last executing test programs: 1.602203113s ago: executing program 2 (id=288): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000240)={0x28, 0x140f, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c851}, 0x20000000) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x2015}) 1.428567698s ago: executing program 2 (id=292): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'erspan0\x00', {0x9}, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x32600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400"], 0x0, 0x34}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)=@l2={0x1f, 0x2, @none, 0xf, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="b12c14943c03628f7429860935722f4bf325cd7211b2919eb22e7d2c56d9c81b1bd9810a56dc0d3890", 0x29}], 0x1, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffff00}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x78}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newsa={0x158, 0x10, 0x413, 0x4, 0x25dfdbfa, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x6}, {@in=@rand_addr=0x64010102, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x2, 0x5, 0x80000000000010, 0xfffffffffffffffc, 0x2, 0x20000000007}, {0x0, 0xe0b, 0x4}, {0xf6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x1, 0x9, 0x110}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x80, "a76af6c73c4a03bbca93d47bfc5f576ef2c8a50b9dfede4143fa41"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) 1.250718322s ago: executing program 2 (id=293): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="020380115444ae46db32f500000000000200090008000000e40000000000000005000600000000000a00000000000000fc01000000000000000000000000000000000000000000000200010000000000000000030000000005000500002000000a00000000000000fc010000579a1d4c0000000000000000feffffff00000000e9da8a33b2bad24f39bec73d72b346414bf6a49f4008ef9c0795b1d0e0abd3bf67fe84053f77e1731fdd690408c2f26d"], 0x80}, 0x1, 0x7}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x80000002) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$alg(r2, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) socket$inet6(0x10, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="020380115444ae46db32f500000000000200090008000000e40000000000000005000600000000000a00000000000000fc01000000000000000000000000000000000000000000000200010000000000000000030000000005000500002000000a00000000000000fc010000579a1d4c0000000000000000feffffff00000000e9da8a33b2bad24f39bec73d72b346414bf6a49f4008ef9c0795b1d0e0abd3bf67fe84053f77e1731fdd690408c2f26d"], 0x80}, 0x1, 0x7}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x80000002) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) bind$alg(r2, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) (async) socket$inet6(0x10, 0x2, 0x0) (async) 1.087755996s ago: executing program 3 (id=298): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9980030000000000280012800b00010065727370616e0000180002800400120006000e00000000000600020025000000140003006e"], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 1.074544436s ago: executing program 4 (id=299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1400000001090104000000007a294594bc9766c36098a43b9a79f0cf000300000000000000e5a912b775a07e56ef7cf8694583219796ec3a025caf0345909157e538053b4e0f37dd61790091483d2eed571fabc0b4a737e86b0e4a8a2bf8d3704bc9cf75c44c3117cb2c8b381e3966ee9173f89a0ed32ec27a35c79b9d296c6b9732a277651828557d7c08b26d81688c6d24ef1b7cdaa06a39a5a7a1dcbff8fd799d1011566695d518ab9dcdab904705f7d5e0a54ebf0830741e80144ce1dfbe4a669f4775b8560325d499dba5d82659340fe9642eff44dc5242bbff391d252a674e6073f6d8bd18c92ac2f8bd8c9e2368e7c2ba9ce6494c"], 0x14}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x9) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x3c}, 0x28) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000680)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x2}}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000003c0)}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000500)='2', 0x1}], 0x1}}], 0x1, 0x8000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003e00)=@bpf_lsm={0x1d, 0x18, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRESDEC=r1, @ANYRES64, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x7fff, 0x1e, &(0x7f0000000780)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000007c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x10, 0xff, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000540)={0xa, 0x4e23, 0x100002, @loopback, 0x1e}, 0xfed8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0xab, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf7a}, 0x1c, &(0x7f0000000600)}}], 0x1, 0x20000015) shutdown(r5, 0x1) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000200)=0xfffffffe, 0x43) close(r8) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r7, &(0x7f0000000a00)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfe7c575963f8864330506bbf41156c7636c496fc978f37ef16e9285bd017c0991cf", 0x2c}], 0x1) 994.143658ms ago: executing program 1 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r3, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3b}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x7, 0x6, 0x8, 0x7]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x5, 0x6, 0x2, 0x1, 0x3]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004080}, 0x44810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000240)=""/91, 0x5b}], 0x1, 0xbba7, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x3, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x7bffffff, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 936.420724ms ago: executing program 3 (id=302): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf25", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f00000001c0)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES64=r5], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r2) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x140c, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000085}, 0x44810) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000240)={0x28, 0x140f, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c851}, 0x20000000) 918.196883ms ago: executing program 0 (id=303): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r0, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x0, 0x8, 0x0, 0x100, 0x6, 0x180103}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) sendto$inet6(r1, &(0x7f0000000000)="18f9", 0xc3ff, 0x4, 0x0, 0x0) close(0x3) 913.088678ms ago: executing program 1 (id=304): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000240)=[{0x4, 0x1, 0xc, 0xc}, {0x0, 0x5, 0xe, 0xb}, {0x4, 0x5, 0xc, 0x5}, {0x7, 0x1, 0xf, 0xb}, {0x5, 0xb6, 0x5, 0x8}, {0x4, 0x1, 0x3, 0x8}, {0x2, 0x5, 0x2, 0x4}, {0x2, 0x5, 0xa, 0x1}, {0x3, 0x1, 0xc, 0x6}, {0x2, 0x1, 0xa, 0x6}], 0x10, 0x7}, 0x94) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = socket(0x2c, 0x80000, 0x10000fc) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x65ff, 0x4) sendto$inet(r1, &(0x7f0000000040)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10) 912.582475ms ago: executing program 2 (id=305): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001440), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) (async, rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x3c}}, 0x0) (async, rerun: 32) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000000)=0x7) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="e9070000075005001c0012800b002400627269646765010047f4231c25e63d3452be71a4edcc9cbd6d17b7fec0d4abadb71f9c463dd77c1b529713fb54a023be7cfa57f6e77100ff78d7ba6c9a5d059ee3dd3f4f951b8fcf099553d4150000000000000000000000000000000003a45c59f7dab98f14287b58f1b58b8487fd443817e90b9e566ab56a7f1de31c06a714cd095a7b0b3106c8b7e399c0d6ab745f03f19cd19d064905457f1a69cc9a73bc96bcfac57cf697e79c487a54c2e86ae8ccc3c516c285390539d091a0193ced2b407bc3f169b63cc63d8a23c783"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001080), 0xffffffffffffff97, 0x10, &(0x7f00000010c0)={0x0, 0x3}, 0xfffffffffffffd72, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f0000001480)={0xa, 0x0, 0x0, @empty, 0xb}, 0x20) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001200), r0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001740)={r11, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001780)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x6, 0x1c, &(0x7f00000018c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x110}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r12}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000019c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001240)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="240000007000010000000000fddbdf2507000000", @ANYRES32=r14, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000001400)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, r8, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="200000002f0009002cbd7000fbdbdf25060000000c00170002000000000000008375d2f612174a8308f823f5819d66eeea84bf0d28e1854ba75a38ae5ec1e277fe0cb82669b88d089221e145d3084ba9b89cf5fcd3a06624e3f10889c054a7853710adad0a83118eb0ad7bb1c912229b7b6f2f6864a95de6765f87587e0001c7db16f88af76390ac7530770142138c6e40e954d3a9a87ef09c2651bb"], 0x20}, 0x1, 0x0, 0x0, 0x42915}, 0x20044814) 808.313965ms ago: executing program 1 (id=306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00"], 0x64}}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0xd78, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00"], 0x64}}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0xd78, 0x4) (async) 713.645111ms ago: executing program 0 (id=307): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 699.592228ms ago: executing program 3 (id=308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r1, 0x1c20df3d40b5e7, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x24000011) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff000000007110ac000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 652.31432ms ago: executing program 4 (id=309): r0 = socket$inet6(0xa, 0x5, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060088a800000c0003000800170004"]}, 0x58}}, 0x0) (async) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}}, 0x1000) 651.624764ms ago: executing program 1 (id=310): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x9) (async) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000040)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc4, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe3a1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x990}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x2000000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x8c, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000700)={0x0, @private, @multicast2}, &(0x7f0000000740)=0xc) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x97}, 0x0) (async) r9 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000008c0), 0x80800) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000900)=0x2, 0x4) (async) r10 = socket$inet(0x2, 0x0, 0xfffffffd) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@delqdisc={0x48, 0x25, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffe0, 0xfff1}, {0x9, 0x10}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xf}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004002}, 0x4) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r1) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, r12, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x40}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ffa902431a"}]}, 0x48}, 0x1, 0x0, 0x0, 0x890}, 0x4000010) (async) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x10, 0x3f8, 0x400, 0x70bd27, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000080}, 0x400c000) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d00)={'ipvlan0\x00', 0x0}) (async) sendmmsg(r10, &(0x7f0000004080)=[{{&(0x7f0000000d40)=@isdn={0x22, 0x1, 0x9, 0x4, 0x3}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)="28f9b2db5f8973af2dfa12ebdc7c60241f4da6ce2acbf239406f881d973f466db73c3b7fb14b637facf03441fafefb1306186744343cc7959a8a3f8e41b434177c4f4fe1672f8f0f72b650a77e21685eb20cdb3e9f91f08d7c25ae340ad748881068edc02e5216b9539c5ffe3f15ce0ade023a6fe529f6c82bdd3a7cf8896a42f982e66b93df450cacf0ec0dc437c6872fc327ffe1d2666818", 0x99}, {&(0x7f0000000e80)="1ed1f9482e79cbb16fae9dece5645960593a98a18c34abd937cb61f857a8e5087bbee85f7330bd4363b2e737b02c1894abea899635206187132e2d182910cb90ae916260200cbbef4bf1e96af860bfc520b3f5ce598d1deb443192cac1ea31", 0x5f}, {&(0x7f0000000f00)="5a179cb4faf9c77ac234bf9c1174750765347f261cf1a73576b203b98c6922795d047d45aa33a6fda9ed068c596d5dc32b54fcee821cc8febaf0f1c1ba4193f07e50d8e9a9dc940812a42c75560a62efb391d154a37cf2d22748199f8b7b26e8b4421ac1976196d28d7f4598f5e6fe0d29426b5c8979c86da3db33a4e3d707284469c0b26d8fdd99999fa84398fc", 0x8e}, {&(0x7f0000000fc0)="9eb4aef7b117a01c188a310953614760546abf5ae9d0e64bb2f0b4e59cf81d7bfc8c48e8d17c526651c29132dde21a8e1cf2ceb46a51b7bbef752d7146474dbcb33cb08024425d15", 0x48}], 0x4, &(0x7f0000001080)=[{0xf0, 0x11, 0x7a, "c2765102661336750f8d79ea41bbf33a98868b210d06acb3a3a598fa9cde03a48a863b0b221bb9b6603d9c2198c9175b9a82a33202faa8ea8f5c6b1a6b9b68e465370d94192234a362cf73470351799a83fe5880db182c529a818610f3cd0683761f0a8531ff4670279975e2ba1aa6b2099b83553425bf7289db8b84300306658155432b8b68f7870dd490c18fc12c880ccdeecdb68d25447be17ea7db3ac42cec4fcb68e6ded5023b4b8228f6a1cca52f3429e7d1dab0fbfcc5ee048f5fe0a6b08ecfdbd98774caa5136045fefa7bc074c8d89ee8f07340a68b647909"}, {0x38, 0x102, 0xe, "6c1f2c3d99934780e7cdb0a969d0b290b536221b1403886ac271bebe8514dc3ec75fb69008"}, {0x50, 0x88, 0x800, "07459cb06a91267eeae5816641445530d944d3d4aa659ce22e21139ddaa215d36d5964fc7cff924aaebbc6ade53281c57dcda27ec995fd8f47d924c7b497"}, {0x28, 0x119, 0xd, "45fccc2120f30ea4fc37ff984d38093b29408da187c44d"}, {0x1010, 0x104, 0xc763, "0802a775d7397c18850fcf95ade1558b8a193af536bfd575125a483b1450519978cf00c3a4387f1ddd1186aa79cf545213342b048baadf495baa80f234ca648dce1a9281813108eeca2d5b560070290cc0d4f8a694cd083fb961ce84e6fe9c8311e7eef3d184c76e3f5dd1f9969a371be51e8cbb1b332de6282a66ac714e195045642dd333b41fa0f4f37a1220cd7530a987baa060ef44b1368e72f05aa2602d4a87ef161802d0e3e80f1dc26480cf6147fe8dae258b655412109f675beb96565284ee7ea759918065fb6f98dc647dce1156a5f33a5b8b0c4e91adec5b3dc4257d6d1cea2a88dbe98f9d6b1ef2b06fc6b9edab8200db891f89432b56e3f7edde24e5e639f4dd2fea8afc3a907295bc8112236d42ddbc9eb3251928f2ca504424fed21d8b6ed043d4cd9236616766ebd22089c2cec927af9e27634285f1eaf6edc8f6ee45aa3eb47acdb0dfa6b1a7533f18534b9587e7b25d31f6b8c44e877dfe9d8264bad31cdad62e87175baa2b797d02b8c328b8fe70163aa843afcf99d6829d0d152e88c062621010fc405d6c4bdf3f49f38db4d964ae70d0cd0187ea738891ee85b41b21640c89d57662649b48ec92c490073aab0e8ad10a9f90b416a63b80743c27426c0c4c22c2ba09380d7b4c8d74a002822fc353f224b9f5adb8a2452ec7e7adec39a16698a2f332d28bfb022cc209cd54bcae59d4741ed25f37069f9ffdc1802d65786c4eaa57c930860dc14c7d4ae2b5f4707a9846c2e875a41782ffe0c5eb0c72b92efaff3df0a76154c6002d096bced1d4bf33e5d8322e8887dee1c485f9cd6275e7a8628c83139271ba3b37d370da13267eb3627a89d3d64e5c42c0c822cf03ff376c018b66a6a3130818d7779a79a991ec3077c22bacfcc4f14d037b6761371b4e28c153bd7e24eceab7c911a1d8670abd0d9003300ac1fa1af9d1cb75bebcc82edbcc26ce71b1f6345d8995198224611d6e575a5d60011f59d380b7628b011a4ee7a204352bec318b5a0d30575a70523477886e2b58525ec1b0bb48d3b6a2d0b8476c37d9c322e84bcce867489d31ebd7f40a934ed432b946891cd922d0259f9768f13683532e984e9e2dace60c92b98a7cee12b2b4c7dc5f453afcf13c4775d67508df9f4cf37328d9a4d30047977e07bfa8ec982d6b86d1341d1734f3a9bb645c9f03cae39e4f40cc8d4785d55781fe2bd4b96f7a0071969f2271c84e0afdb17aedf3ec1e8f57617faf03a6df6db7255094f455b7eac812db3563e66abc7d5f7f67d8299197cfe47b0fd1458f11d643b16a4644a77412b4e0a60fbce08ce2d86eec36b5d75e01126d4466525d7119fa2594907555efaf94b6c14368365cfb90a585b30488da7f211297a87060fc1855f72b51d4cf016fce99703bb818bcd3624573c8cb98a4319d0ba448fcac1b504088156ebec336ab7a3a529d8369013e74ac6b6cf8e91d1e4b0a1a2313cedeaf70a20782eb99f96a19c2da54ef5318dfdb4c36f74bbf30136ad3e53d7e20ff9b67fa2ffe8c57ee39a1efc052c03ae9fe17aab3dabe24296eb3943eea6cf0a2028fd87b716201e93eef3e8e0d74ea4dc3d0a9829de9f587c2bd14ea0426bdbe8496f73dd5689136125641459b0f19989bb1248e849bb70cb1c83fe4a031b73f7cb044589906b21976b0a900099fa704f97ea63eed5ad7192f4eecb417eacf060b953ae976098b26ba43d3366735565ca985fcb0fb371968f7c76b2d5cbd11c7492c0767b060014ccccc248efe0aa77c4a40164be8d0f9bbeb2698ab12141f227ae0f348a4d38d92bf2b6ed61906b8754a2c0dafe3e06fba6a0803d06b1fa7cb1faccc06c8cdf90977f2cbc27cae15e82d9712a73dadd8ca84c526f232af60a54d5764ba61509d1df1c3251cb8f420f0b8e3d33208c1af403a06895708eff225c1f2213e01aff0dd6ff8cf6d60ba9290396b810ffec4919a38dc1ceb751a07a4d740bebc3551b1d2e607f810db406e3295fa9fd7dc225c045eebfa1545e3a798a05b5a1026b2073edde5e6571994db73a3d85047227da50159433df085def6290324535fad675a48afcf705d7c65f4cdb785832ed59599e38739f2d6dc47a30d81fa1af006b321e27bd2fccf13c67a8f27c893e09142f7d03147dbf5d38d1b7ebffcaa5d8f90450c70cccca767f2a001fae9cd2afd7c318ea42c70d5297678d16f6fc19e2539cf1f4e20ca4739a17ca35bc531800b50a8782a89897432dcaa2d3e24c3647b0daf47991d3562ab4a6b340892ca2c86f9f5cfbafc676d18650f703140f842f0ccf75bba755827da72f1309a6e5d8e36ebcc0f287912f2802e994200dc7303fb98bdfbb3fab771dbc832e67f2476b607f482c43cbaed368efc4009998f299d63331196a54dab4dd57fcca5af4b0e34cf4adb76f17123d0c40a37dd037b53c1aa2466e3f098d14b65702cbafaaca7f049a3ee1d06c3b9758439247864afc2599767cbac39c87f8ee6f5e03fbfa6889f8cbdbfd2aabbb79d01cb06f6406b212ce7435b6e80db48e5957b9214fc663a98b767a9745a5c80e39137f8ac9735d2433489a2ecd17862d80b7fd321576b20bcd53ea2c6e6ba4e26044b69c5cf632ce2e00d9d75454e17887eda59f56e5470ac3474c99a6e31c84876cb6de615fcdb6f00148cb4fb28d28174d0db5a9c3ef0dc2260876264bd45c447823d11dc6775265c30f44401f33c8fa19517c7d91383b1b1d36342c0daede9203b6d7f3de4dfd807a512738861d6a62aafecf8ec6dc2325e13734b9c2fa4b43dc7a58d98d18910e4bf274b6ec1de848b579a7049848b52863bbe9fbf0d8446656c1404fab868dc42fb76d425ffd394b6f26cb97203869e7bf36b299734dec4718d8d809b19b7ae5293fc9db79112d032dc3fa9ce90b343aa8c45b5b1becbcdc38ca5953950c6e8ff12b05843cab9fd498505af311a63a8d9ce6c2a26c44f3f1fae8d551b725c276ff6201d98e38a62ed7eda918e6243be25d8ddcfbc2144eb169a5819f119b2ff3c7a8039673ad9303a17cd68d0e226d8ec32a231e06bfdfcf8eca24aca5edc1515f17fd6832e047f66c32599d70ee7807604a91ecd8a686e6b4cc355ec9c77febe601bfc60f63c98348c707612081166d2fc74cc70f0ceee0c3a1f1e39e5b0b2ff556e2dc1f5567f272ef83ffbf65fc0fcb1ce4fc481b45fb325999b4dbc8886eb43367299767e5f0e98539428716f70d1c4bfb28e12356290f6fb06499ca0e9d28c8910774381b3433d333cccaa4e86f82d09ed0edb61d7db69ba422522525d68106f354e820a313df0469f42e040108bee2fb61cfc3f3d366dfe695ef473fa0fa47aa5f3a5523534ffee4cfba412e8e52fc8cbd84f818b2ef3741bfdaf8f2b0181465eaa0406d967a8af557f2bb16a67e5eedb95e71e6a6832c3649da2265a628f1e74a94343087bcb0efab6ea1ab153b7b86691d15408cad088f4fc03f1c88d1479ee6de513e649c54131aa5c49ac7387fb892e283eb263a1738572ed78117a5eb06ff5427142bfe794bc5c29c1d21386b8d2eb06b99d016540d5a6701cbbf0f0f5cf43011055f5caec72aed06d395a4e86f74c87609f9b7c17917808497615e337471465b95f117defe8740bcefefd46d826401cf8bf7be9cbcb0e55ba3246207978afed60ed2e75da03c6b175d89827b02f43d2c9709d52f44158aabd830b01c354b6ef91f630a326716ce492eeee7acd12dad169c4c2c2808965b352647ce1cc805ceb20b3686d9c43abb0f339b74736f71d76d2c9650c3ee8a54613b17c173e32a64fe468f06de2f47e014a0029ceb94439f88262b708202a6c13118aa774d550491b344187a561165740c217a06be3360fb2d02981a2de324a5d5c8526f4c162c4085979c9310a436898c664441c8f91dbf33f6a2f61325e1a393fd6c4925d3b01f085206027fe17e48ef193c09a0fc35aab6f7ca1b820d90f26cf2c99764be6ee8820942c0bf3299a896e1c728aafa738e353c59a319b29cd24becd546c74991b969b1fee7428c6c16d16b6e414703efa634d1313c71127c04e37601ccf994aa5c131d808f1e61db2c71b8e47cab45267eb5122ec2ca96f0d0dce657b788b45555c85ad01f6ff4c34b4394b9285cfdb5cbec3fb1d23b0c266fe0e5b4a277d857a27a710baacac80c9e6569f9facce5a2ee58d1bd5efd641e8f1fc5aa4a374acea8c2db761a6551cce7efbf6b97040aea0caa76235fcc05ec6e66bc498e6c98e3b158c38d230f75e5efbc7c36b15d05649e372c1ab8c95a7e58ff328f3639139d41efbba353d5ce94935ea938e7cf8ee0c56f950f0e91cfb1bd5577fa73a887da86d92b941e2e9ca3559d242b494ff790f2c3a84369f916517129be87a23faa5eaaa2512ad2eedf8538ef6d1540c3f5f9fd5349d852e49cf37dd2907a7d9e4b43f0bb842dd003abff72e8892afa2c6e5d10661cd5420825e26fc3e30717f12c8b7214b639fdc141d7bdc0cccab539ecb614d1b0196ccc10da2efe67f6b0bfe7ec8bcacf171f8277673dcd7a783fa56c05743984462afed052b866961a16301844ac0dbbdbffc6143257be0ead572b64e7e5350f079e12fbbcf20e377d786f19c99c17e0fd0d2406c0fb91f230bcfdee6040edff24410199da472ad43dba94776a62e4b632e8e8013a9308f1df6ada8ca315781b3c35668c8fc5bc0920764cd420a419880f55200733bdeecf7ea8b71982f7997135b2015332792def93775f7c48268a503b540e3f9fedd77df050ab4d5982a145574df8d08319265bb63b247404f25f595c583462d5e2971eaa1b79d3f5faf875afafdd94ae6c65b2209fa89b56df19b8dd8484a1ce89418b1bb21274aab0ae7e5943b05e24139a961381fecb962fc6d0975bf93827ab8a6cb94db49f8e116cfbfb9831fe7c5ab3df3761c44fc82891ba03548cda0cd4614b12c55b568709ce2c8ea686c6e51f4e05b6260b70bab030151e7782d646f096c75fda7614d5b5cbd9c338094a66a1d15694a8854580eab1e9a9ef190e283fa114cf0a904765b344a205205cf6905a58b33c16b5992575f0ee25919733647f8517a0347126d0db2a3cd7db5b1c659a7a285deb419adaebbb16944537e732fef554a0e07cc41a7f42a518f4ae8c888f2056a42974388f494e44993d0c8d73e1b25f4375ca054964875e67ee17f6203b5a818242a3445adf268c93de4c80fa3b8090fb7087498e2a775d22d69ad612f837d93d4b5c612f4d11d941482335971380afe6d777f8c8e979af238bf8ecb60a4c04da5798f88039a58adc0f44317164e3eec963d011502e35670c1b8a7f39d0b7785303f1e6c8abcff81a5ff85e74b5dc08cae012c1859c604971ea885d0535689d781fb252a0a074e2f945af7088341c49864a148ab9ba7f081498cf6bb68ed5cb2aff12e4f3637f2091db349f4e5e69060a677b9d7e5a75088c489d443572b702900f4e4ac2f8bc2749fbd21c07f79caad54bc9b1ebb8eadf6795df022e5dc3331f4567d726ff25858df105e92f9170ffc17ea6275e07547a8a0fb99c432feae2d58059eab952ec96b387e54bb40f0ac93a496c363bf4406c4e95218f0a182b24184aeccf60088ab2a121063ac3ea662829e888a5f3c08279273a28a64ebd7f36eb0b5b7ceb1842d5f767eededf5d18e610442b8ef378bf452ab993f29de717047e61ff26f079e702fb80bd48f87b6bc32a7588aca7771a293bdabe1c620f5bef9ac9abb8f15c6d07a57b22b0088f9211db3caf40740d9c708b2b441bdb3c0353bb4a89dca34b7"}, {0xa0, 0xff, 0x3, "08655a9feb1900dc7289229ae9c641f3c05d8365dbe7f93700f2ed434cc3a06dd161423f09ec28f5f534648cdd95e21535a815aac9da284ce7093f741df72923dbf8ccd9a6ba12ab5eae7a6338844bd167717db9d4ee57a1c11332e1bd8378b1746b72ab5e39fb4620ea45ad62e2758b48be43711f70ad4a1768c647dff7ccc14850ef74eb2bd93b75"}, {0x28, 0x111, 0x0, "7ff32152ba633c79c98010cb2bca510a4e"}, {0xb0, 0x116, 0x0, "eab38c388765e2a055323774a9e3e2e88027505bb7d4177d709e98666c0312044a91e76d6b7f9b9505b715f00453ff2bf32c702b264927afb80839e57e8ca44847c6964353f8a2988787fcf5cb580bf1accb78b6bea0ad8a2809de7109cacf7803cfc827d1e45ceb9ba6dbf7706ef7aa52f0f4ed76dc2cdf7e18df86c2409ad59b2269f68b4c46571bbc4fec3ce7cda22d46b67e53b151ba5c72d9ddc5a8"}, {0x40, 0x109, 0x7f, "5fa7a35f4ac8e4f1482149636024761c2a9656890c2dad78a65917a23720ae9b0442aac5262d8fca48e3dcff00cd66"}], 0x1368}}, {{&(0x7f0000002400)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000003700)=[{&(0x7f0000002480)="b94cd38dd202ae4028907b56f1f43bcaf3b6fd01abc72f3d243068fda07ce192a42a94b022e14f318e494f9c46aae8643f844f644a65942905d51d51b85cc2a883aefb12aba97587e81972cca888c3277959a055ef2af299a4e228fad8ce540e2e8726d2735d33aa4b094f338a8397eb32213c1eaac97b3993eb6b25c63e1eb9e014b3", 0x83}, {&(0x7f0000002540)="8caaaa2752f14956fe7e5851bdbe9163b6a3fe8baf7d8ba2fc5ad5cb0b864b3abbf34eec5dfecb260d60ce7091a9efa802dde2ef5448886899e0268906a1c726ff02b23e6fa9331c127537b982418d258cbca54fcb86244a5a5c770e18d9a34dad9a7edae998218e5f15a3cf68ce885a0943c5725d8ea6d9291a4e30e77ca7a34d", 0x81}, {&(0x7f0000002600)="e4a06a1a79efe268c637c5574d7fa89a0d352be04cdc8b06e8debe2f40e1b290a3145bda7827b38e7042130457da7a4c8cc1bcb757327ba74a96444132557256c4913de436fd1d7f87e7b0efba1ba1c92bf1c0c9da7e8bb6d369d500f61d63f5ec76110039004f246917751148e6368491b5152bd8c922a7ca1f00924aa389efa3403d43afbc524680b61496cb1d921793d28dde5bb594485610bdbd57e21429b2f9a43a5b0493bb49972b9481828a923f55a063ad955cc33c", 0xb9}, {&(0x7f00000026c0)="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", 0x1000}, {&(0x7f00000036c0)="62c9e677696c1286e6c28c8fdff7020846493d1cbb8a2efd73c3f233b2b6", 0x1e}], 0x5, &(0x7f0000003780)=[{0x40, 0x103, 0x4, "977a5c000a9decc522af8d6ef2ef3e663ee43dfff56091b1e665ee78de992e4dff37053bf37df7bcbc"}, {0xd0, 0x10b, 0x9, "d801e99732e0d8ced39c119c32ba4e7e9ff14106d3acf00a9d3dfadd2fc98010cd6c2af557cbc3d596eacaa43bf721718027e16c3551991ac46609a9192ca6d3f9d1be93946dce39736bb9f8b059565188a862441b45ff0277c89a53c617708b1400ede66f12e1467894197251e36669edbe9eeb14ded14e99f3adee80cce9f9fdca5289228859397f8307f7e2f0a4def7129961bcc5802eeb4eb4c4bcf2518db4744d70f4694ad935a348bece2df15d63092e3c2a7b3728d73517c8de40"}, {0x38, 0x3a, 0xa19, "4de42d93070b15a7073b19d49e3ce13ddbcbcf341f5ffa02e4c0daac206b5ad0ea54407d"}, {0x90, 0x0, 0x0, "1b475054c7097361b59e3a3d16a46e00a8e3b1848ec194d846b3f6f1103ed0dae39f7bef8965a43f1e56eccc02ea6a173923a98b4e652aa8268f3389982cc55345447fa974f16fa466db62e8b1f3d68c28cb70814a921937acee5b4090f64d474b0e0126ed9e9c97f124d429cfc0bb676a8b4d4bc3b670e693731e"}, {0x110, 0x116, 0x0, "b18f9e3e5dd1d1132f4ca6aff99b602a6496b9b880e507830d7f72324c0cbd6492744be7e1eb4fb2b83166ee8d6ef3ed0f53794126a08c9a86b13d266ecad9e3ef3434194ad33f0d39f039b3348ec54430ce92da88b30593a39badec829056890ef477dc4c4e987b7803130cbd18337cf1f66bc53a2765aa3718eb2276ec949ce9c1e62c4507d34c892fc30bfa3f535c0d52b17e7029693a896761335b9940d05c60031127fe5e6b54d7fa715efb7bf927526962cee35bbff128d1551e61a981aef7db8e8c7eab68325a13537d49bb9cf2e82c612c5fd6a289b37a8899894882342a4c1784bd2fdca1937f019a8ca0182fa56f44e22e7166ca9dea31ea"}], 0x2e8}}, {{&(0x7f0000003a80)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003b00)="b5293cde1dc5efd87796381cd8", 0xd}], 0x1, &(0x7f0000003b80)=[{0x68, 0x10a, 0x9, "733d062fcc899d9465c6d79090e7e363174c0bf87d5e1883f3daf6c38b236d1820b4f803208cd7b89882da4813eb996c33ba2770069d2e8c9097baf11a34c233899b9a7d9d916088682270b13c5c7a39e7303dbf065e4bcc"}], 0x68}}, {{&(0x7f0000003c00)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003c80)="509eca25eb61636ddf0863520e045af7caf64544ac6cd0c2eb00deaeb44560eea14ce504673e2bfc9d9b4c91b2c541921adaf429372a3c7a04c71ac21325969ce7a18263d3774f5222189fae765ba3d110c410539dca9b6a757a10895b5d391d1809170c70ff0e76ce6dad7c771e7c8a1506bc6ec3c630ae305bd1e1d60edb76ea81e195d257e4e0e0e1eecdae86dbb72a1bac8384a152c029890ea8003143d717274a1fa51a83c74a4fc084513ecdaf8b33025ec8b46410b223d2b47683cbaadb3a63c08936aa601ddd2818e548caa2d56a2820", 0xd4}, {&(0x7f0000003d80)="bcac9c8061d76aa2fd58f127507372ff3c4641080ecdc9a94ec41bdd6e589228ab2df218962b4c755138dcfc44a311749caee3bb301c54e3edb740d2ff3f3635a37b19f89d064292203bfbc5d71f3520d6568e9b8b9a37d6b678b0405de0b38dc478169f609e70dd750e0cd05fef7152a1253cdf05e58a122a38d163688f197f229eab4862b9719af72e1e17c1d20ef305a4ffe272bcb6f77aed746a1a1e98fd6de22244a7eed519f8843d5925d092a98c6e2284a337f56f84f79878bd245ed58f48133c01212bd097531c03d8e5b0002863b23c89309abb8c594c5197372ad8b2a3ece23f", 0xe5}], 0x2, &(0x7f0000003ec0)=[{0x88, 0x0, 0x5, "7cc0bde6601fe761c9e62c71e07f5f8998466b74f3fdf4deb487ed10f21d7bf4c874e6352d37372f41e95378fa2c58af834738da57673eb38bf26dfe3f768bc37afe11148a65f84513d3c0d0c77f8dbd62dcbe50a82c9b853a1b1b132ad0a1d6354169a4a4711eb1d2b6b6f153f7535ff12919292b985e"}, {0x70, 0x10c, 0x1ff, "66fcbbaa1dd96ebb34ff85afab1732c61df85e63c903f64fcaf3875e2a02fe5666146865ed7463c32da2d1df0583ad96b71ca598c6d378d15949959b082fb3f66c2f6734d2786690500c0dad5388e598c9cd9257267afc4b3473b1f7a8e7"}, {0x98, 0x110, 0x7ff, "1b75a3733c98e66ab7d3967059c29646a1a61f5069595e0276e07583289c37d3591332495e97ccc1d70968435eb88356c15f407765f5f250aa280f8b370c8e62b347040371751879044f5e79618f6efbc177a770079976a806f271b5eabb21625028af962f7495e0344032a9d45cf67a289c6ae57bc1071b4a0205ad5a34c0f8e7"}], 0x190}}], 0x4, 0x4010) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000004180)={'batadv_slave_0\x00', {0x2, 0x0, @remote}}) sendmmsg$inet(r3, &(0x7f00000043c0)=[{{&(0x7f00000041c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f00000042c0)=[{&(0x7f0000004200)="9b0235850096027823a00599f935a361b24b82f84e79276da10f48ce8ed31d4807315885e70d0db1a78f52664aa47641a3d75602a2ae32ea338dca22dbf8ca2889e38c65b3954fa3f04a7b23f7bc2cff722642af9786bf7585e6f84fdee4a548008b775a93b383c863f8572e78fbfa1dcea9f92ee160c836b7ed958d3c46cfa2e100821759e609737d788721c2e7fe4513641dbd8e8b16fa408ca20fd4055d9bb01099", 0xa3}], 0x1, &(0x7f0000004300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa8d}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @empty, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff1}}], 0x88}}], 0x1, 0x1) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r14, &(0x7f0000004500)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000044c0)={&(0x7f0000004440)={0x48, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000004540)={'wg2\x00'}) (async) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000045c0), r3) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000004780)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004740)={&(0x7f0000004600)={0x110, r15, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x11}, 0x3f6562e539f72ec2) 618.198223ms ago: executing program 0 (id=311): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x2901, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x16) 526.396136ms ago: executing program 2 (id=312): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000140)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000180)=0xe, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000800)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000840)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f00000007c0)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4c881, &(0x7f0000000740)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 500.2983ms ago: executing program 4 (id=313): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) pwrite64(r0, &(0x7f0000000000)="e11664a63aaba1d84d39b1f3256737151899a050086ec9e09133cec48ca6feb7f35233fa6b2600a9ad17616247a4c2e187612107fab94c4b7d4521f16b7dfbd2b699f2253b852613a97b344fbd695585b8e77b4b493f29b3a4ed27314f89d3578332de907b93103d9cdc3ebc09c5ed3e28640cd9b0894dd195c5ed565a89c9", 0x7f, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r2, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={r2, 0xffff}, &(0x7f0000000280)=0x8) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f00000002c0)={0x4, 0x44, 0x9, 0x3, 0x8}) getsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r1, 0x84, 0x81, &(0x7f0000000300)={r3, 0x401}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_ASCONF_SUPPORTED(r1, 0x84, 0x80, &(0x7f0000000380)={r4}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000400)=0x3, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000440)={'geneve0\x00', {0x2, 0x0, @broadcast}}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)={r5, 0x29, "0e343249310066077086d24f59c833c95f7eead4a444d1f2b92281d212440c283e49e4563d4c0b57d5"}, &(0x7f00000004c0)=0x31) setsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x84, &(0x7f0000000500)={r6, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4e20}, 0x90) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000006c0)={r1, &(0x7f00000005c0)='@\x92-\\\x00', 0x2000, &(0x7f0000000600)={@_ha_fsid={[0x4, 0x9]}, {0x93, 0x4, 0x8, 0x7}}, 0x2, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x4}) setsockopt$inet_tcp_int(r7, 0x6, 0x2e, &(0x7f0000000700)=0x4, 0x4) ioctl$NILFS_IOCTL_RESIZE(r7, 0x40086e8b, &(0x7f0000000740)=0x3355) setsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r7, 0x84, 0x82, &(0x7f0000000780)={r3, 0x3cf}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000800)=0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000840)={0x2, 0x3, 0xb}, 0x8) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000880)={'veth1_to_bridge\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}}) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0)={r7}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000980)={r9, 0xffffffffffffffff, 0x1, 0x0, @val=@iter={&(0x7f0000000940)=@map_fd=r10, 0x10}}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'veth1_to_bond\x00'}) bpf$ENABLE_STATS(0x20, &(0x7f0000000a40), 0x4) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000a80)={0x109a}, 0x4) ioctl$SIOCGIFMTU(r9, 0x8921, &(0x7f0000000ac0)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) 500.003507ms ago: executing program 1 (id=314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f00000002c0), &(0x7f0000000340)=@tcp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12060, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r4, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0xffbffffe, @mcast1, 0x9}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b2c, &(0x7f0000000200)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r6, 0x0, 0xa0028000}, 0x38) 444.170664ms ago: executing program 0 (id=315): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001800)={{{@in=@multicast1, @in=@empty, 0x1, 0x0, 0x0, 0x4, 0x2, 0x1c0, 0x20}, {0x0, 0x0, 0x10, 0x0, 0x100000000006, 0x0, 0x0, 0x1000000000000}, {0x0, 0x5, 0x4}}, {{@in6=@loopback, 0x4d4, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async) close(r0) (async, rerun: 64) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001900), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001940)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="0200208dcfc0000004000000d95211cc800000006a7ca8c39c3f1e9f72b67297445d15cdd4bf061eea76b050772761bca3e7314dab0fdba63d126ddb443e6f4ac5780ace57134754ebb345425e99d3e82ce5492ab2f529c76576ddca819db624798e9a1d0fa7b6310df557a9a3cbf7223c643290caaa330ac94ff356419f4ef1be88e37b1b152782ac89046ea9d9e64e4850cfea440050f3dfa46b1b76d5ce6c57a5c6613f076b3d6f42290c4aa45a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000001a00)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001a40)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de71366002b11"], 0x65) r4 = socket(0x10, 0x80003, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r5, 0x0, 0x18, 0x0, &(0x7f0000001ac0)) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) sendmsg$nl_generic(r4, &(0x7f0000001780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f0000001740)={&(0x7f0000000100)={0x1634, 0x19, 0x8, 0x70bd2b, 0x25dfdbfb, {0xa}, [@nested={0x212, 0xa1, 0x0, 0x1, [@generic="8e5d16b304f122e94a169f78216baba54ae1c494f47fa5031e575a43b1847cd66c867611f3ec36c8a81c3ba32e464e6237e080869a7ab8e6248194eaa06ac79418cba63deaf530b45c98e4645ae19003e5280cc0a6c9a8deb0ecf0512bb52573b8223d8182a63f6178aee19fa6fbffcf4adb628b9d527a11fe941fb9fa5ec5bf45312df574ccc3e10d2ecb2cae8228c42a3b56a9e1054daf56ca253e0f0614d6cd042a3de1f4b56d8c0670bcd86aeb9bd01ef65bbb2b3eda013815e9", @generic="ae638f4a9688eb894107c9aad55f6fdc596ae3f6616043748c64c9f4a1c473c94769985a1bced2f82f135e81e04fdb0a6e179a1ed1b2a66a6a1962ec0e34d1f28f123e6084b50b3a375e9d9879931cb4e1530ee3f83615e4e92de969000292850d0124e7ed9b97d6b41e107fd7992193f25af96cd862f7157a6d9621311b869f270fe19bc4609d3cdbe69d", @generic="b48d0b8c5b61df26a9b4037cca36bd923f651c7cf0b44fafa18c68bcac529b992c97239d7072dc372deb352b70b2078d069d0c48a6a1f744619d4e456c414f3b168b445d8d7eae815b996b409fffe64058d0930e6fe60b75cae8953461e5860012d04d0a49baf04b0ba091762f7b30d6398953e71da116ca3e0965c1844a058698916d1826d38d229aa67b624f7ad731a3abf610f8f4b37e8665fe5475798e76f8f67c24ef8550dd8691c17a724c828905e8190216043a54492e5a", @generic, @nested={0x4, 0x98}, @nested={0x4, 0xbd}, @typed={0x4, 0xd1}]}, @nested={0x59, 0x61, 0x0, 0x1, [@typed={0x7, 0x93, 0x0, 0x0, @str='!\xb4\x00'}, @generic="444ff33f0b29fafebe5935711b69a20e65d04893ff1a1b4257293ee4b0fe4084a8ce54a5aac016f00320160203a9138166c96ef694516714e14edc68d4edc92d3b71fd47c1cfda56e2ba03aaa4"]}, @typed={0x8, 0x14b, 0x0, 0x0, @fd=r4}, @nested={0x17f, 0xc2, 0x0, 0x1, [@nested={0x4, 0x9b}, @typed={0x8, 0xf2, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x4, 0x6}, @typed={0x8, 0x60, 0x0, 0x0, @pid=r6}, @generic="b489948acfc3814e2d664592f41ec7eb2f25ec75a1b937f872c0669223309283f74589756d9688645fc0f1fa32189459db435d511a2f2777cb67da865927d29c3e6f4f683d6bda647df54084a5d1dfdb31c0704dfe807a7e4aee4f8b5bbcd21fdfe8012a5418b5ef51024f8a2a9ea8c17391da0d16c42a4d9b", @nested={0x4, 0xcf}, @generic="d4e62e1f40a508c3bb3fee8a25b3095dfd16ece45ddfe8642b73982f68ee0378b6898e8dd8aed82e5fc7c51197470f37ff70e2f11358b68cc039e396992eedd8a66f69df2e60866445d4c14c3cd24823f9e224026b83c09889f2605d28c9e2517ad041ed9f069395753b317a5bef90b4641cf49ea3f450bc52a915bc812aec7645187217a0a1616a1dae00b49b65d8d90c3c3f7872e5236b4e431b065e76c988d7d80f3dfe70f7e5b5dd887edd1be286bc5cf2825b977695680f300ce709482b271b2a49ed4085ad9d4c2bb46845e4615a60b45a7cd2451f442c5dbbc5596700967eb99e377d"]}, @generic="a733226de1eef4c2f36056d9a48dafe8539f51972e31e4ad113ebeda5e945ebb3aebf15548fb54b995fe2662152bd4311a8e926ad539be0ed4004f1b35dfa3d0f46d65924603cddd8018b901285d851e47086379da0ed6b239a657d0a802910cd47edeeb182a183834d30b467b36d8e1623fd6f2377b48ee70611711ff9ed4ae39919ecf1ba70bb3ebe7c8636fcc1deb7e06939fb82f859850b3ea54e25604dd8cdde0a79076a54635493be38fcfbe3cd921ee4921d779d603defe63c31d6448dd674bf8d27f167882", @nested={0x10b5, 0x72, 0x0, 0x1, [@typed={0x8, 0x9e, 0x0, 0x0, @u32=0xffffffd1}, @generic="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", @generic="1c404a9c779dd5c579f32f21664a83edc311e41958382ff6c5563416f4ac28dbd113586ebb550378272cb5b1eb37d290f623ffab5809799eee4789f524a6d7c347db27ce96297337a77f9b1a4de4065151e712057e37d9f538edb86480d9a5897792b75494d6", @nested={0x4, 0xf7}, @typed={0x4, 0x37}, @generic="7094fce633c55cd634870519d03982d67312fb9cdd79fd7207db0bb40b2659b44a055b17fbd1280b816fff9d813a2b", @nested={0x4, 0xec}, @typed={0x8, 0x6, 0x0, 0x0, @ipv4=@local}]}, @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x61}, @nested={0x38, 0x6b, 0x0, 0x1, [@typed={0x8, 0x162, 0x0, 0x0, @u32=0xb}, @nested={0x4, 0x36}, @nested={0x4, 0xb}, @nested={0x4, 0x67}, @nested={0x4, 0xed}, @typed={0x8, 0x100, 0x0, 0x0, @pid}, @typed={0x14, 0x13b, 0x0, 0x0, @ipv6=@empty}]}, @generic="a6489105fc1996192cd56e91d61fd185e8e576544c997c23e2e531bd5555ed79fcb00a7d35fd602eeffcd7ccb2efb93062023dc61cd47363a9c3b21e2d36384b5a5ea90fc99f93a9def806c8ab8d7a324c57b0895b986b2048311711b7a1", @typed={0x4, 0x15a}]}, 0x1634}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000001a80)=0x4, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000017c0)={'wg1\x00'}) (async) write(r4, &(0x7f0000000040)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'wg2\x00', {0x377}, 0x8}) 443.923912ms ago: executing program 3 (id=316): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000380), &(0x7f00000003c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="e2", 0x1}], 0x1}}], 0x1, 0x10) sendto$inet6(r0, &(0x7f00000004c0)="18f9", 0xc3ff, 0x4, 0x0, 0x0) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000040)={0x3, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x88) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)={0x34, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x34}}, 0x0) 341.781585ms ago: executing program 3 (id=317): r0 = socket$inet(0x2, 0x800, 0x2) r1 = socket(0x1e, 0xf6dd090cd6a9c0f8, 0x5) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000040)={0x2, 0xfffffffb, 0x8, 0x0, 0xaa8, 0x3, 0x0, 0x0, {0x1, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x100, 0xb, 0x19, 0x3, 0x3}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x8, 0x8, 0x1, 0x1, 0x1ff, 0x1, 0xe, 0x80, r2}, &(0x7f0000000180)=0x20) accept$unix(r1, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000d, 0x4000010, r0, 0xfffff000) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 284.903937ms ago: executing program 4 (id=318): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000240)={0x28, 0x140f, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c851}, 0x20000000) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3fa, 0x800, 0x70bd27, 0x25dfdbfe, {0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x8010) 140.376043ms ago: executing program 2 (id=319): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x2014, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb27}, 0xffffffffffffff55) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x1, 0x803, 0x0) (rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x8000) 140.026017ms ago: executing program 1 (id=320): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='freezer.self_freezing\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000800)=[{&(0x7f0000000840)=""/144, 0x90}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, r6, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xe8, 0x0, 0x1}}, 0x40) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) recvmmsg(r7, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/223, 0xdf}], 0x1}, 0x5539}], 0x1, 0x10022, 0x0) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000a80), 0x69) syz_emit_ethernet(0xfdef, &(0x7f0000000ac0)=ANY=[@ANYRES16=r7, @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRESHEX, @ANYRES64=r0, @ANYRES32=r7, @ANYRESHEX=r3, @ANYRESDEC=r3, @ANYRESOCT=r7], 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_WEIGHT={0x8, 0xf, 0x464}]}, 0x3c}}, 0x8000) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r11, &(0x7f0000000740)='V', 0x1, 0x0, &(0x7f0000000780)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r11, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r11, 0x84, 0x79, &(0x7f00000007c0)={0x0, 0x8, 0x4}, 0x8) sendmsg$inet(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 122.876947ms ago: executing program 0 (id=321): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000853e01007600000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 120.001879ms ago: executing program 4 (id=322): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) 59.864174ms ago: executing program 3 (id=323): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1}, 0xc) (async) listen(r0, 0x0) (async) ppoll(&(0x7f0000000080)=[{r0, 0x601}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) socket(0x25, 0x5, 0xb4) 8.305885ms ago: executing program 0 (id=324): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0xf, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x80, 0x8, 0x3}}) pipe(&(0x7f0000000400)) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff}) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000480)=""/127, 0x7f}], 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r4, 0x4) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000005c0)) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000840)={{r0, &(0x7f0000000640)='GPL\x00', 0x2c0400, &(0x7f0000000680)={@align=0x55, {0x8a, 0xc, 0x7a, 0x4}}, 0xc44, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x6}, {[0x3, 0xffffffff, 0x1200000, 0x120000]}, 0xffffffff, 0xed, &(0x7f0000000740)=""/237}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x76}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000002c0)='GPL\x00', 0x6, 0x40, &(0x7f0000000300)=""/64, 0x41000, 0x10, '\x00', r2, 0x1b, r3, 0x8, &(0x7f0000000500)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, r4, 0x0, 0x7, &(0x7f00000008c0)=[r5, r6], &(0x7f0000000900)=[{0x3, 0x2, 0x7, 0x8}, {0x2, 0x1, 0xb, 0xb}, {0x0, 0x4, 0x6, 0xb}, {0x0, 0x2, 0xe}, {0x4, 0x4, 0x8, 0x6}, {0x2, 0x1, 0xb, 0x6}, {0x5, 0x4, 0x1}], 0x10, 0x3}, 0x94) 0s ago: executing program 4 (id=325): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x2901, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x16) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. [ 71.028617][ T5601] cgroup: Unknown subsys name 'net' [ 71.127537][ T5601] cgroup: Unknown subsys name 'cpuset' [ 71.130408][ T5601] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.405507][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.405581][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.490436][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.665268][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.670631][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.674390][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.682368][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.682771][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.682903][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.684924][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.685541][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.696995][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.698571][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.708821][ T4935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.716570][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.730848][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.731287][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.747754][ T4935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.803417][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.806160][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.807572][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.811457][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.824904][ T4935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.857958][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.859682][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.860232][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.869511][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.891208][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.674360][ T5613] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 75.676496][ T5611] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 75.691460][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.699847][ T5614] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 75.708322][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.724112][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.964550][ T5621] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 76.156545][ T5612] infiniband rxe0: set active [ 76.161577][ T5612] infiniband rxe0: added rxe_eth0 [ 76.214477][ T5612] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 76.214530][ T5612] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 76.214562][ T5612] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 76.249054][ T1221] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.313707][ T5612] RDS/IB: rxe0: added [ 76.321650][ T5612] smc: adding ib device rxe0 with port count 1 [ 76.321737][ T5612] smc: ib device rxe0 port 1 has no pnetid [ 76.351961][ T1221] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.399868][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.618800][ T1221] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.725883][ T1221] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.763224][ T52] Bluetooth: hci2: command tx timeout [ 76.763224][ T5617] Bluetooth: hci0: command tx timeout [ 76.834487][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.842828][ T5617] Bluetooth: hci1: command tx timeout [ 76.856892][ T5617] Bluetooth: hci3: command tx timeout [ 76.922466][ T5617] Bluetooth: hci4: command tx timeout [ 77.176033][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.262116][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.263383][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.263563][ T5611] bridge_slave_0: entered allmulticast mode [ 77.266002][ T5611] bridge_slave_0: entered promiscuous mode [ 77.297242][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.297404][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.297535][ T5614] bridge_slave_0: entered allmulticast mode [ 77.301087][ T5614] bridge_slave_0: entered promiscuous mode [ 77.347147][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.348328][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.349488][ T5611] bridge_slave_1: entered allmulticast mode [ 77.351433][ T5611] bridge_slave_1: entered promiscuous mode [ 77.388048][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.388157][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.388563][ T5614] bridge_slave_1: entered allmulticast mode [ 77.391194][ T5614] bridge_slave_1: entered promiscuous mode [ 77.428210][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.428303][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.428391][ T5613] bridge_slave_0: entered allmulticast mode [ 77.429811][ T5613] bridge_slave_0: entered promiscuous mode [ 77.446790][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.502708][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.502824][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.502939][ T5613] bridge_slave_1: entered allmulticast mode [ 77.507106][ T5613] bridge_slave_1: entered promiscuous mode [ 77.547217][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.590001][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.613387][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.618997][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.623904][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.700999][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.755483][ T5614] team0: Port device team_slave_0 added [ 77.777717][ T5611] team0: Port device team_slave_0 added [ 77.781300][ T5611] team0: Port device team_slave_1 added [ 77.781949][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.782084][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.784782][ T5621] bridge_slave_0: entered allmulticast mode [ 77.786784][ T5621] bridge_slave_0: entered promiscuous mode [ 77.790133][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.790326][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.790449][ T5621] bridge_slave_1: entered allmulticast mode [ 77.792826][ T5621] bridge_slave_1: entered promiscuous mode [ 77.797043][ T5614] team0: Port device team_slave_1 added [ 77.817671][ T5613] team0: Port device team_slave_0 added [ 77.885672][ T5613] team0: Port device team_slave_1 added [ 77.891377][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.891394][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.891421][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.909671][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.909696][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.909716][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.916468][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.932091][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.932109][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.932129][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.934751][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.934766][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.934786][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.957660][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.069618][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.069635][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.069670][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.071402][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.076849][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.076867][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.076887][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.125818][ T5621] team0: Port device team_slave_0 added [ 78.141495][ T5621] team0: Port device team_slave_1 added [ 78.253021][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.253038][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.253067][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.292837][ T5611] hsr_slave_0: entered promiscuous mode [ 78.293910][ T5611] hsr_slave_1: entered promiscuous mode [ 78.328320][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.328338][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.328359][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.371945][ T5614] hsr_slave_0: entered promiscuous mode [ 78.373390][ T5614] hsr_slave_1: entered promiscuous mode [ 78.374213][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 78.374326][ T5614] Cannot create hsr debugfs directory [ 78.393742][ T5613] hsr_slave_0: entered promiscuous mode [ 78.394827][ T5613] hsr_slave_1: entered promiscuous mode [ 78.395546][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 78.395565][ T5613] Cannot create hsr debugfs directory [ 78.554653][ T5621] hsr_slave_0: entered promiscuous mode [ 78.555283][ T5621] hsr_slave_1: entered promiscuous mode [ 78.555684][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 78.555702][ T5621] Cannot create hsr debugfs directory [ 78.842936][ T5617] Bluetooth: hci0: command tx timeout [ 78.842944][ T52] Bluetooth: hci2: command tx timeout [ 78.924165][ T5617] Bluetooth: hci3: command tx timeout [ 78.924202][ T5617] Bluetooth: hci1: command tx timeout [ 78.995948][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.001826][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.002580][ T52] Bluetooth: hci4: command tx timeout [ 79.004499][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.015419][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.037378][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.042072][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.046969][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.060621][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.227289][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.230681][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.231511][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.236361][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.239377][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.254800][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.288048][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.291335][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.347564][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.347623][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.347729][ T5612] bridge_slave_0: entered allmulticast mode [ 79.348864][ T5612] bridge_slave_0: entered promiscuous mode [ 79.386653][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.386766][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.386863][ T5612] bridge_slave_1: entered allmulticast mode [ 79.387899][ T5612] bridge_slave_1: entered promiscuous mode [ 79.436679][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.455914][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.493233][ T5612] team0: Port device team_slave_0 added [ 79.493429][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.496599][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.497292][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.500869][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.518506][ T5612] team0: Port device team_slave_1 added [ 79.518741][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.527204][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.569808][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.576464][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.594327][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.594343][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.594360][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.610895][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.610912][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.610932][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.720075][ T5612] hsr_slave_0: entered promiscuous mode [ 79.720723][ T5612] hsr_slave_1: entered promiscuous mode [ 79.721150][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 79.721163][ T5612] Cannot create hsr debugfs directory [ 79.783837][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.839726][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.847349][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.848225][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.854934][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.894010][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.897039][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.898616][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.901408][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.944811][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.006623][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.010451][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.010624][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.075956][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.076047][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.120185][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.158958][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.161983][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.181393][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.181474][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.184327][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.195151][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.195993][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.201665][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.221236][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.236542][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.259808][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.259869][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.370862][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.417187][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.454876][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.520350][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.522079][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.522260][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.546977][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.547081][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.580020][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.580124][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.630628][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.630739][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.855998][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.924473][ T52] Bluetooth: hci2: command tx timeout [ 80.934419][ T52] Bluetooth: hci0: command tx timeout [ 80.977769][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.004274][ T52] Bluetooth: hci3: command tx timeout [ 81.004295][ T5617] Bluetooth: hci1: command tx timeout [ 81.007027][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.007127][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.082984][ T5617] Bluetooth: hci4: command tx timeout [ 81.090359][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.090467][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.153554][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.419741][ T5611] veth0_vlan: entered promiscuous mode [ 81.464570][ T5611] veth1_vlan: entered promiscuous mode [ 81.517758][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.675684][ T5611] veth0_macvtap: entered promiscuous mode [ 81.707046][ T5611] veth1_macvtap: entered promiscuous mode [ 81.875563][ T5614] veth0_vlan: entered promiscuous mode [ 81.914324][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.918813][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.962143][ T5614] veth1_vlan: entered promiscuous mode [ 82.004793][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.102677][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.105746][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.106238][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.106554][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.239448][ T5614] veth0_macvtap: entered promiscuous mode [ 82.274651][ T5614] veth1_macvtap: entered promiscuous mode [ 82.299405][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.389337][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.410401][ T5621] veth0_vlan: entered promiscuous mode [ 82.435025][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.435053][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.441312][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.496737][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.511605][ T5621] veth1_vlan: entered promiscuous mode [ 82.549414][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.549446][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.552936][ T1161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.552980][ T1161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.553012][ T1161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.553042][ T1161] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.719382][ T5611] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.730773][ T5612] veth0_vlan: entered promiscuous mode [ 82.777008][ T5621] veth0_macvtap: entered promiscuous mode [ 82.790679][ T5612] veth1_vlan: entered promiscuous mode [ 82.804088][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.804110][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.844393][ T5621] veth1_macvtap: entered promiscuous mode [ 82.891759][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.891782][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.918861][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.983688][ T5613] veth0_vlan: entered promiscuous mode [ 82.986398][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.001877][ T5828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 83.006057][ T5617] Bluetooth: hci0: command tx timeout [ 83.006098][ T5617] Bluetooth: hci2: command tx timeout [ 83.037791][ T5613] veth1_vlan: entered promiscuous mode [ 83.039813][ T5612] veth0_macvtap: entered promiscuous mode [ 83.083061][ T52] Bluetooth: hci1: command tx timeout [ 83.083095][ T52] Bluetooth: hci3: command tx timeout [ 83.120332][ T5612] veth1_macvtap: entered promiscuous mode [ 83.121411][ T5828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 83.121559][ T5828] Zero length message leads to an empty skb [ 83.153465][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.153539][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.153581][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.153614][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.162813][ T5617] Bluetooth: hci4: command tx timeout [ 83.256081][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.257858][ T5833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'. [ 83.339595][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.355051][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.355073][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.397989][ T5613] veth0_macvtap: entered promiscuous mode [ 83.438407][ T5613] veth1_macvtap: entered promiscuous mode [ 83.470600][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.470624][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.591931][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.638464][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.693561][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.693582][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.713135][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.713218][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.713254][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.713290][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.713325][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.743353][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.818016][ T5845] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 83.833501][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.833520][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.911956][ T1003] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.978429][ T5851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.040887][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.040908][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.052757][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.155870][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.155893][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.447403][ T50] IPVS: starting estimator thread 0... [ 84.458897][ T5858] bond1: option resend_igmp: invalid value (32767) [ 84.458922][ T5858] bond1: option resend_igmp: allowed values 0 - 255 [ 84.460165][ T5864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'. [ 84.501993][ T5858] bond1 (unregistering): Released all slaves [ 84.543808][ T5867] IPVS: using max 39 ests per chain, 93600 per kthread [ 84.607140][ T5877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'. [ 84.675749][ T5872] warning: `syz.0.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.713711][ T5881] Bluetooth: MGMT ver 1.23 [ 84.888632][ T5887] Cannot find add_set index 1 as target [ 84.998414][ T5895] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 84.998510][ T5897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'. [ 85.235312][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 85.433435][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37'. [ 85.439254][ T5922] netlink: 'syz.3.37': attribute type 28 has an invalid length. [ 85.439276][ T5922] netlink: 'syz.3.37': attribute type 3 has an invalid length. [ 85.439288][ T5922] netlink: 132 bytes leftover after parsing attributes in process `syz.3.37'. [ 85.722932][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 85.882115][ T5949] netlink: 144 bytes leftover after parsing attributes in process `syz.2.49'. [ 86.180134][ T5970] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 86.648604][ T5975] macvtap1: entered promiscuous mode [ 86.648630][ T5975] vlan0: entered promiscuous mode [ 86.650412][ T5975] macvtap1: entered allmulticast mode [ 86.650429][ T5975] vlan0: entered allmulticast mode [ 86.650439][ T5975] veth0_vlan: entered allmulticast mode [ 86.656320][ T5979] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 86.658355][ T5984] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 86.766548][ T10] cfg80211: failed to load regulatory.db [ 86.800435][ T1221] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.008008][ T6017] netlink: 'syz.4.66': attribute type 2 has an invalid length. [ 87.100125][ T6023] netlink: 'syz.3.68': attribute type 1 has an invalid length. [ 87.122384][ T6026] ebt_limit: overflow, try lower: 4278190080/255 [ 87.378393][ T6035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.064312][ T6076] __nla_validate_parse: 7 callbacks suppressed [ 88.064330][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 88.090888][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.81'. [ 88.386079][ T6099] ip_tables: iptables: counters copy to user failed while replacing table [ 88.683494][ T6113] netlink: Conntrack attr has 8 unknown bytes [ 88.683530][ T6113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.831474][ T6123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.886555][ T6128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.96'. [ 89.012817][ T6137] raw_sendmsg: syz.1.99 forgot to set AF_INET. Fix it! [ 89.370748][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 89.371615][ T6163] syzkaller0: entered promiscuous mode [ 89.371633][ T6163] syzkaller0: entered allmulticast mode [ 89.397827][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 89.446061][ T6172] FAULT_INJECTION: forcing a failure. [ 89.446061][ T6172] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.446114][ T6172] CPU: 0 UID: 0 PID: 6172 Comm: syz.1.107 Not tainted syzkaller #0 PREEMPT(full) [ 89.446134][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.446152][ T6172] Call Trace: [ 89.446162][ T6172] [ 89.446171][ T6172] dump_stack_lvl+0xe8/0x150 [ 89.446204][ T6172] should_fail_ex+0x410/0x560 [ 89.446237][ T6172] _copy_to_user+0x31/0xb0 [ 89.446256][ T6172] simple_read_from_buffer+0xe1/0x170 [ 89.446290][ T6172] proc_fail_nth_read+0x1bb/0x230 [ 89.446311][ T6172] ? common_file_perm+0x20e/0x2b0 [ 89.446338][ T6172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.446360][ T6172] ? rw_verify_area+0x24a/0x4c0 [ 89.446379][ T6172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.446398][ T6172] vfs_read+0x213/0xa80 [ 89.446419][ T6172] ? __pfx___mutex_lock+0x10/0x10 [ 89.446442][ T6172] ? __pfx_vfs_read+0x10/0x10 [ 89.446461][ T6172] ? __fget_files+0x2a/0x420 [ 89.446483][ T6172] ? __fget_files+0x3a2/0x420 [ 89.446499][ T6172] ? __fget_files+0x2a/0x420 [ 89.446525][ T6172] ksys_read+0x150/0x270 [ 89.446547][ T6172] ? __pfx_ksys_read+0x10/0x10 [ 89.446578][ T6172] do_syscall_64+0x166/0x520 [ 89.446598][ T6172] ? trace_irq_disable+0x3b/0x140 [ 89.446618][ T6172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.446636][ T6172] ? clear_bhb_loop+0x70/0xc0 [ 89.446658][ T6172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.446674][ T6172] RIP: 0033:0x7fc64615ed8e [ 89.446696][ T6172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.446710][ T6172] RSP: 002b:00007fc64704bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.446733][ T6172] RAX: ffffffffffffffda RBX: 00007fc64704c6c0 RCX: 00007fc64615ed8e [ 89.446745][ T6172] RDX: 000000000000000f RSI: 00007fc64704c0a0 RDI: 0000000000000004 [ 89.446756][ T6172] RBP: 00007fc64704c090 R08: 0000000000000000 R09: 0000000000000000 [ 89.446767][ T6172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.446776][ T6172] R13: 00007fc646426038 R14: 00007fc646425fa0 R15: 00007ffc8b922af8 [ 89.446807][ T6172] [ 89.468560][ T6171] netlink: 'syz.0.106': attribute type 1 has an invalid length. [ 89.709231][ T6177] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 90.187648][ T6205] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 90.521863][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 90.525060][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 90.590389][ T6234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.123'. [ 90.706563][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'. [ 90.984441][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.128'. [ 91.312103][ T6277] syzkaller0: entered promiscuous mode [ 91.312128][ T6277] syzkaller0: entered allmulticast mode [ 91.390005][ T6280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.447226][ T6280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.499605][ T6280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.173256][ T6329] ip_tables: iptables: counters copy to user failed while replacing table [ 92.274410][ T6331] batman_adv: batadv0: Adding interface: syz_tun [ 92.274428][ T6331] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.274453][ T6331] batman_adv: batadv0: Interface activated: syz_tun [ 92.705376][ T6352] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 92.787429][ T6356] netlink: 'syz.3.159': attribute type 4 has an invalid length. [ 93.188676][ T6365] netlink: 'syz.0.160': attribute type 4 has an invalid length. [ 93.307839][ T6372] __nla_validate_parse: 5 callbacks suppressed [ 93.307859][ T6372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.164'. [ 93.361509][ T6375] tipc: Enabling of bearer rejected, failed to enable media [ 93.399522][ T6377] ip_tables: iptables: counters copy to user failed while replacing table [ 93.582471][ T6390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.170'. [ 93.585480][ T6383] netlink: ct family unspecified [ 93.585511][ T6383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.702958][ T6396] ip_tables: iptables: counters copy to user failed while replacing table [ 93.820937][ T5617] Bluetooth: hci3: Malformed Event: 0x13 [ 93.891751][ T6405] tipc: Enabling of bearer rejected, failed to enable media [ 94.168782][ T6421] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 94.226877][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 94.226895][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 94.226957][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 94.367903][ T6432] tipc: Enabling of bearer rejected, failed to enable media [ 94.906238][ T6453] netlink: 60 bytes leftover after parsing attributes in process `syz.2.195'. [ 95.190763][ T6472] netlink: 'syz.2.201': attribute type 11 has an invalid length. [ 95.216720][ T6473] tipc: Enabling of bearer rejected, failed to enable media [ 95.287484][ T6476] netlink: 348 bytes leftover after parsing attributes in process `syz.1.202'. [ 95.336725][ T6478] tipc: Started in network mode [ 95.336754][ T6478] tipc: Node identity 26318a2697fd, cluster identity 4711 [ 95.337076][ T6478] tipc: Enabled bearer , priority 0 [ 95.337924][ T6478] syzkaller0: entered promiscuous mode [ 95.337943][ T6478] syzkaller0: entered allmulticast mode [ 95.349191][ T6479] IPVS: length: 1152 != 8 [ 95.355427][ T6478] tipc: Resetting bearer [ 95.374241][ T6477] tipc: Resetting bearer [ 95.411160][ T6477] tipc: Disabling bearer [ 95.556605][ T6489] netlink: 60 bytes leftover after parsing attributes in process `syz.4.207'. [ 95.557253][ T6489] netlink: 60 bytes leftover after parsing attributes in process `syz.4.207'. [ 95.591125][ T6488] netlink: 'syz.1.206': attribute type 1 has an invalid length. [ 95.591151][ T6488] netlink: 'syz.1.206': attribute type 2 has an invalid length. [ 95.702153][ T6497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.210'. [ 95.900377][ T6508] openvswitch: netlink: Actions may not be safe on all matching packets [ 95.954530][ T6506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.971524][ T6508] ip_tables: iptables: counters copy to user failed while replacing table [ 96.245208][ T6523] batman_adv: batadv0: Interface deactivated: syz_tun [ 96.259186][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.260958][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.346381][ T6533] FAULT_INJECTION: forcing a failure. [ 96.346381][ T6533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.346416][ T6533] CPU: 1 UID: 0 PID: 6533 Comm: syz.1.221 Not tainted syzkaller #0 PREEMPT(full) [ 96.346455][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.346476][ T6533] Call Trace: [ 96.346490][ T6533] [ 96.346506][ T6533] dump_stack_lvl+0xe8/0x150 [ 96.346544][ T6533] should_fail_ex+0x410/0x560 [ 96.346575][ T6533] _copy_from_user+0x2d/0xb0 [ 96.346603][ T6533] ___sys_sendmsg+0x1c6/0x360 [ 96.346622][ T6533] ? __lock_acquire+0x747/0x2de0 [ 96.346645][ T6533] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.346696][ T6533] ? __fget_files+0x2a/0x420 [ 96.346713][ T6533] ? __fget_files+0x3a2/0x420 [ 96.346737][ T6533] __x64_sys_sendmsg+0x1b1/0x290 [ 96.346759][ T6533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 96.346798][ T6533] do_syscall_64+0x166/0x520 [ 96.346820][ T6533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.346838][ T6533] ? clear_bhb_loop+0x70/0xc0 [ 96.346861][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.346878][ T6533] RIP: 0033:0x7fc64619e559 [ 96.346895][ T6533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.346910][ T6533] RSP: 002b:00007fc64704c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.346928][ T6533] RAX: ffffffffffffffda RBX: 00007fc646425fa0 RCX: 00007fc64619e559 [ 96.346940][ T6533] RDX: 0000000000000840 RSI: 00002000000004c0 RDI: 0000000000000004 [ 96.346952][ T6533] RBP: 00007fc64704c090 R08: 0000000000000000 R09: 0000000000000000 [ 96.346962][ T6533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.346973][ T6533] R13: 00007fc646426038 R14: 00007fc646425fa0 R15: 00007ffc8b922af8 [ 96.347009][ T6533] [ 96.405656][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.420040][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.659015][ T6523] vlan0: left allmulticast mode [ 96.659034][ T6523] veth0_vlan: left allmulticast mode [ 96.659049][ T6523] vlan0: left promiscuous mode [ 96.676213][ T50] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.679160][ T1003] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.679203][ T1003] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.679235][ T1003] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.748466][ T6542] netlink: 'syz.1.224': attribute type 4 has an invalid length. [ 96.975901][ T6555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.975919][ T6555] IPv6: NLM_F_CREATE should be set when creating new route [ 96.976027][ T6555] IPv6: NLM_F_CREATE should be set when creating new route [ 96.976052][ T6555] IPv6: NLM_F_CREATE should be set when creating new route [ 97.160494][ T6559] IPVS: set_ctl: invalid protocol: 46 100.1.1.1:20001 [ 97.254277][ T6570] Driver unsupported XDP return value 0 on prog (id 43) dev N/A, expect packet loss! [ 97.305377][ T6574] netlink: 'syz.4.231': attribute type 4 has an invalid length. [ 97.308159][ T6574] syzkaller0: entered promiscuous mode [ 97.308185][ T6574] syzkaller0: entered allmulticast mode [ 97.710803][ T6595] ip_tables: iptables: counters copy to user failed while replacing table [ 97.851071][ T6602] FAULT_INJECTION: forcing a failure. [ 97.851071][ T6602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.851103][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.0.243 Not tainted syzkaller #0 PREEMPT(full) [ 97.851124][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.851135][ T6602] Call Trace: [ 97.851142][ T6602] [ 97.851150][ T6602] dump_stack_lvl+0xe8/0x150 [ 97.851183][ T6602] should_fail_ex+0x410/0x560 [ 97.851220][ T6602] _copy_from_iter+0x1d3/0x1660 [ 97.851247][ T6602] ? __alloc_skb+0x27a/0x7a0 [ 97.851273][ T6602] ? __alloc_skb+0x27a/0x7a0 [ 97.851300][ T6602] ? __alloc_skb+0x27a/0x7a0 [ 97.851325][ T6602] ? __pfx__copy_from_iter+0x10/0x10 [ 97.851345][ T6602] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 97.851364][ T6602] ? __alloc_skb+0x27a/0x7a0 [ 97.851386][ T6602] ? __alloc_skb+0x27a/0x7a0 [ 97.851416][ T6602] ? netlink_sendmsg+0x650/0xb40 [ 97.851438][ T6602] ? skb_put+0x112/0x210 [ 97.851457][ T6602] netlink_sendmsg+0x6c0/0xb40 [ 97.851484][ T6602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.851511][ T6602] ? apparmor_socket_sendmsg+0x98/0x360 [ 97.851535][ T6602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.851554][ T6602] sock_sendmsg_nosec+0x13a/0x180 [ 97.851578][ T6602] ____sys_sendmsg+0x54e/0x850 [ 97.851600][ T6602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.851625][ T6602] ? import_iovec+0x73/0xa0 [ 97.851653][ T6602] ___sys_sendmsg+0x2a5/0x360 [ 97.851671][ T6602] ? __lock_acquire+0x747/0x2de0 [ 97.851692][ T6602] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.851737][ T6602] ? __fget_files+0x2a/0x420 [ 97.851753][ T6602] ? __fget_files+0x3a2/0x420 [ 97.851780][ T6602] __x64_sys_sendmsg+0x1b1/0x290 [ 97.851802][ T6602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.851842][ T6602] do_syscall_64+0x166/0x520 [ 97.851863][ T6602] ? trace_irq_disable+0x3b/0x140 [ 97.851880][ T6602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.851899][ T6602] ? clear_bhb_loop+0x70/0xc0 [ 97.851921][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.851937][ T6602] RIP: 0033:0x7f42a3b9e559 [ 97.851954][ T6602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.851967][ T6602] RSP: 002b:00007f42a4a7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.851986][ T6602] RAX: ffffffffffffffda RBX: 00007f42a3e25fa0 RCX: 00007f42a3b9e559 [ 97.851998][ T6602] RDX: 0000000000000840 RSI: 00002000000004c0 RDI: 0000000000000004 [ 97.852008][ T6602] RBP: 00007f42a4a7c090 R08: 0000000000000000 R09: 0000000000000000 [ 97.852018][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.852029][ T6602] R13: 00007f42a3e26038 R14: 00007f42a3e25fa0 R15: 00007ffe51839958 [ 97.852057][ T6602] [ 98.476368][ T6639] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 98.565405][ T6639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.583879][ T6644] FAULT_INJECTION: forcing a failure. [ 98.583879][ T6644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.583912][ T6644] CPU: 1 UID: 0 PID: 6644 Comm: syz.1.256 Not tainted syzkaller #0 PREEMPT(full) [ 98.583931][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.583941][ T6644] Call Trace: [ 98.583948][ T6644] [ 98.583955][ T6644] dump_stack_lvl+0xe8/0x150 [ 98.583985][ T6644] should_fail_ex+0x410/0x560 [ 98.584016][ T6644] _copy_from_iter+0x1d3/0x1660 [ 98.584040][ T6644] ? __alloc_skb+0x27a/0x7a0 [ 98.584065][ T6644] ? __alloc_skb+0x27a/0x7a0 [ 98.584090][ T6644] ? __alloc_skb+0x27a/0x7a0 [ 98.584114][ T6644] ? __pfx__copy_from_iter+0x10/0x10 [ 98.584135][ T6644] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 98.584153][ T6644] ? __alloc_skb+0x27a/0x7a0 [ 98.584174][ T6644] ? __alloc_skb+0x27a/0x7a0 [ 98.584203][ T6644] ? netlink_sendmsg+0x650/0xb40 [ 98.584225][ T6644] ? skb_put+0x112/0x210 [ 98.584245][ T6644] netlink_sendmsg+0x6c0/0xb40 [ 98.584275][ T6644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.584303][ T6644] ? apparmor_socket_sendmsg+0x98/0x360 [ 98.584327][ T6644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.584346][ T6644] sock_sendmsg_nosec+0x13a/0x180 [ 98.584373][ T6644] ____sys_sendmsg+0x54e/0x850 [ 98.584399][ T6644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.584428][ T6644] ? import_iovec+0x73/0xa0 [ 98.584459][ T6644] ___sys_sendmsg+0x2a5/0x360 [ 98.584477][ T6644] ? __lock_acquire+0x747/0x2de0 [ 98.584503][ T6644] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.584559][ T6644] ? __fget_files+0x2a/0x420 [ 98.584575][ T6644] ? __fget_files+0x3a2/0x420 [ 98.584610][ T6644] __x64_sys_sendmsg+0x1b1/0x290 [ 98.584634][ T6644] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.584676][ T6644] do_syscall_64+0x166/0x520 [ 98.584695][ T6644] ? trace_irq_disable+0x3b/0x140 [ 98.584714][ T6644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.584731][ T6644] ? clear_bhb_loop+0x70/0xc0 [ 98.584752][ T6644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.584768][ T6644] RIP: 0033:0x7fc64619e559 [ 98.584785][ T6644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.584798][ T6644] RSP: 002b:00007fc64704c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.584818][ T6644] RAX: ffffffffffffffda RBX: 00007fc646425fa0 RCX: 00007fc64619e559 [ 98.584828][ T6644] RDX: 0000000000000840 RSI: 00002000000004c0 RDI: 0000000000000004 [ 98.584838][ T6644] RBP: 00007fc64704c090 R08: 0000000000000000 R09: 0000000000000000 [ 98.584848][ T6644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.584857][ T6644] R13: 00007fc646426038 R14: 00007fc646425fa0 R15: 00007ffc8b922af8 [ 98.584887][ T6644] [ 98.704384][ T6648] __nla_validate_parse: 15 callbacks suppressed [ 98.704405][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 98.987272][ T6654] ÿÿÿÿÿÿ: renamed from vlan1 [ 99.156120][ T6672] netlink: 60 bytes leftover after parsing attributes in process `syz.1.262'. [ 99.196659][ T6672] netlink: 60 bytes leftover after parsing attributes in process `syz.1.262'. [ 99.265101][ T6674] netlink: 'syz.2.260': attribute type 1 has an invalid length. [ 99.267856][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.264'. [ 99.381470][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 99.536471][ T6680] syzkaller0: entered promiscuous mode [ 99.536497][ T6680] syzkaller0: entered allmulticast mode [ 99.696293][ T6698] batadv_slave_1: entered promiscuous mode [ 99.955420][ T6697] batadv_slave_1: left promiscuous mode [ 100.008267][ T6717] netlink: 60 bytes leftover after parsing attributes in process `syz.0.273'. [ 100.008773][ T6717] netlink: 60 bytes leftover after parsing attributes in process `syz.0.273'. [ 102.084640][ T6763] FAULT_INJECTION: forcing a failure. [ 102.084640][ T6763] name failslab, interval 1, probability 0, space 0, times 0 [ 102.084672][ T6763] CPU: 1 UID: 0 PID: 6763 Comm: syz.4.280 Not tainted syzkaller #0 PREEMPT(full) [ 102.084693][ T6763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.084704][ T6763] Call Trace: [ 102.084711][ T6763] [ 102.084720][ T6763] dump_stack_lvl+0xe8/0x150 [ 102.084752][ T6763] should_fail_ex+0x410/0x560 [ 102.084790][ T6763] should_failslab+0xa8/0x100 [ 102.084815][ T6763] __kmalloc_noprof+0xfe/0x720 [ 102.084836][ T6763] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 102.084862][ T6763] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 102.084896][ T6763] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 102.084933][ T6763] genl_family_rcv_msg_doit+0xda/0x340 [ 102.084965][ T6763] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 102.084995][ T6763] ? __pfx_genl_get_cmd+0x10/0x10 [ 102.085019][ T6763] ? __pfx_fou_nl_get_doit+0x10/0x10 [ 102.085036][ T6763] ? __pfx_fou_nl_get_dumpit+0x10/0x10 [ 102.085065][ T6763] genl_rcv_msg+0x614/0x7a0 [ 102.085096][ T6763] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.085121][ T6763] ? __pfx_fou_nl_get_doit+0x10/0x10 [ 102.085142][ T6763] ? __asan_memcpy+0x40/0x70 [ 102.085160][ T6763] ? __skb_clone+0x5c/0x6c0 [ 102.085186][ T6763] netlink_rcv_skb+0x226/0x4a0 [ 102.085207][ T6763] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.085234][ T6763] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.085269][ T6763] ? down_read+0x2be/0x330 [ 102.085295][ T6763] genl_rcv+0x28/0x40 [ 102.085317][ T6763] netlink_unicast+0x8ef/0xa80 [ 102.085358][ T6763] netlink_sendmsg+0x813/0xb40 [ 102.085390][ T6763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.085420][ T6763] ? apparmor_socket_sendmsg+0x98/0x360 [ 102.085447][ T6763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.085468][ T6763] sock_sendmsg_nosec+0x13a/0x180 [ 102.085495][ T6763] ____sys_sendmsg+0x54e/0x850 [ 102.085519][ T6763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.085548][ T6763] ? import_iovec+0x73/0xa0 [ 102.085580][ T6763] ___sys_sendmsg+0x2a5/0x360 [ 102.085596][ T6763] ? __lock_acquire+0x747/0x2de0 [ 102.085622][ T6763] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.085677][ T6763] ? __fget_files+0x2a/0x420 [ 102.085694][ T6763] ? __fget_files+0x3a2/0x420 [ 102.085721][ T6763] __x64_sys_sendmsg+0x1b1/0x290 [ 102.085745][ T6763] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.085795][ T6763] do_syscall_64+0x166/0x520 [ 102.085817][ T6763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.085835][ T6763] ? clear_bhb_loop+0x70/0xc0 [ 102.085856][ T6763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.085873][ T6763] RIP: 0033:0x7fb6e299e559 [ 102.085891][ T6763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.085905][ T6763] RSP: 002b:00007fb6e38d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.085925][ T6763] RAX: ffffffffffffffda RBX: 00007fb6e2c25fa0 RCX: 00007fb6e299e559 [ 102.085938][ T6763] RDX: 0000000000000840 RSI: 00002000000004c0 RDI: 0000000000000004 [ 102.085949][ T6763] RBP: 00007fb6e38d7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.085959][ T6763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.085970][ T6763] R13: 00007fb6e2c26038 R14: 00007fb6e2c25fa0 R15: 00007ffea8b86ea8 [ 102.085999][ T6763] [ 102.362847][ T6772] netlink: 'syz.4.283': attribute type 4 has an invalid length. [ 102.448890][ T6776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.285'. [ 102.450506][ T6776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.285'. [ 102.744441][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.291'. [ 102.758399][ T6788] bond2: entered promiscuous mode [ 102.769465][ T6788] macvlan2: entered promiscuous mode [ 102.769488][ T6788] macvlan2: entered allmulticast mode [ 102.771024][ T6788] bond2: (slave macvlan2): Opening slave failed [ 103.089329][ T6816] netlink: 'syz.1.297': attribute type 4 has an invalid length. [ 103.376899][ T6834] netlink: 'syz.2.305': attribute type 23 has an invalid length. [ 103.545962][ T6851] netlink: 'syz.0.311': attribute type 4 has an invalid length. [ 103.812106][ T6871] __nla_validate_parse: 13 callbacks suppressed [ 103.812130][ T6871] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.312'. [ 104.133270][ T6889] BUG: Bad page state in process syz.1.320 pfn:7cfb0 [ 104.133299][ T6889] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7cfb0 [ 104.133320][ T6889] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.133354][ T6889] raw: 00fff00000000000 dead000000000040 ffff88801c167000 0000000000000000 [ 104.133371][ T6889] raw: ffff888000000000 3fffffffffffffff 00000000ffffffff 0000000000000000 [ 104.133381][ T6889] page dumped because: page_pool leak [ 104.133394][ T6889] page_owner tracks the page as allocated [ 104.133401][ T6889] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6889, tgid 6888 (syz.1.320), ts 104133053000 [ 104.133428][ T6889] post_alloc_hook+0x1f9/0x250 [ 104.133451][ T6889] get_page_from_freelist+0x2209/0x2280 [ 104.133473][ T6889] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 104.133496][ T6889] __alloc_pages_noprof+0x10/0x100 [ 104.133516][ T6889] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 104.133545][ T6889] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 104.133571][ T6889] page_pool_alloc_frag_netmem+0x561/0x9b0 [ 104.133597][ T6889] skb_pp_cow_data+0xc2c/0x18e0 [ 104.133614][ T6889] do_xdp_generic+0x78f/0x12f0 [ 104.133637][ T6889] tun_get_user+0x248b/0x4450 [ 104.133660][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.133682][ T6889] vfs_write+0x612/0xba0 [ 104.133698][ T6889] ksys_write+0x150/0x270 [ 104.133714][ T6889] do_syscall_64+0x166/0x520 [ 104.133734][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.133752][ T6889] page last free pid 5621 tgid 5621 ts 103967268380 stack trace: [ 104.133766][ T6889] __free_frozen_pages+0xc93/0xd90 [ 104.133785][ T6889] __kasan_populate_vmalloc+0x12d/0x1c0 [ 104.133804][ T6889] alloc_vmap_area+0xd1a/0x1420 [ 104.133830][ T6889] __get_vm_area_node+0x200/0x2f0 [ 104.133845][ T6889] __vmalloc_node_range_noprof+0x343/0x1540 [ 104.133865][ T6889] vzalloc_noprof+0xb2/0xe0 [ 104.133882][ T6889] do_arpt_get_ctl+0x915/0x1270 [ 104.133905][ T6889] nf_getsockopt+0x26e/0x290 [ 104.133922][ T6889] ip_getsockopt+0x19e/0x230 [ 104.133939][ T6889] do_sock_getsockopt+0x51d/0x7e0 [ 104.133956][ T6889] __x64_sys_getsockopt+0x1a4/0x240 [ 104.133973][ T6889] do_syscall_64+0x166/0x520 [ 104.133992][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.134049][ T6889] Modules linked in: [ 104.134068][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.1.320 Not tainted syzkaller #0 PREEMPT(full) [ 104.134089][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.134100][ T6889] Call Trace: [ 104.134107][ T6889] [ 104.134116][ T6889] dump_stack_lvl+0xe8/0x150 [ 104.134146][ T6889] bad_page+0x17f/0x1c0 [ 104.134174][ T6889] __free_frozen_pages+0xd37/0xd90 [ 104.134202][ T6889] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 104.134246][ T6889] bpf_xdp_adjust_tail+0x1ce/0x210 [ 104.134273][ T6889] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 104.134293][ T6889] bpf_prog_run_generic_xdp+0x612/0x1560 [ 104.134349][ T6889] do_xdp_generic+0xae1/0x12f0 [ 104.134373][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.134393][ T6889] ? do_xdp_generic+0x6d9/0x12f0 [ 104.134426][ T6889] ? __pfx_do_xdp_generic+0x10/0x10 [ 104.134481][ T6889] ? tun_get_user+0x1d3f/0x4450 [ 104.134507][ T6889] tun_get_user+0x248b/0x4450 [ 104.134558][ T6889] ? aa_file_perm+0x18b/0x15f0 [ 104.134583][ T6889] ? aa_file_perm+0x4ed/0x15f0 [ 104.134601][ T6889] ? __pfx_tun_get_user+0x10/0x10 [ 104.134630][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.134664][ T6889] ? ref_tracker_alloc+0x341/0x4b0 [ 104.134692][ T6889] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 104.134720][ T6889] ? lock_acquire+0x115/0x350 [ 104.134739][ T6889] ? tun_get+0x1c/0x2f0 [ 104.134766][ T6889] ? tun_get+0x1c/0x2f0 [ 104.134789][ T6889] ? tun_get+0x1c/0x2f0 [ 104.134816][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.134839][ T6889] vfs_write+0x612/0xba0 [ 104.134866][ T6889] ? __pfx_vfs_write+0x10/0x10 [ 104.134898][ T6889] ? __fget_files+0x2a/0x420 [ 104.134927][ T6889] ksys_write+0x150/0x270 [ 104.134949][ T6889] ? __pfx_ksys_write+0x10/0x10 [ 104.134980][ T6889] do_syscall_64+0x166/0x520 [ 104.135002][ T6889] ? trace_irq_disable+0x3b/0x140 [ 104.135022][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.135042][ T6889] ? clear_bhb_loop+0x70/0xc0 [ 104.135067][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.135086][ T6889] RIP: 0033:0x7fc64615ed8e [ 104.135110][ T6889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.135126][ T6889] RSP: 002b:00007fc64704bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.135146][ T6889] RAX: ffffffffffffffda RBX: 00007fc64704c6c0 RCX: 00007fc64615ed8e [ 104.135160][ T6889] RDX: 000000000000fdef RSI: 0000200000000ac0 RDI: 00000000000000c8 [ 104.135173][ T6889] RBP: 00007fc646235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 104.135185][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.135196][ T6889] R13: 00007fc646426038 R14: 00007fc646425fa0 R15: 00007ffc8b922af8 [ 104.135229][ T6889] [ 104.135256][ T6889] Disabling lock debugging due to kernel taint [ 104.135265][ T6889] BUG: Bad page state in process syz.1.320 pfn:22b7a [ 104.135277][ T6889] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888022b7a000 pfn:0x22b7a [ 104.135295][ T6889] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.135317][ T6889] raw: 00fff00000000000 dead000000000040 ffff88801c167000 0000000000000000 [ 104.135333][ T6889] raw: ffff888022b7a000 0000000000000001 00000000ffffffff 0000000000000000 [ 104.135343][ T6889] page dumped because: page_pool leak [ 104.135352][ T6889] page_owner tracks the page as allocated [ 104.135359][ T6889] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6889, tgid 6888 (syz.1.320), ts 104133033709 [ 104.135384][ T6889] post_alloc_hook+0x1f9/0x250 [ 104.135401][ T6889] get_page_from_freelist+0x2209/0x2280 [ 104.135422][ T6889] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 104.135442][ T6889] __alloc_pages_noprof+0x10/0x100 [ 104.135461][ T6889] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 104.135480][ T6889] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 104.135505][ T6889] skb_pp_cow_data+0xc08/0x18e0 [ 104.135529][ T6889] do_xdp_generic+0x78f/0x12f0 [ 104.135549][ T6889] tun_get_user+0x248b/0x4450 [ 104.135571][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.135593][ T6889] vfs_write+0x612/0xba0 [ 104.135609][ T6889] ksys_write+0x150/0x270 [ 104.135625][ T6889] do_syscall_64+0x166/0x520 [ 104.135644][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.135660][ T6889] page last free pid 24 tgid 24 ts 103974101315 stack trace: [ 104.135672][ T6889] __free_frozen_pages+0xc93/0xd90 [ 104.135689][ T6889] tlb_remove_table_rcu+0x85/0x100 [ 104.135707][ T6889] rcu_core+0x926/0x1260 [ 104.135726][ T6889] handle_softirqs+0x226/0x860 [ 104.135747][ T6889] run_ksoftirqd+0x36/0x60 [ 104.135770][ T6889] smpboot_thread_fn+0x565/0xa70 [ 104.135794][ T6889] kthread+0x38b/0x480 [ 104.135809][ T6889] ret_from_fork+0x514/0xb70 [ 104.135825][ T6889] ret_from_fork_asm+0x1a/0x30 [ 104.135840][ T6889] Modules linked in: [ 104.135857][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.1.320 Tainted: G B syzkaller #0 PREEMPT(full) [ 104.135879][ T6889] Tainted: [B]=BAD_PAGE [ 104.135886][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.135896][ T6889] Call Trace: [ 104.135903][ T6889] [ 104.135910][ T6889] dump_stack_lvl+0xe8/0x150 [ 104.135937][ T6889] bad_page+0x17f/0x1c0 [ 104.135962][ T6889] __free_frozen_pages+0xd37/0xd90 [ 104.135987][ T6889] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 104.136020][ T6889] bpf_xdp_adjust_tail+0x1ce/0x210 [ 104.136041][ T6889] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 104.136058][ T6889] bpf_prog_run_generic_xdp+0x612/0x1560 [ 104.136092][ T6889] do_xdp_generic+0xae1/0x12f0 [ 104.136116][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.136135][ T6889] ? do_xdp_generic+0x6d9/0x12f0 [ 104.136161][ T6889] ? __pfx_do_xdp_generic+0x10/0x10 [ 104.136197][ T6889] ? tun_get_user+0x1d3f/0x4450 [ 104.136222][ T6889] tun_get_user+0x248b/0x4450 [ 104.136253][ T6889] ? aa_file_perm+0x18b/0x15f0 [ 104.136272][ T6889] ? aa_file_perm+0x4ed/0x15f0 [ 104.136289][ T6889] ? __pfx_tun_get_user+0x10/0x10 [ 104.136313][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.136338][ T6889] ? ref_tracker_alloc+0x341/0x4b0 [ 104.136366][ T6889] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 104.136394][ T6889] ? lock_acquire+0x115/0x350 [ 104.136413][ T6889] ? tun_get+0x1c/0x2f0 [ 104.136440][ T6889] ? tun_get+0x1c/0x2f0 [ 104.136461][ T6889] ? tun_get+0x1c/0x2f0 [ 104.136482][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.136503][ T6889] vfs_write+0x612/0xba0 [ 104.136532][ T6889] ? __pfx_vfs_write+0x10/0x10 [ 104.136553][ T6889] ? __fget_files+0x2a/0x420 [ 104.136571][ T6889] ksys_write+0x150/0x270 [ 104.136589][ T6889] ? __pfx_ksys_write+0x10/0x10 [ 104.136610][ T6889] do_syscall_64+0x166/0x520 [ 104.136627][ T6889] ? trace_irq_disable+0x3b/0x140 [ 104.136644][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.136661][ T6889] ? clear_bhb_loop+0x70/0xc0 [ 104.136680][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.136697][ T6889] RIP: 0033:0x7fc64615ed8e [ 104.136709][ T6889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.136743][ T6889] RSP: 002b:00007fc64704bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.136762][ T6889] RAX: ffffffffffffffda RBX: 00007fc64704c6c0 RCX: 00007fc64615ed8e [ 104.136776][ T6889] RDX: 000000000000fdef RSI: 0000200000000ac0 RDI: 00000000000000c8 [ 104.136787][ T6889] RBP: 00007fc646235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 104.136798][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.136808][ T6889] R13: 00007fc646426038 R14: 00007fc646425fa0 R15: 00007ffc8b922af8 [ 104.136830][ T6889] [ 104.136838][ T6889] BUG: Bad page state in process syz.1.320 pfn:58ad1 [ 104.136848][ T6889] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x58ad1 [ 104.136865][ T6889] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.136884][ T6889] raw: 00fff00000000000 dead000000000040 ffff88801c167000 0000000000000000 [ 104.136899][ T6889] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 104.136908][ T6889] page dumped because: page_pool leak [ 104.136915][ T6889] page_owner tracks the page as allocated [ 104.136921][ T6889] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6889, tgid 6888 (syz.1.320), ts 104133018043 [ 104.136944][ T6889] post_alloc_hook+0x1f9/0x250 [ 104.136962][ T6889] get_page_from_freelist+0x2209/0x2280 [ 104.136982][ T6889] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 104.137001][ T6889] __alloc_pages_noprof+0x10/0x100 [ 104.137019][ T6889] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 104.137037][ T6889] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 104.137062][ T6889] skb_pp_cow_data+0xc08/0x18e0 [ 104.137077][ T6889] do_xdp_generic+0x78f/0x12f0 [ 104.137096][ T6889] tun_get_user+0x248b/0x4450 [ 104.137118][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.137139][ T6889] vfs_write+0x612/0xba0 [ 104.137153][ T6889] ksys_write+0x150/0x270 [ 104.137168][ T6889] do_syscall_64+0x166/0x520 [ 104.137186][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.137203][ T6889] page last free pid 24 tgid 24 ts 103974129724 stack trace: [ 104.137215][ T6889] __free_frozen_pages+0xc93/0xd90 [ 104.137231][ T6889] tlb_remove_table_rcu+0x85/0x100 [ 104.137250][ T6889] rcu_core+0x926/0x1260 [ 104.137268][ T6889] handle_softirqs+0x226/0x860 [ 104.137290][ T6889] run_ksoftirqd+0x36/0x60 [ 104.137313][ T6889] smpboot_thread_fn+0x565/0xa70 [ 104.137337][ T6889] kthread+0x38b/0x480 [ 104.137353][ T6889] ret_from_fork+0x514/0xb70 [ 104.137368][ T6889] ret_from_fork_asm+0x1a/0x30 [ 104.137382][ T6889] Modules linked in: [ 104.137397][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.1.320 Tainted: G B syzkaller #0 PREEMPT(full) [ 104.137434][ T6889] Tainted: [B]=BAD_PAGE [ 104.137441][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.137452][ T6889] Call Trace: [ 104.137458][ T6889] [ 104.137466][ T6889] dump_stack_lvl+0xe8/0x150 [ 104.137510][ T6889] bad_page+0x17f/0x1c0 [ 104.137544][ T6889] __free_frozen_pages+0xd37/0xd90 [ 104.137567][ T6889] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 104.137600][ T6889] bpf_xdp_adjust_tail+0x1ce/0x210 [ 104.137619][ T6889] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 104.137635][ T6889] bpf_prog_run_generic_xdp+0x612/0x1560 [ 104.137669][ T6889] do_xdp_generic+0xae1/0x12f0 [ 104.137689][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.137707][ T6889] ? do_xdp_generic+0x6d9/0x12f0 [ 104.137732][ T6889] ? __pfx_do_xdp_generic+0x10/0x10 [ 104.137767][ T6889] ? tun_get_user+0x1d3f/0x4450 [ 104.137790][ T6889] tun_get_user+0x248b/0x4450 [ 104.137820][ T6889] ? aa_file_perm+0x18b/0x15f0 [ 104.137840][ T6889] ? aa_file_perm+0x4ed/0x15f0 [ 104.137857][ T6889] ? __pfx_tun_get_user+0x10/0x10 [ 104.137880][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.137907][ T6889] ? ref_tracker_alloc+0x341/0x4b0 [ 104.137935][ T6889] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 104.137960][ T6889] ? lock_acquire+0x115/0x350 [ 104.137973][ T6889] ? tun_get+0x1c/0x2f0 [ 104.137992][ T6889] ? tun_get+0x1c/0x2f0 [ 104.138011][ T6889] ? tun_get+0x1c/0x2f0 [ 104.138033][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.138053][ T6889] vfs_write+0x612/0xba0 [ 104.138073][ T6889] ? __pfx_vfs_write+0x10/0x10 [ 104.138094][ T6889] ? __fget_files+0x2a/0x420 [ 104.138111][ T6889] ksys_write+0x150/0x270 [ 104.138126][ T6889] ? __pfx_ksys_write+0x10/0x10 [ 104.138143][ T6889] do_syscall_64+0x166/0x520 [ 104.138160][ T6889] ? trace_irq_disable+0x3b/0x140 [ 104.138179][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.138196][ T6889] ? clear_bhb_loop+0x70/0xc0 [ 104.138215][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.138234][ T6889] RIP: 0033:0x7fc64615ed8e [ 104.138248][ T6889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.138262][ T6889] RSP: 002b:00007fc64704bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.138281][ T6889] RAX: ffffffffffffffda RBX: 00007fc64704c6c0 RCX: 00007fc64615ed8e [ 104.138293][ T6889] RDX: 000000000000fdef RSI: 0000200000000ac0 RDI: 00000000000000c8 [ 104.138303][ T6889] RBP: 00007fc646235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 104.138313][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.138323][ T6889] R13: 00007fc646426038 R14: 00007fc646425fa0 R15: 00007ffc8b922af8 [ 104.138345][ T6889] [ 104.138355][ T6889] BUG: Bad page state in process syz.1.320 pfn:77b9f [ 104.138366][ T6889] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x77b9f [ 104.138384][ T6889] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.138406][ T6889] raw: 00fff00000000000 dead000000000040 ffff88801c167000 0000000000000000 [ 104.138421][ T6889] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 104.138431][ T6889] page dumped because: page_pool leak [ 104.138438][ T6889] page_owner tracks the page as allocated [ 104.138443][ T6889] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6889, tgid 6888 (syz.1.320), ts 104132999972 [ 104.138468][ T6889] post_alloc_hook+0x1f9/0x250 [ 104.138485][ T6889] get_page_from_freelist+0x2209/0x2280 [ 104.138505][ T6889] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 104.138536][ T6889] __alloc_pages_noprof+0x10/0x100 [ 104.138556][ T6889] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 104.138575][ T6889] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 104.138598][ T6889] skb_pp_cow_data+0xc08/0x18e0 [ 104.138613][ T6889] do_xdp_generic+0x78f/0x12f0 [ 104.138632][ T6889] tun_get_user+0x248b/0x4450 [ 104.138653][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.138674][ T6889] vfs_write+0x612/0xba0 [ 104.138688][ T6889] ksys_write+0x150/0x270 [ 104.138703][ T6889] do_syscall_64+0x166/0x520 [ 104.138721][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.138737][ T6889] page last free pid 24 tgid 24 ts 103974155723 stack trace: [ 104.138749][ T6889] __free_frozen_pages+0xc93/0xd90 [ 104.138766][ T6889] tlb_remove_table_rcu+0x85/0x100 [ 104.138785][ T6889] rcu_core+0x926/0x1260 [ 104.138803][ T6889] handle_softirqs+0x226/0x860 [ 104.138824][ T6889] run_ksoftirqd+0x36/0x60 [ 104.138847][ T6889] smpboot_thread_fn+0x565/0xa70 [ 104.138870][ T6889] kthread+0x38b/0x480 [ 104.138884][ T6889] ret_from_fork+0x514/0xb70 [ 104.138898][ T6889] ret_from_fork_asm+0x1a/0x30 [ 104.138912][ T6889] Modules linked in: [ 104.138928][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.1.320 Tainted: G B syzkaller #0 PREEMPT(full) [ 104.138952][ T6889] Tainted: [B]=BAD_PAGE [ 104.138958][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.138968][ T6889] Call Trace: [ 104.138975][ T6889] [ 104.138982][ T6889] dump_stack_lvl+0xe8/0x150 [ 104.139008][ T6889] bad_page+0x17f/0x1c0 [ 104.139033][ T6889] __free_frozen_pages+0xd37/0xd90 [ 104.139056][ T6889] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 104.139088][ T6889] bpf_xdp_adjust_tail+0x1ce/0x210 [ 104.139109][ T6889] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 104.139125][ T6889] bpf_prog_run_generic_xdp+0x612/0x1560 [ 104.139158][ T6889] do_xdp_generic+0xae1/0x12f0 [ 104.139180][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.139200][ T6889] ? do_xdp_generic+0x6d9/0x12f0 [ 104.139225][ T6889] ? __pfx_do_xdp_generic+0x10/0x10 [ 104.139260][ T6889] ? tun_get_user+0x1d3f/0x4450 [ 104.139283][ T6889] tun_get_user+0x248b/0x4450 [ 104.139314][ T6889] ? aa_file_perm+0x18b/0x15f0 [ 104.139333][ T6889] ? aa_file_perm+0x4ed/0x15f0 [ 104.139350][ T6889] ? __pfx_tun_get_user+0x10/0x10 [ 104.139374][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.139400][ T6889] ? ref_tracker_alloc+0x341/0x4b0 [ 104.139429][ T6889] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 104.139455][ T6889] ? lock_acquire+0x115/0x350 [ 104.139472][ T6889] ? tun_get+0x1c/0x2f0 [ 104.139496][ T6889] ? tun_get+0x1c/0x2f0 [ 104.139527][ T6889] ? tun_get+0x1c/0x2f0 [ 104.139552][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.139577][ T6889] vfs_write+0x612/0xba0 [ 104.139597][ T6889] ? __pfx_vfs_write+0x10/0x10 [ 104.139618][ T6889] ? __fget_files+0x2a/0x420 [ 104.139638][ T6889] ksys_write+0x150/0x270 [ 104.139656][ T6889] ? __pfx_ksys_write+0x10/0x10 [ 104.139677][ T6889] do_syscall_64+0x166/0x520 [ 104.139695][ T6889] ? trace_irq_disable+0x3b/0x140 [ 104.139713][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.139732][ T6889] ? clear_bhb_loop+0x70/0xc0 [ 104.139753][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.139772][ T6889] RIP: 0033:0x7fc64615ed8e [ 104.139787][ T6889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.139800][ T6889] RSP: 002b:00007fc64704bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.139818][ T6889] RAX: ffffffffffffffda RBX: 00007fc64704c6c0 RCX: 00007fc64615ed8e [ 104.139831][ T6889] RDX: 000000000000fdef RSI: 0000200000000ac0 RDI: 00000000000000c8 [ 104.139842][ T6889] RBP: 00007fc646235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 104.139853][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.139863][ T6889] R13: 00007fc646426038 R14: 00007fc646425fa0 R15: 00007ffc8b922af8 [ 104.139885][ T6889] [ 104.139893][ T6889] BUG: Bad page state in process syz.1.320 pfn:58a06 [ 104.139904][ T6889] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058a06000 pfn:0x58a06 [ 104.139921][ T6889] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.139943][ T6889] raw: 00fff00000000000 dead000000000040 ffff88801c167000 0000000000000000 [ 104.139959][ T6889] raw: ffff888058a06000 0000000000000001 00000000ffffffff 0000000000000000 [ 104.139969][ T6889] page dumped because: page_pool leak [ 104.139976][ T6889] page_owner tracks the page as allocated [ 104.139983][ T6889] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6889, tgid 6888 (syz.1.320), ts 104132981844 [ 104.140007][ T6889] post_alloc_hook+0x1f9/0x250 [ 104.140025][ T6889] get_page_from_freelist+0x2209/0x2280 [ 104.140046][ T6889] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 104.140067][ T6889] __alloc_pages_noprof+0x10/0x100 [ 104.140087][ T6889] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 104.140106][ T6889] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 104.140132][ T6889] skb_pp_cow_data+0xc08/0x18e0 [ 104.140147][ T6889] do_xdp_generic+0x78f/0x12f0 [ 104.140167][ T6889] tun_get_user+0x248b/0x4450 [ 104.140188][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.140208][ T6889] vfs_write+0x612/0xba0 [ 104.140223][ T6889] ksys_write+0x150/0x270 [ 104.140236][ T6889] do_syscall_64+0x166/0x520 [ 104.140254][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.140270][ T6889] page last free pid 24 tgid 24 ts 103974172263 stack trace: [ 104.140282][ T6889] __free_frozen_pages+0xc93/0xd90 [ 104.140300][ T6889] tlb_remove_table_rcu+0x85/0x100 [ 104.140318][ T6889] rcu_core+0x926/0x1260 [ 104.140337][ T6889] handle_softirqs+0x226/0x860 [ 104.140358][ T6889] run_ksoftirqd+0x36/0x60 [ 104.140382][ T6889] smpboot_thread_fn+0x565/0xa70 [ 104.140406][ T6889] kthread+0x38b/0x480 [ 104.140421][ T6889] ret_from_fork+0x514/0xb70 [ 104.140436][ T6889] ret_from_fork_asm+0x1a/0x30 [ 104.140462][ T6889] Modules linked in: [ 104.140478][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.1.320 Tainted: G B syzkaller #0 PREEMPT(full) [ 104.140502][ T6889] Tainted: [B]=BAD_PAGE [ 104.140509][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.140526][ T6889] Call Trace: [ 104.140533][ T6889] [ 104.140540][ T6889] dump_stack_lvl+0xe8/0x150 [ 104.140566][ T6889] bad_page+0x17f/0x1c0 [ 104.140592][ T6889] __free_frozen_pages+0xd37/0xd90 [ 104.140617][ T6889] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 104.140649][ T6889] bpf_xdp_adjust_tail+0x1ce/0x210 [ 104.140670][ T6889] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 104.140686][ T6889] bpf_prog_run_generic_xdp+0x612/0x1560 [ 104.140721][ T6889] do_xdp_generic+0xae1/0x12f0 [ 104.140743][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.140762][ T6889] ? do_xdp_generic+0x6d9/0x12f0 [ 104.140788][ T6889] ? __pfx_do_xdp_generic+0x10/0x10 [ 104.140822][ T6889] ? tun_get_user+0x1d3f/0x4450 [ 104.140845][ T6889] tun_get_user+0x248b/0x4450 [ 104.140874][ T6889] ? aa_file_perm+0x18b/0x15f0 [ 104.140893][ T6889] ? aa_file_perm+0x4ed/0x15f0 [ 104.140909][ T6889] ? __pfx_tun_get_user+0x10/0x10 [ 104.140934][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.140959][ T6889] ? ref_tracker_alloc+0x341/0x4b0 [ 104.140986][ T6889] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 104.141014][ T6889] ? lock_acquire+0x115/0x350 [ 104.141032][ T6889] ? tun_get+0x1c/0x2f0 [ 104.141057][ T6889] ? tun_get+0x1c/0x2f0 [ 104.141079][ T6889] ? tun_get+0x1c/0x2f0 [ 104.141103][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.141131][ T6889] vfs_write+0x612/0xba0 [ 104.141153][ T6889] ? __pfx_vfs_write+0x10/0x10 [ 104.141175][ T6889] ? __fget_files+0x2a/0x420 [ 104.141195][ T6889] ksys_write+0x150/0x270 [ 104.141214][ T6889] ? __pfx_ksys_write+0x10/0x10 [ 104.141238][ T6889] do_syscall_64+0x166/0x520 [ 104.141259][ T6889] ? trace_irq_disable+0x3b/0x140 [ 104.141276][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.141294][ T6889] ? clear_bhb_loop+0x70/0xc0 [ 104.141314][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.141330][ T6889] RIP: 0033:0x7fc64615ed8e [ 104.141342][ T6889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.141357][ T6889] RSP: 002b:00007fc64704bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.141373][ T6889] RAX: ffffffffffffffda RBX: 00007fc64704c6c0 RCX: 00007fc64615ed8e [ 104.141387][ T6889] RDX: 000000000000fdef RSI: 0000200000000ac0 RDI: 00000000000000c8 [ 104.141398][ T6889] RBP: 00007fc646235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 104.141409][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.141419][ T6889] R13: 00007fc646426038 R14: 00007fc646425fa0 R15: 00007ffc8b922af8 [ 104.141441][ T6889] [ 104.141483][ T6889] BUG: Bad page state in process syz.1.320 pfn:599cc [ 104.141494][ T6889] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880599cc000 pfn:0x599cc [ 104.141512][ T6889] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.141541][ T6889] raw: 00fff00000000000 dead000000000040 ffff88801c167000 0000000000000000 [ 104.141556][ T6889] raw: ffff8880599cc000 0000000000000001 00000000ffffffff 0000000000000000 [ 104.141565][ T6889] page dumped because: page_pool leak [ 104.141573][ T6889] page_owner tracks the page as allocated [ 104.141579][ T6889] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6889, tgid 6888 (syz.1.320), ts 104132963634 [ 104.141604][ T6889] post_alloc_hook+0x1f9/0x250 [ 104.141621][ T6889] get_page_from_freelist+0x2209/0x2280 [ 104.141641][ T6889] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 104.141661][ T6889] __alloc_pages_noprof+0x10/0x100 [ 104.141678][ T6889] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 104.141694][ T6889] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 104.141717][ T6889] skb_pp_cow_data+0xc08/0x18e0 [ 104.141731][ T6889] do_xdp_generic+0x78f/0x12f0 [ 104.141750][ T6889] tun_get_user+0x248b/0x4450 [ 104.141770][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.141790][ T6889] vfs_write+0x612/0xba0 [ 104.141804][ T6889] ksys_write+0x150/0x270 [ 104.141817][ T6889] do_syscall_64+0x166/0x520 [ 104.141831][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.141845][ T6889] page last free pid 24 tgid 24 ts 103974195471 stack trace: [ 104.141856][ T6889] __free_frozen_pages+0xc93/0xd90 [ 104.141872][ T6889] tlb_remove_table_rcu+0x85/0x100 [ 104.141890][ T6889] rcu_core+0x926/0x1260 [ 104.141907][ T6889] handle_softirqs+0x226/0x860 [ 104.141926][ T6889] run_ksoftirqd+0x36/0x60 [ 104.141946][ T6889] smpboot_thread_fn+0x565/0xa70 [ 104.141967][ T6889] kthread+0x38b/0x480 [ 104.141982][ T6889] ret_from_fork+0x514/0xb70 [ 104.141996][ T6889] ret_from_fork_asm+0x1a/0x30 [ 104.142009][ T6889] Modules linked in: [ 104.142036][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.1.320 Tainted: G B syzkaller #0 PREEMPT(full) [ 104.142059][ T6889] Tainted: [B]=BAD_PAGE [ 104.142065][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.142075][ T6889] Call Trace: [ 104.142080][ T6889] [ 104.142087][ T6889] dump_stack_lvl+0xe8/0x150 [ 104.142109][ T6889] bad_page+0x17f/0x1c0 [ 104.142134][ T6889] __free_frozen_pages+0xd37/0xd90 [ 104.142160][ T6889] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 104.142208][ T6889] bpf_xdp_adjust_tail+0x1ce/0x210 [ 104.142226][ T6889] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 104.142242][ T6889] bpf_prog_run_generic_xdp+0x612/0x1560 [ 104.142276][ T6889] do_xdp_generic+0xae1/0x12f0 [ 104.142297][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.142316][ T6889] ? do_xdp_generic+0x6d9/0x12f0 [ 104.142339][ T6889] ? __pfx_do_xdp_generic+0x10/0x10 [ 104.142384][ T6889] ? tun_get_user+0x1d3f/0x4450 [ 104.142406][ T6889] tun_get_user+0x248b/0x4450 [ 104.142437][ T6889] ? aa_file_perm+0x18b/0x15f0 [ 104.142456][ T6889] ? aa_file_perm+0x4ed/0x15f0 [ 104.142472][ T6889] ? __pfx_tun_get_user+0x10/0x10 [ 104.142496][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.142532][ T6889] ? ref_tracker_alloc+0x341/0x4b0 [ 104.142559][ T6889] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 104.142586][ T6889] ? lock_acquire+0x115/0x350 [ 104.142605][ T6889] ? tun_get+0x1c/0x2f0 [ 104.142631][ T6889] ? tun_get+0x1c/0x2f0 [ 104.142653][ T6889] ? tun_get+0x1c/0x2f0 [ 104.142678][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.142703][ T6889] vfs_write+0x612/0xba0 [ 104.142724][ T6889] ? __pfx_vfs_write+0x10/0x10 [ 104.142747][ T6889] ? __fget_files+0x2a/0x420 [ 104.142767][ T6889] ksys_write+0x150/0x270 [ 104.142786][ T6889] ? __pfx_ksys_write+0x10/0x10 [ 104.142809][ T6889] do_syscall_64+0x166/0x520 [ 104.142829][ T6889] ? trace_irq_disable+0x3b/0x140 [ 104.142849][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.142891][ T6889] ? clear_bhb_loop+0x70/0xc0 [ 104.142909][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.142964][ T6889] RIP: 0033:0x7fc64615ed8e [ 104.142979][ T6889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.142994][ T6889] RSP: 002b:00007fc64704bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.143014][ T6889] RAX: ffffffffffffffda RBX: 00007fc64704c6c0 RCX: 00007fc64615ed8e [ 104.143029][ T6889] RDX: 000000000000fdef RSI: 0000200000000ac0 RDI: 00000000000000c8 [ 104.143040][ T6889] RBP: 00007fc646235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 104.143064][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.143075][ T6889] R13: 00007fc646426038 R14: 00007fc646425fa0 R15: 00007ffc8b922af8 [ 104.143095][ T6889] [ 104.143170][ T6889] BUG: Bad page state in process syz.1.320 pfn:584fe [ 104.143182][ T6889] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x584fe [ 104.143196][ T6889] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.143216][ T6889] raw: 00fff00000000000 dead000000000040 ffff88801c167000 0000000000000000 [ 104.143231][ T6889] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 104.143240][ T6889] page dumped because: page_pool leak [ 104.143247][ T6889] page_owner tracks the page as allocated [ 104.143253][ T6889] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6889, tgid 6888 (syz.1.320), ts 104132945436 [ 104.143276][ T6889] post_alloc_hook+0x1f9/0x250 [ 104.143293][ T6889] get_page_from_freelist+0x2209/0x2280 [ 104.143314][ T6889] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 104.143333][ T6889] __alloc_pages_noprof+0x10/0x100 [ 104.143350][ T6889] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 104.143365][ T6889] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 104.143384][ T6889] skb_pp_cow_data+0xc08/0x18e0 [ 104.143399][ T6889] do_xdp_generic+0x78f/0x12f0 [ 104.143417][ T6889] tun_get_user+0x248b/0x4450 [ 104.143438][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.143459][ T6889] vfs_write+0x612/0xba0 [ 104.143473][ T6889] ksys_write+0x150/0x270 [ 104.143488][ T6889] do_syscall_64+0x166/0x520 [ 104.143505][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.143528][ T6889] page last free pid 24 tgid 24 ts 103974216418 stack trace: [ 104.143540][ T6889] __free_frozen_pages+0xc93/0xd90 [ 104.143558][ T6889] tlb_remove_table_rcu+0x85/0x100 [ 104.143578][ T6889] rcu_core+0x926/0x1260 [ 104.143597][ T6889] handle_softirqs+0x226/0x860 [ 104.143618][ T6889] run_ksoftirqd+0x36/0x60 [ 104.143641][ T6889] smpboot_thread_fn+0x565/0xa70 [ 104.143664][ T6889] kthread+0x38b/0x480 [ 104.143679][ T6889] ret_from_fork+0x514/0xb70 [ 104.143693][ T6889] ret_from_fork_asm+0x1a/0x30 [ 104.143707][ T6889] Modules linked in: [ 104.143721][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.1.320 Tainted: G B syzkaller #0 PREEMPT(full) [ 104.143743][ T6889] Tainted: [B]=BAD_PAGE [ 104.143749][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.143760][ T6889] Call Trace: [ 104.143766][ T6889] [ 104.143772][ T6889] dump_stack_lvl+0xe8/0x150 [ 104.143796][ T6889] bad_page+0x17f/0x1c0 [ 104.143821][ T6889] __free_frozen_pages+0xd37/0xd90 [ 104.143844][ T6889] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 104.143875][ T6889] bpf_xdp_adjust_tail+0x1ce/0x210 [ 104.143895][ T6889] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 104.143910][ T6889] bpf_prog_run_generic_xdp+0x612/0x1560 [ 104.143942][ T6889] do_xdp_generic+0xae1/0x12f0 [ 104.143964][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.143981][ T6889] ? do_xdp_generic+0x6d9/0x12f0 [ 104.144005][ T6889] ? __pfx_do_xdp_generic+0x10/0x10 [ 104.144038][ T6889] ? tun_get_user+0x1d3f/0x4450 [ 104.144060][ T6889] tun_get_user+0x248b/0x4450 [ 104.144091][ T6889] ? aa_file_perm+0x18b/0x15f0 [ 104.144110][ T6889] ? aa_file_perm+0x4ed/0x15f0 [ 104.144126][ T6889] ? __pfx_tun_get_user+0x10/0x10 [ 104.144149][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.144173][ T6889] ? ref_tracker_alloc+0x341/0x4b0 [ 104.144198][ T6889] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 104.144224][ T6889] ? lock_acquire+0x115/0x350 [ 104.144242][ T6889] ? tun_get+0x1c/0x2f0 [ 104.144265][ T6889] ? tun_get+0x1c/0x2f0 [ 104.144287][ T6889] ? tun_get+0x1c/0x2f0 [ 104.144310][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.144334][ T6889] vfs_write+0x612/0xba0 [ 104.144354][ T6889] ? __pfx_vfs_write+0x10/0x10 [ 104.144375][ T6889] ? __fget_files+0x2a/0x420 [ 104.144394][ T6889] ksys_write+0x150/0x270 [ 104.144412][ T6889] ? __pfx_ksys_write+0x10/0x10 [ 104.144434][ T6889] do_syscall_64+0x166/0x520 [ 104.144454][ T6889] ? trace_irq_disable+0x3b/0x140 [ 104.144471][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.144489][ T6889] ? clear_bhb_loop+0x70/0xc0 [ 104.144508][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.144531][ T6889] RIP: 0033:0x7fc64615ed8e [ 104.144545][ T6889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.144567][ T6889] RSP: 002b:00007fc64704bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.144583][ T6889] RAX: ffffffffffffffda RBX: 00007fc64704c6c0 RCX: 00007fc64615ed8e [ 104.144596][ T6889] RDX: 000000000000fdef RSI: 0000200000000ac0 RDI: 00000000000000c8 [ 104.144607][ T6889] RBP: 00007fc646235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 104.144618][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.144628][ T6889] R13: 00007fc646426038 R14: 00007fc646425fa0 R15: 00007ffc8b922af8 [ 104.144649][ T6889] [ 104.144657][ T6889] BUG: Bad page state in process syz.1.320 pfn:75aa1 [ 104.144667][ T6889] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888075aa1640 pfn:0x75aa1 [ 104.144682][ T6889] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.144703][ T6889] raw: 00fff00000000000 dead000000000040 ffff88801c167000 0000000000000000 [ 104.144718][ T6889] raw: ffff888075aa1640 0000000000000001 00000000ffffffff 0000000000000000 [ 104.144727][ T6889] page dumped because: page_pool leak [ 104.144734][ T6889] page_owner tracks the page as allocated [ 104.144740][ T6889] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6889, tgid 6888 (syz.1.320), ts 104132925804 [ 104.144769][ T6889] post_alloc_hook+0x1f9/0x250 [ 104.144785][ T6889] get_page_from_freelist+0x2209/0x2280 [ 104.144804][ T6889] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 104.144824][ T6889] __alloc_pages_noprof+0x10/0x100 [ 104.144842][ T6889] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 104.144860][ T6889] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 104.144883][ T6889] skb_pp_cow_data+0xc08/0x18e0 [ 104.144897][ T6889] do_xdp_generic+0x78f/0x12f0 [ 104.144916][ T6889] tun_get_user+0x248b/0x4450 [ 104.144936][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.144956][ T6889] vfs_write+0x612/0xba0 [ 104.144970][ T6889] ksys_write+0x150/0x270 [ 104.144985][ T6889] do_syscall_64+0x166/0x520 [ 104.145002][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.145018][ T6889] page last free pid 24 tgid 24 ts 103974229430 stack trace: [ 104.145028][ T6889] __free_frozen_pages+0xc93/0xd90 [ 104.145044][ T6889] tlb_remove_table_rcu+0x85/0x100 [ 104.145062][ T6889] rcu_core+0x926/0x1260 [ 104.145079][ T6889] handle_softirqs+0x226/0x860 [ 104.145099][ T6889] run_ksoftirqd+0x36/0x60 [ 104.145122][ T6889] smpboot_thread_fn+0x565/0xa70 [ 104.145145][ T6889] kthread+0x38b/0x480 [ 104.145159][ T6889] ret_from_fork+0x514/0xb70 [ 104.145172][ T6889] ret_from_fork_asm+0x1a/0x30 [ 104.145186][ T6889] Modules linked in: [ 104.145199][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.1.320 Tainted: G B syzkaller #0 PREEMPT(full) [ 104.145221][ T6889] Tainted: [B]=BAD_PAGE [ 104.145226][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.145235][ T6889] Call Trace: [ 104.145241][ T6889] [ 104.145247][ T6889] dump_stack_lvl+0xe8/0x150 [ 104.145271][ T6889] bad_page+0x17f/0x1c0 [ 104.145295][ T6889] __free_frozen_pages+0xd37/0xd90 [ 104.145317][ T6889] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 104.145347][ T6889] bpf_xdp_adjust_tail+0x1ce/0x210 [ 104.145367][ T6889] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 104.145382][ T6889] bpf_prog_run_generic_xdp+0x612/0x1560 [ 104.145413][ T6889] do_xdp_generic+0xae1/0x12f0 [ 104.145434][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.145452][ T6889] ? do_xdp_generic+0x6d9/0x12f0 [ 104.145476][ T6889] ? __pfx_do_xdp_generic+0x10/0x10 [ 104.145509][ T6889] ? tun_get_user+0x1d3f/0x4450 [ 104.145538][ T6889] tun_get_user+0x248b/0x4450 [ 104.145567][ T6889] ? aa_file_perm+0x18b/0x15f0 [ 104.145585][ T6889] ? aa_file_perm+0x4ed/0x15f0 [ 104.145600][ T6889] ? __pfx_tun_get_user+0x10/0x10 [ 104.145624][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.145648][ T6889] ? ref_tracker_alloc+0x341/0x4b0 [ 104.145674][ T6889] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 104.145700][ T6889] ? lock_acquire+0x115/0x350 [ 104.145717][ T6889] ? tun_get+0x1c/0x2f0 [ 104.145741][ T6889] ? tun_get+0x1c/0x2f0 [ 104.145763][ T6889] ? tun_get+0x1c/0x2f0 [ 104.145787][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.145809][ T6889] vfs_write+0x612/0xba0 [ 104.145830][ T6889] ? __pfx_vfs_write+0x10/0x10 [ 104.145851][ T6889] ? __fget_files+0x2a/0x420 [ 104.145870][ T6889] ksys_write+0x150/0x270 [ 104.145888][ T6889] ? __pfx_ksys_write+0x10/0x10 [ 104.145910][ T6889] do_syscall_64+0x166/0x520 [ 104.145928][ T6889] ? trace_irq_disable+0x3b/0x140 [ 104.145947][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.145964][ T6889] ? clear_bhb_loop+0x70/0xc0 [ 104.145983][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.146000][ T6889] RIP: 0033:0x7fc64615ed8e [ 104.146013][ T6889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.146025][ T6889] RSP: 002b:00007fc64704bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.146040][ T6889] RAX: ffffffffffffffda RBX: 00007fc64704c6c0 RCX: 00007fc64615ed8e [ 104.146053][ T6889] RDX: 000000000000fdef RSI: 0000200000000ac0 RDI: 00000000000000c8 [ 104.146064][ T6889] RBP: 00007fc646235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 104.146075][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.146085][ T6889] R13: 00007fc646426038 R14: 00007fc646425fa0 R15: 00007ffc8b922af8 [ 104.146105][ T6889] [ 104.146112][ T6889] BUG: Bad page state in process syz.1.320 pfn:2f0a1 [ 104.146122][ T6889] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x2f0a1 [ 104.146138][ T6889] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.146157][ T6889] raw: 00fff00000000000 dead000000000040 ffff88801c167000 0000000000000000 [ 104.146172][ T6889] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 104.146181][ T6889] page dumped because: page_pool leak [ 104.146187][ T6889] page_owner tracks the page as allocated [ 104.146193][ T6889] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6889, tgid 6888 (syz.1.320), ts 104132905000 [ 104.146215][ T6889] post_alloc_hook+0x1f9/0x250 [ 104.146230][ T6889] get_page_from_freelist+0x2209/0x2280 [ 104.146250][ T6889] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 104.146269][ T6889] __alloc_pages_noprof+0x10/0x100 [ 104.146287][ T6889] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 104.146306][ T6889] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 104.146329][ T6889] skb_pp_cow_data+0xc08/0x18e0 [ 104.146343][ T6889] do_xdp_generic+0x78f/0x12f0 [ 104.146361][ T6889] tun_get_user+0x248b/0x4450 [ 104.146382][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.146402][ T6889] vfs_write+0x612/0xba0 [ 104.146416][ T6889] ksys_write+0x150/0x270 [ 104.146430][ T6889] do_syscall_64+0x166/0x520 [ 104.146447][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.146463][ T6889] page last free pid 24 tgid 24 ts 103974258289 stack trace: [ 104.146474][ T6889] __free_frozen_pages+0xc93/0xd90 [ 104.146490][ T6889] tlb_remove_table_rcu+0x85/0x100 [ 104.146508][ T6889] rcu_core+0x926/0x1260 [ 104.146532][ T6889] handle_softirqs+0x226/0x860 [ 104.146552][ T6889] run_ksoftirqd+0x36/0x60 [ 104.146574][ T6889] smpboot_thread_fn+0x565/0xa70 [ 104.146597][ T6889] kthread+0x38b/0x480 [ 104.146611][ T6889] ret_from_fork+0x514/0xb70 [ 104.146625][ T6889] ret_from_fork_asm+0x1a/0x30 [ 104.146638][ T6889] Modules linked in: [ 104.146650][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.1.320 Tainted: G B syzkaller #0 PREEMPT(full) [ 104.146672][ T6889] Tainted: [B]=BAD_PAGE [ 104.146678][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.146687][ T6889] Call Trace: [ 104.146692][ T6889] [ 104.146699][ T6889] dump_stack_lvl+0xe8/0x150 [ 104.146723][ T6889] bad_page+0x17f/0x1c0 [ 104.146746][ T6889] __free_frozen_pages+0xd37/0xd90 [ 104.146768][ T6889] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 104.146799][ T6889] bpf_xdp_adjust_tail+0x1ce/0x210 [ 104.146819][ T6889] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 104.146832][ T6889] bpf_prog_run_generic_xdp+0x612/0x1560 [ 104.146859][ T6889] do_xdp_generic+0xae1/0x12f0 [ 104.146878][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.146896][ T6889] ? do_xdp_generic+0x6d9/0x12f0 [ 104.146920][ T6889] ? __pfx_do_xdp_generic+0x10/0x10 [ 104.146954][ T6889] ? tun_get_user+0x1d3f/0x4450 [ 104.146976][ T6889] tun_get_user+0x248b/0x4450 [ 104.147004][ T6889] ? aa_file_perm+0x18b/0x15f0 [ 104.147022][ T6889] ? aa_file_perm+0x4ed/0x15f0 [ 104.147038][ T6889] ? __pfx_tun_get_user+0x10/0x10 [ 104.147061][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.147085][ T6889] ? ref_tracker_alloc+0x341/0x4b0 [ 104.147110][ T6889] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 104.147136][ T6889] ? lock_acquire+0x115/0x350 [ 104.147154][ T6889] ? tun_get+0x1c/0x2f0 [ 104.147178][ T6889] ? tun_get+0x1c/0x2f0 [ 104.147198][ T6889] ? tun_get+0x1c/0x2f0 [ 104.147221][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.147245][ T6889] vfs_write+0x612/0xba0 [ 104.147266][ T6889] ? __pfx_vfs_write+0x10/0x10 [ 104.147287][ T6889] ? __fget_files+0x2a/0x420 [ 104.147305][ T6889] ksys_write+0x150/0x270 [ 104.147323][ T6889] ? __pfx_ksys_write+0x10/0x10 [ 104.147346][ T6889] do_syscall_64+0x166/0x520 [ 104.147365][ T6889] ? trace_irq_disable+0x3b/0x140 [ 104.147383][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.147400][ T6889] ? clear_bhb_loop+0x70/0xc0 [ 104.147419][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.147436][ T6889] RIP: 0033:0x7fc64615ed8e [ 104.147449][ T6889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.147462][ T6889] RSP: 002b:00007fc64704bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.147479][ T6889] RAX: ffffffffffffffda RBX: 00007fc64704c6c0 RCX: 00007fc64615ed8e [ 104.147491][ T6889] RDX: 000000000000fdef RSI: 0000200000000ac0 RDI: 00000000000000c8 [ 104.147502][ T6889] RBP: 00007fc646235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 104.147512][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.147528][ T6889] R13: 00007fc646426038 R14: 00007fc646425fa0 R15: 00007ffc8b922af8 [ 104.147548][ T6889] [ 104.147555][ T6889] BUG: Bad page state in process syz.1.320 pfn:75963 [ 104.147565][ T6889] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x75963 [ 104.147582][ T6889] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.147600][ T6889] raw: 00fff00000000000 dead000000000040 ffff88801c167000 0000000000000000 [ 104.147615][ T6889] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 104.147624][ T6889] page dumped because: page_pool leak [ 104.147631][ T6889] page_owner tracks the page as allocated [ 104.147636][ T6889] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6889, tgid 6888 (syz.1.320), ts 104132148270 [ 104.147659][ T6889] post_alloc_hook+0x1f9/0x250 [ 104.147695][ T6889] get_page_from_freelist+0x2209/0x2280 [ 104.147716][ T6889] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 104.147735][ T6889] __alloc_pages_noprof+0x10/0x100 [ 104.147754][ T6889] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 104.147772][ T6889] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 104.147795][ T6889] skb_pp_cow_data+0xc08/0x18e0 [ 104.147809][ T6889] do_xdp_generic+0x78f/0x12f0 [ 104.147828][ T6889] tun_get_user+0x248b/0x4450 [ 104.147848][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.147868][ T6889] vfs_write+0x612/0xba0 [ 104.147882][ T6889] ksys_write+0x150/0x270 [ 104.147897][ T6889] do_syscall_64+0x166/0x520 [ 104.147914][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.147929][ T6889] page last free pid 24 tgid 24 ts 103974280445 stack trace: [ 104.147940][ T6889] __free_frozen_pages+0xc93/0xd90 [ 104.147956][ T6889] tlb_remove_table_rcu+0x85/0x100 [ 104.147974][ T6889] rcu_core+0x926/0x1260 [ 104.147992][ T6889] handle_softirqs+0x226/0x860 [ 104.148012][ T6889] run_ksoftirqd+0x36/0x60 [ 104.148033][ T6889] smpboot_thread_fn+0x565/0xa70 [ 104.148056][ T6889] kthread+0x38b/0x480 [ 104.148070][ T6889] ret_from_fork+0x514/0xb70 [ 104.148084][ T6889] ret_from_fork_asm+0x1a/0x30 [ 104.148098][ T6889] Modules linked in: [ 104.148110][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.1.320 Tainted: G B syzkaller #0 PREEMPT(full) [ 104.148132][ T6889] Tainted: [B]=BAD_PAGE [ 104.148138][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.148147][ T6889] Call Trace: [ 104.148152][ T6889] [ 104.148159][ T6889] dump_stack_lvl+0xe8/0x150 [ 104.148182][ T6889] bad_page+0x17f/0x1c0 [ 104.148206][ T6889] __free_frozen_pages+0xd37/0xd90 [ 104.148228][ T6889] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 104.148259][ T6889] bpf_xdp_adjust_tail+0x1ce/0x210 [ 104.148278][ T6889] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 104.148293][ T6889] bpf_prog_run_generic_xdp+0x612/0x1560 [ 104.148325][ T6889] do_xdp_generic+0xae1/0x12f0 [ 104.148345][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.148363][ T6889] ? do_xdp_generic+0x6d9/0x12f0 [ 104.148387][ T6889] ? __pfx_do_xdp_generic+0x10/0x10 [ 104.148421][ T6889] ? tun_get_user+0x1d3f/0x4450 [ 104.148443][ T6889] tun_get_user+0x248b/0x4450 [ 104.148471][ T6889] ? aa_file_perm+0x18b/0x15f0 [ 104.148489][ T6889] ? aa_file_perm+0x4ed/0x15f0 [ 104.148505][ T6889] ? __pfx_tun_get_user+0x10/0x10 [ 104.148534][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.148559][ T6889] ? ref_tracker_alloc+0x341/0x4b0 [ 104.148585][ T6889] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 104.148610][ T6889] ? lock_acquire+0x115/0x350 [ 104.148628][ T6889] ? tun_get+0x1c/0x2f0 [ 104.148651][ T6889] ? tun_get+0x1c/0x2f0 [ 104.148672][ T6889] ? tun_get+0x1c/0x2f0 [ 104.148696][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.148719][ T6889] vfs_write+0x612/0xba0 [ 104.148740][ T6889] ? __pfx_vfs_write+0x10/0x10 [ 104.148761][ T6889] ? __fget_files+0x2a/0x420 [ 104.148780][ T6889] ksys_write+0x150/0x270 [ 104.148797][ T6889] ? __pfx_ksys_write+0x10/0x10 [ 104.148820][ T6889] do_syscall_64+0x166/0x520 [ 104.148838][ T6889] ? trace_irq_disable+0x3b/0x140 [ 104.148856][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.148873][ T6889] ? clear_bhb_loop+0x70/0xc0 [ 104.148892][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.148909][ T6889] RIP: 0033:0x7fc64615ed8e [ 104.148922][ T6889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.148935][ T6889] RSP: 002b:00007fc64704bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.148950][ T6889] RAX: ffffffffffffffda RBX: 00007fc64704c6c0 RCX: 00007fc64615ed8e [ 104.148963][ T6889] RDX: 000000000000fdef RSI: 0000200000000ac0 RDI: 00000000000000c8 [ 104.148974][ T6889] RBP: 00007fc646235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 104.148984][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.148994][ T6889] R13: 00007fc646426038 R14: 00007fc646425fa0 R15: 00007ffc8b922af8 [ 104.149011][ T6889] [ 104.149017][ T6889] BUG: Bad page state in process syz.1.320 pfn:783ed [ 104.149026][ T6889] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880783ed280 pfn:0x783ed [ 104.149041][ T6889] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.149061][ T6889] raw: 00fff00000000000 dead000000000040 ffff88801c167000 0000000000000000 [ 104.149075][ T6889] raw: ffff8880783ed280 0000000000000001 00000000ffffffff 0000000000000000 [ 104.149083][ T6889] page dumped because: page_pool leak [ 104.149091][ T6889] page_owner tracks the page as allocated [ 104.149096][ T6889] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6889, tgid 6888 (syz.1.320), ts 104132133333 [ 104.149118][ T6889] post_alloc_hook+0x1f9/0x250 [ 104.149134][ T6889] get_page_from_freelist+0x2209/0x2280 [ 104.149153][ T6889] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 104.149173][ T6889] __alloc_pages_noprof+0x10/0x100 [ 104.149191][ T6889] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 104.149209][ T6889] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 104.149232][ T6889] skb_pp_cow_data+0xc08/0x18e0 [ 104.149246][ T6889] do_xdp_generic+0x78f/0x12f0 [ 104.149265][ T6889] tun_get_user+0x248b/0x4450 [ 104.149285][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.149305][ T6889] vfs_write+0x612/0xba0 [ 104.149319][ T6889] ksys_write+0x150/0x270 [ 104.149333][ T6889] do_syscall_64+0x166/0x520 [ 104.149351][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.149367][ T6889] page last free pid 24 tgid 24 ts 103974293720 stack trace: [ 104.149377][ T6889] __free_frozen_pages+0xc93/0xd90 [ 104.149393][ T6889] tlb_remove_table_rcu+0x85/0x100 [ 104.149411][ T6889] rcu_core+0x926/0x1260 [ 104.149428][ T6889] handle_softirqs+0x226/0x860 [ 104.149448][ T6889] run_ksoftirqd+0x36/0x60 [ 104.149471][ T6889] smpboot_thread_fn+0x565/0xa70 [ 104.149493][ T6889] kthread+0x38b/0x480 [ 104.149507][ T6889] ret_from_fork+0x514/0xb70 [ 104.149527][ T6889] ret_from_fork_asm+0x1a/0x30 [ 104.149541][ T6889] Modules linked in: [ 104.149553][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.1.320 Tainted: G B syzkaller #0 PREEMPT(full) [ 104.149575][ T6889] Tainted: [B]=BAD_PAGE [ 104.149581][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.149590][ T6889] Call Trace: [ 104.149595][ T6889] [ 104.149601][ T6889] dump_stack_lvl+0xe8/0x150 [ 104.149625][ T6889] bad_page+0x17f/0x1c0 [ 104.149649][ T6889] __free_frozen_pages+0xd37/0xd90 [ 104.149670][ T6889] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 104.149702][ T6889] bpf_xdp_adjust_tail+0x1ce/0x210 [ 104.149720][ T6889] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 104.149735][ T6889] bpf_prog_run_generic_xdp+0x612/0x1560 [ 104.149767][ T6889] do_xdp_generic+0xae1/0x12f0 [ 104.149788][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.149805][ T6889] ? do_xdp_generic+0x6d9/0x12f0 [ 104.149829][ T6889] ? __pfx_do_xdp_generic+0x10/0x10 [ 104.149862][ T6889] ? tun_get_user+0x1d3f/0x4450 [ 104.149885][ T6889] tun_get_user+0x248b/0x4450 [ 104.149914][ T6889] ? aa_file_perm+0x18b/0x15f0 [ 104.149930][ T6889] ? aa_file_perm+0x4ed/0x15f0 [ 104.149944][ T6889] ? __pfx_tun_get_user+0x10/0x10 [ 104.149962][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.149981][ T6889] ? ref_tracker_alloc+0x341/0x4b0 [ 104.150002][ T6889] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 104.150024][ T6889] ? lock_acquire+0x115/0x350 [ 104.150037][ T6889] ? tun_get+0x1c/0x2f0 [ 104.150057][ T6889] ? tun_get+0x1c/0x2f0 [ 104.150074][ T6889] ? tun_get+0x1c/0x2f0 [ 104.150093][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.150112][ T6889] vfs_write+0x612/0xba0 [ 104.150128][ T6889] ? __pfx_vfs_write+0x10/0x10 [ 104.150146][ T6889] ? __fget_files+0x2a/0x420 [ 104.150161][ T6889] ksys_write+0x150/0x270 [ 104.150179][ T6889] ? __pfx_ksys_write+0x10/0x10 [ 104.150199][ T6889] do_syscall_64+0x166/0x520 [ 104.150218][ T6889] ? trace_irq_disable+0x3b/0x140 [ 104.150235][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.150250][ T6889] ? clear_bhb_loop+0x70/0xc0 [ 104.150268][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.150283][ T6889] RIP: 0033:0x7fc64615ed8e [ 104.150298][ T6889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.150311][ T6889] RSP: 002b:00007fc64704bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.150329][ T6889] RAX: ffffffffffffffda RBX: 00007fc64704c6c0 RCX: 00007fc64615ed8e [ 104.150342][ T6889] RDX: 000000000000fdef RSI: 0000200000000ac0 RDI: 00000000000000c8 [ 104.150353][ T6889] RBP: 00007fc646235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 104.150364][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.150374][ T6889] R13: 00007fc646426038 R14: 00007fc646425fa0 R15: 00007ffc8b922af8 [ 104.150395][ T6889] [ 104.150402][ T6889] BUG: Bad page state in process syz.1.320 pfn:782e0 [ 104.150413][ T6889] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x782e0 [ 104.150428][ T6889] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.150448][ T6889] raw: 00fff00000000000 dead000000000040 ffff88801c167000 0000000000000000 [ 104.150463][ T6889] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 104.150473][ T6889] page dumped because: page_pool leak [ 104.150480][ T6889] page_owner tracks the page as allocated [ 104.150486][ T6889] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6889, tgid 6888 (syz.1.320), ts 104132116973 [ 104.150508][ T6889] post_alloc_hook+0x1f9/0x250 [ 104.150534][ T6889] get_page_from_freelist+0x2209/0x2280 [ 104.150554][ T6889] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 104.150574][ T6889] __alloc_pages_noprof+0x10/0x100 [ 104.150593][ T6889] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 104.150612][ T6889] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 104.150636][ T6889] skb_pp_cow_data+0xc08/0x18e0 [ 104.150651][ T6889] do_xdp_generic+0x78f/0x12f0 [ 104.150670][ T6889] tun_get_user+0x248b/0x4450 [ 104.150691][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.150712][ T6889] vfs_write+0x612/0xba0 [ 104.150726][ T6889] ksys_write+0x150/0x270 [ 104.150741][ T6889] do_syscall_64+0x166/0x520 [ 104.150758][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.150770][ T6889] page last free pid 24 tgid 24 ts 103974319771 stack trace: [ 104.150779][ T6889] __free_frozen_pages+0xc93/0xd90 [ 104.150792][ T6889] tlb_remove_table_rcu+0x85/0x100 [ 104.150808][ T6889] rcu_core+0x926/0x1260 [ 104.150823][ T6889] handle_softirqs+0x226/0x860 [ 104.150842][ T6889] run_ksoftirqd+0x36/0x60 [ 104.150862][ T6889] smpboot_thread_fn+0x565/0xa70 [ 104.150881][ T6889] kthread+0x38b/0x480 [ 104.150894][ T6889] ret_from_fork+0x514/0xb70 [ 104.150907][ T6889] ret_from_fork_asm+0x1a/0x30 [ 104.150921][ T6889] Modules linked in: [ 104.150932][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.1.320 Tainted: G B syzkaller #0 PREEMPT(full) [ 104.150950][ T6889] Tainted: [B]=BAD_PAGE [ 104.150955][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.150963][ T6889] Call Trace: [ 104.150968][ T6889] [ 104.150973][ T6889] dump_stack_lvl+0xe8/0x150 [ 104.150995][ T6889] bad_page+0x17f/0x1c0 [ 104.151017][ T6889] __free_frozen_pages+0xd37/0xd90 [ 104.151037][ T6889] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 104.151065][ T6889] bpf_xdp_adjust_tail+0x1ce/0x210 [ 104.151083][ T6889] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 104.151098][ T6889] bpf_prog_run_generic_xdp+0x612/0x1560 [ 104.151130][ T6889] do_xdp_generic+0xae1/0x12f0 [ 104.151150][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.151166][ T6889] ? do_xdp_generic+0x6d9/0x12f0 [ 104.151188][ T6889] ? __pfx_do_xdp_generic+0x10/0x10 [ 104.151219][ T6889] ? tun_get_user+0x1d3f/0x4450 [ 104.151239][ T6889] tun_get_user+0x248b/0x4450 [ 104.151267][ T6889] ? aa_file_perm+0x18b/0x15f0 [ 104.151283][ T6889] ? aa_file_perm+0x4ed/0x15f0 [ 104.151299][ T6889] ? __pfx_tun_get_user+0x10/0x10 [ 104.151321][ T6889] ? __lock_acquire+0x747/0x2de0 [ 104.151345][ T6889] ? ref_tracker_alloc+0x341/0x4b0 [ 104.151371][ T6889] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 104.151396][ T6889] ? lock_acquire+0x115/0x350 [ 104.151413][ T6889] ? tun_get+0x1c/0x2f0 [ 104.151437][ T6889] ? tun_get+0x1c/0x2f0 [ 104.151457][ T6889] ? tun_get+0x1c/0x2f0 [ 104.151479][ T6889] tun_chr_write_iter+0x113/0x200 [ 104.151503][ T6889] vfs_write+0x612/0xba0 [ 104.151533][ T6889] ? __pfx_vfs_write+0x10/0x10 [ 104.151554][ T6889] ? __fget_files+0x2a/0x420 [ 104.151574][ T6889] ksys_write+0x150/0x270 [ 104.151593][ T6889] ? __pfx_ksys_write+0x10/0x10 [ 104.151616][ T6889] do_syscall_64+0x166/0x520 [ 104.151633][ T6889] ? trace_irq_disable+0x3b/0x140 [ 104.151650][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.151666][ T6889] ? clear_bhb_loop+0x70/0xc0 [ 104.151683][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.151696][ T6889] RIP: 0033:0x7fc64615ed8e [ 104.151709][ T6889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.151721][ T6889] RSP: 002b:00007fc64704bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.151739][ T6889] RAX: ffffffffffffffda RBX: 00007fc64704c6c0 RCX: 00007fc64615ed8e [ 104.151751][ T6889] RDX: 000000000000fdef RSI: 0000200000000ac0 RDI: 00000000000000c8 [ 104.151762][ T6889] RBP: 00007fc646235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 104.151773][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.151783][ T6889] R13: 00007fc646426038 R14: 00007fc646425fa0 R15: 00007ffc8b922af8 [ 104.151804][ T6889] [ 104.289279][ T6901] netlink: 'syz.4.325': attribute type 4 has an invalid length. [ 104.336736][ T6889] netlink: 'syz.1.320': attribute type 10 has an invalid length. [ 104.336757][ T6889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.320'. [ 104.337983][ T6889] dummy0: entered promiscuous mode