last executing test programs:

7.543068245s ago: executing program 1 (id=280):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@local, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in6=@local, 0x0, 0x2b}, 0x2, @in=@remote, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
syz_emit_ethernet(0x131, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r6, &(0x7f0000000600)={@val={0x0, 0x6006}, @val={0x1, 0x5, 0x7, 0x3, 0x80, 0x6}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x61, 0x11, 0xff, @rand_addr=' \x01\x00', @empty, {[@dstopts={0x89, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}], {0x4e24, 0x4e21, 0x41, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e061359aa17cb64066f5893cc6e2a2b2cbc158f3cf666fd"}}}}}, 0x97)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYRESOCT], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008005e00000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180), 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={<r11=>0x0, 0x6}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={r11, 0xf, 0x3, [0x2, 0x9, 0x6]}, &(0x7f00000000c0)=0xe)

6.12058943s ago: executing program 1 (id=292):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x2, 0x10001)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f1, 0x6}, {0x10007, 0x30000083}]}})
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000100))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000000)=0x4, 0x4)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r7})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001a0001000000000000000000810000000fffe7000000000014000200fc02000000d90000000000000000000014001100"], 0x58}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r8, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x4004850)

4.331368592s ago: executing program 1 (id=300):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0x7}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0xec0, 0x0, 0x200448d3}, 0x0)

4.132056478s ago: executing program 1 (id=303):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="f6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001300)='}', 0x1}], 0x1, &(0x7f0000002580)=ANY=[@ANYBLOB], 0x10}}], 0x2, 0x4044805)

3.894971342s ago: executing program 1 (id=306):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x10, 0x0, &(0x7f00000004c0))
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000080007b9af8ff00000000d6090000002000007baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608ffff010000008500000005010000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum, 0x0, @desc3})

3.581872398s ago: executing program 1 (id=308):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@deltaction={0x4c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x20048844)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000980)={&(0x7f0000000680)="439e4ac65dd3b2468354f3b05dbedc98fe207cc92b42f3290334013e39aa0496a42cdbd75586c80f68dc7662290d04acc67485cc2c14c2243c109408c887eace0dde8039b98b190a604f31386e0f4219750b48d290c5acd572c85ea91090873ea0fd5b45ccdf47806380e2e7bc79218d3cc61d2224bc0c08f635b1767d06d4bb81ef3926e2c62273df051d60d7935ba43acdd48a0821816d40cab905cb375f1fc9a6026c94d3a872192789e68164d8e171e726850f72e7cba6f4915861", &(0x7f0000000740)=""/93, &(0x7f00000007c0)="0ba718dca242c04010840e446bca803d26e38fed0e28257642dee76497ca60200bff77cc8cc5046f85386f6ee6a2605ce9c9a92fbcb1d2f982269cb8254afa8c133fea3fc36fb01412b15fe42feb5dae5caeff045f5110ed025cd990e58b26e78773b375c15879ce52113cb46d4ab8258f686fcae8f7e53504a54ecc65ee0b8237ffd4c81b", &(0x7f0000000880), 0x2, r5}, 0x38)
r6 = accept(r3, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
writev(r4, &(0x7f0000002640)=[{&(0x7f00000001c0)="80", 0x1}], 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$tun(0xffffffffffffffff, 0x0, 0x2e)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r7, &(0x7f0000000940), &(0x7f00000002c0)=@tcp6=r6}, 0x20)
recvmmsg$unix(r6, &(0x7f0000000c40), 0x40002ce, 0x80, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000206010800000000000000000700000005005000078008001240000000011800018014000240ff02000000000000000000000000000108001740000002800800014000000000050003000800000005000300030000000800d4400000dfe905000500070000000e0003006269746d61703a6970000000000000000000000000000000000012b55a429f0247d5a9cdc83fd947aee5b0df7ee31dce53f90d301dc2af0774fb0abe663686fc097f7ae33b3e54"], 0x8c}}, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f0000000400)={{0x142, 0xffff}, 0x100, './file0\x00'})
r9 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000ed03014000000000000000000000000a14000000fa03"], 0x28}}, 0x0)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="90000001", @ANYRES16=r10, @ANYBLOB="000427bd7000fcdbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00ff03000006001100f8ff00000800150001000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000700000006001100020000000800150055020000"], 0x90}, 0x1, 0x0, 0x0, 0x4080}, 0x4001)

3.494467431s ago: executing program 0 (id=310):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffff1f, 0x70bd25, 0x1, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x7fff}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xd26}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffff1f, 0x70bd25, 0x1, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x7fff}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xd26}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xb, 0xfffff038}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10)
sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) (async)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r4, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf25050000000c0010000001000000000000ac98f62fbe1eca9bae15a0f92f8b8dce01"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf25050000000c0010000001000000000000ac98f62fbe1eca9bae15a0f92f8b8dce01"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
socket$kcm(0x21, 0x2, 0xa) (async)
r5 = socket$kcm(0x21, 0x2, 0xa)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xeb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r9=>0x0})
sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x10000000) (async)
sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x10000000)
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4090)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "aa"}], 0x30}, 0xfc40)
r10 = accept(r4, 0x0, 0x0)
setsockopt$sock_timeval(r10, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r10}, 0x20)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8)
sendmsg$NL80211_CMD_SET_MAC_ACL(r12, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd4, r13, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20004001}, 0x804)
recvmsg$can_bcm(r10, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
recvmsg$can_bcm(r10, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060)
recvfrom$l2tp(r10, &(0x7f0000000000)=""/34, 0x22, 0x40000000, &(0x7f00000000c0), 0x10) (async)
recvfrom$l2tp(r10, &(0x7f0000000000)=""/34, 0x22, 0x40000000, &(0x7f00000000c0), 0x10)

3.263492225s ago: executing program 2 (id=313):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x48000}, 0x20004880)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={<r3=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10)
getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001140)={<r4=>r2, 0x3, 0x100000001, 0x100000000000})
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000010c0)={r3}, &(0x7f0000001100)=0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)={{0x14}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x50}}, 0x0)

3.092988018s ago: executing program 0 (id=315):
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1800}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
r5 = getuid()
sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x2d, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@generic="4ce901c3aa8f9722", @typed={0x4, 0xca}, @typed={0x8, 0x2d, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xad, 0x0, 0x0, @ipv4=@broadcast}, @generic="da1cb5ca2f58fd763fb39ba7182efba892a322e4ee97f613d44fa3502a53101261228de7329667e95dbf620f382618b491"]}, 0x64}, 0x1, 0x0, 0x0, 0x1000c104}, 0x4008081)
sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x8bbd, @remote}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="6f1723d7c620", 0x6}, {&(0x7f0000000180)="9e91d93a92dc7ca9ff65cb9cbaf05eb539e2a1485d4c9223a7dfe541f5a6add10000", 0x22}], 0x2}, 0x20000000)

3.091098549s ago: executing program 4 (id=316):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="f6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001300)='}', 0x1}], 0x1, &(0x7f0000002580)=ANY=[@ANYBLOB], 0x10}}], 0x2, 0x4044805)

2.893040091s ago: executing program 3 (id=317):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
socket$key(0xf, 0x3, 0x2)
r3 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@local, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in6=@local, 0x0, 0x2b}, 0x2, @in=@remote, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
syz_emit_ethernet(0x131, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r6, &(0x7f0000000600)={@val={0x0, 0x6006}, @val={0x1, 0x5, 0x7, 0x3, 0x80, 0x6}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x61, 0x11, 0xff, @rand_addr=' \x01\x00', @empty, {[@dstopts={0x89, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}], {0x4e24, 0x4e21, 0x41, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e061359aa17cb64066f5893cc6e2a2b2cbc158f3cf666fd"}}}}}, 0x97)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYRESOCT], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008005e00000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180), 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={<r11=>0x0, 0x6}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={r11, 0xf, 0x3, [0x2, 0x9, 0x6]}, &(0x7f00000000c0)=0xe)

2.876570883s ago: executing program 4 (id=318):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x2, 0x80805, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={r3, 0xfffb}, 0x8) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x41100}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
ioctl(r0, 0x8b2a, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0)

2.62503437s ago: executing program 2 (id=319):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r1}, 0xc)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xb4}}, 0x40000)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x9, 0x0, 0xff, 0x0, 0x0, 0x2000000, 0x800000, 0x2}})
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_opts(r4, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @empty, 0x4e24, 0x0, 'sed\x00', 0x5, 0x3, 0x49}, 0x2c)

2.606728776s ago: executing program 0 (id=320):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket(0x11, 0x2, 0x0)
setsockopt(r3, 0x107, 0x1, &(0x7f0000000000), 0x0)
close(0x3)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8)
r4 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$XFS_IOC_SWAPEXT(r2, 0xc0c0586d, &(0x7f0000000280)={0x0, r2, r4, 0x5, 0xf, '\x00', {0xffffffff, 0x7, 0x8, 0x8, 0xabb4, 0xb3d1, 0x5, 0x7, {0xfffffffffffffffd, 0x40}, {0x4, 0x5}, {0x6, 0x1}, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffe, 0x7, 0x9, 0x7f, 0x4, 0x0, 0xb, '\x00', 0x80, 0x5, 0x40, 0x9a}})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r6, 0x29, 0xc8, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
syz_emit_ethernet(0x429, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x100, 0x2, 0x2, 0x0, 0x7f, 0x6}, 0x20)
write$tun(r2, &(0x7f0000000200)={@val={0xa, 0xb3f0}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x4, 0x200, 0x2000004, 0x54}}}}}}}, 0x4a)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000140), 0x4)
connect$inet(r9, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)

2.536153828s ago: executing program 3 (id=321):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
unshare(0x2020600)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @none, 0xf, 0x1}, 0xe)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
socket$unix(0x1, 0x2, 0x0) (async)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000200)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYRES64=r2, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0)
accept4(r1, 0x0, 0x0, 0x80000) (async)
r5 = accept4(r1, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}], 0x1, 0xfdef)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x22020600)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0xffffffffffffffa5}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0xffffffffffffffa5}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r6}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x2}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x2}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94)

2.359184142s ago: executing program 2 (id=322):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@deltaction={0x0, 0x31, 0x708, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x72}}, {0x0, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ife\x00'}}, {0x0, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}, {0x0, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}, {0x0, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x6d}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}, {0x0, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x80}}, {0x0, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1}}, {0x0, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}, {0x0, 0x1, 0x0, 0x0, @TCA_ACT_INDEX}, {0x0, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}, {0x0, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'xt\x00'}}]}]}, 0x6c}}, 0x20048895)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
r5 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x4, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x8, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0xffff, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x2, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x2, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x0, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x1, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x0, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x0, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0x2ed, 0x7ff, 0xd83, 0x1, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r9 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@getpolicy={0x138, 0x15, 0x200, 0x70bd2b, 0x25dfdbfe, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x1ff, 0x4e22, 0x4, 0x2, 0x20, 0x80, 0x5c, r8, r9}}, [@offload={0xc, 0x1c, {r3, 0x2}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9}, @replay_thresh={0x8, 0xb, 0x1}, @algo_auth_trunc={0xbc, 0x14, {{'sha3-512-generic\x00'}, 0x380, 0x60, "2bad459f73c45b08e0552eb253e4629e5370025ff81328786dcdae86963df6e449a1f028aa07335062e413632aa6f3fc5e1845f1f8cf4915535da80b871be9ce22d497d09ca2a814705a5f3b82fe07982be8dd89cd4ecb9e234e7a916dfc2e943bfbb7f3a826e1ae4823e2f6dee766d6"}}, @extra_flags={0x8, 0x18, 0x2}, @tfcpad={0x8, 0x16, 0x1}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000800}, 0x80)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@deltaction={0x0, 0x31, 0x708, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x72}}, {0x0, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ife\x00'}}, {0x0, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}, {0x0, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}, {0x0, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x6d}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}, {0x0, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x80}}, {0x0, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1}}, {0x0, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}, {0x0, 0x1, 0x0, 0x0, @TCA_ACT_INDEX}, {0x0, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}, {0x0, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'xt\x00'}}]}]}, 0x6c}}, 0x20048895) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
listen(r4, 0x0) (async)
accept(r4, 0x0, 0x0) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x4, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x8, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0xffff, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x2, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x2, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x0, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x1, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x0, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x0, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0x2ed, 0x7ff, 0xd83, 0x1, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async)
getuid() (async)
sendmsg$nl_xfrm(r5, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@getpolicy={0x138, 0x15, 0x200, 0x70bd2b, 0x25dfdbfe, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x1ff, 0x4e22, 0x4, 0x2, 0x20, 0x80, 0x5c, r8, r9}}, [@offload={0xc, 0x1c, {r3, 0x2}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9}, @replay_thresh={0x8, 0xb, 0x1}, @algo_auth_trunc={0xbc, 0x14, {{'sha3-512-generic\x00'}, 0x380, 0x60, "2bad459f73c45b08e0552eb253e4629e5370025ff81328786dcdae86963df6e449a1f028aa07335062e413632aa6f3fc5e1845f1f8cf4915535da80b871be9ce22d497d09ca2a814705a5f3b82fe07982be8dd89cd4ecb9e234e7a916dfc2e943bfbb7f3a826e1ae4823e2f6dee766d6"}}, @extra_flags={0x8, 0x18, 0x2}, @tfcpad={0x8, 0x16, 0x1}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) (async)

2.212812572s ago: executing program 3 (id=323):
r0 = socket$nl_route(0x10, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0xa000200e})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x4}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0)
pipe(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x8032, 0xffffffffffffffff, 0x8884d000)
unshare(0x8000400)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, 0x0, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r1, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000340), 0x8)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}, 0x300, 0x0, 0x0, 0x8880}, 0x85)

2.052133431s ago: executing program 2 (id=324):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x10}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x23}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
close(r5)
r6 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'team0\x00'})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x20000004})
ppoll(&(0x7f0000000180)=[{}, {r6, 0x4}, {r8, 0x1c}], 0x3, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
sendmmsg$inet(r4, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000540)="a3", 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="1084"], 0x10}}], 0x1, 0x4004810)

1.940303618s ago: executing program 0 (id=325):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0x3, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x24, 0x0, &(0x7f0000000080)="049a53f271a76d2688a24c6588a8f0035f7a6fb19bb57501b59c391a67fb8a552af06ae2", 0x0, 0x40000004, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r3, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000140)='e', 0x1}], 0x1}}], 0x1, 0x4000)
shutdown(r3, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000380)=ANY=[@ANYBLOB='a *:'], 0xa)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x84a, 0x2021}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x4)

1.837463709s ago: executing program 4 (id=326):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd2a, 0x25dfdbfb, {0x80, 0x20, 0x80, 0xf7, 0x0, 0x4, 0x0, 0x0, 0x800}, ["", "", ""]}, 0x1c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001000000ff7f0000000080"], 0x24}}, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
unshare(0xe050e80)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e20, 0x8000, @mcast1, 0x5}, @in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0xfffffff2, @empty, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x88)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000840)={{r0}, "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"})
ioctl$F2FS_IOC_GET_FEATURES(r4, 0x5761, 0x0)

1.724357382s ago: executing program 4 (id=327):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), 0xffffffffffffffff)
r2 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10)
write(r2, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x10000008, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fe}, 0x94)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000100), 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000003b80)={0x0, 0x28, &(0x7f0000003b40)={&(0x7f0000000080)={0x14, r5, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x20004804)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r5, 0x813f136e4f25f4cc, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40044)
accept4$alg(r0, 0x0, 0x0, 0x80000)
socket$inet_sctp(0x2, 0x1, 0x84)
close(0xffffffffffffffff)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)

1.005433084s ago: executing program 2 (id=328):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), 0xffffffffffffffff)
r3 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10)
write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x1c, r2, 0x11, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040880)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x50, &(0x7f0000000100), 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000003b80)={0x0, 0x28, &(0x7f0000003b40)={&(0x7f0000000080)={0x14, r6, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x20004804)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r6, 0x813f136e4f25f4cc, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40044)
accept4$alg(r0, 0x0, 0x0, 0x80000)
socket$inet_sctp(0x2, 0x1, 0x84)
close(0xffffffffffffffff)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)

971.199487ms ago: executing program 3 (id=329):
r0 = socket(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20)

908.074123ms ago: executing program 4 (id=330):
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1800}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
r5 = getuid()
sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x2d, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@generic="4ce901c3aa8f9722", @typed={0x4, 0xca}, @typed={0x8, 0x2d, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xad, 0x0, 0x0, @ipv4=@broadcast}, @generic="da1cb5ca2f58fd763fb39ba7182efba892a322e4ee97f613d44fa3502a53101261228de7329667e95dbf620f382618b491"]}, 0x64}, 0x1, 0x0, 0x0, 0x1000c104}, 0x4008081)
sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x8bbd, @remote}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="6f1723d7c620", 0x6}, {&(0x7f0000000180)="9e91d93a92dc7ca9ff65cb9cbaf05eb539e2a1485d4c9223a7dfe541f5a6add10000", 0x22}], 0x2}, 0x20000000)

709.559505ms ago: executing program 3 (id=331):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
socket$key(0xf, 0x3, 0x2)
r3 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@local, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in6=@local, 0x0, 0x2b}, 0x2, @in=@remote, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
syz_emit_ethernet(0x131, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800401a01230067000006029078640101010a010102e0000002640101017f000001ac1414447f000001ac1414aaac1e010101071f4b401414bb7f000001e00000010a0101027f000200000000000000001125283c79d61ce8efe42e1611674cb40202010a323d86319875937794040100440cd003ac1414bb000000048631ffffffff010d498a939fc63b8192da218907083b3e64792de6010b5c1b899dad26a82a96060b016c36a48c658f5b9b01008302001105907864010100d78936f8dada21329797edfd44d8b65b3fbecdb74420c5b00967707233fe25a5cfc2b110280788fdcbcf29bd816f946d182b9ddc0b0f4878391b67442d5040a2d100000b0044c789a3fdd4a84404fb1ffef62b12a9b49844e7b75c34008fd97035e5b67ba9ae945027b6b7583fccddfe604b3962831bf917d992c0fba9cb7d412f05808236f23282c802901b3b4dfde6be251e3e012d5886357447110281fbdd9d1c962e20d0361e0f000000000000"], 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r6, &(0x7f0000000600)={@val={0x0, 0x6006}, @val={0x1, 0x5, 0x7, 0x3, 0x80, 0x6}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x61, 0x11, 0xff, @rand_addr=' \x01\x00', @empty, {[@dstopts={0x89, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}], {0x4e24, 0x4e21, 0x41, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e061359aa17cb64066f5893cc6e2a2b2cbc158f3cf666fd"}}}}}, 0x97)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYRESOCT], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008005e00000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180), 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={<r11=>0x0, 0x6}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={r11, 0xf, 0x3, [0x2, 0x9, 0x6]}, &(0x7f00000000c0)=0xe)

637.390187ms ago: executing program 0 (id=332):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090927bd7000fbdbdf251000000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)

420.466585ms ago: executing program 0 (id=333):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 13)

375.31444ms ago: executing program 4 (id=334):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r2, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30)
syz_emit_ethernet(0xfdef, &(0x7f00000030c0)=ANY=[], 0x0)
close(0x3)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)

336.5298ms ago: executing program 3 (id=335):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newchain={0x3350, 0x64, 0x400, 0x70bd29, 0x2a6999b, {0x0, 0x0, 0x0, r1, {0xfff3, 0xd}, {0x9, 0x4}, {0xffe0, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0xf6}, @TCA_CHAIN={0x8, 0xb, 0x337a7846}, @filter_kind_options=@f_cgroup={{0xb}, {0x1e0, 0x2, [@TCA_CGROUP_EMATCHES={0x1c4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x6}, {0x1, 0xb, 0x9, 0x4, 0x2, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x99f, 0x3, 0x9}, {0x8, 0xfffff358, 0x7, 0x5}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xffff, 0x1, 0x1}, {0x6, 0x9, 0x0, 0x0, 0x4, 0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0xd}, {0xf, 0x1, 0x0, 0x6, 0x5, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x1}, {0x3, 0x9, 0x1, "8bc60613682349d127"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0x8}, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x84, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7fff, 0x7, 0x6}, {{0x2}, {0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xde, 0x3, 0xfff9}, {0xd10, 0x0, 0x495b, 0x20}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xe, 0x7, 0x5}, {{0x3, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x6}, {0x4, 0x6, 0x3}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{}, {0x3, 0x0, 0x5}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x3}, {0xff7f, 0x9, 0x1, "f0c80c12ceefc1e9a7"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x78, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x1000}, {0x5, 0xc12, 0x9, 0x4, 0x9, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xffcb, 0x3, 0x6ab8}, {0x2, 0x8, 0xf, 0x807b}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0xeb1}, {0x9, 0x3330680e, 0x0, 0x5}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x2, 0x9}, {0x9, 0x1, 0x1, "e0"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7fff, 0x8, 0x3ff}, {0x3, 0x3, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5000}}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x3114, 0x2, [@TCA_CGROUP_EMATCHES={0x468, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x98, 0x3, 0x0, 0x0, {{0x7fff, 0x0, 0x4}, "0969223724f4f984bc2c0a62a42df24514168f34998c9a5551b76a319c7192c3661af0109f7e528bb3c758e283367ba0de046b51bf50447d5071483f5deecc400361f659f87075f7f75a9216d984efb79a7afeeeb30d5bf6a923370d17141ce5c630fa3559a84170aff4c71e809d4b7164637fa1f901ab2e5b7013fbf430ee7f6e360916ae43b77de100ec"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x80}, {0xffffffff, 0x2, 0x4, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1400}, {0xc61c, 0xb257, 0x3, 0x8001}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x290, 0x2, 0x0, 0x1, [@TCF_EM_META={0x98, 0x1, 0x0, 0x0, {{0xb}, [@TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="c4", @TCF_META_TYPE_VAR="966cea50c896af601209"]}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="4940c1fb", @TCF_META_TYPE_VAR="bcbf93", @TCF_META_TYPE_VAR="33d50a46"]}, @TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="825d48", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="e2", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="6b8985979306"]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2, 0x2}, {0x4, 0x10}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x3, 0x2}, {0x5, 0x3}}}, @TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_VAR="d5e511", @TCF_META_TYPE_VAR="605d098d", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="dbededb3e7c0486db2", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="210d18e6"]}]}}, @TCF_EM_CONTAINER={0xf0, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7fff}, "a39ac407045a87604e1862d53ec2703d6af2f7f3ddfeacfb4c0e0667d64e51d57557c52514f30a599f9f9cf8416adfea28716c6c762091c7326f8668d661066e65a8bfe846af071ba922e5e693fcc68c46cf4b6c18302d2016e0c4e09ccc3d91f433589959fb8b6652f2fa33a5a79ee1807df2261d6dcb55df5094935e66b42e2653428c2e3318a858f98d6b19837448eed028292430ae09485b1d08c30fe6408135647b0a2d005b69d4ef3639d818cb0b600078a5c8cccfcbf788a4be61d28a3dc81a23ae8049e01388b0f9db1244b82e49a42bf0e70858a2521bc5a7239d0f1f678c"}}, @TCF_EM_META={0x30, 0x2, 0x0, 0x0, {{0x200, 0x4, 0xffff}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x1, 0x2}, {0x8d, 0x8, 0x1}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xd0f0, 0x7, 0x6a}, {{0x3, 0x1, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0xeba}, {0x3d, 0x1, 0x0, 0x8}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0xa3}, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x90, 0x2, 0x0, 0x0, {{0x5, 0x0, 0xe}, "f487ba6a1db6a9b7f9ee04cc5ee38505c18ce882e7601526cdaecd30f99edf1a03c6e4eb1b343bf5205a4503a22ea9bbf8f616ebe804ee138ce649f8a8a9958c2f5eb07fe6e95024bd0c263edc6eb450718b833643c8cfb90761bd65c0336587bd6c771a32c226d47714f5c7f7d32d2f2d39b7d606df27a5aec036203eabfe8172"}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x800}, {{0x4, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x3}, {0x4, 0xcddc, 0x5, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_IPT={0x3c, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xd19, 0x8, 0x5}, {0xffffffffffffffff, 0x6}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xb, 0x3, 0x4}, {0xffff, 0x7, 0x5, 0xa98}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x563}, {0x2, 0x2, 0x2, "57e6"}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x81}, {{0x3, 0x0, 0x0, 0x1}}}}]}]}, @TCA_CGROUP_POLICE={0x14, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x18}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3dd}]}, @TCA_CGROUP_ACT={0x17ac, 0x1, [@m_nat={0x13c, 0x1b, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x80, 0x10000000, 0x9b69, 0x15ed}, @loopback, @dev={0xac, 0x14, 0x14, 0xd}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x2, 0x20000000, 0xd, 0x4}, @broadcast, @private=0xa010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd31, 0xfffffff9, 0x3, 0x3, 0x2}, @loopback, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x3, 0x20000000, 0x3, 0x8}, @empty, @private=0xa010101, 0xffffff00}}]}, {0x73, 0x6, "dbaa5b4aea0fbe9e231e9dd319ca853159a0240965206d0054beda12ce7fcea3a1eb123ab2fb9070c9f49ef4ac7003e04850e85abd53b959e37e70faa527483af286f34a8d5e47d95579e6ce8d0824b5d05c4e7d253b30d4f12ab2a1940932e09bd8cc178155fb790f6ab7420ba80c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x17c, 0x17, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8b3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xf5, 0x4, 0xf, 0x8001}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x0, 0x20000000, 0x63376c27, 0x5a377a9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x188, 0xb, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x101, 0x0, 0x3ff, 0x9}, 0x60}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x3, 0xffffffffffffffff, 0x32a0, 0x2}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4000, 0x80, 0xffffffffffffffff, 0x6, 0x8}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x5, 0x6e, 0x3ff}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x20000000, 0xdb6f, 0x3}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffe00, 0x3, 0x5, 0x8, 0x9f}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x2, 0x0, 0xf}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0xffffffffffffffff, 0x3, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x38, 0xfff, 0x2, 0x4b59}, 0x2}}]}, {0x5c, 0x6, "b2d5a8afdc501728ee8514ee8335c1dd2c39d9f0e4bbea9d7487d4bb9ec5a36ee0ce801cc6392f844397a0107d7e058e3050b95d8b7d9eec4c3db778ef19b3ff2ca3e15ed2af986e8e5603e190af5bd6af694b541f09f6a4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0xa0, 0x13, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0xc59e, 0x8, 0x3, 0x40}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xfb0, 0x4, 0xff, 0xa1}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x7, 0x7ff}, 0x1ff}}]}, {0x19, 0x6, "e526817600efa223fcc3ab4d16ff3e39fb91d22546"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x106c, 0x17, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x2, 0xf6b5, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffc0, 0x174, 0xffffffffffffffff, 0x9, 0x40}, 0x1ff}}]}, {0x1004, 0x6, "4e8bf361ac455f6af56bba4820dadea8ee0540211e3d3ba7b7eead476e86abfb0342e7de04fc6040b5ba2b6686d3cbc2ab60a10ccf3efee4082cc59a4525429d486c278e6dcef22c58c6878053cf38711702a963e33b5c8ba11d3861252588f7a0b2ee08cc703a5ec382c64941aa232891fff22ccecbbe221e0308877c8aa0835ad73ec5b1f2c1df53fcc8627f6db42ab641d5d8c1472e9b5677b2fb004ea59b1103583f1ecd536fdb3dd6fe29c79623c27e4d4edf3ec5e0090acc6b085091bafc0e25cba86ce4d7300a5052ae8319e93bc47fc0a22d738f6a0c2e08cc6f816a0d8580ad8ee79864f3882d9654b1c8532154bf0fff3f6f2163c8b1ffddcb4297d3dc61ee465430248e9fb754a240883606ad5ea3f91ad3b66dd6fc69a3f68947f342244918c23c528aad0e9ae98bbbb87886bd6f3c834d589a05fa789997239a6689ee3f2656db6eb1b7f1a3d61db3bceb8ef37a3f3308ee94ca853c6a03fef0e0aa86bb5b6d701454a3fe425e9eaab5a6d395321fd138fa30b0b2fc28f011fc8326e57d7e4b30c4ecfbf14bdf1bae323c7c694c1f20a3806b3761df64bbc4a4b2b55a6867a2ae4d9a9eb256e1ff94360f6e06dd2be2ddb0aca0d1ba817c28b1a3053f062fbdabbd30601f343944f2fb5f43230af129e2e5c7d22d4d1659d02fe97afe7b517553b900441e91cdf1650498efe0744477030d5bcf89610f89c6d8f7ae47ff4d30a5263e2908a32f0112e8885cd57072782c959f2cd4e2bab6d39cd8763863280370f16140e28dbfd42a1ee3e5e66e6df6e209e15c5f50836f2df3b14f56789bc647058b1bdd378be1b1a270d63156230d2d0236eca633fe69420247dfef9fbf9e9dfd5a4e12a61648abedf621cca4f99714270201ea6cc90a9aadf78db2992f7f11edb45b1738d0f4b2bd5c2532b4bb7d3038f1b195377121b8f79f640bd71b114cfb47f3b7b5af9d2ddba75b183ea4c42e4f6bd300d87b6af734e9fe77d34d6540a13273e91264a4a5b9b196320ed2eee0c9c139e89cbfdac74dd29e09d4fdb30936e18f34adbaca848771bf52c0c28010a930b23f1edf728d7707f12efe4197e6de4b31cdb329a6ad885645fc273d1210af310b9510f3c0bc0ef7ad277ddc56505da0f07f8365d4a00f615736db919b93dafd9049affd413f38a364927455055bd5910ef2b3024cc24f47705e55b70be8abce3d1abb02ce79857ed2c477ab5431bca2ed404874869f48afa583e9b993540bd457b8b69da0909e2f1b6ae56735e99fd5109cd4f885c21333b5fcee1c7cd8acf3afd4b0cff38e18464a64590a97ece1f0e2546c5424dda48592de4a0b2300e1c5cd2f22b8ad8e0d862d1774ab14d882f36a155f76261f9d087e3097a486607052e470110276a028df9614b15902b3cdc4b284c8b76e0d04ca3cea28f5a134756d436f99687f6f373ccc27ba6270ceab48e209201e74a99de60ece5ae01f47937e1ceb4e2f5157518e964b2ce5e9d041105140cf54e6bc1c521bb719a6bf3b172fcd3d95dd3604898960d28850e554931e1c2216a06345d72783d8d6eb5913b6a41b70023dc824bafd8f6fac855c3226d5d6e049bd14b601e1544236f0d8e9d1e877cffbfe472378bee709abed2985b54bb6e5788bc8be7383158ad7dc493fcbfb3461204325787462892d98b4648264c7d1e75f918195ffef77a18767389a22cd961553d69626258474319ee8a9215b2fd873466b639a852e53d1100bc03cda84ded6df6911d4172bbb175f16b67415cb691d4006b533fd4d124bd02f893aa47f5aeaf6e97065ac69d5140539419d7b6825f91e37955a1693550acc7e90c0397f48bb858b15a9929b5ee21cbf21c17a07682e50f2d40a09e8c1a51e1bc5b3917af8edffa91c338fba5bf0b5cdb0f51da7647bf85f62bd7549dc209508618f85465e3b02892dda4dc85682196ed2375fe871ce99a8ea517bfffab6adbe960c63326ae6d30a7923aeae09d11f8d413589c267fb35cf9e5785cff5c39a46800482469465e2b9ca0062d7158ae0dd371ed1daeee8636c0674c0e4c0dfe4a39c0f50a1e28ce92d0b0613d1b3ef4ddb99f53c100dde89da76ded6ca075eeb323db4f5b2e88e10e6fb02caa199383946f56012eb21b2cf642c2407cc28aa34dcef6268c5a01aec3394ce7a48b16b56671b6b2a86d4c73e1bc714eb3e48201f283a2363489847b2ccc6a3e143aacab5e15612b3a395a732abaab3b211ccf586a22091135e777a31c693fde9a0fc72ff20ce937844ffc1a56db620fecca483e5560125636117fee377cf99fa4170968205d60cd768507f597632cbc05c97b06339b565b67cd3bffeeb003ce0124b279b968fd81cb472393ab9c79675c9662278dfc859655700fdd86bd328e0e5a27e13809b14239f68ab0645ffa128e5b0ec7539f1eec3ed4af0252c91c07250546d6541d5c3e527812c4afee40ce76814eae025c56bddb4df09dcd1feee9dbdd3b34b15b7f2ffac976019d8a46f85e02b71158285c15c474d41f6f5dda08691f9c05e985f532a39acffac6dc893bdf2ea38d38e013e38c19c289ed541ec985f70e708c84a95523bbcdeb215674bd23515bad6761d3097917a7411437fc2de6d292b0c3d17365d7d7cb780e7fa904afbebcca1895b7212d32ef6aa15d3628ad4e0a9bd27f37c8e885a353679d2e52d4f4b3d1413c6108b2023d50a6f20c5661f3eb37084fa2f6c1eab23b2d3f50924a1b76942614a205314a271e356ed5651d0b91bef29d4e600cad2f85d3b284871bd0637867510205b81da6b3434204c6a7f68c95a477151d634bbe498107d0cc06d06012bfc4d39f54f0d5436c42292baf0393477215b4f2d45af14d87b2884be93806ef9cc1a3a399412791ae4d907479b6a0c4f4ca1579b4a2fb0aefc6a9d854771de64fba8b0f40cc6962db773dc6570e137146c843e4e469f260214b418b7a0be5c19457c40473bc9ccc4ae1831ec6b6e4e01ccd62f1cb8444ad83d68878e06185d08fba07ffbfd9768eb14b574d9fb674134bdf486f9e79a6d11722abea1d2f4ffd2f74a57c526cf0c02fc1db428d71a011e6a2679b420c85580b522d2d73214c55691160d8ee499dcea45d0dfa92013b68911f5c26553d648df9977eb23f5549e72f04e374718c9b6702cd4228ae253893d5d81e788ab0034e167ffe1a8022fcb0310ad28cdaaf4bacf984c5d1f0b95a298bbd46aee6789480efe5a975b2013b213407ac1a72e438880aca4096a601194ee95e13dd9a24019bf198502ecf788e046403a6444e63b54dd3fbdddeed9b4d72039bf8dd77638109511c35b44795ac15ddad762f22e4f7cf7010251d58a530972d1387cedde9be3a5691d9e1218dd83d1868d327669f93a3fb5deee1988c676f6674ecab9a8fd44d6b4a87266c3343ad035fc2d47950f3942535fc21e12b9fdc81d8c9c92810582226948f0e93e92f0773b9bbd0b2f95d99800770040005e20026ec7738a0a9c19c4e4d61adb94edb53fe58308959349805db2fc02c0039f12c5666ddcc0a24eff3043110272d61f689c036e0d08ab800ba4022d6600e6b5a050fd3f194778cea68ec5a270ffd675d704e2db287f90d96c9ffc55ab68143c02dbe8267b8b7a27a0c3a8f515c670989809ffb53cbeb40d744ddf66f08155c1e327b791119900cad3645a4b7e4bf4dbe0d36e73b5dde5cb6fd4b7a47e4c7eaed2e3b92a05a7a24328f82085c1e456f84dd68c0b7211ff58b5c77f7064397c242ccf72de287da61aa737aa5363368b672a729f1743d67f3e2afb4a900ee348fb48a654744a74e6bc124df66b1662dc6fd343445dd4d75b4dc9303a9b355b578c93bc4e6bb77550796d1600870607585e671ca2edc3702273872e7958b01642d62173346b7def30005af387709ed4b40372090fbd320290af50fc4df73ad98cd73ed3c27d222ed00001c0c7d4049914ac0c31660acefde055b8ec5ea44b91138dffe9f9a5417b55d9b90617e878a1bdb3aff32a206e93553097cc98cb7ff71af9d5f68be73de8bfe9efdc4dc00ef2b120c4f3d4df5fbb8dba9a6cb1b86b89e097749ba8d8611d672dd96e2f4fff9e5f31c1125d7ad133ea2ac3d59c29ef21f6ebe7e2b7c9e514511818ce4d815d5bc25d6a6d0ad7220eb8faf7e6f587413deb628864312defba0f90d33bbfa6d5883e0a58237eb66678c463b313504741a0b6e6e1a47cc14ab2733ff3334dd8ad4e39db5e1a4981e2206e8ab922f5efa18fcdcf55cf6b6ca66b6d674a3bd7ecbf734a7da6576f61b213fe6942ae524a8eb08eb2cb9096ac4fb30712d1b9453de0786c7d4f7a6e7f8851c3a9990137c71504f835ae7af9d995d899f9199cc3797fe07fc8cde46d023ad4c5d6366b0319a87c41cf78156106e011e15461dade9a3e56178396d96499efe969ca8ef109b3c1f5a85270c133ee27d78934495f0e21b741feb89c5777d057f2f6d4ccd5c3dbb814db620da938d8064b5a8bee6ccab1f05fba8ef5e797f4889a21c666f7343d03b21ca58422ff1c7022d98c5f523273d23619cb35f6d7e70ad4857f658bdf3df2543610ed124d835d09bbec5bd399112c989903bc6db0eed24a0b280672a4b2122a7365abd1f872fe883a16c2647658252cf7f842f4e6ae4326aa986394cce5cf076f9224facbbad599cf11b6391969ad6b1f62f510ed6a83ab01d1430c557b993805ff399ee526f5d8cb31c099883ece6e635f515168bd4ab84c212892f5748fc2b6a13c014feaf16ad51fc9bedca1ee5c80b4d988d3940970c03151aed21974cb2e5556585686c8bfea6a8b55c60d4cd5a1b584d7cc01ec072c4221a7045ab3cbcefda196fcb84caccbafdae3bd3c7d75c78a5637caa76b5b7cf25786384aa90a59908481ced5dc488411a2b3b84330b4d3e09959025ed7fedd74f9100a9dfdb2cd8d67decf380471015fed95dadfdc5185f7224a8c1eb748347fc2f7fd8833228381e674379503246323f753f4010dd587ded2b5a81b80b68332fdb8ebb796108e7f5c7421d66953b77ed4223ba16d0e12c7b6a2b032329afc832407805a0a6351000671d1381df7eaf50591e502c9d313641a831fc74764638554b5892acd9c3db82ebcbe0f28b81f965cff7fb5e8d93f5df8ab6301fef0d318cd1c096b517c0f4b446f342348118392eb96ecb391e0487ecfc5d8dfd88b69836bc21ddc12440b50307db062da860145dfe521833b32949ce20e98378d1183021bddfc66b8bf4540a0b73eaab84db0ddcd362076a0c18eef69e81abdbf46131202ab677939d90744a1cc482935613326d40832c2dffc6a6ae5dfaf272bfb46ce34b17092f4b7b393a15b23936a12d422eb8ca9ede8edb078687d68c02f25eaca1b2c91f7b42a7a0c00d1d1193e5a43e2842f2cbeedafdcc476345b2caaeed31c09b4602df5a31effda03260e3bee875856bd18adf2a4670d6eb760a483291ff168a943f82d3c38be3513f51d50827a26e9ca0eaf56c4957fad156b0135d350822b28e54ebd576c6357c466399bcd018a51e785b7d671df045c32dab8cf49e3c79e401186eb97df821cb5ecceb7a4bd2a1df401eb4a75a45da1983afb1a26a729d8d55ab145f2d3d09e31f889a162314cc1f77feac338731ec8734b481b787e018c9f4f9541ce17e448bf6fe27da9b09e67c9b8b44fda8e8b1b6ece343162a355ced862e68eaefa0c00e197fbd4f6aa20b2f2eded07bc4209cb6b028eefe7042ca823d752f8417d35f936534508b4368d7dd36fc2ac880a14660330a9181cce3cf38fcd2971bb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x184, 0x1d, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x0, 0x6, 0x7, 0x81}, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="07f698d39850"}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0xd8, 0xe, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xf, 0x3, 0x20000000, 0x0, 0x9}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x8, 0x4, 0x261, 0x6a}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}]}, {0x43, 0x6, "e81aafe35ec8aea1117ba70ce05b20e82504ba4e418f05052c7460107d44373cdaa8a0fbe974f5573a7cad4b3970b7b6e9c61f2f6f30bf412f3bb39901e886"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_CGROUP_EMATCHES={0x1a4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_META={0xa8, 0x3, 0x0, 0x0, {{0x62, 0x4, 0x5f6d}, [@TCA_EM_META_LVALUE={0x36, 0x2, [@TCF_META_TYPE_VAR="7f9c60b4", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="593d744f12a519ca22", @TCF_META_TYPE_VAR="f12f31f9776e6fd12b", @TCF_META_TYPE_VAR="8d6783d8", @TCF_META_TYPE_VAR="e0b96fea41", @TCF_META_TYPE_VAR="3d0d8520", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="3ec53acac3", @TCF_META_TYPE_VAR="1115"]}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="589f907031", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="e05b98", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x1}, {0x5, 0x4, 0x2}}}, @TCA_EM_META_RVALUE={0x2a, 0x3, [@TCF_META_TYPE_VAR="454acf5b", @TCF_META_TYPE_VAR="99", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="a1ee66c45087d62a", @TCF_META_TYPE_VAR="91e74e7b7905a842", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="1de0d4e50268e3b857"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6d0, 0xd, 0x2}, {0xfe01, 0xc, 0x2}}}]}}, @TCF_EM_META={0x78, 0x3, 0x0, 0x0, {{0x1ff, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x428, 0x80}, {0x2, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="7d2397fc30ae7b418c7b", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR='=C', @TCF_META_TYPE_VAR="e5dd3506"]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="f42b", @TCF_META_TYPE_VAR="fc6b", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="b7beecaebb"]}, @TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_VAR="822478fb80", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="d15e9784", @TCF_META_TYPE_VAR="605b86eeed0f6e8869", @TCF_META_TYPE_VAR="0369426180", @TCF_META_TYPE_VAR="91c9f73eaa"]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xe51, 0x7, 0x2}, {{0x1, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xd74, 0x7, 0x9d}, {{0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8633, 0x7, 0x7f}, {{0x1, 0x1, 0x0, 0x1}, {0x4}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x10, 0x3, 0x886}, {0xea, 0x0, 0x4, 0xb}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_CGROUP_ACT={0x1330, 0x1, [@m_pedit={0x58, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x29, 0x6, "cea4c846842393b1856d1f04a7ba41c274e28bc1018d40560e002e5bc29793cf257c4eabab"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x70, 0xe, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x83f01}, @TCA_MPLS_LABEL={0x8, 0x5, 0x5dd2f}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x1}]}, {0x13, 0x6, "6b5c279e664b830f5e15f1b185e215"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x98, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x100, 0x6, 0x9, 0x800}, 0x4}}]}, {0x4a, 0x6, "c229a845c16bb1a9605bda25e47e19a0727d8d8d10cf73a40fe5f503630d36cda04fc024b9d63dfdf00c731b579e3a324129ef0b402fe9c8ad6756ef2afab53eb29ef9f399b2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x174, 0x1e, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x800, 0x4, 0x6, 0x80000000, 0x8}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8001, 0x2, 0x8000000, 0x0, 0x91}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xba}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}]}, {0xf7, 0x6, "fc3e9e3bcb1cab12324e5540276c2775617a8e54c29c634889754071c944ba7967206f7bf6353cbf1aba93a3be1a7a4e813bd97aeadaad5c6a64fc7a0f363949f689375a363d8e060ebe8121ff74804c4e4d3ab5f79d1195afd6411c6a3397a29cfed73c3fb4c83eb6599f43cac9cb98d33bce06c2b4c772755273a27091f039f6f238108377e914f39c2f65239c438e8cbc5479b4aee73bc2596ff2db9f7e9a90024ad8440921e6ea0f39e64bc798b06c50485e54f70bc92ef02aebb1b61521123b743480b7f58b0a61e8e66deda883ec216ff8b1568f8378f2bc07bb906f875ac42da3b6c80af6b7c558ca83519340885ac9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x1058, 0x4, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x800, 0x2, 0x8, 0x401}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}]}]}}]}, 0x3350}, 0x1, 0x0, 0x0, 0x44004}, 0x24048840)

0s ago: executing program 2 (id=336):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18006400000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xd}, 0x10}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts.
[   78.487799][ T5620] cgroup: Unknown subsys name 'net'
[   78.579787][ T5620] cgroup: Unknown subsys name 'cpuset'
[   78.589843][ T5620] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   80.233458][ T5620] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   82.657250][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.665545][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.675591][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.684831][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.693674][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.701454][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.710055][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.720030][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.733573][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.742181][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.763108][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.771918][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.781616][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.792291][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.800548][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.822517][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.832399][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.841739][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.849498][ T4948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.858091][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.865702][ T4948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.876337][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.884779][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.896872][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.906719][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   84.647224][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.655226][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.662414][ T5642] bridge_slave_0: entered allmulticast mode
[   84.669864][ T5642] bridge_slave_0: entered promiscuous mode
[   84.707006][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.714279][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.722104][ T5642] bridge_slave_1: entered allmulticast mode
[   84.730361][ T5642] bridge_slave_1: entered promiscuous mode
[   84.806191][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.818575][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.828317][ T5640] Bluetooth: hci0: command tx timeout
[   84.835784][ T5636] Bluetooth: hci1: command tx timeout
[   84.843373][ T5640] Bluetooth: hci2: command tx timeout
[   84.953234][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.960537][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.968191][ T5643] bridge_slave_0: entered allmulticast mode
[   84.975667][ T5643] bridge_slave_0: entered promiscuous mode
[   84.985323][ T5640] Bluetooth: hci3: command tx timeout
[   84.995843][ T5640] Bluetooth: hci4: command tx timeout
[   84.996532][ T5642] team0: Port device team_slave_0 added
[   85.007253][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.014388][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.021785][ T5632] bridge_slave_0: entered allmulticast mode
[   85.029072][ T5632] bridge_slave_0: entered promiscuous mode
[   85.043118][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.050472][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.057939][ T5643] bridge_slave_1: entered allmulticast mode
[   85.065483][ T5643] bridge_slave_1: entered promiscuous mode
[   85.084294][ T5642] team0: Port device team_slave_1 added
[   85.090295][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.097615][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.104802][ T5632] bridge_slave_1: entered allmulticast mode
[   85.112457][ T5632] bridge_slave_1: entered promiscuous mode
[   85.183599][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.190931][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.198227][ T5633] bridge_slave_0: entered allmulticast mode
[   85.205620][ T5633] bridge_slave_0: entered promiscuous mode
[   85.254683][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.264175][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.271921][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.279240][ T5633] bridge_slave_1: entered allmulticast mode
[   85.286879][ T5633] bridge_slave_1: entered promiscuous mode
[   85.295737][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.302691][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.328689][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.346017][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.358318][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.380544][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.414130][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.421328][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.447456][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.483253][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.490773][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.498499][ T5646] bridge_slave_0: entered allmulticast mode
[   85.507371][ T5646] bridge_slave_0: entered promiscuous mode
[   85.541098][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.553520][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.572973][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.580319][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.588151][ T5646] bridge_slave_1: entered allmulticast mode
[   85.595572][ T5646] bridge_slave_1: entered promiscuous mode
[   85.604145][ T5643] team0: Port device team_slave_0 added
[   85.613037][ T5643] team0: Port device team_slave_1 added
[   85.643195][ T5632] team0: Port device team_slave_0 added
[   85.692633][ T5632] team0: Port device team_slave_1 added
[   85.721126][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.728237][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.754623][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.768557][ T5633] team0: Port device team_slave_0 added
[   85.774811][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.781924][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.808355][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.832789][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.848453][ T5642] hsr_slave_0: entered promiscuous mode
[   85.855036][ T5642] hsr_slave_1: entered promiscuous mode
[   85.863632][ T5633] team0: Port device team_slave_1 added
[   85.886357][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.893354][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.919420][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.933060][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.955690][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.962737][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.988809][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.064325][ T5646] team0: Port device team_slave_0 added
[   86.070671][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.078002][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.104103][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.133219][ T5643] hsr_slave_0: entered promiscuous mode
[   86.139828][ T5643] hsr_slave_1: entered promiscuous mode
[   86.146207][ T5643] debugfs: 'hsr0' already exists in 'hsr'
[   86.152051][ T5643] Cannot create hsr debugfs directory
[   86.167328][ T5646] team0: Port device team_slave_1 added
[   86.173777][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.180849][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.206871][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.304746][ T5632] hsr_slave_0: entered promiscuous mode
[   86.311303][ T5632] hsr_slave_1: entered promiscuous mode
[   86.317558][ T5632] debugfs: 'hsr0' already exists in 'hsr'
[   86.323298][ T5632] Cannot create hsr debugfs directory
[   86.353095][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.360142][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.386285][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.398997][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.406021][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.431947][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.495107][ T5633] hsr_slave_0: entered promiscuous mode
[   86.501461][ T5633] hsr_slave_1: entered promiscuous mode
[   86.512019][ T5633] debugfs: 'hsr0' already exists in 'hsr'
[   86.517873][ T5633] Cannot create hsr debugfs directory
[   86.727707][ T5646] hsr_slave_0: entered promiscuous mode
[   86.734471][ T5646] hsr_slave_1: entered promiscuous mode
[   86.741304][ T5646] debugfs: 'hsr0' already exists in 'hsr'
[   86.747657][ T5646] Cannot create hsr debugfs directory
[   86.905207][ T5640] Bluetooth: hci2: command tx timeout
[   86.905239][ T4948] Bluetooth: hci1: command tx timeout
[   86.916177][ T5636] Bluetooth: hci0: command tx timeout
[   87.065399][ T4948] Bluetooth: hci4: command tx timeout
[   87.075864][ T4948] Bluetooth: hci3: command tx timeout
[   87.164251][ T5642] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.176796][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.214429][ T5642] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.224228][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.232577][ T5642] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.243813][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   87.267048][ T5642] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.280090][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.363701][ T5643] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.374597][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.383916][ T5643] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.397920][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.405963][ T5643] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.419273][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   87.435405][ T5643] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.448202][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.542857][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.556408][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.577701][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.589425][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.597687][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.608909][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   87.622592][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.633161][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.718234][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   87.736287][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.755340][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   87.766605][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.786800][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   87.802275][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   87.811528][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   87.823948][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.864716][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.945320][ T5642] 8021q: adding VLAN 0 to HW filter on device team0
[   87.962034][ T5646] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   87.971999][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.980297][ T5646] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   87.990181][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.998339][ T5646] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   88.008757][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.017204][ T5646] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   88.027625][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.059751][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.067292][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.096730][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.103905][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.148779][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.224081][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.256768][ T5643] 8021q: adding VLAN 0 to HW filter on device team0
[   88.279403][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.286587][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.306932][ T5632] 8021q: adding VLAN 0 to HW filter on device team0
[   88.324224][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.331498][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.368412][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.375693][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.397994][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.427586][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.434869][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.532954][ T5633] 8021q: adding VLAN 0 to HW filter on device team0
[   88.549236][ T5643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.597433][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.609250][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.616538][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.667426][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.674728][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.715732][ T5646] 8021q: adding VLAN 0 to HW filter on device team0
[   88.753979][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.761329][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.818476][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.825710][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.987126][ T4948] Bluetooth: hci2: command tx timeout
[   88.992980][ T5636] Bluetooth: hci1: command tx timeout
[   88.992994][ T5640] Bluetooth: hci0: command tx timeout
[   89.145404][ T4948] Bluetooth: hci4: command tx timeout
[   89.151038][ T5636] Bluetooth: hci3: command tx timeout
[   89.366107][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.563717][ T5642] veth0_vlan: entered promiscuous mode
[   89.613053][ T5642] veth1_vlan: entered promiscuous mode
[   89.721365][ T5642] veth0_macvtap: entered promiscuous mode
[   89.759811][ T5642] veth1_macvtap: entered promiscuous mode
[   89.843626][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.906410][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.970339][  T154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.014181][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.023035][  T154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.036661][  T154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.049465][  T154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.092622][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.265270][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.302806][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.311626][ T5632] veth0_vlan: entered promiscuous mode
[   90.320624][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.350936][ T5643] veth0_vlan: entered promiscuous mode
[   90.363463][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.423765][ T5643] veth1_vlan: entered promiscuous mode
[   90.432717][ T5632] veth1_vlan: entered promiscuous mode
[   90.444852][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.469181][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.584319][ T5633] veth0_vlan: entered promiscuous mode
[   90.609808][ T5642] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   90.631355][ T5643] veth0_macvtap: entered promiscuous mode
[   90.655942][ T5632] veth0_macvtap: entered promiscuous mode
[   90.680081][ T5643] veth1_macvtap: entered promiscuous mode
[   90.689052][ T5633] veth1_vlan: entered promiscuous mode
[   90.707121][ T5632] veth1_macvtap: entered promiscuous mode
[   90.784048][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.820482][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.852177][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.883863][ T1343] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.896735][ T5826] sctp: [Deprecated]: syz.1.2 (pid 5826) Use of int in max_burst socket option.
[   90.896735][ T5826] Use struct sctp_assoc_value instead
[   90.914061][ T1343] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.927782][ T1343] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.950894][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.970160][ T1343] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.000464][ T5633] veth0_macvtap: entered promiscuous mode
[   91.024697][  T154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.040569][ T5633] veth1_macvtap: entered promiscuous mode
[   91.058841][  T154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.069572][ T5636] Bluetooth: hci0: command tx timeout
[   91.076393][ T4948] Bluetooth: hci1: command tx timeout
[   91.082384][ T5640] Bluetooth: hci2: command tx timeout
[   91.087900][  T154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.087966][  T154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.132144][ T5829] Zero length message leads to an empty skb
[   91.225626][ T5640] Bluetooth: hci3: command tx timeout
[   91.228785][ T5636] Bluetooth: hci4: command tx timeout
[   91.309412][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.378114][ T5833] netlink: 'syz.1.8': attribute type 1 has an invalid length.
[   91.387975][ T5833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.408103][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.448949][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.471097][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.497732][ T5646] veth0_vlan: entered promiscuous mode
[   91.531014][   T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.541791][   T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.558452][ T5837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'.
[   91.573565][   T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.582807][   T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.592959][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.605953][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.639512][ T5837] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   91.653103][ T5837] bond1 (unregistering): Released all slaves
[   91.702061][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.724724][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.742014][ T5646] veth1_vlan: entered promiscuous mode
[   91.757936][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.782250][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.830101][ T1603] cfg80211: failed to load regulatory.db
[   91.957696][ T5646] veth0_macvtap: entered promiscuous mode
[   92.029667][ T5646] veth1_macvtap: entered promiscuous mode
[   92.047217][ T5843] FAULT_INJECTION: forcing a failure.
[   92.047217][ T5843] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   92.061308][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) 
[   92.061346][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   92.061367][ T5843] Call Trace:
[   92.061375][ T5843]  <TASK>
[   92.061387][ T5843]  dump_stack_lvl+0xe8/0x150
[   92.061424][ T5843]  should_fail_ex+0x40c/0x560
[   92.061464][ T5843]  _copy_from_user+0x2d/0xb0
[   92.061490][ T5843]  kstrtouint_from_user+0xd6/0x180
[   92.061524][ T5843]  ? __pfx_kstrtouint_from_user+0x10/0x10
[   92.061575][ T5843]  proc_fail_nth_write+0x8e/0x210
[   92.061604][ T5843]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   92.061640][ T5843]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   92.061666][ T5843]  vfs_write+0x296/0xba0
[   92.061706][ T5843]  ? __pfx_vfs_write+0x10/0x10
[   92.061739][ T5843]  ? __fget_files+0x2a/0x420
[   92.061768][ T5843]  ? __fget_files+0x3a2/0x420
[   92.061793][ T5843]  ? __fget_files+0x2a/0x420
[   92.061829][ T5843]  ksys_write+0x150/0x270
[   92.061864][ T5843]  ? __pfx_ksys_write+0x10/0x10
[   92.061903][ T5843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.061927][ T5843]  do_syscall_64+0x174/0x580
[   92.061947][ T5843]  ? trace_irq_disable+0x3b/0x140
[   92.061978][ T5843]  ? clear_bhb_loop+0x40/0x90
[   92.062004][ T5843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.062025][ T5843] RIP: 0033:0x7fdedf35d68e
[   92.062051][ T5843] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   92.062068][ T5843] RSP: 002b:00007fdee0217fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   92.062095][ T5843] RAX: ffffffffffffffda RBX: 00007fdee02186c0 RCX: 00007fdedf35d68e
[   92.062110][ T5843] RDX: 0000000000000001 RSI: 00007fdee02180a0 RDI: 0000000000000004
[   92.062123][ T5843] RBP: 00007fdee0218090 R08: 0000000000000000 R09: 0000000000000000
[   92.062136][ T5843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   92.062147][ T5843] R13: 00007fdedf616038 R14: 00007fdedf615fa0 R15: 00007ffedf73bf78
[   92.062181][ T5843]  </TASK>
[   92.062675][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.282618][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.311363][ T5841] syzkaller0: entered promiscuous mode
[   92.318661][ T5841] syzkaller0: entered allmulticast mode
[   92.353848][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.407546][ T5844] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   92.496863][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.514257][ T5848] xt_CONNSECMARK: invalid mode: 254
[   92.543459][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.552082][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.572084][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.596210][ T5851] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11'.
[   92.795875][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.806351][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.848130][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.098530][ T5857] netlink: 'syz.2.13': attribute type 29 has an invalid length.
[   93.121802][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.139969][ T5857] netlink: 'syz.2.13': attribute type 29 has an invalid length.
[   93.144518][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.172546][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   93.241490][ T5858] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   93.249396][ T5859] netlink: 'syz.2.13': attribute type 4 has an invalid length.
[   93.270236][ T5858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   93.335601][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.363288][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.428152][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'.
[   93.464500][ T5863] netlink: 'syz.3.16': attribute type 11 has an invalid length.
[   93.481984][ T5865] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17'.
[   93.498608][ T5866] netlink: 'syz.3.16': attribute type 1 has an invalid length.
[   93.534269][ T5865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17'.
[   93.552370][ T1173] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.568974][ T5870] netlink: 3749 bytes leftover after parsing attributes in process `syz.2.18'.
[   93.579758][ T1173] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.614193][ T1173] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.651460][ T1173] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.730911][ T5872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'.
[   93.759984][ T5872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'.
[   93.804668][ T5872] netlink: 'syz.4.5': attribute type 6 has an invalid length.
[   94.142654][ T5884] nbd: must specify at least one socket
[   94.258236][ T5890] xt_hashlimit: size too large, truncated to 1048576
[   94.498551][ T5893] syzkaller1: entered promiscuous mode
[   94.527432][ T5893] syzkaller1: entered allmulticast mode
[   94.874316][ T5896] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[   94.998611][ T5909] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   95.044611][ T5909] bond1 (unregistering): Released all slaves
[   95.422980][ T5926] netlink: 'syz.4.35': attribute type 11 has an invalid length.
[   95.477766][  T141] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   95.478619][ T5931] netlink: 'syz.4.35': attribute type 1 has an invalid length.
[   95.528435][  T141] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   95.552221][  T141] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   95.562162][  T141] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.718082][ T5932] ieee802154 phy0 wpan0: encryption failed: -22
[   95.755905][ T5927] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   96.264352][ T5945] x_tables: duplicate underflow at hook 2
[   96.376195][ T5960] FAULT_INJECTION: forcing a failure.
[   96.376195][ T5960] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   96.443777][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT(full) 
[   96.443807][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   96.443819][ T5960] Call Trace:
[   96.443828][ T5960]  <TASK>
[   96.443837][ T5960]  dump_stack_lvl+0xe8/0x150
[   96.443866][ T5960]  should_fail_ex+0x40c/0x560
[   96.443905][ T5960]  _copy_from_iter+0x1d3/0x1660
[   96.443931][ T5960]  ? rcu_is_watching+0x15/0xb0
[   96.443962][ T5960]  ? __pfx__copy_from_iter+0x10/0x10
[   96.443980][ T5960]  ? kmem_cache_alloc_node_noprof+0x3ca/0x680
[   96.444015][ T5960]  ? netlink_sendmsg+0x650/0xb40
[   96.444036][ T5960]  ? skb_put+0x112/0x210
[   96.444057][ T5960]  netlink_sendmsg+0x6c0/0xb40
[   96.444089][ T5960]  ? __pfx_netlink_sendmsg+0x10/0x10
[   96.444118][ T5960]  ? aa_sock_msg_perm+0xf1/0x1b0
[   96.444152][ T5960]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   96.444180][ T5960]  ? __pfx_netlink_sendmsg+0x10/0x10
[   96.444206][ T5960]  ____sys_sendmsg+0x9b9/0xa20
[   96.444229][ T5960]  ? __might_fault+0xaf/0x130
[   96.444261][ T5960]  ? __pfx_____sys_sendmsg+0x10/0x10
[   96.444294][ T5960]  ? import_iovec+0x73/0xa0
[   96.444321][ T5960]  ___sys_sendmsg+0x2a5/0x360
[   96.444342][ T5960]  ? __lock_acquire+0x683/0x2cd0
[   96.444369][ T5960]  ? __pfx____sys_sendmsg+0x10/0x10
[   96.444437][ T5960]  ? __fget_files+0x2a/0x420
[   96.444463][ T5960]  ? __fget_files+0x3a2/0x420
[   96.444503][ T5960]  __x64_sys_sendmsg+0x1bd/0x2a0
[   96.444529][ T5960]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   96.444562][ T5960]  ? __pfx_ksys_write+0x10/0x10
[   96.444602][ T5960]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.444626][ T5960]  do_syscall_64+0x174/0x580
[   96.444646][ T5960]  ? trace_irq_disable+0x3b/0x140
[   96.444678][ T5960]  ? clear_bhb_loop+0x40/0x90
[   96.444704][ T5960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.444726][ T5960] RIP: 0033:0x7f22eb99ce59
[   96.444746][ T5960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.444763][ T5960] RSP: 002b:00007f22ec8aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   96.444786][ T5960] RAX: ffffffffffffffda RBX: 00007f22ebc15fa0 RCX: 00007f22eb99ce59
[   96.444801][ T5960] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003
[   96.444814][ T5960] RBP: 00007f22ec8aa090 R08: 0000000000000000 R09: 0000000000000000
[   96.444827][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   96.444838][ T5960] R13: 00007f22ebc16038 R14: 00007f22ebc15fa0 R15: 00007ffca5b912d8
[   96.444871][ T5960]  </TASK>
[   96.855704][ T5966] sctp: [Deprecated]: syz.1.46 (pid 5966) Use of int in max_burst socket option deprecated.
[   96.855704][ T5966] Use struct sctp_assoc_value instead
[   96.963206][ T5968] __nla_validate_parse: 12 callbacks suppressed
[   96.963224][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'.
[   97.108615][ T5975] netlink: 'syz.3.47': attribute type 1 has an invalid length.
[   97.890373][ T5994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.486853][ T6038] netlink: 'syz.3.55': attribute type 13 has an invalid length.
[   98.580107][ T6044] IPVS: set_ctl: invalid protocol: 50 172.20.20.42:20000
[   99.219178][ T6067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   99.562651][ T6079] FAULT_INJECTION: forcing a failure.
[   99.562651][ T6079] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   99.613272][ T6079] CPU: 0 UID: 0 PID: 6079 Comm: syz.3.68 Not tainted syzkaller #0 PREEMPT(full) 
[   99.613300][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   99.613313][ T6079] Call Trace:
[   99.613320][ T6079]  <TASK>
[   99.613329][ T6079]  dump_stack_lvl+0xe8/0x150
[   99.613359][ T6079]  should_fail_ex+0x40c/0x560
[   99.613399][ T6079]  _copy_from_iter+0x1d3/0x1660
[   99.613434][ T6079]  ? __pfx__copy_from_iter+0x10/0x10
[   99.613456][ T6079]  ? alloc_pages_noprof+0x13b/0x2a0
[   99.613479][ T6079]  ? skb_page_frag_refill+0x119/0x460
[   99.613514][ T6079]  kcm_sendmsg+0xe32/0x2ad0
[   99.613586][ T6079]  ? __pfx_kcm_sendmsg+0x10/0x10
[   99.613613][ T6079]  ? aa_sock_msg_perm+0xf1/0x1b0
[   99.613646][ T6079]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   99.613677][ T6079]  ? __pfx_kcm_sendmsg+0x10/0x10
[   99.613709][ T6079]  sock_write_iter+0x498/0x4e0
[   99.613739][ T6079]  ? __pfx_sock_write_iter+0x10/0x10
[   99.613777][ T6079]  ? bpf_lsm_file_permission+0x9/0x20
[   99.613806][ T6079]  ? security_file_permission+0x75/0x260
[   99.613840][ T6079]  vfs_write+0x612/0xba0
[   99.613880][ T6079]  ? __pfx_vfs_write+0x10/0x10
[   99.613921][ T6079]  ? __fget_files+0x2a/0x420
[   99.613956][ T6079]  ksys_write+0x150/0x270
[   99.613990][ T6079]  ? __pfx_ksys_write+0x10/0x10
[   99.614029][ T6079]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.614053][ T6079]  do_syscall_64+0x174/0x580
[   99.614091][ T6079]  ? trace_irq_disable+0x3b/0x140
[   99.614136][ T6079]  ? clear_bhb_loop+0x40/0x90
[   99.614163][ T6079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.614184][ T6079] RIP: 0033:0x7fdedf39ce59
[   99.614203][ T6079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.614220][ T6079] RSP: 002b:00007fdee0218028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   99.614243][ T6079] RAX: ffffffffffffffda RBX: 00007fdedf615fa0 RCX: 00007fdedf39ce59
[   99.614258][ T6079] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000003
[   99.614271][ T6079] RBP: 00007fdee0218090 R08: 0000000000000000 R09: 0000000000000000
[   99.614283][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.614295][ T6079] R13: 00007fdedf616038 R14: 00007fdedf615fa0 R15: 00007ffedf73bf78
[   99.614328][ T6079]  </TASK>
[   99.917467][ T6082] netlink: 'syz.0.69': attribute type 1 has an invalid length.
[   99.952780][ T6082] veth1_to_bridge: entered promiscuous mode
[   99.991963][ T6082] veth1_to_bridge: entered allmulticast mode
[  100.033226][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.053385][ T6082] macvlan2: entered promiscuous mode
[  100.070488][ T6082] macvlan2: entered allmulticast mode
[  100.583596][ T6110] Illegal XDP return value 4294967274 on prog  (id 10) dev N/A, expect packet loss!
[  100.639532][ T6112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  101.009119][ T6126] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication
[  101.263076][ T6137] netlink: 48 bytes leftover after parsing attributes in process `syz.4.84'.
[  101.676381][ T6153] nbd: must specify at least one socket
[  101.739139][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.88'.
[  101.811192][ T6160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  101.887288][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'.
[  101.933644][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.108982][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.322223][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.105'.
[  103.356408][ T6218] netlink: 256 bytes leftover after parsing attributes in process `syz.2.104'.
[  103.401419][ T6218] netlink: 72 bytes leftover after parsing attributes in process `syz.2.104'.
[  103.534421][ T6226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.781095][ T6232] FAULT_INJECTION: forcing a failure.
[  103.781095][ T6232] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  103.838702][ T6232] CPU: 0 UID: 0 PID: 6232 Comm: syz.2.107 Not tainted syzkaller #0 PREEMPT(full) 
[  103.838731][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  103.838743][ T6232] Call Trace:
[  103.838751][ T6232]  <TASK>
[  103.838760][ T6232]  dump_stack_lvl+0xe8/0x150
[  103.838790][ T6232]  should_fail_ex+0x40c/0x560
[  103.838831][ T6232]  _copy_from_user+0x2d/0xb0
[  103.838857][ T6232]  ___sys_sendmsg+0x1c6/0x360
[  103.838880][ T6232]  ? __lock_acquire+0x683/0x2cd0
[  103.838907][ T6232]  ? __pfx____sys_sendmsg+0x10/0x10
[  103.838968][ T6232]  ? __fget_files+0x2a/0x420
[  103.838994][ T6232]  ? __fget_files+0x3a2/0x420
[  103.839032][ T6232]  __x64_sys_sendmsg+0x1bd/0x2a0
[  103.839057][ T6232]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  103.839091][ T6232]  ? __pfx_ksys_write+0x10/0x10
[  103.839131][ T6232]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.839155][ T6232]  do_syscall_64+0x174/0x580
[  103.839179][ T6232]  ? clear_bhb_loop+0x40/0x90
[  103.839207][ T6232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.839228][ T6232] RIP: 0033:0x7f22eb99ce59
[  103.839248][ T6232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.839266][ T6232] RSP: 002b:00007f22ec8aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  103.839289][ T6232] RAX: ffffffffffffffda RBX: 00007f22ebc15fa0 RCX: 00007f22eb99ce59
[  103.839305][ T6232] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  103.839318][ T6232] RBP: 00007f22ec8aa090 R08: 0000000000000000 R09: 0000000000000000
[  103.839332][ T6232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  103.839344][ T6232] R13: 00007f22ebc16038 R14: 00007f22ebc15fa0 R15: 00007ffca5b912d8
[  103.839388][ T6232]  </TASK>
[  104.611034][ T6229] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  104.625487][ T6229] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  104.722922][ T6229] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  104.740082][ T6229] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  104.792331][ T6229] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  104.801174][ T6262] netlink: 48 bytes leftover after parsing attributes in process `syz.0.117'.
[  104.830962][ T6229] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  104.918675][ T6268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.946284][ T6229] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  104.974550][ T6229] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  105.034253][ T6229] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  105.041919][ T6229] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  106.151007][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'.
[  106.215404][ T6326] netlink: 67 bytes leftover after parsing attributes in process `syz.1.134'.
[  106.481525][ T6319] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  106.528381][ T6321] team0: Cannot enslave team device to itself
[  106.698210][ T6326] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  106.734525][ T6344] netlink: 32 bytes leftover after parsing attributes in process `syz.4.137'.
[  106.790915][ T6348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.138'.
[  106.829359][ T6349] netlink: 108 bytes leftover after parsing attributes in process `syz.4.137'.
[  106.898426][ T6312] syzkaller0: entered promiscuous mode
[  106.914094][ T6312] syzkaller0: entered allmulticast mode
[  106.952082][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.195033][ T6355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.140'.
[  107.224458][ T6359] FAULT_INJECTION: forcing a failure.
[  107.224458][ T6359] name failslab, interval 1, probability 0, space 0, times 1
[  107.253973][ T6359] CPU: 1 UID: 0 PID: 6359 Comm: syz.4.141 Not tainted syzkaller #0 PREEMPT(full) 
[  107.253999][ T6359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  107.254011][ T6359] Call Trace:
[  107.254019][ T6359]  <TASK>
[  107.254028][ T6359]  dump_stack_lvl+0xe8/0x150
[  107.254055][ T6359]  should_fail_ex+0x40c/0x560
[  107.254094][ T6359]  should_failslab+0xa8/0x100
[  107.254128][ T6359]  __kmalloc_node_track_caller_noprof+0xeb/0x7b0
[  107.254161][ T6359]  ? ethnl_default_set_doit+0x97c/0xfe0
[  107.254185][ T6359]  ? __kmalloc_noprof+0x379/0x750
[  107.254217][ T6359]  kmemdup_noprof+0x2b/0x70
[  107.254241][ T6359]  ethnl_default_set_doit+0x97c/0xfe0
[  107.254281][ T6359]  genl_family_rcv_msg_doit+0x233/0x340
[  107.254318][ T6359]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  107.254362][ T6359]  ? bpf_lsm_capable+0x9/0x20
[  107.254382][ T6359]  ? security_capable+0x7e/0x2c0
[  107.254418][ T6359]  genl_rcv_msg+0x614/0x7a0
[  107.254454][ T6359]  ? __pfx_genl_rcv_msg+0x10/0x10
[  107.254481][ T6359]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  107.254510][ T6359]  ? __pfx_ref_tracker_free+0x10/0x10
[  107.254532][ T6359]  ? __asan_memcpy+0x40/0x70
[  107.254556][ T6359]  ? __skb_clone+0x5c/0x6c0
[  107.254586][ T6359]  netlink_rcv_skb+0x226/0x4a0
[  107.254609][ T6359]  ? __pfx_genl_rcv_msg+0x10/0x10
[  107.254640][ T6359]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  107.254687][ T6359]  ? down_read+0x270/0x2e0
[  107.254726][ T6359]  ? genl_rcv+0xd/0x40
[  107.254757][ T6359]  genl_rcv+0x28/0x40
[  107.254783][ T6359]  netlink_unicast+0x7bb/0x940
[  107.254829][ T6359]  netlink_sendmsg+0x813/0xb40
[  107.254865][ T6359]  ? __pfx_netlink_sendmsg+0x10/0x10
[  107.254893][ T6359]  ? aa_sock_msg_perm+0xf1/0x1b0
[  107.254935][ T6359]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  107.254962][ T6359]  ? __pfx_netlink_sendmsg+0x10/0x10
[  107.254988][ T6359]  ____sys_sendmsg+0x9b9/0xa20
[  107.255010][ T6359]  ? __might_fault+0xaf/0x130
[  107.255045][ T6359]  ? __pfx_____sys_sendmsg+0x10/0x10
[  107.255079][ T6359]  ? import_iovec+0x73/0xa0
[  107.255108][ T6359]  ___sys_sendmsg+0x2a5/0x360
[  107.255129][ T6359]  ? __lock_acquire+0x683/0x2cd0
[  107.255157][ T6359]  ? __pfx____sys_sendmsg+0x10/0x10
[  107.255223][ T6359]  ? __fget_files+0x2a/0x420
[  107.255248][ T6359]  ? __fget_files+0x3a2/0x420
[  107.255287][ T6359]  __x64_sys_sendmsg+0x1bd/0x2a0
[  107.255314][ T6359]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  107.255348][ T6359]  ? __pfx_ksys_write+0x10/0x10
[  107.255390][ T6359]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.255413][ T6359]  do_syscall_64+0x174/0x580
[  107.255432][ T6359]  ? trace_irq_disable+0x3b/0x140
[  107.255463][ T6359]  ? clear_bhb_loop+0x40/0x90
[  107.255490][ T6359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.255511][ T6359] RIP: 0033:0x7f2150d9ce59
[  107.255532][ T6359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.255549][ T6359] RSP: 002b:00007f2151b7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  107.255571][ T6359] RAX: ffffffffffffffda RBX: 00007f2151015fa0 RCX: 00007f2150d9ce59
[  107.255587][ T6359] RDX: 0000000020004010 RSI: 00002000000001c0 RDI: 0000000000000003
[  107.255601][ T6359] RBP: 00007f2151b7e090 R08: 0000000000000000 R09: 0000000000000000
[  107.255613][ T6359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.255625][ T6359] R13: 00007f2151016038 R14: 00007f2151015fa0 R15: 00007ffe1b793a68
[  107.255662][ T6359]  </TASK>
[  109.162677][ T5954] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.205162][ T5954] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.227382][ T5954] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  109.251871][ T5954] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  109.353731][ T6379] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  109.708383][ T6389] netlink: 'syz.2.151': attribute type 1 has an invalid length.
[  109.775524][ T6396] netlink: 32 bytes leftover after parsing attributes in process `syz.4.149'.
[  109.846852][ T6403] netlink: 108 bytes leftover after parsing attributes in process `syz.4.149'.
[  109.879310][ T6389] 8021q: adding VLAN 0 to HW filter on device bond1
[  109.959647][ T6402] bond1: (slave veth0_to_bond): making interface the new active one
[  109.999097][ T6402] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  110.071446][ T6404] bond1: entered promiscuous mode
[  110.089082][ T6404] veth0_to_bond: entered promiscuous mode
[  110.096176][ T6404] bond1: entered allmulticast mode
[  110.102635][ T6404] veth0_to_bond: entered allmulticast mode
[  110.120795][ T6405] macvlan4: entered promiscuous mode
[  110.126498][ T6405] macvlan4: entered allmulticast mode
[  110.136622][ T6405] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  110.149349][ T6405] bond1: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond
[  110.210734][ T6420] netlink: 36 bytes leftover after parsing attributes in process `syz.0.161'.
[  110.276806][ T6423] netlink: 'syz.0.161': attribute type 3 has an invalid length.
[  110.300587][ T6411] netlink: 'syz.1.159': attribute type 23 has an invalid length.
[  110.660888][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'.
[  110.737560][ T6432] veth3: entered promiscuous mode
[  110.978701][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.172'.
[  111.094771][ T6450] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.466938][ T6464] xt_hashlimit: size too large, truncated to 1048576
[  111.479975][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'.
[  111.551914][ T6466] syzkaller1: entered promiscuous mode
[  111.599891][ T6466] syzkaller1: entered allmulticast mode
[  111.684587][ T6474] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  112.024237][ T6489] netlink: del zone limit has 8 unknown bytes
[  112.079944][ T6494] FAULT_INJECTION: forcing a failure.
[  112.079944][ T6494] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.097937][ T6494] CPU: 1 UID: 0 PID: 6494 Comm: syz.3.192 Not tainted syzkaller #0 PREEMPT(full) 
[  112.097962][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  112.097972][ T6494] Call Trace:
[  112.097979][ T6494]  <TASK>
[  112.097987][ T6494]  dump_stack_lvl+0xe8/0x150
[  112.098011][ T6494]  should_fail_ex+0x40c/0x560
[  112.098046][ T6494]  _copy_to_user+0x31/0xb0
[  112.098069][ T6494]  bpf_test_finish+0x53c/0x6b0
[  112.098095][ T6494]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  112.098117][ T6494]  ? __pfx_bpf_test_finish+0x10/0x10
[  112.098142][ T6494]  ? _copy_from_user+0x94/0xb0
[  112.098163][ T6494]  ? bpf_test_init+0x113/0x150
[  112.098187][ T6494]  bpf_prog_test_run_xdp+0x8bc/0x11d0
[  112.098229][ T6494]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  112.098259][ T6494]  ? __fget_files+0x2a/0x420
[  112.098289][ T6494]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  112.098314][ T6494]  bpf_prog_test_run+0x2c5/0x340
[  112.098349][ T6494]  __sys_bpf+0x643/0x950
[  112.098383][ T6494]  ? __pfx___sys_bpf+0x10/0x10
[  112.098428][ T6494]  ? ksys_write+0x242/0x270
[  112.098461][ T6494]  ? __pfx_ksys_write+0x10/0x10
[  112.098496][ T6494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.098518][ T6494]  __x64_sys_bpf+0x7c/0x90
[  112.098546][ T6494]  do_syscall_64+0x174/0x580
[  112.098566][ T6494]  ? trace_irq_disable+0x3b/0x140
[  112.098598][ T6494]  ? clear_bhb_loop+0x40/0x90
[  112.098624][ T6494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.098645][ T6494] RIP: 0033:0x7fdedf39ce59
[  112.098665][ T6494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.098682][ T6494] RSP: 002b:00007fdee0218028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  112.098700][ T6494] RAX: ffffffffffffffda RBX: 00007fdedf615fa0 RCX: 00007fdedf39ce59
[  112.098712][ T6494] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  112.098722][ T6494] RBP: 00007fdee0218090 R08: 0000000000000000 R09: 0000000000000000
[  112.098732][ T6494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  112.098742][ T6494] R13: 00007fdedf616038 R14: 00007fdedf615fa0 R15: 00007ffedf73bf78
[  112.098770][ T6494]  </TASK>
[  112.528084][ T6504] sctp: [Deprecated]: syz.3.195 (pid 6504) Use of int in max_burst socket option deprecated.
[  112.528084][ T6504] Use struct sctp_assoc_value instead
[  112.661835][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'.
[  112.868527][ T6516] netlink: 156 bytes leftover after parsing attributes in process `syz.4.199'.
[  112.883797][ T6516] netlink: 72 bytes leftover after parsing attributes in process `syz.4.199'.
[  112.924208][ T6518] netlink: 200 bytes leftover after parsing attributes in process `syz.1.201'.
[  114.454735][ T6586] sctp: [Deprecated]: syz.3.213 (pid 6586) Use of int in max_burst socket option deprecated.
[  114.454735][ T6586] Use struct sctp_assoc_value instead
[  114.483713][ T6585] vlan2: entered allmulticast mode
[  114.514367][ T6585] bond0: entered allmulticast mode
[  114.526615][ T6585] bond_slave_0: entered allmulticast mode
[  114.532443][ T6585] bond_slave_1: entered allmulticast mode
[  114.587517][ T6591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.623289][ T6591] bond_slave_0: left allmulticast mode
[  114.650922][ T6591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.710505][ T6591] bond_slave_1: left allmulticast mode
[  114.732849][ T6591] bond0 (unregistering): Released all slaves
[  115.068782][ T6615] FAULT_INJECTION: forcing a failure.
[  115.068782][ T6615] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  115.084604][ T6615] CPU: 0 UID: 0 PID: 6615 Comm: syz.3.222 Not tainted syzkaller #0 PREEMPT(full) 
[  115.084633][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  115.084646][ T6615] Call Trace:
[  115.084654][ T6615]  <TASK>
[  115.084663][ T6615]  dump_stack_lvl+0xe8/0x150
[  115.084702][ T6615]  should_fail_ex+0x40c/0x560
[  115.084743][ T6615]  _copy_from_user+0x2d/0xb0
[  115.084770][ T6615]  __copy_msghdr+0x382/0x580
[  115.084799][ T6615]  ___sys_sendmsg+0x213/0x360
[  115.084821][ T6615]  ? __lock_acquire+0x683/0x2cd0
[  115.084849][ T6615]  ? __pfx____sys_sendmsg+0x10/0x10
[  115.084869][ T6615]  ? __lock_acquire+0x683/0x2cd0
[  115.084899][ T6615]  ? kstrtouint+0x6e/0xe0
[  115.084969][ T6615]  __sys_sendmmsg+0x27c/0x4e0
[  115.084998][ T6615]  ? __pfx___sys_sendmmsg+0x10/0x10
[  115.085019][ T6615]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  115.085069][ T6615]  ? ksys_write+0x242/0x270
[  115.085103][ T6615]  ? __pfx_ksys_write+0x10/0x10
[  115.085149][ T6615]  __x64_sys_sendmmsg+0xa0/0xc0
[  115.085172][ T6615]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.085195][ T6615]  do_syscall_64+0x174/0x580
[  115.085215][ T6615]  ? trace_irq_disable+0x3b/0x140
[  115.085247][ T6615]  ? clear_bhb_loop+0x40/0x90
[  115.085273][ T6615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.085295][ T6615] RIP: 0033:0x7fdedf39ce59
[  115.085321][ T6615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.085339][ T6615] RSP: 002b:00007fdee0218028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  115.085366][ T6615] RAX: ffffffffffffffda RBX: 00007fdedf615fa0 RCX: 00007fdedf39ce59
[  115.085381][ T6615] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000003
[  115.085394][ T6615] RBP: 00007fdee0218090 R08: 0000000000000000 R09: 0000000000000000
[  115.085407][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.085419][ T6615] R13: 00007fdedf616038 R14: 00007fdedf615fa0 R15: 00007ffedf73bf78
[  115.085454][ T6615]  </TASK>
[  115.383877][ T6619] FAULT_INJECTION: forcing a failure.
[  115.383877][ T6619] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  115.456022][ T6619] CPU: 0 UID: 0 PID: 6619 Comm: syz.3.223 Not tainted syzkaller #0 PREEMPT(full) 
[  115.456052][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  115.456065][ T6619] Call Trace:
[  115.456073][ T6619]  <TASK>
[  115.456082][ T6619]  dump_stack_lvl+0xe8/0x150
[  115.456121][ T6619]  should_fail_ex+0x40c/0x560
[  115.456162][ T6619]  _copy_from_user+0x2d/0xb0
[  115.456187][ T6619]  sctp_setsockopt+0x1c4/0x12c0
[  115.456221][ T6619]  ? sock_common_setsockopt+0x36/0xc0
[  115.456252][ T6619]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  115.456284][ T6619]  do_sock_setsockopt+0x17c/0x1b0
[  115.456311][ T6619]  __x64_sys_setsockopt+0x13d/0x1b0
[  115.456336][ T6619]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.456359][ T6619]  do_syscall_64+0x174/0x580
[  115.456382][ T6619]  ? clear_bhb_loop+0x40/0x90
[  115.456409][ T6619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.456430][ T6619] RIP: 0033:0x7fdedf39ce59
[  115.456449][ T6619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.456467][ T6619] RSP: 002b:00007fdee0218028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  115.456489][ T6619] RAX: ffffffffffffffda RBX: 00007fdedf615fa0 RCX: 00007fdedf39ce59
[  115.456504][ T6619] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000004
[  115.456516][ T6619] RBP: 00007fdee0218090 R08: 0000000000000008 R09: 0000000000000000
[  115.456529][ T6619] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[  115.456542][ T6619] R13: 00007fdedf616038 R14: 00007fdedf615fa0 R15: 00007ffedf73bf78
[  115.456573][ T6619]  </TASK>
[  115.963921][ T6633] __nla_validate_parse: 1 callbacks suppressed
[  115.963940][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'.
[  116.025563][ T6633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'.
[  116.035678][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.231'.
[  116.137616][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'.
[  116.147211][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'.
[  116.157853][ T1173] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.185368][ T1173] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.197911][ T6633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'.
[  116.221685][ T1173] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.253653][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.410984][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.448142][ T1173] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.763347][ T6663] netlink: 320 bytes leftover after parsing attributes in process `syz.1.240'.
[  116.804092][ T6663] SET target dimension over the limit!
[  116.842764][ T6663] netlink: 256 bytes leftover after parsing attributes in process `syz.1.240'.
[  116.853148][ T6663] netlink: 72 bytes leftover after parsing attributes in process `syz.1.240'.
[  117.868862][ T6702] netlink: 'syz.3.253': attribute type 2 has an invalid length.
[  117.879545][ T6702] netlink: 'syz.3.253': attribute type 2 has an invalid length.
[  118.130781][ T6712] netlink: 64 bytes leftover after parsing attributes in process `syz.1.257'.
[  118.300633][ T6717] FAULT_INJECTION: forcing a failure.
[  118.300633][ T6717] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.317496][ T6717] CPU: 1 UID: 0 PID: 6717 Comm: syz.1.259 Not tainted syzkaller #0 PREEMPT(full) 
[  118.317521][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  118.317532][ T6717] Call Trace:
[  118.317539][ T6717]  <TASK>
[  118.317546][ T6717]  dump_stack_lvl+0xe8/0x150
[  118.317572][ T6717]  should_fail_ex+0x40c/0x560
[  118.317608][ T6717]  _copy_to_user+0x31/0xb0
[  118.317631][ T6717]  simple_read_from_buffer+0xe1/0x170
[  118.317658][ T6717]  proc_fail_nth_read+0x1bb/0x230
[  118.317686][ T6717]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  118.317716][ T6717]  ? rw_verify_area+0x24a/0x4c0
[  118.317749][ T6717]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  118.317775][ T6717]  vfs_read+0x213/0xa80
[  118.317821][ T6717]  ? __pfx___mutex_lock+0x10/0x10
[  118.317844][ T6717]  ? __pfx_vfs_read+0x10/0x10
[  118.317877][ T6717]  ? __fget_files+0x2a/0x420
[  118.317907][ T6717]  ? __fget_files+0x3a2/0x420
[  118.317931][ T6717]  ? __fget_files+0x2a/0x420
[  118.317967][ T6717]  ksys_read+0x150/0x270
[  118.317997][ T6717]  ? __pfx_ksys_read+0x10/0x10
[  118.318036][ T6717]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.318059][ T6717]  do_syscall_64+0x174/0x580
[  118.318078][ T6717]  ? trace_irq_disable+0x3b/0x140
[  118.318110][ T6717]  ? clear_bhb_loop+0x40/0x90
[  118.318136][ T6717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.318158][ T6717] RIP: 0033:0x7f8d42b5d68e
[  118.318178][ T6717] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  118.318195][ T6717] RSP: 002b:00007f8d43ae6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  118.318217][ T6717] RAX: ffffffffffffffda RBX: 00007f8d43ae76c0 RCX: 00007f8d42b5d68e
[  118.318233][ T6717] RDX: 000000000000000f RSI: 00007f8d43ae70a0 RDI: 0000000000000004
[  118.318245][ T6717] RBP: 00007f8d43ae7090 R08: 0000000000000000 R09: 0000000000000000
[  118.318263][ T6717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  118.318275][ T6717] R13: 00007f8d42e16038 R14: 00007f8d42e15fa0 R15: 00007fff12734118
[  118.318310][ T6717]  </TASK>
[  118.421794][ T6721] netlink: 'syz.4.258': attribute type 1 has an invalid length.
[  119.859785][ T6782] x_tables: duplicate underflow at hook 2
[  119.872136][ T6785] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  120.468310][ T6812] team0: Cannot enslave team device to itself
[  120.689834][ T6819] netlink: 'syz.0.284': attribute type 1 has an invalid length.
[  121.383967][ T6835] syzkaller0: entered promiscuous mode
[  121.394382][ T6854] __nla_validate_parse: 12 callbacks suppressed
[  121.394400][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'.
[  121.400899][ T6835] syzkaller0: entered allmulticast mode
[  121.432029][ T6854] team0: Cannot enslave team device to itself
[  123.253355][ T6879] pim6reg: entered allmulticast mode
[  123.259401][ T6883] pim6reg: left allmulticast mode
[  123.317500][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.369130][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.586684][ T6906] xt_hashlimit: size too large, truncated to 1048576
[  123.727969][ T6910] netlink: 200 bytes leftover after parsing attributes in process `syz.2.302'.
[  123.961693][ T6921] trusted_key: syz.3.304 sent an empty control message without MSG_MORE.
[  123.973853][ T6918] netlink: 'syz.4.305': attribute type 29 has an invalid length.
[  124.007099][ T6918] netlink: 'syz.4.305': attribute type 29 has an invalid length.
[  124.063857][ T6918] netlink: 'syz.4.305': attribute type 4 has an invalid length.
[  124.231469][ T6929] IPv6: NLM_F_CREATE should be specified when creating new route
[  124.346058][ T6935] netlink: 112 bytes leftover after parsing attributes in process `syz.1.308'.
[  124.663744][ T6947] netlink: 256 bytes leftover after parsing attributes in process `syz.3.314'.
[  124.704448][ T6947] netlink: 256 bytes leftover after parsing attributes in process `syz.3.314'.
[  124.968588][ T6959] warning: `syz.4.318' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  124.993836][ T6955] netlink: 200 bytes leftover after parsing attributes in process `syz.3.317'.
[  125.237611][ T6962] xt_hashlimit: size too large, truncated to 1048576
[  125.349230][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.321'.
[  125.378210][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.321'.
[  125.458250][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.322'.
[  127.179483][ T7004] netlink: 200 bytes leftover after parsing attributes in process `syz.3.331'.
[  127.243321][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'.
[  127.467582][ T7008] FAULT_INJECTION: forcing a failure.
[  127.467582][ T7008] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.513295][ T7008] CPU: 0 UID: 0 PID: 7008 Comm: syz.0.333 Not tainted syzkaller #0 PREEMPT(full) 
[  127.513327][ T7008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  127.513340][ T7008] Call Trace:
[  127.513348][ T7008]  <TASK>
[  127.513357][ T7008]  dump_stack_lvl+0xe8/0x150
[  127.513385][ T7008]  should_fail_ex+0x40c/0x560
[  127.513424][ T7008]  _copy_to_user+0x31/0xb0
[  127.513450][ T7008]  simple_read_from_buffer+0xe1/0x170
[  127.513501][ T7008]  proc_fail_nth_read+0x1bb/0x230
[  127.513533][ T7008]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  127.513565][ T7008]  ? rw_verify_area+0x24a/0x4c0
[  127.513594][ T7008]  ? __fget_files+0x2a/0x420
[  127.513621][ T7008]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  127.513648][ T7008]  vfs_read+0x213/0xa80
[  127.513685][ T7008]  ? __pfx___mutex_lock+0x10/0x10
[  127.513709][ T7008]  ? __pfx_vfs_read+0x10/0x10
[  127.513742][ T7008]  ? __fget_files+0x2a/0x420
[  127.513772][ T7008]  ? __fget_files+0x3a2/0x420
[  127.513797][ T7008]  ? __fget_files+0x2a/0x420
[  127.513832][ T7008]  ksys_read+0x150/0x270
[  127.513866][ T7008]  ? __pfx_ksys_read+0x10/0x10
[  127.513914][ T7008]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.513938][ T7008]  do_syscall_64+0x174/0x580
[  127.513958][ T7008]  ? trace_irq_disable+0x3b/0x140
[  127.513989][ T7008]  ? clear_bhb_loop+0x40/0x90
[  127.514016][ T7008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.514037][ T7008] RIP: 0033:0x7fbda395d68e
[  127.514057][ T7008] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  127.514074][ T7008] RSP: 002b:00007fbda48d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  127.514096][ T7008] RAX: ffffffffffffffda RBX: 00007fbda48d66c0 RCX: 00007fbda395d68e
[  127.514111][ T7008] RDX: 000000000000000f RSI: 00007fbda48d60a0 RDI: 0000000000000005
[  127.514123][ T7008] RBP: 00007fbda48d6090 R08: 0000000000000000 R09: 0000000000000000
[  127.514136][ T7008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  127.514149][ T7008] R13: 00007fbda3c16038 R14: 00007fbda3c15fa0 R15: 00007ffddcb02938
[  127.514199][ T7008]  </TASK>
[  127.757473][ T7013] BUG: Bad page state in process syz.4.334  pfn:42bf3
[  127.764312][ T7013] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42bf3
[  127.773210][ T7013] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  127.780427][ T7013] raw: 00fff00000000000 dead000000000040 ffff888022adc000 0000000000000000
[  127.789093][ T7013] raw: 0000000000000000 3fffffffffffffff 00000000ffffffff 0000000000000000
[  127.797774][ T7013] page dumped because: page_pool leak
[  127.803196][ T7013] page_owner tracks the page as allocated
[  127.809960][ T7013] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7013, tgid 7009 (syz.4.334), ts 127757301609, free_ts 127490459463
[  127.827015][ T7013]  post_alloc_hook+0x22d/0x280
[  127.831837][ T7013]  get_page_from_freelist+0x24ae/0x2530
[  127.837600][ T7013]  __alloc_frozen_pages_noprof+0x18d/0x380
[  127.843459][ T7013]  __alloc_pages_noprof+0x10/0x100
[  127.848664][ T7013]  alloc_pages_bulk_noprof+0x5ff/0x7c0
[  127.854169][ T7013]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  127.860321][ T7013]  page_pool_alloc_frag_netmem+0x551/0x9c0
[  127.866208][ T7013]  skb_pp_cow_data+0xcf6/0x19a0
[  127.871107][ T7013]  do_xdp_generic+0x770/0x12d0
[  127.875952][ T7013]  tun_get_user+0x24a0/0x4350
[  127.880662][ T7013]  tun_chr_write_iter+0x113/0x200
[  127.885779][ T7013]  vfs_write+0x612/0xba0
[  127.890084][ T7013]  ksys_write+0x150/0x270
[  127.894471][ T7013]  do_syscall_64+0x174/0x580
[  127.899147][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.905118][ T7013] page last free pid 6996 tgid 6996 stack trace:
[  127.911473][ T7013]  __free_frozen_pages+0xc0d/0xd20
[  127.916677][ T7013]  vfree+0x1fd/0x330
[  127.920619][ T7013]  xskq_destroy+0x40/0x60
[  127.925045][ T7013]  xsk_release+0x724/0x980
[  127.929520][ T7013]  sock_close+0xad/0x220
[  127.933801][ T7013]  __fput+0x418/0xa50
[  127.937868][ T7013]  task_work_run+0x1d9/0x270
[  127.942511][ T7013]  exit_to_user_mode_loop+0x193/0x6b0
[  127.947994][ T7013]  do_syscall_64+0x353/0x580
[  127.952633][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.958654][ T7013] Modules linked in:
[  127.962615][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.4.334 Not tainted syzkaller #0 PREEMPT(full) 
[  127.962641][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  127.962654][ T7013] Call Trace:
[  127.962662][ T7013]  <TASK>
[  127.962672][ T7013]  dump_stack_lvl+0xe8/0x150
[  127.962702][ T7013]  bad_page+0x17f/0x1c0
[  127.962728][ T7013]  __free_frozen_pages+0xcca/0xd20
[  127.962768][ T7013]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  127.962826][ T7013]  bpf_xdp_adjust_tail+0x1ce/0x210
[  127.962853][ T7013]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  127.962873][ T7013]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  127.962936][ T7013]  do_xdp_generic+0xac2/0x12d0
[  127.962969][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  127.962990][ T7013]  ? do_xdp_generic+0x6ba/0x12d0
[  127.963039][ T7013]  ? __pfx_do_xdp_generic+0x10/0x10
[  127.963078][ T7013]  ? tun_get_user+0x2373/0x4350
[  127.963115][ T7013]  ? tun_get_user+0x2373/0x4350
[  127.963135][ T7013]  tun_get_user+0x24a0/0x4350
[  127.963172][ T7013]  ? aa_file_perm+0x18b/0x15f0
[  127.963211][ T7013]  ? aa_file_perm+0x4ed/0x15f0
[  127.963244][ T7013]  ? __pfx_tun_get_user+0x10/0x10
[  127.963280][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  127.963306][ T7013]  ? __pfx_file_ioctl+0x10/0x10
[  127.963346][ T7013]  ? ref_tracker_alloc+0x341/0x4b0
[  127.963373][ T7013]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  127.963398][ T7013]  ? tun_get+0x1c/0x2f0
[  127.963431][ T7013]  ? tun_get+0x1c/0x2f0
[  127.963470][ T7013]  ? tun_get+0x1c/0x2f0
[  127.963502][ T7013]  ? tun_get+0x1c/0x2f0
[  127.963540][ T7013]  tun_chr_write_iter+0x113/0x200
[  127.963577][ T7013]  vfs_write+0x612/0xba0
[  127.963616][ T7013]  ? __pfx_vfs_write+0x10/0x10
[  127.963656][ T7013]  ? __fget_files+0x2a/0x420
[  127.963693][ T7013]  ksys_write+0x150/0x270
[  127.963727][ T7013]  ? __pfx_ksys_write+0x10/0x10
[  127.963757][ T7013]  ? __pfx_kcov_ioctl+0x10/0x10
[  127.963794][ T7013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.963818][ T7013]  do_syscall_64+0x174/0x580
[  127.963848][ T7013]  ? trace_irq_disable+0x3b/0x140
[  127.963879][ T7013]  ? clear_bhb_loop+0x40/0x90
[  127.963905][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.963933][ T7013] RIP: 0033:0x7f2150d5d68e
[  127.963952][ T7013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  127.963970][ T7013] RSP: 002b:00007f214eff5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  127.963993][ T7013] RAX: ffffffffffffffda RBX: 00007f214eff66c0 RCX: 00007f2150d5d68e
[  127.964009][ T7013] RDX: 000000000000fdef RSI: 00002000000030c0 RDI: 00000000000000c8
[  127.964023][ T7013] RBP: 00007f2150e32d6f R08: 0000000000000000 R09: 0000000000000000
[  127.964036][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.964049][ T7013] R13: 00007f2151016128 R14: 00007f2151016090 R15: 00007ffe1b793a68
[  127.964083][ T7013]  </TASK>
[  127.964091][ T7013] Disabling lock debugging due to kernel taint
[  128.252943][ T7013] BUG: Bad page state in process syz.4.334  pfn:42bf4
[  128.259789][ T7013] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42bf4
[  128.268614][ T7013] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  128.275792][ T7013] raw: 00fff00000000000 dead000000000040 ffff888022adc000 0000000000000000
[  128.284432][ T7013] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  128.293082][ T7013] page dumped because: page_pool leak
[  128.298528][ T7013] page_owner tracks the page as allocated
[  128.304274][ T7013] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7013, tgid 7009 (syz.4.334), ts 127757282516, free_ts 127490473876
[  128.321334][ T7013]  post_alloc_hook+0x22d/0x280
[  128.326189][ T7013]  get_page_from_freelist+0x24ae/0x2530
[  128.331790][ T7013]  __alloc_frozen_pages_noprof+0x18d/0x380
[  128.337710][ T7013]  __alloc_pages_noprof+0x10/0x100
[  128.342882][ T7013]  alloc_pages_bulk_noprof+0x5ff/0x7c0
[  128.348420][ T7013]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  128.354600][ T7013]  skb_pp_cow_data+0xcd0/0x19a0
[  128.359559][ T7013]  do_xdp_generic+0x770/0x12d0
[  128.364410][ T7013]  tun_get_user+0x24a0/0x4350
[  128.369178][ T7013]  tun_chr_write_iter+0x113/0x200
[  128.374266][ T7013]  vfs_write+0x612/0xba0
[  128.378589][ T7013]  ksys_write+0x150/0x270
[  128.382971][ T7013]  do_syscall_64+0x174/0x580
[  128.387635][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.393570][ T7013] page last free pid 6996 tgid 6996 stack trace:
[  128.399958][ T7013]  __free_frozen_pages+0xc0d/0xd20
[  128.405143][ T7013]  vfree+0x1fd/0x330
[  128.409093][ T7013]  xskq_destroy+0x40/0x60
[  128.413462][ T7013]  xsk_release+0x724/0x980
[  128.417964][ T7013]  sock_close+0xad/0x220
[  128.422242][ T7013]  __fput+0x418/0xa50
[  128.426381][ T7013]  task_work_run+0x1d9/0x270
[  128.431019][ T7013]  exit_to_user_mode_loop+0x193/0x6b0
[  128.436492][ T7013]  do_syscall_64+0x353/0x580
[  128.441122][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.447177][ T7013] Modules linked in:
[  128.451110][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.4.334 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  128.451142][ T7013] Tainted: [B]=BAD_PAGE
[  128.451150][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  128.451163][ T7013] Call Trace:
[  128.451170][ T7013]  <TASK>
[  128.451179][ T7013]  dump_stack_lvl+0xe8/0x150
[  128.451204][ T7013]  bad_page+0x17f/0x1c0
[  128.451228][ T7013]  __free_frozen_pages+0xcca/0xd20
[  128.451262][ T7013]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  128.451301][ T7013]  bpf_xdp_adjust_tail+0x1ce/0x210
[  128.451325][ T7013]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  128.451345][ T7013]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  128.451383][ T7013]  do_xdp_generic+0xac2/0x12d0
[  128.451407][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  128.451429][ T7013]  ? do_xdp_generic+0x6ba/0x12d0
[  128.451457][ T7013]  ? __pfx_do_xdp_generic+0x10/0x10
[  128.451488][ T7013]  ? tun_get_user+0x2373/0x4350
[  128.451515][ T7013]  ? tun_get_user+0x2373/0x4350
[  128.451534][ T7013]  tun_get_user+0x24a0/0x4350
[  128.451560][ T7013]  ? aa_file_perm+0x18b/0x15f0
[  128.451595][ T7013]  ? aa_file_perm+0x4ed/0x15f0
[  128.451636][ T7013]  ? __pfx_tun_get_user+0x10/0x10
[  128.451688][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  128.451712][ T7013]  ? __pfx_file_ioctl+0x10/0x10
[  128.451750][ T7013]  ? ref_tracker_alloc+0x341/0x4b0
[  128.451775][ T7013]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  128.451805][ T7013]  ? tun_get+0x1c/0x2f0
[  128.451839][ T7013]  ? tun_get+0x1c/0x2f0
[  128.451875][ T7013]  ? tun_get+0x1c/0x2f0
[  128.451908][ T7013]  ? tun_get+0x1c/0x2f0
[  128.451944][ T7013]  tun_chr_write_iter+0x113/0x200
[  128.451979][ T7013]  vfs_write+0x612/0xba0
[  128.452015][ T7013]  ? __pfx_vfs_write+0x10/0x10
[  128.452051][ T7013]  ? __fget_files+0x2a/0x420
[  128.452082][ T7013]  ksys_write+0x150/0x270
[  128.452116][ T7013]  ? __pfx_ksys_write+0x10/0x10
[  128.452148][ T7013]  ? __pfx_kcov_ioctl+0x10/0x10
[  128.452183][ T7013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.452206][ T7013]  do_syscall_64+0x174/0x580
[  128.452227][ T7013]  ? trace_irq_disable+0x3b/0x140
[  128.452260][ T7013]  ? clear_bhb_loop+0x40/0x90
[  128.452285][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.452306][ T7013] RIP: 0033:0x7f2150d5d68e
[  128.452325][ T7013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  128.452344][ T7013] RSP: 002b:00007f214eff5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  128.452367][ T7013] RAX: ffffffffffffffda RBX: 00007f214eff66c0 RCX: 00007f2150d5d68e
[  128.452384][ T7013] RDX: 000000000000fdef RSI: 00002000000030c0 RDI: 00000000000000c8
[  128.452398][ T7013] RBP: 00007f2150e32d6f R08: 0000000000000000 R09: 0000000000000000
[  128.452412][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.452426][ T7013] R13: 00007f2151016128 R14: 00007f2151016090 R15: 00007ffe1b793a68
[  128.452451][ T7013]  </TASK>
[  128.452462][ T7013] BUG: Bad page state in process syz.4.334  pfn:42bf5
[  128.747790][ T7013] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42bf5
[  128.756632][ T7013] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  128.763786][ T7013] raw: 00fff00000000000 dead000000000040 ffff888022adc000 0000000000000000
[  128.772454][ T7013] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  128.781135][ T7013] page dumped because: page_pool leak
[  128.786563][ T7013] page_owner tracks the page as allocated
[  128.792308][ T7013] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7013, tgid 7009 (syz.4.334), ts 127757264492, free_ts 127490487894
[  128.809356][ T7013]  post_alloc_hook+0x22d/0x280
[  128.814169][ T7013]  get_page_from_freelist+0x24ae/0x2530
[  128.819813][ T7013]  __alloc_frozen_pages_noprof+0x18d/0x380
[  128.825694][ T7013]  __alloc_pages_noprof+0x10/0x100
[  128.830860][ T7013]  alloc_pages_bulk_noprof+0x5ff/0x7c0
[  128.836398][ T7013]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  128.842505][ T7013]  skb_pp_cow_data+0xcd0/0x19a0
[  128.847431][ T7013]  do_xdp_generic+0x770/0x12d0
[  128.852264][ T7013]  tun_get_user+0x24a0/0x4350
[  128.856991][ T7013]  tun_chr_write_iter+0x113/0x200
[  128.862062][ T7013]  vfs_write+0x612/0xba0
[  128.866389][ T7013]  ksys_write+0x150/0x270
[  128.870756][ T7013]  do_syscall_64+0x174/0x580
[  128.875421][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.881354][ T7013] page last free pid 6996 tgid 6996 stack trace:
[  128.887743][ T7013]  __free_frozen_pages+0xc0d/0xd20
[  128.892921][ T7013]  vfree+0x1fd/0x330
[  128.896900][ T7013]  xskq_destroy+0x40/0x60
[  128.901354][ T7013]  xsk_release+0x724/0x980
[  128.905861][ T7013]  sock_close+0xad/0x220
[  128.910242][ T7013]  __fput+0x418/0xa50
[  128.914310][ T7013]  task_work_run+0x1d9/0x270
[  128.918989][ T7013]  exit_to_user_mode_loop+0x193/0x6b0
[  128.924444][ T7013]  do_syscall_64+0x353/0x580
[  128.929140][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.935103][ T7013] Modules linked in:
[  128.939041][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.4.334 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  128.939075][ T7013] Tainted: [B]=BAD_PAGE
[  128.939083][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  128.939096][ T7013] Call Trace:
[  128.939104][ T7013]  <TASK>
[  128.939113][ T7013]  dump_stack_lvl+0xe8/0x150
[  128.939141][ T7013]  bad_page+0x17f/0x1c0
[  128.939167][ T7013]  __free_frozen_pages+0xcca/0xd20
[  128.939204][ T7013]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  128.939243][ T7013]  bpf_xdp_adjust_tail+0x1ce/0x210
[  128.939270][ T7013]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  128.939289][ T7013]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  128.939337][ T7013]  do_xdp_generic+0xac2/0x12d0
[  128.939363][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  128.939385][ T7013]  ? do_xdp_generic+0x6ba/0x12d0
[  128.939414][ T7013]  ? __pfx_do_xdp_generic+0x10/0x10
[  128.939446][ T7013]  ? tun_get_user+0x2373/0x4350
[  128.939474][ T7013]  ? tun_get_user+0x2373/0x4350
[  128.939493][ T7013]  tun_get_user+0x24a0/0x4350
[  128.939521][ T7013]  ? aa_file_perm+0x18b/0x15f0
[  128.939558][ T7013]  ? aa_file_perm+0x4ed/0x15f0
[  128.939591][ T7013]  ? __pfx_tun_get_user+0x10/0x10
[  128.939626][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  128.939650][ T7013]  ? __pfx_file_ioctl+0x10/0x10
[  128.939688][ T7013]  ? ref_tracker_alloc+0x341/0x4b0
[  128.939711][ T7013]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  128.939733][ T7013]  ? tun_get+0x1c/0x2f0
[  128.939765][ T7013]  ? tun_get+0x1c/0x2f0
[  128.939912][ T7013]  ? tun_get+0x1c/0x2f0
[  128.939957][ T7013]  ? tun_get+0x1c/0x2f0
[  128.939990][ T7013]  tun_chr_write_iter+0x113/0x200
[  128.940025][ T7013]  vfs_write+0x612/0xba0
[  128.940062][ T7013]  ? __pfx_vfs_write+0x10/0x10
[  128.940100][ T7013]  ? __fget_files+0x2a/0x420
[  128.940133][ T7013]  ksys_write+0x150/0x270
[  128.940166][ T7013]  ? __pfx_ksys_write+0x10/0x10
[  128.940198][ T7013]  ? __pfx_kcov_ioctl+0x10/0x10
[  128.940233][ T7013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.940256][ T7013]  do_syscall_64+0x174/0x580
[  128.940277][ T7013]  ? trace_irq_disable+0x3b/0x140
[  128.940309][ T7013]  ? clear_bhb_loop+0x40/0x90
[  128.940334][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.940356][ T7013] RIP: 0033:0x7f2150d5d68e
[  128.940375][ T7013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  128.940394][ T7013] RSP: 002b:00007f214eff5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  128.940418][ T7013] RAX: ffffffffffffffda RBX: 00007f214eff66c0 RCX: 00007f2150d5d68e
[  128.940435][ T7013] RDX: 000000000000fdef RSI: 00002000000030c0 RDI: 00000000000000c8
[  128.940449][ T7013] RBP: 00007f2150e32d6f R08: 0000000000000000 R09: 0000000000000000
[  128.940462][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.940475][ T7013] R13: 00007f2151016128 R14: 00007f2151016090 R15: 00007ffe1b793a68
[  128.940500][ T7013]  </TASK>
[  128.940512][ T7013] BUG: Bad page state in process syz.4.334  pfn:42bf6
[  129.236019][ T7013] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42bf6
[  129.244832][ T7013] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  129.252030][ T7013] raw: 00fff00000000000 dead000000000040 ffff888022adc000 0000000000000000
[  129.260700][ T7013] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  129.269341][ T7013] page dumped because: page_pool leak
[  129.274768][ T7013] page_owner tracks the page as allocated
[  129.280584][ T7013] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7013, tgid 7009 (syz.4.334), ts 127757222926, free_ts 127490502053
[  129.297591][ T7013]  post_alloc_hook+0x22d/0x280
[  129.302394][ T7013]  get_page_from_freelist+0x24ae/0x2530
[  129.308040][ T7013]  __alloc_frozen_pages_noprof+0x18d/0x380
[  129.313900][ T7013]  __alloc_pages_noprof+0x10/0x100
[  129.319118][ T7013]  alloc_pages_bulk_noprof+0x5ff/0x7c0
[  129.324638][ T7013]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  129.330830][ T7013]  skb_pp_cow_data+0xcd0/0x19a0
[  129.335770][ T7013]  do_xdp_generic+0x770/0x12d0
[  129.340577][ T7013]  tun_get_user+0x24a0/0x4350
[  129.345328][ T7013]  tun_chr_write_iter+0x113/0x200
[  129.350392][ T7013]  vfs_write+0x612/0xba0
[  129.354672][ T7013]  ksys_write+0x150/0x270
[  129.359114][ T7013]  do_syscall_64+0x174/0x580
[  129.363733][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.369706][ T7013] page last free pid 6996 tgid 6996 stack trace:
[  129.376087][ T7013]  __free_frozen_pages+0xc0d/0xd20
[  129.381268][ T7013]  vfree+0x1fd/0x330
[  129.385241][ T7013]  xskq_destroy+0x40/0x60
[  129.389617][ T7013]  xsk_release+0x724/0x980
[  129.394077][ T7013]  sock_close+0xad/0x220
[  129.398402][ T7013]  __fput+0x418/0xa50
[  129.402415][ T7013]  task_work_run+0x1d9/0x270
[  129.407077][ T7013]  exit_to_user_mode_loop+0x193/0x6b0
[  129.412501][ T7013]  do_syscall_64+0x353/0x580
[  129.417161][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.423082][ T7013] Modules linked in:
[  129.427059][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.4.334 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  129.427110][ T7013] Tainted: [B]=BAD_PAGE
[  129.427118][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  129.427131][ T7013] Call Trace:
[  129.427139][ T7013]  <TASK>
[  129.427148][ T7013]  dump_stack_lvl+0xe8/0x150
[  129.427174][ T7013]  bad_page+0x17f/0x1c0
[  129.427199][ T7013]  __free_frozen_pages+0xcca/0xd20
[  129.427236][ T7013]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  129.427276][ T7013]  bpf_xdp_adjust_tail+0x1ce/0x210
[  129.427301][ T7013]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  129.427320][ T7013]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  129.427361][ T7013]  do_xdp_generic+0xac2/0x12d0
[  129.427387][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  129.427409][ T7013]  ? do_xdp_generic+0x6ba/0x12d0
[  129.427439][ T7013]  ? __pfx_do_xdp_generic+0x10/0x10
[  129.427471][ T7013]  ? tun_get_user+0x2373/0x4350
[  129.427499][ T7013]  ? tun_get_user+0x2373/0x4350
[  129.427518][ T7013]  tun_get_user+0x24a0/0x4350
[  129.427546][ T7013]  ? aa_file_perm+0x18b/0x15f0
[  129.427583][ T7013]  ? aa_file_perm+0x4ed/0x15f0
[  129.427616][ T7013]  ? __pfx_tun_get_user+0x10/0x10
[  129.427651][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  129.427675][ T7013]  ? __pfx_file_ioctl+0x10/0x10
[  129.427713][ T7013]  ? ref_tracker_alloc+0x341/0x4b0
[  129.427737][ T7013]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  129.427759][ T7013]  ? tun_get+0x1c/0x2f0
[  129.427792][ T7013]  ? tun_get+0x1c/0x2f0
[  129.427828][ T7013]  ? tun_get+0x1c/0x2f0
[  129.427861][ T7013]  ? tun_get+0x1c/0x2f0
[  129.427903][ T7013]  tun_chr_write_iter+0x113/0x200
[  129.427939][ T7013]  vfs_write+0x612/0xba0
[  129.427975][ T7013]  ? __pfx_vfs_write+0x10/0x10
[  129.428011][ T7013]  ? __fget_files+0x2a/0x420
[  129.428042][ T7013]  ksys_write+0x150/0x270
[  129.428075][ T7013]  ? __pfx_ksys_write+0x10/0x10
[  129.428105][ T7013]  ? __pfx_kcov_ioctl+0x10/0x10
[  129.428138][ T7013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.428161][ T7013]  do_syscall_64+0x174/0x580
[  129.428182][ T7013]  ? trace_irq_disable+0x3b/0x140
[  129.428215][ T7013]  ? clear_bhb_loop+0x40/0x90
[  129.428253][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.428275][ T7013] RIP: 0033:0x7f2150d5d68e
[  129.428294][ T7013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  129.428313][ T7013] RSP: 002b:00007f214eff5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  129.428336][ T7013] RAX: ffffffffffffffda RBX: 00007f214eff66c0 RCX: 00007f2150d5d68e
[  129.428351][ T7013] RDX: 000000000000fdef RSI: 00002000000030c0 RDI: 00000000000000c8
[  129.428364][ T7013] RBP: 00007f2150e32d6f R08: 0000000000000000 R09: 0000000000000000
[  129.428375][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.428387][ T7013] R13: 00007f2151016128 R14: 00007f2151016090 R15: 00007ffe1b793a68
[  129.428410][ T7013]  </TASK>
[  129.428420][ T7013] BUG: Bad page state in process syz.4.334  pfn:42bf7
[  129.723369][ T7013] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42bf7
[  129.732185][ T7013] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  129.739345][ T7013] raw: 00fff00000000000 dead000000000040 ffff888022adc000 0000000000000000
[  129.747999][ T7013] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  129.756630][ T7013] page dumped because: page_pool leak
[  129.762012][ T7013] page_owner tracks the page as allocated
[  129.767819][ T7013] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7013, tgid 7009 (syz.4.334), ts 127757206748, free_ts 127490515383
[  129.784902][ T7013]  post_alloc_hook+0x22d/0x280
[  129.789714][ T7013]  get_page_from_freelist+0x24ae/0x2530
[  129.795333][ T7013]  __alloc_frozen_pages_noprof+0x18d/0x380
[  129.801155][ T7013]  __alloc_pages_noprof+0x10/0x100
[  129.806325][ T7013]  alloc_pages_bulk_noprof+0x5ff/0x7c0
[  129.811822][ T7013]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  129.817986][ T7013]  skb_pp_cow_data+0xcd0/0x19a0
[  129.822890][ T7013]  do_xdp_generic+0x770/0x12d0
[  129.827713][ T7013]  tun_get_user+0x24a0/0x4350
[  129.832412][ T7013]  tun_chr_write_iter+0x113/0x200
[  129.837494][ T7013]  vfs_write+0x612/0xba0
[  129.841781][ T7013]  ksys_write+0x150/0x270
[  129.846194][ T7013]  do_syscall_64+0x174/0x580
[  129.850816][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.856790][ T7013] page last free pid 6996 tgid 6996 stack trace:
[  129.863140][ T7013]  __free_frozen_pages+0xc0d/0xd20
[  129.868334][ T7013]  vfree+0x1fd/0x330
[  129.872270][ T7013]  xskq_destroy+0x40/0x60
[  129.876652][ T7013]  xsk_release+0x724/0x980
[  129.881098][ T7013]  sock_close+0xad/0x220
[  129.885408][ T7013]  __fput+0x418/0xa50
[  129.889423][ T7013]  task_work_run+0x1d9/0x270
[  129.894018][ T7013]  exit_to_user_mode_loop+0x193/0x6b0
[  129.899447][ T7013]  do_syscall_64+0x353/0x580
[  129.904061][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.910009][ T7013] Modules linked in:
[  129.913946][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.4.334 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  129.913976][ T7013] Tainted: [B]=BAD_PAGE
[  129.913984][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  129.914002][ T7013] Call Trace:
[  129.914020][ T7013]  <TASK>
[  129.914025][ T7013]  dump_stack_lvl+0xe8/0x150
[  129.914042][ T7013]  bad_page+0x17f/0x1c0
[  129.914058][ T7013]  __free_frozen_pages+0xcca/0xd20
[  129.914080][ T7013]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  129.914105][ T7013]  bpf_xdp_adjust_tail+0x1ce/0x210
[  129.914120][ T7013]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  129.914133][ T7013]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  129.914176][ T7013]  do_xdp_generic+0xac2/0x12d0
[  129.914194][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  129.914208][ T7013]  ? do_xdp_generic+0x6ba/0x12d0
[  129.914227][ T7013]  ? __pfx_do_xdp_generic+0x10/0x10
[  129.914249][ T7013]  ? tun_get_user+0x2373/0x4350
[  129.914267][ T7013]  ? tun_get_user+0x2373/0x4350
[  129.914296][ T7013]  tun_get_user+0x24a0/0x4350
[  129.914323][ T7013]  ? aa_file_perm+0x18b/0x15f0
[  129.914363][ T7013]  ? aa_file_perm+0x4ed/0x15f0
[  129.914386][ T7013]  ? __pfx_tun_get_user+0x10/0x10
[  129.914409][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  129.914425][ T7013]  ? __pfx_file_ioctl+0x10/0x10
[  129.914450][ T7013]  ? ref_tracker_alloc+0x341/0x4b0
[  129.914466][ T7013]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  129.914481][ T7013]  ? tun_get+0x1c/0x2f0
[  129.914503][ T7013]  ? tun_get+0x1c/0x2f0
[  129.914526][ T7013]  ? tun_get+0x1c/0x2f0
[  129.914547][ T7013]  ? tun_get+0x1c/0x2f0
[  129.914571][ T7013]  tun_chr_write_iter+0x113/0x200
[  129.914594][ T7013]  vfs_write+0x612/0xba0
[  129.914618][ T7013]  ? __pfx_vfs_write+0x10/0x10
[  129.914641][ T7013]  ? __fget_files+0x2a/0x420
[  129.914662][ T7013]  ksys_write+0x150/0x270
[  129.914686][ T7013]  ? __pfx_ksys_write+0x10/0x10
[  129.914706][ T7013]  ? __pfx_kcov_ioctl+0x10/0x10
[  129.914755][ T7013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.914771][ T7013]  do_syscall_64+0x174/0x580
[  129.914786][ T7013]  ? trace_irq_disable+0x3b/0x140
[  129.914808][ T7013]  ? clear_bhb_loop+0x40/0x90
[  129.914826][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.914841][ T7013] RIP: 0033:0x7f2150d5d68e
[  129.914858][ T7013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  129.914874][ T7013] RSP: 002b:00007f214eff5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  129.914912][ T7013] RAX: ffffffffffffffda RBX: 00007f214eff66c0 RCX: 00007f2150d5d68e
[  129.914928][ T7013] RDX: 000000000000fdef RSI: 00002000000030c0 RDI: 00000000000000c8
[  129.914948][ T7013] RBP: 00007f2150e32d6f R08: 0000000000000000 R09: 0000000000000000
[  129.914958][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.914967][ T7013] R13: 00007f2151016128 R14: 00007f2151016090 R15: 00007ffe1b793a68
[  129.914985][ T7013]  </TASK>
[  130.201729][ T7013] BUG: Bad page state in process syz.4.334  pfn:42bf8
[  130.208541][ T7013] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42bf8
[  130.217352][ T7013] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  130.224498][ T7013] raw: 00fff00000000000 dead000000000040 ffff888022adc000 0000000000000000
[  130.233155][ T7013] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  130.241804][ T7013] page dumped because: page_pool leak
[  130.247253][ T7013] page_owner tracks the page as allocated
[  130.252992][ T7013] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7013, tgid 7009 (syz.4.334), ts 127757178121, free_ts 127490529589
[  130.270010][ T7013]  post_alloc_hook+0x22d/0x280
[  130.274814][ T7013]  get_page_from_freelist+0x24ae/0x2530
[  130.280444][ T7013]  __alloc_frozen_pages_noprof+0x18d/0x380
[  130.286312][ T7013]  __alloc_pages_noprof+0x10/0x100
[  130.291440][ T7013]  alloc_pages_bulk_noprof+0x5ff/0x7c0
[  130.296965][ T7013]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  130.303059][ T7013]  skb_pp_cow_data+0xcd0/0x19a0
[  130.307966][ T7013]  do_xdp_generic+0x770/0x12d0
[  130.312757][ T7013]  tun_get_user+0x24a0/0x4350
[  130.317489][ T7013]  tun_chr_write_iter+0x113/0x200
[  130.322569][ T7013]  vfs_write+0x612/0xba0
[  130.326894][ T7013]  ksys_write+0x150/0x270
[  130.331264][ T7013]  do_syscall_64+0x174/0x580
[  130.335925][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.341862][ T7013] page last free pid 6996 tgid 6996 stack trace:
[  130.348243][ T7013]  __free_frozen_pages+0xc0d/0xd20
[  130.353410][ T7013]  vfree+0x1fd/0x330
[  130.357373][ T7013]  xskq_destroy+0x40/0x60
[  130.361738][ T7013]  xsk_release+0x724/0x980
[  130.366214][ T7013]  sock_close+0xad/0x220
[  130.370495][ T7013]  __fput+0x418/0xa50
[  130.374516][ T7013]  task_work_run+0x1d9/0x270
[  130.379206][ T7013]  exit_to_user_mode_loop+0x193/0x6b0
[  130.384616][ T7013]  do_syscall_64+0x353/0x580
[  130.389264][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.395199][ T7013] Modules linked in:
[  130.399098][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.4.334 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  130.399117][ T7013] Tainted: [B]=BAD_PAGE
[  130.399122][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  130.399130][ T7013] Call Trace:
[  130.399136][ T7013]  <TASK>
[  130.399141][ T7013]  dump_stack_lvl+0xe8/0x150
[  130.399158][ T7013]  bad_page+0x17f/0x1c0
[  130.399176][ T7013]  __free_frozen_pages+0xcca/0xd20
[  130.399199][ T7013]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  130.399224][ T7013]  bpf_xdp_adjust_tail+0x1ce/0x210
[  130.399273][ T7013]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  130.399293][ T7013]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  130.399338][ T7013]  do_xdp_generic+0xac2/0x12d0
[  130.399356][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  130.399371][ T7013]  ? do_xdp_generic+0x6ba/0x12d0
[  130.399390][ T7013]  ? __pfx_do_xdp_generic+0x10/0x10
[  130.399412][ T7013]  ? tun_get_user+0x2373/0x4350
[  130.399430][ T7013]  ? tun_get_user+0x2373/0x4350
[  130.399442][ T7013]  tun_get_user+0x24a0/0x4350
[  130.399460][ T7013]  ? aa_file_perm+0x18b/0x15f0
[  130.399485][ T7013]  ? aa_file_perm+0x4ed/0x15f0
[  130.399507][ T7013]  ? __pfx_tun_get_user+0x10/0x10
[  130.399531][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  130.399546][ T7013]  ? __pfx_file_ioctl+0x10/0x10
[  130.399571][ T7013]  ? ref_tracker_alloc+0x341/0x4b0
[  130.399587][ T7013]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  130.399602][ T7013]  ? tun_get+0x1c/0x2f0
[  130.399624][ T7013]  ? tun_get+0x1c/0x2f0
[  130.399648][ T7013]  ? tun_get+0x1c/0x2f0
[  130.399674][ T7013]  ? tun_get+0x1c/0x2f0
[  130.399697][ T7013]  tun_chr_write_iter+0x113/0x200
[  130.399721][ T7013]  vfs_write+0x612/0xba0
[  130.399744][ T7013]  ? __pfx_vfs_write+0x10/0x10
[  130.399768][ T7013]  ? __fget_files+0x2a/0x420
[  130.399789][ T7013]  ksys_write+0x150/0x270
[  130.399810][ T7013]  ? __pfx_ksys_write+0x10/0x10
[  130.399831][ T7013]  ? __pfx_kcov_ioctl+0x10/0x10
[  130.399853][ T7013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.399868][ T7013]  do_syscall_64+0x174/0x580
[  130.399882][ T7013]  ? trace_irq_disable+0x3b/0x140
[  130.399904][ T7013]  ? clear_bhb_loop+0x40/0x90
[  130.399921][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.399935][ T7013] RIP: 0033:0x7f2150d5d68e
[  130.399948][ T7013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  130.399960][ T7013] RSP: 002b:00007f214eff5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  130.399976][ T7013] RAX: ffffffffffffffda RBX: 00007f214eff66c0 RCX: 00007f2150d5d68e
[  130.399987][ T7013] RDX: 000000000000fdef RSI: 00002000000030c0 RDI: 00000000000000c8
[  130.399996][ T7013] RBP: 00007f2150e32d6f R08: 0000000000000000 R09: 0000000000000000
[  130.400006][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.400032][ T7013] R13: 00007f2151016128 R14: 00007f2151016090 R15: 00007ffe1b793a68
[  130.400056][ T7013]  </TASK>
[  130.400068][ T7013] BUG: Bad page state in process syz.4.334  pfn:42bf9
[  130.694389][ T7013] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42bf9
[  130.703206][ T7013] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  130.710365][ T7013] raw: 00fff00000000000 dead000000000040 ffff888022adc000 0000000000000000
[  130.719023][ T7013] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  130.727649][ T7013] page dumped because: page_pool leak
[  130.733021][ T7013] page_owner tracks the page as allocated
[  130.738783][ T7013] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7013, tgid 7009 (syz.4.334), ts 127757160700, free_ts 127490544086
[  130.755763][ T7013]  post_alloc_hook+0x22d/0x280
[  130.760556][ T7013]  get_page_from_freelist+0x24ae/0x2530
[  130.766232][ T7013]  __alloc_frozen_pages_noprof+0x18d/0x380
[  130.772079][ T7013]  __alloc_pages_noprof+0x10/0x100
[  130.777273][ T7013]  alloc_pages_bulk_noprof+0x5ff/0x7c0
[  130.782766][ T7013]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  130.788908][ T7013]  skb_pp_cow_data+0xcd0/0x19a0
[  130.793806][ T7013]  do_xdp_generic+0x770/0x12d0
[  130.798648][ T7013]  tun_get_user+0x24a0/0x4350
[  130.803444][ T7013]  tun_chr_write_iter+0x113/0x200
[  130.808551][ T7013]  vfs_write+0x612/0xba0
[  130.812844][ T7013]  ksys_write+0x150/0x270
[  130.817250][ T7013]  do_syscall_64+0x174/0x580
[  130.821864][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.827845][ T7013] page last free pid 6996 tgid 6996 stack trace:
[  130.834198][ T7013]  __free_frozen_pages+0xc0d/0xd20
[  130.839391][ T7013]  vfree+0x1fd/0x330
[  130.843313][ T7013]  xskq_destroy+0x40/0x60
[  130.847693][ T7013]  xsk_release+0x724/0x980
[  130.852137][ T7013]  sock_close+0xad/0x220
[  130.856435][ T7013]  __fput+0x418/0xa50
[  130.860453][ T7013]  task_work_run+0x1d9/0x270
[  130.865119][ T7013]  exit_to_user_mode_loop+0x193/0x6b0
[  130.870534][ T7013]  do_syscall_64+0x353/0x580
[  130.875179][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.881098][ T7013] Modules linked in:
[  130.885062][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.4.334 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  130.885094][ T7013] Tainted: [B]=BAD_PAGE
[  130.885101][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  130.885113][ T7013] Call Trace:
[  130.885121][ T7013]  <TASK>
[  130.885130][ T7013]  dump_stack_lvl+0xe8/0x150
[  130.885156][ T7013]  bad_page+0x17f/0x1c0
[  130.885181][ T7013]  __free_frozen_pages+0xcca/0xd20
[  130.885217][ T7013]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  130.885258][ T7013]  bpf_xdp_adjust_tail+0x1ce/0x210
[  130.885285][ T7013]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  130.885306][ T7013]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  130.885348][ T7013]  do_xdp_generic+0xac2/0x12d0
[  130.885374][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  130.885397][ T7013]  ? do_xdp_generic+0x6ba/0x12d0
[  130.885426][ T7013]  ? __pfx_do_xdp_generic+0x10/0x10
[  130.885459][ T7013]  ? tun_get_user+0x2373/0x4350
[  130.885487][ T7013]  ? tun_get_user+0x2373/0x4350
[  130.885507][ T7013]  tun_get_user+0x24a0/0x4350
[  130.885534][ T7013]  ? aa_file_perm+0x18b/0x15f0
[  130.885581][ T7013]  ? aa_file_perm+0x4ed/0x15f0
[  130.885616][ T7013]  ? __pfx_tun_get_user+0x10/0x10
[  130.885652][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  130.885677][ T7013]  ? __pfx_file_ioctl+0x10/0x10
[  130.885715][ T7013]  ? ref_tracker_alloc+0x341/0x4b0
[  130.885740][ T7013]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  130.885763][ T7013]  ? tun_get+0x1c/0x2f0
[  130.885797][ T7013]  ? tun_get+0x1c/0x2f0
[  130.885833][ T7013]  ? tun_get+0x1c/0x2f0
[  130.885866][ T7013]  ? tun_get+0x1c/0x2f0
[  130.885902][ T7013]  tun_chr_write_iter+0x113/0x200
[  130.885950][ T7013]  vfs_write+0x612/0xba0
[  130.885984][ T7013]  ? __pfx_vfs_write+0x10/0x10
[  130.886019][ T7013]  ? __fget_files+0x2a/0x420
[  130.886050][ T7013]  ksys_write+0x150/0x270
[  130.886082][ T7013]  ? __pfx_ksys_write+0x10/0x10
[  130.886113][ T7013]  ? __pfx_kcov_ioctl+0x10/0x10
[  130.886146][ T7013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.886168][ T7013]  do_syscall_64+0x174/0x580
[  130.886189][ T7013]  ? trace_irq_disable+0x3b/0x140
[  130.886220][ T7013]  ? clear_bhb_loop+0x40/0x90
[  130.886245][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.886266][ T7013] RIP: 0033:0x7f2150d5d68e
[  130.886285][ T7013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  130.886304][ T7013] RSP: 002b:00007f214eff5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  130.886328][ T7013] RAX: ffffffffffffffda RBX: 00007f214eff66c0 RCX: 00007f2150d5d68e
[  130.886355][ T7013] RDX: 000000000000fdef RSI: 00002000000030c0 RDI: 00000000000000c8
[  130.886369][ T7013] RBP: 00007f2150e32d6f R08: 0000000000000000 R09: 0000000000000000
[  130.886382][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.886394][ T7013] R13: 00007f2151016128 R14: 00007f2151016090 R15: 00007ffe1b793a68
[  130.886417][ T7013]  </TASK>
[  130.886429][ T7013] BUG: Bad page state in process syz.4.334  pfn:42bfa
[  131.180610][ T7013] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42bfa
[  131.189441][ T7013] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  131.196622][ T7013] raw: 00fff00000000000 dead000000000040 ffff888022adc000 0000000000000000
[  131.205267][ T7013] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  131.213863][ T7013] page dumped because: page_pool leak
[  131.219305][ T7013] page_owner tracks the page as allocated
[  131.225079][ T7013] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7013, tgid 7009 (syz.4.334), ts 127757143035, free_ts 127490558275
[  131.242068][ T7013]  post_alloc_hook+0x22d/0x280
[  131.246883][ T7013]  get_page_from_freelist+0x24ae/0x2530
[  131.252458][ T7013]  __alloc_frozen_pages_noprof+0x18d/0x380
[  131.258353][ T7013]  __alloc_pages_noprof+0x10/0x100
[  131.263506][ T7013]  alloc_pages_bulk_noprof+0x5ff/0x7c0
[  131.269038][ T7013]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  131.275172][ T7013]  skb_pp_cow_data+0xcd0/0x19a0
[  131.280065][ T7013]  do_xdp_generic+0x770/0x12d0
[  131.284845][ T7013]  tun_get_user+0x24a0/0x4350
[  131.289606][ T7013]  tun_chr_write_iter+0x113/0x200
[  131.294676][ T7013]  vfs_write+0x612/0xba0
[  131.299020][ T7013]  ksys_write+0x150/0x270
[  131.303395][ T7013]  do_syscall_64+0x174/0x580
[  131.308038][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.313976][ T7013] page last free pid 6996 tgid 6996 stack trace:
[  131.320386][ T7013]  __free_frozen_pages+0xc0d/0xd20
[  131.325552][ T7013]  vfree+0x1fd/0x330
[  131.329476][ T7013]  xskq_destroy+0x40/0x60
[  131.333821][ T7013]  xsk_release+0x724/0x980
[  131.338291][ T7013]  sock_close+0xad/0x220
[  131.342567][ T7013]  __fput+0x418/0xa50
[  131.346599][ T7013]  task_work_run+0x1d9/0x270
[  131.351232][ T7013]  exit_to_user_mode_loop+0x193/0x6b0
[  131.356690][ T7013]  do_syscall_64+0x353/0x580
[  131.361309][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.367251][ T7013] Modules linked in:
[  131.371174][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.4.334 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  131.371195][ T7013] Tainted: [B]=BAD_PAGE
[  131.371218][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  131.371231][ T7013] Call Trace:
[  131.371239][ T7013]  <TASK>
[  131.371248][ T7013]  dump_stack_lvl+0xe8/0x150
[  131.371280][ T7013]  bad_page+0x17f/0x1c0
[  131.371298][ T7013]  __free_frozen_pages+0xcca/0xd20
[  131.371322][ T7013]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  131.371348][ T7013]  bpf_xdp_adjust_tail+0x1ce/0x210
[  131.371365][ T7013]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  131.371378][ T7013]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  131.371408][ T7013]  do_xdp_generic+0xac2/0x12d0
[  131.371425][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  131.371440][ T7013]  ? do_xdp_generic+0x6ba/0x12d0
[  131.371460][ T7013]  ? __pfx_do_xdp_generic+0x10/0x10
[  131.371481][ T7013]  ? tun_get_user+0x2373/0x4350
[  131.371499][ T7013]  ? tun_get_user+0x2373/0x4350
[  131.371512][ T7013]  tun_get_user+0x24a0/0x4350
[  131.371532][ T7013]  ? aa_file_perm+0x18b/0x15f0
[  131.371557][ T7013]  ? aa_file_perm+0x4ed/0x15f0
[  131.371579][ T7013]  ? __pfx_tun_get_user+0x10/0x10
[  131.371602][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  131.371618][ T7013]  ? __pfx_file_ioctl+0x10/0x10
[  131.371643][ T7013]  ? ref_tracker_alloc+0x341/0x4b0
[  131.371659][ T7013]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  131.371674][ T7013]  ? tun_get+0x1c/0x2f0
[  131.371696][ T7013]  ? tun_get+0x1c/0x2f0
[  131.371720][ T7013]  ? tun_get+0x1c/0x2f0
[  131.371741][ T7013]  ? tun_get+0x1c/0x2f0
[  131.371765][ T7013]  tun_chr_write_iter+0x113/0x200
[  131.371789][ T7013]  vfs_write+0x612/0xba0
[  131.371813][ T7013]  ? __pfx_vfs_write+0x10/0x10
[  131.371836][ T7013]  ? __fget_files+0x2a/0x420
[  131.371857][ T7013]  ksys_write+0x150/0x270
[  131.371878][ T7013]  ? __pfx_ksys_write+0x10/0x10
[  131.371899][ T7013]  ? __pfx_kcov_ioctl+0x10/0x10
[  131.371922][ T7013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.371937][ T7013]  do_syscall_64+0x174/0x580
[  131.371950][ T7013]  ? trace_irq_disable+0x3b/0x140
[  131.371972][ T7013]  ? clear_bhb_loop+0x40/0x90
[  131.371988][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.372002][ T7013] RIP: 0033:0x7f2150d5d68e
[  131.372020][ T7013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  131.372033][ T7013] RSP: 002b:00007f214eff5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  131.372048][ T7013] RAX: ffffffffffffffda RBX: 00007f214eff66c0 RCX: 00007f2150d5d68e
[  131.372059][ T7013] RDX: 000000000000fdef RSI: 00002000000030c0 RDI: 00000000000000c8
[  131.372069][ T7013] RBP: 00007f2150e32d6f R08: 0000000000000000 R09: 0000000000000000
[  131.372078][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.372087][ T7013] R13: 00007f2151016128 R14: 00007f2151016090 R15: 00007ffe1b793a68
[  131.372103][ T7013]  </TASK>
[  131.372112][ T7013] BUG: Bad page state in process syz.4.334  pfn:42bfb
[  131.666315][ T7013] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42bfb
[  131.675139][ T7013] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  131.682274][ T7013] raw: 00fff00000000000 dead000000000040 ffff888022adc000 0000000000000000
[  131.690933][ T7013] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  131.699569][ T7013] page dumped because: page_pool leak
[  131.705043][ T7013] page_owner tracks the page as allocated
[  131.710769][ T7013] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7013, tgid 7009 (syz.4.334), ts 127757125789, free_ts 127490572005
[  131.727754][ T7013]  post_alloc_hook+0x22d/0x280
[  131.732567][ T7013]  get_page_from_freelist+0x24ae/0x2530
[  131.738188][ T7013]  __alloc_frozen_pages_noprof+0x18d/0x380
[  131.744035][ T7013]  __alloc_pages_noprof+0x10/0x100
[  131.749221][ T7013]  alloc_pages_bulk_noprof+0x5ff/0x7c0
[  131.754717][ T7013]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  131.760858][ T7013]  skb_pp_cow_data+0xcd0/0x19a0
[  131.765796][ T7013]  do_xdp_generic+0x770/0x12d0
[  131.770641][ T7013]  tun_get_user+0x24a0/0x4350
[  131.775387][ T7013]  tun_chr_write_iter+0x113/0x200
[  131.780474][ T7013]  vfs_write+0x612/0xba0
[  131.784757][ T7013]  ksys_write+0x150/0x270
[  131.789156][ T7013]  do_syscall_64+0x174/0x580
[  131.793788][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.799737][ T7013] page last free pid 6996 tgid 6996 stack trace:
[  131.806101][ T7013]  __free_frozen_pages+0xc0d/0xd20
[  131.811249][ T7013]  vfree+0x1fd/0x330
[  131.815203][ T7013]  xskq_destroy+0x40/0x60
[  131.819565][ T7013]  xsk_release+0x724/0x980
[  131.824005][ T7013]  sock_close+0xad/0x220
[  131.828342][ T7013]  __fput+0x418/0xa50
[  131.832356][ T7013]  task_work_run+0x1d9/0x270
[  131.837032][ T7013]  exit_to_user_mode_loop+0x193/0x6b0
[  131.842442][ T7013]  do_syscall_64+0x353/0x580
[  131.847084][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.853018][ T7013] Modules linked in:
[  131.856994][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.4.334 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  131.857026][ T7013] Tainted: [B]=BAD_PAGE
[  131.857034][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  131.857047][ T7013] Call Trace:
[  131.857055][ T7013]  <TASK>
[  131.857063][ T7013]  dump_stack_lvl+0xe8/0x150
[  131.857089][ T7013]  bad_page+0x17f/0x1c0
[  131.857115][ T7013]  __free_frozen_pages+0xcca/0xd20
[  131.857149][ T7013]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  131.857188][ T7013]  bpf_xdp_adjust_tail+0x1ce/0x210
[  131.857212][ T7013]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  131.857231][ T7013]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  131.857271][ T7013]  do_xdp_generic+0xac2/0x12d0
[  131.857296][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  131.857317][ T7013]  ? do_xdp_generic+0x6ba/0x12d0
[  131.857346][ T7013]  ? __pfx_do_xdp_generic+0x10/0x10
[  131.857377][ T7013]  ? tun_get_user+0x2373/0x4350
[  131.857422][ T7013]  ? tun_get_user+0x2373/0x4350
[  131.857441][ T7013]  tun_get_user+0x24a0/0x4350
[  131.857469][ T7013]  ? aa_file_perm+0x18b/0x15f0
[  131.857507][ T7013]  ? aa_file_perm+0x4ed/0x15f0
[  131.857549][ T7013]  ? __pfx_tun_get_user+0x10/0x10
[  131.857585][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  131.857610][ T7013]  ? __pfx_file_ioctl+0x10/0x10
[  131.857645][ T7013]  ? ref_tracker_alloc+0x341/0x4b0
[  131.857666][ T7013]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  131.857687][ T7013]  ? tun_get+0x1c/0x2f0
[  131.857718][ T7013]  ? tun_get+0x1c/0x2f0
[  131.857749][ T7013]  ? tun_get+0x1c/0x2f0
[  131.857780][ T7013]  ? tun_get+0x1c/0x2f0
[  131.857815][ T7013]  tun_chr_write_iter+0x113/0x200
[  131.857849][ T7013]  vfs_write+0x612/0xba0
[  131.857885][ T7013]  ? __pfx_vfs_write+0x10/0x10
[  131.857922][ T7013]  ? __fget_files+0x2a/0x420
[  131.857953][ T7013]  ksys_write+0x150/0x270
[  131.857984][ T7013]  ? __pfx_ksys_write+0x10/0x10
[  131.858015][ T7013]  ? __pfx_kcov_ioctl+0x10/0x10
[  131.858048][ T7013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.858069][ T7013]  do_syscall_64+0x174/0x580
[  131.858089][ T7013]  ? trace_irq_disable+0x3b/0x140
[  131.858120][ T7013]  ? clear_bhb_loop+0x40/0x90
[  131.858145][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.858166][ T7013] RIP: 0033:0x7f2150d5d68e
[  131.858184][ T7013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  131.858202][ T7013] RSP: 002b:00007f214eff5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  131.858226][ T7013] RAX: ffffffffffffffda RBX: 00007f214eff66c0 RCX: 00007f2150d5d68e
[  131.858243][ T7013] RDX: 000000000000fdef RSI: 00002000000030c0 RDI: 00000000000000c8
[  131.858269][ T7013] RBP: 00007f2150e32d6f R08: 0000000000000000 R09: 0000000000000000
[  131.858282][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.858295][ T7013] R13: 00007f2151016128 R14: 00007f2151016090 R15: 00007ffe1b793a68
[  131.858320][ T7013]  </TASK>
[  131.858331][ T7013] BUG: Bad page state in process syz.4.334  pfn:42bfc
[  132.152421][ T7013] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42bfc
[  132.161262][ T7013] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  132.168427][ T7013] raw: 00fff00000000000 dead000000000040 ffff888022adc000 0000000000000000
[  132.177060][ T7013] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  132.185674][ T7013] page dumped because: page_pool leak
[  132.191043][ T7013] page_owner tracks the page as allocated
[  132.196803][ T7013] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7013, tgid 7009 (syz.4.334), ts 127757108694, free_ts 127490586493
[  132.213791][ T7013]  post_alloc_hook+0x22d/0x280
[  132.218615][ T7013]  get_page_from_freelist+0x24ae/0x2530
[  132.224196][ T7013]  __alloc_frozen_pages_noprof+0x18d/0x380
[  132.230078][ T7013]  __alloc_pages_noprof+0x10/0x100
[  132.235258][ T7013]  alloc_pages_bulk_noprof+0x5ff/0x7c0
[  132.240759][ T7013]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  132.246910][ T7013]  skb_pp_cow_data+0xcd0/0x19a0
[  132.251802][ T7013]  do_xdp_generic+0x770/0x12d0
[  132.256648][ T7013]  tun_get_user+0x24a0/0x4350
[  132.261346][ T7013]  tun_chr_write_iter+0x113/0x200
[  132.266421][ T7013]  vfs_write+0x612/0xba0
[  132.270699][ T7013]  ksys_write+0x150/0x270
[  132.275092][ T7013]  do_syscall_64+0x174/0x580
[  132.279716][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.285662][ T7013] page last free pid 6996 tgid 6996 stack trace:
[  132.292000][ T7013]  __free_frozen_pages+0xc0d/0xd20
[  132.297185][ T7013]  vfree+0x1fd/0x330
[  132.301106][ T7013]  xskq_destroy+0x40/0x60
[  132.305493][ T7013]  xsk_release+0x724/0x980
[  132.309948][ T7013]  sock_close+0xad/0x220
[  132.314209][ T7013]  __fput+0x418/0xa50
[  132.318273][ T7013]  task_work_run+0x1d9/0x270
[  132.322889][ T7013]  exit_to_user_mode_loop+0x193/0x6b0
[  132.328323][ T7013]  do_syscall_64+0x353/0x580
[  132.332936][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.338888][ T7013] Modules linked in:
[  132.342835][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.4.334 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  132.342865][ T7013] Tainted: [B]=BAD_PAGE
[  132.342870][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  132.342879][ T7013] Call Trace:
[  132.342885][ T7013]  <TASK>
[  132.342890][ T7013]  dump_stack_lvl+0xe8/0x150
[  132.342916][ T7013]  bad_page+0x17f/0x1c0
[  132.342933][ T7013]  __free_frozen_pages+0xcca/0xd20
[  132.342956][ T7013]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  132.342985][ T7013]  bpf_xdp_adjust_tail+0x1ce/0x210
[  132.343002][ T7013]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  132.343014][ T7013]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  132.343042][ T7013]  do_xdp_generic+0xac2/0x12d0
[  132.343059][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  132.343073][ T7013]  ? do_xdp_generic+0x6ba/0x12d0
[  132.343093][ T7013]  ? __pfx_do_xdp_generic+0x10/0x10
[  132.343114][ T7013]  ? tun_get_user+0x2373/0x4350
[  132.343133][ T7013]  ? tun_get_user+0x2373/0x4350
[  132.343145][ T7013]  tun_get_user+0x24a0/0x4350
[  132.343163][ T7013]  ? aa_file_perm+0x18b/0x15f0
[  132.343188][ T7013]  ? aa_file_perm+0x4ed/0x15f0
[  132.343210][ T7013]  ? __pfx_tun_get_user+0x10/0x10
[  132.343233][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  132.343248][ T7013]  ? __pfx_file_ioctl+0x10/0x10
[  132.343273][ T7013]  ? ref_tracker_alloc+0x341/0x4b0
[  132.343289][ T7013]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  132.343304][ T7013]  ? tun_get+0x1c/0x2f0
[  132.343326][ T7013]  ? tun_get+0x1c/0x2f0
[  132.343350][ T7013]  ? tun_get+0x1c/0x2f0
[  132.343371][ T7013]  ? tun_get+0x1c/0x2f0
[  132.343394][ T7013]  tun_chr_write_iter+0x113/0x200
[  132.343417][ T7013]  vfs_write+0x612/0xba0
[  132.343441][ T7013]  ? __pfx_vfs_write+0x10/0x10
[  132.343469][ T7013]  ? __fget_files+0x2a/0x420
[  132.343490][ T7013]  ksys_write+0x150/0x270
[  132.343511][ T7013]  ? __pfx_ksys_write+0x10/0x10
[  132.343531][ T7013]  ? __pfx_kcov_ioctl+0x10/0x10
[  132.343554][ T7013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.343569][ T7013]  do_syscall_64+0x174/0x580
[  132.343583][ T7013]  ? trace_irq_disable+0x3b/0x140
[  132.343604][ T7013]  ? clear_bhb_loop+0x40/0x90
[  132.343621][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.343635][ T7013] RIP: 0033:0x7f2150d5d68e
[  132.343648][ T7013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  132.343660][ T7013] RSP: 002b:00007f214eff5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  132.343675][ T7013] RAX: ffffffffffffffda RBX: 00007f214eff66c0 RCX: 00007f2150d5d68e
[  132.343687][ T7013] RDX: 000000000000fdef RSI: 00002000000030c0 RDI: 00000000000000c8
[  132.343696][ T7013] RBP: 00007f2150e32d6f R08: 0000000000000000 R09: 0000000000000000
[  132.343705][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.343714][ T7013] R13: 00007f2151016128 R14: 00007f2151016090 R15: 00007ffe1b793a68
[  132.343731][ T7013]  </TASK>
[  132.343740][ T7013] BUG: Bad page state in process syz.4.334  pfn:42bfd
[  132.637961][ T7013] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42bfd
[  132.646800][ T7013] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  132.653953][ T7013] raw: 00fff00000000000 dead000000000040 ffff888022adc000 0000000000000000
[  132.662626][ T7013] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  132.671563][ T7013] page dumped because: page_pool leak
[  132.676990][ T7013] page_owner tracks the page as allocated
[  132.682751][ T7013] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7013, tgid 7009 (syz.4.334), ts 127757091301, free_ts 127490601802
[  132.699770][ T7013]  post_alloc_hook+0x22d/0x280
[  132.704582][ T7013]  get_page_from_freelist+0x24ae/0x2530
[  132.710216][ T7013]  __alloc_frozen_pages_noprof+0x18d/0x380
[  132.716096][ T7013]  __alloc_pages_noprof+0x10/0x100
[  132.721260][ T7013]  alloc_pages_bulk_noprof+0x5ff/0x7c0
[  132.726825][ T7013]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  132.732936][ T7013]  skb_pp_cow_data+0xcd0/0x19a0
[  132.737865][ T7013]  do_xdp_generic+0x770/0x12d0
[  132.742692][ T7013]  tun_get_user+0x24a0/0x4350
[  132.747430][ T7013]  tun_chr_write_iter+0x113/0x200
[  132.752487][ T7013]  vfs_write+0x612/0xba0
[  132.756797][ T7013]  ksys_write+0x150/0x270
[  132.761171][ T7013]  do_syscall_64+0x174/0x580
[  132.765833][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.771754][ T7013] page last free pid 6996 tgid 6996 stack trace:
[  132.778135][ T7013]  __free_frozen_pages+0xc0d/0xd20
[  132.783288][ T7013]  vfree+0x1fd/0x330
[  132.787277][ T7013]  xskq_destroy+0x40/0x60
[  132.791655][ T7013]  xsk_release+0x724/0x980
[  132.796137][ T7013]  sock_close+0xad/0x220
[  132.800429][ T7013]  __fput+0x418/0xa50
[  132.804468][ T7013]  task_work_run+0x1d9/0x270
[  132.809149][ T7013]  exit_to_user_mode_loop+0x193/0x6b0
[  132.814571][ T7013]  do_syscall_64+0x353/0x580
[  132.819239][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.825218][ T7013] Modules linked in:
[  132.829145][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.4.334 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  132.829167][ T7013] Tainted: [B]=BAD_PAGE
[  132.829172][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  132.829181][ T7013] Call Trace:
[  132.829187][ T7013]  <TASK>
[  132.829192][ T7013]  dump_stack_lvl+0xe8/0x150
[  132.829211][ T7013]  bad_page+0x17f/0x1c0
[  132.829228][ T7013]  __free_frozen_pages+0xcca/0xd20
[  132.829252][ T7013]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  132.829279][ T7013]  bpf_xdp_adjust_tail+0x1ce/0x210
[  132.829296][ T7013]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  132.829309][ T7013]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  132.829336][ T7013]  do_xdp_generic+0xac2/0x12d0
[  132.829354][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  132.829368][ T7013]  ? do_xdp_generic+0x6ba/0x12d0
[  132.829388][ T7013]  ? __pfx_do_xdp_generic+0x10/0x10
[  132.829409][ T7013]  ? tun_get_user+0x2373/0x4350
[  132.829434][ T7013]  ? tun_get_user+0x2373/0x4350
[  132.829446][ T7013]  tun_get_user+0x24a0/0x4350
[  132.829465][ T7013]  ? aa_file_perm+0x18b/0x15f0
[  132.829490][ T7013]  ? aa_file_perm+0x4ed/0x15f0
[  132.829512][ T7013]  ? __pfx_tun_get_user+0x10/0x10
[  132.829535][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  132.829550][ T7013]  ? __pfx_file_ioctl+0x10/0x10
[  132.829575][ T7013]  ? ref_tracker_alloc+0x341/0x4b0
[  132.829591][ T7013]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  132.829606][ T7013]  ? tun_get+0x1c/0x2f0
[  132.829628][ T7013]  ? tun_get+0x1c/0x2f0
[  132.829652][ T7013]  ? tun_get+0x1c/0x2f0
[  132.829673][ T7013]  ? tun_get+0x1c/0x2f0
[  132.829696][ T7013]  tun_chr_write_iter+0x113/0x200
[  132.829719][ T7013]  vfs_write+0x612/0xba0
[  132.829743][ T7013]  ? __pfx_vfs_write+0x10/0x10
[  132.829767][ T7013]  ? __fget_files+0x2a/0x420
[  132.829788][ T7013]  ksys_write+0x150/0x270
[  132.829809][ T7013]  ? __pfx_ksys_write+0x10/0x10
[  132.829829][ T7013]  ? __pfx_kcov_ioctl+0x10/0x10
[  132.829852][ T7013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.829867][ T7013]  do_syscall_64+0x174/0x580
[  132.829881][ T7013]  ? trace_irq_disable+0x3b/0x140
[  132.829902][ T7013]  ? clear_bhb_loop+0x40/0x90
[  132.829921][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.829936][ T7013] RIP: 0033:0x7f2150d5d68e
[  132.829949][ T7013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  132.829961][ T7013] RSP: 002b:00007f214eff5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  132.829977][ T7013] RAX: ffffffffffffffda RBX: 00007f214eff66c0 RCX: 00007f2150d5d68e
[  132.829988][ T7013] RDX: 000000000000fdef RSI: 00002000000030c0 RDI: 00000000000000c8
[  132.829997][ T7013] RBP: 00007f2150e32d6f R08: 0000000000000000 R09: 0000000000000000
[  132.830006][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.830015][ T7013] R13: 00007f2151016128 R14: 00007f2151016090 R15: 00007ffe1b793a68
[  132.830032][ T7013]  </TASK>
[  132.830040][ T7013] BUG: Bad page state in process syz.4.334  pfn:42bfe
[  133.124289][ T7013] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42bfe
[  133.133110][ T7013] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  133.140297][ T7013] raw: 00fff00000000000 dead000000000040 ffff888022adc000 0000000000000000
[  133.148976][ T7013] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  133.157609][ T7013] page dumped because: page_pool leak
[  133.162999][ T7013] page_owner tracks the page as allocated
[  133.168779][ T7013] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7013, tgid 7009 (syz.4.334), ts 127757073832, free_ts 127490615685
[  133.185789][ T7013]  post_alloc_hook+0x22d/0x280
[  133.190583][ T7013]  get_page_from_freelist+0x24ae/0x2530
[  133.196194][ T7013]  __alloc_frozen_pages_noprof+0x18d/0x380
[  133.202042][ T7013]  __alloc_pages_noprof+0x10/0x100
[  133.207257][ T7013]  alloc_pages_bulk_noprof+0x5ff/0x7c0
[  133.212751][ T7013]  __page_pool_alloc_netmems_slow+0x14f/0x720
[  133.218893][ T7013]  skb_pp_cow_data+0xcd0/0x19a0
[  133.223789][ T7013]  do_xdp_generic+0x770/0x12d0
[  133.228629][ T7013]  tun_get_user+0x24a0/0x4350
[  133.233332][ T7013]  tun_chr_write_iter+0x113/0x200
[  133.238440][ T7013]  vfs_write+0x612/0xba0
[  133.242735][ T7013]  ksys_write+0x150/0x270
[  133.247135][ T7013]  do_syscall_64+0x174/0x580
[  133.251752][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.257700][ T7013] page last free pid 6996 tgid 6996 stack trace:
[  133.264044][ T7013]  __free_frozen_pages+0xc0d/0xd20
[  133.269224][ T7013]  vfree+0x1fd/0x330
[  133.273147][ T7013]  xskq_destroy+0x40/0x60
[  133.277545][ T7013]  xsk_release+0x724/0x980
[  133.282004][ T7013]  sock_close+0xad/0x220
[  133.286325][ T7013]  __fput+0x418/0xa50
[  133.290329][ T7013]  task_work_run+0x1d9/0x270
[  133.294978][ T7013]  exit_to_user_mode_loop+0x193/0x6b0
[  133.300390][ T7013]  do_syscall_64+0x353/0x580
[  133.305038][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.310956][ T7013] Modules linked in:
[  133.314863][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.4.334 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  133.314897][ T7013] Tainted: [B]=BAD_PAGE
[  133.314905][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  133.314917][ T7013] Call Trace:
[  133.314925][ T7013]  <TASK>
[  133.314932][ T7013]  dump_stack_lvl+0xe8/0x150
[  133.314958][ T7013]  bad_page+0x17f/0x1c0
[  133.314983][ T7013]  __free_frozen_pages+0xcca/0xd20
[  133.315017][ T7013]  bpf_xdp_frags_shrink_tail+0x4ed/0x800
[  133.315057][ T7013]  bpf_xdp_adjust_tail+0x1ce/0x210
[  133.315082][ T7013]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  133.315103][ T7013]  bpf_prog_run_generic_xdp+0x5e3/0x14b0
[  133.315145][ T7013]  do_xdp_generic+0xac2/0x12d0
[  133.315171][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  133.315193][ T7013]  ? do_xdp_generic+0x6ba/0x12d0
[  133.315223][ T7013]  ? __pfx_do_xdp_generic+0x10/0x10
[  133.315255][ T7013]  ? tun_get_user+0x2373/0x4350
[  133.315284][ T7013]  ? tun_get_user+0x2373/0x4350
[  133.315331][ T7013]  tun_get_user+0x24a0/0x4350
[  133.315369][ T7013]  ? aa_file_perm+0x18b/0x15f0
[  133.315406][ T7013]  ? aa_file_perm+0x4ed/0x15f0
[  133.315441][ T7013]  ? __pfx_tun_get_user+0x10/0x10
[  133.315476][ T7013]  ? __lock_acquire+0x683/0x2cd0
[  133.315500][ T7013]  ? __pfx_file_ioctl+0x10/0x10
[  133.315538][ T7013]  ? ref_tracker_alloc+0x341/0x4b0
[  133.315562][ T7013]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  133.315585][ T7013]  ? tun_get+0x1c/0x2f0
[  133.315618][ T7013]  ? tun_get+0x1c/0x2f0
[  133.315654][ T7013]  ? tun_get+0x1c/0x2f0
[  133.315687][ T7013]  ? tun_get+0x1c/0x2f0
[  133.315723][ T7013]  tun_chr_write_iter+0x113/0x200
[  133.315759][ T7013]  vfs_write+0x612/0xba0
[  133.315795][ T7013]  ? __pfx_vfs_write+0x10/0x10
[  133.315832][ T7013]  ? __fget_files+0x2a/0x420
[  133.315868][ T7013]  ksys_write+0x150/0x270
[  133.315900][ T7013]  ? __pfx_ksys_write+0x10/0x10
[  133.315931][ T7013]  ? __pfx_kcov_ioctl+0x10/0x10
[  133.315966][ T7013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.315989][ T7013]  do_syscall_64+0x174/0x580
[  133.316009][ T7013]  ? trace_irq_disable+0x3b/0x140
[  133.316041][ T7013]  ? clear_bhb_loop+0x40/0x90
[  133.316072][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.316094][ T7013] RIP: 0033:0x7f2150d5d68e
[  133.316113][ T7013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  133.316133][ T7013] RSP: 002b:00007f214eff5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  133.316156][ T7013] RAX: ffffffffffffffda RBX: 00007f214eff66c0 RCX: 00007f2150d5d68e
[  133.316177][ T7013] RDX: 000000000000fdef RSI: 00002000000030c0 RDI: 00000000000000c8
[  133.316187][ T7013] RBP: 00007f2150e32d6f R08: 0000000000000000 R09: 0000000000000000
[  133.316196][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.316205][ T7013] R13: 00007f2151016128 R14: 00007f2151016090 R15: 00007ffe1b793a68
[  133.316223][ T7013]  </TASK>
[  133.618764][ T1318] ieee802154 phy1 wpan1: encryption failed: -22