last executing test programs: 2.705509077s ago: executing program 0 (id=6927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffd, 0x0, @empty, 0x8}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x5, 0x4) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, 0x0) 2.451015771s ago: executing program 4 (id=6932): r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @remote}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, 0x0, 0x0, 0x4060019}, 0x20000041) 2.046267054s ago: executing program 4 (id=6935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x10, 0x80002, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fc", 0x39}], 0x1}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x24}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0xfffffffffffffe6d}, 0x48) 1.800209462s ago: executing program 2 (id=6939): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e20, 0x81, @remote, 0x72ea}}, 0x0, 0x0, 0x4a, 0x0, "042f769c1583509786a1752ef58eefbbf87661ecaaf2bcc41cad50354af04429c8e421c366e225b6346991e3b85c4f4fea1cd596373d8cb077756e8516b1b8b4c7e698232f9b99fc3a902918d935a942"}, 0xd8) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000065c8fe540000000005000000010000040d0000000500000002000000060000000061002e2e5f6f00"], 0x0, 0x38, 0x0, 0x1, 0x400}, 0x28) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wg0\x00'}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000026c0)={r4, &(0x7f00000025c0)='\xaa\xaa\xaa\xaa\xaa', 0x800, &(0x7f0000002600)={@align=0x1, {0x9, 0x3ff, 0xfffffff5, 0x7}}, 0x5, &(0x7f0000002640)={@_ha_fsid}, &(0x7f0000002680)=0x2000}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xb767}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x10}]}}}]}, 0x4c}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r10 = gettid() r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r9, @ANYBLOB="089805000750050008001300", @ANYRES32=r10, @ANYBLOB="08002c00050000071400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4040010) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002700)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000002800)=0xe8) r14 = getgid() r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r15, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x2c, r16, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r17 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r17, &(0x7f0000000a00)=[{{&(0x7f00000004c0)={0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0xc2}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="a905a6f26e5b74640001000000100500000094dfa033fe5312e4beb85181b07f2654a39f", 0x24}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10, 0x0}}], 0x2, 0xc044) sendmsg$netlink(r2, &(0x7f0000002940)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc, &(0x7f0000002580)=[{&(0x7f0000000300)={0xec, 0x39, 0x200, 0x70bd28, 0x25dfdbfc, "", [@nested={0xda, 0x51, 0x0, 0x1, [@nested={0x4, 0x9a}, @generic="fb152269218ea1569c54cf3ab801db65f034494670aaef6a8f2dab301d8315c1ff03f9d9251a736f0708d25c8ca7a1acd4b17e274b8da34e2019276c42d7e6c5a0b51e1de6d5f21060e265f07b3b9592fb13dfb84378547b0865741b7fc6358ea76ddc8bec5344548fd50471a910520c2df6636c984a4211611a561b0c2682180cf58e0700545b03f0be467dffe5e331716c66198e1274976040f628b5be74290591deb69f7f606e07f0e58aca611f15b82d6a321d5d87307774ee86d53945200fc122841459517e648752d88e9f", @nested={0x4, 0x127}]}]}, 0xec}, {&(0x7f0000003e80)={0xf88, 0x30, 0x20, 0x70bd29, 0x25dfdbfc, "", [@nested={0x665, 0x61, 0x0, 0x1, [@typed={0xc, 0x56, 0x0, 0x0, @u64=0x3}, @nested={0x5d3, 0xd8, 0x0, 0x1, [@nested={0x18c, 0x84, 0x0, 0x1, [@nested={0x187, 0x116, 0x0, 0x1, [@generic="23eba8e3684025b7aec5053c3d0d373bcd8a05545c29477dd516c1e8f9c9f17e8c9b4381071497d7c1e8bb910816146a83876f0e3b246da47ab0693d47b0212d0eb9e3247dbf8cbb3bbfc1f9fab40ab259487e5cd3169bab55a0b68d316a34a9af5d5130601ddd1cbd9779d76ff20f85bb869823c23729d935223b8284476c533de20a30d36d0f464c47019d3dd11634ecc3fc88ce619b7f30e245ab91df7857a1a4ba41fe1acfc5bb6acf53165e91109b6ffc164ceaec5167f22e6c50cffc99ecc70c345df4af60e4fbe6e5248a233ec4cf847ee914517bff26b3bedeba6585042269a99e893917d5730aed", @typed={0x4, 0xb8}, @generic="a650e6e326aae3f7684838b71c27985f8d136691c782094097202d2f8d0fbbc6dd0071237a8fd660bd17a13271333288e436e458c10e89970bbdacb93e64b8633021b2e6238e5c37c1d6737975764fed387b1ff5833fbdd8e3793777e7738fe19c3567e0c1f5f70c6adbb571efa80aee9771e4cfa1421a27fe997924e68c74e8f51ed783dcbb05f79e3cb0d64a774ce62496f6"]}]}, @generic="8f766e2e66297da1675242b46d7f242ebfc2d79a789fbec0700632e2cedccd177fd3f333f25dd00b73df303fa99bb8fe2d2e345723b1e429f5e28a0b4578fc1ea7b483a600d764d79fab51a5bc2b58e950c700833607c0704eeb9c5fadcb878d5627ac653627af3b060ef8e50569d7160e748c19bc2ace1a02509f26b5dadf21291686165da034ef997e53545321a50b9fd3d671e3ff1b4d8c0c41033365042a24790ab3075684e127cbe26d9d8c3ff2cb", @nested={0x16e, 0x0, 0x0, 0x1, [@nested={0x12f, 0xd6, 0x0, 0x1, [@typed={0xc, 0x151, 0x0, 0x0, @u64=0x8c}, @typed={0x8, 0xf3, 0x0, 0x0, @u32=0xb196}, @nested={0x4, 0x52}, @nested={0x4, 0x44}, @nested={0x4, 0xbb}, @nested={0x4, 0xb2}, @typed={0x4, 0xd6}, @generic="43e542781956a397a2686983d1da3aafb37bc376eec73325b6f81b8bc4441f44f154bc34c327d42779b3413c5b3a2ffc59dffb8da8652b90e9b62e7386f15da93e0bf646c31e381d5be2d256d1ca447ac45b16551696", @generic="93d615beda080e3b10399b650473186767a5ce20ccbf5db190d669043eb635aaca3d4b3b7834121ce2f5ccff6ddd3594d02b97368e105aaa93cce0932b19bb14bd876f24e70f0810683e7cb7668ca7a73f1e2bcab50c38ea8e9d8afb7d81bc751038f41a22ff6461850ac46ebf8d9cba55eb6b8f99c698dbc5acaf46c5ed4e23b8ffd8bb2dd78f75f778264728f0ba3b22ee16c7e87f016a0d589ff944bc16d08f34058ac56def3b8bb3b3f1f0"]}, @generic="1080f1053f38031afbf512a98e40a519591c528695d712ba912d89e8784bbe673c54bb8e73587e3ad52b7916dbe732656b1bfc0696d17eba4e19"]}, @generic="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", @nested={0xda, 0x44, 0x0, 0x1, [@generic="61bad2ae33a32d611c5c08371fa9811df5cda0d1c68850658fadabf4965efbc2b1312eaa5e7dd01653ab80e07170abc6462c2878ff60ef37e66dec9edd7640fc05e21209c4cc1cb6363bdeeb6d9accc24023d7b8eef10bccf2bfc7f88abbd43022cd294bb7df5641995c39a659086e77de694c47a1c88190f6c73b73803692f78ebe358dfdf4b1b55351b8ec0d36dcfb83cb1f4035ef18b86eb55a47e0b609dd37d9f70115c94ab2d034ee1af808d47dbd8d35d7d66588cc217df6bf3b0de1d9139ccf1f70199107d122ff94ccdf1070c1a1cefd46f3"]}, @generic="3debdf6a673c03c2d1cb3f8952281a09fcc371df5a49ccec4c6d62a7f3b04739094b6b46be0cbf2fa3318bcd973fa37dfa1ae4bd348e8338986db3ad52229c413b39a4772f9f5ce176e0"]}, @generic="cbe8e7345a76ba2df91c55502a754c9825b9aa87c9e3772fcd49ce236adcd87cda3eefdccabe7d64222590a98d5ed4765c4f930f2c03e78d61ad8ed25e49ace68b1bdf3f91d2b544185bbcb066d4fb", @nested={0x4, 0xd0}, @typed={0x8, 0x4, 0x0, 0x0, @str='wg0\x00'}, @generic="7e97db3787c0fa4d75bf385538ce6aeffa8451d43e681e0986ded8f12441468e502a", @nested={0x4, 0xb3}]}, @generic="da8cd0900f6643a767b4e58dc5c51368ef03d5d58712e17de2df7ab7489f8630370b439925096fbb98d83baa1c6412ff31f9c1eef782626f7ae1143fbb6cd7b885613cd64a7a4eed5dbf2e3c221ce67045e2c9f1cff51fdd82f1c580d41e70a1262dd060d8f9c537ef812630e28f9ac5fe4475555467114c62ebba218e3b1f4a94270fdb3af53ef2955357c7016ef193e7b90daceb9f048fac331d3bb213aeec75cdf9a36349e404c3f252e1d819cff49c511b498a70af56ca05185fb5898cef6e27", @typed={0x8, 0x5c, 0x0, 0x0, @pid}, @typed={0x16d, 0x79, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x3c, 0x0, 0x0, @fd}, @nested={0x375, 0x107, 0x0, 0x1, [@nested={0x27c, 0x33, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @u32=0x1ff}, @generic="4f1c27d1cad6665f105486994c1415c733ea175a4079037e331f36a6c3757f064e12d5ab86048f1c8204b47cd9abd46d823b73a1efbef5f4e90dad6492e2528eafe42af8b92b93b99177a8fadfeb722899645a6d46628b235cc8489f4e5608721b72e016f729c0dbe85e7d60cacc40d745abe028314e5ca0561edaaefa90b1e4a4cbd86c322ea225aae48ad7013ef1e770ecb4fc3890d56a6a3bce9d2f1b0f", @generic="2fff3ebb6e2c7922f0c3b94b1bcf5cfb431aa45cada32cd296a21d9d15c78602446d78cf2d1949389b16b6a86b48850e6f669b80275b15a22f8594a8a2b59772a9f6227773951bc7f9725c4c81812d42f12647f596ecf9f46677fe2a9486bb52e534544c73498729652f2b12fe1fa75ec88c9dd40a5363ce721e5ea67b781dfe86d7b163f68b9742736b92c63629862b4a4ff18fc9faad320a39b6b855a87e9e92feb5ac8e1a065e9ca4e00608f6b61fbfc878ab4f4862b583c00bc40c537b26881d3b89b8c0ec68befadd31cd6259d5ed18b354e4cc05a863f8", @nested={0xa8, 0x6, 0x0, 0x1, [@generic="3cbffb9e1c7abdc3fe15eaf344f66025d1693b0cd2d0a1002fd7aa1e067122016556d61d1ff7e83a5590e6a47f8974bccc19908177eb921d1c41443197a556d26de8375c9c9f866fffe82aece1f468ea3a13237ab283ad33739adb014f4d93b78cbd1c5ade978ae75fe32c0325c3d44bfba0fb4082653bac0ce30dc9396eaf82e129fd5d5bd5e5d6e190e7cd65041c26e8c60395059d2e999fe27426", @nested={0x8, 0x137, 0x0, 0x1, [@typed={0x4, 0xea}]}]}, @generic="b1a5d3ad2922d6174136c6b9a051654985c923e3dfccb898c699bae3dfa60fc3b285d3f8a997740c09c98daca6ee1f83516813", @nested={0x4, 0x8}, @nested={0x4, 0xcd}, @typed={0x8, 0x8a, 0x0, 0x0, @uid=r13}, @nested={0x4, 0x14c}, @typed={0x5, 0x137, 0x0, 0x0, @str='\x00'}]}, @generic="7e5d8c85bbb68aa66c50f925e37c4acffb49bc749797a5cd91d22dc7463a59d5400b81a2ca2d25ec38b99f1c14de208943d763a3a55813def18a9ede0a609de84fd0d4218c3f3e9381c9973f07ece0230f81705d371c742f80731c427067d1b9253ca3e7d8a86b06a8341b78bee9d1a116d52874aea23398ccbd9f9cde161ef468116a2e943b2d9f57c8c5c12c9079ee72fb7f2a4833b316dcb1c9114131e44684aeac0d8fdd727ae2152e02af1ad15f82f33a4959b0d4a1f9ded591452d36f2eb5a3fe5e9b9264165ed883f4f", @nested={0x28, 0x103, 0x0, 0x1, [@nested={0x4, 0x29}, @nested={0x4, 0xe}, @typed={0x14, 0x90, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x112, 0x0, 0x0, @fd=r1}]}]}, @nested={0xc, 0x8b, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, @typed={0x14, 0xac, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x204, 0x42, 0x0, 0x1, [@nested={0x4, 0x7}, @generic="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", @generic="dace303913252b8d9bbfec454afc826aa822f5f8c7320d8a85420dd9f2a32661b1b7e0384c0fbc8676398a95c99f2009310ed36aae681f0de72ed6fd7d11e9658fa2dfe6f7e727ee88cfbe2dea582dc1bd8abc272339ceec4d1543d1c0795279b98efca4a9b9ddc942099075361d3edef475c84efb058689aa8790f943c26103f344d75643aec4cef835e819b5791c59d162bc187c4b0185b827ee1513ebd812082b627171684ad71533ff6ca17364fd722a2ba440b2", @generic="33776f7ad108178f1174d40b4bd38cc71076a5c16dd97af555620cb753eec7743ebcfd7bdf96f3d681edaa131673b9093b7e0400d5", @nested={0x4, 0xee}, @typed={0x9, 0x11a, 0x0, 0x0, @str='\'\\:)\x00'}, @typed={0x4, 0x101}]}, @typed={0x8, 0x10c, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x4f, 0x0, 0x0, @fd=r6}, @nested={0x120, 0xc6, 0x0, 0x1, [@generic="d10c60ed59", @generic="71a0ea6df2d93572451503a814e27d7bfcd2270a9e7ba006ed2985b2", @generic="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"]}]}, 0xf88}, {&(0x7f0000002980)={0x14ec, 0x26, 0x800, 0x70bd25, 0x25dfdbfb, "", [@typed={0x14, 0xba, 0x0, 0x0, @ipv6=@private1}, @typed={0x4, 0xd2}, @generic="9900d3622f69f0f3f480b701b8d875910904cec71dbb087b630bc3ce820dfde35571fb79583d2898ca20f994025096da4b9dbcaa5ce3d4ec0398c8e0d798ea4fabe3d0256c6d1868bcce08a45bf6ec43257cf76fb75543419bb76a1b988a2d5348b3d1d8f9cc68e4061f39910e0529586c1eae1bf20debbc8bccf0b4fe386f2776eda0", @typed={0x8, 0x24, 0x0, 0x0, @fd}, @nested={0x13ef, 0xc6, 0x0, 0x1, [@typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@empty}, @nested={0x370, 0xfd, 0x0, 0x1, [@typed={0xa, 0xe1, 0x0, 0x0, @str='}!}/!\x00'}, @nested={0x27a, 0xe, 0x0, 0x1, [@typed={0xc, 0xe6, 0x0, 0x0, @str='ethtool\x00'}, @generic="8bf5bdba52198313bd0758bb9a153d5be5e2ea072bc61332cf520ef8596917ff60ed40ab01785b2bb8823bc5a254aceee912732f969225917faed9f50ebb9e56e4b804f2e41e67473af9e742825b769ace243a19cee57fba1ac1a840e8198f4a548541ed7b4d96d5c23faf2926578649a6daba3bad6d93333206244faa1563581009156d2a9d4a15e0", @generic="d890ac3a491f96f3d9e7757ebf27b5437fb7a47af588b44e8b45a99a81897f42b37e0023734f832a1a72889562b5c0a3e37f54d2596a613c07ba59ae646901d089134bd27615af00ff85e27ff27ba8298cebf3df9e168745e3e9cd19c1d0cc605195b4a0e2705686047adbd65a1ddbcefb71685b244c6be39db3d4bd1041d655bdc53705cbbcda043f00c690ef58d02078ff6cdbd4b1447f54117618659707ffea853383abeb7387", @generic="d39db043400bffb34a891f005c8c7f26aff2383ea9458d2333975cb7411472a97c2b8fddeb3d3f1c9fa08889089a9808a79733fd0e4a7b263ea94043a8063bb01ddacd7ca600035757968ca8c8ff846e6b69c8f62b22ed2eb955a5bde0841f2c0b6c3054ca5e02ae728ec172c26e852f58ec3addd0140f4d59", @generic="880ba619c380b15871ee8a4d5740181d8ba745a7c1640cbdb8e0928f3a08fa300a5dcf405aad42ddaa55e17d9331c8e9d92f0c", @nested={0x8, 0x145, 0x0, 0x1, [@nested={0x4, 0xa6}]}, @generic="f3db7adb0e49c2a62eeacc9c72636d058bdac4fe852592c0c295fea386233bf83a785052e6dd3d45a3ccede0210ab24a77844dcbe5e311962243d71a98cec67f30aa038f7102000000228ba43e2299ef4315511fc58708000000d4f43250972cd9791c168abd8804073678582c5301af5ff64b321729e3000000000000", @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @generic="ce60181f3ddcd1314405b453f171477a3d138b90c2881801317816ca6d82f2e89b1ff74b269528a41c3cc0d3374d4f8590daf456123d227f0b879ecff24a0cf966b2348b8384101d2a00c5fb1cdf535b9e9b716ebdecb266c35215bfe23e62b08951fb366050a688887269593a02c38c425dd365c22426b1e94b347546870468453ec2b971f2094e556bc30db308190e6310e0601d503e794c5d259b458a4c83d48acf2042fa931296a726560c1477f00c1c9ee22d889ef4aeb0bd47f3fec1b455947a961e08385c2d057f147db7ca1111c38821abe548150787c9f060d9022e36e14d90"]}, @typed={0x8, 0x11f, 0x0, 0x0, @pid=r10}, @generic="7a8133ecc8b1c7ab7f51deb9aaa3d2", @typed={0xc, 0x145, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x15}, @generic="a687be47be7e7202e53c1e99dbf3dbf5f98f5647fd045de0a993c5476d46f7db316b64c2f3614468efe541cba2b474d676821062b5bd93527d8119f838e9502d4c8ca108a02e9006", @generic="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", @typed={0x4, 0x10d}]}, @generic="0410554876361f589114acf030125bb28196520514ae39d0b8c41cea23453d9c22d98eb5c7cf3fe2accf68099d1106d964ee45847d14e90b6000b5c4", @typed={0xc, 0x1d, 0x0, 0x0, @u64=0x4}]}, 0x14ec}, {&(0x7f0000000f80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0800e900", @ANYRES32=r12, @ANYBLOB="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"], 0x958}], 0x4, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [r4, r5, r6]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [r5, r2, r4, r5, r7]}}, @rights={{0x30, 0x1, 0x1, [r4, 0xffffffffffffffff, r2, r2, r4, r3, r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {r10, r13, r14}}}, @rights={{0x1c, 0x1, 0x1, [r15, r17, r2]}}], 0xd0, 0x40}, 0x40000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x1ff, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, r13}, {0x7a04, 0x3ff, 0x0, 0x2, 0x401, 0x6, 0xfffffffffffffe00, 0x8}, {0x200, 0x3, 0x6, 0xff}, 0xf, 0x6e6bb9, 0x0, 0x0, 0x3, 0x3}, {{@in=@local, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3502, 0x2, 0x0, 0x8, 0x50e26aed, 0x7f, 0x80000000}}, 0xe8) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f0000000340)=ANY=[@ANYBLOB="9236"], 0x8) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.747503884s ago: executing program 3 (id=6940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xd79a2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 1.674719169s ago: executing program 0 (id=6941): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x8006}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x44880) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000540)=""/83, 0x53}], 0x2}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x3, 0x4) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 1.669327319s ago: executing program 4 (id=6943): socketpair(0x6, 0xa, 0x80000000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x80000) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0xc, 0x1, 0x6, 0x2, 0x4, 0xfffa}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fcffffff0000000088000000180100002020643700000000000e20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="540000001200010300000000ffffffff000900004e254e21000000000000000001000000fdffffff000000000400"/56, @ANYRES32=0x0, @ANYBLOB="0100000000000000fefffff0000000000800030088"], 0x54}}, 0x40000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000091f7579cfb81d4fe31e0d5c503677f3400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24001090}, 0x44004) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x14, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0xa}, @call={0x85, 0x0, 0x0, 0x5c}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x1, 0xf9, &(0x7f00000006c0)=""/249, 0x41000, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x4, 0xfffffffe, 0xd}, 0x10, 0x1b738, r2, 0x2, 0x0, &(0x7f00000008c0)=[{0x1, 0x5, 0x2, 0x5}, {0x1, 0x5, 0x3, 0x7}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r6, 0x0, 0x95, 0x9b, &(0x7f00000009c0)="1cf278725c8c43a1e4f778763d0ef36972ba41b3391073edec854d7603fe8ecc4931cbfc52097ece8eb38be0309c9e8b990cb93eff864428e2c7ba2ca4720098e2e5c55bcde4e791f8dcaf57c0f93171f6c60d8ec9d79a3247e78b85fb7547e0a1a2be81917abd4d1b588407a1910407918c463e0f3f0fef3b8e7a82009d6606d3eaaa07a942b571e221d62b05d2100581a918012e", &(0x7f0000000b80)=""/155, 0x16f, 0x0, 0xac, 0x8a, &(0x7f0000000c40)="8df9d19194cf6d9e4eb8d6204992939fbb101111cdbd8d2fde31c0fc794c8f6bf228e265548d18c63c70921d8d69d7b34aaae846ed889353d5f5a709c3ef17cbda1cce6d4cecbf16f75204374e6b464557bc4ae58f265ffd020d42a97b92bb6e035b872333e16a209d882f79098fff3e43c6cb97f0e5828f7acf563da8fdd92dd8324c8ecbbd9e48fd4172ad37eb06979651f5f81e6f351adb9be52cea7b1b8769631c69e5aae65f45c57a69", &(0x7f0000000d00)="8d96adb4f04dd3dc6dbae499f9da0491e1ad713db8e5e8d77708628f6a6c53f1f623eb38ec7621684de7a3bff874bb5576ed221fb15edd233cd4107d01090a43ca546d7ac7d4ae24259882943351f47d2b93610f231a630246281ba72cc1ac73c7a43b5265335d2332e864801306460fd862d0f50b8f38917f83f5b537023b06332ba37a4f7335ef32a7", 0x1, 0x0, 0x68}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000050c0), r9) sendmsg$NFC_CMD_LLC_SET_PARAMS(r9, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005140)=ANY=[@ANYBLOB="bc7c", @ANYRES16=r10, @ANYBLOB="71c928bd7000fddbdf251000000006001100ffff000008000100", @ANYRES32=0x0, @ANYBLOB="050010000b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40044}, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0xc, r4}, 0x38) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r9) sendmsg$NLBL_UNLABEL_C_ACCEPT(r11, &(0x7f0000000f40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x98, r12, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:semanage_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x20004098) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r11) sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r13, 0x5, 0x0, 0x0, {0x22}}, 0x14}}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r9, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x1c, r13, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c041}, 0x40804) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r4}, 0x4) 1.584982258s ago: executing program 3 (id=6944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000028000000030a01020000000000000000010000080900010073797a3000000000080003006e61740050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080001400000000108000240000000030900010073797a3000000000141000001100010000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x36f261bd55d3c61d}, 0x40000) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61f0, 0x0) sendto$unix(r1, &(0x7f0000000240)="46375f3e775404233a87a86640f2fc5dbed5b1679a0bbed2e89c06d51001", 0x1e, 0x4000000, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400e890) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000003780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f0000000040)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) close(0x3) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={r10, 0x7f}, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1.450236934s ago: executing program 0 (id=6946): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c00}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000600)='GPL\x00', 0x6, 0x66, &(0x7f00000006c0)=""/102, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) accept4(r0, 0x0, 0x0, 0x0) 1.379650952s ago: executing program 2 (id=6947): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x6, 0x6, 0xc00000, 0x8, 0x4, 0x5, 0x8, 0x8}}) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x255fdbfd, {0x0, 0x0, 0x0, 0x0, 0x155a, 0x4c901}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x4}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24048044) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000003f40)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febe70019"], &(0x7f00000001c0)=""/4096, 0x2d, 0x1000, 0x3}, 0x28) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x0) (async, rerun: 32) r5 = epoll_create1(0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x2000200a}) (async) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10ef2b3307796d82}, 0x4004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c000780080012400000000505000500020000000500040001000000110003"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) (async) sendmsg$kcm(r7, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) (async) socket$tipc(0x1e, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) (async, rerun: 64) readv(r7, &(0x7f0000000540)=[{&(0x7f0000000180)=""/234, 0xea}, {0x0}], 0x2) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r9 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r10, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) write$tun(r10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x7f, 0x8000, 0xfffffffb, 0x10, 0x0, 0x2, 0x62}, &(0x7f0000000200)=0x9c) 1.194383563s ago: executing program 4 (id=6948): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000005340)={0x0, 0x0, &(0x7f0000005300)={&(0x7f00000052c0)={0x10, 0x1406, 0x20b, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x6008040) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) 1.026737174s ago: executing program 2 (id=6949): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x23, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) recvfrom$llc(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a86a4e0800b976", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.025973894s ago: executing program 4 (id=6950): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async, rerun: 32) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async, rerun: 32) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a40)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES8=r2, @ANYBLOB="00000000000000000c00000000000000000000000000000003000000000000000400000000000000ffffffffffffffff0300000000000000feffffffffffffff0000000000000000000a000000000000feffffffff7f4000020000000000000804000000000000000100000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000080)='\x00', 0x0, &(0x7f00000000c0)={@_ha_fsid={[0x7e, 0x725a]}, {0x8001, 0x1, 0x6, 0x5}}, 0x7fffffff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x6}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="0000fb0b010401f0030004000600000000916c8f1c540bae00ff000000000e0725317123129c03000000000100000a47000000000000752190cd66fa3d4b061fac331d5cdd807d03e7a8b500da4573b023b6069dc905a2b97bc6380000000000000000"], 0x52) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r3) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1e0, r4, 0x800, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x80) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x3, 0x0, 0x0, 0x8000}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e1d, 0x3, @empty, 0x61}, 0x1c) (async, rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) (async, rerun: 32) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r7, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r8, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 973.615045ms ago: executing program 2 (id=6951): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) r2 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f0000000540)={0x2, 0x0, @broadcast}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7800fddbdf2503000000050037000000000008000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x8085}, 0x24000840) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) 944.730759ms ago: executing program 4 (id=6952): unshare(0x26020480) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400253100e7ebcddd545d7ece0ee305482b81a697fd66162c01934a91d1d1a112ddfbbe77ef3ce455b4ccac60dca60ac3fa52733f0dd1d5d365401ce4bdc98b8314c04ad1dcb46a8090e96311a55f1827b31d629288a53106bf9cdb9ae3add0dd53a1589594303297218c5f8b5cf1fbfb6ead70e74df63b60c03d260e98c76c42fb326dde3480495b3f340fb419530b523441686a95cddf882af14cf2fbcceff38d6d784bd3f10bcac3c64dc40ce94c88f9"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18050000000084000000000000000000850000007a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000040300000000000000000000100c"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xe83, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x603ca0114ad58eb3) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x7}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="9e", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0x20}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x8c102, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) close(0x3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000dc0)=@ethtool_gstrings={0x1b, 0x2}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r8, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="d6a80a747b515ed1d27e338e504a161c004d3fed0000e16089443d00b01bfe46d4d62add1d71b1495c40ebf046e70bf51717eae91ec4cbdb3e900e913edf2e05e7e753d6f33ac38ca2d6794bddcad65b6bcfe14000cae9bdc48830af1f44df2a4c56d075fdb4450258c7d5893e675808022468f424d0fff7064ede469a", @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf2501af7b00050007001a00000006004a00ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000805) 774.643931ms ago: executing program 2 (id=6953): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x3ff) (async) socket(0x10, 0x3, 0x3ff) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dvmrp1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0x100, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xb, 0xffff}, {0xffff, 0xfff3}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket(0x23, 0x2, 0x0) socket(0x29, 0x4, 0x8000000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x20) listen(0xffffffffffffffff, 0x3) (async) listen(0xffffffffffffffff, 0x3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x19, 0x0, &(0x7f00000000c0)=0x9b) shutdown(0xffffffffffffffff, 0x1) (async) shutdown(0xffffffffffffffff, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r1], 0x0, 0x36, 0x0, 0x1}, 0x28) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 773.496602ms ago: executing program 1 (id=6954): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="201000000000280012800b1339d91d4129b81156366bc100010067656e6576650000181002801c0015002900fadc4ed000000068f90000114c71f001983c30b074919e89"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x40080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000360000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000500), 0x0}, 0x20) close(r0) 767.215364ms ago: executing program 3 (id=6955): close(0xffffffffffffffff) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000000)="2fb7b57f4d6e7fe37698f032b013e6b0f6b9098af02c6a1bc23755159a36450a02cb60411fced33e740913444c4567742ad2472e2deb169afb7f0ba0ec8eb5f8237adcd4757c56f5bc0d379fe54d5dea2d3f0cad0f6eeba18f021670b6e0527bb8549dd418cfbdac163a1940ab56cd54d3137d9282053b7ae856c0dbf47f6e3f99a0c863af511ff534752c61e64477920abfac8fd8eeff335984c705c83130ec95af95f53ed12bcc00ed2677eb6d8e5ce43c0cd940c8798ecc71d56cdd98d200af6b6b5f395479e044aa02a5974da814c45141c2d419beaa6faa", 0xda) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x50080, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000180)={0x0, "80df63fbf28ee53948ebe366a4980303"}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001180)={0x1, 0x0, @start={r2, 0x1, "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", "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"}, [0x9, 0xaf, 0x6, 0xc, 0x7fffffffffffffff, 0x4222b811, 0x2, 0xcae, 0xc, 0x6, 0x7, 0x0, 0x0, 0x2f3, 0x9, 0x5, 0x2, 0x3, 0x9, 0x9, 0x0, 0x101, 0x3, 0x3853, 0x72, 0x4, 0x9, 0x6, 0x8, 0xfffffffffffffffc, 0x11791631, 0x8, 0xf3, 0x81, 0x1, 0x5, 0xc5, 0x3, 0x3, 0x401, 0x80000001, 0xb534, 0x6, 0x3, 0x8000, 0x5, 0x4, 0x6, 0xd53, 0x649a, 0x3, 0x0, 0x1, 0x7, 0x7, 0x9, 0x5, 0x7, 0x100000000, 0xd4, 0x10, 0x10001, 0x80000001, 0x477]}) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000001bc0)={{0x3, 0x4, 0x8, 0x3f8, 0xea43}, [{0x403e, 0xcc, 0x6, 0x5}, {0xec00000000000000, 0x7ac1, 0x81, 0x4}, {0x60, 0xa9b, 0xf6, 0xd0}, {0x9, 0x6, 0x6, 0xb}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x88}, 0x1, 0x0, 0x0, 0x8801}, 0x8000004) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000001e00)=0x33, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001e40)={0x1, 0x1000}, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000001e80)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @broadcast}], 0x20) read(r1, &(0x7f0000001ec0)=""/221, 0xdd) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000001fc0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000021c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002180)={&(0x7f0000002080)={0xdc, r7, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e78}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa050}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4267}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800000}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x893356dc3dab75d7}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x30, r9, 0x423, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0x88c0) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x28, 0xe, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8900}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000002440)={0x2, 0x4e21, @private=0xa010101}, 0x10) r11 = accept4(r5, &(0x7f0000002480)=@caif=@dgm, &(0x7f0000002500)=0x80, 0x80800) getsockopt$bt_BT_SNDMTU(r11, 0x112, 0xc, &(0x7f0000002540)=0x6, &(0x7f0000002580)=0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000025c0)={'macvtap0\x00', {0x2, 0x4e20, @empty}}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x44, 0x140f, 0x8, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x48880}, 0x2000c840) 695.951179ms ago: executing program 1 (id=6956): syz_emit_ethernet(0xa3, &(0x7f0000001a40)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa0006deb9e46b4e2bdf24637a97e650d17aaa5f1a1640799b7e94d90bf75c20293788565dc521cc5599741c25d786ab28d80d02bfa1874edc7368d68268681a0fa48e485cca6749cb6fcc33e5c20888caefa1c8be044c64c9059ff2f987163a07bacb95239c8903a2db11e77b41e9b604bf6e166b391ed3113921836fd1af4f6b43fbe1371c3e5cb8375c03fe1a8fb620df48e5df2ef34cb7ff032c14d220aa8949483da81b"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000000306010400000000000000000a000009050001"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xfffffffe, @private1, 0x9}]}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000001a00)={0x4, &(0x7f00000003c0)=[{0x107, 0x1, 0xb, 0x280}, {0x7, 0x0, 0x9a, 0x5}, {0x6, 0x6, 0x0, 0xfffffffc}, {0x400, 0x2, 0x8, 0x5}]}, 0x10) ioctl$FICLONE(r4, 0x40049409, 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000180)=0x10) r7 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000280)={0x627, 0x2800000, 0x0, 0x2}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x4, 0x0, 0x0, 0x0, 0xce03b2}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r8, 0xfe, 0xfffffffffffffffc}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r9, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001900)={r9, @in={{0x2, 0x4e21, @local}}}, &(0x7f00000019c0)=0x84) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f00000018c0)={&(0x7f0000000000)=@in={0x2, 0x4e23, @loopback}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)="c37d7269624b8a145631e7e8bf5c844980dace345d13d9495fd8b819692efaf14deb3f384170fa3b9e94cf8f6fc805c8d823260b8026f65c92e52e2f5ec9a4e6b4e3287a9432c2be03c1cc389af6bbb7775af7100ecdafc291af8f7fcae54db6c67c02eb211d29bea0a1b59fdd05741cfc1b24a827e99d4c7650e6ad8c9daa6f84824b7dc6307ff3d5287732a3268c876654ee473bebdcb872d07bd83d0b6f053886705c4966261cf19a974d", 0xac}, {&(0x7f0000000240)="8f42c3506f4bb07431a3cc547a52e4d886c6ec98cf180a602783a1f10a8e68d64cd6f274b222fe5933bc299fd666a9f8ee7534add49c79e94305c545bf8228eb3e694acc51b1fa15697f1bd0c397534a9270c3", 0x53}, {&(0x7f00000002c0)="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", 0xfd}, {&(0x7f00000004c0)="41b03548c700aff18a9f029274ef03481df8c42f3e06ae7dfba104d56a8a1bfb6628984e049b6089a88c4b5bcfe508f2b5bd3a7e19cf4c1e16fc7ec85ee25d9386f50a41a9ef56540f9d3de72b8073d6a98ff5ae80546cee896fd005306deefc1363976206723526fcedc9cff665492c598d5754d11ccfa114d9af2bbe870365854775d01eb5d839541d0e91e3fbd05ecb646618595f921aa19d31b21693f08a36e15369f79519cbb37c6a3b18eb7fe2ce8329b520fe9e20c67b21c97b8c7e10ef6f21d7771ec0f9", 0xc8}, {&(0x7f00000005c0)="3a23b71d1fcfa0af8e07f320b0280ecd25d7e3a5c2d5221a905a80d93c329fd2cc163015dcd1c4272f6e047c167f8ab59098f30183cd68baef1d4efebb2f51c767c697d0993c7254019d415293ca1165ee2b43080ea8457b6621489516534778f74a1dac1a5599e5c1eedb01098196018008a38182dbf8c200c3d952740a5466c994af9357", 0x85}, {&(0x7f0000000680)="26126d86a99fa20e01d6a07dc1128f85bfb3e1d2cc21ac532b71c3cf26148279bf13234e6987fc1abd7d0b391a13d35e21f97d52b6bbf2aa090fd3db001dab37ecbacf9218bdfde7e8effcc066c169f69b7644ba55272a5b363dc71d3fcb6800dddfc10cbe13a7a59b28326bc3da499c2b1b9319", 0x74}, {&(0x7f0000000700)="fa708b71168ae7", 0x7}, {&(0x7f0000000740)="40e86e152ffa97758b5b8b25f402cbdfc258efd82ef7fce6812f57c8127e4c780f2e789e3014c0ae3d2b4ed774d655a603aa7e4171cc0356ec8bb9b20403293ad31166be444e", 0x46}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1060}, 0x20000000) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001b00)=ANY=[@ANYBLOB="240000048cc84eb501e70eda8b53392563d05ebcbabfa9f730e09508c1026a759cfae461d454689277f147b0bb0dc8fd489254870aec18c8bf7c7049ca409654e2f92fe219712a7821b4090e8d0797824db7f2a9bf7cfd61fdc775383648017bc7c32dc2082dcaab9090f7617d596948fa8a955a2813bbc304dddf58d687a8a1f84a", @ANYRES16=r10, @ANYBLOB="01002dbd7000ffdbdf2502000000050002000a000000060001004e210000"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) 610.296577ms ago: executing program 3 (id=6957): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x5, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x3, 0x1}]}]}}, &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0xa, 0x32e}, 0x28) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) 502.72393ms ago: executing program 1 (id=6958): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x4014) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000001700), 0x0, 0x10021, 0x0) 486.576977ms ago: executing program 0 (id=6959): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) accept4(r1, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x80, 0x800) 474.408102ms ago: executing program 3 (id=6960): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2004c015) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c000280050001000000000024000180140001"], 0x80}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c000280050001000000000024000180140001"], 0x80}}, 0x0) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) syz_emit_ethernet(0x6e, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0xff, @loopback={0x4000000}, @local, [@fragment={0x1d, 0x0, 0xd, 0x1, 0x0, 0xe, 0x68}]}}}}}}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x1, 0x0, 0x0, 0x0, "f21a810183bdfbff"}}, 0x38}, 0x300, 0x0, 0x0, 0x8800}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x1, 0x0, 0x0, 0x0, "f21a810183bdfbff"}}, 0x38}, 0x300, 0x0, 0x0, 0x8800}, 0x0) accept4(r0, 0x0, 0x0, 0x800) (async) accept4(r0, 0x0, 0x0, 0x800) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000040)="1aebebf8ad05840ef1a5e955e898ad82e1c8e9621a2bccc6c46baae8970bf356902e5a234499ca8505fb58695b14e0a2eba44a5bdeb0ea2ecbc15af2bbf9826e98613dcb9b3015349a8ea8bc5adec24accf76c057e8bc92375829a769cfd9a99a6bb1d7d", 0x64, 0x11, &(0x7f00000000c0)={0x11, 0x18, 0x0, 0x1, 0x6, 0x6, @random="b7881adfeaad"}, 0x14) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x10, 0xffffffffffffffff, 0x261b1000) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x8c}}, 0x0) accept(r0, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r11, 0xc0096616, &(0x7f0000000000)={0x2, [0x0, 0x0]}) 374.076576ms ago: executing program 1 (id=6961): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) 250.593709ms ago: executing program 0 (id=6962): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r4, 0x4) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0xc}], &(0x7f0000000300)='GPL\x00', 0x89f, 0xee, &(0x7f0000000340)=""/238, 0x41000, 0x4d, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x4, 0x8, 0x81}, 0x10, 0xd783, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000500)=[{0x0, 0x2, 0x10, 0x4}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x0, 0x5, 0x5, 0x0, 0xc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0x63d8e80d0f6f2ce0, 0xb, 0xa, 0xffffffffffffff84, 0xfffffffffffffffc}, @ldst={0x1, 0x2, 0x6, 0x1, 0x1, 0xfffffffffffffff4, 0x11}, @jmp={0x5, 0x0, 0xc, 0x3, 0x6, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, &(0x7f0000000180), 0x41000, 0x14, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x6, 0x7ff, 0xfffffffd}, 0x10, r4, r5, 0x3, 0x0, &(0x7f0000000600)=[{0x2, 0x4, 0xd, 0xb}, {0x2, 0x3, 0x6, 0x4}, {0x1, 0x4, 0xe, 0xc}], 0x10, 0x4}, 0x94) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 174.859709ms ago: executing program 3 (id=6963): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000800)=ANY=[], 0x141) r1 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) syz_80211_inject_frame(&(0x7f0000000500)=@device_b, &(0x7f0000000a00)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @device_a, @random="718e329c9d38", {0x1, 0x6}, @value=@ver_80211n={0x0, 0x40, 0x0, 0x1}}, 0x2, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x9, 0x1}, {0x4}]}, @void, @void, @void, @val={0x5, 0x43, {0xce, 0xaf, 0x6, "8c28d645d3a8976774e118c1855fedf5a3d5e736cd6c422aa7e320ebb002cdf125b6d39cbe43b524a5e118df026c55f86bc76ed09b6de04f79fc02a68faa6bd8"}}, @val={0x25, 0x3, {0x1, 0x3c, 0x7d}}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0xc, 0x3, 0x0, 0x0, {0x5, 0x9, 0x0, 0x8, 0x0, 0x1, 0x0, 0x2}, 0x300, 0x4, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2, 0xff, 0x40}}, @void, [{0xdd, 0xe1, "86a39e6e5e827d6a4be1bf8f7716a3a2eac6177e291856850909527cc1f39f684077b86c616289c2a70fea0497e7fee3703308ba3ee492f7612df6acff5a2e011922f3d0c397a7a539c38948dd98d842066692210eca250822271d22dc839739abbb49a8afde967dcda49d9aa2179cf04f89045707d51e0b544d47609aa125f6f3f41d26986447c0332e76f48dea4d15bb640c0245a71d3f30a387b7031ae71b9e69cb5ffe93c97b809bc708153dadad8e16acf5047821c1b472389befec059fae7cf1f757d0998f7e78b7d788cd4d4af23646aef1324948436e2a1ca0a7799724"}, {0xdd, 0xc3, "06a079f3ad634eac0abccad67ffc51fd673627115380c126677a0b08635a9c7644a48ace8e9c90f3cfd7e5473642d041c445267b21f931a2a1d603f28f4e15636551050617673a1cf33281d104ddaf25ae106a8737df92a2abbed468913165c5b173feec730949bad5018dd15240d60c394eb153cad122a75449c099de30d52920008d2ce2f2ea30bd69299ed52fd2b0ea337410c0b42c289541155664dbb2da9ddb7eb572c92f60211f0012ec96c9045c65d18aebda1296e03dec1b07e01bdf9f04eb"}, {0xdd, 0xd1, "849f9605873d1409303a2f9a01aacbf998caafa4e718868f43cce5c47279d2df24f0ecce98f253a8650ad9d87ecc255b10c08dc5435789fce772bf12a0551dd69787ca946db864b16217e59b08c5748f95752f20dbecb3428a4a0a5d59635d90a8434b66a283d37f55504e9ce98b568fae568789a478df1b67ef045d343021c037cfb2a3719e381fe27edeb47a4c26cdae7076ff84b9628f8c28df3e2f08161c4e03b2e495642de37f2c4df4cda9867c175ff7d0501374f0ae348eb7b9fd35896199bef8ecab5ff5afff4176859736356f"}]}, 0x329) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x45}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r1, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000000280)={0x7, 0x0, 0x6}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0xfffffffe, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) recvfrom$unix(r5, 0x0, 0x0, 0x20, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x403, 0x70bd29, 0x2, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r7, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_mtu}) 160.030479ms ago: executing program 2 (id=6964): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xd0, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt(r0, 0xfff, 0x80000001, &(0x7f0000000080)=""/229, &(0x7f0000000180)=0xe5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x8c, 0x0, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x80, 0x8a, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x10, 0x1, 0x5, 0x9, {{0xb, 0x4, 0x3, 0x9, 0x2c, 0x65, 0x0, 0x0, 0x29, 0x0, @multicast2, @rand_addr=0x64010101, {[@cipso={0x86, 0xb, 0x3, [{0x6, 0x5, "3dd6e9"}]}, @timestamp_addr={0x44, 0xc, 0x4d, 0x1, 0x2, [{@remote, 0x92}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0xcbf1388b12a76848, 0xe, 0x2, 0x4, 0x8, @private0, @mcast1, 0x8, 0x1, 0xd, 0x5}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000600)={0xfffffffffffffffd, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40800}, 0x80) r8 = socket(0x1, 0x2, 0xffffffff) r9 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r9, &(0x7f0000000640)={0x2c, 0x1, r6, 0x28}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000680)={r8, 0xbc, 0x80000000, 0x9}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', r6, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000900)={{r8, &(0x7f0000000740)='^\x00', 0x800, &(0x7f0000000780)={@_ha_fsid={[0xfffffff9, 0xa]}, {0x29c, 0x80a8, 0x9, 0x21fd}}, 0x2, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0xc00}, {[0x6, 0xffffffff, 0x8, 0xffffffff]}, 0x4, 0xaa, &(0x7f0000000840)=""/170}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r9, 0x4058587a, &(0x7f0000000b80)={{r0, &(0x7f0000000980)='\x00', 0x20000, &(0x7f00000009c0)={@_ha_fsid={[0x92b5, 0x9]}, {0xe200, 0x800, 0xa5, 0x75}}, 0x6, &(0x7f0000000a00)={@_ha_fsid}, &(0x7f0000000a40)=0xfffffffe}, {[0x5, 0x6, 0xfa7c]}, 0x101, 0xcc, &(0x7f0000000a80)=""/204}) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f00)={0x1b, 0x0, 0x0, 0x1c000, 0x0, 0x1, 0x7fffffff, '\x00', r5, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000)={0x0, 0xb21c, 0x8}, 0xc) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)={0x1b, 0x0, 0x0, 0x2e, 0x0, 0x1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x23, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r11}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @map_val={0x18, 0x8, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x453}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d40)='syzkaller\x00', 0x18000000, 0xf0, &(0x7f0000000d80)=""/240, 0x41100, 0x20, '\x00', r5, 0x25, r1, 0x8, &(0x7f0000000e80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000ec0)={0x3, 0x8, 0x1ff, 0x10000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r14, r15, r16, 0x1, r17], 0x0, 0x10, 0x8000}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x5, 0x2) connect$qrtr(r12, &(0x7f00000011c0)={0x2a, 0xad50d144e7fc00c6, 0x8000}, 0xc) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xcb, &(0x7f0000001200)={0x0, 0x1, 0x3, r7, 0x800}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x18, 0x14, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @alu={0x4, 0x0, 0x7, 0x8, 0x3, 0x80, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0xd, 0x2, 0x9, 0x20, 0xfffffffffffffffc}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x4a}]}, &(0x7f0000001300)='GPL\x00', 0x89d6, 0x45, &(0x7f0000001340)=""/69, 0x40f00, 0x2, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x67, 0x2}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001440)=[r16], &(0x7f0000001480)=[{0x5, 0x1, 0x6, 0x1}, {0x4, 0x4, 0x1, 0x2}, {0x1, 0x4, 0x1, 0x8}, {0x0, 0x1, 0x3, 0x6}, {0x0, 0x5, 0x10, 0x6}], 0x10, 0xfffffffe}, 0x94) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r12) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000001800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000017c0)={&(0x7f0000001640)={0x14c, r18, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "89358efb141f5935a4408ad4e5ed88b8453e3cca3b79df9a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "db88e9a8315dcb00eaddb5a29f157a768aba3089f47fec73"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bdc3a5ad03a28e00eff7ca6936cfc22356b9d2b3c18f9333"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 148.259253ms ago: executing program 0 (id=6965): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0xffff, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4042849}, 0x20000000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r5, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30) syz_emit_ethernet(0x1112, &(0x7f00000030c0)=ANY=[], 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) 94.69614ms ago: executing program 1 (id=6966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}, @CTA_SEQADJ_CORRECTION_POS={0x6, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x0, 0x1, 0x1, 0x0, 0x3257}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25}]}]}, 0xb8}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x5}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000003680)=""/4096, 0x33, 0x1000, 0x1}, 0x28) 0s ago: executing program 1 (id=6967): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES64=r0], 0x3c}}, 0x4000000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) write$nci(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="700609000802000103041ba111742a3f288a4ac1634db7310c00000000000000b4ffffffffffffffff79e388ca8badfcae8ef8f5c9a7"], 0xfe0e) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) socket(0x10, 0x3, 0x0) r9 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) accept4$alg(r9, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ENABLE_SE(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4003}, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200024bd7006fcdbdf25150021000a005e004a9ac7d05bd77c5d"], 0x20}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket(0x40000000015, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) getsockopt(r9, 0x18f0, 0x2721, 0x0, &(0x7f00000001c0)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x2d, &(0x7f00000002c0)=0x8005, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) kernel console output (not intermixed with test programs): sing attributes in process `syz.3.5800'. [ 810.336050][T29268] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5800'. [ 810.742605][T14429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.831847][T14429] wlan1: Trigger new scan to find an IBSS to join [ 811.753082][T14427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.451407][T14428] net_ratelimit: 23 callbacks suppressed [ 812.451427][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 812.613183][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 812.636514][T29297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5808'. [ 812.657527][T29301] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5809'. [ 812.792205][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 812.871444][T29319] xfrm1: entered allmulticast mode [ 812.963022][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 812.988732][T29324] validate_nla: 4 callbacks suppressed [ 812.988748][T29324] netlink: 'syz.2.5815': attribute type 31 has an invalid length. [ 813.083161][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 813.348258][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 813.501485][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 813.599776][T29362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5824'. [ 813.621813][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.630382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.638864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.822589][T29374] netlink: 'syz.2.5826': attribute type 1 has an invalid length. [ 813.898983][T29379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5826'. [ 813.917657][T29379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5826'. [ 816.318349][T29374] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 816.424429][T29386] tipc: Resetting bearer [ 816.472127][T29390] netlink: 'syz.4.5829': attribute type 1 has an invalid length. [ 816.587817][T29397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5830'. [ 816.624893][T29390] 8021q: adding VLAN 0 to HW filter on device bond16 [ 816.667626][T29402] netlink: 'syz.3.5830': attribute type 83 has an invalid length. [ 816.738838][T29409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5833'. [ 817.008385][T29425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5838'. [ 817.114012][T29423] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.121748][T29423] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.206210][T29423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.220114][T29423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.385787][T14414] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.406525][T14414] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.418313][T29438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5840'. [ 817.524667][T14414] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.563287][T14414] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.592484][T14430] net_ratelimit: 2 callbacks suppressed [ 817.592503][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 817.640785][T29450] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.5843'. [ 817.652867][T29449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5843'. [ 817.732195][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 817.820057][T29459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5845'. [ 817.862499][T29459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5845'. [ 817.873310][T29461] siw: device registration error -23 [ 817.891439][T14414] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 817.920535][T29459] netlink: 'syz.0.5845': attribute type 18 has an invalid length. [ 818.023867][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 818.131448][T29475] hsr0: entered promiscuous mode [ 818.161529][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 818.182139][T20128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.304065][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 818.431904][T14414] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 818.562860][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 818.661685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.903236][T21833] Bluetooth: hci4: command 0x0405 tx timeout [ 819.536198][T29552] __nla_validate_parse: 5 callbacks suppressed [ 819.536221][T29552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5864'. [ 819.600637][T29555] tipc: Enabled bearer , priority 0 [ 819.609470][T29555] syzkaller0: entered promiscuous mode [ 819.615658][T29555] syzkaller0: entered allmulticast mode [ 819.688512][T29555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5861'. [ 819.747894][T29555] tipc: Resetting bearer [ 819.796683][T29542] tipc: Resetting bearer [ 819.825659][T29542] tipc: Disabling bearer [ 822.701846][T14429] net_ratelimit: 90 callbacks suppressed [ 822.701870][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 822.822935][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 822.931545][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 823.041592][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 823.151992][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 823.261513][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 823.371541][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 823.481929][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 823.591560][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 823.702141][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 827.771870][T14429] net_ratelimit: 39 callbacks suppressed [ 827.771892][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 827.782866][T20128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.891451][T14435] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 828.001397][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 828.111488][T14435] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 828.221466][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 828.331444][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 828.441531][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 828.551981][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 828.661611][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 832.881672][T14430] net_ratelimit: 40 callbacks suppressed [ 832.881693][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 833.001489][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 833.111877][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 833.221471][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 833.331446][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 833.441607][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 833.551455][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 833.661404][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 833.771411][T14435] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 833.881472][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 834.181636][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 835.461619][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 837.971958][T14430] net_ratelimit: 40 callbacks suppressed [ 837.971978][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 838.091758][T14435] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 838.201493][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 838.311525][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 838.421923][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 838.531577][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 838.641500][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 838.751870][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 838.861508][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 838.971400][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 840.685687][T29656] netlink: 'syz.1.5867': attribute type 12 has an invalid length. [ 840.696830][T29654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5866'. [ 840.710249][T29654] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5866'. [ 840.810767][T29662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5868'. [ 840.876682][T29674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5871'. [ 841.006888][T29659] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 53174 - 0 [ 841.138170][T29659] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 53174 - 0 [ 841.254299][T29659] team0: Port device netdevsim1 removed [ 841.264039][T29659] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 53174 - 0 [ 841.278117][T29700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5878'. [ 841.331574][T29703] netlink: 'syz.0.5879': attribute type 8 has an invalid length. [ 841.382382][T29659] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 53174 - 0 [ 841.714217][T29719] netlink: 'syz.0.5883': attribute type 4 has an invalid length. [ 841.770385][T29721] netlink: 'syz.0.5883': attribute type 4 has an invalid length. [ 842.338220][T29744] bond1 (unregistering): Released all slaves [ 842.348557][T29755] netlink: 'syz.3.5889': attribute type 15 has an invalid length. [ 842.563874][T29762] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5892'. [ 842.611620][T29767] lo speed is unknown, defaulting to 1000 [ 842.686571][T29772] xt_hashlimit: size too large, truncated to 1048576 [ 842.717504][T29776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5895'. [ 842.746224][T29776] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5895'. [ 842.767956][T29779] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 843.105564][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 843.211356][T14430] net_ratelimit: 31 callbacks suppressed [ 843.211374][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 843.611788][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 843.724017][T29835] bridge6: entered promiscuous mode [ 843.757847][T29835] bridge6: entered allmulticast mode [ 843.779449][T29835] team0: Port device bridge6 added [ 843.823602][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 843.836318][T29840] netlink: 'syz.0.5908': attribute type 3 has an invalid length. [ 843.854985][T29841] IPVS: set_ctl: invalid protocol: 37 255.255.255.255:20001 [ 843.871865][T29840] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5908'. [ 843.972549][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 844.082613][T29846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.162075][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 844.200890][T29850] sit0: entered promiscuous mode [ 844.218029][T29850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5910'. [ 844.299188][T29892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.348140][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 844.419111][T29896] netlink: 'syz.1.5915': attribute type 21 has an invalid length. [ 844.481384][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 844.611452][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 844.699874][T29914] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:1 [ 844.726396][T29913] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:1 [ 844.760691][T29911] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 844.819627][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 844.976903][T29928] netlink: 'syz.0.5923': attribute type 10 has an invalid length. [ 845.003159][T29928] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 845.947512][T29973] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 846.104825][T29984] vti0: entered promiscuous mode [ 846.124581][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 846.169774][T29991] netlink: 'syz.1.5939': attribute type 29 has an invalid length. [ 846.184138][T29989] syzkaller0: entered promiscuous mode [ 846.198881][T29989] syzkaller0: entered allmulticast mode [ 846.616148][T30020] __nla_validate_parse: 4 callbacks suppressed [ 846.616167][T30020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5945'. [ 846.667302][T30024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5945'. [ 846.989010][T30039] vlan5: entered promiscuous mode [ 846.997623][T30039] bond0: entered promiscuous mode [ 847.012045][T30039] bond_slave_1: entered promiscuous mode [ 847.085032][T30048] bond0: (slave bond_slave_1): Releasing backup interface [ 847.200669][T30053] syzkaller1: entered promiscuous mode [ 847.226160][T30053] syzkaller1: entered allmulticast mode [ 847.248800][T30059] netlink: 'syz.1.5951': attribute type 1 has an invalid length. [ 847.335705][T30059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5951'. [ 847.649539][T30082] netlink: 'syz.4.5958': attribute type 1 has an invalid length. [ 847.787114][T30082] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 847.789246][ T5294] 8021q: adding VLAN 0 to HW filter on device eth4 [ 848.047360][T30108] erspan0: entered promiscuous mode [ 848.073230][T30108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5963'. [ 848.232729][T14427] net_ratelimit: 29 callbacks suppressed [ 848.232748][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 848.382305][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 848.500928][T30137] tap0: tun_chr_ioctl cmd 1074025681 [ 848.581947][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 848.658282][T30141] nicvf0: tun_chr_ioctl cmd 1074025677 [ 848.675839][T30141] nicvf0: linktype set to 1 [ 848.711882][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 848.742409][T30149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5973'. [ 848.761534][T30149] nbd: must specify at least one socket [ 848.842968][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 848.983169][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 849.122069][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 849.262191][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 849.344036][T30175] lo speed is unknown, defaulting to 1000 [ 849.548621][T30189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5983'. [ 849.922376][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 849.933828][T30208] xt_TCPMSS: Only works on TCP SYN packets [ 850.061901][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 850.143668][T30175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5980'. [ 850.600910][T21833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 850.614005][T21833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 850.625701][T21833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 850.635471][T21833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 850.645270][T21833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 850.694505][T30240] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5996'. [ 850.878522][T30236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5995'. [ 851.012193][T30236] team0: Port device team_slave_0 removed [ 851.025843][T30257] netlink: 'syz.1.5999': attribute type 3 has an invalid length. [ 851.438338][T14427] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.456301][T14427] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.544930][T30285] tipc: Enabling of bearer rejected, already enabled [ 851.554391][T30279] netlink: 'syz.1.6002': attribute type 10 has an invalid length. [ 851.573979][T30279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6002'. [ 851.599756][T30279] dummy0: entered promiscuous mode [ 851.607704][T30279] dummy0: entered allmulticast mode [ 851.617675][T30279] bridge0: port 3(dummy0) entered blocking state [ 851.625619][T30279] bridge0: port 3(dummy0) entered disabled state [ 851.679409][T14427] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.689457][T14427] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.773035][T30234] lo speed is unknown, defaulting to 1000 [ 851.827155][T14427] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.837541][T14427] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.909947][T30294] tap0: tun_chr_ioctl cmd 1074025681 [ 851.948378][T30294] netlink: 'syz.1.6008': attribute type 11 has an invalid length. [ 852.079676][T30296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6008'. [ 852.117468][T14427] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.129353][T14427] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.435793][T30314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6012'. [ 852.578176][T30321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6015'. [ 852.693089][T30325] netlink: 'syz.4.6013': attribute type 1 has an invalid length. [ 852.764882][ T5635] Bluetooth: hci5: command tx timeout [ 854.440206][T30319] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 854.571479][T14430] net_ratelimit: 11 callbacks suppressed [ 854.571501][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 854.703683][T30331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 854.710965][T30331] IPv6: NLM_F_CREATE should be set when creating new route [ 854.718276][T30331] IPv6: NLM_F_CREATE should be set when creating new route [ 854.821964][ T5635] Bluetooth: hci5: command tx timeout [ 854.917100][T14427] vlan4: left allmulticast mode [ 854.931455][T14427] dummy0: left allmulticast mode [ 854.947736][T14427] vlan4: left promiscuous mode [ 854.966291][T14427] bridge0: port 3(vlan4) entered disabled state [ 855.007993][T14427] bridge_slave_1: left allmulticast mode [ 855.026683][T14427] bridge_slave_1: left promiscuous mode [ 855.041169][T14427] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.065043][T14427] bridge_slave_0: left allmulticast mode [ 855.080990][T14427] bridge_slave_0: left promiscuous mode [ 855.093350][T14427] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.127204][T30365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6022'. [ 855.163971][T14427] dvmrp0: left allmulticast mode [ 855.175216][T14427] dvmrp4: left allmulticast mode [ 855.550639][T30382] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6024'. [ 855.638982][T14427] bond1 (unregistering): (slave geneve2): Releasing active interface [ 855.716670][T14427] team0: Port device bridge6 removed [ 855.749642][T14427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.760414][T14427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.770449][T14427] bond0 (unregistering): Released all slaves [ 855.785861][T14427] bond1 (unregistering): Released all slaves [ 855.801026][T14427] bond2 (unregistering): Released all slaves [ 855.817259][T14427] bond3 (unregistering): Released all slaves [ 855.833490][T14427] bond4 (unregistering): Released all slaves [ 855.848786][T14427] bond5 (unregistering): Released all slaves [ 855.879977][T14427] bond6 (unregistering): Released all slaves [ 855.895539][T14427] bond7 (unregistering): Released all slaves [ 855.911947][T14427] bond8 (unregistering): Released all slaves [ 855.944261][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 856.099674][T30387] netlink: 'syz.0.6025': attribute type 27 has an invalid length. [ 856.108566][T30387] netlink: 'syz.0.6025': attribute type 4 has an invalid length. [ 856.116509][T30387] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6025'. [ 856.134078][T14427] : left promiscuous mode [ 856.229962][T14427] tipc: Left network mode [ 856.234974][T30395] netlink: 'syz.4.6028': attribute type 5 has an invalid length. [ 856.501590][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.510064][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.518557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.530388][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 856.584540][T20128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.612778][T30234] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.624963][T30234] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.632307][T30234] bridge_slave_0: entered allmulticast mode [ 856.654695][T30234] bridge_slave_0: entered promiscuous mode [ 856.684097][T30234] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.717827][T30234] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.746488][T30234] bridge_slave_1: entered allmulticast mode [ 856.772344][T30234] bridge_slave_1: entered promiscuous mode [ 856.903244][ T5635] Bluetooth: hci5: command tx timeout [ 857.008697][T30432] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6034'. [ 857.095911][T30234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.170911][T30234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.284489][T30441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6036'. [ 857.326373][T30441] ip6gre2: entered promiscuous mode [ 857.337255][T30441] ip6gre2: entered allmulticast mode [ 857.357362][T30234] team0: Port device team_slave_0 added [ 857.370122][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5 [ 857.395588][T30234] team0: Port device team_slave_1 added [ 857.564225][T30234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.598119][T30234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.671511][T30234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.693470][T30234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.711961][T30234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.750868][T30234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.769869][T30455] netlink: 'syz.0.6038': attribute type 361 has an invalid length. [ 857.796784][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 858.023116][T14414] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 858.114450][T30234] hsr_slave_0: entered promiscuous mode [ 858.143390][T30234] hsr_slave_1: entered promiscuous mode [ 858.169181][T30234] debugfs: 'hsr0' already exists in 'hsr' [ 858.181523][T30234] Cannot create hsr debugfs directory [ 858.192950][T30470] syzkaller0: entered promiscuous mode [ 858.204387][T30470] syzkaller0: entered allmulticast mode [ 858.684093][T14427] hsr_slave_0: left promiscuous mode [ 858.699656][T14427] hsr_slave_1: left promiscuous mode [ 858.714004][T14427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 858.721892][T30505] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6046'. [ 858.732606][T14427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.781185][T14427] veth0_macvtap: left promiscuous mode [ 858.864722][T30515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6045'. [ 858.987608][ T5635] Bluetooth: hci5: command tx timeout [ 859.199940][T30521] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6048'. [ 861.621647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.630055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.638558][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.652855][T14427] team0 (unregistering): Port device team_slave_1 removed [ 862.669175][T14427] team0 (unregistering): Port device team_slave_0 removed [ 862.799987][T14427] team0 (unregistering): Port device dummy0 removed [ 862.855132][T14414] smbdirect: ib_dev[syú2] removed [ 862.888888][T29885] lo speed is unknown, defaulting to 1000 [ 862.900290][ T5294] 8021q: adding VLAN 0 to HW filter on device eth6 [ 862.907725][T29885] infiniband syú2: ib_query_port failed (-19) [ 862.927791][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 863.202329][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 863.395683][T30548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6053'. [ 863.527729][T30547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6053'. [ 863.558230][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 863.602639][T14427] IPVS: stop unused estimator thread 0... [ 863.695709][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 863.874324][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 864.071688][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 864.360225][T30591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6060'. [ 864.472541][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 864.765612][T30234] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 864.825469][T30234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 864.877590][T30234] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 864.913021][T30234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 864.921055][T30234] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 864.967432][T30234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 865.046085][T30234] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 865.109489][T30234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 865.229891][T30639] x_tables: duplicate underflow at hook 1 [ 865.385954][T30234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.460415][T30234] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.514217][T14427] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.521482][T14427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.640363][T30652] bridge0: port 3(dummy0) entered disabled state [ 865.659235][T30655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6070'. [ 865.715475][T30652] bridge_slave_0: left allmulticast mode [ 865.721901][T30652] bridge_slave_0: left promiscuous mode [ 865.728876][T30655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6070'. [ 865.749148][T30652] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.771556][T30668] netlink: 'syz.1.6069': attribute type 10 has an invalid length. [ 865.796141][T30652] bridge_slave_1: left allmulticast mode [ 865.856419][T30652] bridge_slave_1: left promiscuous mode [ 865.872156][T30652] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.896376][T30674] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6073'. [ 865.909158][T30652] bond0: (slave bond_slave_0): Releasing backup interface [ 865.922479][T30652] team0: Port device team_slave_0 removed [ 865.933690][T30652] team0: Port device team_slave_1 removed [ 865.940155][T30652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.952254][T14414] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.959486][T14414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.979739][T30656] syzkaller1: entered promiscuous mode [ 865.985706][T30656] syzkaller1: entered allmulticast mode [ 866.701901][ T92] net_ratelimit: 15 callbacks suppressed [ 866.701922][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 866.828701][T30708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6078'. [ 866.876553][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 867.012761][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 867.149462][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 867.271238][T30730] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6083'. [ 867.483451][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 867.625097][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 867.761431][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 867.895912][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 867.988657][T30234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.057115][T30757] syzkaller1: entered promiscuous mode [ 868.076917][T30757] syzkaller1: entered allmulticast mode [ 868.133464][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 868.256109][T30234] veth0_vlan: entered promiscuous mode [ 868.295425][T30234] veth1_vlan: entered promiscuous mode [ 868.322433][T14414] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 868.375819][T30234] veth0_macvtap: entered promiscuous mode [ 868.405781][T30234] veth1_macvtap: entered promiscuous mode [ 868.462856][T30234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.498609][T30234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.554387][T14414] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.651669][T14414] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.671177][T30777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6094'. [ 868.677422][T14414] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.860815][T14414] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.909663][T30785] syzkaller1: entered promiscuous mode [ 868.924628][T30785] syzkaller1: entered allmulticast mode [ 869.101211][T30794] vlan2: entered promiscuous mode [ 869.123019][T30794] bridge0: entered promiscuous mode [ 869.213733][T30794] netlink: 'syz.3.6096': attribute type 4 has an invalid length. [ 869.458261][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.492569][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.574635][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.627874][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.258900][T30818] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 870.542982][T21833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 870.557768][T21833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 870.567532][T21833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 870.584287][T21833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 870.593686][T21833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 870.695104][T30857] tipc: Started in network mode [ 870.733071][T30857] tipc: Node identity ac14140f, cluster identity 4711 [ 870.769985][T30857] tipc: New replicast peer: 255.255.255.255 [ 870.793153][T30857] tipc: Enabled bearer , priority 26 [ 871.192794][T30881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6109'. [ 871.284870][T30886] netlink: 'syz.4.6111': attribute type 1 has an invalid length. [ 871.394993][T30886] bond17: entered promiscuous mode [ 871.412645][T30886] 8021q: adding VLAN 0 to HW filter on device bond17 [ 871.565810][T30890] macvtap4: entered allmulticast mode [ 871.626646][T30912] bond17: (slave bridge9): making interface the new active one [ 871.667028][T30912] bridge9: entered promiscuous mode [ 871.698696][T30912] bond17: (slave bridge9): Enslaving as an active interface with an up link [ 871.712854][T14428] net_ratelimit: 21 callbacks suppressed [ 871.712871][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 871.760259][T30919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6114'. [ 871.769686][T30919] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 871.813528][T30920] netlink: 'syz.1.6115': attribute type 3 has an invalid length. [ 871.845079][T30920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6115'. [ 871.861699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.870287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.878723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.888506][T14414] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 871.939929][T27940] tipc: Node number set to 2886997007 [ 872.121527][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 872.271780][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 872.484819][T30851] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.492372][T30851] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.499744][T30851] bridge_slave_0: entered allmulticast mode [ 872.508531][T30851] bridge_slave_0: entered promiscuous mode [ 872.518799][T30851] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.526300][T30851] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.534263][T30851] bridge_slave_1: entered allmulticast mode [ 872.543414][T30851] bridge_slave_1: entered promiscuous mode [ 872.596219][T30851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.613491][T30851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.651450][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 872.662086][ T5635] Bluetooth: hci2: command tx timeout [ 872.675594][T30851] team0: Port device team_slave_0 added [ 872.684918][T30851] team0: Port device team_slave_1 added [ 872.718653][T30851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.728911][T30851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.755958][T30851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.772222][T30851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.779377][T30851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.808732][T30851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.868374][T30851] hsr_slave_0: entered promiscuous mode [ 872.875452][T30851] hsr_slave_1: entered promiscuous mode [ 872.882336][T30851] debugfs: 'hsr0' already exists in 'hsr' [ 872.888279][T30851] Cannot create hsr debugfs directory [ 873.042351][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 873.082540][T30851] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.132541][T30851] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.215938][T30851] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.262880][T30851] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.284856][T30886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 874.361834][T30851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 874.430355][T30851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 874.463984][T30851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 874.520663][T30851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 874.569251][T30851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 874.630763][T30851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 874.659943][T30851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 874.706292][T30851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 874.742834][ T5635] Bluetooth: hci2: command tx timeout [ 875.174990][T31041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6124'. [ 875.193441][T30851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.342532][T30851] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.409991][T31047] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6125'. [ 875.429204][T14427] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.436474][T14427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.478850][T14427] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.486076][T14427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.065378][T31062] 8021q: adding VLAN 0 to HW filter on device bond13 [ 876.074439][T31070] netlink: 'syz.2.6131': attribute type 13 has an invalid length. [ 876.107280][T31070] netlink: 'syz.2.6131': attribute type 17 has an invalid length. [ 876.128820][T31072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6131'. [ 876.826255][ T5635] Bluetooth: hci2: command tx timeout [ 876.859419][T31080] netlink: 'syz.3.6132': attribute type 1 has an invalid length. [ 876.870796][T31093] netlink: 'syz.1.6133': attribute type 1 has an invalid length. [ 876.881717][T31093] netlink: 'syz.1.6133': attribute type 1 has an invalid length. [ 876.901766][ C1] net_ratelimit: 20 callbacks suppressed [ 876.901782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.914950][T31093] netlink: 264 bytes leftover after parsing attributes in process `syz.1.6133'. [ 876.916710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.959542][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6133'. [ 877.014158][T31093] netlink: 'syz.1.6133': attribute type 1 has an invalid length. [ 877.044538][T31093] netlink: 'syz.1.6133': attribute type 1 has an invalid length. [ 877.071644][T31093] netlink: 264 bytes leftover after parsing attributes in process `syz.1.6133'. [ 877.091233][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6133'. [ 877.325398][T31106] syzkaller0: entered promiscuous mode [ 877.331080][T31106] syzkaller0: entered allmulticast mode [ 877.363160][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 877.377811][T31116] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6137'. [ 877.393897][T31116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6137'. [ 878.907488][ T5635] Bluetooth: hci2: command tx timeout [ 879.366441][ T29] audit: type=1804 audit(1780204210.005:15): pid=31126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6138" name="/newroot/603/cgroup.controllers" dev="tmpfs" ino=3113 res=1 errno=0 [ 879.385165][T31126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6138'. [ 879.399416][ T29] audit: type=1800 audit(1780204210.005:16): pid=31126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6138" name="cgroup.controllers" dev="tmpfs" ino=3113 res=0 errno=0 [ 879.428751][ T29] audit: type=1804 audit(1780204210.015:17): pid=31126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.6138" name="/newroot/603/cgroup.controllers" dev="tmpfs" ino=3113 res=1 errno=0 [ 879.781214][T31124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 879.852015][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 879.992573][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 880.093192][T30851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.181613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.190212][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.310787][T31171] __nla_validate_parse: 2 callbacks suppressed [ 880.310806][T31171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6147'. [ 880.327774][T31167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6147'. [ 880.555838][T31173] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.563398][T31173] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.753215][T31173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 880.772597][T31173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 880.900114][T31195] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6154'. [ 880.981854][T21833] Bluetooth: hci2: command tx timeout [ 881.033976][T31200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6156'. [ 881.043321][T31200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6156'. [ 881.108237][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.123602][T31201] dvmrp0: left allmulticast mode [ 881.141208][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.158238][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.227123][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.243342][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 881.300897][T30851] veth0_vlan: entered promiscuous mode [ 881.337119][T30851] veth1_vlan: entered promiscuous mode [ 881.412609][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 881.446096][T31210] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6159'. [ 881.469576][T30851] veth0_macvtap: entered promiscuous mode [ 881.497026][T30851] veth1_macvtap: entered promiscuous mode [ 881.557561][T30851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.605968][T30851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.651456][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.674430][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.688948][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.710472][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.900400][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.929974][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.026545][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.037975][T14427] net_ratelimit: 1 callbacks suppressed [ 882.037993][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 882.049824][T31231] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6166'. [ 882.067695][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.094012][T31231] netlink: 'syz.3.6166': attribute type 11 has an invalid length. [ 882.185381][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 882.311844][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 882.431393][T14414] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 882.487875][T31248] openvswitch: netlink: Multiple metadata blocks provided [ 882.551405][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 882.601668][T30853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 882.623651][T30853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 882.633210][T30853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 882.655710][T30853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 882.669398][T30853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 882.725311][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 882.871477][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 883.011546][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 883.032253][T31265] netlink: 'syz.2.6172': attribute type 21 has an invalid length. [ 883.053826][T31265] IPv6: NLM_F_CREATE should be specified when creating new route [ 883.064646][T21833] Bluetooth: hci2: command 0x0405 tx timeout [ 883.144487][T31265] vlan2: entered promiscuous mode [ 883.190738][T31265] bridge0: entered promiscuous mode [ 883.254614][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 883.358610][T31273] syzkaller0: entered promiscuous mode [ 883.372157][T31273] syzkaller0: entered allmulticast mode [ 883.393021][T31273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6174'. [ 883.968638][T31300] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.6182'. [ 884.751629][T21833] Bluetooth: hci1: command tx timeout [ 885.325643][T31317] netlink: 'syz.0.6184': attribute type 1 has an invalid length. [ 885.334236][T31317] netlink: 'syz.0.6184': attribute type 2 has an invalid length. [ 885.450423][T31322] netlink: 774 bytes leftover after parsing attributes in process `syz.1.6186'. [ 885.614150][T31328] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6187'. [ 885.937605][T31249] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.945607][T31249] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.953726][T31249] bridge_slave_0: entered allmulticast mode [ 885.965822][T31249] bridge_slave_0: entered promiscuous mode [ 885.984306][T31249] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.997075][T31249] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.005112][T31249] bridge_slave_1: entered allmulticast mode [ 886.013252][T31249] bridge_slave_1: entered promiscuous mode [ 886.060135][T31249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.074000][T31249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.329369][T31249] team0: Port device team_slave_0 added [ 886.354448][T31362] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6195'. [ 886.365683][T31362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6195'. [ 886.376577][T31362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6195'. [ 886.386181][T31366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6197'. [ 886.417352][T31249] team0: Port device team_slave_1 added [ 886.608439][T31249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.621457][T31249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.641573][T31372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6198'. [ 886.691516][T31249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.718908][T31249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.745272][T31249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.796474][T31377] netlink: 18 bytes leftover after parsing attributes in process `syz.0.6199'. [ 886.806301][T31249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.820991][T31377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6199'. [ 886.831985][T21833] Bluetooth: hci1: command tx timeout [ 886.978142][T31249] hsr_slave_0: entered promiscuous mode [ 886.985602][T31249] hsr_slave_1: entered promiscuous mode [ 886.995504][T31249] debugfs: 'hsr0' already exists in 'hsr' [ 887.002231][T31249] Cannot create hsr debugfs directory [ 887.131873][T14429] net_ratelimit: 11 callbacks suppressed [ 887.131894][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 887.363030][T14414] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 887.467744][T31396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6204'. [ 887.511605][T14414] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 887.861825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.870407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.988714][T31396] bridge_slave_0 (unregistering): left allmulticast mode [ 887.999938][T31396] bridge_slave_0 (unregistering): left promiscuous mode [ 888.024762][T31396] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.343584][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 888.672336][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 888.801596][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 888.902020][T21833] Bluetooth: hci1: command tx timeout [ 889.042154][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 889.211462][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 889.265508][T31430] nbd: nbd64 already in use [ 889.301345][T30800] block nbd64: NBD_DISCONNECT [ 889.446119][T31249] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 889.505964][T31249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 889.545328][T31249] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 889.626522][T31249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 889.658362][T31249] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 889.747842][T31249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 889.765829][T30800] udevd[30800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 889.786735][T31249] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 889.846154][T31249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 890.187847][T31249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.269159][T31249] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.305235][T14430] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.312507][T14430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.376419][T14430] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.383688][T14430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.517222][T31484] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 890.600784][T31484] bond1: (slave lo): Enslaving as an active interface with an up link [ 890.981591][T21833] Bluetooth: hci1: command tx timeout [ 891.350875][T31514] netlink: 'syz.2.6221': attribute type 1 has an invalid length. [ 891.379827][T31514] __nla_validate_parse: 6 callbacks suppressed [ 891.379844][T31514] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6221'. [ 891.468319][T31514] netlink: 'syz.2.6221': attribute type 1 has an invalid length. [ 891.505500][T31514] netlink: 634 bytes leftover after parsing attributes in process `syz.2.6221'. [ 891.633310][T31517] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6222'. [ 891.717899][T31524] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6223'. [ 891.758311][T31521] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 891.787535][T31531] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6222'. [ 891.813142][T31521] bond1 (unregistering): Released all slaves [ 891.998080][T31517] erspan0: entered promiscuous mode [ 892.065955][T31517] ip6gretap0: entered promiscuous mode [ 892.089272][T31517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.143134][T14414] net_ratelimit: 13 callbacks suppressed [ 892.143152][T14414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.160289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.172379][T14430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.180803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.193041][T14414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.203608][T20139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.214538][T29885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.229862][T14428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.240915][T29857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.257618][T27939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.338934][T31517] veth1_vlan: left promiscuous mode [ 892.353636][T31517] veth0_vlan: left promiscuous mode [ 892.359819][T31517] veth0_vlan: entered promiscuous mode [ 892.380205][T31517] veth1_vlan: entered promiscuous mode [ 892.392647][T31517] veth1_macvtap: left promiscuous mode [ 892.408929][T31517] veth0_macvtap: left promiscuous mode [ 892.428086][T31517] veth0_macvtap: entered promiscuous mode [ 892.802675][T31249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.093520][T31249] veth0_vlan: entered promiscuous mode [ 893.176573][T31249] veth1_vlan: entered promiscuous mode [ 893.344005][T31249] veth0_macvtap: entered promiscuous mode [ 893.362428][T31592] xt_hashlimit: size too large, truncated to 1048576 [ 893.450053][T31592] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 893.526532][T31249] veth1_macvtap: entered promiscuous mode [ 893.613579][T31249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 893.670239][T31249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 893.743644][T14428] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.795700][T14428] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.839541][T14428] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.868863][T14428] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.146216][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.178346][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.229206][T31616] xt_hashlimit: size too large, truncated to 1048576 [ 894.247011][T14428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.283113][T14428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.888376][T31643] netlink: 'syz.0.6243': attribute type 2 has an invalid length. [ 894.910581][T31643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6243'. [ 895.347189][T31670] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 895.363476][T31672] nbd: couldn't find a device at index 0 [ 895.712465][T31693] veth1_to_bond: entered allmulticast mode [ 895.729863][T31693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6255'. [ 895.759200][T31693] veth1_to_bond (unregistering): left allmulticast mode [ 895.786054][T31699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6255'. [ 895.814957][T31699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6255'. [ 895.934923][T31693] bond0: (slave bond_slave_1): Releasing backup interface [ 896.037637][T31711] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6260'. [ 896.413289][T31726] syzkaller0: entered promiscuous mode [ 896.421485][T31726] syzkaller0: entered allmulticast mode [ 896.693012][T31742] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6267'. [ 897.174964][ T57] net_ratelimit: 36 callbacks suppressed [ 897.174986][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 897.212389][T31772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6272'. [ 897.428187][T31790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6273'. [ 897.445935][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 897.467157][T29857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.542677][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.551633][T20127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.561528][T14429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.569650][T14429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.579408][T14428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.591234][T20151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.602554][T29857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.965345][T31811] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.6278'. [ 898.235358][T31817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6280'. [ 898.281671][T31817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6280'. [ 898.389673][T31821] syzkaller0: entered promiscuous mode [ 898.405881][T31821] syzkaller0: entered allmulticast mode [ 898.460519][T31821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6281'. [ 898.639858][T31834] netlink: 'syz.3.6284': attribute type 1 has an invalid length. [ 898.724623][T31838] SET target dimension over the limit! [ 898.755355][T31838] netlink: 23 bytes leftover after parsing attributes in process `syz.3.6284'. [ 899.139932][T31864] netlink: 'syz.4.6288': attribute type 4 has an invalid length. [ 899.169353][T31864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6288'. [ 899.399462][T31878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6293'. [ 899.424071][T31878] ip6tnl4: entered allmulticast mode [ 899.466337][T14429] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 899.698950][T31891] IPVS: set_ctl: invalid protocol: 8 172.30.0.5:20000 [ 899.788553][T31897] .30ªî{X¹¦: renamed from gretap0 (while UP) [ 899.818613][T31897] .30ªî{X¹¦: entered allmulticast mode [ 899.857842][T31897] .31ªî{X¹¦: renamed from .30ªî{X¹¦ (while UP) [ 900.219788][T31912] RDS: rds_bind could not find a transport for 0:b3::, load rds_tcp or rds_rdma? [ 901.175880][T31972] unsupported nlmsg_type 40 [ 901.404726][T31978] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.412543][T31978] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.643398][T31978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.659510][T31978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.718582][T32011] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 901.818090][T31984] __nla_validate_parse: 4 callbacks suppressed [ 901.818134][T31984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6314'. [ 901.931703][T14435] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.003844][T14435] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.039904][T14435] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.052536][T32026] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6325'. [ 902.087456][T14435] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.128283][T32026] netlink: 'syz.2.6325': attribute type 4 has an invalid length. [ 902.180011][T32037] netlink: 'syz.2.6325': attribute type 4 has an invalid length. [ 902.302393][ T57] net_ratelimit: 29 callbacks suppressed [ 902.302424][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 902.474742][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 902.621493][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 902.752078][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 902.824367][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.891680][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 902.988424][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 903.006073][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 903.024699][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 903.032479][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 903.046359][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 903.057593][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 903.204131][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 903.221519][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 903.305463][T14427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.314500][T14428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.337892][T32076] IPVS: length: 172 != 8 [ 903.446251][T32080] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 903.491936][T32080] CPU: 1 UID: 0 PID: 32080 Comm: syz.0.6335 Not tainted syzkaller #0 PREEMPT(full) [ 903.491960][T32080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 903.491971][T32080] Call Trace: [ 903.491978][T32080] [ 903.491986][T32080] dump_stack_lvl+0xe8/0x150 [ 903.492015][T32080] sysfs_warn_dup+0x8e/0xa0 [ 903.492038][T32080] sysfs_do_create_link_sd+0xc0/0x110 [ 903.492062][T32080] device_add_class_symlinks+0x1cf/0x240 [ 903.492094][T32080] device_add+0x475/0xbb0 [ 903.492122][T32080] wiphy_register+0x1fb1/0x2fe0 [ 903.492165][T32080] ? __pfx_wiphy_register+0x10/0x10 [ 903.492189][T32080] ? __pfx_netdev_run_todo+0x10/0x10 [ 903.492212][T32080] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 903.492239][T32080] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 903.492270][T32080] ieee80211_register_hw+0x3c53/0x4910 [ 903.492302][T32080] ? ieee80211_register_hw+0x1971/0x4910 [ 903.492345][T32080] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 903.492365][T32080] ? __asan_memset+0x22/0x50 [ 903.492387][T32080] ? __hrtimer_setup+0x1b7/0x260 [ 903.492408][T32080] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 903.492431][T32080] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 903.492476][T32080] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 903.492496][T32080] ? __asan_memcpy+0x40/0x70 [ 903.492522][T32080] hwsim_new_radio_nl+0xd96/0xfa0 [ 903.492553][T32080] genl_family_rcv_msg_doit+0x22a/0x330 [ 903.492585][T32080] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 903.492620][T32080] ? bpf_lsm_capable+0x9/0x20 [ 903.492637][T32080] ? security_capable+0x7e/0x2c0 [ 903.492668][T32080] genl_rcv_msg+0x61c/0x7a0 [ 903.492697][T32080] ? __pfx_genl_rcv_msg+0x10/0x10 [ 903.492719][T32080] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 903.492748][T32080] netlink_rcv_skb+0x232/0x4b0 [ 903.492768][T32080] ? __pfx_genl_rcv_msg+0x10/0x10 [ 903.492820][T32080] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 903.492856][T32080] ? down_read+0x270/0x2e0 [ 903.492876][T32080] ? genl_rcv+0xd/0x40 [ 903.492901][T32080] genl_rcv+0x28/0x40 [ 903.492923][T32080] netlink_unicast+0x75c/0x8e0 [ 903.492952][T32080] netlink_sendmsg+0x813/0xb40 [ 903.492982][T32080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 903.493006][T32080] ? aa_sock_msg_perm+0xf1/0x1b0 [ 903.493035][T32080] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 903.493062][T32080] ____sys_sendmsg+0x972/0x9f0 [ 903.493084][T32080] ? __might_fault+0xaf/0x130 [ 903.493113][T32080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 903.493143][T32080] ? import_iovec+0x73/0xa0 [ 903.493169][T32080] ___sys_sendmsg+0x2a5/0x360 [ 903.493195][T32080] ? __pfx____sys_sendmsg+0x10/0x10 [ 903.493222][T32080] ? futex_wait+0x2a2/0x390 [ 903.493283][T32080] ? call_rcu+0x644/0x890 [ 903.493316][T32080] __x64_sys_sendmsg+0x1bd/0x2a0 [ 903.493337][T32080] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 903.493365][T32080] ? rcu_is_watching+0x15/0xb0 [ 903.493393][T32080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.493416][T32080] do_syscall_64+0x174/0x580 [ 903.493433][T32080] ? trace_irq_disable+0x3b/0x140 [ 903.493458][T32080] ? clear_bhb_loop+0x40/0x90 [ 903.493479][T32080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.493494][T32080] RIP: 0033:0x7fd45af9ce59 [ 903.493510][T32080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.493525][T32080] RSP: 002b:00007fd45bd9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 903.493542][T32080] RAX: ffffffffffffffda RBX: 00007fd45b215fa0 RCX: 00007fd45af9ce59 [ 903.493554][T32080] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 903.493565][T32080] RBP: 00007fd45b032d6f R08: 0000000000000000 R09: 0000000000000000 [ 903.493575][T32080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 903.493584][T32080] R13: 00007fd45b216038 R14: 00007fd45b215fa0 R15: 00007ffddec78de8 [ 903.493612][T32080] [ 903.897556][T32091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6337'. [ 904.068204][T32095] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 904.107660][T32094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6338'. [ 904.205853][T14435] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.405313][T14435] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.685433][T14435] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.844589][T14435] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.889200][T32136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6344'. [ 904.979962][T32147] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6345'. [ 905.070654][T32149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6345'. [ 905.085488][T32147] : renamed from bond0 [ 905.124214][T32155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6345'. [ 905.142282][T21833] Bluetooth: hci3: command tx timeout [ 905.302654][T32149] team1: entered promiscuous mode [ 905.321681][T32149] team1: entered allmulticast mode [ 905.334116][T32149] 8021q: adding VLAN 0 to HW filter on device team1 [ 905.363124][T32155] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 905.438304][T32162] netlink: 'syz.2.6347': attribute type 1 has an invalid length. [ 905.459499][T32155] team2: entered promiscuous mode [ 905.469509][T32162] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6347'. [ 905.479129][T32155] team2: entered allmulticast mode [ 905.492370][T32155] 8021q: adding VLAN 0 to HW filter on device team2 [ 905.732907][T32175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6350'. [ 906.910588][T14435] bond7 (unregistering): (slave gretap1): Releasing backup interface [ 906.998449][T32231] __nla_validate_parse: 2 callbacks suppressed [ 906.998470][T32231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6361'. [ 907.036529][T14435] bond10 (unregistering): (slave geneve3): Releasing active interface [ 907.115516][T14435] bond11 (unregistering): (slave bridge5): Releasing backup interface [ 907.124500][T14435] bridge5 (unregistering): left promiscuous mode [ 907.143890][T14435] bond12 (unregistering): (slave bridge7): Releasing backup interface [ 907.183831][T14435] bond17 (unregistering): (slave bridge9): Releasing backup interface [ 907.195700][T14435] bridge9 (unregistering): left promiscuous mode [ 907.221794][T21833] Bluetooth: hci3: command tx timeout [ 907.229635][T14435] bond0 (unregistering): Released all slaves [ 907.244043][T14435] bond1 (unregistering): Released all slaves [ 907.261953][T14435] bond2 (unregistering): Released all slaves [ 907.279335][T14435] bond3 (unregistering): Released all slaves [ 907.304226][T14435] bond4 (unregistering): Released all slaves [ 907.326721][T14435] bond5 (unregistering): Released all slaves [ 907.344255][T14435] bond6 (unregistering): Released all slaves [ 907.363697][T14435] bond7 (unregistering): (slave bond8): Releasing backup interface [ 907.372783][T14435] bond7 (unregistering): Released all slaves [ 907.389360][T14435] bond8 (unregistering): Released all slaves [ 907.418711][T14435] bond9 (unregistering): Released all slaves [ 907.437066][T14435] bond10 (unregistering): Released all slaves [ 907.469166][T14435] bond11 (unregistering): Released all slaves [ 907.497732][T14435] bond12 (unregistering): Released all slaves [ 907.516113][T14435] bond13 (unregistering): (slave veth5): Releasing active interface [ 907.525541][T14435] bond13 (unregistering): Released all slaves [ 907.553001][T14435] bond14 (unregistering): Released all slaves [ 907.569637][T14435] bond15 (unregistering): Released all slaves [ 907.587270][T14435] bond16 (unregistering): Released all slaves [ 907.615094][T14435] bond17 (unregistering): Released all slaves [ 907.692246][T14429] net_ratelimit: 14 callbacks suppressed [ 907.692263][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 907.837329][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 907.996804][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 908.042973][T32249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6366'. [ 908.053938][T32240] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6363'. [ 908.318854][T14435] tipc: Left network mode [ 908.588475][T32273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6369'. [ 909.132717][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 909.159547][T32064] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.191233][T32064] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.219736][T32064] bridge_slave_0: entered allmulticast mode [ 909.239336][T32064] bridge_slave_0: entered promiscuous mode [ 909.300061][ T5294] veth0_vlan: left promiscuous mode [ 909.308004][T21833] Bluetooth: hci3: command tx timeout [ 909.385819][ T5294] veth0_vlan: entered promiscuous mode [ 909.494292][T32064] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.515771][T32064] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.536020][T32064] bridge_slave_1: entered allmulticast mode [ 909.561061][T32064] bridge_slave_1: entered promiscuous mode [ 910.297459][T32293] tipc: Started in network mode [ 910.302764][T32293] tipc: Node identity c27f11780d47, cluster identity 4711 [ 910.320872][T32293] tipc: Enabled bearer , priority 0 [ 910.340484][T32299] netlink: 'syz.3.6373': attribute type 9 has an invalid length. [ 910.359650][T32301] tipc: Resetting bearer [ 910.373431][T32296] syzkaller0: entered promiscuous mode [ 910.389223][T32296] syzkaller0: entered allmulticast mode [ 910.415645][T32064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.453248][T32288] tipc: Resetting bearer [ 910.525020][T32288] tipc: Disabling bearer [ 910.703154][T32064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.789420][T32312] netlink: 504 bytes leftover after parsing attributes in process `syz.1.6376'. [ 910.825691][T32312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6376'. [ 910.864238][T32317] netlink: 'syz.3.6378': attribute type 1 has an invalid length. [ 910.875500][T32316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6378'. [ 910.994540][T32317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 911.044546][T32064] team0: Port device team_slave_0 added [ 911.096621][T32064] team0: Port device team_slave_1 added [ 911.323776][T32064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.353715][T32064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.397970][T21833] Bluetooth: hci3: command tx timeout [ 911.426658][T32064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.466172][T32064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.474334][T32064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.501935][T32064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.695856][T32352] netlink: 'syz.1.6384': attribute type 2 has an invalid length. [ 911.735492][T32345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6384'. [ 912.077119][T14435] veth0_macvtap: left promiscuous mode [ 912.086586][T14435] veth1_vlan: left promiscuous mode [ 912.097678][T14435] veth0_vlan: left promiscuous mode [ 912.111644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.683044][T32064] hsr_slave_0: entered promiscuous mode [ 912.689463][T32064] hsr_slave_1: entered promiscuous mode [ 912.696389][T32064] debugfs: 'hsr0' already exists in 'hsr' [ 912.702256][T32064] Cannot create hsr debugfs directory [ 912.744474][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 912.773520][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 912.929278][T32381] Bluetooth: MGMT ver 1.23 [ 912.971646][T32383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6390'. [ 912.996665][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 913.154078][T32391] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6392'. [ 913.224643][T32395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6392'. [ 913.401920][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 913.461824][T21833] Bluetooth: hci3: command tx timeout [ 913.533310][T14414] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 913.682173][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 913.910715][ T29] audit: type=1800 audit(1780204244.555:18): pid=32384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6388" name="memory.events" dev="tmpfs" ino=223 res=0 errno=0 [ 914.131897][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 914.189044][T20151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.355983][T14435] IPVS: stop unused estimator thread 0... [ 914.361965][T14414] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 914.475655][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 914.649614][T32433] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6399'. [ 914.669664][T14427] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 914.925736][T32439] pim6reg: entered allmulticast mode [ 915.002901][T32444] pim6reg: left allmulticast mode [ 915.051886][T14435] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 915.355203][T32466] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6405'. [ 915.488752][T32475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6407'. [ 915.678720][T32487] x_tables: duplicate entry at hook 2 [ 915.788613][T32475] bridge0: entered promiscuous mode [ 915.882769][T32064] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 915.892618][T32490] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6409'. [ 915.913208][T32064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 915.922281][T32064] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 915.935555][T32064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 915.950127][T32064] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 915.972612][T32064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 915.991875][T32064] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 916.040624][T32064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 916.367821][T32064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.439278][T32064] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.483820][T14427] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.491019][T14427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.566825][T14435] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.574091][T14435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.701738][T32519] netlink: 'syz.2.6416': attribute type 1 has an invalid length. [ 916.709539][T32519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6416'. [ 916.833358][T32528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6416'. [ 916.860725][T32530] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 917.571842][T32575] : renamed from bond0 [ 917.598618][T32575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6428'. [ 917.735922][T32575] team1: entered promiscuous mode [ 917.753338][T32575] team1: entered allmulticast mode [ 917.774078][T32575] 8021q: adding VLAN 0 to HW filter on device team1 [ 917.818250][T32581] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 917.899072][T32589] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 917.928713][T32581] team2: entered promiscuous mode [ 917.940205][T32581] team2: entered allmulticast mode [ 917.952372][T32581] 8021q: adding VLAN 0 to HW filter on device team2 [ 918.153445][T32609] __nla_validate_parse: 2 callbacks suppressed [ 918.153479][T32609] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6433'. [ 918.174129][ T92] net_ratelimit: 18 callbacks suppressed [ 918.174149][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 918.310189][T32064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.599173][T32609] syzkaller0: entered promiscuous mode [ 918.631437][T32609] syzkaller0: entered allmulticast mode [ 918.652104][T14435] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 919.409673][T32648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6438'. [ 921.151723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.160231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.168784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.661554][T32667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6440'. [ 921.792354][T32649] bridge1: port 1(gretap1) entered blocking state [ 921.818756][T32649] bridge1: port 1(gretap1) entered disabled state [ 921.838544][T32649] gretap1: entered allmulticast mode [ 921.849691][T32649] gretap1: entered promiscuous mode [ 921.885537][T32657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6440'. [ 921.924199][T32661] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6440'. [ 921.992620][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 922.052664][T32689] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 922.112655][T32064] veth0_vlan: entered promiscuous mode [ 922.140854][T32064] veth1_vlan: entered promiscuous mode [ 922.213150][T32693] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6447'. [ 922.244058][T32697] syzkaller1: entered promiscuous mode [ 922.249662][T32697] syzkaller1: entered allmulticast mode [ 922.257497][T32064] veth0_macvtap: entered promiscuous mode [ 922.291367][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 922.333221][T32064] veth1_macvtap: entered promiscuous mode [ 922.399014][T32064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.423313][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 922.432478][T32701] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6450'. [ 922.446050][T32064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.472044][T14414] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.481113][T14414] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.495588][T14414] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.506236][T14414] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.517956][T32701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6450'. [ 922.624254][T32707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6450'. [ 922.652216][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 922.791962][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 922.881643][T14430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.908758][T14430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.971172][T14428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.997665][T14428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.168248][T32730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6327'. [ 923.242107][T14430] net_ratelimit: 2 callbacks suppressed [ 923.242129][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 923.382496][T32739] netlink: 'syz.3.6460': attribute type 2 has an invalid length. [ 923.401911][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 923.522584][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 923.641439][T14414] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 923.761409][T14414] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 923.787489][T20127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.883132][T14414] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 923.901895][ T311] tipc: Invalid UDP bearer configuration [ 923.901965][ T311] tipc: Enabling of bearer rejected, failed to enable media [ 923.933818][ T313] netlink: 'syz.1.6473': attribute type 1 has an invalid length. [ 923.947521][ T313] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6473'. [ 923.960244][ T313] netlink: 658 bytes leftover after parsing attributes in process `syz.1.6473'. [ 923.981872][ T313] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6473'. [ 924.001633][T14414] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 924.057361][ T310] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 924.089083][ T311] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6470'. [ 924.142073][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 924.179394][ T319] syzkaller0: entered promiscuous mode [ 924.192499][ T319] syzkaller0: entered allmulticast mode [ 924.589248][ T333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6479'. [ 924.702225][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 925.072799][ T365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6486'. [ 925.076702][ T360] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.6485'. [ 925.159376][T14430] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.183191][T14430] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.215587][T14430] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.256503][T14430] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.475283][ T385] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6491'. [ 926.593243][ T437] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 926.954878][ T460] vlan0: entered promiscuous mode [ 927.176114][ T472] netlink: 'syz.0.6509': attribute type 1 has an invalid length. [ 927.227732][ T472] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6509'. [ 928.123659][ T514] pim6reg: entered allmulticast mode [ 928.152856][ T521] pim6reg: left allmulticast mode [ 928.206757][ T519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6519'. [ 928.244128][ T519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6519'. [ 928.301537][ T519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6519'. [ 928.324682][ T519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6519'. [ 928.337580][ T519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6519'. [ 928.348624][ T519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6519'. [ 928.358191][ T519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6519'. [ 928.374567][ T519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6519'. [ 928.389559][ T519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6519'. [ 928.402743][ T519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6519'. [ 928.422368][T21833] Bluetooth: hci4: command 0x0405 tx timeout [ 928.441460][ T92] net_ratelimit: 24 callbacks suppressed [ 928.441477][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 928.591687][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 928.721993][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 928.823728][ T546] veth1_to_bond: entered allmulticast mode [ 928.921437][ T546] veth1_to_bond (unregistering): left allmulticast mode [ 928.937789][ T546] bond0: (slave bond_slave_1): Releasing backup interface [ 928.973060][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 929.170181][ T561] bond2: option lp_interval: invalid value (0) [ 929.198890][ T561] bond2: option lp_interval: allowed values 1 - 2147483647 [ 929.237181][ T561] bond2 (unregistering): Released all slaves [ 929.340093][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 929.463206][T14414] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 929.591797][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 929.722102][ T92] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 929.921496][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 929.992228][ T618] netlink: 'syz.3.6544': attribute type 1 has an invalid length. [ 930.012832][ T615] syzkaller0: entered promiscuous mode [ 930.013502][ T618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.030217][ T615] syzkaller0: entered allmulticast mode [ 930.217907][ T627] netlink: 'syz.3.6548': attribute type 4 has an invalid length. [ 930.440765][ T635] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 930.469806][ T635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 931.172890][ T679] geneve2: entered promiscuous mode [ 931.191713][ T679] geneve2: entered allmulticast mode [ 931.268537][ T685] hsr_slave_1 (unregistering): left promiscuous mode [ 931.511128][ T694] x_tables: duplicate underflow at hook 2 [ 933.532510][ T48] net_ratelimit: 37 callbacks suppressed [ 933.532532][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 933.652153][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 933.761517][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 933.871456][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 933.981876][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 934.091542][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 934.201490][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 934.311506][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 934.422016][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 934.531450][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 938.621565][T14430] net_ratelimit: 39 callbacks suppressed [ 938.621587][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 938.743536][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 938.851483][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 938.961916][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 939.071413][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 939.181669][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 939.291385][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 939.401490][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 939.521483][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 939.631940][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 943.731386][T14430] net_ratelimit: 40 callbacks suppressed [ 943.731409][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 943.851371][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 943.961607][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 944.071409][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 944.181409][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 944.291631][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 944.401453][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 944.511838][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 944.621471][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 944.731392][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 946.822986][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 948.811440][T14430] net_ratelimit: 39 callbacks suppressed [ 948.811462][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 948.931423][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 949.042428][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 949.151405][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 949.261432][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 949.371381][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 949.481436][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 949.591483][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 949.702892][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 949.811926][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 953.891488][T14430] net_ratelimit: 40 callbacks suppressed [ 953.891521][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 954.011392][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 954.121492][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 954.231363][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 954.341635][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 954.451410][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 954.561454][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 954.671357][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 954.781412][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 954.891861][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 958.961440][T14429] net_ratelimit: 36 callbacks suppressed [ 958.961464][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 959.081432][T14411] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 959.191487][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 959.302071][T14411] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 959.421441][T14411] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 959.531389][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 959.541631][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.550144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.558572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.641476][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 964.071562][T14429] net_ratelimit: 40 callbacks suppressed [ 964.071598][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 964.201509][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 964.311485][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 964.422517][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 964.531470][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 964.641551][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 964.752065][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 964.861539][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 964.971384][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 965.081989][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 969.162200][T14422] net_ratelimit: 39 callbacks suppressed [ 969.162223][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 969.281943][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 969.391415][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 969.501506][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 969.612452][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 969.721468][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 969.831367][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 969.941517][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 970.051475][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 970.161620][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 974.241834][T14422] net_ratelimit: 43 callbacks suppressed [ 974.241861][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 974.361468][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 974.471395][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 974.502082][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 974.581544][T14411] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 974.691405][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 974.802020][T14411] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 974.911435][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 975.021586][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 975.131817][T14411] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 975.241521][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 979.321511][ T48] net_ratelimit: 39 callbacks suppressed [ 979.321545][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 979.441684][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 979.551563][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 979.661917][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 979.771527][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 979.881562][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 979.991374][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 980.102773][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 980.221718][T14411] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 980.362791][T14411] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 980.406190][ T733] batadv_slave_1: entered promiscuous mode [ 980.649566][ T753] __nla_validate_parse: 147 callbacks suppressed [ 980.649585][ T753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6573'. [ 980.744184][ T757] netlink: 193 bytes leftover after parsing attributes in process `syz.4.6574'. [ 981.099899][ T721] batadv_slave_1: left promiscuous mode [ 981.129109][ T780] xt_hl: Unknown TTL match mode: 237 [ 981.184697][ T786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6582'. [ 981.195857][ T786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6582'. [ 981.239334][T14422] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.250633][ T786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6582'. [ 981.260249][T14422] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.270367][ T786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6582'. [ 981.309952][T14422] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.319459][T14422] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.355100][ T790] 8021q: adding VLAN 0 to HW filter on device bond2 [ 981.365020][ T790] bond1: (slave bond2): Enslaving as an active interface with an up link [ 981.396139][ T789] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 981.480266][ T802] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 981.514564][ T802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6584'. [ 981.551080][ T801] netlink: 'syz.4.6585': attribute type 3 has an invalid length. [ 981.759631][ T813] sctp: [Deprecated]: syz.0.6587 (pid 813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 981.759631][ T813] Use struct sctp_sack_info instead [ 981.868416][ T821] netlink: 'syz.3.6590': attribute type 1 has an invalid length. [ 981.942981][ T821] bond0: entered promiscuous mode [ 981.948237][ T821] bond0: entered allmulticast mode [ 981.954765][ T821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.039443][ T825] macvlan2: entered promiscuous mode [ 982.063152][ T825] macvlan2: entered allmulticast mode [ 982.092900][ T825] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 982.100204][ T836] x_tables: duplicate underflow at hook 1 [ 982.247494][ T848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6594'. [ 982.337708][ T851] Cannot find set identified by id 0 to match [ 982.424486][ T854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6597'. [ 982.486448][ T854] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6597'. [ 982.538626][ T866] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 982.652395][ T873] veth0_virtÿifi: renamed from ip6gre0 (while UP) [ 984.351503][T14411] net_ratelimit: 36 callbacks suppressed [ 984.351525][T14411] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 984.471568][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 984.582535][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 984.661571][ T854] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 984.662225][T21833] Bluetooth: hci4: command 0x0405 tx timeout [ 984.667921][ T854] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 984.691536][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 984.801456][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 984.860029][ T821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 984.912603][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 985.015546][ T918] veth3: entered promiscuous mode [ 985.032142][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 985.152096][T14411] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 985.261547][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 985.370631][ T854] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 985.376716][T14411] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 985.384673][ T854] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 985.395005][ T854] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 985.401031][ T854] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 985.435293][ T854] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 985.442075][ T854] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 985.456056][ T854] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 985.467317][ T854] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 985.853690][ T958] __nla_validate_parse: 3 callbacks suppressed [ 985.853710][ T958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6620'. [ 985.963033][ T968] tipc: Enabling of bearer rejected, already enabled [ 986.327413][ T987] syzkaller0: entered promiscuous mode [ 986.333147][ T987] syzkaller0: entered allmulticast mode [ 986.611799][ T996] geneve2: entered promiscuous mode [ 986.809038][ T1001] bond2 (unregistering): Released all slaves [ 986.839940][ T998] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6633'. [ 987.516185][ T1018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6636'. [ 989.492198][T14429] net_ratelimit: 23 callbacks suppressed [ 989.492219][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 989.611470][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 989.727693][ T1046] netlink: 'syz.4.6642': attribute type 1 has an invalid length. [ 989.743197][ T1048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 989.751707][T14411] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 989.764832][ T1046] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6642'. [ 989.818667][ T1052] ip6gretap1: entered promiscuous mode [ 989.881701][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 989.882613][ T1059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6645'. [ 990.003341][T14411] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 990.035440][ T1077] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6648'. [ 990.186641][T20139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.473508][T29857] IPVS: starting estimator thread 0... [ 990.531181][ T1104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6654'. [ 990.541121][T14411] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 990.557294][ T1100] sch_fq: defrate 0 ignored. [ 990.582022][ T1103] IPVS: using max 33 ests per chain, 79200 per kthread [ 990.822376][T29857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.983600][T20139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.337157][ T1156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6671'. [ 991.378132][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.385844][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.395000][ T1162] netlink: 'syz.2.6674': attribute type 1 has an invalid length. [ 991.404645][ T1162] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6674'. [ 991.414194][ T1162] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6674'. [ 991.426592][ T1162] netlink: 658 bytes leftover after parsing attributes in process `syz.2.6674'. [ 991.451569][ T1165] netlink: 'syz.2.6674': attribute type 10 has an invalid length. [ 991.477990][ T1165] team0: Device vxcan1 is of different type [ 991.512079][ T1162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6674'. [ 991.560983][ T1162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6674'. [ 991.773456][ T1175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6679'. [ 992.518245][ T1203] xt_nfacct: accounting object `syz0' does not exist [ 992.567983][ T1203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6685'. [ 992.987160][ T1227] syzkaller1: entered promiscuous mode [ 993.000661][ T1227] syzkaller1: entered allmulticast mode [ 993.010106][ T1222] veth1_to_hsr: entered allmulticast mode [ 993.268228][ T1239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6694'. [ 993.336582][ T1239] vlan3: entered promiscuous mode [ 993.352586][ T1239] gretap0: entered promiscuous mode [ 993.367303][ T1239] vlan3: entered allmulticast mode [ 993.380651][ T1239] gretap0: entered allmulticast mode [ 993.540060][ T1260] netlink: 'syz.2.6700': attribute type 1 has an invalid length. [ 993.644530][ T1270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6701'. [ 993.663892][ T1271] netlink: 'syz.1.6703': attribute type 1 has an invalid length. [ 993.697086][ T1264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 993.712518][ T1264] bond2: (slave bond3): making interface the new active one [ 993.720656][ T1264] bond2: (slave bond3): Enslaving as an active interface with an up link [ 993.766701][ T1269] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 993.827155][ T1260] 8021q: adding VLAN 0 to HW filter on device bond2 [ 994.163042][ T1291] macsec3: entered promiscuous mode [ 994.168355][ T1291] veth1: entered promiscuous mode [ 994.174319][ T1291] macsec3: entered allmulticast mode [ 994.180079][ T1291] veth1: entered allmulticast mode [ 994.200767][ T1291] batman_adv: batadv0: Adding interface: macsec3 [ 994.217740][ T1291] batman_adv: batadv0: The MTU of interface macsec3 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.271147][ T1291] batman_adv: batadv0: Interface activated: macsec3 [ 994.431193][ T1301] netlink: 'syz.3.6713': attribute type 1 has an invalid length. [ 994.446152][ T1301] netlink: 'syz.3.6713': attribute type 1 has an invalid length. [ 994.473911][ T1301] syzkaller1: entered promiscuous mode [ 994.484307][ T1301] syzkaller1: entered allmulticast mode [ 994.564686][T14422] net_ratelimit: 37 callbacks suppressed [ 994.564706][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 994.719752][ T1315] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 994.733771][ T1315] bond4 (unregistering): Released all slaves [ 994.781399][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 994.829308][T29885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.021823][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 995.142807][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 995.244287][ T1344] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 995.261877][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 995.281473][ T1344] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 995.321363][ T1344] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 995.323759][ T1348] netlink: 'syz.3.6727': attribute type 9 has an invalid length. [ 995.373385][ T1344] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 995.384417][T20127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.401800][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 995.514887][T14422] smbdirect: ib_dev[syz2] removed [ 995.573846][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 995.692045][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 995.867304][ T1372] tap0: tun_chr_ioctl cmd 1074025677 [ 995.874171][ T1372] tap0: linktype set to 773 [ 996.016443][ T1379] block nbd6: Unsupported socket: should be TCP or UNIX. [ 996.045331][ T1381] block nbd6: Unsupported socket: should be TCP or UNIX. [ 996.622012][ T1422] netlink: 'syz.0.6747': attribute type 1 has an invalid length. [ 996.638797][ T1422] __nla_validate_parse: 11 callbacks suppressed [ 996.638813][ T1422] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6747'. [ 998.161113][ T1489] netlink: 67 bytes leftover after parsing attributes in process `syz.1.6766'. [ 998.188860][ T1489] 8021q: adding VLAN 0 to HW filter on device  [ 998.198941][ T1489] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.213233][ T1489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.237683][ T1489] wireguard: wg0: Could not create IPv4 socket [ 998.661042][ T1514] Bluetooth: MGMT ver 1.23 [ 998.953860][ T1514] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.986071][ T1528] netlink: 876 bytes leftover after parsing attributes in process `syz.4.6773'. [ 999.014416][ T1528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6773'. [ 999.136921][ T1535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6776'. [ 999.160704][ T1514] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.179392][ T1535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6776'. [ 999.250267][ T1539] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6778'. [ 999.446194][ T1514] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.474253][ T1561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6780'. [ 999.489519][ T1561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6780'. [ 999.531636][ T1564] syzkaller1: entered promiscuous mode [ 999.547932][ T1564] syzkaller1: entered allmulticast mode [ 999.596085][ T1514] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 999.631506][T14422] net_ratelimit: 41 callbacks suppressed [ 999.631524][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 999.660141][T29885] IPVS: starting estimator thread 0... [ 999.743519][ T1574] netlink: 'syz.4.6785': attribute type 11 has an invalid length. [ 999.765760][ T1572] IPVS: using max 30 ests per chain, 72000 per kthread [ 999.841401][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 999.903875][T14422] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.942166][T29857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.997146][T14429] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.036540][T14428] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.076904][T14428] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.093949][ T1586] syzkaller0: entered promiscuous mode [ 1000.105921][ T1586] syzkaller0: entered allmulticast mode [ 1000.121654][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1000.167808][ T1592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6791'. [ 1000.241509][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1000.471517][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1000.585760][T20149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.594318][T20127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.602974][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1000.733109][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1000.833922][ T1628] netlink: 'syz.0.6800': attribute type 1 has an invalid length. [ 1000.870180][ T1628] netlink: 'syz.0.6800': attribute type 2 has an invalid length. [ 1000.950333][ T1628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.988142][ T1628] bond0 (unregistering): Released all slaves [ 1001.308072][T20149] IPVS: starting estimator thread 0... [ 1001.433366][ T1665] IPVS: using max 29 ests per chain, 69600 per kthread [ 1001.520164][ T1672] 8021q: VLANs not supported on wg2 [ 1001.807439][ T1688] __nla_validate_parse: 5 callbacks suppressed [ 1001.807458][ T1688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6812'. [ 1002.873413][ T29] audit: type=1800 audit(1780204333.525:19): pid=1700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6814" name="memory.events" dev="tmpfs" ino=644 res=0 errno=0 [ 1003.531124][ T1778] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6828'. [ 1003.809238][ T1788] netlink: 'syz.4.6831': attribute type 1 has an invalid length. [ 1003.829885][ T1788] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6831'. [ 1003.855265][ T1788] netlink: 658 bytes leftover after parsing attributes in process `syz.4.6831'. [ 1003.873645][ T1788] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6831'. [ 1003.979770][ T1785] netlink: 'syz.2.6830': attribute type 1 has an invalid length. [ 1004.259666][ T1783] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 1004.711680][T14422] net_ratelimit: 23 callbacks suppressed [ 1004.711701][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1004.859915][T20139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.873464][T14411] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1005.003926][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1005.164920][ T1853] erspan0: entered promiscuous mode [ 1005.211399][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1005.294801][ T1859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.342265][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1005.397619][ T1859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.408439][ T1870] syzkaller0: entered promiscuous mode [ 1005.420217][ T1870] syzkaller0: entered allmulticast mode [ 1005.474636][ T1859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.483292][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1005.671435][ T1884] xt_hashlimit: invalid rate [ 1005.690476][ T1882] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6851'. [ 1005.763278][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057a70000: rx timeout, send abort [ 1006.092072][ T1899] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1006.202323][ T1904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6857'. [ 1006.263401][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804c9e4c00: rx timeout, send abort [ 1006.272100][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057a70000: abort rx timeout. Force session deactivation [ 1006.312254][ T1911] syzkaller0: entered promiscuous mode [ 1006.326034][ T1911] syzkaller0: entered allmulticast mode [ 1006.449559][ T1913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.456863][ T1913] bridge0: port 2(bridge_slave_1) entered listening state [ 1006.464371][ T1913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.471647][ T1913] bridge0: port 1(bridge_slave_0) entered listening state [ 1006.586999][ T1920] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6861'. [ 1006.621933][ T1920] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6861'. [ 1006.635904][ T1920] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6861'. [ 1006.676697][ T1922] netlink: 'syz.0.6862': attribute type 3 has an invalid length. [ 1006.684946][ T1922] netlink: 'syz.0.6862': attribute type 1 has an invalid length. [ 1006.693448][ T1922] NCSI netlink: No device for ifindex 2147483648 [ 1006.771980][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804c9e4c00: abort rx timeout. Force session deactivation [ 1007.239058][ T1940] __nla_validate_parse: 1 callbacks suppressed [ 1007.239078][ T1940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6867'. [ 1007.330903][ T1943] x_tables: duplicate underflow at hook 1 [ 1007.362972][ T1943] netlink: 'syz.3.6868': attribute type 10 has an invalid length. [ 1007.479677][ T1949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6870'. [ 1007.565699][ T1955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6870'. [ 1007.629984][ T1956] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6872'. [ 1007.668354][ T1956] siw: device registration error -23 [ 1007.809775][ T1969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6876'. [ 1007.864822][ T1969] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1007.883962][ T1969] bond2 (unregistering): Released all slaves [ 1008.367680][ T1991] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1008.396789][ T1991] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1008.449078][ T2000] bridge_slave_0: left allmulticast mode [ 1008.457701][ T2000] bridge_slave_0: left promiscuous mode [ 1008.466140][ T2000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.502858][ T2000] bridge_slave_1: left allmulticast mode [ 1008.521167][ T2000] bridge_slave_1: left promiscuous mode [ 1008.544885][ T2000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.602912][ T2000] team0: Port device team_slave_0 removed [ 1008.634533][ T2013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6885'. [ 1008.644575][ T2013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6885'. [ 1008.655105][ T2000] team0: Port device team_slave_1 removed [ 1008.675670][ T2000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.695739][ T2000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.723584][ T2000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.737559][ T2015] netlink: 'syz.4.6886': attribute type 1 has an invalid length. [ 1008.743957][ T2000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.795125][ T2003] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1008.939671][ T2028] hsr0: entered promiscuous mode [ 1009.008628][ T2027] hsr0: left promiscuous mode [ 1009.159888][ T2038] C: renamed from veth1_to_team (while UP) [ 1009.206870][ T2038] netlink: 'syz.0.6891': attribute type 2 has an invalid length. [ 1009.233130][ T2038] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6891'. [ 1009.247879][ T2037] netlink: 'syz.0.6891': attribute type 2 has an invalid length. [ 1009.260594][ T2037] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6891'. [ 1009.753238][T14428] net_ratelimit: 66 callbacks suppressed [ 1009.753269][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1009.902338][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1009.989736][ T2075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1010.030037][T20127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.041573][T14422] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1010.173559][T14411] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1010.182941][T20127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.213390][ T2083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6906'. [ 1010.312405][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1010.442066][T14430] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1010.653115][T14428] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1011.005333][ T2122] netlink: 'syz.4.6919': attribute type 1 has an invalid length. [ 1011.828640][ T2122] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1012.064856][ T2140] IPVS: set_ctl: invalid protocol: 160 224.0.0.1:20000 [ 1012.228523][ T2148] pim6reg: entered allmulticast mode [ 1012.472563][ T2165] __nla_validate_parse: 67 callbacks suppressed [ 1012.472583][ T2165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6930'. [ 1012.503303][ T2163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6930'. [ 1012.503643][ T2169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6932'. [ 1012.523213][ T2170] tipc: Started in network mode [ 1012.528331][ T2165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6930'. [ 1012.538476][ T2170] tipc: Node identity , cluster identity 4711 [ 1012.545752][ T2170] tipc: Failed to obtain node identity [ 1012.551720][ T2170] tipc: Enabling of bearer rejected, failed to enable media [ 1012.563494][ T2167] tipc: Started in network mode [ 1012.577535][ T2167] tipc: Node identity , cluster identity 4711 [ 1012.587109][ T2167] tipc: Failed to obtain node identity [ 1012.593993][ T2167] tipc: Enabling of bearer rejected, failed to enable media [ 1012.625924][ T2169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6932'. [ 1012.656010][ T2170] syzkaller0: entered promiscuous mode [ 1012.673915][ T2170] syzkaller0: entered allmulticast mode [ 1012.695069][T14411] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.721482][T14411] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.763955][T14411] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.783784][T14411] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1012.866901][ T2179] syzkaller0: entered promiscuous mode [ 1012.876972][ T2179] syzkaller0: entered allmulticast mode [ 1012.926430][ T2179] tipc: Enabled bearer , priority 0 [ 1012.953008][ T2179] tipc: Resetting bearer [ 1012.985026][ T2178] tipc: Resetting bearer [ 1013.057844][ T2178] tipc: Disabling bearer [ 1013.399868][ T2207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6943'. [ 1013.454797][ T2204] netlink: 'syz.4.6943': attribute type 10 has an invalid length. [ 1013.494291][ T2204] team0: Failed to send options change via netlink (err -105) [ 1013.504309][ T2204] team0: Port device dummy0 added [ 1013.515397][ T2207] netlink: 'syz.4.6943': attribute type 10 has an invalid length. [ 1013.527696][ T2207] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1013.557868][ T2207] team0: Failed to send options change via netlink (err -105) [ 1013.566119][ T2207] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1013.579944][ T2207] team0: Port device dummy0 removed [ 1013.594945][ T2207] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1013.612336][ T2216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6944'. [ 1013.683689][ T2221] bond5: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms [ 1013.717139][ T2221] bond5: entered promiscuous mode [ 1014.132359][ T2245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6954'. [ 1014.236698][ T2250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6956'. [ 1014.417227][ T2254] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6958'. [ 1014.453613][ T2256] netlink: 'syz.3.6960': attribute type 1 has an invalid length. [ 1014.510293][ T2256] netlink: 'syz.3.6960': attribute type 2 has an invalid length. [ 1014.560250][ T2257] netlink: 'syz.3.6960': attribute type 1 has an invalid length. [ 1014.582649][ T2257] netlink: 'syz.3.6960': attribute type 2 has an invalid length. [ 1014.647279][ T2263] netlink: 'syz.1.6961': attribute type 11 has an invalid length. [ 1014.781851][ T57] net_ratelimit: 31 callbacks suppressed [ 1014.781870][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1014.806797][ T2272] netlink: 'syz.1.6966': attribute type 1 has an invalid length. [ 1014.874980][ T2268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1014.931772][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1014.969604][ T2273] BUG: Bad page state in process syz.0.6965 pfn:29a43 [ 1014.976598][ T2273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029a43000 pfn:0x29a43 [ 1014.986769][ T2273] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1014.993949][ T2273] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 1015.002715][ T2273] raw: ffff888029a43000 3ffffffffffffffe 00000000ffffffff 0000000000000000 [ 1015.011343][ T2273] page dumped because: page_pool leak [ 1015.016739][ T2273] page_owner tracks the page as allocated [ 1015.022551][ T2273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 2273, tgid 2267 (syz.0.6965), ts 1014956913123, free_ts 1014948882471 [ 1015.039806][ T2273] post_alloc_hook+0x22d/0x280 [ 1015.044657][ T2273] get_page_from_freelist+0x2593/0x2610 [ 1015.050239][ T2273] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1015.056115][ T2273] __alloc_pages_noprof+0x10/0x100 [ 1015.061304][ T2273] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 1015.066826][ T2273] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1015.073092][ T2273] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 1015.078942][ T2273] skb_pp_cow_data+0xcb7/0x19b0 [ 1015.083883][ T2273] do_xdp_generic+0x76b/0x12e0 [ 1015.088685][ T2273] tun_get_user+0x24ca/0x43e0 [ 1015.093497][ T2273] tun_chr_write_iter+0x113/0x200 [ 1015.098563][ T2273] vfs_write+0x61d/0xb90 [ 1015.102885][ T2273] ksys_write+0x150/0x270 [ 1015.107257][ T2273] do_syscall_64+0x174/0x580 [ 1015.111926][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.117874][ T2273] page last free pid 2275 tgid 2267 stack trace: [ 1015.124263][ T2273] __free_frozen_pages+0xc1c/0xd30 [ 1015.129412][ T2273] __folio_put+0x4a2/0x580 [ 1015.133943][ T2273] af_alg_free_resources+0x687/0x8d0 [ 1015.139336][ T2273] skcipher_recvmsg+0xbd4/0x1140 [ 1015.144368][ T2273] sock_recvmsg+0x172/0x1b0 [ 1015.148965][ T2273] ____sys_recvmsg+0x1e6/0x4a0 [ 1015.153804][ T2273] ___sys_recvmsg+0x215/0x590 [ 1015.158540][ T2273] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1015.163579][ T2273] do_syscall_64+0x174/0x580 [ 1015.168199][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.174179][ T2273] Modules linked in: [ 1015.178113][ T2273] CPU: 0 UID: 0 PID: 2273 Comm: syz.0.6965 Not tainted syzkaller #0 PREEMPT(full) [ 1015.178138][ T2273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1015.178151][ T2273] Call Trace: [ 1015.178160][ T2273] [ 1015.178168][ T2273] dump_stack_lvl+0xe8/0x150 [ 1015.178195][ T2273] bad_page+0x17f/0x1c0 [ 1015.178220][ T2273] __free_frozen_pages+0xcd9/0xd30 [ 1015.178257][ T2273] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 1015.178374][ T2273] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1015.178432][ T2273] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1015.178455][ T2273] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1015.178515][ T2273] do_xdp_generic+0xac5/0x12e0 [ 1015.178550][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1015.178588][ T2273] ? __pfx_do_xdp_generic+0x10/0x10 [ 1015.178629][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1015.178669][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1015.178691][ T2273] tun_get_user+0x24ca/0x43e0 [ 1015.178731][ T2273] ? aa_file_perm+0x192/0x15e0 [ 1015.178758][ T2273] ? aa_file_perm+0x50e/0x15e0 [ 1015.178779][ T2273] ? __pfx_tun_get_user+0x10/0x10 [ 1015.178805][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1015.178832][ T2273] ? preempt_schedule_thunk+0x16/0x30 [ 1015.178865][ T2273] ? preempt_schedule_common+0x82/0xd0 [ 1015.178891][ T2273] ? ref_tracker_alloc+0x35c/0x4c0 [ 1015.178953][ T2273] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1015.178979][ T2273] ? tun_get+0x1c/0x2f0 [ 1015.179000][ T2273] ? tun_get+0x1c/0x2f0 [ 1015.179026][ T2273] ? tun_get+0x1c/0x2f0 [ 1015.179044][ T2273] ? tun_get+0x1c/0x2f0 [ 1015.179069][ T2273] tun_chr_write_iter+0x113/0x200 [ 1015.179093][ T2273] vfs_write+0x61d/0xb90 [ 1015.179133][ T2273] ? __pfx_vfs_write+0x10/0x10 [ 1015.179175][ T2273] ? __fget_files+0x2a/0x420 [ 1015.179211][ T2273] ksys_write+0x150/0x270 [ 1015.179244][ T2273] ? __pfx_ksys_write+0x10/0x10 [ 1015.179303][ T2273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.179327][ T2273] do_syscall_64+0x174/0x580 [ 1015.179348][ T2273] ? trace_irq_disable+0x3b/0x140 [ 1015.179381][ T2273] ? clear_bhb_loop+0x40/0x90 [ 1015.179408][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.179429][ T2273] RIP: 0033:0x7fd45af5d68e [ 1015.179460][ T2273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1015.179478][ T2273] RSP: 002b:00007fd45bd9efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1015.179499][ T2273] RAX: ffffffffffffffda RBX: 00007fd45bd9f6c0 RCX: 00007fd45af5d68e [ 1015.179515][ T2273] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 00000000000000c8 [ 1015.179556][ T2273] RBP: 00007fd45b032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1015.179585][ T2273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.179598][ T2273] R13: 00007fd45b216038 R14: 00007fd45b215fa0 R15: 00007ffddec78de8 [ 1015.179633][ T2273] [ 1015.179642][ T2273] Disabling lock debugging due to kernel taint [ 1015.464538][ T2273] BUG: Bad page state in process syz.0.6965 pfn:5533b [ 1015.471470][ T2273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805533ba00 pfn:0x5533b [ 1015.481604][ T2273] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1015.488760][ T2273] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 1015.497413][ T2273] raw: ffff88805533ba00 0000000000000001 00000000ffffffff 0000000000000000 [ 1015.506060][ T2273] page dumped because: page_pool leak [ 1015.511491][ T2273] page_owner tracks the page as allocated [ 1015.517250][ T2273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 2273, tgid 2267 (syz.0.6965), ts 1014969462266, free_ts 1014948601996 [ 1015.534536][ T2273] post_alloc_hook+0x22d/0x280 [ 1015.539358][ T2273] get_page_from_freelist+0x2593/0x2610 [ 1015.545010][ T2273] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1015.550854][ T2273] __alloc_pages_noprof+0x10/0x100 [ 1015.556060][ T2273] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 1015.561591][ T2273] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1015.567706][ T2273] skb_pp_cow_data+0xc91/0x19b0 [ 1015.572629][ T2273] do_xdp_generic+0x76b/0x12e0 [ 1015.577443][ T2273] tun_get_user+0x24ca/0x43e0 [ 1015.582182][ T2273] tun_chr_write_iter+0x113/0x200 [ 1015.587246][ T2273] vfs_write+0x61d/0xb90 [ 1015.591581][ T2273] ksys_write+0x150/0x270 [ 1015.595959][ T2273] do_syscall_64+0x174/0x580 [ 1015.600579][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.606540][ T2273] page last free pid 2275 tgid 2267 stack trace: [ 1015.612911][ T2273] __free_frozen_pages+0xc1c/0xd30 [ 1015.618089][ T2273] __folio_put+0x4a2/0x580 [ 1015.622567][ T2273] af_alg_free_resources+0x687/0x8d0 [ 1015.627884][ T2273] skcipher_recvmsg+0xbd4/0x1140 [ 1015.632875][ T2273] sock_recvmsg+0x172/0x1b0 [ 1015.637421][ T2273] ____sys_recvmsg+0x1e6/0x4a0 [ 1015.642236][ T2273] ___sys_recvmsg+0x215/0x590 [ 1015.646944][ T2273] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1015.651932][ T2273] do_syscall_64+0x174/0x580 [ 1015.656551][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.662508][ T2273] Modules linked in: [ 1015.666437][ T2273] CPU: 0 UID: 0 PID: 2273 Comm: syz.0.6965 Tainted: G B syzkaller #0 PREEMPT(full) [ 1015.666468][ T2273] Tainted: [B]=BAD_PAGE [ 1015.666478][ T2273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1015.666492][ T2273] Call Trace: [ 1015.666500][ T2273] [ 1015.666516][ T2273] dump_stack_lvl+0xe8/0x150 [ 1015.666555][ T2273] bad_page+0x17f/0x1c0 [ 1015.666580][ T2273] __free_frozen_pages+0xcd9/0xd30 [ 1015.666615][ T2273] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 1015.666655][ T2273] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1015.666681][ T2273] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1015.666701][ T2273] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1015.666744][ T2273] do_xdp_generic+0xac5/0x12e0 [ 1015.666771][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1015.666799][ T2273] ? __pfx_do_xdp_generic+0x10/0x10 [ 1015.666833][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1015.666862][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1015.666883][ T2273] tun_get_user+0x24ca/0x43e0 [ 1015.666913][ T2273] ? aa_file_perm+0x192/0x15e0 [ 1015.666936][ T2273] ? aa_file_perm+0x50e/0x15e0 [ 1015.666955][ T2273] ? __pfx_tun_get_user+0x10/0x10 [ 1015.666976][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1015.666999][ T2273] ? preempt_schedule_thunk+0x16/0x30 [ 1015.667029][ T2273] ? preempt_schedule_common+0x82/0xd0 [ 1015.667052][ T2273] ? ref_tracker_alloc+0x35c/0x4c0 [ 1015.667077][ T2273] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1015.667102][ T2273] ? tun_get+0x1c/0x2f0 [ 1015.667122][ T2273] ? tun_get+0x1c/0x2f0 [ 1015.667143][ T2273] ? tun_get+0x1c/0x2f0 [ 1015.667163][ T2273] ? tun_get+0x1c/0x2f0 [ 1015.667185][ T2273] tun_chr_write_iter+0x113/0x200 [ 1015.667207][ T2273] vfs_write+0x61d/0xb90 [ 1015.667242][ T2273] ? __pfx_vfs_write+0x10/0x10 [ 1015.667277][ T2273] ? __fget_files+0x2a/0x420 [ 1015.667307][ T2273] ksys_write+0x150/0x270 [ 1015.667338][ T2273] ? __pfx_ksys_write+0x10/0x10 [ 1015.667372][ T2273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.667394][ T2273] do_syscall_64+0x174/0x580 [ 1015.667415][ T2273] ? trace_irq_disable+0x3b/0x140 [ 1015.667446][ T2273] ? clear_bhb_loop+0x40/0x90 [ 1015.667470][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.667492][ T2273] RIP: 0033:0x7fd45af5d68e [ 1015.667516][ T2273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1015.667534][ T2273] RSP: 002b:00007fd45bd9efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1015.667554][ T2273] RAX: ffffffffffffffda RBX: 00007fd45bd9f6c0 RCX: 00007fd45af5d68e [ 1015.667569][ T2273] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 00000000000000c8 [ 1015.667582][ T2273] RBP: 00007fd45b032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1015.667594][ T2273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.667606][ T2273] R13: 00007fd45b216038 R14: 00007fd45b215fa0 R15: 00007ffddec78de8 [ 1015.667628][ T2273] [ 1015.667638][ T2273] BUG: Bad page state in process syz.0.6965 pfn:7922d [ 1015.958769][ T2273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807922d2a0 pfn:0x7922d [ 1015.968928][ T2273] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1015.976134][ T2273] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 1015.984798][ T2273] raw: ffff88807922d2a0 0000000000000001 00000000ffffffff 0000000000000000 [ 1015.993435][ T2273] page dumped because: page_pool leak [ 1015.998835][ T2273] page_owner tracks the page as allocated [ 1016.004607][ T2273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 2273, tgid 2267 (syz.0.6965), ts 1014969445365, free_ts 1014948614563 [ 1016.021862][ T2273] post_alloc_hook+0x22d/0x280 [ 1016.026672][ T2273] get_page_from_freelist+0x2593/0x2610 [ 1016.032269][ T2273] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1016.038107][ T2273] __alloc_pages_noprof+0x10/0x100 [ 1016.043295][ T2273] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 1016.048787][ T2273] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1016.054915][ T2273] skb_pp_cow_data+0xc91/0x19b0 [ 1016.059825][ T2273] do_xdp_generic+0x76b/0x12e0 [ 1016.064649][ T2273] tun_get_user+0x24ca/0x43e0 [ 1016.069361][ T2273] tun_chr_write_iter+0x113/0x200 [ 1016.074428][ T2273] vfs_write+0x61d/0xb90 [ 1016.078742][ T2273] ksys_write+0x150/0x270 [ 1016.083135][ T2273] do_syscall_64+0x174/0x580 [ 1016.087766][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.093717][ T2273] page last free pid 2275 tgid 2267 stack trace: [ 1016.100056][ T2273] __free_frozen_pages+0xc1c/0xd30 [ 1016.105225][ T2273] __folio_put+0x4a2/0x580 [ 1016.109691][ T2273] af_alg_free_resources+0x687/0x8d0 [ 1016.115039][ T2273] skcipher_recvmsg+0xbd4/0x1140 [ 1016.120017][ T2273] sock_recvmsg+0x172/0x1b0 [ 1016.124586][ T2273] ____sys_recvmsg+0x1e6/0x4a0 [ 1016.129382][ T2273] ___sys_recvmsg+0x215/0x590 [ 1016.134138][ T2273] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1016.139116][ T2273] do_syscall_64+0x174/0x580 [ 1016.143769][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.149691][ T2273] Modules linked in: [ 1016.153640][ T2273] CPU: 0 UID: 0 PID: 2273 Comm: syz.0.6965 Tainted: G B syzkaller #0 PREEMPT(full) [ 1016.153670][ T2273] Tainted: [B]=BAD_PAGE [ 1016.153677][ T2273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1016.153689][ T2273] Call Trace: [ 1016.153696][ T2273] [ 1016.153704][ T2273] dump_stack_lvl+0xe8/0x150 [ 1016.153729][ T2273] bad_page+0x17f/0x1c0 [ 1016.153769][ T2273] __free_frozen_pages+0xcd9/0xd30 [ 1016.153804][ T2273] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 1016.153843][ T2273] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1016.153869][ T2273] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1016.153888][ T2273] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1016.153931][ T2273] do_xdp_generic+0xac5/0x12e0 [ 1016.153957][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1016.153985][ T2273] ? __pfx_do_xdp_generic+0x10/0x10 [ 1016.154018][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1016.154047][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1016.154068][ T2273] tun_get_user+0x24ca/0x43e0 [ 1016.154097][ T2273] ? aa_file_perm+0x192/0x15e0 [ 1016.154119][ T2273] ? aa_file_perm+0x50e/0x15e0 [ 1016.154138][ T2273] ? __pfx_tun_get_user+0x10/0x10 [ 1016.154160][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1016.154184][ T2273] ? preempt_schedule_thunk+0x16/0x30 [ 1016.154215][ T2273] ? preempt_schedule_common+0x82/0xd0 [ 1016.154239][ T2273] ? ref_tracker_alloc+0x35c/0x4c0 [ 1016.154263][ T2273] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1016.154287][ T2273] ? tun_get+0x1c/0x2f0 [ 1016.154307][ T2273] ? tun_get+0x1c/0x2f0 [ 1016.154329][ T2273] ? tun_get+0x1c/0x2f0 [ 1016.154349][ T2273] ? tun_get+0x1c/0x2f0 [ 1016.154369][ T2273] tun_chr_write_iter+0x113/0x200 [ 1016.154390][ T2273] vfs_write+0x61d/0xb90 [ 1016.154430][ T2273] ? __pfx_vfs_write+0x10/0x10 [ 1016.154500][ T2273] ? __fget_files+0x2a/0x420 [ 1016.154532][ T2273] ksys_write+0x150/0x270 [ 1016.154563][ T2273] ? __pfx_ksys_write+0x10/0x10 [ 1016.154599][ T2273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.154622][ T2273] do_syscall_64+0x174/0x580 [ 1016.154643][ T2273] ? trace_irq_disable+0x3b/0x140 [ 1016.154675][ T2273] ? clear_bhb_loop+0x40/0x90 [ 1016.154701][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.154722][ T2273] RIP: 0033:0x7fd45af5d68e [ 1016.154738][ T2273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1016.154753][ T2273] RSP: 002b:00007fd45bd9efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1016.154772][ T2273] RAX: ffffffffffffffda RBX: 00007fd45bd9f6c0 RCX: 00007fd45af5d68e [ 1016.154785][ T2273] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 00000000000000c8 [ 1016.154797][ T2273] RBP: 00007fd45b032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1016.154808][ T2273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.154819][ T2273] R13: 00007fd45b216038 R14: 00007fd45b215fa0 R15: 00007ffddec78de8 [ 1016.154840][ T2273] [ 1016.154852][ T2273] BUG: Bad page state in process syz.0.6965 pfn:4925e [ 1016.446114][ T2273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804925ec80 pfn:0x4925e [ 1016.456248][ T2273] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1016.463419][ T2273] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 1016.472063][ T2273] raw: ffff88804925ec80 0000000000000001 00000000ffffffff 0000000000000000 [ 1016.480668][ T2273] page dumped because: page_pool leak [ 1016.486098][ T2273] page_owner tracks the page as allocated [ 1016.491860][ T2273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 2273, tgid 2267 (syz.0.6965), ts 1014969427883, free_ts 1014948627340 [ 1016.509103][ T2273] post_alloc_hook+0x22d/0x280 [ 1016.513930][ T2273] get_page_from_freelist+0x2593/0x2610 [ 1016.519507][ T2273] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1016.525368][ T2273] __alloc_pages_noprof+0x10/0x100 [ 1016.530521][ T2273] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 1016.536076][ T2273] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1016.540040][ T2295] netlink: 'syz.2.6968': attribute type 1 has an invalid length. [ 1016.542195][ T2273] skb_pp_cow_data+0xc91/0x19b0 [ 1016.542221][ T2273] do_xdp_generic+0x76b/0x12e0 [ 1016.542247][ T2273] tun_get_user+0x24ca/0x43e0 [ 1016.542279][ T2273] tun_chr_write_iter+0x113/0x200 [ 1016.569363][ T2273] vfs_write+0x61d/0xb90 [ 1016.573674][ T2273] ksys_write+0x150/0x270 [ 1016.578041][ T2273] do_syscall_64+0x174/0x580 [ 1016.582724][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.588652][ T2273] page last free pid 2275 tgid 2267 stack trace: [ 1016.595064][ T2273] __free_frozen_pages+0xc1c/0xd30 [ 1016.600225][ T2273] __folio_put+0x4a2/0x580 [ 1016.604701][ T2273] af_alg_free_resources+0x687/0x8d0 [ 1016.610022][ T2273] skcipher_recvmsg+0xbd4/0x1140 [ 1016.615016][ T2273] sock_recvmsg+0x172/0x1b0 [ 1016.619563][ T2273] ____sys_recvmsg+0x1e6/0x4a0 [ 1016.624400][ T2273] ___sys_recvmsg+0x215/0x590 [ 1016.629143][ T2273] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1016.634162][ T2273] do_syscall_64+0x174/0x580 [ 1016.638791][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.644760][ T2273] Modules linked in: [ 1016.648705][ T2273] CPU: 0 UID: 0 PID: 2273 Comm: syz.0.6965 Tainted: G B syzkaller #0 PREEMPT(full) [ 1016.648735][ T2273] Tainted: [B]=BAD_PAGE [ 1016.648760][ T2273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1016.648776][ T2273] Call Trace: [ 1016.648786][ T2273] [ 1016.648795][ T2273] dump_stack_lvl+0xe8/0x150 [ 1016.648825][ T2273] bad_page+0x17f/0x1c0 [ 1016.648854][ T2273] __free_frozen_pages+0xcd9/0xd30 [ 1016.648895][ T2273] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 1016.648951][ T2273] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1016.648981][ T2273] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1016.649005][ T2273] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1016.649055][ T2273] do_xdp_generic+0xac5/0x12e0 [ 1016.649085][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1016.649117][ T2273] ? __pfx_do_xdp_generic+0x10/0x10 [ 1016.649155][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1016.649189][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1016.649212][ T2273] tun_get_user+0x24ca/0x43e0 [ 1016.649246][ T2273] ? aa_file_perm+0x192/0x15e0 [ 1016.649279][ T2273] ? aa_file_perm+0x50e/0x15e0 [ 1016.649302][ T2273] ? __pfx_tun_get_user+0x10/0x10 [ 1016.649327][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1016.649354][ T2273] ? preempt_schedule_thunk+0x16/0x30 [ 1016.649388][ T2273] ? preempt_schedule_common+0x82/0xd0 [ 1016.649413][ T2273] ? ref_tracker_alloc+0x35c/0x4c0 [ 1016.649440][ T2273] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1016.649467][ T2273] ? tun_get+0x1c/0x2f0 [ 1016.649490][ T2273] ? tun_get+0x1c/0x2f0 [ 1016.649515][ T2273] ? tun_get+0x1c/0x2f0 [ 1016.649537][ T2273] ? tun_get+0x1c/0x2f0 [ 1016.649563][ T2273] tun_chr_write_iter+0x113/0x200 [ 1016.649590][ T2273] vfs_write+0x61d/0xb90 [ 1016.649631][ T2273] ? __pfx_vfs_write+0x10/0x10 [ 1016.649672][ T2273] ? __fget_files+0x2a/0x420 [ 1016.649708][ T2273] ksys_write+0x150/0x270 [ 1016.649744][ T2273] ? __pfx_ksys_write+0x10/0x10 [ 1016.649784][ T2273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.649811][ T2273] do_syscall_64+0x174/0x580 [ 1016.649834][ T2273] ? trace_irq_disable+0x3b/0x140 [ 1016.649870][ T2273] ? clear_bhb_loop+0x40/0x90 [ 1016.649898][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.650008][ T2273] RIP: 0033:0x7fd45af5d68e [ 1016.650029][ T2273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1016.650048][ T2273] RSP: 002b:00007fd45bd9efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1016.650071][ T2273] RAX: ffffffffffffffda RBX: 00007fd45bd9f6c0 RCX: 00007fd45af5d68e [ 1016.650088][ T2273] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 00000000000000c8 [ 1016.650102][ T2273] RBP: 00007fd45b032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1016.650117][ T2273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.650130][ T2273] R13: 00007fd45b216038 R14: 00007fd45b215fa0 R15: 00007ffddec78de8 [ 1016.650156][ T2273] [ 1016.650168][ T2273] BUG: Bad page state in process syz.0.6965 pfn:2980b [ 1016.941126][ T2273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x2980b [ 1016.951236][ T2273] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1016.958373][ T2273] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 1016.967018][ T2273] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 1016.975667][ T2273] page dumped because: page_pool leak [ 1016.981063][ T2273] page_owner tracks the page as allocated [ 1016.986829][ T2273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 2273, tgid 2267 (syz.0.6965), ts 1014969410679, free_ts 1014948639989 [ 1017.004082][ T2273] post_alloc_hook+0x22d/0x280 [ 1017.008876][ T2273] get_page_from_freelist+0x2593/0x2610 [ 1017.014881][ T2273] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1017.020727][ T2273] __alloc_pages_noprof+0x10/0x100 [ 1017.025890][ T2273] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 1017.031400][ T2273] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1017.037516][ T2273] skb_pp_cow_data+0xc91/0x19b0 [ 1017.042423][ T2273] do_xdp_generic+0x76b/0x12e0 [ 1017.047222][ T2273] tun_get_user+0x24ca/0x43e0 [ 1017.051962][ T2273] tun_chr_write_iter+0x113/0x200 [ 1017.057026][ T2273] vfs_write+0x61d/0xb90 [ 1017.061326][ T2273] ksys_write+0x150/0x270 [ 1017.065693][ T2273] do_syscall_64+0x174/0x580 [ 1017.070307][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.076253][ T2273] page last free pid 2275 tgid 2267 stack trace: [ 1017.082626][ T2273] __free_frozen_pages+0xc1c/0xd30 [ 1017.087775][ T2273] __folio_put+0x4a2/0x580 [ 1017.092245][ T2273] af_alg_free_resources+0x687/0x8d0 [ 1017.097565][ T2273] skcipher_recvmsg+0xbd4/0x1140 [ 1017.102561][ T2273] sock_recvmsg+0x172/0x1b0 [ 1017.107092][ T2273] ____sys_recvmsg+0x1e6/0x4a0 [ 1017.111911][ T2273] ___sys_recvmsg+0x215/0x590 [ 1017.116622][ T2273] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1017.121611][ T2273] do_syscall_64+0x174/0x580 [ 1017.126230][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.132196][ T2273] Modules linked in: [ 1017.136140][ T2273] CPU: 0 UID: 0 PID: 2273 Comm: syz.0.6965 Tainted: G B syzkaller #0 PREEMPT(full) [ 1017.136169][ T2273] Tainted: [B]=BAD_PAGE [ 1017.136177][ T2273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1017.136189][ T2273] Call Trace: [ 1017.136197][ T2273] [ 1017.136205][ T2273] dump_stack_lvl+0xe8/0x150 [ 1017.136230][ T2273] bad_page+0x17f/0x1c0 [ 1017.136254][ T2273] __free_frozen_pages+0xcd9/0xd30 [ 1017.136287][ T2273] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 1017.136325][ T2273] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1017.136350][ T2273] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1017.136368][ T2273] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1017.136408][ T2273] do_xdp_generic+0xac5/0x12e0 [ 1017.136433][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1017.136459][ T2273] ? __pfx_do_xdp_generic+0x10/0x10 [ 1017.136489][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1017.136517][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1017.136536][ T2273] tun_get_user+0x24ca/0x43e0 [ 1017.136562][ T2273] ? aa_file_perm+0x192/0x15e0 [ 1017.136583][ T2273] ? aa_file_perm+0x50e/0x15e0 [ 1017.136601][ T2273] ? __pfx_tun_get_user+0x10/0x10 [ 1017.136621][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1017.136643][ T2273] ? preempt_schedule_thunk+0x16/0x30 [ 1017.136671][ T2273] ? preempt_schedule_common+0x82/0xd0 [ 1017.136692][ T2273] ? ref_tracker_alloc+0x35c/0x4c0 [ 1017.136715][ T2273] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1017.136736][ T2273] ? tun_get+0x1c/0x2f0 [ 1017.136754][ T2273] ? tun_get+0x1c/0x2f0 [ 1017.136785][ T2273] ? tun_get+0x1c/0x2f0 [ 1017.136802][ T2273] ? tun_get+0x1c/0x2f0 [ 1017.136839][ T2273] tun_chr_write_iter+0x113/0x200 [ 1017.136860][ T2273] vfs_write+0x61d/0xb90 [ 1017.136893][ T2273] ? __pfx_vfs_write+0x10/0x10 [ 1017.136946][ T2273] ? __fget_files+0x2a/0x420 [ 1017.136972][ T2273] ksys_write+0x150/0x270 [ 1017.136998][ T2273] ? __pfx_ksys_write+0x10/0x10 [ 1017.137027][ T2273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.137047][ T2273] do_syscall_64+0x174/0x580 [ 1017.137065][ T2273] ? trace_irq_disable+0x3b/0x140 [ 1017.137093][ T2273] ? clear_bhb_loop+0x40/0x90 [ 1017.137114][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.137132][ T2273] RIP: 0033:0x7fd45af5d68e [ 1017.137148][ T2273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1017.137165][ T2273] RSP: 002b:00007fd45bd9efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1017.137184][ T2273] RAX: ffffffffffffffda RBX: 00007fd45bd9f6c0 RCX: 00007fd45af5d68e [ 1017.137198][ T2273] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 00000000000000c8 [ 1017.137210][ T2273] RBP: 00007fd45b032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1017.137222][ T2273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.137233][ T2273] R13: 00007fd45b216038 R14: 00007fd45b215fa0 R15: 00007ffddec78de8 [ 1017.137255][ T2273] [ 1017.137265][ T2273] BUG: Bad page state in process syz.0.6965 pfn:58ad2 [ 1017.428312][ T2273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000205 pfn:0x58ad2 [ 1017.437845][ T2273] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1017.445015][ T2273] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 1017.453726][ T2273] raw: 0000000200000205 0000000000000001 00000000ffffffff 0000000000000000 [ 1017.462367][ T2273] page dumped because: page_pool leak [ 1017.467765][ T2273] page_owner tracks the page as allocated [ 1017.473547][ T2273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 2273, tgid 2267 (syz.0.6965), ts 1014969393669, free_ts 1014948652806 [ 1017.490797][ T2273] post_alloc_hook+0x22d/0x280 [ 1017.495642][ T2273] get_page_from_freelist+0x2593/0x2610 [ 1017.501238][ T2273] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1017.507076][ T2273] __alloc_pages_noprof+0x10/0x100 [ 1017.512299][ T2273] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 1017.517805][ T2273] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1017.523935][ T2273] skb_pp_cow_data+0xc91/0x19b0 [ 1017.528811][ T2273] do_xdp_generic+0x76b/0x12e0 [ 1017.533633][ T2273] tun_get_user+0x24ca/0x43e0 [ 1017.538345][ T2273] tun_chr_write_iter+0x113/0x200 [ 1017.543436][ T2273] vfs_write+0x61d/0xb90 [ 1017.547714][ T2273] ksys_write+0x150/0x270 [ 1017.552144][ T2273] do_syscall_64+0x174/0x580 [ 1017.556798][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.562768][ T2273] page last free pid 2275 tgid 2267 stack trace: [ 1017.569121][ T2273] __free_frozen_pages+0xc1c/0xd30 [ 1017.574295][ T2273] __folio_put+0x4a2/0x580 [ 1017.578754][ T2273] af_alg_free_resources+0x687/0x8d0 [ 1017.584104][ T2273] skcipher_recvmsg+0xbd4/0x1140 [ 1017.589081][ T2273] sock_recvmsg+0x172/0x1b0 [ 1017.593661][ T2273] ____sys_recvmsg+0x1e6/0x4a0 [ 1017.598456][ T2273] ___sys_recvmsg+0x215/0x590 [ 1017.603195][ T2273] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1017.608354][ T2273] do_syscall_64+0x174/0x580 [ 1017.613014][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.618946][ T2273] Modules linked in: [ 1017.622924][ T2273] CPU: 0 UID: 0 PID: 2273 Comm: syz.0.6965 Tainted: G B syzkaller #0 PREEMPT(full) [ 1017.622954][ T2273] Tainted: [B]=BAD_PAGE [ 1017.622962][ T2273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1017.622975][ T2273] Call Trace: [ 1017.622984][ T2273] [ 1017.622993][ T2273] dump_stack_lvl+0xe8/0x150 [ 1017.623022][ T2273] bad_page+0x17f/0x1c0 [ 1017.623048][ T2273] __free_frozen_pages+0xcd9/0xd30 [ 1017.623095][ T2273] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 1017.623132][ T2273] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1017.623176][ T2273] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1017.623195][ T2273] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1017.623239][ T2273] do_xdp_generic+0xac5/0x12e0 [ 1017.623265][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1017.623294][ T2273] ? __pfx_do_xdp_generic+0x10/0x10 [ 1017.623327][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1017.623364][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1017.623385][ T2273] tun_get_user+0x24ca/0x43e0 [ 1017.623414][ T2273] ? aa_file_perm+0x192/0x15e0 [ 1017.623438][ T2273] ? aa_file_perm+0x50e/0x15e0 [ 1017.623457][ T2273] ? __pfx_tun_get_user+0x10/0x10 [ 1017.623479][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1017.623510][ T2273] ? preempt_schedule_thunk+0x16/0x30 [ 1017.623551][ T2273] ? preempt_schedule_common+0x82/0xd0 [ 1017.623573][ T2273] ? ref_tracker_alloc+0x35c/0x4c0 [ 1017.623596][ T2273] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1017.623619][ T2273] ? tun_get+0x1c/0x2f0 [ 1017.623637][ T2273] ? tun_get+0x1c/0x2f0 [ 1017.623658][ T2273] ? tun_get+0x1c/0x2f0 [ 1017.623676][ T2273] ? tun_get+0x1c/0x2f0 [ 1017.623697][ T2273] tun_chr_write_iter+0x113/0x200 [ 1017.623718][ T2273] vfs_write+0x61d/0xb90 [ 1017.623751][ T2273] ? __pfx_vfs_write+0x10/0x10 [ 1017.623801][ T2273] ? __fget_files+0x2a/0x420 [ 1017.623831][ T2273] ksys_write+0x150/0x270 [ 1017.623862][ T2273] ? __pfx_ksys_write+0x10/0x10 [ 1017.623897][ T2273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.623920][ T2273] do_syscall_64+0x174/0x580 [ 1017.623941][ T2273] ? trace_irq_disable+0x3b/0x140 [ 1017.623971][ T2273] ? clear_bhb_loop+0x40/0x90 [ 1017.623996][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.624017][ T2273] RIP: 0033:0x7fd45af5d68e [ 1017.624035][ T2273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1017.624053][ T2273] RSP: 002b:00007fd45bd9efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1017.624075][ T2273] RAX: ffffffffffffffda RBX: 00007fd45bd9f6c0 RCX: 00007fd45af5d68e [ 1017.624110][ T2273] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 00000000000000c8 [ 1017.624124][ T2273] RBP: 00007fd45b032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1017.624139][ T2273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.624153][ T2273] R13: 00007fd45b216038 R14: 00007fd45b215fa0 R15: 00007ffddec78de8 [ 1017.624180][ T2273] [ 1017.624192][ T2273] BUG: Bad page state in process syz.0.6965 pfn:5d208 [ 1017.915284][ T2273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000206 pfn:0x5d208 [ 1017.924822][ T2273] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1017.931993][ T2273] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 1017.940594][ T2273] raw: 0000000200000206 0000000000000001 00000000ffffffff 0000000000000000 [ 1017.949231][ T2273] page dumped because: page_pool leak [ 1017.954646][ T2273] page_owner tracks the page as allocated [ 1017.960404][ T2273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 2273, tgid 2267 (syz.0.6965), ts 1014969376685, free_ts 1014948667470 [ 1017.977655][ T2273] post_alloc_hook+0x22d/0x280 [ 1017.982516][ T2273] get_page_from_freelist+0x2593/0x2610 [ 1017.988102][ T2273] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1017.993989][ T2273] __alloc_pages_noprof+0x10/0x100 [ 1017.999160][ T2273] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 1018.004714][ T2273] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1018.010823][ T2273] skb_pp_cow_data+0xc91/0x19b0 [ 1018.015729][ T2273] do_xdp_generic+0x76b/0x12e0 [ 1018.020547][ T2273] tun_get_user+0x24ca/0x43e0 [ 1018.025304][ T2273] tun_chr_write_iter+0x113/0x200 [ 1018.030374][ T2273] vfs_write+0x61d/0xb90 [ 1018.034698][ T2273] ksys_write+0x150/0x270 [ 1018.039079][ T2273] do_syscall_64+0x174/0x580 [ 1018.043739][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.049662][ T2273] page last free pid 2275 tgid 2267 stack trace: [ 1018.056056][ T2273] __free_frozen_pages+0xc1c/0xd30 [ 1018.061237][ T2273] __folio_put+0x4a2/0x580 [ 1018.065700][ T2273] af_alg_free_resources+0x687/0x8d0 [ 1018.071032][ T2273] skcipher_recvmsg+0xbd4/0x1140 [ 1018.076024][ T2273] sock_recvmsg+0x172/0x1b0 [ 1018.080559][ T2273] ____sys_recvmsg+0x1e6/0x4a0 [ 1018.085397][ T2273] ___sys_recvmsg+0x215/0x590 [ 1018.090198][ T2273] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1018.095212][ T2273] do_syscall_64+0x174/0x580 [ 1018.099841][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.105792][ T2273] Modules linked in: [ 1018.109732][ T2273] CPU: 0 UID: 0 PID: 2273 Comm: syz.0.6965 Tainted: G B syzkaller #0 PREEMPT(full) [ 1018.109759][ T2273] Tainted: [B]=BAD_PAGE [ 1018.109766][ T2273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1018.109777][ T2273] Call Trace: [ 1018.109784][ T2273] [ 1018.109792][ T2273] dump_stack_lvl+0xe8/0x150 [ 1018.109814][ T2273] bad_page+0x17f/0x1c0 [ 1018.109837][ T2273] __free_frozen_pages+0xcd9/0xd30 [ 1018.109867][ T2273] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 1018.109902][ T2273] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1018.109925][ T2273] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1018.109943][ T2273] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1018.109998][ T2273] do_xdp_generic+0xac5/0x12e0 [ 1018.110023][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1018.110049][ T2273] ? __pfx_do_xdp_generic+0x10/0x10 [ 1018.110079][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1018.110107][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1018.110125][ T2273] tun_get_user+0x24ca/0x43e0 [ 1018.110153][ T2273] ? aa_file_perm+0x192/0x15e0 [ 1018.110174][ T2273] ? aa_file_perm+0x50e/0x15e0 [ 1018.110192][ T2273] ? __pfx_tun_get_user+0x10/0x10 [ 1018.110223][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1018.110243][ T2273] ? preempt_schedule_thunk+0x16/0x30 [ 1018.110270][ T2273] ? preempt_schedule_common+0x82/0xd0 [ 1018.110290][ T2273] ? ref_tracker_alloc+0x35c/0x4c0 [ 1018.110338][ T2273] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1018.110360][ T2273] ? tun_get+0x1c/0x2f0 [ 1018.110378][ T2273] ? tun_get+0x1c/0x2f0 [ 1018.110399][ T2273] ? tun_get+0x1c/0x2f0 [ 1018.110417][ T2273] ? tun_get+0x1c/0x2f0 [ 1018.110437][ T2273] tun_chr_write_iter+0x113/0x200 [ 1018.110459][ T2273] vfs_write+0x61d/0xb90 [ 1018.110491][ T2273] ? __pfx_vfs_write+0x10/0x10 [ 1018.110523][ T2273] ? __fget_files+0x2a/0x420 [ 1018.110552][ T2273] ksys_write+0x150/0x270 [ 1018.110580][ T2273] ? __pfx_ksys_write+0x10/0x10 [ 1018.110613][ T2273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.110634][ T2273] do_syscall_64+0x174/0x580 [ 1018.110653][ T2273] ? trace_irq_disable+0x3b/0x140 [ 1018.110682][ T2273] ? clear_bhb_loop+0x40/0x90 [ 1018.110714][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.110732][ T2273] RIP: 0033:0x7fd45af5d68e [ 1018.110748][ T2273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1018.110764][ T2273] RSP: 002b:00007fd45bd9efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1018.110783][ T2273] RAX: ffffffffffffffda RBX: 00007fd45bd9f6c0 RCX: 00007fd45af5d68e [ 1018.110797][ T2273] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 00000000000000c8 [ 1018.110809][ T2273] RBP: 00007fd45b032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1018.110821][ T2273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.110833][ T2273] R13: 00007fd45b216038 R14: 00007fd45b215fa0 R15: 00007ffddec78de8 [ 1018.110856][ T2273] [ 1018.110865][ T2273] BUG: Bad page state in process syz.0.6965 pfn:1d2ee [ 1018.402001][ T2273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000208 pfn:0x1d2ee [ 1018.411531][ T2273] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1018.418777][ T2273] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 1018.427405][ T2273] raw: 0000000200000208 0000000000000001 00000000ffffffff 0000000000000000 [ 1018.436026][ T2273] page dumped because: page_pool leak [ 1018.441432][ T2273] page_owner tracks the page as allocated [ 1018.447165][ T2273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 2273, tgid 2267 (syz.0.6965), ts 1014969359792, free_ts 1014948680196 [ 1018.464422][ T2273] post_alloc_hook+0x22d/0x280 [ 1018.469252][ T2273] get_page_from_freelist+0x2593/0x2610 [ 1018.474863][ T2273] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1018.480699][ T2273] __alloc_pages_noprof+0x10/0x100 [ 1018.485879][ T2273] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 1018.491418][ T2273] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1018.497525][ T2273] skb_pp_cow_data+0xc91/0x19b0 [ 1018.502460][ T2273] do_xdp_generic+0x76b/0x12e0 [ 1018.507265][ T2273] tun_get_user+0x24ca/0x43e0 [ 1018.512013][ T2273] tun_chr_write_iter+0x113/0x200 [ 1018.517070][ T2273] vfs_write+0x61d/0xb90 [ 1018.521371][ T2273] ksys_write+0x150/0x270 [ 1018.525735][ T2273] do_syscall_64+0x174/0x580 [ 1018.530354][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.536317][ T2273] page last free pid 2275 tgid 2267 stack trace: [ 1018.542696][ T2273] __free_frozen_pages+0xc1c/0xd30 [ 1018.547841][ T2273] __folio_put+0x4a2/0x580 [ 1018.552313][ T2273] af_alg_free_resources+0x687/0x8d0 [ 1018.557621][ T2273] skcipher_recvmsg+0xbd4/0x1140 [ 1018.562637][ T2273] sock_recvmsg+0x172/0x1b0 [ 1018.567170][ T2273] ____sys_recvmsg+0x1e6/0x4a0 [ 1018.571989][ T2273] ___sys_recvmsg+0x215/0x590 [ 1018.576698][ T2273] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1018.581726][ T2273] do_syscall_64+0x174/0x580 [ 1018.586362][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.592326][ T2273] Modules linked in: [ 1018.596252][ T2273] CPU: 0 UID: 0 PID: 2273 Comm: syz.0.6965 Tainted: G B syzkaller #0 PREEMPT(full) [ 1018.596286][ T2273] Tainted: [B]=BAD_PAGE [ 1018.596294][ T2273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1018.596306][ T2273] Call Trace: [ 1018.596314][ T2273] [ 1018.596323][ T2273] dump_stack_lvl+0xe8/0x150 [ 1018.596346][ T2273] bad_page+0x17f/0x1c0 [ 1018.596370][ T2273] __free_frozen_pages+0xcd9/0xd30 [ 1018.596402][ T2273] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 1018.596438][ T2273] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1018.596462][ T2273] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1018.596481][ T2273] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1018.596520][ T2273] do_xdp_generic+0xac5/0x12e0 [ 1018.596544][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1018.596570][ T2273] ? __pfx_do_xdp_generic+0x10/0x10 [ 1018.596601][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1018.596629][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1018.596648][ T2273] tun_get_user+0x24ca/0x43e0 [ 1018.596675][ T2273] ? aa_file_perm+0x192/0x15e0 [ 1018.596696][ T2273] ? aa_file_perm+0x50e/0x15e0 [ 1018.596714][ T2273] ? __pfx_tun_get_user+0x10/0x10 [ 1018.596734][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1018.596756][ T2273] ? preempt_schedule_thunk+0x16/0x30 [ 1018.596784][ T2273] ? preempt_schedule_common+0x82/0xd0 [ 1018.596805][ T2273] ? ref_tracker_alloc+0x35c/0x4c0 [ 1018.596829][ T2273] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1018.596851][ T2273] ? tun_get+0x1c/0x2f0 [ 1018.596869][ T2273] ? tun_get+0x1c/0x2f0 [ 1018.596890][ T2273] ? tun_get+0x1c/0x2f0 [ 1018.596908][ T2273] ? tun_get+0x1c/0x2f0 [ 1018.596929][ T2273] tun_chr_write_iter+0x113/0x200 [ 1018.596949][ T2273] vfs_write+0x61d/0xb90 [ 1018.596982][ T2273] ? __pfx_vfs_write+0x10/0x10 [ 1018.597013][ T2273] ? __fget_files+0x2a/0x420 [ 1018.597042][ T2273] ksys_write+0x150/0x270 [ 1018.597071][ T2273] ? __pfx_ksys_write+0x10/0x10 [ 1018.597103][ T2273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.597124][ T2273] do_syscall_64+0x174/0x580 [ 1018.597144][ T2273] ? trace_irq_disable+0x3b/0x140 [ 1018.597172][ T2273] ? clear_bhb_loop+0x40/0x90 [ 1018.597194][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.597213][ T2273] RIP: 0033:0x7fd45af5d68e [ 1018.597230][ T2273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1018.597247][ T2273] RSP: 002b:00007fd45bd9efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1018.597268][ T2273] RAX: ffffffffffffffda RBX: 00007fd45bd9f6c0 RCX: 00007fd45af5d68e [ 1018.597291][ T2273] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 00000000000000c8 [ 1018.597304][ T2273] RBP: 00007fd45b032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1018.597317][ T2273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.597329][ T2273] R13: 00007fd45b216038 R14: 00007fd45b215fa0 R15: 00007ffddec78de8 [ 1018.597353][ T2273] [ 1018.597364][ T2273] BUG: Bad page state in process syz.0.6965 pfn:7b121 [ 1018.888230][ T2273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000207 pfn:0x7b121 [ 1018.897751][ T2273] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1018.904925][ T2273] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 1018.913572][ T2273] raw: 0000000200000207 0000000000000001 00000000ffffffff 0000000000000000 [ 1018.922199][ T2273] page dumped because: page_pool leak [ 1018.927576][ T2273] page_owner tracks the page as allocated [ 1018.933332][ T2273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 2273, tgid 2267 (syz.0.6965), ts 1014969343260, free_ts 1014948693746 [ 1018.950561][ T2273] post_alloc_hook+0x22d/0x280 [ 1018.955409][ T2273] get_page_from_freelist+0x2593/0x2610 [ 1018.960982][ T2273] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1018.966839][ T2273] __alloc_pages_noprof+0x10/0x100 [ 1018.972002][ T2273] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 1018.977490][ T2273] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1018.983617][ T2273] skb_pp_cow_data+0xc91/0x19b0 [ 1018.988506][ T2273] do_xdp_generic+0x76b/0x12e0 [ 1018.993349][ T2273] tun_get_user+0x24ca/0x43e0 [ 1018.998070][ T2273] tun_chr_write_iter+0x113/0x200 [ 1019.003158][ T2273] vfs_write+0x61d/0xb90 [ 1019.007441][ T2273] ksys_write+0x150/0x270 [ 1019.011829][ T2273] do_syscall_64+0x174/0x580 [ 1019.016440][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.022415][ T2273] page last free pid 2275 tgid 2267 stack trace: [ 1019.028749][ T2273] __free_frozen_pages+0xc1c/0xd30 [ 1019.033921][ T2273] __folio_put+0x4a2/0x580 [ 1019.038378][ T2273] af_alg_free_resources+0x687/0x8d0 [ 1019.043730][ T2273] skcipher_recvmsg+0xbd4/0x1140 [ 1019.048700][ T2273] sock_recvmsg+0x172/0x1b0 [ 1019.053280][ T2273] ____sys_recvmsg+0x1e6/0x4a0 [ 1019.058112][ T2273] ___sys_recvmsg+0x215/0x590 [ 1019.062854][ T2273] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1019.067825][ T2273] do_syscall_64+0x174/0x580 [ 1019.072474][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.078399][ T2273] Modules linked in: [ 1019.082367][ T2273] CPU: 0 UID: 0 PID: 2273 Comm: syz.0.6965 Tainted: G B syzkaller #0 PREEMPT(full) [ 1019.082398][ T2273] Tainted: [B]=BAD_PAGE [ 1019.082407][ T2273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1019.082421][ T2273] Call Trace: [ 1019.082429][ T2273] [ 1019.082437][ T2273] dump_stack_lvl+0xe8/0x150 [ 1019.082463][ T2273] bad_page+0x17f/0x1c0 [ 1019.082486][ T2273] __free_frozen_pages+0xcd9/0xd30 [ 1019.082520][ T2273] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 1019.082558][ T2273] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1019.082584][ T2273] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1019.082602][ T2273] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1019.082644][ T2273] do_xdp_generic+0xac5/0x12e0 [ 1019.082669][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1019.082696][ T2273] ? __pfx_do_xdp_generic+0x10/0x10 [ 1019.082728][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1019.082756][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1019.082776][ T2273] tun_get_user+0x24ca/0x43e0 [ 1019.082805][ T2273] ? aa_file_perm+0x192/0x15e0 [ 1019.082827][ T2273] ? aa_file_perm+0x50e/0x15e0 [ 1019.082846][ T2273] ? __pfx_tun_get_user+0x10/0x10 [ 1019.082867][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1019.082890][ T2273] ? preempt_schedule_thunk+0x16/0x30 [ 1019.082919][ T2273] ? preempt_schedule_common+0x82/0xd0 [ 1019.082951][ T2273] ? ref_tracker_alloc+0x35c/0x4c0 [ 1019.082974][ T2273] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1019.082995][ T2273] ? tun_get+0x1c/0x2f0 [ 1019.083013][ T2273] ? tun_get+0x1c/0x2f0 [ 1019.083033][ T2273] ? tun_get+0x1c/0x2f0 [ 1019.083058][ T2273] ? tun_get+0x1c/0x2f0 [ 1019.083079][ T2273] tun_chr_write_iter+0x113/0x200 [ 1019.083098][ T2273] vfs_write+0x61d/0xb90 [ 1019.083130][ T2273] ? __pfx_vfs_write+0x10/0x10 [ 1019.083162][ T2273] ? __fget_files+0x2a/0x420 [ 1019.083190][ T2273] ksys_write+0x150/0x270 [ 1019.083233][ T2273] ? __pfx_ksys_write+0x10/0x10 [ 1019.083264][ T2273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.083284][ T2273] do_syscall_64+0x174/0x580 [ 1019.083313][ T2273] ? trace_irq_disable+0x3b/0x140 [ 1019.083340][ T2273] ? clear_bhb_loop+0x40/0x90 [ 1019.083362][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.083381][ T2273] RIP: 0033:0x7fd45af5d68e [ 1019.083398][ T2273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1019.083415][ T2273] RSP: 002b:00007fd45bd9efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1019.083435][ T2273] RAX: ffffffffffffffda RBX: 00007fd45bd9f6c0 RCX: 00007fd45af5d68e [ 1019.083450][ T2273] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 00000000000000c8 [ 1019.083463][ T2273] RBP: 00007fd45b032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1019.083475][ T2273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.083486][ T2273] R13: 00007fd45b216038 R14: 00007fd45b215fa0 R15: 00007ffddec78de8 [ 1019.083507][ T2273] [ 1019.083517][ T2273] BUG: Bad page state in process syz.0.6965 pfn:7da76 [ 1019.375006][ T2273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2000001c0 pfn:0x7da76 [ 1019.384533][ T2273] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1019.391715][ T2273] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 1019.400330][ T2273] raw: 00000002000001c0 0000000000000001 00000000ffffffff 0000000000000000 [ 1019.408990][ T2273] page dumped because: page_pool leak [ 1019.414414][ T2273] page_owner tracks the page as allocated [ 1019.420154][ T2273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 2273, tgid 2267 (syz.0.6965), ts 1014969326840, free_ts 1014948706587 [ 1019.437407][ T2273] post_alloc_hook+0x22d/0x280 [ 1019.442231][ T2273] get_page_from_freelist+0x2593/0x2610 [ 1019.447807][ T2273] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1019.453667][ T2273] __alloc_pages_noprof+0x10/0x100 [ 1019.458915][ T2273] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 1019.464472][ T2273] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1019.470577][ T2273] skb_pp_cow_data+0xc91/0x19b0 [ 1019.475492][ T2273] do_xdp_generic+0x76b/0x12e0 [ 1019.480309][ T2273] tun_get_user+0x24ca/0x43e0 [ 1019.485053][ T2273] tun_chr_write_iter+0x113/0x200 [ 1019.490110][ T2273] vfs_write+0x61d/0xb90 [ 1019.494436][ T2273] ksys_write+0x150/0x270 [ 1019.498836][ T2273] do_syscall_64+0x174/0x580 [ 1019.503473][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.509392][ T2273] page last free pid 2275 tgid 2267 stack trace: [ 1019.515788][ T2273] __free_frozen_pages+0xc1c/0xd30 [ 1019.520927][ T2273] __folio_put+0x4a2/0x580 [ 1019.525400][ T2273] af_alg_free_resources+0x687/0x8d0 [ 1019.530712][ T2273] skcipher_recvmsg+0xbd4/0x1140 [ 1019.535701][ T2273] sock_recvmsg+0x172/0x1b0 [ 1019.540255][ T2273] ____sys_recvmsg+0x1e6/0x4a0 [ 1019.545077][ T2273] ___sys_recvmsg+0x215/0x590 [ 1019.549785][ T2273] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1019.554780][ T2273] do_syscall_64+0x174/0x580 [ 1019.559403][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.565346][ T2273] Modules linked in: [ 1019.569271][ T2273] CPU: 0 UID: 0 PID: 2273 Comm: syz.0.6965 Tainted: G B syzkaller #0 PREEMPT(full) [ 1019.569299][ T2273] Tainted: [B]=BAD_PAGE [ 1019.569307][ T2273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1019.569319][ T2273] Call Trace: [ 1019.569327][ T2273] [ 1019.569335][ T2273] dump_stack_lvl+0xe8/0x150 [ 1019.569359][ T2273] bad_page+0x17f/0x1c0 [ 1019.569383][ T2273] __free_frozen_pages+0xcd9/0xd30 [ 1019.569416][ T2273] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 1019.569453][ T2273] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1019.569477][ T2273] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1019.569495][ T2273] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1019.569536][ T2273] do_xdp_generic+0xac5/0x12e0 [ 1019.569561][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1019.569587][ T2273] ? __pfx_do_xdp_generic+0x10/0x10 [ 1019.569617][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1019.569646][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1019.569664][ T2273] tun_get_user+0x24ca/0x43e0 [ 1019.569691][ T2273] ? aa_file_perm+0x192/0x15e0 [ 1019.569713][ T2273] ? aa_file_perm+0x50e/0x15e0 [ 1019.569738][ T2273] ? __pfx_tun_get_user+0x10/0x10 [ 1019.569758][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1019.569780][ T2273] ? preempt_schedule_thunk+0x16/0x30 [ 1019.569808][ T2273] ? preempt_schedule_common+0x82/0xd0 [ 1019.569829][ T2273] ? ref_tracker_alloc+0x35c/0x4c0 [ 1019.569853][ T2273] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1019.569875][ T2273] ? tun_get+0x1c/0x2f0 [ 1019.569893][ T2273] ? tun_get+0x1c/0x2f0 [ 1019.569914][ T2273] ? tun_get+0x1c/0x2f0 [ 1019.569932][ T2273] ? tun_get+0x1c/0x2f0 [ 1019.569952][ T2273] tun_chr_write_iter+0x113/0x200 [ 1019.569973][ T2273] vfs_write+0x61d/0xb90 [ 1019.570005][ T2273] ? __pfx_vfs_write+0x10/0x10 [ 1019.570037][ T2273] ? __fget_files+0x2a/0x420 [ 1019.570066][ T2273] ksys_write+0x150/0x270 [ 1019.570095][ T2273] ? __pfx_ksys_write+0x10/0x10 [ 1019.570127][ T2273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.570147][ T2273] do_syscall_64+0x174/0x580 [ 1019.570167][ T2273] ? trace_irq_disable+0x3b/0x140 [ 1019.570197][ T2273] ? clear_bhb_loop+0x40/0x90 [ 1019.570219][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.570238][ T2273] RIP: 0033:0x7fd45af5d68e [ 1019.570256][ T2273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1019.570284][ T2273] RSP: 002b:00007fd45bd9efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1019.570302][ T2273] RAX: ffffffffffffffda RBX: 00007fd45bd9f6c0 RCX: 00007fd45af5d68e [ 1019.570317][ T2273] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 00000000000000c8 [ 1019.570329][ T2273] RBP: 00007fd45b032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1019.570341][ T2273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.570353][ T2273] R13: 00007fd45b216038 R14: 00007fd45b215fa0 R15: 00007ffddec78de8 [ 1019.570375][ T2273] [ 1019.570385][ T2273] BUG: Bad page state in process syz.0.6965 pfn:64dd9 [ 1019.702068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.702684][ T2273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffff00000000 pfn:0x64dd9 [ 1019.782704][T20127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.783329][ T2273] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1019.894568][ T2273] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 1019.903222][ T2273] raw: ffffffff00000000 0000000000000001 00000000ffffffff 0000000000000000 [ 1019.911882][ T2273] page dumped because: page_pool leak [ 1019.917274][ T2273] page_owner tracks the page as allocated [ 1019.923050][ T2273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 2273, tgid 2267 (syz.0.6965), ts 1014969309746, free_ts 1014948720195 [ 1019.940295][ T2273] post_alloc_hook+0x22d/0x280 [ 1019.945154][ T2273] get_page_from_freelist+0x2593/0x2610 [ 1019.950733][ T2273] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1019.956606][ T2273] __alloc_pages_noprof+0x10/0x100 [ 1019.961775][ T2273] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 1019.967347][ T2273] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1019.973466][ T2273] skb_pp_cow_data+0xc91/0x19b0 [ 1019.978338][ T2273] do_xdp_generic+0x76b/0x12e0 [ 1019.983251][ T2273] tun_get_user+0x24ca/0x43e0 [ 1019.987954][ T2273] tun_chr_write_iter+0x113/0x200 [ 1019.993034][ T2273] vfs_write+0x61d/0xb90 [ 1019.997302][ T2273] ksys_write+0x150/0x270 [ 1020.001687][ T2273] do_syscall_64+0x174/0x580 [ 1020.006308][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.012254][ T2273] page last free pid 2275 tgid 2267 stack trace: [ 1020.018598][ T2273] __free_frozen_pages+0xc1c/0xd30 [ 1020.023794][ T2273] __folio_put+0x4a2/0x580 [ 1020.028246][ T2273] af_alg_free_resources+0x687/0x8d0 [ 1020.033598][ T2273] skcipher_recvmsg+0xbd4/0x1140 [ 1020.038596][ T2273] sock_recvmsg+0x172/0x1b0 [ 1020.043172][ T2273] ____sys_recvmsg+0x1e6/0x4a0 [ 1020.047956][ T2273] ___sys_recvmsg+0x215/0x590 [ 1020.052775][ T2273] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1020.057753][ T2273] do_syscall_64+0x174/0x580 [ 1020.062410][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.068333][ T2273] Modules linked in: [ 1020.072281][ T2273] CPU: 0 UID: 0 PID: 2273 Comm: syz.0.6965 Tainted: G B syzkaller #0 PREEMPT(full) [ 1020.072308][ T2273] Tainted: [B]=BAD_PAGE [ 1020.072316][ T2273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1020.072327][ T2273] Call Trace: [ 1020.072335][ T2273] [ 1020.072342][ T2273] dump_stack_lvl+0xe8/0x150 [ 1020.072366][ T2273] bad_page+0x17f/0x1c0 [ 1020.072388][ T2273] __free_frozen_pages+0xcd9/0xd30 [ 1020.072418][ T2273] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 1020.072453][ T2273] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1020.072475][ T2273] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1020.072492][ T2273] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1020.072529][ T2273] do_xdp_generic+0xac5/0x12e0 [ 1020.072552][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1020.072576][ T2273] ? __pfx_do_xdp_generic+0x10/0x10 [ 1020.072605][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1020.072631][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1020.072649][ T2273] tun_get_user+0x24ca/0x43e0 [ 1020.072700][ T2273] ? aa_file_perm+0x192/0x15e0 [ 1020.072721][ T2273] ? aa_file_perm+0x50e/0x15e0 [ 1020.072739][ T2273] ? __pfx_tun_get_user+0x10/0x10 [ 1020.072759][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1020.072781][ T2273] ? preempt_schedule_thunk+0x16/0x30 [ 1020.072809][ T2273] ? preempt_schedule_common+0x82/0xd0 [ 1020.072840][ T2273] ? ref_tracker_alloc+0x35c/0x4c0 [ 1020.072862][ T2273] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1020.072883][ T2273] ? tun_get+0x1c/0x2f0 [ 1020.072900][ T2273] ? tun_get+0x1c/0x2f0 [ 1020.072920][ T2273] ? tun_get+0x1c/0x2f0 [ 1020.072936][ T2273] ? tun_get+0x1c/0x2f0 [ 1020.072956][ T2273] tun_chr_write_iter+0x113/0x200 [ 1020.072975][ T2273] vfs_write+0x61d/0xb90 [ 1020.073005][ T2273] ? __pfx_vfs_write+0x10/0x10 [ 1020.073035][ T2273] ? __fget_files+0x2a/0x420 [ 1020.073062][ T2273] ksys_write+0x150/0x270 [ 1020.073106][ T2273] ? __pfx_ksys_write+0x10/0x10 [ 1020.073149][ T2273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.073169][ T2273] do_syscall_64+0x174/0x580 [ 1020.073187][ T2273] ? trace_irq_disable+0x3b/0x140 [ 1020.073214][ T2273] ? clear_bhb_loop+0x40/0x90 [ 1020.073235][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.073253][ T2273] RIP: 0033:0x7fd45af5d68e [ 1020.073269][ T2273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1020.073285][ T2273] RSP: 002b:00007fd45bd9efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1020.073304][ T2273] RAX: ffffffffffffffda RBX: 00007fd45bd9f6c0 RCX: 00007fd45af5d68e [ 1020.073318][ T2273] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 00000000000000c8 [ 1020.073330][ T2273] RBP: 00007fd45b032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1020.073343][ T2273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.073354][ T2273] R13: 00007fd45b216038 R14: 00007fd45b215fa0 R15: 00007ffddec78de8 [ 1020.073376][ T2273] [ 1020.073386][ T2273] BUG: Bad page state in process syz.0.6965 pfn:9c6a8 [ 1020.364394][ T2273] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88809c6a8c80 pfn:0x9c6a8 [ 1020.374541][ T2273] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1020.381708][ T2273] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 1020.390328][ T2273] raw: ffff88809c6a8c80 0000000000000001 00000000ffffffff 0000000000000000 [ 1020.398971][ T2273] page dumped because: page_pool leak [ 1020.404394][ T2273] page_owner tracks the page as allocated [ 1020.410151][ T2273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 2273, tgid 2267 (syz.0.6965), ts 1014969292682, free_ts 1014948797943 [ 1020.427401][ T2273] post_alloc_hook+0x22d/0x280 [ 1020.432223][ T2273] get_page_from_freelist+0x2593/0x2610 [ 1020.437802][ T2273] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1020.443667][ T2273] __alloc_pages_noprof+0x10/0x100 [ 1020.448905][ T2273] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 1020.454420][ T2273] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1020.460545][ T2273] skb_pp_cow_data+0xc91/0x19b0 [ 1020.465448][ T2273] do_xdp_generic+0x76b/0x12e0 [ 1020.470256][ T2273] tun_get_user+0x24ca/0x43e0 [ 1020.474976][ T2273] tun_chr_write_iter+0x113/0x200 [ 1020.480026][ T2273] vfs_write+0x61d/0xb90 [ 1020.484317][ T2273] ksys_write+0x150/0x270 [ 1020.488671][ T2273] do_syscall_64+0x174/0x580 [ 1020.493330][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.499257][ T2273] page last free pid 2275 tgid 2267 stack trace: [ 1020.505646][ T2273] __free_frozen_pages+0xc1c/0xd30 [ 1020.510790][ T2273] __folio_put+0x4a2/0x580 [ 1020.515269][ T2273] af_alg_free_resources+0x687/0x8d0 [ 1020.520587][ T2273] skcipher_recvmsg+0xbd4/0x1140 [ 1020.525605][ T2273] sock_recvmsg+0x172/0x1b0 [ 1020.530157][ T2273] ____sys_recvmsg+0x1e6/0x4a0 [ 1020.534983][ T2273] ___sys_recvmsg+0x215/0x590 [ 1020.539692][ T2273] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1020.544689][ T2273] do_syscall_64+0x174/0x580 [ 1020.549311][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.555276][ T2273] Modules linked in: [ 1020.559202][ T2273] CPU: 0 UID: 0 PID: 2273 Comm: syz.0.6965 Tainted: G B syzkaller #0 PREEMPT(full) [ 1020.559229][ T2273] Tainted: [B]=BAD_PAGE [ 1020.559236][ T2273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1020.559248][ T2273] Call Trace: [ 1020.559255][ T2273] [ 1020.559263][ T2273] dump_stack_lvl+0xe8/0x150 [ 1020.559286][ T2273] bad_page+0x17f/0x1c0 [ 1020.559308][ T2273] __free_frozen_pages+0xcd9/0xd30 [ 1020.559339][ T2273] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 1020.559375][ T2273] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1020.559398][ T2273] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1020.559415][ T2273] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1020.559453][ T2273] do_xdp_generic+0xac5/0x12e0 [ 1020.559476][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1020.559500][ T2273] ? __pfx_do_xdp_generic+0x10/0x10 [ 1020.559529][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1020.559556][ T2273] ? tun_get_user+0x2394/0x43e0 [ 1020.559592][ T2273] tun_get_user+0x24ca/0x43e0 [ 1020.559625][ T2273] ? aa_file_perm+0x192/0x15e0 [ 1020.559647][ T2273] ? aa_file_perm+0x50e/0x15e0 [ 1020.559665][ T2273] ? __pfx_tun_get_user+0x10/0x10 [ 1020.559685][ T2273] ? __lock_acquire+0x6b5/0x2cf0 [ 1020.559707][ T2273] ? preempt_schedule_thunk+0x16/0x30 [ 1020.559736][ T2273] ? preempt_schedule_common+0x82/0xd0 [ 1020.559757][ T2273] ? ref_tracker_alloc+0x35c/0x4c0 [ 1020.559797][ T2273] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1020.559821][ T2273] ? tun_get+0x1c/0x2f0 [ 1020.559840][ T2273] ? tun_get+0x1c/0x2f0 [ 1020.559863][ T2273] ? tun_get+0x1c/0x2f0 [ 1020.559882][ T2273] ? tun_get+0x1c/0x2f0 [ 1020.559904][ T2273] tun_chr_write_iter+0x113/0x200 [ 1020.559926][ T2273] vfs_write+0x61d/0xb90 [ 1020.559961][ T2273] ? __pfx_vfs_write+0x10/0x10 [ 1020.559996][ T2273] ? __fget_files+0x2a/0x420 [ 1020.560027][ T2273] ksys_write+0x150/0x270 [ 1020.560058][ T2273] ? __pfx_ksys_write+0x10/0x10 [ 1020.560092][ T2273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.560113][ T2273] do_syscall_64+0x174/0x580 [ 1020.560134][ T2273] ? trace_irq_disable+0x3b/0x140 [ 1020.560165][ T2273] ? clear_bhb_loop+0x40/0x90 [ 1020.560189][ T2273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.560210][ T2273] RIP: 0033:0x7fd45af5d68e [ 1020.560228][ T2273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1020.560247][ T2273] RSP: 002b:00007fd45bd9efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1020.560269][ T2273] RAX: ffffffffffffffda RBX: 00007fd45bd9f6c0 RCX: 00007fd45af5d68e [ 1020.560284][ T2273] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 00000000000000c8 [ 1020.560299][ T2273] RBP: 00007fd45b032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1020.560313][ T2273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.560326][ T2273] R13: 00007fd45b216038 R14: 00007fd45b215fa0 R15: 00007ffddec78de8 [ 1020.560351][ T2273] [ 1020.561995][T20127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.852639][T20127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.011320][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1021.131373][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1021.241385][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1021.351325][ T48] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1021.461887][ T57] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1021.571353][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1021.621487][T20127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.681388][T14429] bond7: (slave ip6gretap2): failed to get link speed/duplex