ T5633] hsr_slave_1: entered promiscuous mode [ 80.400165][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 80.405990][ T5633] Cannot create hsr debugfs directory [ 80.682194][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.695376][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.717949][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.729446][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.737944][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.747759][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.788143][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.798001][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.874135][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.874462][ T4938] Bluetooth: hci0: command tx timeout [ 80.889453][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.897506][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.907665][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.915895][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.925742][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.936498][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.945882][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.954982][ T4938] Bluetooth: hci1: command tx timeout [ 81.034487][ T4938] Bluetooth: hci2: command tx timeout [ 81.045522][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.056339][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.070328][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.081052][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.099737][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.108993][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.115066][ T4938] Bluetooth: hci3: command tx timeout [ 81.132597][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.143032][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.194285][ T4938] Bluetooth: hci4: command tx timeout [ 81.232106][ T5633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.242686][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.250567][ T5633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.261050][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.269157][ T5633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.281211][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.289454][ T5633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.298324][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.350065][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.416395][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.430199][ T5624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.441001][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.449373][ T5624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.458659][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.466785][ T5624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.477248][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.495376][ T5624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.505466][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.518518][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.554719][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.562170][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.580837][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.609204][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.616365][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.627841][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.634945][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.668843][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.675974][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.739915][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.795365][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.817112][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.868758][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.875948][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.891894][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.932678][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.940004][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.956829][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.964039][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.984902][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.010909][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.018096][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.100411][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.138497][ T5631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.227322][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.234526][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.275224][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.282418][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.835440][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.958092][ T4938] Bluetooth: hci0: command tx timeout [ 83.034581][ T4938] Bluetooth: hci1: command tx timeout [ 83.045074][ T5617] veth0_vlan: entered promiscuous mode [ 83.089550][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.110738][ T5617] veth1_vlan: entered promiscuous mode [ 83.117175][ T4938] Bluetooth: hci2: command tx timeout [ 83.173934][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.194344][ T4938] Bluetooth: hci3: command tx timeout [ 83.275791][ T4938] Bluetooth: hci4: command tx timeout [ 83.292580][ T5617] veth0_macvtap: entered promiscuous mode [ 83.347510][ T5617] veth1_macvtap: entered promiscuous mode [ 83.387260][ T5622] veth0_vlan: entered promiscuous mode [ 83.408367][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.425641][ T5631] veth0_vlan: entered promiscuous mode [ 83.444437][ T5622] veth1_vlan: entered promiscuous mode [ 83.463274][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.479920][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.498340][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.527541][ T5631] veth1_vlan: entered promiscuous mode [ 83.541111][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.556292][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.580658][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.609920][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.669966][ T5622] veth0_macvtap: entered promiscuous mode [ 83.708628][ T5622] veth1_macvtap: entered promiscuous mode [ 83.755785][ T5633] veth0_vlan: entered promiscuous mode [ 83.828683][ T5631] veth0_macvtap: entered promiscuous mode [ 83.841811][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.846017][ T5633] veth1_vlan: entered promiscuous mode [ 83.856926][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.861323][ T5631] veth1_macvtap: entered promiscuous mode [ 83.886686][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.929732][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.960021][ T5624] veth0_vlan: entered promiscuous mode [ 83.970575][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.988333][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.997688][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.007720][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.016720][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.027053][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.036362][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.049594][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.059852][ T5624] veth1_vlan: entered promiscuous mode [ 84.118234][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.128183][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.158591][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.185077][ T5617] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.200918][ T5633] veth0_macvtap: entered promiscuous mode [ 84.209691][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.229536][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.238464][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.267848][ T5633] veth1_macvtap: entered promiscuous mode [ 84.347212][ T5810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.378416][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.389663][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.411268][ T5624] veth0_macvtap: entered promiscuous mode [ 84.423718][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.439357][ T5809] tipc: Started in network mode [ 84.445784][ T5809] tipc: Node identity 8ecab3b571bd, cluster identity 4711 [ 84.453643][ T5809] tipc: Enabled bearer , priority 0 [ 84.461378][ T5810] syzkaller0: entered promiscuous mode [ 84.467411][ T5810] syzkaller0: entered allmulticast mode [ 84.481646][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.491528][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.509904][ T5624] veth1_macvtap: entered promiscuous mode [ 84.521911][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.545301][ T5810] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.588582][ T5809] tipc: Resetting bearer [ 84.599599][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.609325][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.627081][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.636636][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.646127][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.656277][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.674615][ T5808] tipc: Resetting bearer [ 84.676056][ T5813] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20002 [ 84.700382][ T5808] tipc: Disabling bearer [ 84.729633][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.753742][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.846663][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.862324][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.887465][ T5818] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 84.897082][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.907560][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.949527][ T5822] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 85.034300][ T4938] Bluetooth: hci0: command tx timeout [ 85.040660][ T5822] warning: `syz.3.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.101438][ T5824] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 85.115943][ T4938] Bluetooth: hci1: command tx timeout [ 85.124835][ T5827] Zero length message leads to an empty skb [ 85.137310][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.156917][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.195195][ T4938] Bluetooth: hci2: command tx timeout [ 85.256625][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.270833][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.275225][ T4938] Bluetooth: hci3: command tx timeout [ 85.328416][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.344609][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.354928][ T4938] Bluetooth: hci4: command tx timeout [ 85.460988][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.480991][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.102317][ T5868] ip6gretap0: entered promiscuous mode [ 86.117781][ T5865] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15'. [ 86.129703][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 86.178899][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 86.229479][ T5878] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.234352][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 86.362515][ T5878] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.467992][ T5889] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 86.491559][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.501979][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.516410][ T5889] netlink: 224 bytes leftover after parsing attributes in process `syz.0.19'. [ 86.542737][ T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.586421][ T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.680378][ T24] cfg80211: failed to load regulatory.db [ 87.184751][ T5916] Bluetooth: MGMT ver 1.23 [ 87.222230][ T5916] netlink: 44 bytes leftover after parsing attributes in process `syz.2.25'. [ 87.336476][ T5922] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.387683][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 87.441559][ T5922] netlink: 36 bytes leftover after parsing attributes in process `syz.3.27'. [ 89.118772][ T5987] pim6reg1: entered promiscuous mode [ 89.134211][ T5987] pim6reg1: entered allmulticast mode [ 113.472087][ T6024] __nla_validate_parse: 4 callbacks suppressed [ 113.472127][ T6024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.50'. [ 113.653439][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.662319][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.899075][ T6037] netlink: 100 bytes leftover after parsing attributes in process `syz.0.55'. [ 113.952986][ T6037] netlink: 40 bytes leftover after parsing attributes in process `syz.0.55'. [ 114.065769][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.091146][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.327152][ T14] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.354267][ T14] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.389717][ T14] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.418803][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.499309][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 114.538644][ T6050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.59'. [ 114.765185][ T6063] Illegal XDP return value 4294967294 on prog (id 19) dev N/A, expect packet loss! [ 114.834532][ T6058] netlink: 67 bytes leftover after parsing attributes in process `syz.0.61'. [ 114.853638][ T6064] netlink: 67 bytes leftover after parsing attributes in process `syz.0.61'. [ 115.126863][ T6073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.66'. [ 115.402956][ T6097] netlink: 'syz.1.69': attribute type 25 has an invalid length. [ 115.462613][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 115.536566][ T6111] --map-set only usable from mangle table [ 115.600568][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 115.613718][ T1169] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.631176][ T1169] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.658626][ T1169] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.672758][ T1169] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.113060][ T6125] ip6tnl1: entered promiscuous mode [ 116.513458][ T6141] macsec1: entered promiscuous mode [ 117.080251][ T6176] syzkaller0: entered promiscuous mode [ 117.099525][ T6176] syzkaller0: entered allmulticast mode [ 117.140967][ T6176] TC_ACT_REPEAT abuse ? [ 117.161593][ T6184] atomic_op ffff88807657d998 conn xmit_atomic 0000000000000000 [ 117.172842][ T6186] Bluetooth: MGMT ver 1.23 [ 117.305892][ T809] IPVS: starting estimator thread 0... [ 117.425187][ T6193] IPVS: using max 31 ests per chain, 74400 per kthread [ 117.783965][ T6209] netlink: 'syz.4.96': attribute type 2 has an invalid length. [ 117.802500][ T6209] nbd: must specify at least one socket [ 117.943645][ T6218] netlink: 'syz.0.99': attribute type 10 has an invalid length. [ 117.991813][ T6218] team0: Port device dummy0 added [ 118.340280][ T6235] batadv0: entered promiscuous mode [ 118.347959][ T6235] macvtap1: entered allmulticast mode [ 118.353361][ T6235] batadv0: entered allmulticast mode [ 118.360047][ T6235] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 118.371741][ T6235] batadv0: left allmulticast mode [ 118.377124][ T6235] batadv0: left promiscuous mode [ 118.405800][ T6237] netlink: 'syz.3.104': attribute type 13 has an invalid length. [ 118.493494][ T6240] netlink: 'syz.4.105': attribute type 2 has an invalid length. [ 118.675105][ T6246] lo speed is unknown, defaulting to 1000 [ 118.714062][ T6246] lo speed is unknown, defaulting to 1000 [ 118.761657][ T6246] lo speed is unknown, defaulting to 1000 [ 118.791842][ T6246] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 118.837943][ T6246] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 118.900815][ T6246] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 118.916961][ T6246] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 118.945715][ T6246] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 119.008112][ T6246] lo speed is unknown, defaulting to 1000 [ 119.018180][ T6246] lo speed is unknown, defaulting to 1000 [ 119.031824][ T6246] lo speed is unknown, defaulting to 1000 [ 119.040763][ T6246] lo speed is unknown, defaulting to 1000 [ 119.050176][ T6246] lo speed is unknown, defaulting to 1000 [ 120.807835][ T6221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.042125][ T6264] __nla_validate_parse: 14 callbacks suppressed [ 121.042144][ T6264] netlink: 168 bytes leftover after parsing attributes in process `syz.4.110'. [ 121.224821][ T6275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.114'. [ 121.266194][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.114'. [ 121.307976][ T6280] xt_hashlimit: size too large, truncated to 1048576 [ 121.580008][ T6287] netlink: 48 bytes leftover after parsing attributes in process `syz.1.117'. [ 121.683298][ T6292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.118'. [ 121.772851][ T6292] ip6gre1: entered promiscuous mode [ 121.789470][ T6292] ip6gre1: entered allmulticast mode [ 121.958908][ T6314] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 122.224924][ T6334] netlink: 88 bytes leftover after parsing attributes in process `syz.1.127'. [ 122.258633][ T6336] C: renamed from veth1_to_team (while UP) [ 122.284733][ T6336] netlink: 164 bytes leftover after parsing attributes in process `syz.0.128'. [ 122.615208][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.133'. [ 122.663481][ T6356] tipc: Enabling of bearer rejected, failed to enable media [ 122.680007][ T6358] sch_fq: defrate 8 ignored. [ 122.936285][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.141'. [ 123.077799][ T6390] 8021q: VLANs not supported on ip6_vti0 [ 123.148633][ T6392] xfrm0 speed is unknown, defaulting to 1000 [ 123.177940][ T6397] netlink: 164 bytes leftover after parsing attributes in process `syz.0.145'. [ 123.209795][ T6392] xfrm0 speed is unknown, defaulting to 1000 [ 123.245623][ T6392] xfrm0 speed is unknown, defaulting to 1000 [ 123.610292][ T6421] atomic_op ffff88807edf6198 conn xmit_atomic 0000000000000000 [ 123.661871][ T5862] IPVS: starting estimator thread 0... [ 123.794512][ T6425] IPVS: using max 29 ests per chain, 69600 per kthread [ 123.800711][ T6427] tipc: Enabling of bearer rejected, failed to enable media [ 123.850891][ T6392] infiniband syz0: set active [ 123.864968][ T6392] infiniband syz0: added xfrm0 [ 123.878347][ T24] xfrm0 speed is unknown, defaulting to 1000 [ 123.891862][ T6392] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 123.898020][ T6392] infiniband syz0: Couldn't open port 1 [ 123.913522][ T6392] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 123.931617][ T6392] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 123.980207][ T6392] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 124.066299][ T6436] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 124.087067][ T6392] RDS/IB: syz0: added [ 124.094109][ T6392] smc: adding ib device syz0 with port count 1 [ 124.105578][ T6392] smc: ib device syz0 port 1 has no pnetid [ 124.120747][ T809] xfrm0 speed is unknown, defaulting to 1000 [ 124.131996][ T6392] xfrm0 speed is unknown, defaulting to 1000 [ 124.483217][ T6447] C: renamed from veth1_to_team [ 124.538515][ T6450] netlink: 'syz.1.160': attribute type 9 has an invalid length. [ 124.569693][ T6455] sctp: [Deprecated]: syz.0.161 (pid 6455) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.569693][ T6455] Use struct sctp_sack_info instead [ 124.727829][ T6392] xfrm0 speed is unknown, defaulting to 1000 [ 125.345024][ T6481] netlink: 'syz.0.168': attribute type 8 has an invalid length. [ 125.387690][ T6481] bond0: entered promiscuous mode [ 125.404557][ T6481] bond_slave_0: entered promiscuous mode [ 125.433747][ T6481] bond_slave_1: entered promiscuous mode [ 125.448187][ T6481] gretap0: entered promiscuous mode [ 125.456263][ T6481] veth0_to_batadv: entered promiscuous mode [ 125.463510][ T6481] hsr1: entered promiscuous mode [ 126.818061][ T6392] xfrm0 speed is unknown, defaulting to 1000 [ 126.818268][ T6481] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 126.839006][ T6492] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 126.840697][ T6493] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 126.997461][ T6500] vlan1: entered promiscuous mode [ 127.084649][ T6504] netlink: 'syz.1.172': attribute type 1 has an invalid length. [ 127.219172][ T6504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.237244][ T6506] bond1: entered allmulticast mode [ 127.298135][ T6512] bond1: (slave ip6gretap1): making interface the new active one [ 127.335290][ T6512] ip6gretap1: entered allmulticast mode [ 127.343538][ T6512] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 127.438050][ T6392] xfrm0 speed is unknown, defaulting to 1000 [ 127.539480][ T4938] Bluetooth: hci4: link tx timeout [ 127.546067][ T4938] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.560380][ T4938] Bluetooth: hci4: link tx timeout [ 127.565775][ T4938] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.574738][ T4938] Bluetooth: hci4: link tx timeout [ 127.580832][ T4938] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.589426][ T4938] Bluetooth: hci4: link tx timeout [ 127.598658][ T4938] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.828674][ T6544] __nla_validate_parse: 19 callbacks suppressed [ 127.828691][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.184'. [ 128.226873][ T6556] bond1 (unregistering): Released all slaves [ 128.322467][ T6572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.192'. [ 128.334021][ T6392] xfrm0 speed is unknown, defaulting to 1000 [ 128.352225][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 128.388905][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 128.984609][ T6593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.199'. [ 129.006882][ T6593] netlink: 'syz.4.199': attribute type 16 has an invalid length. [ 129.014859][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 129.053469][ T6595] netlink: 36 bytes leftover after parsing attributes in process `syz.1.200'. [ 129.595296][ T4938] Bluetooth: hci4: command 0x0406 tx timeout [ 129.828613][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 130.375479][ T6668] openvswitch: netlink: Message has 8 unknown bytes. [ 130.508236][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 130.622248][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.622414][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 130.659825][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.710522][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.739366][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.822840][ T6685] netlink: 'syz.1.224': attribute type 1 has an invalid length. [ 130.917916][ T6666] --map-set only usable from mangle table [ 130.969051][ T6685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.979250][ T6663] syzkaller1: entered promiscuous mode [ 130.985533][ T6663] syzkaller1: entered allmulticast mode [ 131.044081][ T6688] bond2: (slave erspan0): making interface the new active one [ 131.081149][ T6688] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 131.571006][ T6710] bond3: Unable to set down delay as MII monitoring is disabled [ 131.642240][ T6710] bond3 (unregistering): Released all slaves [ 132.718389][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.729670][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.887254][ T6779] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 132.913077][ T6779] netlink: 'syz.2.246': attribute type 2 has an invalid length. [ 132.931221][ T6779] __nla_validate_parse: 7 callbacks suppressed [ 132.931237][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 133.016379][ T6795] atomic_op ffff888055627998 conn xmit_atomic 0000000000000000 [ 133.117978][ T24] IPVS: starting estimator thread 0... [ 133.227397][ T6800] IPVS: using max 40 ests per chain, 96000 per kthread [ 133.271004][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'. [ 133.353338][ T6788] syzkaller0: entered promiscuous mode [ 133.374701][ T5625] block nbd0: Receive control failed (result -1) [ 133.402722][ T6788] syzkaller0: entered allmulticast mode [ 133.786040][ T6818] netlink: 'syz.3.251': attribute type 1 has an invalid length. [ 133.892753][ T6825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.252'. [ 133.928423][ T6818] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 134.072009][ T6829] syzkaller0: entered promiscuous mode [ 134.104099][ T6833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.254'. [ 134.146391][ T6829] syzkaller0: entered allmulticast mode [ 134.600873][ T6859] netlink: 'syz.2.260': attribute type 9 has an invalid length. [ 134.762404][ T6866] atomic_op ffff88802c404198 conn xmit_atomic 0000000000000000 [ 134.994330][ T6872] block nbd1: Unsupported socket: should be TCP or UNIX. [ 135.568526][ T6895] netlink: 36 bytes leftover after parsing attributes in process `syz.4.270'. [ 135.578044][ T6889] bond1: entered allmulticast mode [ 135.604769][ T6889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.623156][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.270'. [ 135.646728][ T6897] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20003 [ 135.960633][ T6919] netlink: 144 bytes leftover after parsing attributes in process `syz.4.276'. [ 136.120113][ T6928] openvswitch: netlink: Actions may not be safe on all matching packets [ 136.218141][ T6937] netlink: 'syz.4.278': attribute type 1 has an invalid length. [ 136.263434][ T6943] netlink: 'syz.1.279': attribute type 2 has an invalid length. [ 136.294216][ T6943] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 136.324866][ T6943] netlink: 36 bytes leftover after parsing attributes in process `syz.1.279'. [ 136.338621][ T6937] vlan3: entered allmulticast mode [ 136.345966][ T6937] bond1: entered allmulticast mode [ 136.359299][ T6950] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 136.611715][ T6966] netlink: 44 bytes leftover after parsing attributes in process `syz.2.283'. [ 136.632398][ T6966] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 136.833214][ T6976] 0: reclassify loop, rule prio 0, protocol 700 [ 137.851653][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 138.030630][ T7023] netlink: 52 bytes leftover after parsing attributes in process `syz.2.289'. [ 138.175561][ T7028] netlink: 'syz.2.291': attribute type 1 has an invalid length. [ 138.204591][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.291'. [ 138.214950][ T7028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.247702][ T7028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.257826][ T7028] bond1: (slave geneve2): making interface the new active one [ 138.266463][ T7028] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 138.275594][ T1169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 138.287686][ T1169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 138.297226][ T1169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 138.307045][ T1169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 138.906178][ T6920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.920665][ T7027] netlink: 236 bytes leftover after parsing attributes in process `syz.2.291'. [ 138.940928][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 139.038265][ T7031] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20000 [ 139.148841][ T7035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.293'. [ 139.189044][ T7035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.197583][ T7035] IPv6: NLM_F_CREATE should be set when creating new route [ 139.197785][ T7038] 0: reclassify loop, rule prio 0, protocol 700 [ 139.206005][ T7035] IPv6: NLM_F_CREATE should be set when creating new route [ 139.229685][ T7042] netlink: 128 bytes leftover after parsing attributes in process `syz.4.297'. [ 139.251580][ T7039] Unsupported ieee802154 address type: 0 [ 139.392869][ T7048] netlink: 'syz.3.299': attribute type 16 has an invalid length. [ 139.401699][ T7048] netlink: 'syz.3.299': attribute type 17 has an invalid length. [ 139.447996][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.460644][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.496355][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 139.565407][ T7048] bond1: left allmulticast mode [ 139.657210][ T5773] xfrm0 speed is unknown, defaulting to 1000 [ 139.761635][ T7060] netlink: 'syz.0.303': attribute type 29 has an invalid length. [ 139.770191][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 139.781518][ T7060] netlink: 'syz.0.303': attribute type 29 has an invalid length. [ 139.791912][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 140.002927][ T7065] bridge_slave_0: left allmulticast mode [ 140.015476][ T7065] bridge_slave_0: left promiscuous mode [ 140.041925][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.091137][ T7065] bridge_slave_1: left allmulticast mode [ 140.103818][ T7065] bridge_slave_1: left promiscuous mode [ 140.116946][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.159690][ T7065] bond0: (slave bond_slave_0): Releasing backup interface [ 140.186479][ T7065] bond0: (slave bond_slave_1): Releasing backup interface [ 140.223032][ T7065] team0: Port device team_slave_0 removed [ 140.258035][ T7079] xt_hashlimit: max too large, truncated to 1048576 [ 140.292744][ T7065] team0: Port device team_slave_1 removed [ 140.319241][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.341369][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.379451][ T7085] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.389247][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.422899][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.481438][ T7065] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.570840][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 140.820688][ T7103] netlink: 'syz.0.314': attribute type 21 has an invalid length. [ 141.173050][ T7119] netlink: 'syz.2.321': attribute type 29 has an invalid length. [ 141.194792][ T7116] syzkaller0: entered promiscuous mode [ 141.213200][ T7116] syzkaller0: entered allmulticast mode [ 141.308285][ T7116] tipc: Enabled bearer , priority 0 [ 141.325041][ T7116] tipc: Resetting bearer [ 141.341494][ T7124] validate_nla: 1 callbacks suppressed [ 141.341512][ T7124] netlink: 'syz.4.322': attribute type 1 has an invalid length. [ 141.447118][ T7115] tipc: Resetting bearer [ 141.664876][ T7115] tipc: Disabling bearer [ 141.946375][ T7124] netlink: 'syz.4.322': attribute type 1 has an invalid length. [ 142.199153][ T7144] lo speed is unknown, defaulting to 1000 [ 142.525604][ T7158] nbd2: detected capacity change from 0 to 63 [ 142.597821][ T7158] syzkaller0: entered promiscuous mode [ 142.618066][ T7169] netlink: zone id is out of range [ 142.623539][ T7169] netlink: zone id is out of range [ 142.629611][ T7169] netlink: zone id is out of range [ 142.632710][ T7158] syzkaller0: entered allmulticast mode [ 142.639476][ T7169] netlink: zone id is out of range [ 142.655018][ T7158] 0: reclassify loop, rule prio 0, protocol 800 [ 142.668231][ T7169] netlink: zone id is out of range [ 142.676934][ T7169] netlink: zone id is out of range [ 143.138578][ T5625] block nbd2: Receive control failed (result -104) [ 143.342130][ T7187] __nla_validate_parse: 4 callbacks suppressed [ 143.342148][ T7187] netlink: 44 bytes leftover after parsing attributes in process `syz.0.340'. [ 143.449488][ T7194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.341'. [ 143.522311][ T7194] netlink: 32 bytes leftover after parsing attributes in process `syz.4.341'. [ 143.590126][ T7201] syz.1.344: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 143.629783][ T7201] CPU: 1 UID: 0 PID: 7201 Comm: syz.1.344 Not tainted syzkaller #0 PREEMPT(full) [ 143.629810][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.629829][ T7201] Call Trace: [ 143.629837][ T7201] [ 143.629846][ T7201] dump_stack_lvl+0xe8/0x150 [ 143.629892][ T7201] warn_alloc+0x24c/0x270 [ 143.629917][ T7201] ? stack_depot_save_flags+0x33/0x800 [ 143.629943][ T7201] ? __pfx_warn_alloc+0x10/0x10 [ 143.629967][ T7201] ? kasan_save_track+0x3e/0x80 [ 143.629987][ T7201] ? __kasan_kmalloc+0x93/0xb0 [ 143.630010][ T7201] ? xsk_setsockopt+0x52a/0x960 [ 143.630030][ T7201] ? do_sock_setsockopt+0x17c/0x1b0 [ 143.630055][ T7201] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 143.630080][ T7201] ? do_syscall_64+0x174/0x580 [ 143.630104][ T7201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.630132][ T7201] __vmalloc_node_range_noprof+0x12c/0x1730 [ 143.630184][ T7201] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 143.630211][ T7201] ? __kasan_kmalloc+0x93/0xb0 [ 143.630236][ T7201] ? __kmalloc_cache_noprof+0x32d/0x660 [ 143.630260][ T7201] ? __kmalloc_cache_noprof+0x150/0x660 [ 143.630286][ T7201] vmalloc_user_noprof+0xad/0xe0 [ 143.630308][ T7201] ? xskq_create+0xbf/0x170 [ 143.630329][ T7201] xskq_create+0xbf/0x170 [ 143.630350][ T7201] xsk_init_queue+0x8a/0xe0 [ 143.630371][ T7201] xsk_setsockopt+0x52a/0x960 [ 143.630388][ T7201] ? __fget_files+0x2a/0x420 [ 143.630413][ T7201] ? __pfx_xsk_setsockopt+0x10/0x10 [ 143.630432][ T7201] ? __pfx_aa_sk_perm+0x10/0x10 [ 143.630469][ T7201] ? aa_sock_opt_perm+0xff/0x1a0 [ 143.630533][ T7201] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 143.630553][ T7201] ? __pfx_xsk_setsockopt+0x10/0x10 [ 143.630576][ T7201] do_sock_setsockopt+0x17c/0x1b0 [ 143.630605][ T7201] __x64_sys_setsockopt+0x13d/0x1b0 [ 143.630633][ T7201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.630651][ T7201] do_syscall_64+0x174/0x580 [ 143.630673][ T7201] ? trace_irq_disable+0x3b/0x140 [ 143.630692][ T7201] ? clear_bhb_loop+0x40/0x90 [ 143.630711][ T7201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.630726][ T7201] RIP: 0033:0x7f5483d9de59 [ 143.630752][ T7201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.630766][ T7201] RSP: 002b:00007f5484b94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 143.630785][ T7201] RAX: ffffffffffffffda RBX: 00007f5484025fa0 RCX: 00007f5483d9de59 [ 143.630796][ T7201] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 143.630806][ T7201] RBP: 00007f5483e33e6f R08: 0000000000000004 R09: 0000000000000000 [ 143.630816][ T7201] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.630826][ T7201] R13: 00007f5484026038 R14: 00007f5484025fa0 R15: 00007ffc75179498 [ 143.630854][ T7201] [ 143.634119][ T7201] Mem-Info: [ 143.927593][ T7201] active_anon:13194 inactive_anon:0 isolated_anon:0 [ 143.927593][ T7201] active_file:0 inactive_file:43123 isolated_file:0 [ 143.927593][ T7201] unevictable:768 dirty:251 writeback:0 [ 143.927593][ T7201] slab_reclaimable:10433 slab_unreclaimable:99475 [ 143.927593][ T7201] mapped:31388 shmem:1289 pagetables:1178 [ 143.927593][ T7201] sec_pagetables:0 bounce:0 [ 143.927593][ T7201] kernel_misc_reclaimable:0 [ 143.927593][ T7201] free:1324378 free_pcp:8523 free_cma:0 [ 143.981703][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.346'. [ 143.985565][ T7201] Node 0 active_anon:52876kB inactive_anon:0kB active_file:0kB inactive_file:172292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125552kB dirty:1004kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12324kB pagetables:4624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 143.997876][ T7205] ip6gre2: entered promiscuous mode [ 144.030278][ T7205] ip6gre2: entered allmulticast mode [ 144.052077][ T7203] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.101225][ T7208] netlink: 'syz.2.347': attribute type 58 has an invalid length. [ 144.105026][ T7201] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 144.141851][ T7201] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.173759][ T7201] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 144.179656][ T7201] Node 0 DMA32 free:1334884kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39020kB inactive_anon:0kB active_file:0kB inactive_file:172292kB unevictable:1536kB writepending:1008kB zspages:0kB present:3129332kB managed:2548816kB mlocked:0kB bounce:0kB free_pcp:40944kB local_pcp:19932kB free_cma:0kB [ 144.214857][ T7201] lowmem_reserve[]: 0 0 0 0 0 [ 144.219982][ T7201] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:268kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.246166][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 144.255828][ T7201] lowmem_reserve[]: 0 0 0 0 0 [ 144.320077][ T7211] bond0: (slave bond_slave_1): Releasing backup interface [ 144.341924][ T7201] Node 1 Normal free:3953712kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.383116][ T7201] lowmem_reserve[]: 0 0 0 0 0 [ 144.413834][ T7201] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 144.485957][ T7201] Node 0 DMA32: 439*4kB (UM) 197*8kB (UME) 150*16kB (UME) 82*32kB (UME) 53*64kB (UME) 17*128kB (UME) 9*256kB (UME) 1*512kB (U) 1*1024kB (E) 1*2048kB (U) 321*4096kB (UM) = 1334628kB [ 144.522612][ T7201] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 144.567892][ T7221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.351'. [ 144.576437][ T7201] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 4*16kB (UM) 8*32kB (UM) 7*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (U) 963*4096kB (M) = 3953712kB [ 144.623483][ T7201] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.638763][ T7201] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.665117][ T7201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.682329][ T7201] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.700987][ T7201] 44408 total pagecache pages [ 144.705891][ T7201] 0 pages in swap cache [ 144.717772][ T7201] Free swap = 124996kB [ 144.727883][ T7201] Total swap = 124996kB [ 144.735014][ T7201] 2097051 pages RAM [ 144.747048][ T7201] 0 pages HighMem/MovableOnly [ 144.752135][ T7201] 428165 pages reserved [ 144.765136][ T7201] 0 pages cma reserved [ 144.947985][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 145.540393][ T7252] can: request_module (can-proto-4) failed. [ 145.700826][ T7264] syz_tun: entered allmulticast mode [ 145.733747][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.362'. [ 145.787265][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.362'. [ 145.797226][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 145.953275][ T7265] syz_tun: left allmulticast mode [ 145.955314][ T7282] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 145.955314][ T7282] Please contact the netfilter-devel mailing list or update your nftables rules. [ 146.066004][ T7273] lo speed is unknown, defaulting to 1000 [ 146.116295][ T7288] netlink: 'syz.3.365': attribute type 4 has an invalid length. [ 146.121835][ T7273] xfrm0 speed is unknown, defaulting to 1000 [ 146.397879][ T7303] syzkaller0: entered promiscuous mode [ 146.412743][ T7303] syzkaller0: entered allmulticast mode [ 146.829760][ T7308] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 146.900834][ T7320] (: renamed from bridge_slave_0 [ 146.969849][ T6303] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.997139][ T6303] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.040792][ T6303] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.261338][ T6303] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.570986][ T7336] syzkaller0: entered promiscuous mode [ 147.590952][ T7336] syzkaller0: entered allmulticast mode [ 148.434041][ T7377] netlink: 'syz.0.390': attribute type 58 has an invalid length. [ 149.574916][ T7374] tipc: Enabling of bearer rejected, failed to enable media [ 150.150468][ T7403] C: renamed from veth1_to_team (while UP) [ 150.229448][ T7403] __nla_validate_parse: 3 callbacks suppressed [ 150.229465][ T7403] netlink: 164 bytes leftover after parsing attributes in process `syz.4.396'. [ 150.266987][ T7407] BUG: Bad page state in process syz.4.396 pfn:76e26 [ 150.273957][ T7407] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888076e268c0 pfn:0x76e26 [ 150.284362][ T7407] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 150.291507][ T7407] raw: 00fff00000000000 dead000000000040 ffff88801b19b000 0000000000000000 [ 150.300178][ T7407] raw: ffff888076e268c0 3ffffffffffffffc 00000000ffffffff 0000000000000000 [ 150.308839][ T7407] page dumped because: page_pool leak [ 150.314296][ T7407] page_owner tracks the page as allocated [ 150.320258][ T7407] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 809, tgid 809 (kworker/1:2), ts 147354884634, free_ts 147336447050 [ 150.338199][ T7407] post_alloc_hook+0x1f9/0x250 [ 150.342998][ T7407] get_page_from_freelist+0x21fa/0x2270 [ 150.348686][ T7407] __alloc_frozen_pages_noprof+0x18d/0x380 [ 150.354565][ T7407] __alloc_pages_noprof+0x10/0x100 [ 150.359708][ T7407] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 150.365249][ T7407] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 150.371352][ T7407] page_pool_alloc_frag_netmem+0x563/0x9b0 [ 150.377264][ T7407] skb_pp_cow_data+0x287/0x19a0 [ 150.382148][ T7407] do_xdp_generic+0x770/0x12d0 [ 150.386994][ T7407] __netif_receive_skb_core+0x10e0/0x30b0 [ 150.392826][ T7407] process_backlog+0x706/0x1860 [ 150.397765][ T7407] __napi_poll+0xaa/0x330 [ 150.402115][ T7407] net_rx_action+0x61d/0xf50 [ 150.406798][ T7407] handle_softirqs+0x225/0x840 [ 150.411581][ T7407] do_softirq+0x76/0xd0 [ 150.415819][ T7407] __local_bh_enable_ip+0xf8/0x130 [ 150.420968][ T7407] page last free pid 23 tgid 23 stack trace: [ 150.427017][ T7407] __free_frozen_pages+0xc1e/0xd10 [ 150.432160][ T7407] tlb_remove_table_rcu+0x85/0x100 [ 150.437348][ T7407] rcu_core+0x78b/0x10a0 [ 150.441622][ T7407] handle_softirqs+0x225/0x840 [ 150.446468][ T7407] run_ksoftirqd+0x36/0x60 [ 150.450905][ T7407] smpboot_thread_fn+0x57c/0xa80 [ 150.455923][ T7407] kthread+0x388/0x470 [ 150.460025][ T7407] ret_from_fork+0x514/0xb70 [ 150.464710][ T7407] ret_from_fork_asm+0x1a/0x30 [ 150.469491][ T7407] Modules linked in: [ 150.473407][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.4.396 Not tainted syzkaller #0 PREEMPT(full) [ 150.473437][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.473447][ T7407] Call Trace: [ 150.473455][ T7407] [ 150.473462][ T7407] dump_stack_lvl+0xe8/0x150 [ 150.473494][ T7407] bad_page+0x17f/0x1c0 [ 150.473515][ T7407] __free_frozen_pages+0xcc2/0xd10 [ 150.473548][ T7407] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 150.473590][ T7407] bpf_xdp_adjust_tail+0x1ce/0x210 [ 150.473624][ T7407] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 150.473644][ T7407] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 150.473691][ T7407] do_xdp_generic+0xac2/0x12d0 [ 150.473711][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 150.473738][ T7407] ? do_xdp_generic+0x6ba/0x12d0 [ 150.473765][ T7407] ? __pfx_do_xdp_generic+0x10/0x10 [ 150.473797][ T7407] ? tun_get_user+0x23cb/0x4370 [ 150.473837][ T7407] ? tun_get_user+0x23cb/0x4370 [ 150.473860][ T7407] tun_get_user+0x24f8/0x4370 [ 150.473899][ T7407] ? aa_file_perm+0x18b/0x15f0 [ 150.473924][ T7407] ? aa_file_perm+0x4ed/0x15f0 [ 150.473944][ T7407] ? __pfx_tun_get_user+0x10/0x10 [ 150.473971][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 150.474000][ T7407] ? __pfx___futex_wait+0x10/0x10 [ 150.474030][ T7407] ? ref_tracker_alloc+0x341/0x4b0 [ 150.474055][ T7407] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 150.474079][ T7407] ? tun_get+0x1c/0x2f0 [ 150.474103][ T7407] ? tun_get+0x1c/0x2f0 [ 150.474135][ T7407] ? tun_get+0x1c/0x2f0 [ 150.474156][ T7407] ? tun_get+0x1c/0x2f0 [ 150.474184][ T7407] tun_chr_write_iter+0x113/0x200 [ 150.474210][ T7407] vfs_write+0x612/0xba0 [ 150.474244][ T7407] ? __pfx_vfs_write+0x10/0x10 [ 150.474281][ T7407] ? __fget_files+0x2a/0x420 [ 150.474314][ T7407] ksys_write+0x150/0x270 [ 150.474345][ T7407] ? __pfx_ksys_write+0x10/0x10 [ 150.474383][ T7407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.474405][ T7407] do_syscall_64+0x174/0x580 [ 150.474439][ T7407] ? trace_irq_disable+0x3b/0x140 [ 150.474463][ T7407] ? clear_bhb_loop+0x40/0x90 [ 150.474487][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.474507][ T7407] RIP: 0033:0x7f5dcd15e68e [ 150.474525][ T7407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.474541][ T7407] RSP: 002b:00007f5dce0d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.474561][ T7407] RAX: ffffffffffffffda RBX: 00007f5dce0d56c0 RCX: 00007f5dcd15e68e [ 150.474575][ T7407] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 150.474588][ T7407] RBP: 00007f5dcd233e6f R08: 0000000000000000 R09: 0000000000000000 [ 150.474600][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.474611][ T7407] R13: 00007f5dcd426218 R14: 00007f5dcd426180 R15: 00007ffe1bc6a2d8 [ 150.474642][ T7407] [ 150.750398][ T7407] Disabling lock debugging due to kernel taint [ 150.756584][ T7407] BUG: Bad page state in process syz.4.396 pfn:26390 [ 150.763353][ T7407] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026390a50 pfn:0x26390 [ 150.773473][ T7407] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 150.780624][ T7407] raw: 00fff00000000000 dead000000000040 ffff88801b19b000 0000000000000000 [ 150.789309][ T7407] raw: ffff888026390a50 0000000000000001 00000000ffffffff 0000000000000000 [ 150.797927][ T7407] page dumped because: page_pool leak [ 150.803300][ T7407] page_owner tracks the page as allocated [ 150.809061][ T7407] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7407, tgid 7393 (syz.4.396), ts 150266832831, free_ts 147405553942 [ 150.826060][ T7407] post_alloc_hook+0x1f9/0x250 [ 150.830847][ T7407] get_page_from_freelist+0x21fa/0x2270 [ 150.836484][ T7407] __alloc_frozen_pages_noprof+0x18d/0x380 [ 150.842323][ T7407] __alloc_pages_noprof+0x10/0x100 [ 150.847501][ T7407] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 150.852971][ T7407] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 150.859110][ T7407] skb_pp_cow_data+0xcd0/0x19a0 [ 150.863977][ T7407] do_xdp_generic+0x770/0x12d0 [ 150.868794][ T7407] tun_get_user+0x24f8/0x4370 [ 150.873477][ T7407] tun_chr_write_iter+0x113/0x200 [ 150.878560][ T7407] vfs_write+0x612/0xba0 [ 150.882829][ T7407] ksys_write+0x150/0x270 [ 150.887216][ T7407] do_syscall_64+0x174/0x580 [ 150.891816][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.897751][ T7407] page last free pid 23 tgid 23 stack trace: [ 150.903744][ T7407] __free_frozen_pages+0xc1e/0xd10 [ 150.908918][ T7407] tlb_remove_table_rcu+0x85/0x100 [ 150.914050][ T7407] rcu_core+0x78b/0x10a0 [ 150.918379][ T7407] handle_softirqs+0x225/0x840 [ 150.923153][ T7407] run_ksoftirqd+0x36/0x60 [ 150.927601][ T7407] smpboot_thread_fn+0x57c/0xa80 [ 150.932627][ T7407] kthread+0x388/0x470 [ 150.936744][ T7407] ret_from_fork+0x514/0xb70 [ 150.941343][ T7407] ret_from_fork_asm+0x1a/0x30 [ 150.946150][ T7407] Modules linked in: [ 150.950049][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.4.396 Tainted: G B syzkaller #0 PREEMPT(full) [ 150.950065][ T7407] Tainted: [B]=BAD_PAGE [ 150.950068][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.950075][ T7407] Call Trace: [ 150.950079][ T7407] [ 150.950083][ T7407] dump_stack_lvl+0xe8/0x150 [ 150.950102][ T7407] bad_page+0x17f/0x1c0 [ 150.950113][ T7407] __free_frozen_pages+0xcc2/0xd10 [ 150.950127][ T7407] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 150.950142][ T7407] bpf_xdp_adjust_tail+0x1ce/0x210 [ 150.950158][ T7407] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 150.950167][ T7407] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 150.950183][ T7407] do_xdp_generic+0xac2/0x12d0 [ 150.950192][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 150.950206][ T7407] ? do_xdp_generic+0x6ba/0x12d0 [ 150.950216][ T7407] ? __pfx_do_xdp_generic+0x10/0x10 [ 150.950228][ T7407] ? tun_get_user+0x23cb/0x4370 [ 150.950244][ T7407] ? tun_get_user+0x23cb/0x4370 [ 150.950256][ T7407] tun_get_user+0x24f8/0x4370 [ 150.950271][ T7407] ? aa_file_perm+0x18b/0x15f0 [ 150.950283][ T7407] ? aa_file_perm+0x4ed/0x15f0 [ 150.950293][ T7407] ? __pfx_tun_get_user+0x10/0x10 [ 150.950305][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 150.950319][ T7407] ? __pfx___futex_wait+0x10/0x10 [ 150.950332][ T7407] ? ref_tracker_alloc+0x341/0x4b0 [ 150.950344][ T7407] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 150.950376][ T7407] ? tun_get+0x1c/0x2f0 [ 150.950387][ T7407] ? tun_get+0x1c/0x2f0 [ 150.950400][ T7407] ? tun_get+0x1c/0x2f0 [ 150.950411][ T7407] ? tun_get+0x1c/0x2f0 [ 150.950423][ T7407] tun_chr_write_iter+0x113/0x200 [ 150.950437][ T7407] vfs_write+0x612/0xba0 [ 150.950454][ T7407] ? __pfx_vfs_write+0x10/0x10 [ 150.950470][ T7407] ? __fget_files+0x2a/0x420 [ 150.950485][ T7407] ksys_write+0x150/0x270 [ 150.950500][ T7407] ? __pfx_ksys_write+0x10/0x10 [ 150.950516][ T7407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.950526][ T7407] do_syscall_64+0x174/0x580 [ 150.950540][ T7407] ? trace_irq_disable+0x3b/0x140 [ 150.950552][ T7407] ? clear_bhb_loop+0x40/0x90 [ 150.950563][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.950573][ T7407] RIP: 0033:0x7f5dcd15e68e [ 150.950582][ T7407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.950590][ T7407] RSP: 002b:00007f5dce0d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.950602][ T7407] RAX: ffffffffffffffda RBX: 00007f5dce0d56c0 RCX: 00007f5dcd15e68e [ 150.950609][ T7407] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 150.950616][ T7407] RBP: 00007f5dcd233e6f R08: 0000000000000000 R09: 0000000000000000 [ 150.950622][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.950628][ T7407] R13: 00007f5dcd426218 R14: 00007f5dcd426180 R15: 00007ffe1bc6a2d8 [ 150.950638][ T7407] [ 150.950645][ T7407] BUG: Bad page state in process syz.4.396 pfn:77360 [ 150.998660][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'. [ 151.001376][ T7407] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x77360 [ 151.001400][ T7407] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 151.266060][ T7407] raw: 00fff00000000000 dead000000000040 ffff88801b19b000 0000000000000000 [ 151.274671][ T7407] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 151.283250][ T7407] page dumped because: page_pool leak [ 151.288642][ T7407] page_owner tracks the page as allocated [ 151.294381][ T7407] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7407, tgid 7393 (syz.4.396), ts 150266815511, free_ts 147405575600 [ 151.311337][ T7407] post_alloc_hook+0x1f9/0x250 [ 151.316134][ T7407] get_page_from_freelist+0x21fa/0x2270 [ 151.321858][ T7407] __alloc_frozen_pages_noprof+0x18d/0x380 [ 151.327704][ T7407] __alloc_pages_noprof+0x10/0x100 [ 151.332829][ T7407] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 151.338337][ T7407] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 151.344454][ T7407] skb_pp_cow_data+0xcd0/0x19a0 [ 151.349314][ T7407] do_xdp_generic+0x770/0x12d0 [ 151.354063][ T7407] tun_get_user+0x24f8/0x4370 [ 151.358762][ T7407] tun_chr_write_iter+0x113/0x200 [ 151.363796][ T7407] vfs_write+0x612/0xba0 [ 151.368087][ T7407] ksys_write+0x150/0x270 [ 151.372423][ T7407] do_syscall_64+0x174/0x580 [ 151.377038][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.382931][ T7407] page last free pid 23 tgid 23 stack trace: [ 151.388941][ T7407] __free_frozen_pages+0xc1e/0xd10 [ 151.394057][ T7407] tlb_remove_table_rcu+0x85/0x100 [ 151.399202][ T7407] rcu_core+0x78b/0x10a0 [ 151.403449][ T7407] handle_softirqs+0x225/0x840 [ 151.408250][ T7407] run_ksoftirqd+0x36/0x60 [ 151.412676][ T7407] smpboot_thread_fn+0x57c/0xa80 [ 151.417640][ T7407] kthread+0x388/0x470 [ 151.421716][ T7407] ret_from_fork+0x514/0xb70 [ 151.426335][ T7407] ret_from_fork_asm+0x1a/0x30 [ 151.431099][ T7407] Modules linked in: [ 151.435024][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.4.396 Tainted: G B syzkaller #0 PREEMPT(full) [ 151.435049][ T7407] Tainted: [B]=BAD_PAGE [ 151.435053][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 151.435062][ T7407] Call Trace: [ 151.435068][ T7407] [ 151.435074][ T7407] dump_stack_lvl+0xe8/0x150 [ 151.435102][ T7407] bad_page+0x17f/0x1c0 [ 151.435119][ T7407] __free_frozen_pages+0xcc2/0xd10 [ 151.435143][ T7407] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 151.435169][ T7407] bpf_xdp_adjust_tail+0x1ce/0x210 [ 151.435198][ T7407] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 151.435216][ T7407] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 151.435247][ T7407] do_xdp_generic+0xac2/0x12d0 [ 151.435265][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 151.435289][ T7407] ? do_xdp_generic+0x6ba/0x12d0 [ 151.435309][ T7407] ? __pfx_do_xdp_generic+0x10/0x10 [ 151.435331][ T7407] ? tun_get_user+0x23cb/0x4370 [ 151.435360][ T7407] ? tun_get_user+0x23cb/0x4370 [ 151.435381][ T7407] tun_get_user+0x24f8/0x4370 [ 151.435408][ T7407] ? aa_file_perm+0x18b/0x15f0 [ 151.435430][ T7407] ? aa_file_perm+0x4ed/0x15f0 [ 151.435448][ T7407] ? __pfx_tun_get_user+0x10/0x10 [ 151.435469][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 151.435494][ T7407] ? __pfx___futex_wait+0x10/0x10 [ 151.435518][ T7407] ? ref_tracker_alloc+0x341/0x4b0 [ 151.435541][ T7407] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 151.435562][ T7407] ? tun_get+0x1c/0x2f0 [ 151.435583][ T7407] ? tun_get+0x1c/0x2f0 [ 151.435607][ T7407] ? tun_get+0x1c/0x2f0 [ 151.435627][ T7407] ? tun_get+0x1c/0x2f0 [ 151.435650][ T7407] tun_chr_write_iter+0x113/0x200 [ 151.435674][ T7407] vfs_write+0x612/0xba0 [ 151.435703][ T7407] ? __pfx_vfs_write+0x10/0x10 [ 151.435733][ T7407] ? __fget_files+0x2a/0x420 [ 151.435758][ T7407] ksys_write+0x150/0x270 [ 151.435785][ T7407] ? __pfx_ksys_write+0x10/0x10 [ 151.435813][ T7407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.435832][ T7407] do_syscall_64+0x174/0x580 [ 151.435856][ T7407] ? trace_irq_disable+0x3b/0x140 [ 151.435886][ T7407] ? clear_bhb_loop+0x40/0x90 [ 151.435906][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.435925][ T7407] RIP: 0033:0x7f5dcd15e68e [ 151.435941][ T7407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 151.435956][ T7407] RSP: 002b:00007f5dce0d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 151.435976][ T7407] RAX: ffffffffffffffda RBX: 00007f5dce0d56c0 RCX: 00007f5dcd15e68e [ 151.435989][ T7407] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 151.436001][ T7407] RBP: 00007f5dcd233e6f R08: 0000000000000000 R09: 0000000000000000 [ 151.436012][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.436023][ T7407] R13: 00007f5dcd426218 R14: 00007f5dcd426180 R15: 00007ffe1bc6a2d8 [ 151.436044][ T7407] [ 151.436054][ T7407] BUG: Bad page state in process syz.4.396 pfn:23348 [ 151.725049][ T7407] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023348000 pfn:0x23348 [ 151.735260][ T7407] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 151.742380][ T7407] raw: 00fff00000000000 dead000000000040 ffff88801b19b000 0000000000000000 [ 151.750998][ T7407] raw: ffff888023348000 0000000000000001 00000000ffffffff 0000000000000000 [ 151.759601][ T7407] page dumped because: page_pool leak [ 151.764990][ T7407] page_owner tracks the page as allocated [ 151.770719][ T7407] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7407, tgid 7393 (syz.4.396), ts 150266797957, free_ts 147405587938 [ 151.787680][ T7407] post_alloc_hook+0x1f9/0x250 [ 151.792450][ T7407] get_page_from_freelist+0x21fa/0x2270 [ 151.798047][ T7407] __alloc_frozen_pages_noprof+0x18d/0x380 [ 151.803865][ T7407] __alloc_pages_noprof+0x10/0x100 [ 151.809003][ T7407] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 151.814509][ T7407] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 151.820620][ T7407] skb_pp_cow_data+0xcd0/0x19a0 [ 151.825501][ T7407] do_xdp_generic+0x770/0x12d0 [ 151.830266][ T7407] tun_get_user+0x24f8/0x4370 [ 151.834986][ T7407] tun_chr_write_iter+0x113/0x200 [ 151.840022][ T7407] vfs_write+0x612/0xba0 [ 151.844312][ T7407] ksys_write+0x150/0x270 [ 151.848659][ T7407] do_syscall_64+0x174/0x580 [ 151.853253][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.859184][ T7407] page last free pid 23 tgid 23 stack trace: [ 151.865189][ T7407] __free_frozen_pages+0xc1e/0xd10 [ 151.870298][ T7407] tlb_remove_table_rcu+0x85/0x100 [ 151.875436][ T7407] rcu_core+0x78b/0x10a0 [ 151.879693][ T7407] handle_softirqs+0x225/0x840 [ 151.884480][ T7407] run_ksoftirqd+0x36/0x60 [ 151.888903][ T7407] smpboot_thread_fn+0x57c/0xa80 [ 151.893831][ T7407] kthread+0x388/0x470 [ 151.897952][ T7407] ret_from_fork+0x514/0xb70 [ 151.902549][ T7407] ret_from_fork_asm+0x1a/0x30 [ 151.907343][ T7407] Modules linked in: [ 151.911249][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.4.396 Tainted: G B syzkaller #0 PREEMPT(full) [ 151.911275][ T7407] Tainted: [B]=BAD_PAGE [ 151.911287][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 151.911298][ T7407] Call Trace: [ 151.911303][ T7407] [ 151.911308][ T7407] dump_stack_lvl+0xe8/0x150 [ 151.911328][ T7407] bad_page+0x17f/0x1c0 [ 151.911338][ T7407] __free_frozen_pages+0xcc2/0xd10 [ 151.911352][ T7407] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 151.911368][ T7407] bpf_xdp_adjust_tail+0x1ce/0x210 [ 151.911384][ T7407] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 151.911394][ T7407] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 151.911410][ T7407] do_xdp_generic+0xac2/0x12d0 [ 151.911420][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 151.911433][ T7407] ? do_xdp_generic+0x6ba/0x12d0 [ 151.911444][ T7407] ? __pfx_do_xdp_generic+0x10/0x10 [ 151.911456][ T7407] ? tun_get_user+0x23cb/0x4370 [ 151.911472][ T7407] ? tun_get_user+0x23cb/0x4370 [ 151.911484][ T7407] tun_get_user+0x24f8/0x4370 [ 151.911499][ T7407] ? aa_file_perm+0x18b/0x15f0 [ 151.911511][ T7407] ? aa_file_perm+0x4ed/0x15f0 [ 151.911520][ T7407] ? __pfx_tun_get_user+0x10/0x10 [ 151.911533][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 151.911546][ T7407] ? __pfx___futex_wait+0x10/0x10 [ 151.911560][ T7407] ? ref_tracker_alloc+0x341/0x4b0 [ 151.911572][ T7407] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 151.911584][ T7407] ? tun_get+0x1c/0x2f0 [ 151.911596][ T7407] ? tun_get+0x1c/0x2f0 [ 151.911611][ T7407] ? tun_get+0x1c/0x2f0 [ 151.911623][ T7407] ? tun_get+0x1c/0x2f0 [ 151.911635][ T7407] tun_chr_write_iter+0x113/0x200 [ 151.911648][ T7407] vfs_write+0x612/0xba0 [ 151.911665][ T7407] ? __pfx_vfs_write+0x10/0x10 [ 151.911682][ T7407] ? __fget_files+0x2a/0x420 [ 151.911696][ T7407] ksys_write+0x150/0x270 [ 151.911711][ T7407] ? __pfx_ksys_write+0x10/0x10 [ 151.911727][ T7407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.911737][ T7407] do_syscall_64+0x174/0x580 [ 151.911751][ T7407] ? trace_irq_disable+0x3b/0x140 [ 151.911764][ T7407] ? clear_bhb_loop+0x40/0x90 [ 151.911775][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.911787][ T7407] RIP: 0033:0x7f5dcd15e68e [ 151.911797][ T7407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 151.911805][ T7407] RSP: 002b:00007f5dce0d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 151.911816][ T7407] RAX: ffffffffffffffda RBX: 00007f5dce0d56c0 RCX: 00007f5dcd15e68e [ 151.911823][ T7407] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 151.911830][ T7407] RBP: 00007f5dcd233e6f R08: 0000000000000000 R09: 0000000000000000 [ 151.911835][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.911841][ T7407] R13: 00007f5dcd426218 R14: 00007f5dcd426180 R15: 00007ffe1bc6a2d8 [ 151.911852][ T7407] [ 151.911859][ T7407] BUG: Bad page state in process syz.4.396 pfn:547d5 [ 152.201034][ T7407] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880547d5140 pfn:0x547d5 [ 152.211116][ T7407] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 152.218270][ T7407] raw: 00fff00000000000 dead000000000040 ffff88801b19b000 0000000000000000 [ 152.226914][ T7407] raw: ffff8880547d5140 0000000000000001 00000000ffffffff 0000000000000000 [ 152.235536][ T7407] page dumped because: page_pool leak [ 152.240891][ T7407] page_owner tracks the page as allocated [ 152.246639][ T7407] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7407, tgid 7393 (syz.4.396), ts 150266780534, free_ts 147405610214 [ 152.263692][ T7407] post_alloc_hook+0x1f9/0x250 [ 152.268492][ T7407] get_page_from_freelist+0x21fa/0x2270 [ 152.274048][ T7407] __alloc_frozen_pages_noprof+0x18d/0x380 [ 152.280031][ T7407] __alloc_pages_noprof+0x10/0x100 [ 152.285210][ T7407] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 152.290684][ T7407] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 152.296805][ T7407] skb_pp_cow_data+0xcd0/0x19a0 [ 152.301672][ T7407] do_xdp_generic+0x770/0x12d0 [ 152.306478][ T7407] tun_get_user+0x24f8/0x4370 [ 152.311167][ T7407] tun_chr_write_iter+0x113/0x200 [ 152.316234][ T7407] vfs_write+0x612/0xba0 [ 152.320490][ T7407] ksys_write+0x150/0x270 [ 152.324883][ T7407] do_syscall_64+0x174/0x580 [ 152.329494][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.335417][ T7407] page last free pid 23 tgid 23 stack trace: [ 152.341395][ T7407] __free_frozen_pages+0xc1e/0xd10 [ 152.346574][ T7407] tlb_remove_table_rcu+0x85/0x100 [ 152.351810][ T7407] rcu_core+0x78b/0x10a0 [ 152.356109][ T7407] handle_softirqs+0x225/0x840 [ 152.360882][ T7407] run_ksoftirqd+0x36/0x60 [ 152.365326][ T7407] smpboot_thread_fn+0x57c/0xa80 [ 152.370277][ T7407] kthread+0x388/0x470 [ 152.374368][ T7407] ret_from_fork+0x514/0xb70 [ 152.378973][ T7407] ret_from_fork_asm+0x1a/0x30 [ 152.383719][ T7407] Modules linked in: [ 152.387767][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.4.396 Tainted: G B syzkaller #0 PREEMPT(full) [ 152.387803][ T7407] Tainted: [B]=BAD_PAGE [ 152.387809][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 152.387818][ T7407] Call Trace: [ 152.387824][ T7407] [ 152.387830][ T7407] dump_stack_lvl+0xe8/0x150 [ 152.387855][ T7407] bad_page+0x17f/0x1c0 [ 152.387872][ T7407] __free_frozen_pages+0xcc2/0xd10 [ 152.387895][ T7407] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 152.387921][ T7407] bpf_xdp_adjust_tail+0x1ce/0x210 [ 152.387946][ T7407] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 152.387961][ T7407] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 152.387990][ T7407] do_xdp_generic+0xac2/0x12d0 [ 152.388008][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 152.388032][ T7407] ? do_xdp_generic+0x6ba/0x12d0 [ 152.388052][ T7407] ? __pfx_do_xdp_generic+0x10/0x10 [ 152.388075][ T7407] ? tun_get_user+0x23cb/0x4370 [ 152.388104][ T7407] ? tun_get_user+0x23cb/0x4370 [ 152.388124][ T7407] tun_get_user+0x24f8/0x4370 [ 152.388153][ T7407] ? aa_file_perm+0x18b/0x15f0 [ 152.388175][ T7407] ? aa_file_perm+0x4ed/0x15f0 [ 152.388194][ T7407] ? __pfx_tun_get_user+0x10/0x10 [ 152.388217][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 152.388244][ T7407] ? __pfx___futex_wait+0x10/0x10 [ 152.388268][ T7407] ? ref_tracker_alloc+0x341/0x4b0 [ 152.388290][ T7407] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 152.388308][ T7407] ? tun_get+0x1c/0x2f0 [ 152.388328][ T7407] ? tun_get+0x1c/0x2f0 [ 152.388351][ T7407] ? tun_get+0x1c/0x2f0 [ 152.388371][ T7407] ? tun_get+0x1c/0x2f0 [ 152.388394][ T7407] tun_chr_write_iter+0x113/0x200 [ 152.388418][ T7407] vfs_write+0x612/0xba0 [ 152.388447][ T7407] ? __pfx_vfs_write+0x10/0x10 [ 152.388477][ T7407] ? __fget_files+0x2a/0x420 [ 152.388503][ T7407] ksys_write+0x150/0x270 [ 152.388530][ T7407] ? __pfx_ksys_write+0x10/0x10 [ 152.388559][ T7407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.388578][ T7407] do_syscall_64+0x174/0x580 [ 152.388602][ T7407] ? trace_irq_disable+0x3b/0x140 [ 152.388624][ T7407] ? clear_bhb_loop+0x40/0x90 [ 152.388644][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.388661][ T7407] RIP: 0033:0x7f5dcd15e68e [ 152.388678][ T7407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 152.388693][ T7407] RSP: 002b:00007f5dce0d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.388713][ T7407] RAX: ffffffffffffffda RBX: 00007f5dce0d56c0 RCX: 00007f5dcd15e68e [ 152.388726][ T7407] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 152.388738][ T7407] RBP: 00007f5dcd233e6f R08: 0000000000000000 R09: 0000000000000000 [ 152.388749][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.388760][ T7407] R13: 00007f5dcd426218 R14: 00007f5dcd426180 R15: 00007ffe1bc6a2d8 [ 152.388780][ T7407] [ 152.388836][ T7407] BUG: Bad page state in process syz.4.396 pfn:56766 [ 152.677539][ T7407] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x56766 [ 152.687626][ T7407] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 152.694776][ T7407] raw: 00fff00000000000 dead000000000040 ffff88801b19b000 0000000000000000 [ 152.703365][ T7407] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 152.712241][ T7407] page dumped because: page_pool leak [ 152.717632][ T7407] page_owner tracks the page as allocated [ 152.723328][ T7407] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7407, tgid 7393 (syz.4.396), ts 150266762880, free_ts 147405630549 [ 152.740285][ T7407] post_alloc_hook+0x1f9/0x250 [ 152.745096][ T7407] get_page_from_freelist+0x21fa/0x2270 [ 152.750659][ T7407] __alloc_frozen_pages_noprof+0x18d/0x380 [ 152.756494][ T7407] __alloc_pages_noprof+0x10/0x100 [ 152.761616][ T7407] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 152.767101][ T7407] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 152.773177][ T7407] skb_pp_cow_data+0xcd0/0x19a0 [ 152.778059][ T7407] do_xdp_generic+0x770/0x12d0 [ 152.782826][ T7407] tun_get_user+0x24f8/0x4370 [ 152.787541][ T7407] tun_chr_write_iter+0x113/0x200 [ 152.792621][ T7407] vfs_write+0x612/0xba0 [ 152.797066][ T7407] ksys_write+0x150/0x270 [ 152.801433][ T7407] do_syscall_64+0x174/0x580 [ 152.806051][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.811942][ T7407] page last free pid 23 tgid 23 stack trace: [ 152.817965][ T7407] __free_frozen_pages+0xc1e/0xd10 [ 152.823098][ T7407] tlb_remove_table_rcu+0x85/0x100 [ 152.828274][ T7407] rcu_core+0x78b/0x10a0 [ 152.832534][ T7407] handle_softirqs+0x225/0x840 [ 152.837354][ T7407] run_ksoftirqd+0x36/0x60 [ 152.841781][ T7407] smpboot_thread_fn+0x57c/0xa80 [ 152.846782][ T7407] kthread+0x388/0x470 [ 152.850861][ T7407] ret_from_fork+0x514/0xb70 [ 152.855483][ T7407] ret_from_fork_asm+0x1a/0x30 [ 152.860251][ T7407] Modules linked in: [ 152.864190][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.4.396 Tainted: G B syzkaller #0 PREEMPT(full) [ 152.864215][ T7407] Tainted: [B]=BAD_PAGE [ 152.864222][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 152.864232][ T7407] Call Trace: [ 152.864238][ T7407] [ 152.864245][ T7407] dump_stack_lvl+0xe8/0x150 [ 152.864273][ T7407] bad_page+0x17f/0x1c0 [ 152.864290][ T7407] __free_frozen_pages+0xcc2/0xd10 [ 152.864317][ T7407] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 152.864348][ T7407] bpf_xdp_adjust_tail+0x1ce/0x210 [ 152.864377][ T7407] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 152.864391][ T7407] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 152.864419][ T7407] do_xdp_generic+0xac2/0x12d0 [ 152.864434][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 152.864456][ T7407] ? do_xdp_generic+0x6ba/0x12d0 [ 152.864474][ T7407] ? __pfx_do_xdp_generic+0x10/0x10 [ 152.864494][ T7407] ? tun_get_user+0x23cb/0x4370 [ 152.864520][ T7407] ? tun_get_user+0x23cb/0x4370 [ 152.864540][ T7407] tun_get_user+0x24f8/0x4370 [ 152.864567][ T7407] ? aa_file_perm+0x18b/0x15f0 [ 152.864589][ T7407] ? aa_file_perm+0x4ed/0x15f0 [ 152.864607][ T7407] ? __pfx_tun_get_user+0x10/0x10 [ 152.864630][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 152.864655][ T7407] ? __pfx___futex_wait+0x10/0x10 [ 152.864678][ T7407] ? ref_tracker_alloc+0x341/0x4b0 [ 152.864701][ T7407] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 152.864723][ T7407] ? tun_get+0x1c/0x2f0 [ 152.864744][ T7407] ? tun_get+0x1c/0x2f0 [ 152.864768][ T7407] ? tun_get+0x1c/0x2f0 [ 152.864788][ T7407] ? tun_get+0x1c/0x2f0 [ 152.864810][ T7407] tun_chr_write_iter+0x113/0x200 [ 152.864835][ T7407] vfs_write+0x612/0xba0 [ 152.864865][ T7407] ? __pfx_vfs_write+0x10/0x10 [ 152.864896][ T7407] ? __fget_files+0x2a/0x420 [ 152.864923][ T7407] ksys_write+0x150/0x270 [ 152.864950][ T7407] ? __pfx_ksys_write+0x10/0x10 [ 152.864979][ T7407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.864999][ T7407] do_syscall_64+0x174/0x580 [ 152.865023][ T7407] ? trace_irq_disable+0x3b/0x140 [ 152.865045][ T7407] ? clear_bhb_loop+0x40/0x90 [ 152.865065][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.865083][ T7407] RIP: 0033:0x7f5dcd15e68e [ 152.865099][ T7407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 152.865115][ T7407] RSP: 002b:00007f5dce0d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.865134][ T7407] RAX: ffffffffffffffda RBX: 00007f5dce0d56c0 RCX: 00007f5dcd15e68e [ 152.865148][ T7407] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 152.865160][ T7407] RBP: 00007f5dcd233e6f R08: 0000000000000000 R09: 0000000000000000 [ 152.865179][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.865190][ T7407] R13: 00007f5dcd426218 R14: 00007f5dcd426180 R15: 00007ffe1bc6a2d8 [ 152.865211][ T7407] [ 152.865223][ T7407] BUG: Bad page state in process syz.4.396 pfn:26395 [ 153.154115][ T7407] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x26395 [ 153.164255][ T7407] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 153.171381][ T7407] raw: 00fff00000000000 dead000000000040 ffff88801b19b000 0000000000000000 [ 153.180013][ T7407] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 153.188615][ T7407] page dumped because: page_pool leak [ 153.193974][ T7407] page_owner tracks the page as allocated [ 153.199738][ T7407] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7407, tgid 7393 (syz.4.396), ts 150266744946, free_ts 147405642932 [ 153.216723][ T7407] post_alloc_hook+0x1f9/0x250 [ 153.221775][ T7407] get_page_from_freelist+0x21fa/0x2270 [ 153.227384][ T7407] __alloc_frozen_pages_noprof+0x18d/0x380 [ 153.233261][ T7407] __alloc_pages_noprof+0x10/0x100 [ 153.238528][ T7407] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 153.244005][ T7407] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 153.250110][ T7407] skb_pp_cow_data+0xcd0/0x19a0 [ 153.255022][ T7407] do_xdp_generic+0x770/0x12d0 [ 153.259777][ T7407] tun_get_user+0x24f8/0x4370 [ 153.264475][ T7407] tun_chr_write_iter+0x113/0x200 [ 153.269519][ T7407] vfs_write+0x612/0xba0 [ 153.273762][ T7407] ksys_write+0x150/0x270 [ 153.278126][ T7407] do_syscall_64+0x174/0x580 [ 153.282724][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.288671][ T7407] page last free pid 23 tgid 23 stack trace: [ 153.294701][ T7407] __free_frozen_pages+0xc1e/0xd10 [ 153.299848][ T7407] tlb_remove_table_rcu+0x85/0x100 [ 153.305015][ T7407] rcu_core+0x78b/0x10a0 [ 153.309276][ T7407] handle_softirqs+0x225/0x840 [ 153.314102][ T7407] run_ksoftirqd+0x36/0x60 [ 153.318591][ T7407] smpboot_thread_fn+0x57c/0xa80 [ 153.323521][ T7407] kthread+0x388/0x470 [ 153.327634][ T7407] ret_from_fork+0x514/0xb70 [ 153.332240][ T7407] ret_from_fork_asm+0x1a/0x30 [ 153.337061][ T7407] Modules linked in: [ 153.341055][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.4.396 Tainted: G B syzkaller #0 PREEMPT(full) [ 153.341072][ T7407] Tainted: [B]=BAD_PAGE [ 153.341075][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.341082][ T7407] Call Trace: [ 153.341087][ T7407] [ 153.341091][ T7407] dump_stack_lvl+0xe8/0x150 [ 153.341111][ T7407] bad_page+0x17f/0x1c0 [ 153.341121][ T7407] __free_frozen_pages+0xcc2/0xd10 [ 153.341135][ T7407] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 153.341151][ T7407] bpf_xdp_adjust_tail+0x1ce/0x210 [ 153.341168][ T7407] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 153.341178][ T7407] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 153.341193][ T7407] do_xdp_generic+0xac2/0x12d0 [ 153.341203][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 153.341216][ T7407] ? do_xdp_generic+0x6ba/0x12d0 [ 153.341227][ T7407] ? __pfx_do_xdp_generic+0x10/0x10 [ 153.341239][ T7407] ? tun_get_user+0x23cb/0x4370 [ 153.341255][ T7407] ? tun_get_user+0x23cb/0x4370 [ 153.341267][ T7407] tun_get_user+0x24f8/0x4370 [ 153.341282][ T7407] ? aa_file_perm+0x18b/0x15f0 [ 153.341294][ T7407] ? aa_file_perm+0x4ed/0x15f0 [ 153.341305][ T7407] ? __pfx_tun_get_user+0x10/0x10 [ 153.341318][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 153.341331][ T7407] ? __pfx___futex_wait+0x10/0x10 [ 153.341344][ T7407] ? ref_tracker_alloc+0x341/0x4b0 [ 153.341357][ T7407] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 153.341369][ T7407] ? tun_get+0x1c/0x2f0 [ 153.341380][ T7407] ? tun_get+0x1c/0x2f0 [ 153.341392][ T7407] ? tun_get+0x1c/0x2f0 [ 153.341404][ T7407] ? tun_get+0x1c/0x2f0 [ 153.341416][ T7407] tun_chr_write_iter+0x113/0x200 [ 153.341429][ T7407] vfs_write+0x612/0xba0 [ 153.341445][ T7407] ? __pfx_vfs_write+0x10/0x10 [ 153.341461][ T7407] ? __fget_files+0x2a/0x420 [ 153.341476][ T7407] ksys_write+0x150/0x270 [ 153.341491][ T7407] ? __pfx_ksys_write+0x10/0x10 [ 153.341507][ T7407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.341517][ T7407] do_syscall_64+0x174/0x580 [ 153.341531][ T7407] ? trace_irq_disable+0x3b/0x140 [ 153.341543][ T7407] ? clear_bhb_loop+0x40/0x90 [ 153.341554][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.341564][ T7407] RIP: 0033:0x7f5dcd15e68e [ 153.341574][ T7407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.341583][ T7407] RSP: 002b:00007f5dce0d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.341594][ T7407] RAX: ffffffffffffffda RBX: 00007f5dce0d56c0 RCX: 00007f5dcd15e68e [ 153.341602][ T7407] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 153.341608][ T7407] RBP: 00007f5dcd233e6f R08: 0000000000000000 R09: 0000000000000000 [ 153.341614][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.341619][ T7407] R13: 00007f5dcd426218 R14: 00007f5dcd426180 R15: 00007ffe1bc6a2d8 [ 153.341630][ T7407] [ 153.341637][ T7407] BUG: Bad page state in process syz.4.396 pfn:1bfbf [ 153.631025][ T7407] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801bfbf780 pfn:0x1bfbf [ 153.641124][ T7407] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 153.648464][ T7407] raw: 00fff00000000000 dead000000000040 ffff88801b19b000 0000000000000000 [ 153.657081][ T7407] raw: ffff88801bfbf780 0000000000000001 00000000ffffffff 0000000000000000 [ 153.665692][ T7407] page dumped because: page_pool leak [ 153.671046][ T7407] page_owner tracks the page as allocated [ 153.676774][ T7407] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7407, tgid 7393 (syz.4.396), ts 150266728428, free_ts 147405654894 [ 153.693746][ T7407] post_alloc_hook+0x1f9/0x250 [ 153.698535][ T7407] get_page_from_freelist+0x21fa/0x2270 [ 153.704100][ T7407] __alloc_frozen_pages_noprof+0x18d/0x380 [ 153.709984][ T7407] __alloc_pages_noprof+0x10/0x100 [ 153.715156][ T7407] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 153.720628][ T7407] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 153.726738][ T7407] skb_pp_cow_data+0xcd0/0x19a0 [ 153.731613][ T7407] do_xdp_generic+0x770/0x12d0 [ 153.736429][ T7407] tun_get_user+0x24f8/0x4370 [ 153.741115][ T7407] tun_chr_write_iter+0x113/0x200 [ 153.746186][ T7407] vfs_write+0x612/0xba0 [ 153.750443][ T7407] ksys_write+0x150/0x270 [ 153.754799][ T7407] do_syscall_64+0x174/0x580 [ 153.759399][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.765318][ T7407] page last free pid 23 tgid 23 stack trace: [ 153.771319][ T7407] __free_frozen_pages+0xc1e/0xd10 [ 153.776465][ T7407] rcu_core+0x78b/0x10a0 [ 153.780715][ T7407] handle_softirqs+0x225/0x840 [ 153.785498][ T7407] run_ksoftirqd+0x36/0x60 [ 153.789993][ T7407] smpboot_thread_fn+0x57c/0xa80 [ 153.794984][ T7407] kthread+0x388/0x470 [ 153.799061][ T7407] ret_from_fork+0x514/0xb70 [ 153.803640][ T7407] ret_from_fork_asm+0x1a/0x30 [ 153.808437][ T7407] Modules linked in: [ 153.812338][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.4.396 Tainted: G B syzkaller #0 PREEMPT(full) [ 153.812370][ T7407] Tainted: [B]=BAD_PAGE [ 153.812374][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.812380][ T7407] Call Trace: [ 153.812384][ T7407] [ 153.812388][ T7407] dump_stack_lvl+0xe8/0x150 [ 153.812407][ T7407] bad_page+0x17f/0x1c0 [ 153.812418][ T7407] __free_frozen_pages+0xcc2/0xd10 [ 153.812432][ T7407] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 153.812448][ T7407] bpf_xdp_adjust_tail+0x1ce/0x210 [ 153.812463][ T7407] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 153.812473][ T7407] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 153.812489][ T7407] do_xdp_generic+0xac2/0x12d0 [ 153.812498][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 153.812512][ T7407] ? do_xdp_generic+0x6ba/0x12d0 [ 153.812522][ T7407] ? __pfx_do_xdp_generic+0x10/0x10 [ 153.812534][ T7407] ? tun_get_user+0x23cb/0x4370 [ 153.812550][ T7407] ? tun_get_user+0x23cb/0x4370 [ 153.812562][ T7407] tun_get_user+0x24f8/0x4370 [ 153.812578][ T7407] ? aa_file_perm+0x18b/0x15f0 [ 153.812589][ T7407] ? aa_file_perm+0x4ed/0x15f0 [ 153.812599][ T7407] ? __pfx_tun_get_user+0x10/0x10 [ 153.812615][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 153.812629][ T7407] ? __pfx___futex_wait+0x10/0x10 [ 153.812648][ T7407] ? ref_tracker_alloc+0x341/0x4b0 [ 153.812660][ T7407] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 153.812672][ T7407] ? tun_get+0x1c/0x2f0 [ 153.812683][ T7407] ? tun_get+0x1c/0x2f0 [ 153.812696][ T7407] ? tun_get+0x1c/0x2f0 [ 153.812707][ T7407] ? tun_get+0x1c/0x2f0 [ 153.812719][ T7407] tun_chr_write_iter+0x113/0x200 [ 153.812732][ T7407] vfs_write+0x612/0xba0 [ 153.812749][ T7407] ? __pfx_vfs_write+0x10/0x10 [ 153.812765][ T7407] ? __fget_files+0x2a/0x420 [ 153.812780][ T7407] ksys_write+0x150/0x270 [ 153.812795][ T7407] ? __pfx_ksys_write+0x10/0x10 [ 153.812811][ T7407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.812821][ T7407] do_syscall_64+0x174/0x580 [ 153.812835][ T7407] ? trace_irq_disable+0x3b/0x140 [ 153.812848][ T7407] ? clear_bhb_loop+0x40/0x90 [ 153.812859][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.812868][ T7407] RIP: 0033:0x7f5dcd15e68e [ 153.812879][ T7407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.812887][ T7407] RSP: 002b:00007f5dce0d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.812898][ T7407] RAX: ffffffffffffffda RBX: 00007f5dce0d56c0 RCX: 00007f5dcd15e68e [ 153.812905][ T7407] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 153.812912][ T7407] RBP: 00007f5dcd233e6f R08: 0000000000000000 R09: 0000000000000000 [ 153.812918][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.812924][ T7407] R13: 00007f5dcd426218 R14: 00007f5dcd426180 R15: 00007ffe1bc6a2d8 [ 153.812934][ T7407] [ 153.812941][ T7407] BUG: Bad page state in process syz.4.396 pfn:357d3 [ 154.102350][ T7407] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880357d3738 pfn:0x357d3 [ 154.112480][ T7407] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 154.119625][ T7407] raw: 00fff00000000000 dead000000000040 ffff88801b19b000 0000000000000000 [ 154.128261][ T7407] raw: ffff8880357d3738 0000000000000001 00000000ffffffff 0000000000000000 [ 154.136873][ T7407] page dumped because: page_pool leak [ 154.142228][ T7407] page_owner tracks the page as allocated [ 154.147981][ T7407] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7407, tgid 7393 (syz.4.396), ts 150266711290, free_ts 147406450007 [ 154.164961][ T7407] post_alloc_hook+0x1f9/0x250 [ 154.169719][ T7407] get_page_from_freelist+0x21fa/0x2270 [ 154.175308][ T7407] __alloc_frozen_pages_noprof+0x18d/0x380 [ 154.181133][ T7407] __alloc_pages_noprof+0x10/0x100 [ 154.186310][ T7407] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 154.191790][ T7407] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 154.198003][ T7407] skb_pp_cow_data+0xcd0/0x19a0 [ 154.202865][ T7407] do_xdp_generic+0x770/0x12d0 [ 154.207660][ T7407] tun_get_user+0x24f8/0x4370 [ 154.212352][ T7407] tun_chr_write_iter+0x113/0x200 [ 154.217420][ T7407] vfs_write+0x612/0xba0 [ 154.221670][ T7407] ksys_write+0x150/0x270 [ 154.226071][ T7407] do_syscall_64+0x174/0x580 [ 154.230698][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.236641][ T7407] page last free pid 23 tgid 23 stack trace: [ 154.242644][ T7407] __free_frozen_pages+0xc1e/0xd10 [ 154.247796][ T7407] rcu_core+0x78b/0x10a0 [ 154.252057][ T7407] handle_softirqs+0x225/0x840 [ 154.256859][ T7407] run_ksoftirqd+0x36/0x60 [ 154.261282][ T7407] smpboot_thread_fn+0x57c/0xa80 [ 154.266288][ T7407] kthread+0x388/0x470 [ 154.270373][ T7407] ret_from_fork+0x514/0xb70 [ 154.274992][ T7407] ret_from_fork_asm+0x1a/0x30 [ 154.279758][ T7407] Modules linked in: [ 154.283642][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.4.396 Tainted: G B syzkaller #0 PREEMPT(full) [ 154.283658][ T7407] Tainted: [B]=BAD_PAGE [ 154.283662][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.283668][ T7407] Call Trace: [ 154.283674][ T7407] [ 154.283679][ T7407] dump_stack_lvl+0xe8/0x150 [ 154.283698][ T7407] bad_page+0x17f/0x1c0 [ 154.283709][ T7407] __free_frozen_pages+0xcc2/0xd10 [ 154.283723][ T7407] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 154.283739][ T7407] bpf_xdp_adjust_tail+0x1ce/0x210 [ 154.283755][ T7407] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 154.283765][ T7407] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 154.283781][ T7407] do_xdp_generic+0xac2/0x12d0 [ 154.283791][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 154.283804][ T7407] ? do_xdp_generic+0x6ba/0x12d0 [ 154.283815][ T7407] ? __pfx_do_xdp_generic+0x10/0x10 [ 154.283827][ T7407] ? tun_get_user+0x23cb/0x4370 [ 154.283843][ T7407] ? tun_get_user+0x23cb/0x4370 [ 154.283854][ T7407] tun_get_user+0x24f8/0x4370 [ 154.283870][ T7407] ? aa_file_perm+0x18b/0x15f0 [ 154.283881][ T7407] ? aa_file_perm+0x4ed/0x15f0 [ 154.283891][ T7407] ? __pfx_tun_get_user+0x10/0x10 [ 154.283903][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 154.283916][ T7407] ? __pfx___futex_wait+0x10/0x10 [ 154.283930][ T7407] ? ref_tracker_alloc+0x341/0x4b0 [ 154.283943][ T7407] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 154.283955][ T7407] ? tun_get+0x1c/0x2f0 [ 154.283966][ T7407] ? tun_get+0x1c/0x2f0 [ 154.283979][ T7407] ? tun_get+0x1c/0x2f0 [ 154.283990][ T7407] ? tun_get+0x1c/0x2f0 [ 154.284002][ T7407] tun_chr_write_iter+0x113/0x200 [ 154.284015][ T7407] vfs_write+0x612/0xba0 [ 154.284032][ T7407] ? __pfx_vfs_write+0x10/0x10 [ 154.284049][ T7407] ? __fget_files+0x2a/0x420 [ 154.284064][ T7407] ksys_write+0x150/0x270 [ 154.284079][ T7407] ? __pfx_ksys_write+0x10/0x10 [ 154.284095][ T7407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.284108][ T7407] do_syscall_64+0x174/0x580 [ 154.284131][ T7407] ? trace_irq_disable+0x3b/0x140 [ 154.284152][ T7407] ? clear_bhb_loop+0x40/0x90 [ 154.284170][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.284186][ T7407] RIP: 0033:0x7f5dcd15e68e [ 154.284201][ T7407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 154.284215][ T7407] RSP: 002b:00007f5dce0d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.284226][ T7407] RAX: ffffffffffffffda RBX: 00007f5dce0d56c0 RCX: 00007f5dcd15e68e [ 154.284233][ T7407] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 154.284240][ T7407] RBP: 00007f5dcd233e6f R08: 0000000000000000 R09: 0000000000000000 [ 154.284246][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.284251][ T7407] R13: 00007f5dcd426218 R14: 00007f5dcd426180 R15: 00007ffe1bc6a2d8 [ 154.284262][ T7407] [ 154.565636][ T7407] BUG: Bad page state in process syz.4.396 pfn:7a1a6 [ 154.572403][ T7407] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a1a6070 pfn:0x7a1a6 [ 154.582598][ T7407] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 154.589750][ T7407] raw: 00fff00000000000 dead000000000040 ffff88801b19b000 0000000000000000 [ 154.598365][ T7407] raw: ffff88807a1a6070 0000000000000001 00000000ffffffff 0000000000000000 [ 154.607074][ T7407] page dumped because: page_pool leak [ 154.612627][ T7407] page_owner tracks the page as allocated [ 154.618378][ T7407] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7407, tgid 7393 (syz.4.396), ts 150266677080, free_ts 150235805172 [ 154.635369][ T7407] post_alloc_hook+0x1f9/0x250 [ 154.640125][ T7407] get_page_from_freelist+0x21fa/0x2270 [ 154.645745][ T7407] __alloc_frozen_pages_noprof+0x18d/0x380 [ 154.651569][ T7407] __alloc_pages_noprof+0x10/0x100 [ 154.656711][ T7407] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 154.662175][ T7407] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 154.668263][ T7407] skb_pp_cow_data+0xcd0/0x19a0 [ 154.673144][ T7407] do_xdp_generic+0x770/0x12d0 [ 154.677969][ T7407] tun_get_user+0x24f8/0x4370 [ 154.682718][ T7407] tun_chr_write_iter+0x113/0x200 [ 154.687795][ T7407] vfs_write+0x612/0xba0 [ 154.692046][ T7407] ksys_write+0x150/0x270 [ 154.696408][ T7407] do_syscall_64+0x174/0x580 [ 154.701004][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.706928][ T7407] page last free pid 23 tgid 23 stack trace: [ 154.712989][ T7407] __free_frozen_pages+0xc1e/0xd10 [ 154.718153][ T7407] tlb_remove_table_rcu+0x85/0x100 [ 154.723300][ T7407] rcu_core+0x78b/0x10a0 [ 154.727595][ T7407] handle_softirqs+0x225/0x840 [ 154.732375][ T7407] run_ksoftirqd+0x36/0x60 [ 154.736829][ T7407] smpboot_thread_fn+0x57c/0xa80 [ 154.741793][ T7407] kthread+0x388/0x470 [ 154.745911][ T7407] ret_from_fork+0x514/0xb70 [ 154.750530][ T7407] ret_from_fork_asm+0x1a/0x30 [ 154.755319][ T7407] Modules linked in: [ 154.759225][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.4.396 Tainted: G B syzkaller #0 PREEMPT(full) [ 154.759241][ T7407] Tainted: [B]=BAD_PAGE [ 154.759245][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.759251][ T7407] Call Trace: [ 154.759256][ T7407] [ 154.759260][ T7407] dump_stack_lvl+0xe8/0x150 [ 154.759278][ T7407] bad_page+0x17f/0x1c0 [ 154.759289][ T7407] __free_frozen_pages+0xcc2/0xd10 [ 154.759309][ T7407] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 154.759326][ T7407] bpf_xdp_adjust_tail+0x1ce/0x210 [ 154.759342][ T7407] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 154.759352][ T7407] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 154.759368][ T7407] do_xdp_generic+0xac2/0x12d0 [ 154.759378][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 154.759391][ T7407] ? do_xdp_generic+0x6ba/0x12d0 [ 154.759402][ T7407] ? __pfx_do_xdp_generic+0x10/0x10 [ 154.759414][ T7407] ? tun_get_user+0x23cb/0x4370 [ 154.759430][ T7407] ? tun_get_user+0x23cb/0x4370 [ 154.759442][ T7407] tun_get_user+0x24f8/0x4370 [ 154.759457][ T7407] ? aa_file_perm+0x18b/0x15f0 [ 154.759469][ T7407] ? aa_file_perm+0x4ed/0x15f0 [ 154.759479][ T7407] ? __pfx_tun_get_user+0x10/0x10 [ 154.759491][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 154.759505][ T7407] ? __pfx___futex_wait+0x10/0x10 [ 154.759518][ T7407] ? ref_tracker_alloc+0x341/0x4b0 [ 154.759531][ T7407] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 154.759543][ T7407] ? tun_get+0x1c/0x2f0 [ 154.759555][ T7407] ? tun_get+0x1c/0x2f0 [ 154.759567][ T7407] ? tun_get+0x1c/0x2f0 [ 154.759579][ T7407] ? tun_get+0x1c/0x2f0 [ 154.759591][ T7407] tun_chr_write_iter+0x113/0x200 [ 154.759604][ T7407] vfs_write+0x612/0xba0 [ 154.759621][ T7407] ? __pfx_vfs_write+0x10/0x10 [ 154.759638][ T7407] ? __fget_files+0x2a/0x420 [ 154.759652][ T7407] ksys_write+0x150/0x270 [ 154.759667][ T7407] ? __pfx_ksys_write+0x10/0x10 [ 154.759683][ T7407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.759693][ T7407] do_syscall_64+0x174/0x580 [ 154.759707][ T7407] ? trace_irq_disable+0x3b/0x140 [ 154.759724][ T7407] ? clear_bhb_loop+0x40/0x90 [ 154.759735][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.759745][ T7407] RIP: 0033:0x7f5dcd15e68e [ 154.759755][ T7407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 154.759764][ T7407] RSP: 002b:00007f5dce0d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.759775][ T7407] RAX: ffffffffffffffda RBX: 00007f5dce0d56c0 RCX: 00007f5dcd15e68e [ 154.759782][ T7407] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 154.759789][ T7407] RBP: 00007f5dcd233e6f R08: 0000000000000000 R09: 0000000000000000 [ 154.759795][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.759801][ T7407] R13: 00007f5dcd426218 R14: 00007f5dcd426180 R15: 00007ffe1bc6a2d8 [ 154.759811][ T7407] [ 154.759818][ T7407] BUG: Bad page state in process syz.4.396 pfn:7958b [ 155.049165][ T7407] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7958b [ 155.059291][ T7407] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 155.066429][ T7407] raw: 00fff00000000000 dead000000000040 ffff88801b19b000 0000000000000000 [ 155.075032][ T7407] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 155.083611][ T7407] page dumped because: page_pool leak [ 155.088999][ T7407] page_owner tracks the page as allocated [ 155.094728][ T7407] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7407, tgid 7393 (syz.4.396), ts 150266661213, free_ts 150235830092 [ 155.111689][ T7407] post_alloc_hook+0x1f9/0x250 [ 155.116483][ T7407] get_page_from_freelist+0x21fa/0x2270 [ 155.122018][ T7407] __alloc_frozen_pages_noprof+0x18d/0x380 [ 155.127866][ T7407] __alloc_pages_noprof+0x10/0x100 [ 155.132989][ T7407] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 155.138479][ T7407] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 155.144588][ T7407] skb_pp_cow_data+0xcd0/0x19a0 [ 155.149447][ T7407] do_xdp_generic+0x770/0x12d0 [ 155.154239][ T7407] tun_get_user+0x24f8/0x4370 [ 155.158918][ T7407] tun_chr_write_iter+0x113/0x200 [ 155.163925][ T7407] vfs_write+0x612/0xba0 [ 155.168222][ T7407] ksys_write+0x150/0x270 [ 155.172560][ T7407] do_syscall_64+0x174/0x580 [ 155.177193][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.183102][ T7407] page last free pid 23 tgid 23 stack trace: [ 155.189095][ T7407] __free_frozen_pages+0xc1e/0xd10 [ 155.194233][ T7407] tlb_remove_table_rcu+0x85/0x100 [ 155.199336][ T7407] rcu_core+0x78b/0x10a0 [ 155.203565][ T7407] handle_softirqs+0x225/0x840 [ 155.208375][ T7407] run_ksoftirqd+0x36/0x60 [ 155.212880][ T7407] smpboot_thread_fn+0x57c/0xa80 [ 155.217838][ T7407] kthread+0x388/0x470 [ 155.221909][ T7407] ret_from_fork+0x514/0xb70 [ 155.226522][ T7407] ret_from_fork_asm+0x1a/0x30 [ 155.231283][ T7407] Modules linked in: [ 155.235193][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.4.396 Tainted: G B syzkaller #0 PREEMPT(full) [ 155.235218][ T7407] Tainted: [B]=BAD_PAGE [ 155.235224][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.235233][ T7407] Call Trace: [ 155.235239][ T7407] [ 155.235247][ T7407] dump_stack_lvl+0xe8/0x150 [ 155.235274][ T7407] bad_page+0x17f/0x1c0 [ 155.235291][ T7407] __free_frozen_pages+0xcc2/0xd10 [ 155.235314][ T7407] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 155.235344][ T7407] bpf_xdp_adjust_tail+0x1ce/0x210 [ 155.235373][ T7407] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 155.235391][ T7407] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 155.235422][ T7407] do_xdp_generic+0xac2/0x12d0 [ 155.235439][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 155.235463][ T7407] ? do_xdp_generic+0x6ba/0x12d0 [ 155.235483][ T7407] ? __pfx_do_xdp_generic+0x10/0x10 [ 155.235506][ T7407] ? tun_get_user+0x23cb/0x4370 [ 155.235535][ T7407] ? tun_get_user+0x23cb/0x4370 [ 155.235557][ T7407] tun_get_user+0x24f8/0x4370 [ 155.235585][ T7407] ? aa_file_perm+0x18b/0x15f0 [ 155.235606][ T7407] ? aa_file_perm+0x4ed/0x15f0 [ 155.235624][ T7407] ? __pfx_tun_get_user+0x10/0x10 [ 155.235643][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 155.235665][ T7407] ? __pfx___futex_wait+0x10/0x10 [ 155.235687][ T7407] ? ref_tracker_alloc+0x341/0x4b0 [ 155.235710][ T7407] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 155.235732][ T7407] ? tun_get+0x1c/0x2f0 [ 155.235752][ T7407] ? tun_get+0x1c/0x2f0 [ 155.235772][ T7407] ? tun_get+0x1c/0x2f0 [ 155.235791][ T7407] ? tun_get+0x1c/0x2f0 [ 155.235813][ T7407] tun_chr_write_iter+0x113/0x200 [ 155.235837][ T7407] vfs_write+0x612/0xba0 [ 155.235867][ T7407] ? __pfx_vfs_write+0x10/0x10 [ 155.235897][ T7407] ? __fget_files+0x2a/0x420 [ 155.235923][ T7407] ksys_write+0x150/0x270 [ 155.235950][ T7407] ? __pfx_ksys_write+0x10/0x10 [ 155.235980][ T7407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.235999][ T7407] do_syscall_64+0x174/0x580 [ 155.236024][ T7407] ? trace_irq_disable+0x3b/0x140 [ 155.236045][ T7407] ? clear_bhb_loop+0x40/0x90 [ 155.236065][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.236093][ T7407] RIP: 0033:0x7f5dcd15e68e [ 155.236109][ T7407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 155.236125][ T7407] RSP: 002b:00007f5dce0d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.236145][ T7407] RAX: ffffffffffffffda RBX: 00007f5dce0d56c0 RCX: 00007f5dcd15e68e [ 155.236158][ T7407] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 155.236170][ T7407] RBP: 00007f5dcd233e6f R08: 0000000000000000 R09: 0000000000000000 [ 155.236181][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.236192][ T7407] R13: 00007f5dcd426218 R14: 00007f5dcd426180 R15: 00007ffe1bc6a2d8 [ 155.236214][ T7407] [ 155.236224][ T7407] BUG: Bad page state in process syz.4.396 pfn:5761e [ 155.524665][ T7407] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x5761e [ 155.534738][ T7407] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 155.541860][ T7407] raw: 00fff00000000000 dead000000000040 ffff88801b19b000 0000000000000000 [ 155.550583][ T7407] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 155.559196][ T7407] page dumped because: page_pool leak [ 155.564589][ T7407] page_owner tracks the page as allocated [ 155.570299][ T7407] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7407, tgid 7393 (syz.4.396), ts 150266646037, free_ts 150235851473 [ 155.587290][ T7407] post_alloc_hook+0x1f9/0x250 [ 155.592068][ T7407] get_page_from_freelist+0x21fa/0x2270 [ 155.597773][ T7407] __alloc_frozen_pages_noprof+0x18d/0x380 [ 155.603688][ T7407] __alloc_pages_noprof+0x10/0x100 [ 155.608842][ T7407] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 155.614359][ T7407] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 155.620447][ T7407] skb_pp_cow_data+0xcd0/0x19a0 [ 155.625444][ T7407] do_xdp_generic+0x770/0x12d0 [ 155.630225][ T7407] tun_get_user+0x24f8/0x4370 [ 155.634932][ T7407] tun_chr_write_iter+0x113/0x200 [ 155.639963][ T7407] vfs_write+0x612/0xba0 [ 155.644240][ T7407] ksys_write+0x150/0x270 [ 155.648581][ T7407] do_syscall_64+0x174/0x580 [ 155.653185][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.659113][ T7407] page last free pid 23 tgid 23 stack trace: [ 155.665139][ T7407] __free_frozen_pages+0xc1e/0xd10 [ 155.670237][ T7407] tlb_remove_table_rcu+0x85/0x100 [ 155.675366][ T7407] rcu_core+0x78b/0x10a0 [ 155.679642][ T7407] handle_softirqs+0x225/0x840 [ 155.684453][ T7407] run_ksoftirqd+0x36/0x60 [ 155.688873][ T7407] smpboot_thread_fn+0x57c/0xa80 [ 155.693799][ T7407] kthread+0x388/0x470 [ 155.697937][ T7407] ret_from_fork+0x514/0xb70 [ 155.702551][ T7407] ret_from_fork_asm+0x1a/0x30 [ 155.707363][ T7407] Modules linked in: [ 155.711298][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.4.396 Tainted: G B syzkaller #0 PREEMPT(full) [ 155.711316][ T7407] Tainted: [B]=BAD_PAGE [ 155.711319][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.711325][ T7407] Call Trace: [ 155.711330][ T7407] [ 155.711335][ T7407] dump_stack_lvl+0xe8/0x150 [ 155.711355][ T7407] bad_page+0x17f/0x1c0 [ 155.711365][ T7407] __free_frozen_pages+0xcc2/0xd10 [ 155.711380][ T7407] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 155.711396][ T7407] bpf_xdp_adjust_tail+0x1ce/0x210 [ 155.711412][ T7407] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 155.711422][ T7407] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 155.711439][ T7407] do_xdp_generic+0xac2/0x12d0 [ 155.711448][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 155.711462][ T7407] ? do_xdp_generic+0x6ba/0x12d0 [ 155.711473][ T7407] ? __pfx_do_xdp_generic+0x10/0x10 [ 155.711485][ T7407] ? tun_get_user+0x23cb/0x4370 [ 155.711501][ T7407] ? tun_get_user+0x23cb/0x4370 [ 155.711513][ T7407] tun_get_user+0x24f8/0x4370 [ 155.711590][ T7407] ? aa_file_perm+0x18b/0x15f0 [ 155.711602][ T7407] ? aa_file_perm+0x4ed/0x15f0 [ 155.711612][ T7407] ? __pfx_tun_get_user+0x10/0x10 [ 155.711624][ T7407] ? __lock_acquire+0x683/0x2cf0 [ 155.711638][ T7407] ? __pfx___futex_wait+0x10/0x10 [ 155.711651][ T7407] ? ref_tracker_alloc+0x341/0x4b0 [ 155.711663][ T7407] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 155.711675][ T7407] ? tun_get+0x1c/0x2f0 [ 155.711686][ T7407] ? tun_get+0x1c/0x2f0 [ 155.711698][ T7407] ? tun_get+0x1c/0x2f0 [ 155.711710][ T7407] ? tun_get+0x1c/0x2f0 [ 155.711722][ T7407] tun_chr_write_iter+0x113/0x200 [ 155.711735][ T7407] vfs_write+0x612/0xba0 [ 155.711752][ T7407] ? __pfx_vfs_write+0x10/0x10 [ 155.711769][ T7407] ? __fget_files+0x2a/0x420 [ 155.711784][ T7407] ksys_write+0x150/0x270 [ 155.711810][ T7407] ? __pfx_ksys_write+0x10/0x10 [ 155.711826][ T7407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.711836][ T7407] do_syscall_64+0x174/0x580 [ 155.711850][ T7407] ? trace_irq_disable+0x3b/0x140 [ 155.711862][ T7407] ? clear_bhb_loop+0x40/0x90 [ 155.711873][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.711883][ T7407] RIP: 0033:0x7f5dcd15e68e [ 155.711894][ T7407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 155.711902][ T7407] RSP: 002b:00007f5dce0d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.711914][ T7407] RAX: ffffffffffffffda RBX: 00007f5dce0d56c0 RCX: 00007f5dcd15e68e [ 155.711921][ T7407] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 155.711927][ T7407] RBP: 00007f5dcd233e6f R08: 0000000000000000 R09: 0000000000000000 [ 155.711933][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.711939][ T7407] R13: 00007f5dcd426218 R14: 00007f5dcd426180 R15: 00007ffe1bc6a2d8 [ 155.711950][ T7407]