last executing test programs: 2.74253228s ago: executing program 2 (id=1016): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r2, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.372537743s ago: executing program 1 (id=1022): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, r1, 0x3, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x2d, 0x1, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8810) socketpair(0x22, 0x4, 0x80000000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000200)="37be2ec202db64c2789cd30dfd637a0599593fcc0fd2332aec9e9dd7133b87913e4ece1adeb3998778401575a0df42e1bd756eb290393ea4d4acf924a6c6fa8b99685dfc316248059b662f69d2301057dea0c9dbad222f81b4c259802f72259393a77554a0f3a4c1c605fe9689f4ae389334c4e0d172d227bf86704b2daff47de7ef35b9c4e16c4850fa69336ab88a2ac34a9a3dd519214292587bafe5cb7a8010d8fed2c88f0137c345f9b6676ef0c5de39d2db4cc9f99838bb81c0e108", 0xbe) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0xd, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="59cf0000000000000000080001800800050004000000060001"], 0x28}}, 0x0) r7 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r9, 0x0) sendmsg$nl_generic(r5, &(0x7f00000008c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x1ec, 0x2b, 0x100, 0x70bd27, 0x25dfdbfd, {0x15}, [@typed={0x41, 0x81, 0x0, 0x0, @binary="6222eef8755fe141861cf4e39b6f17c0cbf69079f0c0a2b314172259d576299560623e5955d22575795c8ff948eabbccd1dcda4b675e4738309d9a4528"}, @typed={0x14, 0x152, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x63, 0x0, 0x0, @fd}, @generic="f40fb0642ccd26560c7e107fb086b785", @typed={0xc, 0x1e, 0x0, 0x0, @u64=0x54a}, @nested={0xb8, 0x8a, 0x0, 0x1, [@nested={0x4, 0xc6}, @typed={0x8, 0xd0, 0x0, 0x0, @u32=0x21}, @nested={0x4, 0x15a}, @typed={0x79, 0xeb, 0x0, 0x0, @binary="489a18fe8650fca67881655f6d6351a8f8016430557e988de13dff79b58f98058b4b98e3b750ab03985eeee9cbc3cc5aa10195346979e6632a1648bc691332d766efcc2d360510d22813190ebb3fcd7364574b2b105e0580eb4c95906f74a09a9e43e915da0825e7a9b456fa12d0f8680822a82e56"}, @typed={0xa, 0xee, 0x0, 0x0, @str='^%^-(\x00'}, @typed={0x8, 0x37, 0x0, 0x0, @pid=r7}, @typed={0x8, 0x4b, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x7e}, @typed={0x8, 0xd8, 0x0, 0x0, @pid=r9}]}, @generic="a46a377f8a51f46152897039bf249243b579a02c3c120c47e65292a475d3e9a89c16db8f74b3d7083c5937f91dc003ba519857006a10d680ca090aad5632f979393c050e8ad2bdad5834619b5e8fa738d710f27942461d8013e4c35ea7f9affdf64664e2e0e7d75a293342c09f754ed4746c920e32d4308ab7fa73fd75f48901524d37a8201f0c836e894714b5b84e39b4b8303a5af93ba308987866aefe15c4aab3"]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20008040}, 0x4040090) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r13, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r10, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x5c}, 0x1, 0x0, 0x0, 0x280c0}, 0x4858) 2.32080881s ago: executing program 2 (id=1023): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000080)={0x1, 0x5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) openat$ppp(0xffffffffffffff9c, 0x0, 0x40440, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000140)=0x10000, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604"], 0x0) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x2, 0x3, 0x4, 0x8, 0xf}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 2.295132679s ago: executing program 3 (id=1024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x48, 0x2c, 0x400, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x2}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0x6}}, @TCA_U32_LINK={0x8, 0x3, 0x89}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r11, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000d3fb0b"], 0x1c}}, 0x0) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000280)={r13}, &(0x7f0000000340)=0x8) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 2.246620604s ago: executing program 4 (id=1025): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @rand_addr=0x64010100}, 0x2, 0x4, 0x1, 0x3}}, 0x33) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000500050040"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r6) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000004c0)={{r5, &(0x7f0000000040)='l2tp\x00', 0x400, &(0x7f0000000240)={@align=0x2, {0x7, 0x7, 0x4, 0xfff}}, 0x0, &(0x7f0000000300), &(0x7f00000003c0)=0xdb1}, {[0x4, 0x6e, 0x80000000, 0x8001]}, 0x0, 0x37, &(0x7f0000000400)=""/55}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r6) sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r9, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r10], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r11 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r11, &(0x7f0000002180)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r11, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000280)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.825453185s ago: executing program 3 (id=1028): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x18, 0x8, 0x0, @void, @value=r0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @uid}, @typed={0x8, 0x14, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$netlink(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f00000006c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r9, 0x215eb000) r11 = socket(0x14, 0x2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r4}, &(0x7f0000000080), &(0x7f0000000300)=r6}, 0x20) ioctl$sock_inet_tcp_SIOCINQ(r11, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.573490545s ago: executing program 2 (id=1030): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="021df59c04000000080000000100000180000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x17) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x670, 0x5, 0x378, 0x168, 0x210, 0xffffffff, 0x210, 0x168, 0x2e0, 0x2e0, 0xffffffff, 0x2e0, 0x2e0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'geneve1\x00', {}, {0xff}, 0x16}, 0x0, 0x70, 0xb8, 0x48}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x6, @ipv4=@local, @ipv4=@remote, @gre_key=0xb, @port=0x4e23}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x7, "db64985cd5f8f89e2d39bd1e973011c78ee53c45d0234524d46e18d7c613"}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'syz_tun\x00', 'batadv_slave_1\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x11, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x800}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r4, 0x24, 0x0, 0x3, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000520000040000000000000000020000003e000400", @ANYRES32, @ANYBLOB="8dd404da1e7c6977e9c1726d18d198b0456eee6dca121a7f5bf6839101c387314ab0a7bb936de70739c5301e1f9e9d9dbf989f48a495ba947ef2bb4ff82e5b56120d1cee2ca6279d09da45be6e3669"], 0x1c}}, 0x8000) (async) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="03000800df0000000000140000004600003414000000000190780a010100ac1414aa44049d810400907800000000450000000000001100110000ac1414aa7f000001"], 0x42) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r0}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r7, 0x0) (async) r8 = socket(0x2b, 0x1, 0x0) listen(r8, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x3, &(0x7f0000000640)=0x6, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000300)='{\xd1\xd8S\xf1\xc9\xe9\x8a\xa2\xe4\x99\x81\xa5#\xeac\x89\xb7\x918\xda\xa0\f\xc2\x05\x1c\x1aQr&\xd8\xee\xdf\xb7\xf7\x12%\x05s\xbbw\x01\x00\x00\x80\x00\x00\x00\x00\x946\xa9\xe9\x8c:\xd6\xfb\xc7\xfft\xf5\xdf-\xa46P~\xb8\xbf]P\xa50mq\xb8\x8b;yI{\x89\x8a\xa0\xea\xc6\x88\xa3I\xd7\x0en\x1a\x88\xca\x12Paf1@}\xa4q\xb2\xf88H\x85l\xb5\n\x1f\xfd\xdc\xec\x98m\xfc\xec\xbf\x13\xa6\x19\xea\x1e\xdf\xb9\ad\xed\x84\xd0\xea\x94\x02o\xde\xa5\xec@\x16*\xe4f\xa3\x95>\x04\xa2: ', 0x0, &(0x7f00000000c0)={@_ha_fsid={[0x1d]}, {0xc31, 0x8, 0xf9, 0x8b}}, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x5}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x13, &(0x7f0000000440)=@raw=[@alu={0x7, 0x1, 0x5, 0x9, 0x1, 0x20, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @jmp={0x5, 0x0, 0x6, 0x8, 0x5, 0x80, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) 1.473120834s ago: executing program 0 (id=1031): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0200000000000000000012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc020000000000000000000000000001"], 0x5c}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r2, &(0x7f0000001a80)=[{&(0x7f0000000780)="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", 0xfee}, {&(0x7f0000001780)="0bd962d9ae883ca2b6e42114bc2564a8de05ec", 0x13}], 0x2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='batadv0\x00'}) 1.316296817s ago: executing program 2 (id=1032): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB='7\x00'/12, @ANYRES32, @ANYBLOB="c7c5d221c08a01ef49bf678547a9832e8a43c56c153ea59c36be5bb1da35feb61fbc8e4ad5029769be38dfa66fec25f5e9142b43e2d62939", @ANYRES64=0x0], 0x20) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket(0x1d, 0x800, 0x101) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000003c0), 0x4) pselect6(0x40, &(0x7f0000000040)={0xa, 0x2, 0xc, 0x0, 0x1, 0xfffffffffffff388, 0xffff, 0xff10}, &(0x7f0000000280)={0x9, 0x9, 0x1, 0x81, 0x9, 0x0, 0x6, 0x2}, &(0x7f00000002c0)={0x4800000000, 0x0, 0x35, 0x0, 0x1, 0x3, 0x10000}, &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={[0x8]}, 0x8}) close(0x4) 1.315900569s ago: executing program 0 (id=1033): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'nicvf0\x00'}) (async) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x200e4040) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0xc400) (async) r7 = socket$key(0xf, 0x3, 0x2) (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') ioctl$NS_GET_USERNS(r8, 0xb701, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000240)) sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r7], 0x50}, 0x1, 0x7}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYRES64=r7], 0x30}}, 0x4090) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0xc0}, @void, @arp=@generic={0x308, 0x4, 0x6, 0x3, 0x4, @local, "c9e4ac", @local, "753435f1ffca4be238f9d68a29a398"}}, 0x2a) (async) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010000000000fddbdf2500000000", @ANYRES32=r11, @ANYBLOB="4000000010800000280012800e0001006970366772657461700000001400028006000e"], 0x48}}, 0x0) (async) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000001c0)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f00000000c0)={0x3, 'hsr0\x00', {0x401}, 0x4}) 1.288666282s ago: executing program 4 (id=1034): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0xd833, 0x200, 0x0, 0x7, r5}, &(0x7f0000000040)=0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.28139217s ago: executing program 1 (id=1035): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095", @ANYRES16=r0, @ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0x25, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa4d4}}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x4, 0x9, 0x0, 0x2, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x84, 0x3a, &(0x7f0000000480)=""/58, 0x41000, 0x41, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x9, 0x81, 0xf}, 0x10, 0xffffffffffffffff, r1, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x2, 0x2, 0x7, 0x3}], 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xfe54, &(0x7f00000001c0)=ANY=[], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a3000005c002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d6148f0c08000240000000010c0001004e46515545554500"], 0xd0}}, 0x0) 1.071703832s ago: executing program 4 (id=1036): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0x10001}, {0x0, 0xed27c9fa5277b9b7}}}, 0x24}}, 0x24044800) 1.071071216s ago: executing program 3 (id=1037): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f0000002400)=[{&(0x7f00000004c0)="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", 0x242}], 0x1}, 0x20004000) 988.177656ms ago: executing program 0 (id=1038): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4040) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)=@tcp6}, 0x98) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000001400)}, 0x20) (async) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000057c0)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000005780)={&(0x7f0000005800)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001700)=@o_path={&(0x7f00000016c0)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x22, &(0x7f00000014c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x11}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @jmp={0x5, 0x0, 0x8, 0x7, 0x7, 0xfffffffffffffffe}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4babb37b}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001740)=[0xffffffffffffffff, r0, r6, 0xffffffffffffffff]}, 0x94) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000042c0004802800018007000100637400001c00028008000240000000140900010073797a30000000000900020073797a32000000000b0000001100010000000000000000000000000a00000000000000000000000000000000dbe7bb3932969c77e726021f67a6823a64c4bc70b10e745a79be1bbf74ab02e0fe16"], 0x80}}, 0x0) sendmmsg$sock(r1, &(0x7f0000005600)=[{{&(0x7f0000001840)=@pppoe={0x18, 0x0, {0x4, @multicast, 'bridge_slave_0\x00'}}, 0x80, &(0x7f0000003ac0)=[{&(0x7f00000018c0)="cb8417df77485ed539f074306f01e2bdbd834b8d3eb42ba2fc99e1973984b890eaf1a9e76dd3ac18ae4a2102382094bdb546a71ae82a1eb9bc8a4a39b27bbad8605f02a0ec3702882a85b1b23680ee3aa41a049de2c8c94ed3273367a74934fdeb2f39a7930d94", 0x67}, {&(0x7f0000001940)="774d33bfe7e20a71a1e06dea085a4742df25285674ba97cc1bc1866ca1c105c461e3bfae51a27357fd7c6f9c24d3f6ccefdcbb448dca8dbec4a994af11672a7bc24c156f40caf9c1fe9b82b21b66501c12dc63bfda025632ff80bc0bcdd9a769feea34ef3d468d41771a28d4dce2f2e9", 0x70}, {&(0x7f00000019c0)="5725ac4ad239dee6feeffe063a041155692d5bab", 0x14}, {&(0x7f0000001a00)="255913eb2b0028b1a419a468f89dde5a4e43438d4516f0a9fb0010625397fc82", 0x20}, {&(0x7f0000001a40)="fd9f8f937ba914e958e7a2e5f93ecc5eb524eddb0e7d69fce85562926c4441140fc92a91469dee1c6ad44156a98e480e2b9239fbf1e817a27ccf7ac3a84c78a718a7166202bab0994f24053c391e76f911236994f20a1ad3f1940eba62f110cef541937c8f8eebf3485ec01635054dfe37713cae33503f95ae507b", 0x7b}, {&(0x7f0000001ac0)="708852be975b190f7089c17284c36c7a5472c720b7c1d3949d81a8cd49f48d1e82f43e55b60e2347a7ead62aee44082834f043595ca4a921d08cd486f8c826cc54fe6160fadc7341cf8bc9f9cc9a9e25a7ae987798fcc7312f4ea48432425bda16c60e8daabd7cf20dae9b0cab9102646af0e2a5c231bf4a3147fa921c2a78cfb0ceab2c946bf8fa5d0ce1043be2508087d369400f4419762193c7d1f9e2b4de33162577b3b7aefe888fcda5591ca4550a7bc8415d58a7b86ff6c5f0e876886414fc5bd1b1177c8b197f6d01e6593af1ab4ee1081c47d2039c6e57d270937aee4918f5aa0500ce76c3abbde23df527359d287d406395b5af22a9a88f05dbfe5f2307bbc1bc7561af0a18f50e531c04cd7bf8b2d8704a929afeab2ddb7621a63443a346ef531e681cc89b6dd806f0879bb35f43afcc0441e32f89f548ccceb1f2318f38853981ccff968b24a0a2ba4f926e150325c2dd9c229272ff20f7480a3a4a7ba4646674b80bbef9db6248dbd60beb7df18950f6d3eb32d7a75c0b4614b480d040feb79f947f25349d2d919ce6839c8a75152a7fa0e737a49a237c560a255d69c653b5f658719bcdde990ad7c9b2cd321d5f7cc40c182be43b912c7a41fe69f6a7c96a0efcc05dd7ef62cf42c4cca8a24271c15b127d9b7cd205fd686d266ca8ed719c97f0e6ecf455fab76ad2474dff3de386147e3773ab002075aa3a6849acf2a7d1aa32a3cb8c7deae6af69476d4e99f5bdae5e795187e76fd1fc697c7493a0c93b720443344dcf3317b0401c2e55c6af84462983f0ba2f7b9269e1976aa8a1d72c5c922dd677e8b55f01d3fff1680174346cd10c9544dc9fb83732bf1bc1d49a81dbed0cac53e483e464c25eac129b5b253a08558d66c72457d6fa59ff2ad3a798743e7bd6090296a1146f49a5c32a9da361c1650cf9bb96f6b7693b82feeb6ff19ec06f73019e66bd1a7cb2d3f5e05e4f7d2788bf3f5211db66b1df79dbc0c71df9b619c6c6f0e6222edeacee4b9c69fa2a592e0858690c8d4711759a53ced6ddba556f897d800ee74ee9f4fad5e8fdb5b50d127ab3c64fdd6c48055e7377f09a351206c74151593c190045e412ee4fff7862a29a907c65606e147e43c81f4b0c393977f8bf88cec90ced14cb559bbd110d76a0b18b2040c6929f89352400ccb052bcec2eae9c6d71b99e7ec0e7e8046ce10bb5d67e07ed915e60f707ad2abdea951bdc248b522fbbbc05adb8ce9a45e51376ecb7da2f5aa58a980601f202ef7a8e56d1f0fb3ece15de71adb942da9facda576d05cb52ce655307a0d8dd49631f6f6157f130995d504549d8518523ad4c8dc053e2722195aec755c72d775a47d30789e6829aa29becb2719d5d6a6510bdf1e5e9f16e23fc2d37e35e7c2f4a54098faa7e62a685faa974caaeff0f68f9557da28d1423a1fc64f273465ec0289ef30d27a9e0584dd126a61e15387bd2f3b5a74d3eea02d37dd47e18693b8bdb595efc39bf7989f34ca8243abc208639e1a61eb6d5f4cac5863636325abcb8c6375402f363950786d8aa99d9ec88720787e12e8a30972ece1218ab21e82bb28fbaae9f85d7415368ed9cfaa5cd45a0a2e76b490e6d630cfb242b243979405997d5b8e956aa3a870d460be5a7c75cc8a28635a311468c2077d037f676dc555a1906fb3f072de5ed81b1d03953f809d9527dd0f07bf69ccdd05295820565992620a5883a9a6da7c6f505f9712601d9c9d38081dc5c174d49bff972e60c70c83012fe84fb6cbbf2f305c4109c808822a6ccedb5caf4b6781d3c7bb112af4cadea7e599816ed158eb2895e17e1a4463c3e1e781b1b95e7e933692937d88698f1f842f0ed6bc11405dbe9f6acb22b06b5d8f5d584b82b4117e2958093ba99d40fef5c179cfb8e3f5374d9acd4202a2c2fa5b67bed62156d165c566344f29e375f0063a2bcf3355272e9880b2c18f005fa1a018f3211411f68beb9c95bb078e99665ebaf21a4c0072cecdac430193904cfdc16a9e22e8a08365ac7d4d8aa6eddeb5d9553d9f2903ff4298de88ad57536c33e5e86e807f4ddacecda120f30305aa633963d13ebcda081eefc8b0e9a30be33336b05b8ff265147d6219a90927828f4dbb94d0ed8ae4d128b17d4d8e394c5b3a3d0bed8dc69718645c26a17173d58666b0aeb5c1621e6e6117b8dc1fbea01d2d197cbe7586acf88b04838266ca8d2bd9786f27fa50217828cce56dca876e402570900e1d254b38228d8162d9011a735ff2cfe642e368ee79ddd3ef45e6999e477e9b2943e89a263f4713d9f476788ed5843aa89150cf5c6642d7d096308d7b232f3184a0932205445665c8a44812c90d673608c6bd0bba95b0a62ed966c996fd04792ced77ab5d2f17211fa6373f6bd96146babd692200fbc32726db297f750f3e476826422286ec33ba594abbea1e953f80c266dde353115d9770cb5fe76fb491b0286225931ac7c1328b048137018ca0823ef0fa960d9541d2c80385ad4f19762eef1201e3a6d895c4ecb4ebfe91fcda9ccfddf094e5e07f692a36a104631b8e8dadcd80dbdb3b663100fc7608427f276200581c511957eb642aa4d6e819c911708cedcbc4f614186403de8193f1414558efc4d8d47a687ede8b3ad19334e02ede2c859e4afac24188e51a4ab168362d181c982541855ed53891e448da3c70cd05fc61ffcf528308d655690fbfacff522e0840b1d37fb3d3b130fb54a360585acf718b7ade89d3fdc9e1c876b7c88cce7e38d5c17cd2aab9e4731258fa29b731201cdc044a87c661f77650ce9f6f7b395a06ab7b69511f7ce67bd85b1b8bbebe32a1d688c47f4ebde3527859e95dce6f83ca74729861d87414341ea4de34d2f73ea527917dfbba129f5d7ef15453286ea3ce0815f1363fa72e624418583277d5491d3f1bdb53b391a06c3d4c5b67ac8f5fbc6a9788facb04272aa3f8593b792f72e1f2cd30de8b61946d42275625d55de25e07c29cedb78165e24d1adcde2e5d32e6a66bf148c69f10500f0057f9e59ed4af9ea40cbc027b1d98a3ca57de71b2eb9da3351dcc89d2579f5c7164b3a4dfe5004c8367e82f786690ecd74fd51d9f604b3d9bea060d45468a3205c8036328410264f4594857a7ed1fc86204ff3717e7c2117ff7bc19be93e8e99ad7dfbdf1e9b17dab60a0daae429da6de39c29ebccdfaa9cd70ada785358ab3fb1428f2e4b7096ee2336a2ff4ecccc941e0d652378c71421fcfb7790983ba7b4e00b79619a1fc0e49a279cee1397a86ee6653816fd6ca003a9ced69ea00692e2e26ed7208a7affb227efcb15b027bbc14ac00096cb7c1e1fda250bc0d9f3bbbeb09e5ec0b6e73dc98cac6205e3997e2ef767f9c044cf46ffb6965838c7e2ade4bbcc9a8cb1d00e74b51d1c83fb9570103737378733ca2207a7f3822437c0a0ebc0cd705d3c333aa045e75b7edfcfc76349b3dc5256cd2cc01798c00838c451270c8912a767f352402065274dbc0716bc53ab8323154c6a0bfef1b89e09d075a79ca4b2c5f248fe752f5568142408821c3c7589cc3fe4ba13d0df3a9a0f3abad668b3924ccc50ebc8d4d348158b620df675b7c83b26632844d7c1767f9d6b533810a7d94d0606242cee26a616d7ca6136577b7f8b6368e0048d168dbb6578a49165de19ceb767235698bac5a4065e8b439b9d59bb4ba8e38cfa1cdaa94ad7ac595726a7f9d272c347a5f8ac4c031add08a1fecdd2aa086155a9484e8bfbbb88947429eee4fc2551a5121a91ca1feb233268e34aef1e85c2cb29f0563689be6935c7b2ff2d83fa739b9654a4c597e200267e775f688c5c5f0dad2d9e74c5b4f23dc6a609bb783649568ff210d6675d95fef5ee6ee5d6d2591254acce1953bdf81b3cf104716d0e37aad6bf196977940c1b2584c0e07ecc7b5052f7f28e8e1acf996777c3871c43acf19252d6c1041d072ed4ba8c88507f29aa6934a79c7e2f836a77ace94c4c4cb36dd95d3cf45099f17388041958c9281e24a7afc28f5466630eb4535b9d277a42960f9ac071e540e6882e8ecae5ae6203fb60733219fcb19d3d862acca42be19707c29d1b2875176bcb67bc4920c0e793c0431d894588aacfbe131b5f68f26becfb7c45366123a3296ff9ad40eb509d28fa74e9b832d0b1cd05a14003d4691d38eabaf505065d4480b3f5c848cba9a1194ec0a1147db953a0b1c5dd37154fca25ecba0f33810d44e3e9a4c0674d8abe3500ede72ad7b8154251cb907b20b6e4460e2f7130caafc3ce2f527378383b8f15de9e59e4502a187fcce995e2fc14b96cc137ad76d25e557e184c44ca19544904c489525b0f86564513b7e761f47ca3c04910918264a394ecd615fbcffe99b657b25f91fb46c4c6418e183ac90ba0c89e4d7910c4e797d782a0833d1f9a81e28e12764a35d0ac9f164f3cc0da9735992bd7cfa989be7c0aa813f44e65f20853266ec8381cb993c94f7c7340095027e41482e6e934600fe9e1263992a7c3d1d27079120a019bdac8358f4e127cf75274f3c1b5398ebe905cf568a2fafc4e7d4da93206959e50de0a9ed7da9dc11b3d6de8bf466dee1898965c42af93afe21eb020cf34089b2f3c96d8581392a46472db64481a7eb149c3dc48ab34157f99a578af70ff86a7b98918f896e152a1fb32af2bab33421e7c332b3efd4448fd6f5874c71aefd5213b87509244bf55ff424f9e9f94b69a28c36c1c553a0226cc37c6d5b515f6dfaad5229bb028c81a6c3c0dd0612e7179fb73dad0e26612d81b48d81c18f1456c9f52016670ea1846c43cdd2ed420654d0c3aedb3ceeb09c8492b165e44940c764507edff7420bfde9ab13fbcc1ffcc052d6c53853cd7808c99d3794508bb31a87989c673f895799430ce3d14698014d37ce6dcc150631e18f72a5a56705434e8538b702e997b936e9f273014546bcf22be14674ad6059424bd8102d12d2bddcfb377c36755705e0ffba14e0aab9c146a6abed36606d205537df5019bd6d831d3b182fb90e1e9eb37eae9b6de626a65048d05fd09ccee5e2a1d4b9d4cfdec4d47c0d7cfd3dd04db7c5e4c397e61822923572f7f6a3a370526a38a00859f8c7be172e1d8af6d20ca7d46831c0de3e58626a95a98f0cb039c4152a7cc23afff8756ca268b599dcbfbf5d4300245de4f9ebc3efda77f7fbd2fe25f1985e2f25e72c05c929032c785d26bbdc5cfd7a854258edbe99cd9d58a1b8edc3468976e2191c84bf133941354124a983a9b189382ccf58f116048137cd3992fb1b1cb27dfca49a32886f2108c24f9b02dc3852e3ffdbda6cf9519418ecaf961a77b56831da4ebdb51ddb7c649459d74e466165313151130c261a58e8e0305d2cc74bf84bea71506448608f654e4814bd069f45d8c12c09241def1f984e3e78567366010690004556c109ce1a68b1f455bb9850b44593c60586e2b168d978a5f7cfc594d958ac45294c658c34ec9a98a166665cdba0b2d2b35be215aa1364917ecfccc7de36c2de032729186ad563d3d8557f7cfe242a6d2fd52ca57e214f8642da4c95fcd25c0f8c54e3ac43e122e25afb82576a9f89b84c9aee56ccaac9fa3849b84ec9f33d064fd854d029ea487cbe904c9c6e09a8c3b26c215fa262d2e937156b309d9ee6b489178d0332bc297d50cdf85ec8c2cd68490dc54de19556e25c78c07193ab543c594ce0939016c64aba1633d554f22d1582ed71a8e47d6df70ee2a6fd285bc8f9af735593b082333d410e1dd40999123fce206d76c146ddcaca626d9489274654b0270786d8df382", 0x1000}, {&(0x7f0000002ac0)="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", 0x1000}], 0x7}}, {{&(0x7f0000003b40)=@hci={0x1f, 0x2, 0x3}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003bc0)="a18b0bd755e356373c99fee32fc801cfd19834d837ec", 0x16}], 0x1}}, {{&(0x7f0000003c40)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x80, &(0x7f0000003cc0), 0x0, &(0x7f0000003d00)=[@mark={{0x14, 0x1, 0x24, 0x9b59}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xf63a}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}], 0xd8}}, {{&(0x7f0000003e00)=@rc={0x1f, @any, 0x5}, 0x80, &(0x7f0000004180)=[{&(0x7f0000003e80)="bff9c52c99e62f5c3603e3b53ff5b20939fc19ec83fe7020c35962e4b49000bff2f11274e16152d98c252d91c3cc7ab253dc512e14b483f175b63aaf16762eeb940836fe85b1e1e06e63", 0x4a}, {&(0x7f0000003f00)="09660f153774e6e8b02b5ebe0a25263653f21280055576649527fc165b8c896b3f7174562e045e4f3ae914634d16781ab46f9ef89bbc6a30793a787a83611f3b9b9d765b972dec1d7cf8c8149e454b62b4985d34063df38470aac068f94124b4dbb2576685f2fc8e2b790e1e83256b713b1435be3e4b2bba4ee10b01598b7f616d57fb383c788dac655a561b8a2fce3b0d92b98aeed945ae6b9cf2bab4b596d170ab37b137b3e9074131522aed8845d9b006633b63c8eb68d3e0ddd3b7ab858c3e", 0xc1}, {&(0x7f0000004000)="416ef011cea471d52cd01232154d623668e60a8a319ca1e5094dbcfe353a91ed57fc026f174a3260b6170ccc9ec671ca3018e5f197db7f8b3aaf4a4f01b2df4399a9bdb94166ab85c18e1f7840fdabf4c7af7ceb868c5d31bbbe6ba822da6cda2473672d8441c31ace89e944f26ccb87fcec7a943a1ec95c65417e563cdde09e377c472d12b0f5a96b5e557165c016fa639f2210502cd93272be4e078dcd83722c4e806b21e04c8d703b96b1b8e56713e7916049c2e8b98980515db40927ce50e3704c5e37b3c5dc11ae48f64de546f86ca7e90098f9f203322bbbda13637610c12a7243919a64f48a864dcba9a897ff154b090266d22936", 0xf8}, {&(0x7f0000004100)="b06421c6f65c8d43912465b168ef29a1fa483db43521344ccd946e08b165d0ad5f1ae6ec2c0893445f77b49e9dc08744a5270ff0b118588b7e0019", 0x3b}, {&(0x7f0000004140)="46efe84afc6842ba7523d6f9db42d802811c19414c72d909c643a3e99e9dae6877ce14", 0x23}], 0x5, &(0x7f0000004200)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x180000}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x4dabfdd8}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0xa8}}, {{&(0x7f00000042c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010101}}, 0x80, &(0x7f0000005500)=[{&(0x7f0000004340)="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", 0x1000}, {&(0x7f0000005340)="fdb9daaa1b1a98085606b1adfad57224eb32cad2d825a95459a843d7ef33193624e674036cd9b1cc8fc4cc4604d6ab7e918042009f0643c508ae6705b78c1b7f5f217eed1baf3737f8e3b5cce03b680a5d955aeb3808fa64401254745a1f79f407613cfd48efaacdbf7664cabbc9c897b971c1b82643e2d3713b721cad4a170ab814e84b87593db84aac50c72e91209e0d3aa09019e289dce85c6b758cb15c6a707bdbd83fd716e28c0df99343a7936febe199811386c701bd4ecd38d6918261fdbcfc445acca8dc09fade998530986a5d94ee8885e6872a99d572fe03e23a0e5fcd0f0ebe7479565821e267", 0xec}, {&(0x7f0000005440)="b2a784ca2863708fd1511f422580a1c53274656ca5974a73af3f83c64517700d270594fdb44b27e6026be2c5c94e07b84d9d3acbd29743cb382ec7c9708cfc88263700f7398efa0b042f5afd11c80221d845b6ddf5a18d562e6af1dbf3ffd3dcc03aba444705f76d8bc24ef8474e0d1ffa935fb303b2bcc4f4676f58eeed46d4c54678268d3d99a17c8286a9ed8974b30b0c3bbeea8526ca90dfea3d3e9e6c3dbc6c412f83e073f5e03f879610df", 0xae}], 0x3, &(0x7f0000005540)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}], 0x90}}], 0x5, 0x80) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000140)=0xff, 0x4) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) (async, rerun: 64) getsockopt$inet6_buf(r8, 0x29, 0x3d, &(0x7f00000002c0)=""/60, &(0x7f0000000300)=0x3c) (async, rerun: 64) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async, rerun: 64) sendto$inet(r7, &(0x7f00000003c0)="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", 0x1000, 0x1, &(0x7f00000013c0)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000005740), r9) 952.323555ms ago: executing program 3 (id=1039): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvfrom(r0, &(0x7f0000000080)=""/62, 0x3e, 0x40000000, &(0x7f00000000c0)=@xdp={0x2c, 0x8, r2, 0x30}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r5, 0x40106e80, &(0x7f0000000000)={0x10001, 0x1}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x200, 0x200, 0x168, 0x298, 0x98, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) recvfrom(r0, &(0x7f0000000080)=""/62, 0x3e, 0x40000000, &(0x7f00000000c0)=@xdp={0x2c, 0x8, r2, 0x30}, 0x80) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r5, 0x40106e80, &(0x7f0000000000)={0x10001, 0x1}) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x200, 0x200, 0x168, 0x298, 0x98, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) 864.424766ms ago: executing program 1 (id=1040): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000006800010000000000000000000a000000000000005a7c29797e88a036042b080cca795eebc18246abcb7e3b02469b233e18c61239fd97f4d90e976c6569637362d24bb6e6a2e6afa14cb53a2f9b2f50b9fb65873a1df44e9e12668181dd8f57047c6ce4e3bbb50622842dc54671359a8559875098078d444e92dba1615385415c354c79d0ff4dec7b685e991d3c8945e0510be2e88475c25322f7cea383624282"], 0x18}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 863.799282ms ago: executing program 4 (id=1041): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x3c}, {0x7, 0x0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 814.955593ms ago: executing program 0 (id=1042): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) close(0x3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x38, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0xe, 0x3ff, @l2={'eth', 0x3a, 'macvlan1\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 751.087612ms ago: executing program 1 (id=1043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r0, 0x34, 0x1, 0x380f, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@initdev, @multicast2, 0x0}, &(0x7f00000002c0)=0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@ifindex=r3, r1, 0xf, 0x14, r1, @void, @value=r1, @void, @void, r2}, 0x20) 648.405821ms ago: executing program 4 (id=1044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040851}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x1}, 0x102) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000090601020000000000000000020000020900020073797a310000000005000100070020000800094000000009"], 0x30}, 0x1, 0x0, 0x0, 0x100000c6}, 0x24000010) 643.136799ms ago: executing program 2 (id=1045): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000006c0)={{0xffffffffffffffff, &(0x7f0000000000)='\xff\xff\xff\xff\xff\xff', 0x0, &(0x7f0000000040)={@align=0x2, {0x200, 0xcb, 0x0, 0x401}}, 0xfffffffc, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}, 0x6, &(0x7f00000009c0)=[{0x1, 0xfff, &(0x7f0000000100)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000140)="61352c678e8b079663fee243e3b9a442f3b61921647aeb34d212d18a7f925fee4f536a6f9a0d6f50221100d6bbc8b1c03a3d34cd6bbccbdaab585d5a625707dfd1134e2523ce57ea9088552a6894e80c90587b7da5bdb6f85add2491c5b11011f01c", 0x62, 0xa}, {0x3, 0x6, &(0x7f00000001c0)='\\{b\x00', &(0x7f0000000280)="b608853e007a2c439774f68d65d8dee9a39958d5d513424e4d5fb3d57b7cf3b6c2dbd6ed71e180602f5da0e76e4b5344a9aa09be7bdc44087541377fe4c44ac13fdda8d48a304fd2d1080781a7c98ade4725c4d2eb75a7ff57815a0085a2d571e7e14025442b02471a05e91f6ac2cc44307791c8bae51a227df8a613d99a980b66249dde55139f62c2904c", 0x8b, 0x1a}, {0x3, 0xca9, &(0x7f0000000340)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000380)="69e198500777d4eb8b039aecc27401e11b0b17b80ea87a8e7994e3b4534683f35940a982fba2664480fde552f55adaea5f787286a548f2c5d269f9b4d07073a0321210a6b33addfb447b5cc43c058493b6c72536092e15dbf0ea9b557f06935309b42089f27f26004c3e880c4a957fbe2ee42692bf1a4a58524606c55c51f689373817cdbcdf944f51b8f03b104e3c0254724645baeb2b8af4b404539b4ddb112c0f47bc15daf49a7cf0c5d3fdfd150c255acd55c738aeae42d6cb61da2ad59d953942287d89fd752f64e6004288", 0xce, 0x20}, {0x2, 0xba85, &(0x7f0000000480)='#$:\x00', &(0x7f00000004c0)="793b4309543be1f8b4a8349bc6e3a45f44c08747af99f2a8d725a4dd04915825b126c6d22ff91484435eee37f9317c967bf3b47cbf89c04e0bdbc4a6fc71405bdde7f13c838c3c9fe55afa9a1e49cce08eacfd3103f219053742183cd893c240c096b233e8cb6e65fa17387849c88008e030eb1322878d110de6ee3e0fbe23d7f024db5fde881eda8cb758c7bb2dc9018eda9b5375eb43cf2b3a75eb5aad0a32a5d6435b47ecca56cd513da2821440ce603c738b", 0xb4, 0x8}, {0x1, 0x0, &(0x7f0000000580)=')($$-(]-,)]^)][#[\\:\x00', &(0x7f00000005c0)="20428960469c8e24b5df37cc5be96c1cfc9e0016f4", 0x15, 0x2}, {0x2, 0x0, &(0x7f0000000900)='\\{b\x00', &(0x7f0000000940)="86c2a96e45df4b3d6988a480e6f2bf60bf430215b544e2151d9bd24ca8193569fc36759f49b4a3649c3effd853722a2fa711a8dbce8d8a2a5436f288ed306a18baca6ebd33777f7b6a81e960492057b71b4e79c9a89abbbc02e34e71786a7dae519546d2c669a8c1be71e10b74c085", 0x6f}]}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0xf7, 0xc, 0x48, @mcast1, @private1, 0x20, 0x700, 0x9, 0x3ff}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001800010000000001fddbdf251d23020008000b00", @ANYRES32=r3, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r4, @ANYBLOB="1500040003000000000300004505a8b9e859abc00100000008000e00", @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in=@rand_addr=0x64010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x8, 0x4e21, 0x7, 0x2, 0xb0, 0x20, 0x21, r1, r5}, {0x88a0, 0x400, 0x5, 0x9d92346, 0xb9, 0xefa, 0x8, 0x2}, {0x6, 0x3ff, 0xc}, 0xf51, 0x6e6bbe, 0x0, 0x0, 0x1, 0x3}, {{@in=@remote, 0x4d2, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x3501, 0x1, 0x2, 0x0, 0x2, 0x6, 0x4}}, 0xe8) (async) syz_emit_ethernet(0x66, &(0x7f0000000200)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) 625.976446ms ago: executing program 3 (id=1046): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x70bd2c, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa43}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0xf8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 532.259097ms ago: executing program 1 (id=1047): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x1, 0x700, 0x1, 0x2, {{0x3d, 0x4, 0x0, 0x6, 0xf4, 0x65, 0x0, 0x2, 0x2f, 0x0, @local, @rand_addr=0x64010100, {[@generic={0x82, 0x4, "c90e"}, @ra={0x94, 0x4}, @cipso={0x86, 0x5d, 0xffffffffffffffff, [{0x1, 0x11, "f45094e061c65ff823ab1a35ad0128"}, {0x0, 0x10, "7105ec06b8cdf2cab2ec85063e93"}, {0x2, 0xd, "dd4aa56f8a0e2ecdd5bac8"}, {0x0, 0x11, "3dbb683488f1f6dbc85a2a269ac49c"}, {0x1, 0xb, "5a07f89c8436cc8eaf"}, {0x1, 0x2}, {0x1, 0xb, "e30005bf24d317f017"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0x7f, 0x1, 0x2, [{@rand_addr=0x64010102, 0x10000}, {@empty, 0x420}, {@rand_addr=0x64010102, 0x6}, {@private=0xa010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x89}, {@loopback, 0xfffffff9}, {@broadcast, 0x400}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1ff}]}, @timestamp={0x44, 0xc, 0x92, 0x0, 0xe, [0x9, 0x0]}, @lsrr={0x83, 0x27, 0x46, [@broadcast, @dev={0xac, 0x14, 0x14, 0x14}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @private=0xa010102, @broadcast, @multicast2]}]}}}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000600)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@getpolicy={0x25c, 0x15, 0x100, 0x70bd28, 0x25dfdbfc, {{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0x0, 0x4e24, 0xe, 0xa, 0xa0, 0xb0, 0x116, r1, r2}, 0x0, 0x1}, [@sa={0xe4, 0x6, {{@in=@rand_addr=0x64010102, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x4e20, 0x6, 0x4e21, 0x0, 0x0, 0x79553250f1dc5309, 0x20, 0x88, r1, r2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x6c}, @in6=@rand_addr=' \x01\x00', {0x80000001, 0x4, 0x651d, 0xfffffffffffffff9, 0xffffffffffffffff, 0xf36, 0x9, 0x5}, {0x0, 0x4, 0x2, 0x9}, {0x8c9, 0xa87, 0x5}, 0x7, 0x3507, 0x2, 0x3, 0x4, 0x20}}, @replay_thresh={0x8, 0xb, 0x8}, @coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00'}, @tmpl={0x104, 0x5, [{{@in=@loopback, 0x4d5, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x34ff, 0x4, 0x2, 0x1, 0xffffff7f, 0x2, 0xc}, {{@in6=@empty, 0x4d5, 0xff}, 0x2, @in6=@remote, 0x3505, 0x3, 0x1, 0x5, 0xfffffff8, 0x9, 0x10000}, {{@in=@remote, 0x4d5, 0xff}, 0xa, @in6=@loopback, 0x3500, 0x1, 0x1, 0x6, 0x81, 0x4, 0x1000}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d2, 0x6c}, 0x2, @in=@private=0xa010102, 0x3505, 0x2, 0x0, 0x8, 0x3, 0xd, 0x1}]}, @extra_flags={0x8, 0x18, 0x5}]}, 0x25c}}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1401000023000100000000000000000001"], 0x114}], 0x1}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x2c000010) 528.725032ms ago: executing program 4 (id=1048): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0x200}, {r0, 0x421}], 0x2, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x114, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x32}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff7e9b}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000040}, 0x14) 430.335025ms ago: executing program 0 (id=1049): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="eaab6dd31ebb0fd9eed2a6aa965f17dd010001000000000045515763705dfb4f31b42810ef1600303f4710e29225fc74b72e63de9fe566ab649d2363618ecf1d48dfefa17b79386336f638bf1d8a44d68809c510587864b727630aa693323c13cc2b679e5e2c1c4cc3a888cd945862e677a78001515554807c2010992d537151e6f98fce16a905be894a813695085e5d1e9113a12e6982a3a574b10790d169ebbde69c2306070cfc1cf95a72c12fa77185b434f9d6ce30834a701da45ebf4f3edacbbd737ce97f5c1727e32515bad6d9b51bf815f42b6b49471c29cd1a826a1b66172e989d7cd14d007c426b58c8"], 0x14}, 0x1, 0x0, 0x0, 0x60c5}, 0x90) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0xc8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_police={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xe546}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x78, 0x2, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1718, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2d, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x6, 0x2366}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc8}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0xc8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_police={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xe546}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x78, 0x2, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1718, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2d, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x6, 0x2366}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc8}}, 0x0) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000000340)) 356.950871ms ago: executing program 2 (id=1050): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c00018008000140c0ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x5c, 0x2c, 0x2, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0x0, 0xffffff00, 0xff000000]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) 315.204255ms ago: executing program 1 (id=1051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, 0x0, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getqdisc={0x2c, 0x26, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff1}, {0x11, 0x2}, {0xd, 0x10}}, [{0x4}, {0x4}]}, 0x2c}}, 0x40004) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc8, 0x355a, 0x401}}}}]}, 0x44}}, 0x0) (async, rerun: 32) r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) r11 = socket(0x2c, 0x1, 0xffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000000c0)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) 113.074156ms ago: executing program 3 (id=1052): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) unshare(0x26020480) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x100e000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0), 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, r3, 0x1, 0xfffffffc, 0x0, {0x3}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0xfffffffffffffdf3}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r4, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xfe54, &(0x7f00000001c0)=ANY=[], 0x0) 0s ago: executing program 0 (id=1053): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={r0, &(0x7f0000000180)='%]\\[,\x00', 0x222202, &(0x7f00000001c0)={@_ha_fsid={[0x0, 0xff]}, {0x1, 0x1, 0x4, 0xfffffffffffffff2}}, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x991c}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x1}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x7fff, 0x8, [0x9, 0x2, 0xcae, 0xa, 0x8000, 0x3ff, 0x6, 0x2]}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000380)={r2, 0x8e, "bf8bce26ab0bb7f40b9062e75acf622f4d1f8f93ef2ef3dc44cc944aa0fc9c26a71c5a5ad953f9e3e505a32f26971a5119f3f20faf69c507b237998ce8f16b14b20949b23106165b0bd9dca8dd400eb863766af246f2358e421c70368d82e4033e9da91f84c23052aeb15f6965609ff2a1df32b11f8063b6da60828b3f2b6dab6c9d295b4d2952976aa3ce33cd94"}, &(0x7f0000000440)=0x96) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}}}]}]}, 0x38}}, 0x8000) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000600)=0x100000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000680)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f00000006c0)='\x1c\'@$,{pl.\x00', 0x200000, &(0x7f0000000700)={@_ha_fsid={[0x8466, 0x4]}, {0xc8e, 0x3, 0x10001, 0xed6}}, 0xfffffffe, &(0x7f0000000740), &(0x7f0000000780)=0x4}) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000800)={0x0, r0, 0x1, 0xf, 0x7, 0x80}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000f00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0xf4, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_USERDATA={0x5c, 0xc, "13709b8c1ebf2eb0569f154e328b2a49f6fe18fbf3a21fc244917f61cc24a29901ac1360f59ee7fe01a3ef88e4191a48a312882f4d91e7a2bee89b4bdf1f6568468470f8fd066638993c36867889d15809465df9df70e534"}, @NFTA_CHAIN_USERDATA={0x5a, 0xc, "13a0cd4979543de473b5d14c6cbfba0cd736a62f1581f30b87dc7c877fb98dad222ca2e480c05c24debe340999b4f92113a265ede3cc38154dcbb2aa3f823d618a55ddce386df97261b58c2fc9e5c4892bb3d368bbae"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x3f0, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_USERDATA={0x14, 0xd, 0x1, 0x0, "7f3599c138309e5f6c99065468e5e629"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x13}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x42}, @NFTA_SET_EXPRESSIONS={0x2e4, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x1b0, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1a0, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x19c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x54, 0x1, "4923892ee162e8fd5bcdcb83026b6d17e4312e6a3d5a05ee717a298d3f102249db1f0888ff72f0bf181ed2c5dab072151dfc3a545483253cc792012416d58f9fe8b14ec9016281792bde53edd80adc05"}, @NFTA_DATA_VALUE={0x5e, 0x1, "6d4652db9909f75f8aaaee5d02c78dbf28573f3f50c3bb6eee905a6ba79640313e76a3f90199af6bf8ce70da94cad6f895ed74e1bf6edaeb1edf0e6960e4230d8fbdef219ea7c3901f14ede305b9bc9c9aa360964a65b103aa8a"}, @NFTA_DATA_VALUE={0xe4, 0x1, "8e8baeefaf284d831a78d830b00cb08fb7fb31c9092280fa86539cd698d1b058afa2d9631678fb211583716ad00b043c6d973bbb93b141929d28e8f47e9d2575b6c44dd9a8f438feff0019dd9912896e8c3922cbd6838bf4498b4a822a6e927905a0394adf2d151e9f70d809b67196ba7ed40c6987cfce23c435b976ac27482d23465f2e6c055104fa691335f72ef7734569ce46f4cd49b86f904bfc114467e961821c1a663806f25380177dee1ba6f4fd2b2fee2778295dc7d12f5e56ffcef3f7c29376c6c94c8cc7f8d7b76486072565aa01f5e4c0d8d77f989bb954e807ba"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x29}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0x68, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x754}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x30b4ce5d}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xbd4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd6}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x1b}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_USERDATA={0xcb, 0xd, 0x1, 0x0, "c01ba2aab999f0853e37ba98282deb6d4e6371b79701246d0f1dd0533ef1de9d5e7d7e4aea703f179b10654e46d06dda05e834a387e8b553385469d392a91ad9b8cda51a5954e5d58ccde90c0a6fe5e33454d007587096e21e7c029c6ff55cc5d0e907ce109227301eec853c6c4671c67378165302070d69344a0b8cd1a40f7327b7ec68b0509f154bb5bf888a740dcae06dbd01246ce7fd910bd8e21cf69dc5e7d5ce59348cff7222710964d2ca2dbe8d22533bde43bd6cabf120063015b38843e5e34167b77e"}]}, @NFT_MSG_NEWFLOWTABLE={0x84, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'batadv0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x481, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_KEY_TYPE={0x8}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x3}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5e4}, 0x1, 0x0, 0x0, 0x4000001}, 0x4800) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000f40)={r3, @in={{0x2, 0x4e22, @loopback}}}, 0x84) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x4010, r4, 0xe5b15000) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000001000), 0x3) recvfrom$l2tp6(r0, &(0x7f0000001040)=""/143, 0x8f, 0xc0002022, 0x0, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001140), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x54, r7, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0xc5) syz_genetlink_get_family_id$ipvs(&(0x7f0000001280), r0) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f00000012c0)={0xa2fb, 0x4, 0x7fffffff, 0x0, 0x37, 0x21}) socket$kcm(0x29, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001300)={'batadv_slave_1\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001340)={r1}) sendmsg$nl_netfilter(r8, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, 0x12, 0x6, 0x0, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x6}, [@nested={0x8, 0xee, 0x0, 0x1, [@nested={0x4, 0x105}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xd1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 65.762567][ T5609] cgroup: Unknown subsys name 'net' [ 65.872672][ T5609] cgroup: Unknown subsys name 'cpuset' [ 65.880951][ T5609] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.255611][ T5609] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.357227][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.367361][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.368046][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.376601][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.385369][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.394444][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.397810][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.404333][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.411627][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.428049][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.435601][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.438086][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.447360][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.452050][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.457151][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.467028][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.472282][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.486356][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.495156][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.507238][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.524161][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.534518][ T4942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.543190][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.573396][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.582254][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.243001][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.252118][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.260759][ T5625] bridge_slave_0: entered allmulticast mode [ 71.268615][ T5625] bridge_slave_0: entered promiscuous mode [ 71.286708][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.293932][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.301331][ T5622] bridge_slave_0: entered allmulticast mode [ 71.308390][ T5622] bridge_slave_0: entered promiscuous mode [ 71.321612][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.328948][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.336500][ T5625] bridge_slave_1: entered allmulticast mode [ 71.343722][ T5625] bridge_slave_1: entered promiscuous mode [ 71.366343][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.370310][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.373734][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.380519][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.388551][ T5622] bridge_slave_1: entered allmulticast mode [ 71.400359][ T5622] bridge_slave_1: entered promiscuous mode [ 71.470342][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.477791][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.485062][ T5621] bridge_slave_0: entered allmulticast mode [ 71.492333][ T5621] bridge_slave_0: entered promiscuous mode [ 71.520198][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.540289][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.547395][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.554674][ T5621] bridge_slave_1: entered allmulticast mode [ 71.562044][ T5621] bridge_slave_1: entered promiscuous mode [ 71.571779][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.581246][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.589293][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.596525][ T5624] bridge_slave_0: entered allmulticast mode [ 71.604027][ T5624] bridge_slave_0: entered promiscuous mode [ 71.610682][ T5628] Bluetooth: hci2: command tx timeout [ 71.610842][ T5628] Bluetooth: hci1: command tx timeout [ 71.616183][ T5637] Bluetooth: hci3: command tx timeout [ 71.622147][ T4942] Bluetooth: hci0: command tx timeout [ 71.627934][ T5632] Bluetooth: hci4: command tx timeout [ 71.640340][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.682640][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.692149][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.699363][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.706530][ T5624] bridge_slave_1: entered allmulticast mode [ 71.713951][ T5624] bridge_slave_1: entered promiscuous mode [ 71.767731][ T5625] team0: Port device team_slave_0 added [ 71.773781][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.781309][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.788758][ T5623] bridge_slave_0: entered allmulticast mode [ 71.795613][ T5623] bridge_slave_0: entered promiscuous mode [ 71.805217][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.838788][ T5625] team0: Port device team_slave_1 added [ 71.844997][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.853799][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.861259][ T5623] bridge_slave_1: entered allmulticast mode [ 71.868640][ T5623] bridge_slave_1: entered promiscuous mode [ 71.877237][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.896057][ T5622] team0: Port device team_slave_0 added [ 71.904369][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.941118][ T5622] team0: Port device team_slave_1 added [ 71.948596][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.977576][ T5621] team0: Port device team_slave_0 added [ 72.000930][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.008424][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.035377][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.050946][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.061881][ T5621] team0: Port device team_slave_1 added [ 72.097264][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.104602][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.130912][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.143792][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.163940][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.170941][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.196900][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.210152][ T5624] team0: Port device team_slave_0 added [ 72.233425][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.240511][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.266474][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.278606][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.285559][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.312121][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.324967][ T5624] team0: Port device team_slave_1 added [ 72.354053][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.361250][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.387575][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.425212][ T5623] team0: Port device team_slave_0 added [ 72.445477][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.452578][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.478771][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.491512][ T5623] team0: Port device team_slave_1 added [ 72.511543][ T5625] hsr_slave_0: entered promiscuous mode [ 72.518211][ T5625] hsr_slave_1: entered promiscuous mode [ 72.525596][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.532581][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.558561][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.605635][ T5622] hsr_slave_0: entered promiscuous mode [ 72.612080][ T5622] hsr_slave_1: entered promiscuous mode [ 72.618462][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 72.624272][ T5622] Cannot create hsr debugfs directory [ 72.645211][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.652316][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.678553][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.702778][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.709864][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.735864][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.786120][ T5621] hsr_slave_0: entered promiscuous mode [ 72.792410][ T5621] hsr_slave_1: entered promiscuous mode [ 72.798710][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 72.804437][ T5621] Cannot create hsr debugfs directory [ 72.911328][ T5624] hsr_slave_0: entered promiscuous mode [ 72.917912][ T5624] hsr_slave_1: entered promiscuous mode [ 72.923959][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 72.929779][ T5624] Cannot create hsr debugfs directory [ 72.983778][ T5623] hsr_slave_0: entered promiscuous mode [ 72.990220][ T5623] hsr_slave_1: entered promiscuous mode [ 72.996216][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 73.002071][ T5623] Cannot create hsr debugfs directory [ 73.405590][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.423294][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.431273][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.441033][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.449648][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.459814][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.468820][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.479765][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.548885][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.560263][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.568918][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.578710][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.587188][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.597362][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.611469][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.620320][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.688584][ T5637] Bluetooth: hci0: command tx timeout [ 73.694253][ T5635] Bluetooth: hci3: command tx timeout [ 73.694277][ T4942] Bluetooth: hci1: command tx timeout [ 73.699755][ T5635] Bluetooth: hci2: command tx timeout [ 73.711412][ T5632] Bluetooth: hci4: command tx timeout [ 73.719876][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.731415][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.739276][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.749694][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.757457][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.767011][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.778275][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.788029][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.884510][ T5624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.895045][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.903310][ T5624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.915197][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.923646][ T5624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.934442][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.953428][ T5624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.962581][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.986099][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.061741][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.096846][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.107014][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.116022][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.125855][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.134628][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.143833][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.155837][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.163509][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.178365][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.188383][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.214155][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.221424][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.277856][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.350357][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.380862][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.395227][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.402371][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.426219][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.433373][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.458604][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.507032][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.535650][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.563029][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.570188][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.593359][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.600582][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.613362][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.620573][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.654897][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.662131][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.695046][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.780788][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.836586][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.843791][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.891378][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.898586][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.359281][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.570455][ T5625] veth0_vlan: entered promiscuous mode [ 75.618083][ T5625] veth1_vlan: entered promiscuous mode [ 75.749274][ T5625] veth0_macvtap: entered promiscuous mode [ 75.778668][ T5635] Bluetooth: hci2: command tx timeout [ 75.778706][ T5637] Bluetooth: hci0: command tx timeout [ 75.784779][ T5635] Bluetooth: hci1: command tx timeout [ 75.790187][ T4942] Bluetooth: hci3: command tx timeout [ 75.801217][ T5632] Bluetooth: hci4: command tx timeout [ 75.819750][ T5625] veth1_macvtap: entered promiscuous mode [ 75.879056][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.902061][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.958109][ T3344] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.988398][ T3344] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.060445][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.073035][ T3344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.121567][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.131617][ T3344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.171858][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.211634][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.306066][ T3344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.328694][ T3344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.374136][ T5622] veth0_vlan: entered promiscuous mode [ 76.433939][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.442588][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.469199][ T5622] veth1_vlan: entered promiscuous mode [ 76.490999][ T5624] veth0_vlan: entered promiscuous mode [ 76.522197][ T5623] veth0_vlan: entered promiscuous mode [ 76.542284][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.545459][ T5624] veth1_vlan: entered promiscuous mode [ 76.593900][ T5623] veth1_vlan: entered promiscuous mode [ 76.672644][ T5622] veth0_macvtap: entered promiscuous mode [ 76.706160][ T5621] veth0_vlan: entered promiscuous mode [ 76.715991][ T5622] veth1_macvtap: entered promiscuous mode [ 76.739929][ T5624] veth0_macvtap: entered promiscuous mode [ 76.765659][ T5621] veth1_vlan: entered promiscuous mode [ 76.780224][ T5624] veth1_macvtap: entered promiscuous mode [ 76.799182][ T5623] veth0_macvtap: entered promiscuous mode [ 76.812695][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.825889][ T5623] veth1_macvtap: entered promiscuous mode [ 76.840468][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.864165][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.873696][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.889523][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.903614][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.911796][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.921497][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.956283][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.976849][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.986053][ T3281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.996360][ T3281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.019803][ T5621] veth0_macvtap: entered promiscuous mode [ 77.039612][ T3281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.064128][ T3281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.081733][ T5621] veth1_macvtap: entered promiscuous mode [ 77.099311][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.109596][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.137274][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.146154][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.183910][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.195480][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.226835][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.271621][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.283825][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.295415][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.345058][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.357968][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.360190][ T3344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.375505][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.410743][ T3344] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.419749][ T3344] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.461969][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.483935][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.549356][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.572043][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.603972][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.619539][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.717004][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.726356][ T5829] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 77.742910][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.776977][ T5831] lo: entered promiscuous mode [ 77.809224][ T5831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.853248][ T5637] Bluetooth: hci0: command tx timeout [ 77.862033][ T4942] Bluetooth: hci1: command tx timeout [ 77.867625][ T5635] Bluetooth: hci2: command tx timeout [ 77.867656][ T5635] Bluetooth: hci4: command tx timeout [ 77.867698][ T5632] Bluetooth: hci3: command tx timeout [ 77.915441][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.925232][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.369046][ T5849] Zero length message leads to an empty skb [ 78.384722][ T5852] netlink: 'syz.2.11': attribute type 12 has an invalid length. [ 78.533145][ T5856] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET) [ 78.610118][ T5856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 78.685725][ T5864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 78.715553][ T5864] openvswitch: netlink: Flow actions attr not present in new flow. [ 79.001066][ T5874] netlink: 'syz.3.18': attribute type 5 has an invalid length. [ 79.052750][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 79.053754][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 79.249509][ T5886] syzkaller1: entered allmulticast mode [ 79.387184][ T5889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22'. [ 79.492478][ T5907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25'. [ 79.672169][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 79.738009][ T5918] veth: renamed from veth0_vlan (while UP) [ 79.997344][ T5929] blkio.reset_stats is deprecated [ 80.010166][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 80.055879][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 80.058911][ T5938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.34'. [ 80.116273][ T5938] warning: `syz.1.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.162979][ T5938] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 80.185889][ T5938] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 80.370681][ T5951] syzkaller1: entered promiscuous mode [ 80.386944][ T5951] syzkaller1: entered allmulticast mode [ 80.537189][ T5956] tc action pedit offset must be on 32 bit boundaries [ 80.837763][ T5978] netlink: 'syz.2.46': attribute type 1 has an invalid length. [ 80.882100][ T5983] netlink: 'syz.2.46': attribute type 1 has an invalid length. [ 84.096352][ T6007] netem: change failed [ 84.363293][ T6021] tc action pedit offset must be on 32 bit boundaries [ 84.516585][ T6044] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 84.532115][ T6044] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 84.591483][ T6042] gretap1: entered promiscuous mode [ 84.613394][ T6042] batman_adv: batadv0: Adding interface: gretap1 [ 84.648501][ T6042] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 84.677020][ T6042] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 84.691672][ T6033] __nla_validate_parse: 1 callbacks suppressed [ 84.691693][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 84.792353][ T6057] x_tables: duplicate underflow at hook 3 [ 84.821095][ T6059] x_tables: duplicate underflow at hook 3 [ 84.905099][ T6063] vcan0: entered allmulticast mode [ 84.999783][ T6066] bond1: entered promiscuous mode [ 85.021931][ T6075] netlink: 'syz.3.70': attribute type 4 has an invalid length. [ 85.070668][ T6075] netlink: 17 bytes leftover after parsing attributes in process `syz.3.70'. [ 85.125697][ T6082] netlink: 'syz.2.72': attribute type 1 has an invalid length. [ 85.135608][ T6082] netlink: 'syz.2.72': attribute type 2 has an invalid length. [ 85.320345][ T6090] sctp: [Deprecated]: syz.1.75 (pid 6090) Use of int in max_burst socket option deprecated. [ 85.320345][ T6090] Use struct sctp_assoc_value instead [ 85.377940][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.407199][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.414457][ T6088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.664826][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.81'. [ 85.679709][ T6109] netlink: 'syz.2.81': attribute type 1 has an invalid length. [ 85.714608][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 85.723795][ T6109] netem: invalid attributes len -5 [ 85.730103][ T6109] netem: change failed [ 85.743247][ T6109] netlink: 'syz.2.81': attribute type 1 has an invalid length. [ 85.946163][ T6117] netlink: 'syz.0.84': attribute type 3 has an invalid length. [ 85.978443][ T6117] netlink: 'syz.0.84': attribute type 1 has an invalid length. [ 86.023016][ T6117] netlink: 204 bytes leftover after parsing attributes in process `syz.0.84'. [ 86.317771][ T6137] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 86.370940][ T6134] netlink: 216 bytes leftover after parsing attributes in process `syz.0.87'. [ 86.628603][ T6153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.740092][ T24] cfg80211: failed to load regulatory.db [ 86.930906][ T6153] ip6gre1: entered allmulticast mode [ 87.045444][ T6161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.92'. [ 87.240700][ T6165] nftables ruleset with unbound set [ 87.323572][ T6168] syzkaller0: entered promiscuous mode [ 87.349591][ T6168] syzkaller0: entered allmulticast mode [ 87.414628][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 87.467225][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 87.485676][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 87.623118][ T6183] x_tables: duplicate underflow at hook 1 [ 87.862726][ T6197] team0: Device gtp0 is of different type [ 88.243740][ T6207] syzkaller0: entered promiscuous mode [ 88.251210][ T6207] syzkaller0: entered allmulticast mode [ 88.368216][ T6213] ipvlan2: entered allmulticast mode [ 88.383871][ T6213] geneve0: entered allmulticast mode [ 88.773375][ T6240] netlink: 'syz.0.118': attribute type 1 has an invalid length. [ 88.964528][ T6240] bond1: entered promiscuous mode [ 88.973232][ T6240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.027724][ T6260] netlink: 'syz.4.123': attribute type 9 has an invalid length. [ 89.082729][ T6240] bond1: (slave bridge1): making interface the new active one [ 89.145555][ T6240] bridge1: entered promiscuous mode [ 89.167725][ T6240] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 89.211938][ T6267] netlink: 'syz.1.125': attribute type 62 has an invalid length. [ 89.516706][ T6279] tc action pedit offset must be on 32 bit boundaries [ 89.527721][ T5637] Bluetooth: hci4: command 0x0405 tx timeout [ 89.802430][ T6298] __nla_validate_parse: 5 callbacks suppressed [ 89.802447][ T6298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.135'. [ 89.872236][ T6302] netlink: 36 bytes leftover after parsing attributes in process `syz.2.135'. [ 89.897345][ T6299] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 89.899982][ T6298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.135'. [ 89.935660][ T6299] netlink: 48 bytes leftover after parsing attributes in process `syz.1.136'. [ 89.967014][ T6302] netlink: 40 bytes leftover after parsing attributes in process `syz.2.135'. [ 90.044216][ T6307] syzkaller1: entered promiscuous mode [ 90.050421][ T6307] syzkaller1: entered allmulticast mode [ 90.190051][ T6314] veth0: entered promiscuous mode [ 90.212347][ T6313] veth0: left promiscuous mode [ 90.301613][ T6316] tipc: Started in network mode [ 90.321948][ T6316] tipc: Node identity be1715a03829, cluster identity 4711 [ 90.358929][ T6316] tipc: Enabled bearer , priority 0 [ 90.397972][ T6321] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.145'. [ 90.554554][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 90.651984][ T6325] syzkaller0: entered promiscuous mode [ 90.679076][ T6325] syzkaller0: entered allmulticast mode [ 90.696172][ T6322] can: request_module (can-proto-3) failed. [ 90.706675][ T6325] tipc: Resetting bearer [ 90.861904][ T142] tipc: Resetting bearer [ 90.881310][ T6315] tipc: Resetting bearer [ 91.651242][ T6377] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 92.417985][ T6315] tipc: Disabling bearer [ 92.582085][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.157'. [ 92.636961][ T6384] netlink: 'syz.1.157': attribute type 2 has an invalid length. [ 92.790826][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 92.805257][ T6388] sctp: [Deprecated]: syz.1.157 (pid 6388) Use of int in max_burst socket option deprecated. [ 92.805257][ T6388] Use struct sctp_assoc_value instead [ 93.771418][ T6366] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 93.781290][ T5760] tipc: Node number set to 2252215712 [ 93.911864][ T6389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.992729][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 94.784846][ T6437] tc action pedit offset must be on 32 bit boundaries [ 94.956633][ T6452] block nbd1: not configured, cannot reconfigure [ 95.052274][ T6454] sit1: entered promiscuous mode [ 95.052943][ T6458] netlink: 'syz.4.181': attribute type 1 has an invalid length. [ 95.065821][ T6454] sit1: entered allmulticast mode [ 95.081531][ T6459] nbd: must specify a size in bytes for the device [ 95.172079][ T6464] __nla_validate_parse: 5 callbacks suppressed [ 95.172097][ T6464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.181'. [ 95.259510][ T6464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.181'. [ 95.306267][ T6470] block nbd0: NBD_DISCONNECT [ 95.338064][ T6470] netlink: 216 bytes leftover after parsing attributes in process `syz.0.184'. [ 95.347676][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 95.364736][ T6461] bond1: (slave ip6gretap1): making interface the new active one [ 95.384516][ T6461] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 95.394771][ T6461] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 95.409780][ T6461] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 95.446193][ T6465] sit1: entered promiscuous mode [ 95.451973][ T6465] sit1: entered allmulticast mode [ 95.479254][ T6464] syz_tun: entered promiscuous mode [ 95.489692][ T6464] syz_tun: left promiscuous mode [ 95.518532][ T6479] openvswitch: netlink: Missing key (keys=40, expected=100) [ 95.766288][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'. [ 95.804740][ T6490] netlink: 60 bytes leftover after parsing attributes in process `syz.2.186'. [ 95.838915][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'. [ 95.860203][ T6490] netlink: 60 bytes leftover after parsing attributes in process `syz.2.186'. [ 95.870582][ T6490] netlink: 104 bytes leftover after parsing attributes in process `syz.2.186'. [ 96.307176][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 96.415643][ T6529] IPVS: set_ctl: invalid protocol: 43 172.30.0.3:20001 [ 96.505923][ T6536] netlink: 'syz.0.200': attribute type 6 has an invalid length. [ 96.510515][ T6535] syzkaller0: entered promiscuous mode [ 96.533645][ T6535] syzkaller0: entered allmulticast mode [ 96.665774][ T6544] netlink: 'syz.4.203': attribute type 49 has an invalid length. [ 96.850261][ T6544] ip6gretap0: entered promiscuous mode [ 96.868873][ T6544] ip6gretap0: entered allmulticast mode [ 96.894148][ T6540] syzkaller0: entered promiscuous mode [ 96.902991][ T6540] syzkaller0: entered allmulticast mode [ 97.612351][ T6583] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 98.844230][ T6655] bridge0: port 1(bridge_slave_0) entered listening state [ 99.563311][ T6691] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.678409][ T6695] netlink: 'syz.0.242': attribute type 2 has an invalid length. [ 99.782272][ T6699] tipc: New replicast peer: 172.20.20.187 [ 99.803852][ T6699] tipc: Enabled bearer , priority 10 [ 99.833614][ T6697] Bluetooth: MGMT ver 1.23 [ 99.875206][ T6707] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 99.895802][ T6699] bond0: entered promiscuous mode [ 99.903262][ T6699] bond_slave_0: entered promiscuous mode [ 99.915468][ T6699] bond_slave_1: entered promiscuous mode [ 99.944736][ T6699] batadv0: entered promiscuous mode [ 99.955375][ T6699] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 99.966337][ T6699] bond0: left promiscuous mode [ 99.971259][ T6699] bond_slave_0: left promiscuous mode [ 99.976981][ T6699] bond_slave_1: left promiscuous mode [ 99.983507][ T6699] batadv0: left promiscuous mode [ 100.256216][ T6729] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 100.809100][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 100.825899][ T6752] __nla_validate_parse: 9 callbacks suppressed [ 100.825916][ T6752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.256'. [ 100.903368][ T6753] vlan2: entered promiscuous mode [ 100.915163][ T6753] geneve1: entered promiscuous mode [ 100.922906][ T6753] vlan2: entered allmulticast mode [ 100.934960][ T6753] geneve1: entered allmulticast mode [ 100.941823][ T6764] netlink: 'syz.4.258': attribute type 2 has an invalid length. [ 100.981967][ T6764] netlink: 'syz.4.258': attribute type 2 has an invalid length. [ 100.983157][ T6721] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.009253][ T6765] netlink: 'syz.4.258': attribute type 2 has an invalid length. [ 101.021833][ T6721] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 101.044078][ T6765] netlink: 'syz.4.258': attribute type 2 has an invalid length. [ 101.094003][ T6721] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.114565][ T6721] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 101.186720][ T6721] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.221379][ T6721] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 101.271926][ T6721] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 101.299533][ T6721] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 101.380799][ T6721] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.422910][ T6721] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 101.797896][ T6786] netlink: 'syz.0.263': attribute type 1 has an invalid length. [ 102.196083][ T6794] syzkaller1: entered promiscuous mode [ 102.211279][ T6813] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 102.226750][ T6794] syzkaller1: entered allmulticast mode [ 102.418425][ T6826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.267'. [ 102.538725][ T6815] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.549026][ T6815] bond1: (slave bond2): making interface the new active one [ 102.557176][ T6815] bond1: (slave bond2): Enslaving as an active interface with an up link [ 102.604923][ T6820] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 102.671984][ T6826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.987132][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 103.196625][ T6863] netlink: 'syz.1.277': attribute type 1 has an invalid length. [ 103.400311][ T6863] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.532603][ T6882] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 103.543923][ T6866] bond3: (slave geneve2): making interface the new active one [ 103.607188][ T6866] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 103.951405][ T6911] netlink: 108 bytes leftover after parsing attributes in process `syz.4.285'. [ 103.965302][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'. [ 104.610467][ T6948] netlink: 64 bytes leftover after parsing attributes in process `syz.2.297'. [ 104.611361][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 104.826621][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 105.170813][ T6976] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 105.303187][ T6992] ieee802154 phy1 wpan1: encryption failed: -22 [ 105.411252][ T24] IPVS: starting estimator thread 0... [ 105.421448][ T6992] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20000 [ 105.547713][ T7002] IPVS: using max 31 ests per chain, 74400 per kthread [ 105.713761][ T7009] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 105.854797][ T7011] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 105.942354][ T7013] netlink: 60 bytes leftover after parsing attributes in process `syz.1.313'. [ 106.374346][ T7054] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.320'. [ 106.425589][ T7057] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.320'. [ 106.470374][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.320'. [ 106.503216][ T7054] bond0: ARP target 8.4.0.0 is already present [ 106.525129][ T7054] bond0: option arp_ip_target: invalid value (1032) [ 106.532952][ T7058] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 106.583335][ T7058] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 106.679353][ T7069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.324'. [ 107.225489][ T7095] netlink: 144 bytes leftover after parsing attributes in process `syz.2.331'. [ 107.249251][ T7100] netlink: 224 bytes leftover after parsing attributes in process `syz.0.333'. [ 107.333406][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 107.738217][ T7129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.772803][ T7130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.802289][ T7132] veth0: entered promiscuous mode [ 107.829004][ T7127] veth0: left promiscuous mode [ 107.965566][ T7137] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 108.001874][ T7135] syzkaller0: entered promiscuous mode [ 108.011010][ T7136] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 108.020803][ T7135] syzkaller0: entered allmulticast mode [ 108.041475][ T7135] netlink: 104 bytes leftover after parsing attributes in process `syz.2.341'. [ 108.069442][ T7142] syzkaller1: entered promiscuous mode [ 108.078606][ T7142] syzkaller1: entered allmulticast mode [ 108.446824][ T7155] netlink: 'syz.2.346': attribute type 1 has an invalid length. [ 108.465441][ T7155] netlink: 'syz.2.346': attribute type 2 has an invalid length. [ 108.756866][ T7164] netlink: 84 bytes leftover after parsing attributes in process `syz.3.350'. [ 108.790415][ T7166] netlink: 'syz.0.351': attribute type 2 has an invalid length. [ 108.825125][ T7168] xt_socket: unknown flags 0xe4 [ 108.838598][ T7166] netlink: 'syz.0.351': attribute type 2 has an invalid length. [ 109.076044][ T7175] syzkaller0: entered promiscuous mode [ 109.088362][ T7175] syzkaller0: entered allmulticast mode [ 109.235357][ T7180] netlink: 'syz.2.356': attribute type 12 has an invalid length. [ 109.254270][ T7180] netlink: 'syz.2.356': attribute type 29 has an invalid length. [ 109.277656][ T7180] netlink: 'syz.2.356': attribute type 2 has an invalid length. [ 109.315474][ T7185] netlink: 'syz.0.358': attribute type 1 has an invalid length. [ 109.669840][ T7203] netlink: 'syz.2.364': attribute type 1 has an invalid length. [ 109.734733][ T7203] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 110.189183][ T7220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.387194][ T7220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.597034][ T7290] __nla_validate_parse: 10 callbacks suppressed [ 111.597052][ T7290] netlink: 44 bytes leftover after parsing attributes in process `syz.1.384'. [ 112.103067][ T7313] openvswitch: netlink: IPv6 tunnel dst address is zero [ 112.159284][ T7314] openvswitch: netlink: IP tunnel dst address not specified [ 112.212214][ T7321] netlink: 'syz.1.393': attribute type 39 has an invalid length. [ 112.372072][ T7335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.396'. [ 112.389870][ T7336] netlink: 60 bytes leftover after parsing attributes in process `syz.3.395'. [ 112.546680][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 112.609549][ T7349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.619299][ T7351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.734572][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.401'. [ 112.764685][ T7344] lo: entered allmulticast mode [ 112.800894][ T7344] tunl0: entered allmulticast mode [ 112.832422][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 112.834691][ T7344] gre0: entered allmulticast mode [ 112.842073][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 112.873247][ T7344] gretap0: entered allmulticast mode [ 112.900554][ T7344] erspan0: entered allmulticast mode [ 112.914250][ T7344] ip_vti0: entered allmulticast mode [ 112.925326][ T7344] ip6_vti0: entered allmulticast mode [ 112.951738][ T7344] sit0: entered allmulticast mode [ 112.966403][ T7344] ip6tnl0: entered allmulticast mode [ 112.979468][ T7344] ip6gre0: entered allmulticast mode [ 112.994680][ T7344] syz_tun: entered allmulticast mode [ 113.010726][ T7344] ip6gretap0: entered allmulticast mode [ 113.024086][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.032707][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.046212][ T7344] bridge0: entered allmulticast mode [ 113.057134][ T7344] vcan0: entered allmulticast mode [ 113.064362][ T7344] bond0: entered allmulticast mode [ 113.072733][ T7344] bond_slave_0: entered allmulticast mode [ 113.078853][ T7344] bond_slave_1: entered allmulticast mode [ 113.091570][ T7344] team0: entered allmulticast mode [ 113.096941][ T7344] team_slave_0: entered allmulticast mode [ 113.109003][ T7344] team_slave_1: entered allmulticast mode [ 113.132243][ T7344] dummy0: entered allmulticast mode [ 113.162878][ T7344] nlmon0: entered allmulticast mode [ 113.185730][ T7344] batadv0: entered allmulticast mode [ 113.206826][ T7344] vxcan0: entered allmulticast mode [ 113.221011][ T7344] vxcan1: entered allmulticast mode [ 113.233163][ T7344] veth0: entered allmulticast mode [ 113.255495][ T7344] veth1: entered allmulticast mode [ 113.294764][ T7344] wg0: entered allmulticast mode [ 113.315822][ T7344] wg1: entered allmulticast mode [ 113.345205][ T7344] wg2: entered allmulticast mode [ 113.371395][ T7344] veth0_to_bridge: entered allmulticast mode [ 113.405292][ T7344] veth1_to_bridge: entered allmulticast mode [ 113.426255][ T7344] veth0_to_bond: entered allmulticast mode [ 113.451798][ T7344] veth1_to_bond: entered allmulticast mode [ 113.472822][ T7344] veth0_to_team: entered allmulticast mode [ 113.493095][ T7344] veth1_to_team: entered allmulticast mode [ 113.529087][ T7344] veth0_to_batadv: entered allmulticast mode [ 113.542351][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.561939][ T7344] batadv_slave_0: entered allmulticast mode [ 113.582680][ T7344] veth1_to_batadv: entered allmulticast mode [ 113.600037][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.620736][ T7344] batadv_slave_1: entered allmulticast mode [ 113.641579][ T7344] xfrm0: entered allmulticast mode [ 113.656655][ T7344] veth0_to_hsr: entered allmulticast mode [ 113.673689][ T7344] hsr_slave_0: entered allmulticast mode [ 113.691401][ T7344] veth1_to_hsr: entered allmulticast mode [ 113.710497][ T7344] hsr_slave_1: entered allmulticast mode [ 113.728796][ T7344] hsr0: entered allmulticast mode [ 113.743919][ T7344] veth1_virt_wifi: entered allmulticast mode [ 113.766854][ T7344] veth0_virt_wifi: entered allmulticast mode [ 113.786809][ T7344] virt_wifi0: entered allmulticast mode [ 113.795265][ T7344] veth1_vlan: entered allmulticast mode [ 113.811285][ T7344] veth0_vlan: entered allmulticast mode [ 113.831314][ T7344] vlan0: entered allmulticast mode [ 113.836839][ T7344] vlan1: entered allmulticast mode [ 113.844850][ T7344] macvlan0: entered allmulticast mode [ 113.863528][ T7344] macvlan1: entered allmulticast mode [ 113.884600][ T7344] ipvlan0: entered allmulticast mode [ 113.898008][ T7344] ipvlan1: entered allmulticast mode [ 113.903790][ T7344] veth1_macvtap: entered allmulticast mode [ 113.914263][ T7344] veth0_macvtap: entered allmulticast mode [ 113.927155][ T7344] macvtap0: entered allmulticast mode [ 113.939010][ T7344] macsec0: entered allmulticast mode [ 113.969571][ T7344] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 113.983822][ T7344] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 113.999457][ T7344] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 114.015298][ T7344] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 114.046672][ T7344] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 114.061782][ T7344] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 114.071075][ T7344] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 114.078737][ T7344] ip6tnl1: entered allmulticast mode [ 114.084458][ T7344] bond1: left promiscuous mode [ 114.091047][ T7344] bond1: entered allmulticast mode [ 114.103421][ T7344] ipip0: entered allmulticast mode [ 114.114964][ T7344] bond2: entered allmulticast mode [ 114.126712][ T7344] sit1: left promiscuous mode [ 114.137217][ T7344] vlan2: left promiscuous mode [ 114.145630][ T7344] geneve1: left promiscuous mode [ 114.151444][ T7344] ip6gre1: entered allmulticast mode [ 114.156963][ T7344] ieee802154 phy0 wpan0: entered allmulticast mode [ 114.165486][ T7344] bridge1: entered allmulticast mode [ 114.171569][ T7344] bond3: entered allmulticast mode [ 114.217819][ T142] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.238558][ T142] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.257367][ T142] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.267579][ T142] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.438263][ T7402] validate_nla: 1 callbacks suppressed [ 114.438282][ T7402] netlink: 'syz.3.410': attribute type 1 has an invalid length. [ 114.475154][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 114.698415][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 114.796881][ T7432] netlink: 'syz.0.417': attribute type 1 has an invalid length. [ 114.954198][ T7438] gre1: entered promiscuous mode [ 115.042692][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 115.189964][ T7441] bond0: entered promiscuous mode [ 115.206294][ T7441] bond_slave_0: entered promiscuous mode [ 115.223553][ T7441] bond_slave_1: entered promiscuous mode [ 115.384844][ T7451] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 115.431297][ T7451] bond1 (unregistering): Released all slaves [ 115.523922][ T7444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.812914][ T7475] syzkaller0: entered promiscuous mode [ 115.832663][ T7475] syzkaller0: entered allmulticast mode [ 115.861791][ T7487] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 116.206640][ T7502] tipc: Enabling of bearer rejected, failed to enable media [ 116.586874][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.594659][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.635284][ T7507] bond0: left promiscuous mode [ 116.653956][ T7507] bond_slave_0: left promiscuous mode [ 116.675756][ T7507] bond_slave_1: left promiscuous mode [ 116.809296][ T7507] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 117.112857][ T7544] __nla_validate_parse: 5 callbacks suppressed [ 117.112875][ T7544] netlink: 1 bytes leftover after parsing attributes in process `syz.4.442'. [ 117.146542][ T7546] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 117.154798][ T7546] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 117.210488][ T7549] syzkaller0: entered promiscuous mode [ 117.222430][ T7549] syzkaller0: entered allmulticast mode [ 117.252816][ T7543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.441'. [ 117.267827][ T7543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.441'. [ 117.317187][ T7543] 0: reclassify loop, rule prio 0, protocol 800 [ 117.504882][ T7556] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 117.633227][ T7556] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 117.906929][ T7572] netlink: 'syz.3.450': attribute type 7 has an invalid length. [ 118.005075][ T7366] IPVS: starting estimator thread 0... [ 118.094982][ T7584] team0: Device gtp0 is of different type [ 118.097720][ T7577] IPVS: using max 29 ests per chain, 69600 per kthread [ 118.286168][ T7593] trusted_key: syz.3.456 sent an empty control message without MSG_MORE. [ 118.537204][ T7614] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 118.808302][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.465'. [ 118.834770][ T7622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.892227][ T7622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.908500][ T7627] netlink: 124 bytes leftover after parsing attributes in process `syz.2.467'. [ 118.966178][ T7625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.001210][ T7625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.029391][ T7625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.041615][ T7625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.121185][ T7634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.308901][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 119.433338][ T7647] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.463487][ T7647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.472069][ T7647] IPv6: NLM_F_CREATE should be set when creating new route [ 119.794221][ T7670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.479'. [ 119.805451][ T7665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.477'. [ 120.164830][ T7687] bridge_slave_0: left promiscuous mode [ 120.193204][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.238856][ T7687] bridge_slave_1: left promiscuous mode [ 120.249147][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.273387][ T7687] bond0: (slave bond_slave_0): Releasing backup interface [ 120.334757][ T7687] bond0: (slave bond_slave_1): Releasing backup interface [ 120.361586][ T7687] team0: Port device team_slave_0 removed [ 120.389659][ T7687] team0: Port device team_slave_1 removed [ 120.401588][ T7687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.422476][ T7687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.444314][ T7687] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.460752][ T7689] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 120.518981][ T7705] netlink: 'syz.1.489': attribute type 21 has an invalid length. [ 120.527110][ T7705] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.643390][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 120.655727][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 120.698963][ T7709] netlink: 'syz.0.490': attribute type 12 has an invalid length. [ 120.743123][ T7709] netlink: 'syz.0.490': attribute type 11 has an invalid length. [ 121.161460][ T7742] netlink: 'syz.2.502': attribute type 1 has an invalid length. [ 121.221305][ T7742] netlink: 'syz.2.502': attribute type 9 has an invalid length. [ 121.410097][ T7759] macvlan0: left allmulticast mode [ 121.417775][ T7759] netlink: 'syz.2.509': attribute type 2 has an invalid length. [ 122.185808][ T7805] __nla_validate_parse: 7 callbacks suppressed [ 122.185826][ T7805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.522'. [ 122.410829][ T7817] netlink: 'syz.2.526': attribute type 10 has an invalid length. [ 122.453344][ T7820] Cannot find set identified by id 0 to match [ 122.558441][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'. [ 122.726386][ T7842] openvswitch: netlink: IPv4 tunnel dst address is zero [ 122.839834][ T7833] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.895118][ T7833] bond4 (unregistering): Released all slaves [ 122.944376][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'. [ 122.979715][ T7860] netlink: 'syz.1.538': attribute type 11 has an invalid length. [ 122.988408][ T7860] netlink: 'syz.1.538': attribute type 11 has an invalid length. [ 122.996329][ T7860] netlink: 224 bytes leftover after parsing attributes in process `syz.1.538'. [ 123.201498][ T7874] netlink: 44 bytes leftover after parsing attributes in process `syz.0.540'. [ 123.228420][ T7874] netlink: 43 bytes leftover after parsing attributes in process `syz.0.540'. [ 123.264172][ T7874] netlink: 'syz.0.540': attribute type 6 has an invalid length. [ 123.309983][ T7874] netlink: 'syz.0.540': attribute type 5 has an invalid length. [ 123.337720][ T7874] netlink: 43 bytes leftover after parsing attributes in process `syz.0.540'. [ 123.541237][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 123.554786][ T7884] syzkaller0: entered promiscuous mode [ 123.581174][ T7884] syzkaller0: entered allmulticast mode [ 123.625897][ T7884] netlink: 96 bytes leftover after parsing attributes in process `syz.3.543'. [ 123.747045][ T7884] vlan2: entered allmulticast mode [ 123.772384][ T7884] ip6gretap0: entered allmulticast mode [ 123.806147][ T7894] syzkaller1: entered promiscuous mode [ 123.829494][ T7894] syzkaller1: entered allmulticast mode [ 123.899566][ T7903] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 124.233702][ T7925] netlink: 108 bytes leftover after parsing attributes in process `syz.0.553'. [ 124.693464][ T7947] netlink: 'syz.1.556': attribute type 1 has an invalid length. [ 124.818927][ T7949] h: entered promiscuous mode [ 125.161943][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.182230][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.205316][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.235337][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.490188][ T7976] tipc: Enabled bearer , priority 0 [ 125.521505][ T7976] syzkaller0: entered promiscuous mode [ 125.559943][ T7976] syzkaller0: entered allmulticast mode [ 125.637868][ T7974] tipc: Resetting bearer [ 125.763225][ T7974] tipc: Disabling bearer [ 126.841083][ T8056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.848380][ T8056] IPv6: NLM_F_CREATE should be set when creating new route [ 126.855685][ T8056] IPv6: NLM_F_CREATE should be set when creating new route [ 126.862973][ T8056] IPv6: NLM_F_CREATE should be set when creating new route [ 126.902728][ T8056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.930842][ T8058] validate_nla: 1 callbacks suppressed [ 126.930861][ T8058] netlink: 'syz.0.592': attribute type 1 has an invalid length. [ 127.238109][ T8070] __nla_validate_parse: 15 callbacks suppressed [ 127.238126][ T8070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.597'. [ 127.296845][ T8076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.599'. [ 127.334459][ T8077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.599'. [ 127.398929][ T8081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.406924][ T8081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.426829][ T8081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.451057][ T8081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.473469][ T8081] batman_adv: batadv0: Removing interface: gretap1 [ 127.684954][ T8097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.605'. [ 128.388720][ T30] audit: type=1804 audit(1778069632.203:2): pid=8133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.617" name="/newroot/124/cgroup.controllers" dev="tmpfs" ino=649 res=1 errno=0 [ 128.410342][ T8135] netlink: 'syz.4.618': attribute type 8 has an invalid length. [ 128.480803][ T30] audit: type=1800 audit(1778069632.233:3): pid=8133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.617" name="cgroup.controllers" dev="tmpfs" ino=649 res=0 errno=0 [ 128.528556][ T8138] netlink: 'syz.3.619': attribute type 1 has an invalid length. [ 128.690145][ T8149] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.622'. [ 128.714133][ T8138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.212486][ T8181] syzkaller0: entered promiscuous mode [ 129.224616][ T8181] syzkaller0: entered allmulticast mode [ 129.690450][ T8193] x_tables: duplicate underflow at hook 3 [ 129.990482][ T8205] syzkaller1: entered promiscuous mode [ 130.003622][ T8205] syzkaller1: entered allmulticast mode [ 130.011607][ T8205] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 130.021533][ T8205] netlink: 'syz.3.641': attribute type 1 has an invalid length. [ 130.152768][ T8214] netlink: 'syz.0.644': attribute type 1 has an invalid length. [ 130.181949][ T8214] netlink: 'syz.0.644': attribute type 7 has an invalid length. [ 130.193274][ T8214] netlink: 'syz.0.644': attribute type 8 has an invalid length. [ 130.201278][ T8214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.644'. [ 130.354545][ T8225] netlink: 'syz.3.646': attribute type 16 has an invalid length. [ 130.365876][ T8225] netlink: 'syz.3.646': attribute type 3 has an invalid length. [ 130.374654][ T8225] netlink: 132 bytes leftover after parsing attributes in process `syz.3.646'. [ 130.397399][ T8226] syzkaller0: entered promiscuous mode [ 130.405152][ T8226] syzkaller0: entered allmulticast mode [ 130.559142][ T8237] netlink: 388 bytes leftover after parsing attributes in process `syz.3.650'. [ 130.569043][ T8234] bond2: Unable to set up delay as MII monitoring is disabled [ 130.597115][ T8234] bond2 (unregistering): Released all slaves [ 130.872955][ T8251] netlink: 512 bytes leftover after parsing attributes in process `syz.0.653'. [ 130.911368][ T8254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.655'. [ 130.956997][ T8248] bond3: option fail_over_mac: invalid value (16) [ 130.964972][ T8248] bond3 (unregistering): Released all slaves [ 131.017330][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 131.038564][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 131.048238][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 131.337759][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 132.009295][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 132.235946][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.320447][ T8334] netlink: 'syz.0.681': attribute type 2 has an invalid length. [ 132.503591][ T8348] __nla_validate_parse: 7 callbacks suppressed [ 132.503608][ T8348] netlink: 36 bytes leftover after parsing attributes in process `syz.1.685'. [ 132.581164][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 132.603620][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.685'. [ 132.740922][ T8358] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 132.752012][ T8358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.812008][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.870844][ T8362] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 132.984266][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.691'. [ 133.099844][ T8371] netlink: 52 bytes leftover after parsing attributes in process `syz.2.694'. [ 133.444230][ T8390] netlink: 'syz.4.699': attribute type 2 has an invalid length. [ 133.545248][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 133.650720][ T8398] team0: Port device team_slave_0 removed [ 133.699045][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.704'. [ 133.891582][ T8412] netlink: 68 bytes leftover after parsing attributes in process `syz.1.707'. [ 133.948644][ T8417] xt_l2tp: missing protocol rule (udp|l2tpip) [ 133.960151][ T8418] xt_l2tp: missing protocol rule (udp|l2tpip) [ 134.025810][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'. [ 134.246755][ T8403] infiniband syz2: set down [ 134.266407][ T8403] infiniband syz2: added bond_slave_1 [ 134.304547][ T8426] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 134.333808][ T8403] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 134.367929][ T8403] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 134.389162][ T8403] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 134.462316][ T8403] RDS/IB: syz2: added [ 134.470610][ T8403] smc: adding ib device syz2 with port count 1 [ 134.492566][ T8403] smc: ib device syz2 port 1 has no pnetid [ 134.559674][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 134.717006][ T8444] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 134.745898][ T8448] vlan2: entered allmulticast mode [ 134.752015][ T8448] gretap0: entered allmulticast mode [ 134.775677][ T8448] netlink: 'syz.0.717': attribute type 11 has an invalid length. [ 134.798070][ T8448] netlink: 'syz.0.717': attribute type 4 has an invalid length. [ 135.069974][ T8464] netlink: 'syz.0.721': attribute type 3 has an invalid length. [ 135.127751][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 135.316026][ T8471] Bluetooth: MGMT ver 1.23 [ 135.347077][ T8471] veth1_macvtap: entered allmulticast mode [ 135.446536][ T8471] veth1_macvtap (unregistering): left allmulticast mode [ 135.878377][ T8495] netlink: Conntrack attr has 4 unknown bytes [ 135.926457][ T8498] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 136.411053][ T8511] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 136.480565][ T8516] netlink: 'syz.1.734': attribute type 13 has an invalid length. [ 137.191088][ T8554] netlink: 'syz.3.746': attribute type 19 has an invalid length. [ 137.526346][ T8568] __nla_validate_parse: 10 callbacks suppressed [ 137.526364][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.750'. [ 138.481917][ T8608] netlink: 'syz.3.755': attribute type 10 has an invalid length. [ 138.492265][ T8541] hsr0 speed is unknown, defaulting to 1000 [ 138.606853][ T8608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.646062][ T8608] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 138.673516][ T8541] hsr0 speed is unknown, defaulting to 1000 [ 138.785810][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.757'. [ 138.828018][ T8541] hsr0 speed is unknown, defaulting to 1000 [ 138.887433][ T8541] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 138.949813][ T8541] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 138.964384][ T8626] netlink: 132 bytes leftover after parsing attributes in process `syz.2.758'. [ 139.027565][ T8541] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 139.054382][ T8630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.758'. [ 139.076470][ T8541] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 139.117394][ T8541] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 139.242874][ T8541] hsr0 speed is unknown, defaulting to 1000 [ 139.272170][ T8541] hsr0 speed is unknown, defaulting to 1000 [ 139.298116][ T8541] hsr0 speed is unknown, defaulting to 1000 [ 139.339361][ T8541] hsr0 speed is unknown, defaulting to 1000 [ 139.417293][ T8541] hsr0 speed is unknown, defaulting to 1000 [ 139.519320][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.760'. [ 139.565563][ T8642] syzkaller1: entered promiscuous mode [ 139.587429][ T8642] syzkaller1: entered allmulticast mode [ 139.666309][ T8642] tipc: Started in network mode [ 139.685097][ T8642] tipc: Node identity 7e7c4b907c81, cluster identity 4711 [ 139.721787][ T8642] tipc: Enabled bearer , priority 0 [ 139.787208][ T8642] tipc: Resetting bearer [ 139.801146][ T8651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.763'. [ 139.853199][ T8640] tipc: Disabling bearer [ 139.965190][ T8664] netlink: 44 bytes leftover after parsing attributes in process `syz.3.766'. [ 140.318414][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.772'. [ 140.339632][ T8679] netlink: 80 bytes leftover after parsing attributes in process `syz.1.772'. [ 140.379800][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.772'. [ 140.480074][ T8689] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 140.541636][ T8689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.634577][ T8687] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 141.133705][ T8731] xt_cgroup: path and classid specified [ 141.163792][ T8726] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.212285][ T8726] bridge_slave_0 (unregistering): left allmulticast mode [ 141.240749][ T8726] bridge_slave_0 (unregistering): left promiscuous mode [ 141.261650][ T8726] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.051692][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 143.430206][ T8755] h: entered promiscuous mode [ 143.435316][ T8760] tipc: Enabled bearer , priority 14 [ 143.554278][ T8763] __nla_validate_parse: 3 callbacks suppressed [ 143.554293][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.790'. [ 143.710596][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 143.749665][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'. [ 143.770774][ T8780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.795'. [ 143.786025][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'. [ 143.814437][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 144.033808][ T8793] netlink: 'syz.3.799': attribute type 2 has an invalid length. [ 144.057396][ T8793] netlink: 'syz.3.799': attribute type 11 has an invalid length. [ 144.097772][ T8793] netlink: 132 bytes leftover after parsing attributes in process `syz.3.799'. [ 144.522041][ T8831] netlink: 'syz.1.806': attribute type 1 has an invalid length. [ 144.554013][ T8834] netlink: 68 bytes leftover after parsing attributes in process `syz.0.807'. [ 144.574676][ T8831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.595763][ T8835] bond4: (slave geneve4): making interface the new active one [ 144.606918][ T8835] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 144.620148][ T3281] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 144.656545][ T3281] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 144.700195][ T3281] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 144.721898][ T8843] IPVS: ip_vs_add_dest(): server weight less than zero [ 144.731108][ T5727] IPVS: starting estimator thread 0... [ 144.753584][ T3281] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 144.785049][ T8841] syzkaller0: entered promiscuous mode [ 144.807007][ T8841] syzkaller0: entered allmulticast mode [ 144.847634][ T8845] IPVS: using max 34 ests per chain, 81600 per kthread [ 144.970022][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.813'. [ 145.147685][ T8872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.301527][ T8875] netlink: 404 bytes leftover after parsing attributes in process `syz.1.820'. [ 145.329750][ T8875] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 145.378077][ T8880] syzkaller0: entered promiscuous mode [ 145.384273][ T8880] syzkaller0: entered allmulticast mode [ 145.469166][ T8884] netlink: 'syz.0.823': attribute type 1 has an invalid length. [ 145.512245][ T8884] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.585269][ T8884] bond4: (slave bridge2): making interface the new active one [ 145.596272][ T8884] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 145.773182][ T8892] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 145.858123][ T8895] x_tables: unsorted entry at hook 3 [ 146.299625][ T8917] netlink: 'syz.2.835': attribute type 1 has an invalid length. [ 146.529624][ T8923] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.275085][ T8957] xt_l2tp: invalid flags combination: 0 [ 147.755669][ T7389] IPVS: starting estimator thread 0... [ 147.836307][ T8985] netlink: 'syz.1.855': attribute type 3 has an invalid length. [ 147.869037][ T8979] IPVS: using max 26 ests per chain, 62400 per kthread [ 147.890073][ T8985] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 147.929911][ T8985] NCSI netlink: No device for ifindex 813332851 [ 147.954799][ T8987] netlink: 'syz.1.855': attribute type 3 has an invalid length. [ 148.002897][ T8987] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 148.042428][ T9] hsr0: entered promiscuous mode [ 148.050811][ T8987] NCSI netlink: No device for ifindex 813332851 [ 148.287339][ T9000] syzkaller1: entered promiscuous mode [ 148.325553][ T9000] syzkaller1: entered allmulticast mode [ 148.629806][ T9022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.648266][ T9022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.069585][ T9039] x_tables: duplicate underflow at hook 3 [ 149.292442][ T9048] netlink: 'syz.3.874': attribute type 11 has an invalid length. [ 149.317592][ T9048] __nla_validate_parse: 22 callbacks suppressed [ 149.317610][ T9048] netlink: 224 bytes leftover after parsing attributes in process `syz.3.874'. [ 149.552861][ T9057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.877'. [ 149.708591][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 149.770830][ T9064] xt_hashlimit: size too large, truncated to 1048576 [ 150.041753][ T9070] xt_cgroup: xt_cgroup: no path or classid specified [ 150.083629][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 150.118318][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.881'. [ 150.821548][ T9106] batadv0: entered allmulticast mode [ 151.062652][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.895'. [ 151.260913][ T9132] syzkaller1: entered allmulticast mode [ 151.523022][ T9166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.906'. [ 151.550307][ T9166] netlink: 48 bytes leftover after parsing attributes in process `syz.2.906'. [ 151.750468][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'. [ 151.825435][ T9187] netlink: 'syz.2.911': attribute type 1 has an invalid length. [ 151.843623][ T9187] netlink: 'syz.2.911': attribute type 7 has an invalid length. [ 151.873714][ T9187] netlink: 'syz.2.911': attribute type 8 has an invalid length. [ 151.901526][ T9187] netlink: 132 bytes leftover after parsing attributes in process `syz.2.911'. [ 152.194911][ T9193] netlink: 'syz.3.913': attribute type 2 has an invalid length. [ 152.557003][ T9233] netlink: 'syz.1.918': attribute type 21 has an invalid length. [ 153.316201][ T9259] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 153.576131][ T9218] hsr0 speed is unknown, defaulting to 1000 [ 154.018550][ T9290] tipc: Enabling of bearer rejected, media not registered [ 154.208105][ T9294] dvmrp0: entered allmulticast mode [ 154.339768][ T30] audit: type=1800 audit(1778069658.163:4): pid=9302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.940" name="memory.events" dev="tmpfs" ino=862 res=0 errno=0 [ 154.548151][ T9318] netlink: 'syz.1.943': attribute type 1 has an invalid length. [ 154.570796][ T9319] __nla_validate_parse: 12 callbacks suppressed [ 154.570814][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 154.588436][ T9315] netlink: 'syz.1.943': attribute type 64 has an invalid length. [ 154.609088][ T9315] netlink: 5 bytes leftover after parsing attributes in process `syz.1.943'. [ 154.629962][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.943'. [ 154.645999][ T9324] sctp: [Deprecated]: syz.3.944 (pid 9324) Use of int in max_burst socket option deprecated. [ 154.645999][ T9324] Use struct sctp_assoc_value instead [ 154.725710][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 154.853342][ T9330] tipc: Enabling of bearer rejected, failed to enable media [ 154.870450][ T9331] netlink: 'syz.1.946': attribute type 11 has an invalid length. [ 154.943686][ T9328] netlink: set zone limit has 4 unknown bytes [ 154.948269][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 155.008258][ T9333] netlink: 176 bytes leftover after parsing attributes in process `syz.4.948'. [ 155.029211][ T9333] netlink: 'syz.4.948': attribute type 1 has an invalid length. [ 155.053379][ T9333] netlink: 20 bytes leftover after parsing attributes in process `syz.4.948'. [ 155.097182][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 155.119889][ T9339] openvswitch: netlink: Missing key (keys=40, expected=80) [ 155.173385][ T9343] veth0: entered promiscuous mode [ 155.181822][ T9342] veth0: left promiscuous mode [ 155.346817][ T9357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.449071][ T9362] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.957'. [ 155.654364][ T9372] netlink: 36 bytes leftover after parsing attributes in process `syz.3.959'. [ 156.089978][ T9153] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.112358][ T9153] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.124003][ T9153] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.134207][ T9153] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.560274][ T9421] syzkaller0: entered promiscuous mode [ 156.570348][ T9421] syzkaller0: entered allmulticast mode [ 156.806948][ T9432] netlink: 'syz.2.978': attribute type 1 has an invalid length. [ 157.010506][ T9440] vlan2: entered promiscuous mode [ 157.016149][ T9440] geneve1: entered promiscuous mode [ 157.034043][ T9440] vlan2: entered allmulticast mode [ 157.043111][ T9440] geneve1: entered allmulticast mode [ 157.411939][ T9463] bond3: option xmit_hash_policy: invalid value (64) [ 157.420884][ T9463] bond3 (unregistering): Released all slaves [ 157.489550][ T9469] IPv6: sit1: Disabled Multicast RS [ 157.868704][ T9495] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 157.937081][ T9495] bond3: entered promiscuous mode [ 157.943320][ T9495] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.003006][ T9504] ieee802154 phy1 wpan1: encryption failed: -22 [ 158.240696][ T9519] SET target dimension over the limit! [ 158.319622][ T9522] netlink: 'syz.3.1002': attribute type 1 has an invalid length. [ 158.347237][ T9522] netlink: 'syz.3.1002': attribute type 2 has an invalid length. [ 158.546110][ T9540] netlink: 'syz.0.1005': attribute type 6 has an invalid length. [ 158.693836][ T9544] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 158.703169][ T9544] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 159.047800][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 179.271704][ T9555] ieee802154 phy1 wpan1: encryption failed: -22 [ 179.318930][ T9560] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 179.341280][ T9558] __nla_validate_parse: 16 callbacks suppressed [ 179.341297][ T9558] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1009'. [ 179.444845][ T9560] netlink: 'syz.4.1012': attribute type 58 has an invalid length. [ 179.460794][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1012'. [ 179.479728][ T9574] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1013'. [ 179.499494][ T9575] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1013'. [ 179.565529][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 179.657907][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 179.699742][ T9585] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 179.789284][ T9590] netlink: 'syz.3.1018': attribute type 3 has an invalid length. [ 179.829935][ T9585] team1: entered promiscuous mode [ 179.848740][ T9585] team1: entered allmulticast mode [ 180.094447][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1022'. [ 180.147907][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 180.207155][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 180.249277][ T9616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1024'. [ 180.311495][ T9616] geneve2: entered promiscuous mode [ 180.320616][ T9616] geneve2: entered allmulticast mode [ 180.425370][ T9631] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 180.440667][ T9631] syzkaller0: entered promiscuous mode [ 180.446529][ T9631] syzkaller0: entered allmulticast mode [ 180.518749][ T9634] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 180.533307][ T9610] erspan0: entered promiscuous mode [ 180.693326][ T9637] netlink: 'syz.0.1029': attribute type 64 has an invalid length. [ 181.495896][ T9676] Cannot find set identified by id 3 to match [ 181.520739][ T9676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.528603][ T9676] IPv6: NLM_F_CREATE should be set when creating new route [ 181.535884][ T9676] IPv6: NLM_F_CREATE should be set when creating new route [ 181.666521][ T9682] tipc: Started in network mode [ 181.694743][ T9682] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 181.726902][ T9682] tipc: Enabled bearer , priority 14 [ 181.841690][ T9704] netlink: 'syz.3.1046': attribute type 21 has an invalid length. [ 182.016641][ T9711] netlink: 'syz.0.1049': attribute type 5 has an invalid length. [ 182.096474][ T9711] geneve3: entered promiscuous mode [ 182.112407][ T9711] geneve3: entered allmulticast mode [ 182.128804][ T9153] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 182.164388][ T9153] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 182.197789][ T9153] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 182.219323][ T9153] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 182.286618][ T9724] BUG: Bad page state in process syz.3.1052 pfn:57251 [ 182.293602][ T9724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057251000 pfn:0x57251 [ 182.303753][ T9724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 182.310933][ T9724] page_type: f9(unknown) [ 182.315196][ T9724] raw: 00fff00000000000 0000000000000000 ffff88801af0c000 0000000000000000 [ 182.323989][ T9724] raw: ffff888057251000 3fffffffffffffff 00000000f9000000 0000000000000000 [ 182.332631][ T9724] page dumped because: page_pool leak [ 182.338073][ T9724] page_owner tracks the page as allocated [ 182.343830][ T9724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9724, tgid 9723 (syz.3.1052), ts 182286436781, free_ts 182268722592 [ 182.360907][ T9724] post_alloc_hook+0x231/0x280 [ 182.365704][ T9724] get_page_from_freelist+0x24ba/0x2540 [ 182.371336][ T9724] __alloc_frozen_pages_noprof+0x18d/0x380 [ 182.377173][ T9724] __alloc_pages_noprof+0x10/0x100 [ 182.382356][ T9724] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 182.387873][ T9724] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 182.393970][ T9724] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 182.399845][ T9724] skb_pp_cow_data+0xcb7/0x19b0 [ 182.404725][ T9724] do_xdp_generic+0x76b/0x12e0 [ 182.409580][ T9724] tun_get_user+0x24ca/0x43e0 [ 182.414284][ T9724] tun_chr_write_iter+0x113/0x200 [ 182.419370][ T9724] vfs_write+0x61d/0xb90 [ 182.423647][ T9724] ksys_write+0x150/0x270 [ 182.428063][ T9724] do_syscall_64+0x15f/0xf80 [ 182.432683][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.438644][ T9724] page last free pid 23 tgid 23 stack trace: [ 182.444636][ T9724] __free_frozen_pages+0xbc7/0xd30 [ 182.449811][ T9724] tlb_remove_table_rcu+0x85/0x100 [ 182.454957][ T9724] rcu_core+0x7cd/0x1070 [ 182.459252][ T9724] handle_softirqs+0x22a/0x840 [ 182.464038][ T9724] run_ksoftirqd+0x36/0x60 [ 182.468510][ T9724] smpboot_thread_fn+0x541/0xa50 [ 182.473475][ T9724] kthread+0x388/0x470 [ 182.477603][ T9724] ret_from_fork+0x514/0xb70 [ 182.482212][ T9724] ret_from_fork_asm+0x1a/0x30 [ 182.487011][ T9724] Modules linked in: [ 182.491010][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.3.1052 Not tainted syzkaller #0 PREEMPT(full) [ 182.491035][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.491054][ T9724] Call Trace: [ 182.491070][ T9724] [ 182.491079][ T9724] dump_stack_lvl+0xe8/0x150 [ 182.491107][ T9724] bad_page+0x17f/0x1c0 [ 182.491134][ T9724] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 182.491180][ T9724] bpf_xdp_adjust_tail+0x1d6/0x220 [ 182.491209][ T9724] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 182.491232][ T9724] bpf_prog_run_generic_xdp+0x603/0x1490 [ 182.491280][ T9724] do_xdp_generic+0xac5/0x12e0 [ 182.491314][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 182.491345][ T9724] ? __pfx_do_xdp_generic+0x10/0x10 [ 182.491381][ T9724] ? tun_get_user+0x2394/0x43e0 [ 182.491414][ T9724] ? tun_get_user+0x2394/0x43e0 [ 182.491435][ T9724] tun_get_user+0x24ca/0x43e0 [ 182.491473][ T9724] ? aa_file_perm+0x192/0x15e0 [ 182.491505][ T9724] ? aa_file_perm+0x50e/0x15e0 [ 182.491540][ T9724] ? __pfx_tun_get_user+0x10/0x10 [ 182.491566][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 182.491589][ T9724] ? preempt_schedule_thunk+0x16/0x30 [ 182.491619][ T9724] ? preempt_schedule_common+0x82/0xd0 [ 182.491646][ T9724] ? ref_tracker_alloc+0x35c/0x4c0 [ 182.491675][ T9724] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 182.491701][ T9724] ? tun_get+0x1c/0x2f0 [ 182.491722][ T9724] ? tun_get+0x1c/0x2f0 [ 182.491748][ T9724] ? tun_get+0x1c/0x2f0 [ 182.491771][ T9724] ? tun_get+0x1c/0x2f0 [ 182.491798][ T9724] tun_chr_write_iter+0x113/0x200 [ 182.491824][ T9724] vfs_write+0x61d/0xb90 [ 182.491862][ T9724] ? __pfx_vfs_write+0x10/0x10 [ 182.491892][ T9724] ? __pfx_do_futex+0x10/0x10 [ 182.491932][ T9724] ksys_write+0x150/0x270 [ 182.491961][ T9724] ? __pfx_ksys_write+0x10/0x10 [ 182.491999][ T9724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.492021][ T9724] do_syscall_64+0x15f/0xf80 [ 182.492046][ T9724] ? trace_irq_disable+0x3b/0x140 [ 182.492077][ T9724] ? clear_bhb_loop+0x40/0x90 [ 182.492101][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.492121][ T9724] RIP: 0033:0x7f7d6dd5d60e [ 182.492144][ T9724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.492161][ T9724] RSP: 002b:00007f7d6ebeefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.492181][ T9724] RAX: ffffffffffffffda RBX: 00007f7d6ebef6c0 RCX: 00007f7d6dd5d60e [ 182.492196][ T9724] RDX: 000000000000fe54 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 182.492209][ T9724] RBP: 00007f7d6de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 182.492222][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.492233][ T9724] R13: 00007f7d6e016038 R14: 00007f7d6e015fa0 R15: 00007fff2aab9868 [ 182.492261][ T9724] [ 182.492268][ T9724] Disabling lock debugging due to kernel taint [ 182.771147][ T9724] BUG: Bad page state in process syz.3.1052 pfn:29863 [ 182.778200][ T9724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029863000 pfn:0x29863 [ 182.778211][ T9708] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 182.778330][ T9708] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 182.788304][ T9724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 182.788329][ T9724] page_type: f9(unknown) [ 182.788345][ T9724] raw: 00fff00000000000 0000000000000000 ffff88801af0c000 0000000000000000 [ 182.788360][ T9724] raw: ffff888029863000 0000000000000001 00000000f9000000 0000000000000000 [ 182.788369][ T9724] page dumped because: page_pool leak [ 182.788378][ T9724] page_owner tracks the page as allocated [ 182.788385][ T9724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9724, tgid 9723 (syz.3.1052), ts 182286418609, free_ts 182268747523 [ 182.788415][ T9724] post_alloc_hook+0x231/0x280 [ 182.788445][ T9724] get_page_from_freelist+0x24ba/0x2540 [ 182.788481][ T9724] __alloc_frozen_pages_noprof+0x18d/0x380 [ 182.788510][ T9724] __alloc_pages_noprof+0x10/0x100 [ 182.788538][ T9724] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 182.788566][ T9724] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 182.788597][ T9724] skb_pp_cow_data+0xc91/0x19b0 [ 182.788618][ T9724] do_xdp_generic+0x76b/0x12e0 [ 182.788646][ T9724] tun_get_user+0x24ca/0x43e0 [ 182.788668][ T9724] tun_chr_write_iter+0x113/0x200 [ 182.788694][ T9724] vfs_write+0x61d/0xb90 [ 182.788719][ T9724] ksys_write+0x150/0x270 [ 182.788743][ T9724] do_syscall_64+0x15f/0xf80 [ 182.788771][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.788793][ T9724] page last free pid 23 tgid 23 stack trace: [ 182.788805][ T9724] __free_frozen_pages+0xbc7/0xd30 [ 182.788830][ T9724] tlb_remove_table_rcu+0x85/0x100 [ 182.788859][ T9724] rcu_core+0x7cd/0x1070 [ 182.788878][ T9724] handle_softirqs+0x22a/0x840 [ 182.788897][ T9724] run_ksoftirqd+0x36/0x60 [ 182.788918][ T9724] smpboot_thread_fn+0x541/0xa50 [ 182.788942][ T9724] kthread+0x388/0x470 [ 182.971976][ T9724] ret_from_fork+0x514/0xb70 [ 182.976576][ T9724] ret_from_fork_asm+0x1a/0x30 [ 182.981367][ T9724] Modules linked in: [ 182.985276][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.3.1052 Tainted: G B syzkaller #0 PREEMPT(full) [ 182.985302][ T9724] Tainted: [B]=BAD_PAGE [ 182.985309][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.985337][ T9724] Call Trace: [ 182.985344][ T9724] [ 182.985352][ T9724] dump_stack_lvl+0xe8/0x150 [ 182.985376][ T9724] bad_page+0x17f/0x1c0 [ 182.985400][ T9724] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 182.985441][ T9724] bpf_xdp_adjust_tail+0x1d6/0x220 [ 182.985467][ T9724] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 182.985485][ T9724] bpf_prog_run_generic_xdp+0x603/0x1490 [ 182.985525][ T9724] do_xdp_generic+0xac5/0x12e0 [ 182.985552][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 182.985577][ T9724] ? __pfx_do_xdp_generic+0x10/0x10 [ 182.985609][ T9724] ? tun_get_user+0x2394/0x43e0 [ 182.985638][ T9724] ? tun_get_user+0x2394/0x43e0 [ 182.985660][ T9724] tun_get_user+0x24ca/0x43e0 [ 182.985688][ T9724] ? aa_file_perm+0x192/0x15e0 [ 182.985716][ T9724] ? aa_file_perm+0x50e/0x15e0 [ 182.985740][ T9724] ? __pfx_tun_get_user+0x10/0x10 [ 182.985771][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 182.985792][ T9724] ? preempt_schedule_thunk+0x16/0x30 [ 182.985819][ T9724] ? preempt_schedule_common+0x82/0xd0 [ 182.985843][ T9724] ? ref_tracker_alloc+0x35c/0x4c0 [ 182.985870][ T9724] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 182.985895][ T9724] ? tun_get+0x1c/0x2f0 [ 182.985916][ T9724] ? tun_get+0x1c/0x2f0 [ 182.985938][ T9724] ? tun_get+0x1c/0x2f0 [ 182.985958][ T9724] ? tun_get+0x1c/0x2f0 [ 182.985981][ T9724] tun_chr_write_iter+0x113/0x200 [ 182.986004][ T9724] vfs_write+0x61d/0xb90 [ 182.986034][ T9724] ? __pfx_vfs_write+0x10/0x10 [ 182.986062][ T9724] ? __pfx_do_futex+0x10/0x10 [ 182.986091][ T9724] ksys_write+0x150/0x270 [ 182.986119][ T9724] ? __pfx_ksys_write+0x10/0x10 [ 182.986149][ T9724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.986169][ T9724] do_syscall_64+0x15f/0xf80 [ 182.986192][ T9724] ? trace_irq_disable+0x3b/0x140 [ 182.986220][ T9724] ? clear_bhb_loop+0x40/0x90 [ 182.986240][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.986258][ T9724] RIP: 0033:0x7f7d6dd5d60e [ 182.986275][ T9724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.986291][ T9724] RSP: 002b:00007f7d6ebeefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.986311][ T9724] RAX: ffffffffffffffda RBX: 00007f7d6ebef6c0 RCX: 00007f7d6dd5d60e [ 182.986326][ T9724] RDX: 000000000000fe54 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 182.986338][ T9724] RBP: 00007f7d6de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 182.986350][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.986361][ T9724] R13: 00007f7d6e016038 R14: 00007f7d6e015fa0 R15: 00007fff2aab9868 [ 182.986382][ T9724] [ 182.986394][ T9724] BUG: Bad page state in process syz.3.1052 pfn:29862 [ 183.271935][ T9724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029862000 pfn:0x29862 [ 183.282044][ T9724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 183.289189][ T9724] page_type: f9(unknown) [ 183.293534][ T9724] raw: 00fff00000000000 0000000000000000 ffff88801af0c000 0000000000000000 [ 183.302184][ T9724] raw: ffff888029862000 0000000000000001 00000000f9000000 0000000000000000 [ 183.310782][ T9724] page dumped because: page_pool leak [ 183.316138][ T9724] page_owner tracks the page as allocated [ 183.321869][ T9724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9724, tgid 9723 (syz.3.1052), ts 182286401330, free_ts 182268804097 [ 183.339003][ T9724] post_alloc_hook+0x231/0x280 [ 183.343775][ T9724] get_page_from_freelist+0x24ba/0x2540 [ 183.349350][ T9724] __alloc_frozen_pages_noprof+0x18d/0x380 [ 183.355175][ T9724] __alloc_pages_noprof+0x10/0x100 [ 183.360321][ T9724] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 183.365882][ T9724] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 183.371982][ T9724] skb_pp_cow_data+0xc91/0x19b0 [ 183.376844][ T9724] do_xdp_generic+0x76b/0x12e0 [ 183.381651][ T9724] tun_get_user+0x24ca/0x43e0 [ 183.386395][ T9724] tun_chr_write_iter+0x113/0x200 [ 183.391494][ T9724] vfs_write+0x61d/0xb90 [ 183.395759][ T9724] ksys_write+0x150/0x270 [ 183.400217][ T9724] do_syscall_64+0x15f/0xf80 [ 183.404822][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.410768][ T9724] page last free pid 23 tgid 23 stack trace: [ 183.416750][ T9724] __free_frozen_pages+0xbc7/0xd30 [ 183.421923][ T9724] tlb_remove_table_rcu+0x85/0x100 [ 183.427050][ T9724] rcu_core+0x7cd/0x1070 [ 183.431332][ T9724] handle_softirqs+0x22a/0x840 [ 183.436098][ T9724] run_ksoftirqd+0x36/0x60 [ 183.440552][ T9724] smpboot_thread_fn+0x541/0xa50 [ 183.445494][ T9724] kthread+0x388/0x470 [ 183.449594][ T9724] ret_from_fork+0x514/0xb70 [ 183.454184][ T9724] ret_from_fork_asm+0x1a/0x30 [ 183.458968][ T9724] Modules linked in: [ 183.462871][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.3.1052 Tainted: G B syzkaller #0 PREEMPT(full) [ 183.462887][ T9724] Tainted: [B]=BAD_PAGE [ 183.462890][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.462897][ T9724] Call Trace: [ 183.462902][ T9724] [ 183.462907][ T9724] dump_stack_lvl+0xe8/0x150 [ 183.462922][ T9724] bad_page+0x17f/0x1c0 [ 183.462936][ T9724] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 183.462957][ T9724] bpf_xdp_adjust_tail+0x1d6/0x220 [ 183.462972][ T9724] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 183.462982][ T9724] bpf_prog_run_generic_xdp+0x603/0x1490 [ 183.463004][ T9724] do_xdp_generic+0xac5/0x12e0 [ 183.463018][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 183.463031][ T9724] ? __pfx_do_xdp_generic+0x10/0x10 [ 183.463048][ T9724] ? tun_get_user+0x2394/0x43e0 [ 183.463064][ T9724] ? tun_get_user+0x2394/0x43e0 [ 183.463075][ T9724] tun_get_user+0x24ca/0x43e0 [ 183.463090][ T9724] ? aa_file_perm+0x192/0x15e0 [ 183.463106][ T9724] ? aa_file_perm+0x50e/0x15e0 [ 183.463120][ T9724] ? __pfx_tun_get_user+0x10/0x10 [ 183.463132][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 183.463143][ T9724] ? preempt_schedule_thunk+0x16/0x30 [ 183.463158][ T9724] ? preempt_schedule_common+0x82/0xd0 [ 183.463171][ T9724] ? ref_tracker_alloc+0x35c/0x4c0 [ 183.463186][ T9724] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 183.463200][ T9724] ? tun_get+0x1c/0x2f0 [ 183.463211][ T9724] ? tun_get+0x1c/0x2f0 [ 183.463223][ T9724] ? tun_get+0x1c/0x2f0 [ 183.463233][ T9724] ? tun_get+0x1c/0x2f0 [ 183.463245][ T9724] tun_chr_write_iter+0x113/0x200 [ 183.463258][ T9724] vfs_write+0x61d/0xb90 [ 183.463274][ T9724] ? __pfx_vfs_write+0x10/0x10 [ 183.463288][ T9724] ? __pfx_do_futex+0x10/0x10 [ 183.463303][ T9724] ksys_write+0x150/0x270 [ 183.463318][ T9724] ? __pfx_ksys_write+0x10/0x10 [ 183.463333][ T9724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.463344][ T9724] do_syscall_64+0x15f/0xf80 [ 183.463357][ T9724] ? trace_irq_disable+0x3b/0x140 [ 183.463372][ T9724] ? clear_bhb_loop+0x40/0x90 [ 183.463383][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.463394][ T9724] RIP: 0033:0x7f7d6dd5d60e [ 183.463403][ T9724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 183.463412][ T9724] RSP: 002b:00007f7d6ebeefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.463425][ T9724] RAX: ffffffffffffffda RBX: 00007f7d6ebef6c0 RCX: 00007f7d6dd5d60e [ 183.463433][ T9724] RDX: 000000000000fe54 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 183.463440][ T9724] RBP: 00007f7d6de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 183.463446][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.463452][ T9724] R13: 00007f7d6e016038 R14: 00007f7d6e015fa0 R15: 00007fff2aab9868 [ 183.463462][ T9724] [ 183.463470][ T9724] BUG: Bad page state in process syz.3.1052 pfn:53692 [ 183.748778][ T9724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888053692f00 pfn:0x53692 [ 183.758861][ T9724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 183.765972][ T9724] page_type: f9(unknown) [ 183.770241][ T9724] raw: 00fff00000000000 0000000000000000 ffff88801af0c000 0000000000000000 [ 183.778848][ T9724] raw: ffff888053692f00 0000000000000001 00000000f9000000 0000000000000000 [ 183.787444][ T9724] page dumped because: page_pool leak [ 183.792839][ T9724] page_owner tracks the page as allocated [ 183.798578][ T9724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9724, tgid 9723 (syz.3.1052), ts 182286383559, free_ts 182268828930 [ 183.815610][ T9724] post_alloc_hook+0x231/0x280 [ 183.820408][ T9724] get_page_from_freelist+0x24ba/0x2540 [ 183.825957][ T9724] __alloc_frozen_pages_noprof+0x18d/0x380 [ 183.831791][ T9724] __alloc_pages_noprof+0x10/0x100 [ 183.837171][ T9724] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 183.842671][ T9724] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 183.848784][ T9724] skb_pp_cow_data+0xc91/0x19b0 [ 183.853657][ T9724] do_xdp_generic+0x76b/0x12e0 [ 183.858472][ T9724] tun_get_user+0x24ca/0x43e0 [ 183.863157][ T9724] tun_chr_write_iter+0x113/0x200 [ 183.868223][ T9724] vfs_write+0x61d/0xb90 [ 183.872473][ T9724] ksys_write+0x150/0x270 [ 183.876790][ T9724] do_syscall_64+0x15f/0xf80 [ 183.881412][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.887312][ T9724] page last free pid 23 tgid 23 stack trace: [ 183.893315][ T9724] __free_frozen_pages+0xbc7/0xd30 [ 183.898465][ T9724] tlb_remove_table_rcu+0x85/0x100 [ 183.903569][ T9724] rcu_core+0x7cd/0x1070 [ 183.907835][ T9724] handle_softirqs+0x22a/0x840 [ 183.912608][ T9724] run_ksoftirqd+0x36/0x60 [ 183.917051][ T9724] smpboot_thread_fn+0x541/0xa50 [ 183.922025][ T9724] kthread+0x388/0x470 [ 183.926109][ T9724] ret_from_fork+0x514/0xb70 [ 183.930739][ T9724] ret_from_fork_asm+0x1a/0x30 [ 183.935517][ T9724] Modules linked in: [ 183.939440][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.3.1052 Tainted: G B syzkaller #0 PREEMPT(full) [ 183.939466][ T9724] Tainted: [B]=BAD_PAGE [ 183.939471][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.939480][ T9724] Call Trace: [ 183.939486][ T9724] [ 183.939493][ T9724] dump_stack_lvl+0xe8/0x150 [ 183.939515][ T9724] bad_page+0x17f/0x1c0 [ 183.939537][ T9724] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 183.939570][ T9724] bpf_xdp_adjust_tail+0x1d6/0x220 [ 183.939595][ T9724] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 183.939614][ T9724] bpf_prog_run_generic_xdp+0x603/0x1490 [ 183.939658][ T9724] do_xdp_generic+0xac5/0x12e0 [ 183.939692][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 183.939717][ T9724] ? __pfx_do_xdp_generic+0x10/0x10 [ 183.939748][ T9724] ? tun_get_user+0x2394/0x43e0 [ 183.939777][ T9724] ? tun_get_user+0x2394/0x43e0 [ 183.939798][ T9724] tun_get_user+0x24ca/0x43e0 [ 183.939826][ T9724] ? aa_file_perm+0x192/0x15e0 [ 183.939854][ T9724] ? aa_file_perm+0x50e/0x15e0 [ 183.939878][ T9724] ? __pfx_tun_get_user+0x10/0x10 [ 183.939901][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 183.939921][ T9724] ? preempt_schedule_thunk+0x16/0x30 [ 183.939948][ T9724] ? preempt_schedule_common+0x82/0xd0 [ 183.939971][ T9724] ? ref_tracker_alloc+0x35c/0x4c0 [ 183.939997][ T9724] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 183.940022][ T9724] ? tun_get+0x1c/0x2f0 [ 183.940043][ T9724] ? tun_get+0x1c/0x2f0 [ 183.940065][ T9724] ? tun_get+0x1c/0x2f0 [ 183.940085][ T9724] ? tun_get+0x1c/0x2f0 [ 183.940107][ T9724] tun_chr_write_iter+0x113/0x200 [ 183.940131][ T9724] vfs_write+0x61d/0xb90 [ 183.940161][ T9724] ? __pfx_vfs_write+0x10/0x10 [ 183.940187][ T9724] ? __pfx_do_futex+0x10/0x10 [ 183.940216][ T9724] ksys_write+0x150/0x270 [ 183.940243][ T9724] ? __pfx_ksys_write+0x10/0x10 [ 183.940272][ T9724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.940291][ T9724] do_syscall_64+0x15f/0xf80 [ 183.940314][ T9724] ? trace_irq_disable+0x3b/0x140 [ 183.940342][ T9724] ? clear_bhb_loop+0x40/0x90 [ 183.940363][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.940382][ T9724] RIP: 0033:0x7f7d6dd5d60e [ 183.940398][ T9724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 183.940414][ T9724] RSP: 002b:00007f7d6ebeefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.940434][ T9724] RAX: ffffffffffffffda RBX: 00007f7d6ebef6c0 RCX: 00007f7d6dd5d60e [ 183.940448][ T9724] RDX: 000000000000fe54 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 183.940460][ T9724] RBP: 00007f7d6de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 183.940472][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.940482][ T9724] R13: 00007f7d6e016038 R14: 00007f7d6e015fa0 R15: 00007fff2aab9868 [ 183.940500][ T9724] [ 183.940509][ T9724] BUG: Bad page state in process syz.3.1052 pfn:7c509 [ 184.226162][ T9724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807c509000 pfn:0x7c509 [ 184.236426][ T9724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 184.243569][ T9724] page_type: f9(unknown) [ 184.247853][ T9724] raw: 00fff00000000000 0000000000000000 ffff88801af0c000 0000000000000000 [ 184.256473][ T9724] raw: ffff88807c509000 0000000000000001 00000000f9000000 0000000000000000 [ 184.265569][ T9724] page dumped because: page_pool leak [ 184.271069][ T9724] page_owner tracks the page as allocated [ 184.276774][ T9724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9724, tgid 9723 (syz.3.1052), ts 182286366203, free_ts 182268854782 [ 184.293845][ T9724] post_alloc_hook+0x231/0x280 [ 184.298657][ T9724] get_page_from_freelist+0x24ba/0x2540 [ 184.304224][ T9724] __alloc_frozen_pages_noprof+0x18d/0x380 [ 184.310072][ T9724] __alloc_pages_noprof+0x10/0x100 [ 184.315206][ T9724] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 184.320725][ T9724] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 184.326812][ T9724] skb_pp_cow_data+0xc91/0x19b0 [ 184.331712][ T9724] do_xdp_generic+0x76b/0x12e0 [ 184.336492][ T9724] tun_get_user+0x24ca/0x43e0 [ 184.341212][ T9724] tun_chr_write_iter+0x113/0x200 [ 184.346259][ T9724] vfs_write+0x61d/0xb90 [ 184.350548][ T9724] ksys_write+0x150/0x270 [ 184.354891][ T9724] do_syscall_64+0x15f/0xf80 [ 184.359511][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.365410][ T9724] page last free pid 23 tgid 23 stack trace: [ 184.371426][ T9724] __free_frozen_pages+0xbc7/0xd30 [ 184.376551][ T9724] tlb_remove_table_rcu+0x85/0x100 [ 184.381690][ T9724] rcu_core+0x7cd/0x1070 [ 184.385944][ T9724] handle_softirqs+0x22a/0x840 [ 184.390736][ T9724] run_ksoftirqd+0x36/0x60 [ 184.395155][ T9724] smpboot_thread_fn+0x541/0xa50 [ 184.400195][ T9724] kthread+0x388/0x470 [ 184.404286][ T9724] ret_from_fork+0x514/0xb70 [ 184.408910][ T9724] ret_from_fork_asm+0x1a/0x30 [ 184.413942][ T9724] Modules linked in: [ 184.417888][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.3.1052 Tainted: G B syzkaller #0 PREEMPT(full) [ 184.417916][ T9724] Tainted: [B]=BAD_PAGE [ 184.417922][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.417932][ T9724] Call Trace: [ 184.417939][ T9724] [ 184.417946][ T9724] dump_stack_lvl+0xe8/0x150 [ 184.417967][ T9724] bad_page+0x17f/0x1c0 [ 184.417987][ T9724] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 184.418018][ T9724] bpf_xdp_adjust_tail+0x1d6/0x220 [ 184.418039][ T9724] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 184.418054][ T9724] bpf_prog_run_generic_xdp+0x603/0x1490 [ 184.418087][ T9724] do_xdp_generic+0xac5/0x12e0 [ 184.418110][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 184.418132][ T9724] ? __pfx_do_xdp_generic+0x10/0x10 [ 184.418158][ T9724] ? tun_get_user+0x2394/0x43e0 [ 184.418182][ T9724] ? tun_get_user+0x2394/0x43e0 [ 184.418199][ T9724] tun_get_user+0x24ca/0x43e0 [ 184.418223][ T9724] ? aa_file_perm+0x192/0x15e0 [ 184.418246][ T9724] ? aa_file_perm+0x50e/0x15e0 [ 184.418266][ T9724] ? __pfx_tun_get_user+0x10/0x10 [ 184.418284][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 184.418301][ T9724] ? preempt_schedule_thunk+0x16/0x30 [ 184.418324][ T9724] ? preempt_schedule_common+0x82/0xd0 [ 184.418344][ T9724] ? ref_tracker_alloc+0x35c/0x4c0 [ 184.418372][ T9724] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 184.418393][ T9724] ? tun_get+0x1c/0x2f0 [ 184.418410][ T9724] ? tun_get+0x1c/0x2f0 [ 184.418428][ T9724] ? tun_get+0x1c/0x2f0 [ 184.418445][ T9724] ? tun_get+0x1c/0x2f0 [ 184.418463][ T9724] tun_chr_write_iter+0x113/0x200 [ 184.418482][ T9724] vfs_write+0x61d/0xb90 [ 184.418513][ T9724] ? __pfx_vfs_write+0x10/0x10 [ 184.418534][ T9724] ? __pfx_do_futex+0x10/0x10 [ 184.418558][ T9724] ksys_write+0x150/0x270 [ 184.418580][ T9724] ? __pfx_ksys_write+0x10/0x10 [ 184.418604][ T9724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.418621][ T9724] do_syscall_64+0x15f/0xf80 [ 184.418647][ T9724] ? trace_irq_disable+0x3b/0x140 [ 184.418670][ T9724] ? clear_bhb_loop+0x40/0x90 [ 184.418687][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.418703][ T9724] RIP: 0033:0x7f7d6dd5d60e [ 184.418717][ T9724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.418736][ T9724] RSP: 002b:00007f7d6ebeefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.418755][ T9724] RAX: ffffffffffffffda RBX: 00007f7d6ebef6c0 RCX: 00007f7d6dd5d60e [ 184.418767][ T9724] RDX: 000000000000fe54 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 184.418777][ T9724] RBP: 00007f7d6de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 184.418787][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.418796][ T9724] R13: 00007f7d6e016038 R14: 00007f7d6e015fa0 R15: 00007fff2aab9868 [ 184.418813][ T9724] [ 184.418826][ T9724] BUG: Bad page state in process syz.3.1052 pfn:35bdc [ 184.704715][ T9724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035bdc900 pfn:0x35bdc [ 184.714847][ T9724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 184.721994][ T9724] page_type: f9(unknown) [ 184.726247][ T9724] raw: 00fff00000000000 0000000000000000 ffff88801af0c000 0000000000000000 [ 184.734884][ T9724] raw: ffff888035bdc900 0000000000000001 00000000f9000000 0000000000000000 [ 184.743662][ T9724] page dumped because: page_pool leak [ 184.749055][ T9724] page_owner tracks the page as allocated [ 184.754932][ T9724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9724, tgid 9723 (syz.3.1052), ts 182286349288, free_ts 182268879668 [ 184.771974][ T9724] post_alloc_hook+0x231/0x280 [ 184.776754][ T9724] get_page_from_freelist+0x24ba/0x2540 [ 184.782354][ T9724] __alloc_frozen_pages_noprof+0x18d/0x380 [ 184.788209][ T9724] __alloc_pages_noprof+0x10/0x100 [ 184.793340][ T9724] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 184.798834][ T9724] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 184.804921][ T9724] skb_pp_cow_data+0xc91/0x19b0 [ 184.809804][ T9724] do_xdp_generic+0x76b/0x12e0 [ 184.814576][ T9724] tun_get_user+0x24ca/0x43e0 [ 184.819280][ T9724] tun_chr_write_iter+0x113/0x200 [ 184.824306][ T9724] vfs_write+0x61d/0xb90 [ 184.828579][ T9724] ksys_write+0x150/0x270 [ 184.832929][ T9724] do_syscall_64+0x15f/0xf80 [ 184.837550][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.843452][ T9724] page last free pid 23 tgid 23 stack trace: [ 184.849495][ T9724] __free_frozen_pages+0xbc7/0xd30 [ 184.854616][ T9724] tlb_remove_table_rcu+0x85/0x100 [ 184.859753][ T9724] rcu_core+0x7cd/0x1070 [ 184.863997][ T9724] handle_softirqs+0x22a/0x840 [ 184.868784][ T9724] run_ksoftirqd+0x36/0x60 [ 184.873261][ T9724] smpboot_thread_fn+0x541/0xa50 [ 184.878346][ T9724] kthread+0x388/0x470 [ 184.882421][ T9724] ret_from_fork+0x514/0xb70 [ 184.887103][ T9724] ret_from_fork_asm+0x1a/0x30 [ 184.891893][ T9724] Modules linked in: [ 184.895807][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.3.1052 Tainted: G B syzkaller #0 PREEMPT(full) [ 184.895826][ T9724] Tainted: [B]=BAD_PAGE [ 184.895830][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.895837][ T9724] Call Trace: [ 184.895842][ T9724] [ 184.895847][ T9724] dump_stack_lvl+0xe8/0x150 [ 184.895862][ T9724] bad_page+0x17f/0x1c0 [ 184.895877][ T9724] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 184.895898][ T9724] bpf_xdp_adjust_tail+0x1d6/0x220 [ 184.895913][ T9724] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 184.895923][ T9724] bpf_prog_run_generic_xdp+0x603/0x1490 [ 184.895960][ T9724] do_xdp_generic+0xac5/0x12e0 [ 184.895987][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 184.896004][ T9724] ? __pfx_do_xdp_generic+0x10/0x10 [ 184.896021][ T9724] ? tun_get_user+0x2394/0x43e0 [ 184.896036][ T9724] ? tun_get_user+0x2394/0x43e0 [ 184.896048][ T9724] tun_get_user+0x24ca/0x43e0 [ 184.896063][ T9724] ? aa_file_perm+0x192/0x15e0 [ 184.896079][ T9724] ? aa_file_perm+0x50e/0x15e0 [ 184.896092][ T9724] ? __pfx_tun_get_user+0x10/0x10 [ 184.896104][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 184.896115][ T9724] ? preempt_schedule_thunk+0x16/0x30 [ 184.896131][ T9724] ? preempt_schedule_common+0x82/0xd0 [ 184.896145][ T9724] ? ref_tracker_alloc+0x35c/0x4c0 [ 184.896159][ T9724] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 184.896173][ T9724] ? tun_get+0x1c/0x2f0 [ 184.896184][ T9724] ? tun_get+0x1c/0x2f0 [ 184.896196][ T9724] ? tun_get+0x1c/0x2f0 [ 184.896207][ T9724] ? tun_get+0x1c/0x2f0 [ 184.896218][ T9724] tun_chr_write_iter+0x113/0x200 [ 184.896231][ T9724] vfs_write+0x61d/0xb90 [ 184.896248][ T9724] ? __pfx_vfs_write+0x10/0x10 [ 184.896262][ T9724] ? __pfx_do_futex+0x10/0x10 [ 184.896278][ T9724] ksys_write+0x150/0x270 [ 184.896293][ T9724] ? __pfx_ksys_write+0x10/0x10 [ 184.896308][ T9724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.896319][ T9724] do_syscall_64+0x15f/0xf80 [ 184.896332][ T9724] ? trace_irq_disable+0x3b/0x140 [ 184.896350][ T9724] ? clear_bhb_loop+0x40/0x90 [ 184.896362][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.896372][ T9724] RIP: 0033:0x7f7d6dd5d60e [ 184.896382][ T9724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.896391][ T9724] RSP: 002b:00007f7d6ebeefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.896403][ T9724] RAX: ffffffffffffffda RBX: 00007f7d6ebef6c0 RCX: 00007f7d6dd5d60e [ 184.896410][ T9724] RDX: 000000000000fe54 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 184.896417][ T9724] RBP: 00007f7d6de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 184.896423][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.896430][ T9724] R13: 00007f7d6e016038 R14: 00007f7d6e015fa0 R15: 00007fff2aab9868 [ 184.896440][ T9724] [ 184.896447][ T9724] BUG: Bad page state in process syz.3.1052 pfn:578f2 [ 185.181751][ T9724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880578f2700 pfn:0x578f2 [ 185.191926][ T9724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 185.199063][ T9724] page_type: f9(unknown) [ 185.203295][ T9724] raw: 00fff00000000000 0000000000000000 ffff88801af0c000 0000000000000000 [ 185.211914][ T9724] raw: ffff8880578f2700 0000000000000001 00000000f9000000 0000000000000000 [ 185.220522][ T9724] page dumped because: page_pool leak [ 185.225900][ T9724] page_owner tracks the page as allocated [ 185.231653][ T9724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9724, tgid 9723 (syz.3.1052), ts 182286331737, free_ts 182268905165 [ 185.248718][ T9724] post_alloc_hook+0x231/0x280 [ 185.253593][ T9724] get_page_from_freelist+0x24ba/0x2540 [ 185.259193][ T9724] __alloc_frozen_pages_noprof+0x18d/0x380 [ 185.265022][ T9724] __alloc_pages_noprof+0x10/0x100 [ 185.270183][ T9724] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 185.275656][ T9724] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 185.281784][ T9724] skb_pp_cow_data+0xc91/0x19b0 [ 185.286636][ T9724] do_xdp_generic+0x76b/0x12e0 [ 185.291426][ T9724] tun_get_user+0x24ca/0x43e0 [ 185.296107][ T9724] tun_chr_write_iter+0x113/0x200 [ 185.301159][ T9724] vfs_write+0x61d/0xb90 [ 185.305407][ T9724] ksys_write+0x150/0x270 [ 185.309756][ T9724] do_syscall_64+0x15f/0xf80 [ 185.314349][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.320269][ T9724] page last free pid 23 tgid 23 stack trace: [ 185.326239][ T9724] __free_frozen_pages+0xbc7/0xd30 [ 185.331375][ T9724] tlb_remove_table_rcu+0x85/0x100 [ 185.336496][ T9724] rcu_core+0x7cd/0x1070 [ 185.340762][ T9724] handle_softirqs+0x22a/0x840 [ 185.345534][ T9724] run_ksoftirqd+0x36/0x60 [ 185.349995][ T9724] smpboot_thread_fn+0x541/0xa50 [ 185.354944][ T9724] kthread+0x388/0x470 [ 185.359042][ T9724] ret_from_fork+0x514/0xb70 [ 185.363700][ T9724] ret_from_fork_asm+0x1a/0x30 [ 185.368525][ T9724] Modules linked in: [ 185.372424][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.3.1052 Tainted: G B syzkaller #0 PREEMPT(full) [ 185.372441][ T9724] Tainted: [B]=BAD_PAGE [ 185.372445][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.372452][ T9724] Call Trace: [ 185.372456][ T9724] [ 185.372461][ T9724] dump_stack_lvl+0xe8/0x150 [ 185.372481][ T9724] bad_page+0x17f/0x1c0 [ 185.372495][ T9724] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 185.372516][ T9724] bpf_xdp_adjust_tail+0x1d6/0x220 [ 185.372530][ T9724] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 185.372541][ T9724] bpf_prog_run_generic_xdp+0x603/0x1490 [ 185.372563][ T9724] do_xdp_generic+0xac5/0x12e0 [ 185.372578][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 185.372591][ T9724] ? __pfx_do_xdp_generic+0x10/0x10 [ 185.372608][ T9724] ? tun_get_user+0x2394/0x43e0 [ 185.372624][ T9724] ? tun_get_user+0x2394/0x43e0 [ 185.372635][ T9724] tun_get_user+0x24ca/0x43e0 [ 185.372651][ T9724] ? aa_file_perm+0x192/0x15e0 [ 185.372667][ T9724] ? aa_file_perm+0x50e/0x15e0 [ 185.372680][ T9724] ? __pfx_tun_get_user+0x10/0x10 [ 185.372692][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 185.372703][ T9724] ? preempt_schedule_thunk+0x16/0x30 [ 185.372724][ T9724] ? preempt_schedule_common+0x82/0xd0 [ 185.372748][ T9724] ? ref_tracker_alloc+0x35c/0x4c0 [ 185.372773][ T9724] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 185.372798][ T9724] ? tun_get+0x1c/0x2f0 [ 185.372819][ T9724] ? tun_get+0x1c/0x2f0 [ 185.372832][ T9724] ? tun_get+0x1c/0x2f0 [ 185.372843][ T9724] ? tun_get+0x1c/0x2f0 [ 185.372855][ T9724] tun_chr_write_iter+0x113/0x200 [ 185.372868][ T9724] vfs_write+0x61d/0xb90 [ 185.372884][ T9724] ? __pfx_vfs_write+0x10/0x10 [ 185.372898][ T9724] ? __pfx_do_futex+0x10/0x10 [ 185.372914][ T9724] ksys_write+0x150/0x270 [ 185.372928][ T9724] ? __pfx_ksys_write+0x10/0x10 [ 185.372944][ T9724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.372954][ T9724] do_syscall_64+0x15f/0xf80 [ 185.372967][ T9724] ? trace_irq_disable+0x3b/0x140 [ 185.372983][ T9724] ? clear_bhb_loop+0x40/0x90 [ 185.372994][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.373004][ T9724] RIP: 0033:0x7f7d6dd5d60e [ 185.373014][ T9724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.373023][ T9724] RSP: 002b:00007f7d6ebeefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.373035][ T9724] RAX: ffffffffffffffda RBX: 00007f7d6ebef6c0 RCX: 00007f7d6dd5d60e [ 185.373042][ T9724] RDX: 000000000000fe54 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 185.373049][ T9724] RBP: 00007f7d6de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 185.373068][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.373074][ T9724] R13: 00007f7d6e016038 R14: 00007f7d6e015fa0 R15: 00007fff2aab9868 [ 185.373085][ T9724] [ 185.373092][ T9724] BUG: Bad page state in process syz.3.1052 pfn:29066 [ 185.657820][ T9724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029066000 pfn:0x29066 [ 185.667928][ T9724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 185.675280][ T9724] page_type: f9(unknown) [ 185.679566][ T9724] raw: 00fff00000000000 0000000000000000 ffff88801af0c000 0000000000000000 [ 185.688250][ T9724] raw: ffff888029066000 0000000000000001 00000000f9000000 0000000000000000 [ 185.697106][ T9724] page dumped because: page_pool leak [ 185.702533][ T9724] page_owner tracks the page as allocated [ 185.708289][ T9724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9724, tgid 9723 (syz.3.1052), ts 182286314140, free_ts 182268930661 [ 185.725620][ T9724] post_alloc_hook+0x231/0x280 [ 185.730426][ T9724] get_page_from_freelist+0x24ba/0x2540 [ 185.735971][ T9724] __alloc_frozen_pages_noprof+0x18d/0x380 [ 185.741869][ T9724] __alloc_pages_noprof+0x10/0x100 [ 185.747000][ T9724] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 185.752506][ T9724] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 185.758614][ T9724] skb_pp_cow_data+0xc91/0x19b0 [ 185.763470][ T9724] do_xdp_generic+0x76b/0x12e0 [ 185.768264][ T9724] tun_get_user+0x24ca/0x43e0 [ 185.772965][ T9724] tun_chr_write_iter+0x113/0x200 [ 185.778021][ T9724] vfs_write+0x61d/0xb90 [ 185.782294][ T9724] ksys_write+0x150/0x270 [ 185.786625][ T9724] do_syscall_64+0x15f/0xf80 [ 185.791245][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.797151][ T9724] page last free pid 23 tgid 23 stack trace: [ 185.803161][ T9724] __free_frozen_pages+0xbc7/0xd30 [ 185.808320][ T9724] tlb_remove_table_rcu+0x85/0x100 [ 185.813424][ T9724] rcu_core+0x7cd/0x1070 [ 185.817706][ T9724] handle_softirqs+0x22a/0x840 [ 185.822487][ T9724] run_ksoftirqd+0x36/0x60 [ 185.826922][ T9724] smpboot_thread_fn+0x541/0xa50 [ 185.831920][ T9724] kthread+0x388/0x470 [ 185.836008][ T9724] ret_from_fork+0x514/0xb70 [ 185.840785][ T9724] ret_from_fork_asm+0x1a/0x30 [ 185.845576][ T9724] Modules linked in: [ 185.849514][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.3.1052 Tainted: G B syzkaller #0 PREEMPT(full) [ 185.849543][ T9724] Tainted: [B]=BAD_PAGE [ 185.849549][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.849557][ T9724] Call Trace: [ 185.849563][ T9724] [ 185.849570][ T9724] dump_stack_lvl+0xe8/0x150 [ 185.849592][ T9724] bad_page+0x17f/0x1c0 [ 185.849614][ T9724] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 185.849649][ T9724] bpf_xdp_adjust_tail+0x1d6/0x220 [ 185.849671][ T9724] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 185.849688][ T9724] bpf_prog_run_generic_xdp+0x603/0x1490 [ 185.849728][ T9724] do_xdp_generic+0xac5/0x12e0 [ 185.849755][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 185.849780][ T9724] ? __pfx_do_xdp_generic+0x10/0x10 [ 185.849813][ T9724] ? tun_get_user+0x2394/0x43e0 [ 185.849845][ T9724] ? tun_get_user+0x2394/0x43e0 [ 185.849867][ T9724] tun_get_user+0x24ca/0x43e0 [ 185.849896][ T9724] ? aa_file_perm+0x192/0x15e0 [ 185.849924][ T9724] ? aa_file_perm+0x50e/0x15e0 [ 185.849949][ T9724] ? __pfx_tun_get_user+0x10/0x10 [ 185.849972][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 185.849992][ T9724] ? preempt_schedule_thunk+0x16/0x30 [ 185.850020][ T9724] ? preempt_schedule_common+0x82/0xd0 [ 185.850044][ T9724] ? ref_tracker_alloc+0x35c/0x4c0 [ 185.850071][ T9724] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 185.850095][ T9724] ? tun_get+0x1c/0x2f0 [ 185.850112][ T9724] ? tun_get+0x1c/0x2f0 [ 185.850134][ T9724] ? tun_get+0x1c/0x2f0 [ 185.850154][ T9724] ? tun_get+0x1c/0x2f0 [ 185.850177][ T9724] tun_chr_write_iter+0x113/0x200 [ 185.850200][ T9724] vfs_write+0x61d/0xb90 [ 185.850229][ T9724] ? __pfx_vfs_write+0x10/0x10 [ 185.850265][ T9724] ? __pfx_do_futex+0x10/0x10 [ 185.850294][ T9724] ksys_write+0x150/0x270 [ 185.850321][ T9724] ? __pfx_ksys_write+0x10/0x10 [ 185.850351][ T9724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.850370][ T9724] do_syscall_64+0x15f/0xf80 [ 185.850393][ T9724] ? trace_irq_disable+0x3b/0x140 [ 185.850421][ T9724] ? clear_bhb_loop+0x40/0x90 [ 185.850441][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.850459][ T9724] RIP: 0033:0x7f7d6dd5d60e [ 185.850475][ T9724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.850491][ T9724] RSP: 002b:00007f7d6ebeefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.850511][ T9724] RAX: ffffffffffffffda RBX: 00007f7d6ebef6c0 RCX: 00007f7d6dd5d60e [ 185.850525][ T9724] RDX: 000000000000fe54 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 185.850537][ T9724] RBP: 00007f7d6de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 185.850548][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.850560][ T9724] R13: 00007f7d6e016038 R14: 00007f7d6e015fa0 R15: 00007fff2aab9868 [ 185.850581][ T9724] [ 185.850591][ T9724] BUG: Bad page state in process syz.3.1052 pfn:207b2 [ 186.135819][ T9724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x207b2 [ 186.144636][ T9724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 186.151788][ T9724] page_type: f9(unknown) [ 186.156049][ T9724] raw: 00fff00000000000 0000000000000000 ffff88801af0c000 0000000000000000 [ 186.164664][ T9724] raw: 0000000000000000 0000000000000001 00000000f9000000 0000000000000000 [ 186.173269][ T9724] page dumped because: page_pool leak [ 186.178654][ T9724] page_owner tracks the page as allocated [ 186.184372][ T9724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9724, tgid 9723 (syz.3.1052), ts 182286297129, free_ts 182268956196 [ 186.201425][ T9724] post_alloc_hook+0x231/0x280 [ 186.206213][ T9724] get_page_from_freelist+0x24ba/0x2540 [ 186.211819][ T9724] __alloc_frozen_pages_noprof+0x18d/0x380 [ 186.217763][ T9724] __alloc_pages_noprof+0x10/0x100 [ 186.222902][ T9724] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 186.228410][ T9724] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 186.234519][ T9724] skb_pp_cow_data+0xc91/0x19b0 [ 186.239424][ T9724] do_xdp_generic+0x76b/0x12e0 [ 186.244219][ T9724] tun_get_user+0x24ca/0x43e0 [ 186.248948][ T9724] tun_chr_write_iter+0x113/0x200 [ 186.253994][ T9724] vfs_write+0x61d/0xb90 [ 186.258297][ T9724] ksys_write+0x150/0x270 [ 186.262645][ T9724] do_syscall_64+0x15f/0xf80 [ 186.267246][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.273199][ T9724] page last free pid 23 tgid 23 stack trace: [ 186.279217][ T9724] __free_frozen_pages+0xbc7/0xd30 [ 186.284331][ T9724] tlb_remove_table_rcu+0x85/0x100 [ 186.289477][ T9724] rcu_core+0x7cd/0x1070 [ 186.293728][ T9724] handle_softirqs+0x22a/0x840 [ 186.298512][ T9724] run_ksoftirqd+0x36/0x60 [ 186.302933][ T9724] smpboot_thread_fn+0x541/0xa50 [ 186.307899][ T9724] kthread+0x388/0x470 [ 186.311993][ T9724] ret_from_fork+0x514/0xb70 [ 186.316586][ T9724] ret_from_fork_asm+0x1a/0x30 [ 186.321394][ T9724] Modules linked in: [ 186.325339][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.3.1052 Tainted: G B syzkaller #0 PREEMPT(full) [ 186.325366][ T9724] Tainted: [B]=BAD_PAGE [ 186.325370][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.325378][ T9724] Call Trace: [ 186.325387][ T9724] [ 186.325392][ T9724] dump_stack_lvl+0xe8/0x150 [ 186.325409][ T9724] bad_page+0x17f/0x1c0 [ 186.325430][ T9724] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 186.325453][ T9724] bpf_xdp_adjust_tail+0x1d6/0x220 [ 186.325467][ T9724] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 186.325477][ T9724] bpf_prog_run_generic_xdp+0x603/0x1490 [ 186.325500][ T9724] do_xdp_generic+0xac5/0x12e0 [ 186.325519][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 186.325532][ T9724] ? __pfx_do_xdp_generic+0x10/0x10 [ 186.325549][ T9724] ? tun_get_user+0x2394/0x43e0 [ 186.325565][ T9724] ? tun_get_user+0x2394/0x43e0 [ 186.325577][ T9724] tun_get_user+0x24ca/0x43e0 [ 186.325592][ T9724] ? aa_file_perm+0x192/0x15e0 [ 186.325609][ T9724] ? aa_file_perm+0x50e/0x15e0 [ 186.325622][ T9724] ? __pfx_tun_get_user+0x10/0x10 [ 186.325634][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 186.325646][ T9724] ? preempt_schedule_thunk+0x16/0x30 [ 186.325661][ T9724] ? preempt_schedule_common+0x82/0xd0 [ 186.325675][ T9724] ? ref_tracker_alloc+0x35c/0x4c0 [ 186.325689][ T9724] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.325703][ T9724] ? tun_get+0x1c/0x2f0 [ 186.325714][ T9724] ? tun_get+0x1c/0x2f0 [ 186.325727][ T9724] ? tun_get+0x1c/0x2f0 [ 186.325738][ T9724] ? tun_get+0x1c/0x2f0 [ 186.325750][ T9724] tun_chr_write_iter+0x113/0x200 [ 186.325763][ T9724] vfs_write+0x61d/0xb90 [ 186.325780][ T9724] ? __pfx_vfs_write+0x10/0x10 [ 186.325794][ T9724] ? __pfx_do_futex+0x10/0x10 [ 186.325810][ T9724] ksys_write+0x150/0x270 [ 186.325824][ T9724] ? __pfx_ksys_write+0x10/0x10 [ 186.325840][ T9724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.325851][ T9724] do_syscall_64+0x15f/0xf80 [ 186.325864][ T9724] ? trace_irq_disable+0x3b/0x140 [ 186.325880][ T9724] ? clear_bhb_loop+0x40/0x90 [ 186.325891][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.325901][ T9724] RIP: 0033:0x7f7d6dd5d60e [ 186.325911][ T9724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.325921][ T9724] RSP: 002b:00007f7d6ebeefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.325933][ T9724] RAX: ffffffffffffffda RBX: 00007f7d6ebef6c0 RCX: 00007f7d6dd5d60e [ 186.325941][ T9724] RDX: 000000000000fe54 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 186.325948][ T9724] RBP: 00007f7d6de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 186.325955][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.325961][ T9724] R13: 00007f7d6e016038 R14: 00007f7d6e015fa0 R15: 00007fff2aab9868 [ 186.325972][ T9724] [ 186.325980][ T9724] BUG: Bad page state in process syz.3.1052 pfn:2aba1 [ 186.611582][ T9724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802aba1b00 pfn:0x2aba1 [ 186.621768][ T9724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 186.628903][ T9724] page_type: f9(unknown) [ 186.633134][ T9724] raw: 00fff00000000000 0000000000000000 ffff88801af0c000 0000000000000000 [ 186.641736][ T9724] raw: ffff88802aba1b00 0000000000000001 00000000f9000000 0000000000000000 [ 186.650341][ T9724] page dumped because: page_pool leak [ 186.655698][ T9724] page_owner tracks the page as allocated [ 186.661438][ T9724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9724, tgid 9723 (syz.3.1052), ts 182286281087, free_ts 182268981740 [ 186.678757][ T9724] post_alloc_hook+0x231/0x280 [ 186.683520][ T9724] get_page_from_freelist+0x24ba/0x2540 [ 186.689111][ T9724] __alloc_frozen_pages_noprof+0x18d/0x380 [ 186.695038][ T9724] __alloc_pages_noprof+0x10/0x100 [ 186.700187][ T9724] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 186.705655][ T9724] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 186.711770][ T9724] skb_pp_cow_data+0xc91/0x19b0 [ 186.716630][ T9724] do_xdp_generic+0x76b/0x12e0 [ 186.721459][ T9724] tun_get_user+0x24ca/0x43e0 [ 186.726147][ T9724] tun_chr_write_iter+0x113/0x200 [ 186.731238][ T9724] vfs_write+0x61d/0xb90 [ 186.735517][ T9724] ksys_write+0x150/0x270 [ 186.739887][ T9724] do_syscall_64+0x15f/0xf80 [ 186.744492][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.750425][ T9724] page last free pid 23 tgid 23 stack trace: [ 186.756409][ T9724] __free_frozen_pages+0xbc7/0xd30 [ 186.762016][ T9724] tlb_remove_table_rcu+0x85/0x100 [ 186.768098][ T9724] rcu_core+0x7cd/0x1070 [ 186.772484][ T9724] handle_softirqs+0x22a/0x840 [ 186.777261][ T9724] run_ksoftirqd+0x36/0x60 [ 186.781708][ T9724] smpboot_thread_fn+0x541/0xa50 [ 186.786654][ T9724] kthread+0x388/0x470 [ 186.790747][ T9724] ret_from_fork+0x514/0xb70 [ 186.795341][ T9724] ret_from_fork_asm+0x1a/0x30 [ 186.800176][ T9724] Modules linked in: [ 186.804080][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.3.1052 Tainted: G B syzkaller #0 PREEMPT(full) [ 186.804099][ T9724] Tainted: [B]=BAD_PAGE [ 186.804103][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.804110][ T9724] Call Trace: [ 186.804116][ T9724] [ 186.804121][ T9724] dump_stack_lvl+0xe8/0x150 [ 186.804143][ T9724] bad_page+0x17f/0x1c0 [ 186.804157][ T9724] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 186.804184][ T9724] bpf_xdp_adjust_tail+0x1d6/0x220 [ 186.804198][ T9724] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 186.804208][ T9724] bpf_prog_run_generic_xdp+0x603/0x1490 [ 186.804234][ T9724] do_xdp_generic+0xac5/0x12e0 [ 186.804260][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 186.804285][ T9724] ? __pfx_do_xdp_generic+0x10/0x10 [ 186.804311][ T9724] ? tun_get_user+0x2394/0x43e0 [ 186.804327][ T9724] ? tun_get_user+0x2394/0x43e0 [ 186.804339][ T9724] tun_get_user+0x24ca/0x43e0 [ 186.804361][ T9724] ? aa_file_perm+0x192/0x15e0 [ 186.804377][ T9724] ? aa_file_perm+0x50e/0x15e0 [ 186.804392][ T9724] ? __pfx_tun_get_user+0x10/0x10 [ 186.804405][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 186.804416][ T9724] ? preempt_schedule_thunk+0x16/0x30 [ 186.804431][ T9724] ? preempt_schedule_common+0x82/0xd0 [ 186.804446][ T9724] ? ref_tracker_alloc+0x35c/0x4c0 [ 186.804460][ T9724] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.804474][ T9724] ? tun_get+0x1c/0x2f0 [ 186.804485][ T9724] ? tun_get+0x1c/0x2f0 [ 186.804498][ T9724] ? tun_get+0x1c/0x2f0 [ 186.804509][ T9724] ? tun_get+0x1c/0x2f0 [ 186.804521][ T9724] tun_chr_write_iter+0x113/0x200 [ 186.804534][ T9724] vfs_write+0x61d/0xb90 [ 186.804550][ T9724] ? __pfx_vfs_write+0x10/0x10 [ 186.804564][ T9724] ? __pfx_do_futex+0x10/0x10 [ 186.804579][ T9724] ksys_write+0x150/0x270 [ 186.804594][ T9724] ? __pfx_ksys_write+0x10/0x10 [ 186.804610][ T9724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.804620][ T9724] do_syscall_64+0x15f/0xf80 [ 186.804633][ T9724] ? trace_irq_disable+0x3b/0x140 [ 186.804649][ T9724] ? clear_bhb_loop+0x40/0x90 [ 186.804660][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.804671][ T9724] RIP: 0033:0x7f7d6dd5d60e [ 186.804681][ T9724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.804690][ T9724] RSP: 002b:00007f7d6ebeefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.804702][ T9724] RAX: ffffffffffffffda RBX: 00007f7d6ebef6c0 RCX: 00007f7d6dd5d60e [ 186.804710][ T9724] RDX: 000000000000fe54 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 186.804717][ T9724] RBP: 00007f7d6de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 186.804724][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.804730][ T9724] R13: 00007f7d6e016038 R14: 00007f7d6e015fa0 R15: 00007fff2aab9868 [ 186.804740][ T9724] [ 186.804747][ T9724] BUG: Bad page state in process syz.3.1052 pfn:207b7 [ 187.090552][ T9724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x207b7 [ 187.099332][ T9724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 187.106443][ T9724] page_type: f9(unknown) [ 187.110718][ T9724] raw: 00fff00000000000 0000000000000000 ffff88801af0c000 0000000000000000 [ 187.119328][ T9724] raw: 0000000000000000 0000000000000001 00000000f9000000 0000000000000000 [ 187.127955][ T9724] page dumped because: page_pool leak [ 187.133335][ T9724] page_owner tracks the page as allocated [ 187.139082][ T9724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9724, tgid 9723 (syz.3.1052), ts 182286264803, free_ts 182269005655 [ 187.156139][ T9724] post_alloc_hook+0x231/0x280 [ 187.160953][ T9724] get_page_from_freelist+0x24ba/0x2540 [ 187.166530][ T9724] __alloc_frozen_pages_noprof+0x18d/0x380 [ 187.172426][ T9724] __alloc_pages_noprof+0x10/0x100 [ 187.177599][ T9724] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 187.183523][ T9724] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 187.189689][ T9724] skb_pp_cow_data+0xc91/0x19b0 [ 187.194555][ T9724] do_xdp_generic+0x76b/0x12e0 [ 187.199350][ T9724] tun_get_user+0x24ca/0x43e0 [ 187.204034][ T9724] tun_chr_write_iter+0x113/0x200 [ 187.209101][ T9724] vfs_write+0x61d/0xb90 [ 187.213350][ T9724] ksys_write+0x150/0x270 [ 187.217700][ T9724] do_syscall_64+0x15f/0xf80 [ 187.222297][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.228233][ T9724] page last free pid 23 tgid 23 stack trace: [ 187.234208][ T9724] __free_frozen_pages+0xbc7/0xd30 [ 187.239354][ T9724] tlb_remove_table_rcu+0x85/0x100 [ 187.244479][ T9724] rcu_core+0x7cd/0x1070 [ 187.248741][ T9724] handle_softirqs+0x22a/0x840 [ 187.253509][ T9724] run_ksoftirqd+0x36/0x60 [ 187.257955][ T9724] smpboot_thread_fn+0x541/0xa50 [ 187.262899][ T9724] kthread+0x388/0x470 [ 187.266955][ T9724] ret_from_fork+0x514/0xb70 [ 187.271574][ T9724] ret_from_fork_asm+0x1a/0x30 [ 187.276361][ T9724] Modules linked in: [ 187.280304][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.3.1052 Tainted: G B syzkaller #0 PREEMPT(full) [ 187.280329][ T9724] Tainted: [B]=BAD_PAGE [ 187.280334][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 187.280344][ T9724] Call Trace: [ 187.280350][ T9724] [ 187.280357][ T9724] dump_stack_lvl+0xe8/0x150 [ 187.280380][ T9724] bad_page+0x17f/0x1c0 [ 187.280403][ T9724] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 187.280437][ T9724] bpf_xdp_adjust_tail+0x1d6/0x220 [ 187.280461][ T9724] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 187.280477][ T9724] bpf_prog_run_generic_xdp+0x603/0x1490 [ 187.280520][ T9724] do_xdp_generic+0xac5/0x12e0 [ 187.280549][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 187.280576][ T9724] ? __pfx_do_xdp_generic+0x10/0x10 [ 187.280606][ T9724] ? tun_get_user+0x2394/0x43e0 [ 187.280631][ T9724] ? tun_get_user+0x2394/0x43e0 [ 187.280652][ T9724] tun_get_user+0x24ca/0x43e0 [ 187.280681][ T9724] ? aa_file_perm+0x192/0x15e0 [ 187.280709][ T9724] ? aa_file_perm+0x50e/0x15e0 [ 187.280732][ T9724] ? __pfx_tun_get_user+0x10/0x10 [ 187.280752][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 187.280772][ T9724] ? preempt_schedule_thunk+0x16/0x30 [ 187.280800][ T9724] ? preempt_schedule_common+0x82/0xd0 [ 187.280824][ T9724] ? ref_tracker_alloc+0x35c/0x4c0 [ 187.280850][ T9724] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 187.280876][ T9724] ? tun_get+0x1c/0x2f0 [ 187.280896][ T9724] ? tun_get+0x1c/0x2f0 [ 187.280920][ T9724] ? tun_get+0x1c/0x2f0 [ 187.280940][ T9724] ? tun_get+0x1c/0x2f0 [ 187.280962][ T9724] tun_chr_write_iter+0x113/0x200 [ 187.280986][ T9724] vfs_write+0x61d/0xb90 [ 187.281017][ T9724] ? __pfx_vfs_write+0x10/0x10 [ 187.281043][ T9724] ? __pfx_do_futex+0x10/0x10 [ 187.281079][ T9724] ksys_write+0x150/0x270 [ 187.281113][ T9724] ? __pfx_ksys_write+0x10/0x10 [ 187.281143][ T9724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.281163][ T9724] do_syscall_64+0x15f/0xf80 [ 187.281186][ T9724] ? trace_irq_disable+0x3b/0x140 [ 187.281215][ T9724] ? clear_bhb_loop+0x40/0x90 [ 187.281236][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.281255][ T9724] RIP: 0033:0x7f7d6dd5d60e [ 187.281272][ T9724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 187.281290][ T9724] RSP: 002b:00007f7d6ebeefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.281310][ T9724] RAX: ffffffffffffffda RBX: 00007f7d6ebef6c0 RCX: 00007f7d6dd5d60e [ 187.281325][ T9724] RDX: 000000000000fe54 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 187.281338][ T9724] RBP: 00007f7d6de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 187.281350][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.281361][ T9724] R13: 00007f7d6e016038 R14: 00007f7d6e015fa0 R15: 00007fff2aab9868 [ 187.281382][ T9724] [ 187.281393][ T9724] BUG: Bad page state in process syz.3.1052 pfn:207b6 [ 187.568119][ T9724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x207b6 [ 187.576894][ T9724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 187.584055][ T9724] page_type: f9(unknown) [ 187.588346][ T9724] raw: 00fff00000000000 0000000000000000 ffff88801af0c000 0000000000000000 [ 187.596937][ T9724] raw: 0000000000000000 0000000000000001 00000000f9000000 0000000000000000 [ 187.605568][ T9724] page dumped because: page_pool leak [ 187.610961][ T9724] page_owner tracks the page as allocated [ 187.616755][ T9724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9724, tgid 9723 (syz.3.1052), ts 182286248246, free_ts 182269031708 [ 187.633793][ T9724] post_alloc_hook+0x231/0x280 [ 187.638620][ T9724] get_page_from_freelist+0x24ba/0x2540 [ 187.644166][ T9724] __alloc_frozen_pages_noprof+0x18d/0x380 [ 187.649998][ T9724] __alloc_pages_noprof+0x10/0x100 [ 187.655128][ T9724] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 187.660640][ T9724] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 187.666718][ T9724] skb_pp_cow_data+0xc91/0x19b0 [ 187.671603][ T9724] do_xdp_generic+0x76b/0x12e0 [ 187.676380][ T9724] tun_get_user+0x24ca/0x43e0 [ 187.681141][ T9724] tun_chr_write_iter+0x113/0x200 [ 187.686175][ T9724] vfs_write+0x61d/0xb90 [ 187.690447][ T9724] ksys_write+0x150/0x270 [ 187.694782][ T9724] do_syscall_64+0x15f/0xf80 [ 187.699392][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.705284][ T9724] page last free pid 23 tgid 23 stack trace: [ 187.711278][ T9724] __free_frozen_pages+0xbc7/0xd30 [ 187.716405][ T9724] tlb_remove_table_rcu+0x85/0x100 [ 187.721552][ T9724] rcu_core+0x7cd/0x1070 [ 187.725799][ T9724] handle_softirqs+0x22a/0x840 [ 187.730613][ T9724] run_ksoftirqd+0x36/0x60 [ 187.735041][ T9724] smpboot_thread_fn+0x541/0xa50 [ 187.740015][ T9724] kthread+0x388/0x470 [ 187.744100][ T9724] ret_from_fork+0x514/0xb70 [ 187.748723][ T9724] ret_from_fork_asm+0x1a/0x30 [ 187.753492][ T9724] Modules linked in: [ 187.757378][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.3.1052 Tainted: G B syzkaller #0 PREEMPT(full) [ 187.757394][ T9724] Tainted: [B]=BAD_PAGE [ 187.757398][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 187.757405][ T9724] Call Trace: [ 187.757410][ T9724] [ 187.757415][ T9724] dump_stack_lvl+0xe8/0x150 [ 187.757429][ T9724] bad_page+0x17f/0x1c0 [ 187.757443][ T9724] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 187.757470][ T9724] bpf_xdp_adjust_tail+0x1d6/0x220 [ 187.757493][ T9724] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 187.757510][ T9724] bpf_prog_run_generic_xdp+0x603/0x1490 [ 187.757545][ T9724] do_xdp_generic+0xac5/0x12e0 [ 187.757568][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 187.757593][ T9724] ? __pfx_do_xdp_generic+0x10/0x10 [ 187.757625][ T9724] ? tun_get_user+0x2394/0x43e0 [ 187.757654][ T9724] ? tun_get_user+0x2394/0x43e0 [ 187.757673][ T9724] tun_get_user+0x24ca/0x43e0 [ 187.757699][ T9724] ? aa_file_perm+0x192/0x15e0 [ 187.757725][ T9724] ? aa_file_perm+0x50e/0x15e0 [ 187.757747][ T9724] ? __pfx_tun_get_user+0x10/0x10 [ 187.757771][ T9724] ? __lock_acquire+0x6b5/0x2cf0 [ 187.757790][ T9724] ? preempt_schedule_thunk+0x16/0x30 [ 187.757818][ T9724] ? preempt_schedule_common+0x82/0xd0 [ 187.757843][ T9724] ? ref_tracker_alloc+0x35c/0x4c0 [ 187.757870][ T9724] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 187.757897][ T9724] ? tun_get+0x1c/0x2f0 [ 187.757917][ T9724] ? tun_get+0x1c/0x2f0 [ 187.757941][ T9724] ? tun_get+0x1c/0x2f0 [ 187.757961][ T9724] ? tun_get+0x1c/0x2f0 [ 187.757984][ T9724] tun_chr_write_iter+0x113/0x200 [ 187.758008][ T9724] vfs_write+0x61d/0xb90 [ 187.758038][ T9724] ? __pfx_vfs_write+0x10/0x10 [ 187.758075][ T9724] ? __pfx_do_futex+0x10/0x10 [ 187.758104][ T9724] ksys_write+0x150/0x270 [ 187.758132][ T9724] ? __pfx_ksys_write+0x10/0x10 [ 187.758161][ T9724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.758181][ T9724] do_syscall_64+0x15f/0xf80 [ 187.758205][ T9724] ? trace_irq_disable+0x3b/0x140 [ 187.758232][ T9724] ? clear_bhb_loop+0x40/0x90 [ 187.758255][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.758274][ T9724] RIP: 0033:0x7f7d6dd5d60e [ 187.758292][ T9724] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 187.758310][ T9724] RSP: 002b:00007f7d6ebeefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.758330][ T9724] RAX: ffffffffffffffda RBX: 00007f7d6ebef6c0 RCX: 00007f7d6dd5d60e [ 187.758344][ T9724] RDX: 000000000000fe54 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 187.758357][ T9724] RBP: 00007f7d6de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 187.758370][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.758383][ T9724] R13: 00007f7d6e016038 R14: 00007f7d6e015fa0 R15: 00007fff2aab9868 [ 187.758405][ T9724] [ 188.040422][ T5735] tipc: Node number set to 10463914 [ 191.047746][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!