last executing test programs: 5.871486937s ago: executing program 0 (id=1358): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0x48850) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000280)=""/121, 0xa2ec4ae9}], 0x2, 0x0, 0x8dff}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000000f00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1000, @private1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000c00)="d191d3b1", 0x4}], 0x1, &(0x7f0000000f80)=ANY=[@ANYBLOB="580000000000000029000000370000003a07000000000000072800000001080701000500000000000000020000000000000007000000000000000104000000000000c910fe8000000000000000000000000000aa000000001400000000000000290000000800000003000000000000001400000000000000290000083e000000070000000000000014"], 0xa0}}], 0x2, 0x4004851) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c10c502047674ad4c6a08aff07664e018d7a126000cb10166cce0833ee378d4d5bcb090cc6f6ac5f9497d99534886f3a4c0a7f43f4489e051d49d981e6e22a7359134cb29c4e706f107c4132a4316a26095944d58b3d5c0cf48a8d472304e765d882cd9cdc6dcaf273291862559cc292a8b007be325acbc7766695ba9df089b17e6243a8e4e50e15e576b29b52ee1d3e6cae551a331cbd68850718f5fd78cd0670ed7692dbb6f684a941bfd4a7ce483081db9e793ba039556702a7bed39ba1c6d08dac3a4365", @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000008003c000600000008000300", @ANYRES32=r7, @ANYBLOB="060028000300000005002f00000000000500300000000000"], 0x3c}}, 0x18) 5.4062025s ago: executing program 0 (id=1361): unshare(0x20000400) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x60, r4, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x60}}, 0xc084) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4044890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) unshare(0x8040480) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000001c0)="15cd22ff5ceff1b824cb65adaf569669fd650fc984989760b3c12100041966e3061951a39eb702b45b61041c6daacdfa3b870eab0a85e5e452ead79510a2bd04e2fce1160a9e", 0xde9, r8}, 0x38) r9 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x3e}}}}}, 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x2001) 4.746874138s ago: executing program 0 (id=1367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000100)={@initdev, 0x0}, &(0x7f0000000180)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'ip_vti0\x00', r7, 0x80, 0x40, 0x90000, 0x57, {{0xb, 0x4, 0x1, 0x6, 0x2c, 0x66, 0x0, 0x68, 0x4, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x3, 0x90}, @ssrr={0x89, 0x13, 0x46, [@multicast1, @remote, @multicast2, @empty]}]}}}}}) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000390892d663b13ffbdb4b72c2cd2d82c55f30060f44ef03f6e7eb8eb37ba3ddee9ad46186e890eff5f1c6152be654c1f48d1f323e547f5d971a3ecf74ddecc7104fd3a19176a943e68c089ea61c9136067fc1bd6137384917fa7c0d1e3d3885baa9e141b3be3b39d690594d7c264600d80ef2a67610498ace7b6372d0050b3eaa2dc3ebfaaeaf1971b39ae4ca5cc5096ea1928f7641b57a730232c2e88f6752d5cfd52d28e83cf8effe5631c4f4ea463d39a9433da2e6a1062a97877f7a9d4748f8c8fa7e0be96f25cd45dab8330000000000", @ANYRES32=r8, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb0500040000000000"], 0x40}}, 0x0) sendto$packet(r4, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @local}, 0x14) splice(r2, 0x0, r3, 0x0, 0x39000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x35, 0x0, @void}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a08000240004000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3.066233848s ago: executing program 2 (id=1386): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa0000000000000150300000a004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x4d, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xfffffffd, 0x0, 0x5}, 0x10, r1}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001a00010000000000fbdbdf250a8080fc0000000000000000080001000000000008000100ffffffff08000400", @ANYRES32=0x0, @ANYBLOB="08001f00", @ANYRES32, @ANYBLOB="08000f"], 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856f1200008c", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "000f00", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x8035}}}}}}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$cgroup_pressure(r4, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x1}, 0x2f) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x94, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2001c3f}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r8, 0x1, 0xa, &(0x7f0000000040)=""/95, &(0x7f00000000c0)=0x5f) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) 2.638743359s ago: executing program 2 (id=1390): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0xfd}], 0x1, 0x41, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@enum64={0x4, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x7, 0x1, 0x7fffffff}, {0x1, 0xf4af, 0x8}]}]}, {0x0, [0x61, 0x5f, 0x5f, 0x2e, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x45, 0xff9, 0x1, 0xfffffffe}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0xe, 0x0, 0x7f2e, 0x0, 0xfffffffd, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0xfffffffe, 0x8, 0x4000004, 0x0, 0x40000044, 0x0, 0x80000001, 0x0, 0x7, 0x20002, 0x0, 0xadc, 0x0, 0x3ff}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003e0007012bbd700000000000017c00000400fc800c00018008000600e0000001080002807235ab620c0007000001000000000000eb86a5a57d6e2ea7688800dd1102d190a9e22ccb1ea1f9b71bdde2aaca70024a5612e6f66d87b74e239f03de2b2a7198f8cf79c4c933effed1875d4c92a4819c4eea3f8295c3471afc02aee054808d596fb456772a3b95980ce9afdc813f3cc80985"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2.313470681s ago: executing program 4 (id=1394): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r4, {}, {0xafabc05531515610, 0xfff3}, {0xd, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000040)={@remote, r4}, 0x14) write$bt_hci(0xffffffffffffffff, &(0x7f00000003c0)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x1}}}, 0x5) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000340)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x9, @loopback, 0x4}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="05e5aa00", @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250c00000008000100020000000800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0xe25a1281e37dbf75}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) recvmmsg(r7, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000440)="ee", 0x1}], 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000400)={@local, 0x3, 0x1, 0x1, 0x8, 0x5, 0x8}, &(0x7f0000000480)=0x20) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f00000001c0), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc", 0x34}, {&(0x7f00000017c0)="fa", 0x1}, {&(0x7f0000000200)="b763cf88a8", 0x5}], 0x3}, 0x4801) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r9}, 0x18) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='l', 0x1}], 0x1) 2.215207888s ago: executing program 2 (id=1395): r0 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'wg1\x00', {0x1}, 0x5}) 2.176353145s ago: executing program 3 (id=1396): unshare(0x20000400) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x60, r4, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0xc084) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4044890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) unshare(0x8040480) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r8}, 0x38) r9 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x3e}}}}}, 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x2001) 2.155163603s ago: executing program 1 (id=1397): epoll_create(0x7) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 32) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'netdevsim0\x00', {0x2, 0x4e21, @broadcast}}) (async) r2 = socket(0x32, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@bridge_getlink={0x28, 0x12, 0x1, 0x70bd2a, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x60202, 0x110}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002"], 0xfc}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_STATUS_MASK={0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x1) (async) write$tun(r4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed202833fffe"], 0xfdef) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000100)={0x24, 0xfffffa12, 0xa, 0xc, 0xe, 0x81}) (async, rerun: 64) socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'geneve1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000001400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x33, 0x0, @local, @loopback, [@routing={0x2b, 0x0, 0x1, 0xf}], "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"}}}}}}, 0xffd) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1b0, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_MASTER={0x7c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88a}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x201}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x36c9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_NAT_SRC={0x88, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000001}, 0x80c1) r6 = epoll_create1(0x0) (async) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000180)) 1.998076846s ago: executing program 2 (id=1398): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x8, 0x2, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x40, 0x1, 0xf, 0x92}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xfffffffffffffd80}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9d7d5867f27d7481bf6f5392c25a5e", @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf250200000014002580060002000300000006000200a1050000"], 0x28}, 0x1, 0x0, 0x0, 0x10000001}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@deltaction={0xa0, 0x31, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0xfffffee5, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0xa0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r6, 0xc) connect$x25(r6, &(0x7f0000000a80), 0x12) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r7 = socket(0x1e, 0x4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="120000007f000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000000000000009239f67b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000080), &(0x7f0000000380)=r8}, 0x20) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r3, @ANYRES16=r7], 0x14) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000580)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x0, 0xfffffffffffffffd, 0x9b0318}) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000200)={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x10000006, 0x0, 0x4, 0x100, 0x4000000010000009, 0x10200}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) 1.983292244s ago: executing program 1 (id=1399): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r6 = socket(0x1e, 0x4, 0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="02002cbd7020ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r0, @ANYRESOCT, @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="080001009484933687a7c8afc3e563d4c2b348557d7d82e9368db18d69eb01049d2b6d280c3a82c3e83875dd52bb7b3dd6a2171217360f9e0ae2806a82dcd7a49ba4021460664a1551322b4b47b1527fa527abd2214c11e7a98ed690b4aa5cbef8d2b3c7f4ecd0999db3ef954a", @ANYRES32=r3, @ANYRESDEC=r5, @ANYRES32=r4, @ANYBLOB="08000100", @ANYRESDEC=r4, @ANYRES16, @ANYRES32=r3, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40865) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8, @ANYRES16=r6], 0x14) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50", 0x6}], 0x3}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/98, 0x62}], 0x1}, 0xf0ff) close(0x4) 1.950520138s ago: executing program 4 (id=1400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x7c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x68, 0x1, [@m_simple={0x34, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x7, 0x6, "5dd65d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x30, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.662028001s ago: executing program 4 (id=1401): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x10001}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4008050) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9400000001020104000000000000000001000004680001802c0001801400030000000000000000000000ffffac1414aa1400040000008280050001002f0000000c000280050001"], 0x94}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x100) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x3ec0) close(0x3) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002e00090027bd700000000000040000000800180009ac0f0089cd53ac3bbe8ba28d94535ffca7f255"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.66019228s ago: executing program 3 (id=1402): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) ppoll(0x0, 0x0, 0x0, &(0x7f00000012c0), 0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x15a0, 0x4) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) socketpair(0x28, 0x5, 0x7fffffff, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000900)={0x5, 0x4, 0xc, 0x20}, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x1c, r5, 0x909, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xc2000}, 0xc, &(0x7f0000000880)={&(0x7f00000004c0)={0x4c, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4080000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000011) r8 = socket(0x10, 0x3, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feff", 0x4, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) (async) setsockopt$inet6_tcp_TLS_RX(r9, 0x11a, 0x2, &(0x7f00000007c0)=@gcm_256={{0x304}, "db38b37c343f61cf", "b5712715d34ee0f3c5053bb9527f96602d9ba1e3a4ed675fc8c6955cf5047730", "0fbcbd61", "92ab70e1b5f44e97"}, 0x38) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) (async) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="04090000", @ANYRES16=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 1.640293742s ago: executing program 2 (id=1403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1000004, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x29, 0x37}], 0x10}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) socket$nl_route(0x10, 0x3, 0x0) 1.564109429s ago: executing program 1 (id=1404): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000600)={@void, @void, @eth={@multicast, @empty, @val={@void, {0x8100, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x57, 0x67, 0x0, 0x9, 0x5c, 0x0, @multicast2, @empty}, "05ca7ff6d61ea575cb1bdc42951927cf9d7d49336b3b43b226adfa989c0a1e14a987721b820c53e70330847e495bc69f18f0ec05dc6b660536c72037d4c9cc93de86ab"}}}}}, 0x69) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x100, 0x111, 0x4b4, 0x100, 0xd4feffff, 0x238, 0x20a, 0x278, 0x238, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x12, 0x0, 0x30}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x4, 0x4, 0x3, 0x0, 0xc}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'pim6reg0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) 1.484329511s ago: executing program 0 (id=1405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r2, @ANYBLOB="05003300eb0000000800340002"], 0x2c}}, 0x80) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea8"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000180)=""/166, &(0x7f0000000240)=0xa6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x800, 0xb) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @remote, 0x5}, 0x1c) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e65766500002000028014000700fec0"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.403983656s ago: executing program 3 (id=1406): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000200000000000000800000091115e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0xffffff82}]}, @IFLA_GROUP={0x8}]}, 0x5c}}, 0x0) 1.216860923s ago: executing program 4 (id=1407): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a00034000", 0x10, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.108030262s ago: executing program 2 (id=1408): mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040), 0x20) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x14, 0x2, 0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYRESOCT=r1, @ANYRES8=0x0], 0x14}, 0x1, 0x0, 0x0, 0x40095}, 0x52fd794718c63699) mmap$xdp(&(0x7f0000ad9000/0x2000)=nil, 0x2000, 0x1000000, 0x810, r2, 0x100000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0xa3c, 0x4) setsockopt$inet6_buf(r2, 0x29, 0x2c, &(0x7f0000000380)="ac1a5ba4c0ee8a30bf6ff2d548e4dc1e0dce3627060afb80d6631b55724b53f943e84a3f6bbf09cb7b6bd03286be20f8b887f673346c04a318380775645773d89ff91e05fb5372f0acf6efa604a4092074a6565c1b679f594d1d693469f5c1c0a8511d277c9c653de267a2de27ce6b5681c0b13f", 0x74) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet6(0xa, 0x800, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @broadcast}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000800061110c0000000000620000000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0xdb, &(0x7f0000000700)=""/219, 0x0, 0x85}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000080), 0x2, 0x0) r6 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r6, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 1.077647314s ago: executing program 1 (id=1409): r0 = socket(0x40000000015, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000401000000000000c3a00000a10000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x6ec119c1, 0x61e5cc96}, 0x22) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c000200"], 0x20}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, 0x0, &(0x7f0000000040)) 878.003237ms ago: executing program 1 (id=1410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x165000, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x3, [@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @broadcast]}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="573744ece6545d3fdfe94f6959670f2c853b5bcaf1106f3e803c52ef08d34fd62598523301bc2e3dc0a89509f98904712ec9537234247b13d695c3741d16bce129b678355c3360da65f810c805e69c8a0c539581c0eeccebde276e4841065ac6e22f70595396694b6f846da50e8e3a5f6eecf0f6b25436761dae214fe5ec6e97f89162177be1f2e9791cc6d8e2e73490", 0x90) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) connect$pppoe(r2, &(0x7f0000000180)={0x18, 0x0, {0x0, @random="ec508b959d65", 'veth1_to_hsr\x00'}}, 0x1e) ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f00000002c0)={r1, &(0x7f00000001c0)='veth1_to_hsr\x00', 0x10000, &(0x7f0000000200)={@_ha_fsid={[0xf, 0x2]}, {0xffff, 0x8, 0xf, 0x5577}}, 0x6, &(0x7f0000000240), &(0x7f0000000280)=0x782}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x7, &(0x7f0000000300)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xd29}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000340)='syzkaller\x00', 0xb, 0x95, &(0x7f0000000380)=""/149, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000440)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x4, 0x5, 0x8}, 0x10, 0xd250, r2, 0x2, &(0x7f00000004c0)=[r2], &(0x7f0000000500)=[{0x0, 0x2, 0x4, 0x2}, {0x4, 0x1, 0x8}], 0x10, 0x800}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={r3, r2}, 0xc) write(r0, &(0x7f0000000640)="7a1e46f1485c0aa54fee2c078b8b5c9f26549183712197c66fb301fc17d617f4ea4ac7fdb161f9be3ea66f8baeafad60a5b590f2e94f67a68efb2e3131737de7c0280460a6300ce77f4b9fc8569eb78b600bbaedef5d981a081af74bdd476cf6b0a7e2712306a89379742e8e4a17c208fe47db427c90189d94eb39f499481ceb4d049b134e9ab6b411f436913d5906047dc2deaab781d708fbc5d2f7cbe385dc3696a6029d330ded080a4ba9654e8ddb3cdefdbfe1ca9dd05dedff203f422bd7385f4082e0910831acf833cd09b95521f5923b1be23404bbe4dd1c3084771e625b621c920684b110ff3605b9", 0xec) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r2, 0xffffffffffffffff}, 0x4) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, &(0x7f0000000780)=0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}}, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000900), 0x3) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x1) unshare(0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r5) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000044) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), r2) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x88, r9, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x25, 0x28}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008811}, 0x40050) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000c40)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r10, 0x80489439, &(0x7f0000000c80)) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d80)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000dc0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x70, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xf536348fbd36bb6d}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4c041) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x4100) 770.185441ms ago: executing program 3 (id=1411): r0 = socket(0x25, 0x2, 0x7fff) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@gettaction={0x1e0, 0x32, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x867}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x51}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x600}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80000001}, @action_gd=@TCA_ACT_TAB={0x84, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x118, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x891}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ffc094010ebc000000000000008000f0fffeff0300000000fff5dd000000100001000c0810000c00000008040000", 0x58}], 0x1) 767.131198ms ago: executing program 0 (id=1412): syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000010000000800000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000003600070127bd7000fddbdf25017c00000c0019000400000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x404c091}, 0x20000c11) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000340)=""/38, 0x32000, 0x1000, 0x10001, 0x3}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYRES64=r1], 0x90}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0xec}}, 0x4000844) setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000180)=0xceb2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000100", @ANYRES16=0x0, @ANYBLOB="200025bd7000fddbdf250700000014000200fc01000000000000000000000000000008000400ac1414aa140002000000000000000000000000000000000008000400e0000001080005000a0101010500010000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff, 0x2}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x18, r7, 0x301, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x880) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x881}, 0x0) 505.75738ms ago: executing program 0 (id=1413): unshare(0x20000400) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x60, r4, 0x1, 0x70bd27, 0x0, {0x54}, [{{@pci, {0x8, 0xb8, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xfffffdc8}, 0x1, 0x0, 0x0, 0x10000000}, 0xc084) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4044890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) unshare(0x8040480) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r8}, 0x38) r9 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x3e}}}}}, 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x2001) 496.613252ms ago: executing program 3 (id=1414): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x48000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000000240)={0x1, 0x5, 0x64, &(0x7f00000001c0)=""/100}) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x9967) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, &(0x7f0000001740)=0x1000004, 0x4) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRES32=r9, @ANYRES8=r9, @ANYRESHEX=r10, @ANYRESOCT=r7, @ANYRES8=r0], 0x40}, 0x1, 0x0, 0x0, 0x20048045}, 0x2000c000) 304.115356ms ago: executing program 4 (id=1415): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) (async) listen(r2, 0x5) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f0000000640)="9922530100d1be95646155eefbf4", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cd00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) (async) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = accept4$unix(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) (async) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x2e}, 0x48) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r0, r8, 0x2f, 0x18, 0x4, @void, @value=r1}, 0x20) 209.083085ms ago: executing program 1 (id=1416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {}, {0x11}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000feffffffffffffff000800074000000000040006"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x0) socket$inet6(0xa, 0x4, 0xb) 54.752137ms ago: executing program 4 (id=1417): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$XFS_IOC_GET_RESBLKS(0xffffffffffffffff, 0x80105873, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x4640}], 0x1, &(0x7f0000000100), &(0x7f0000000140)={[0x5]}, 0x8) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000180)) nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f0000000280)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x80}, @exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @jmp={0x5, 0x0, 0x1, 0xb, 0x0, 0xffffffffffffffc0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0xd8, &(0x7f0000000380)=""/216, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x1, 0x0, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000500)=[{0xfffffff7, 0x4, 0x8, 0x7}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@cgroup, 0xf, 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000800)={0x2, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@ifindex=r5, r3, 0x16, 0x38, 0x0, @void, @void, @void, @value=r6, r4}, 0x20) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r7, &(0x7f0000000840)={0x2c, 0x7, r5, 0x36, r8}, 0x10) socketpair(0x1a, 0x800, 0x8, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4000010, r10, 0x39fae000) sendmsg$kcm(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="07e0d3357d2f0787fcc9ff5bedd5544f308445e5d874fc07d293c5074e1467946e10f55b28482c1e9445cecc4766f8d59bc110fc820cad7bfd41bf2bc453c88d4faf489fd91cc89237a86ff5257ed5e3683980974965f9d6b4fdaeaba3d2a2f2d647b20caa9edf1acdf4b3d609a307ad19665b6d497541ef29d1b57857553d81c5541f2ebdd7a43fcd10d9ddb501840e0fe12052fedd4e44617999008fed571417f16b35d44313d2f0afb9645749e5626ec13b6d1a787c16ff62499e362d2108559698e4ee2ea5453b562188354d7639b585428de537d3e3a8b2ac33ba04fa6b717c9c0d9bb879fb1c21a4", 0xeb}], 0x1, &(0x7f0000000a00)}, 0x400c885) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000a80)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x5, 0x0, 0x2, 0x0, 0x9, 0x7438}, {0x2, 0x4, 0xfffffffffffffff9, 0x5, 0x1ff, 0x9}], ['\x00', '\x00', '\x00']}) accept$unix(r10, &(0x7f0000000c00)=@abs, &(0x7f0000000c80)=0x6e) sendmsg$inet(r2, &(0x7f0000003140)={&(0x7f0000000cc0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000002f40)=[{&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="eb8589ec602278282fe848982128a190b1ff91714dc8755fb4fcc3cd331f2f1a0429308a91", 0x25}, {&(0x7f0000001d40)="e110b59e5da7c22c87cff5f70177a065be19eb405ca48a07079c65851c55c0512c387136980408dcd256482e2422aabf650d8f86e2707ea2f5c59bd189305ac7c06429a9aabf36f0b6aa7d9aadbda1ffa9a59a4134eabc0d4a3f3f07509cd97278f04da929723e1ca43309d9acb8167edbf4c584b0f217a18a0c40f28acefb357db440c9c901ec44aeb9e39bb82c6677", 0x90}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="ae7494187029913114dd06ddd5f28b8fc4a433dbced70cf5b19f3dbf931b202e8391e75059f2b4e1b9a2bb04dc0536a7", 0x30}, {&(0x7f0000002e40)="d6c08a82b7fada8f690cd18ab0c5cfcdbdf15b125ef7fe053e", 0x19}, {&(0x7f0000002e80)="2bd52af4a5959aef216cc3113f246bd0befdd93b1eb5609d06268e85f8108cc812f1cdc0ef5a987da31ba93675318b22a801535c810a728ca28e6858f98d3dfedd74dcdee828bec9e6db90c448a1c17e25852f6730603622ffe2818bb9846c483f8da5ea9336bc20210ce79905458ace972851816c5ad13aa04535c539d0ca919ec513f145a10936048f2bcfd576f207740d03d8b94ad6d38596862d2bd7b14b9c3c5adc21245850b6351b4d889a94f3816690268ebb36d52b7f73a72691", 0xbe}], 0x7, &(0x7f0000002fc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010100, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @local}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x34, [@multicast2, @multicast2, @multicast1, @local, @multicast1]}, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x23, 0x2, [{0x1, 0x9, "1a207bcf9f784f"}, {0x1, 0x9, "22ec6b86fda1d2"}, {0x0, 0xb, "49535711572cdc09c3"}]}]}}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@cipso={0x86, 0x31, 0x2, [{0x2, 0x5, "6612a7"}, {0x5, 0xa, "2dac496dc9a3b4cf"}, {0x0, 0x3, 'B'}, {0x2, 0x3, "a5"}, {0x0, 0xd, "5e40f1204a792159bddfa5"}, {0x5, 0x9, "36f80529f74a00"}]}, @ssrr={0x89, 0xb, 0x6f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @noop, @noop, @ssrr={0x89, 0x13, 0x3a, [@local, @multicast2, @private=0xa010101, @multicast1]}, @ssrr={0x89, 0xb, 0x19, [@rand_addr=0x64010100, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0x25, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010100, 0xffffff7d}, {@multicast1, 0x4800000}, {@remote, 0xccf}, {@rand_addr=0x64010100, 0x100}, {@loopback, 0x1}, {@local, 0xa1a}, {@multicast2, 0x8001}]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x3, [0x7ff, 0x9]}]}}}], 0x180}, 0x48011) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000003300)={0xffffffffffffffff, r5, 0x25, 0x1, @val=@uprobe_multi={&(0x7f00000031c0)='./file0\x00', &(0x7f0000003200)=[0x95, 0x0, 0x2, 0x7, 0x7, 0x7fffffffffffffff, 0x100000001, 0x9, 0x0, 0x4], &(0x7f0000003280)=[0x1, 0x4, 0x1, 0x3, 0x3, 0x5, 0x0, 0x1, 0x1], 0xc63, 0xa, 0x1}}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003180)={@fallback=r10, r3, 0x15, 0x2010, 0x0, @value=r11, @void, @void, @void, r4}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003340)={'team0\x00', 0x0}) sendmsg$xdp(r7, &(0x7f0000005640)={&(0x7f0000003380)={0x2c, 0x1, r12, 0x29}, 0x10, &(0x7f00000055c0)=[{&(0x7f00000033c0)="6891de2e05ab6824fdce5d495181e84cd578b51b2402c5996a5b06bac7e147409851180b17cf1fe1f7c17c27337b8ace6bf02a8951e5fff69d6e0de142891b8152abb5e99c", 0x45}, {&(0x7f0000003440)="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", 0x1000}, {&(0x7f0000004440)="6a3a978715337b457ecfebad23acfe399001915c6e3d3a01d1206fe988a7dc1d6cb613db069ef23d2409c0d410ee309cf99718eecc05cc2782fe300ddab47c9d7f957527520247107d83b9", 0x4b}, {&(0x7f00000044c0)="891110db6beaa6b1353dd350bd145c5a971d3d86159e800420e9ac9efc18b7f86a05abf33947e16796d44fd25fe0f150fc085f1b9a0b1b1e65279c7b917328cb6f6a01a20f76b768d952c69ce9e13f69fa20384ee22fea430d54a393c9e2d6d8d513de2a6ca8d163bdb25ea5fef061963e820f79201f8800bc778f4eb2b4ae798c451b", 0x83}, {&(0x7f0000004580)="cb199fcf490153054f5d87d99ee8b225519213361d433c86d0a838c7af43549e93768c0795bf9b4bb3782517341e5d1e", 0x30}, {&(0x7f00000045c0)="0b1de91bb2910f1fce1d949168218b108b715ea5bf7bd440655e0189ce3cab63f9f84060600ae822a27d0697fe0d11dda6cf1fd7680b7e2ad4e648b53b781a4539021b46a0caf38b6406773638a5e1e627d5aa572c9c92743de8841098d998cd063fe810f3ab91325bc464220b5eb858b6250c3a213c60cee548a29550ede8075df9c981e0bddc4743f171102166e6c736ab76ed08911aee29ad411fa36b2efda139a7b69045185de998a33a54d8b884107a4db4a4dc4118fca09f56416336ec93536453924fc36563e1c13d8e1b0667df8f5b852fea162ae35f2b646b3b5bfcde3a27797fe46962f6d61ba3e8b88b9ab32d2ac94ee277932cb1274487173398102f9bfba05c4a02f6311fa65ff54fdda3bc04362456a3cadf264345fd7c09974c1c799433b8e2392606b4fe4aeb507e141adb934a3ec16f448640707b7a14e9c87ded950bf11dd953153c21af0cc8c964f4323c7038b83ef59e9eff4b6c202764f6c1587ad89acb053f79e07fd5139a9f26afd1989b87af9e12d84029aa50f67dbfe6e04a0f6dfcc87d60916155b910895b2ad75c943979c7d867996323adf744ba6588048c1a2bfe05192bc655a06cd1f2f6bc13eadc359a6fae42bb58f8a130ae76656c9c4746c4f0dae737a9fa0a3b65b24444e24bcbc47e7ccc58ad812d045a20ceaefb59812b866fa21cd314aec27a2308b9e9df8a9b45b84b8e2bc5e03e46f70d9f27b78a72561ecf16ead4e5f6b62d8c5d379bcc116f523f2e60b1c76df26fb8e49ee2e8e55c607311161bd9e14d707ee49040bcd80fb8d94fddff879b57576164f276891e87dade03f1061c7f871939498416350d72725a72c5a4d3e64d0fe5ce8058875c8a2f0620d67dac98c39c80d34e19ff2906c9481d2b380d92df870fdb81bd292ca4aad64d3a88f7c69c964eecc83a42e310329c0a7b9af312a5a2cba24f1f9e803e0ea03e450ad4ccee119124970058138316b1055f23a7abb902ea67a51c37f9ff92baa173b1aec73ce998a2cc6b2c8f66852ad420b0570405e7920221298fbd358f9d333f74b8d97a482960c8ea832f6da5130d4bd0b6e76931b34dd247c8223e800d2347afd65a8bfb9beae03fb42b11ac5f334cd667385b09bfdb219cfeadd2ade05a35c79056c9789fa2fbc8c64811c1cbaf6c13fa1308c7f0624df33692f4b2a092db78b2b4c621a543db86a23a45cc62f53689174b1b83b99593860d662d19d250c2a34890eb84333b714a37ae9fd02c832a6ec9c91158cf39b6884005de0413336da94d286d73d14d9df001af6c15255062245075b332a2400aa18d571f32e2a9d245ffe745e113035b8e153c1e3d5a0c5f6c6fcb8d478c69be6205988d63958619f9c2cd5a8b9b85ee54ba4ad23fbb64f26a2e6ead1d33a710c833a9f0f8e77f8e303ab32fdd44263b9af16824cff3c0e036b8723e034db57bf3e98848986c68aeb7a2a8de26459d2a07e237d1813b661be9e085d1f16738312704a405f9e4092e5712cdeba04ea227ec617d299f068ddb62cceb7798269bfc7cf44cb7b3dd9ec31ad675361181d941d78e7c4b3f41cc57bbb6f9abd4c0ccfa66f8f95815e34cca1c80cd78a7e1f13160987db86c47320189103b00a369d11e5a2f930e13e1439e034f17398f3c607972604fbeb854f032f445a47fcfd7c4c4260e898a4b1816577ea3d88eed7b26563faf00ca7aa4a84ea62c4cf62ab0935be3eaa06c255e308a0b0532670e1adb83be8c0c61d581c1bf278ba1546a661c4217805ff4a88df5ecea30ca05fc0afbe252ab43dc8c02631a8143df55fa7f9346da1b3077c40d38cab403a783cf27e4b6d4076c9ef99ecb8b55635babc88deab96201e1c98b22af17cab01d6e699333a35eb66a2a2fce04b9855b18b57da270ccb7aa960dc6d24501933c4633a0f8ee857fab61f2cac1296f7a0240a6ea5e532109facdfc5962887b2e1641f446bea00cae910aa5b8492f233255dcd73883028e2f0d6b2a99c67cfa91e0d9b3a046649ae4a34155dac24d57991758de29f28a54b00554025e4a3069e5a90cc62412b34a67615456ec404fa06ec9bf5b48830fad63a6dc199cca674b973717d12a6521de92918a7099a8899f54d4168a3748d063c3c36a117409ee6b0c4ff91526b7040c43c7ed7419f9ef193c5fe4fca83c149d6faacb75bf36d4a8196888c069fddb225c16396dd1d16da43a8091ee1039e547bb6c95d03480b7c44d23bee7464d7b3f74acd32185ef151a45385d3aa211a3fcd608a66311af5c35f3388bf5f9a4de0abd1fce660087b37cba067a4a805673e26e07f3fa5e3370e01123e066eb87895b0341cb4e38bf7d715cb3e8325b7ef0c8105397048ac1778736ff407c26daabefefac370b3026a2dfc67c5771d93b42e18f315af5327986682d0e4e6960033462e22c5193432ba1ec1fde54e086f10d194360ba6939380b6b213c41663d3ab46f46e05f4861ceccf05cd237ba3afc837c0e26a09e51dc478dee6b0ea6c798c143c312822266653ce3b0b1cfc8edea7c2b1bcd51388d30506dbd15eed178cf92544c6f74461a67847bd4665fb371fc58be0cfc835fcc025c78aa6ce89f09ebbda3d3c8cd6a51f540de50ef78284d629093bfd4a07caf7adcff4a103d59459df4f5a819e5336574cadd79d38e85748ceab826ed9693743852688061894a71640c47eadba6ed992abec5446dcea8f3d641eb5ce50b5671e8d74721792252c68f224e7e7b7dc7d28f7bfce24eb5be1e96a6629986b9fede7628361b0db0f86ac8c0c18cf12425b65be9006a6db438c8b3243e5caf29aaf5cba7d00261d39b9f27fdbcab4d0673b3685c3dc1fd1479ea3fc8e37cb10bf80fddc95ed03685d8009f96681f4f7b7b619f33e0a4474a379951ec72491814e16c96ce218dbc77f4daa035e38c6f233d79dcd1bf377c703654877cf6fa2888101081b31bb2ec38891992daeb50976c1c0755a1b04dc1f71fe7da4e80673ed9417440604d2e49049ee0526ed45bad49ba759e94195e2e0de695593b639f738fa4693a1ce4460294f88350ae46cf605b6865e1dd8ce81150998456abc8b37fabda6e51ee0be8025414f66e15b6973006904686021d807fb4c464698bf85625de8e762fc46f356d43ae62fda1648168ecba8591f3e23c9657304eddaa2fc980ec8259263cfb244ad3a0bf510f277f28fe626a733d0384eb942f1a8fef0d0f435290342aef933d02793b54952eb790b3bc3b1fb2bd8fdb28a75f13438026997a44aef4e70860eef2b0aa3bcdb3cf9e9aab580c0e82ee00e29dfee5e8ba794446d95c768548f3fc78e3ad7108f6c2d75971e9dfdc710feeeaa773859d0ee812f035bef94ee28f1b5b67beb8a91e1293e9613fa7b02311fefd12f2895c7d8aa1ace6d6ebc60c522e4c0085b528ad87d314baa90ceeb5f14aa5b505f4db0ebb4352bf286ac15987f9d0b15a8541fa7f9181eafdd0ae2f3ffb612aa2768602d58a38acb50b23864c2dbed8f962585f33123b594302400d3e42c4f3b83b4db5c85218fc60f2d8f97344c6e0c8955b25940b6f6d86ad17ec8068f2f3c677013d6c0c8b7f704a42bb5e7da63d5abe3cdd6e888c0a2420b027d2e1f2c098d1fbf8c83e4ab19bb247e8d99d8b201227d4050d18bd9ffa0adee872cea32a785e5f0c107ec845a123b3df854fd37d3c25e2a466c74aba8cc5d3c20af010f2ceed39ec7374e35281c7a83a424573c2a8121c052d388d6b975d2d2f87d66693010fa41c672aa7cbcdd676d2b1ce76f1ed92bf3f0af9c4ea60b3bd8543cf9f83550d311fa8b05c24cb2ac00a67de832ece97cfc75e53af6ec77e0b71a748f0f09834d4c262bd6ac25e3d31fb5e8800ff0bf5e55a5d83d4f32254a03ce47b3ba46e539dbbffa7a1e0c27e1f245340d6bc7608ea948528ae806142d064e1849560651f4123d914b74adcd79b23d583bd06e9358cb7d49c131bc6f74c5f3bde316aa1c44a353493661a8153e51f5d4025a02395735f7a302a04372ca52a256ff4bc6fefd204ce8d0440f92147d90cbda144eaca6d878c397d2aaf1461b66370e30298cc14f0b3a919dbefb6b466ff0c6a4b46631cf17c27311e71338538156bedd2d6eb92429fa77c3c607e668e1d798710cecfc374bb02d6ffd7dc5864d3936c74d6d54d388451d22161e5fbb081bcb24df45e03f4f702224603a79cd0f85285f6b46ca6b8d94f896d6715619b8d02b0aea84252e6554c1faa6a0f6143fa5b9af28967726ffc0a69aadfe861f26a317cc0599701258f14624aecb133116ff9f6dbb15217a5d7d7e7d6eb239c575eb235efe5a61ac1b45afeb41a8a06da1e36ae607d703762420d49c927e97d998df9b62bccfa247e476fecaa1cc16023622233dedb714b3bb2922c8bf70f25186eec50bd51ca15670f3efb8aed100dc742ffb067bbeb07d99417b9ee74f1cfc03309ad3ec1d5aa83783fb33dfc9fde8748f1cd031d415be42fc7d9ccd0b91c5ed6a18cfffaaaf0a05a5d4777463f67d85cc0a4006f2edbd3f2834777238abbdeb3a710a89ab979b3ffcf0b5fe634a705a191af803a2e4a7768da54a30eace2df166b142d08d071d4f167ba20cb9545e872f396b2be4d5fba11fd17ec81e0e21211704d888548a77c69c1f5ca5e9c6ea4c10ab5d1cd8bb6a9d5eb382d75adbb9beff328c573811976f98746ae55f69543a04fa2ce23b9687d7f1f1d5cf24c8565631f36b95563ca95e516006c1dc7266215c89d257e6ab62426e850af293ce6b46338dfaae6c505d06460138ecdc774079c034cb5dd93eeee7bc788d7628933e34b00059a9c48a2dc76a7337fe5c1510a9e65744f020b0ade16df5a3491e1bf3bc86d92f19991a1d51459cb10f876e342cdcb5dfbefccaebf2e5f9d40998d187396fd058fcbddb5670d70adf78c85401e4e97aaa975afaa2d5c18aafa159b9aa7120cddf5e4561fc79e99f9c5d793e5f84a033eea189b12107b6da41b9f32236262f904648181c11abce8fdeec9da44b5a57de5245dd2812bce3ce256af594def617457aa30d17faeabf7313cd4127db3ed74e9dc31193af3c582f5adc4b691234651fe4a1176a0bec99eca876c538f80c1fe11c021c8d2c7a04fc1df547fb990949289f6bc7f8f453888333d605c4d56ad5a1491fcfe6bdda84c37feb2691fd2b9d2f3325bf754a349797ba36268645219f960830ad4aae5e9c0715a69625bdf0454904149278a524e038a77f6f104215efb4b6e62e4cc536841e5c2201e8e522e1e88aec60533befd2aea8b51a7555b734764c07ad2b7497ec65e22e95b457428fcd56b7e1f32236c1056a799f422e299df0ffb37403a4e8e7766ca7ff3f2bb99d7033995093b6d6dc3e5ea5a060a7f2307fa74935c55b49d045f217984b8f75cb6267fded78581fad99bc88b575fef8110f491d87b48e889ff9b40e9b7f1931f02a1f1aca2ed2b5b80a3c1420a9f0316dc03bc977030b2bbe18a4b674e66a0f10e869608c8453c8895191f7cc3247b9b496457827329653171b5a9ea1cf83c49d61f871216746464eefb8cf547acbf215ba016ebc475d3c366d66eefe8cec87150b2b6e6d56a8ffbea2c8f228fc471a7a2790eabff4cb03b9eb2b3b3dda6685a3da6323368b531b47cd0b28a94262b567bd36642b5f4ae8586024c15858aa05b78e101081daf2df1b24643e43b66e3d99c4cd87789fe4802c645e7885930ea502bd0a98cd9154fa85a885e406236c086f7d2f30643c86acd0b047e78737aa17c2896c55148c362244bfceca6baa3068e0760", 0x1000}], 0x6, 0x0, 0x0, 0x20000000}, 0x40) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x9183d000) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000005680)={@private1, @private2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8886, 0x9, 0x0, 0x0, 0x10001, 0x80000042, r12}) recvmmsg(r0, &(0x7f000000adc0)=[{{0x0, 0x0, &(0x7f0000006900)=[{&(0x7f0000005700)=""/130, 0x82}, {&(0x7f00000057c0)=""/103, 0x67}, {&(0x7f0000005840)=""/73, 0x49}, {&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/61, 0x3d}], 0x5, &(0x7f0000006980)=""/100, 0x64}}, {{&(0x7f0000006a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000006d00)=[{&(0x7f0000006a80)=""/175, 0xaf}, {&(0x7f0000006b40)=""/26, 0x1a}, {&(0x7f0000006b80)=""/106, 0x6a}, {&(0x7f0000006c00)=""/255, 0xff}], 0x4, &(0x7f0000006d40)=""/76, 0x4c}, 0x4}, {{&(0x7f0000006dc0)=@rc, 0x80, &(0x7f0000007040)=[{&(0x7f0000006e40)=""/45, 0x2d}, {&(0x7f0000006e80)=""/141, 0x8d}, {&(0x7f0000006f40)=""/125, 0x7d}, {&(0x7f0000006fc0)=""/100, 0x64}], 0x4, &(0x7f0000007080)=""/153, 0x99}, 0xffff538e}, {{&(0x7f0000007140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000007340)=[{&(0x7f00000071c0)=""/146, 0x92}, {&(0x7f0000007280)=""/131, 0x83}], 0x2}, 0x8001}, {{&(0x7f0000007380)=@can, 0x80, &(0x7f00000079c0)=[{&(0x7f0000007400)=""/242, 0xf2}, {&(0x7f0000007500)=""/109, 0x6d}, {&(0x7f0000007580)=""/9, 0x9}, {&(0x7f00000075c0)=""/11, 0xb}, {&(0x7f0000007600)=""/25, 0x19}, {&(0x7f0000007640)=""/209, 0xd1}, {&(0x7f0000007740)=""/76, 0x4c}, {&(0x7f00000077c0)=""/198, 0xc6}, {&(0x7f00000078c0)=""/20, 0x14}, {&(0x7f0000007900)=""/129, 0x81}], 0xa, &(0x7f0000007a80)=""/33, 0x21}, 0x80}, {{0x0, 0x0, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/212, 0xd4}], 0x1, &(0x7f0000007c00)=""/40, 0x28}, 0x80}, {{&(0x7f0000007c40)=@l2, 0x80, &(0x7f0000008d00)=[{&(0x7f0000007cc0)=""/19, 0x13}, {&(0x7f0000007d00)=""/4096, 0x1000}], 0x2, &(0x7f0000008d40)=""/150, 0x96}, 0x6}, {{&(0x7f0000008e00)=@tipc=@id, 0x80, &(0x7f00000090c0)=[{&(0x7f0000008e80)=""/174, 0xae}, {&(0x7f0000008f40)=""/232, 0xe8}, {&(0x7f0000009040)=""/95, 0x5f}], 0x3, &(0x7f0000009100)=""/100, 0x64}, 0x5}, {{&(0x7f0000009180)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000009780)=[{&(0x7f0000009200)=""/63, 0x3f}, {&(0x7f0000009240)=""/252, 0xfc}, {&(0x7f0000009340)=""/145, 0x91}, {&(0x7f0000009400)=""/89, 0x59}, {&(0x7f0000009480)=""/26, 0x1a}, {&(0x7f00000094c0)=""/195, 0xc3}, {&(0x7f00000095c0)=""/160, 0xa0}, {&(0x7f0000009680)=""/71, 0x47}, {&(0x7f0000009700)=""/87, 0x57}], 0x9, &(0x7f0000009840)=""/136, 0x88}, 0x600000}, {{0x0, 0x0, &(0x7f000000ac80)=[{&(0x7f0000009900)=""/61, 0x3d}, {&(0x7f0000009940)=""/226, 0xe2}, {&(0x7f0000009a40)=""/184, 0xb8}, {&(0x7f0000009b00)=""/4096, 0x1000}, {&(0x7f000000ab00)=""/119, 0x77}, {&(0x7f000000ab80)=""/200, 0xc8}], 0x6, &(0x7f000000ad00)=""/157, 0x9d}}], 0xa, 0x10123, &(0x7f000000b080)) 0s ago: executing program 3 (id=1418): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r2, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30) syz_emit_ethernet(0x11dc0, &(0x7f00000030c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): 261] tipc: Enabled bearer , priority 0 [ 117.590320][ T6273] bond1: option miimon: invalid value (18446744073709551607) [ 117.598831][ T6273] bond1: option miimon: allowed values 0 - 2147483647 [ 117.618212][ T6273] bond1 (unregistering): Released all slaves [ 117.787125][ T6261] tipc: Disabling bearer [ 118.126071][ T6306] syzkaller0: entered promiscuous mode [ 118.151932][ T6306] syzkaller0: entered allmulticast mode [ 118.583392][ T6322] openvswitch: netlink: Missing key (keys=40, expected=80) [ 118.909606][ T6325] syzkaller0: entered promiscuous mode [ 118.943362][ T6337] __nla_validate_parse: 6 callbacks suppressed [ 118.943385][ T6337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'. [ 118.974770][ T6325] syzkaller0: entered allmulticast mode [ 119.089860][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.117'. [ 119.127924][ T6340] netlink: 52 bytes leftover after parsing attributes in process `syz.2.117'. [ 119.152687][ T6344] netlink: 4136 bytes leftover after parsing attributes in process `syz.3.115'. [ 119.180027][ T6345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.118'. [ 120.867807][ T6364] netlink: 40 bytes leftover after parsing attributes in process `syz.2.121'. [ 120.940845][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 120.952761][ T6364] netlink: 260 bytes leftover after parsing attributes in process `syz.2.121'. [ 121.049703][ T6371] syzkaller0: entered promiscuous mode [ 121.070641][ T6371] syzkaller0: entered allmulticast mode [ 121.681813][ T6395] bridge0: entered allmulticast mode [ 121.750820][ T6400] gretap0: entered promiscuous mode [ 121.789234][ T6400] vlan2: entered promiscuous mode [ 122.115515][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.132'. [ 122.203930][ T6380] syz.0.125 (6380) used greatest stack depth: 17248 bytes left [ 122.769617][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 122.811956][ T6440] hsr_slave_0: left promiscuous mode [ 122.860974][ T6440] hsr_slave_1: left promiscuous mode [ 123.226948][ T6453] syzkaller0: entered promiscuous mode [ 123.265863][ T6453] syzkaller0: entered allmulticast mode [ 123.604036][ T6475] warning: `syz.0.147' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.797680][ T6484] netlink: 'syz.4.150': attribute type 1 has an invalid length. [ 124.556282][ T6508] __nla_validate_parse: 4 callbacks suppressed [ 124.556309][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 124.669826][ T6514] syzkaller0: entered promiscuous mode [ 124.689389][ T6514] syzkaller0: entered allmulticast mode [ 124.983340][ T6524] netlink: 'syz.1.162': attribute type 21 has an invalid length. [ 125.026506][ T6524] netlink: 128 bytes leftover after parsing attributes in process `syz.1.162'. [ 125.051704][ T6524] netlink: 'syz.1.162': attribute type 4 has an invalid length. [ 125.076804][ T6524] netlink: 'syz.1.162': attribute type 5 has an invalid length. [ 125.110072][ T6524] netlink: 3 bytes leftover after parsing attributes in process `syz.1.162'. [ 125.410143][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 126.040263][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 126.475388][ T6581] syzkaller0: entered promiscuous mode [ 126.506527][ T6581] syzkaller0: entered allmulticast mode [ 126.582981][ T6587] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.178'. [ 126.606918][ T6590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.180'. [ 127.113764][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 127.152904][ T6617] netlink: 48 bytes leftover after parsing attributes in process `syz.0.184'. [ 128.041211][ T6636] netlink: 128 bytes leftover after parsing attributes in process `syz.1.190'. [ 128.088224][ T6644] netlink: 'syz.3.193': attribute type 13 has an invalid length. [ 128.118353][ T6644] netlink: 'syz.3.193': attribute type 17 has an invalid length. [ 129.295190][ T6690] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 129.339154][ T6683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.396394][ T6694] syzkaller0: entered promiscuous mode [ 129.403737][ T6694] syzkaller0: entered allmulticast mode [ 129.594269][ T6701] __nla_validate_parse: 7 callbacks suppressed [ 129.594296][ T6701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.205'. [ 129.881815][ T6710] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 130.619063][ T6697] dvmrp0: entered allmulticast mode [ 130.708193][ T60] dvmrp0: left allmulticast mode [ 131.570798][ T6762] syzkaller0: entered promiscuous mode [ 131.591870][ T6762] syzkaller0: entered allmulticast mode [ 131.741868][ T6770] netlink: 'syz.1.219': attribute type 4 has an invalid length. [ 132.595735][ T6795] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 132.693914][ T6798] netlink: 40 bytes leftover after parsing attributes in process `syz.2.223'. [ 132.710732][ T6798] netlink: 260 bytes leftover after parsing attributes in process `syz.2.223'. [ 133.517348][ T6827] netlink: 'syz.1.230': attribute type 4 has an invalid length. [ 133.556559][ T6827] netlink: 'syz.1.230': attribute type 4 has an invalid length. [ 133.732966][ T6838] syzkaller0: entered promiscuous mode [ 133.752557][ T6838] syzkaller0: entered allmulticast mode [ 133.916118][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.233'. [ 134.008376][ T6852] netlink: 48 bytes leftover after parsing attributes in process `syz.4.233'. [ 134.133922][ T6846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.445821][ T6863] syzkaller1: entered promiscuous mode [ 134.459569][ T6863] syzkaller1: entered allmulticast mode [ 134.566258][ T6868] erspan0: entered promiscuous mode [ 134.637131][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 134.765893][ T6876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.245'. [ 134.795290][ T6876] ip6gre1: entered promiscuous mode [ 134.803076][ T6876] ip6gre1: entered allmulticast mode [ 134.821103][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.856603][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.867118][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.998289][ T6883] syzkaller0: entered promiscuous mode [ 135.018218][ T6883] syzkaller0: entered allmulticast mode [ 135.131253][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.165432][ T6887] netlink: 'syz.2.249': attribute type 3 has an invalid length. [ 135.197669][ T6887] netlink: 'syz.2.249': attribute type 1 has an invalid length. [ 135.588409][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.595744][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.603957][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.726739][ T6913] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 135.756314][ T6913] netlink: 116 bytes leftover after parsing attributes in process `syz.3.255'. [ 135.766555][ T6913] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 135.775756][ T6915] netlink: 'syz.2.257': attribute type 2 has an invalid length. [ 135.816561][ T6915] netlink: 'syz.2.257': attribute type 2 has an invalid length. [ 135.837427][ T6915] netlink: 'syz.2.257': attribute type 2 has an invalid length. [ 135.859604][ T6915] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'. [ 136.127876][ T6928] FAULT_INJECTION: forcing a failure. [ 136.127876][ T6928] name failslab, interval 1, probability 0, space 0, times 1 [ 136.175581][ T6928] CPU: 0 UID: 0 PID: 6928 Comm: syz.2.259 Not tainted syzkaller #0 PREEMPT(full) [ 136.175626][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.175647][ T6928] Call Trace: [ 136.175661][ T6928] [ 136.175687][ T6928] dump_stack_lvl+0xe8/0x150 [ 136.175742][ T6928] should_fail_ex+0x40c/0x560 [ 136.175805][ T6928] should_failslab+0xa8/0x100 [ 136.175845][ T6928] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 136.175876][ T6928] ? __alloc_skb+0x189/0x7a0 [ 136.175933][ T6928] ? __alloc_skb+0x1d7/0x7a0 [ 136.175983][ T6928] ? __local_bh_enable_ip+0xd0/0x130 [ 136.176012][ T6928] __alloc_skb+0x1d7/0x7a0 [ 136.176048][ T6928] netlink_ack+0x136/0xb30 [ 136.176071][ T6928] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.176112][ T6928] ? __lock_acquire+0x683/0x2cd0 [ 136.176150][ T6928] netlink_rcv_skb+0x2a4/0x4a0 [ 136.176174][ T6928] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.176208][ T6928] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.176242][ T6928] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.176265][ T6928] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.176292][ T6928] netlink_unicast+0x7bb/0x940 [ 136.176335][ T6928] netlink_sendmsg+0x813/0xb40 [ 136.176368][ T6928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.176393][ T6928] ? aa_sock_msg_perm+0xf1/0x1b0 [ 136.176427][ T6928] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 136.176457][ T6928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.176480][ T6928] ____sys_sendmsg+0x9b9/0xa20 [ 136.176502][ T6928] ? __might_fault+0xaf/0x130 [ 136.176535][ T6928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.176565][ T6928] ? import_iovec+0x73/0xa0 [ 136.176594][ T6928] ___sys_sendmsg+0x2a5/0x360 [ 136.176615][ T6928] ? __lock_acquire+0x683/0x2cd0 [ 136.176641][ T6928] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.176698][ T6928] ? __fget_files+0x2a/0x420 [ 136.176727][ T6928] ? __fget_files+0x3a2/0x420 [ 136.176763][ T6928] __x64_sys_sendmsg+0x1bd/0x2a0 [ 136.176790][ T6928] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.176821][ T6928] ? rcu_is_watching+0x15/0xb0 [ 136.176857][ T6928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.176883][ T6928] do_syscall_64+0x174/0x580 [ 136.176911][ T6928] ? trace_irq_disable+0x3b/0x140 [ 136.176948][ T6928] ? clear_bhb_loop+0x40/0x90 [ 136.176983][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.177005][ T6928] RIP: 0033:0x7f9cf259ce59 [ 136.177040][ T6928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.177069][ T6928] RSP: 002b:00007f9cf3486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.177102][ T6928] RAX: ffffffffffffffda RBX: 00007f9cf2816090 RCX: 00007f9cf259ce59 [ 136.177118][ T6928] RDX: 0000000020040094 RSI: 0000200000006040 RDI: 0000000000000004 [ 136.177131][ T6928] RBP: 00007f9cf3486090 R08: 0000000000000000 R09: 0000000000000000 [ 136.177143][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.177155][ T6928] R13: 00007f9cf2816128 R14: 00007f9cf2816090 R15: 00007ffc75646148 [ 136.177188][ T6928] [ 136.918044][ T6937] netlink: 'syz.2.261': attribute type 7 has an invalid length. [ 137.008339][ T6937] netlink: 'syz.2.261': attribute type 7 has an invalid length. [ 137.029634][ T1107] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.047181][ T1107] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.085560][ T1107] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.125679][ T6940] syzkaller0: entered promiscuous mode [ 137.148386][ T6940] syzkaller0: entered allmulticast mode [ 137.235759][ T1107] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.388098][ T6950] 5nè‹Ò: entered promiscuous mode [ 137.988681][ T6980] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 138.026276][ T6980] netlink: 116 bytes leftover after parsing attributes in process `syz.3.270'. [ 138.070174][ T6980] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 138.515234][ T6996] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.274'. [ 138.718492][ T7005] block nbd4: not configured, cannot reconfigure [ 139.090621][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.105258][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'. [ 140.043548][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.282'. [ 140.289072][ T7044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.285'. [ 140.477639][ T7050] netlink: 'syz.0.284': attribute type 1 has an invalid length. [ 140.536759][ T7050] netlink: 116 bytes leftover after parsing attributes in process `syz.0.284'. [ 140.595274][ T7050] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 141.007496][ T7065] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 141.061939][ T7066] netlink: 'syz.3.288': attribute type 13 has an invalid length. [ 141.175634][ T5753] IPVS: starting estimator thread 0... [ 141.183052][ T7074] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 141.280569][ T7073] IPVS: using max 27 ests per chain, 64800 per kthread [ 141.794760][ T7090] xt_connbytes: Forcing CT accounting to be enabled [ 141.819248][ T7090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.078650][ T7090] bond1: option miimon: invalid value (18446744073709551607) [ 142.137341][ T7090] bond1: option miimon: allowed values 0 - 2147483647 [ 142.189084][ T7090] bond1 (unregistering): Released all slaves [ 142.594243][ T7123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.618733][ T7122] netlink: del zone limit has 8 unknown bytes [ 142.735227][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.300'. [ 142.829194][ T7128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.300'. [ 142.855852][ T7133] netlink: 68 bytes leftover after parsing attributes in process `syz.0.301'. [ 142.867707][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 142.880622][ T7128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.300'. [ 143.169262][ T7142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.304'. [ 143.243693][ T7149] netlink: 'syz.3.306': attribute type 1 has an invalid length. [ 143.369363][ T7149] bond1: entered promiscuous mode [ 143.375514][ T7149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.384049][ T7151] netlink: 16 bytes leftover after parsing attributes in process `syz.4.304'. [ 143.423133][ T7152] vlan2: entered allmulticast mode [ 143.437976][ T7152] bond1: entered allmulticast mode [ 143.627068][ T7154] bond1: (slave bridge2): making interface the new active one [ 143.653735][ T7162] FAULT_INJECTION: forcing a failure. [ 143.653735][ T7162] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 143.663928][ T7154] bridge2: entered promiscuous mode [ 143.700165][ T7154] bridge2: entered allmulticast mode [ 143.732146][ T7154] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 143.774934][ T7162] CPU: 1 UID: 0 PID: 7162 Comm: syz.4.307 Not tainted syzkaller #0 PREEMPT(full) [ 143.774968][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.774981][ T7162] Call Trace: [ 143.774991][ T7162] [ 143.775016][ T7162] dump_stack_lvl+0xe8/0x150 [ 143.775051][ T7162] should_fail_ex+0x40c/0x560 [ 143.775093][ T7162] _copy_from_user+0x2d/0xb0 [ 143.775121][ T7162] ___sys_recvmsg+0x173/0x590 [ 143.775154][ T7162] ? __pfx____sys_recvmsg+0x10/0x10 [ 143.775185][ T7162] ? __fget_files+0x2a/0x420 [ 143.775240][ T7162] ? __fget_files+0x3a2/0x420 [ 143.775278][ T7162] do_recvmmsg+0x329/0x810 [ 143.775312][ T7162] ? __pfx_do_recvmmsg+0x10/0x10 [ 143.775350][ T7162] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.775398][ T7162] __x64_sys_recvmmsg+0x198/0x250 [ 143.775427][ T7162] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 143.775461][ T7162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.775485][ T7162] do_syscall_64+0x174/0x580 [ 143.775510][ T7162] ? trace_irq_disable+0x3b/0x140 [ 143.775544][ T7162] ? clear_bhb_loop+0x40/0x90 [ 143.775583][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.775604][ T7162] RIP: 0033:0x7f5390f9ce59 [ 143.775624][ T7162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.775642][ T7162] RSP: 002b:00007f5391edb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 143.775665][ T7162] RAX: ffffffffffffffda RBX: 00007f5391216090 RCX: 00007f5390f9ce59 [ 143.775680][ T7162] RDX: 000000000291962b RSI: 0000200000000040 RDI: 0000000000000003 [ 143.775693][ T7162] RBP: 00007f5391edb090 R08: 0000000000000000 R09: 0000000000000000 [ 143.775705][ T7162] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 143.775718][ T7162] R13: 00007f5391216128 R14: 00007f5391216090 R15: 00007ffd50368ea8 [ 143.775750][ T7162] [ 145.162172][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 146.232162][ T7241] bridge_slave_0: left allmulticast mode [ 146.262290][ T7241] bridge_slave_0: left promiscuous mode [ 146.291376][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.423481][ T7252] FAULT_INJECTION: forcing a failure. [ 146.423481][ T7252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.477846][ T7252] CPU: 1 UID: 0 PID: 7252 Comm: syz.4.326 Not tainted syzkaller #0 PREEMPT(full) [ 146.477880][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 146.477893][ T7252] Call Trace: [ 146.477902][ T7252] [ 146.477911][ T7252] dump_stack_lvl+0xe8/0x150 [ 146.477946][ T7252] should_fail_ex+0x40c/0x560 [ 146.477995][ T7252] _copy_from_user+0x2d/0xb0 [ 146.478021][ T7252] ___sys_recvmsg+0x173/0x590 [ 146.478052][ T7252] ? __pfx____sys_recvmsg+0x10/0x10 [ 146.478079][ T7252] ? __fget_files+0x2a/0x420 [ 146.478134][ T7252] do_recvmmsg+0x329/0x810 [ 146.478165][ T7252] ? __pfx_do_recvmmsg+0x10/0x10 [ 146.478197][ T7252] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.478241][ T7252] __x64_sys_recvmmsg+0x198/0x250 [ 146.478290][ T7252] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 146.478352][ T7252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.478376][ T7252] do_syscall_64+0x174/0x580 [ 146.478418][ T7252] ? trace_irq_disable+0x3b/0x140 [ 146.478452][ T7252] ? clear_bhb_loop+0x40/0x90 [ 146.478480][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.478502][ T7252] RIP: 0033:0x7f5390f9ce59 [ 146.478524][ T7252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.478542][ T7252] RSP: 002b:00007f5391edb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 146.478566][ T7252] RAX: ffffffffffffffda RBX: 00007f5391216090 RCX: 00007f5390f9ce59 [ 146.478582][ T7252] RDX: 000000000291962b RSI: 0000200000000040 RDI: 0000000000000003 [ 146.478595][ T7252] RBP: 00007f5391edb090 R08: 0000000000000000 R09: 0000000000000000 [ 146.478615][ T7252] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 146.478629][ T7252] R13: 00007f5391216128 R14: 00007f5391216090 R15: 00007ffd50368ea8 [ 146.478663][ T7252] [ 146.842625][ T7241] bridge_slave_1: left allmulticast mode [ 146.890799][ T7241] bridge_slave_1: left promiscuous mode [ 146.897321][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.927280][ T7241] bond0: (slave bond_slave_0): Releasing backup interface [ 146.997223][ T7241] bond0: (slave bond_slave_1): Releasing backup interface [ 147.028899][ T7241] team0: Port device team_slave_0 removed [ 147.043263][ T7267] netlink: 44 bytes leftover after parsing attributes in process `syz.4.328'. [ 147.067054][ T7241] team0: Port device team_slave_1 removed [ 147.076162][ T7241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.084626][ T7241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.102452][ T7271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.329'. [ 147.116603][ T7241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.126844][ T7241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.138981][ T7241] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.182402][ T7244] team0: Port device xfrm0 added [ 147.196356][ T7253] tipc: Enabled bearer , priority 0 [ 147.613006][ T7292] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 147.645891][ T7289] bond1: option ad_select: invalid value (34) [ 147.654856][ T7292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.667203][ T7289] bond1 (unregistering): Released all slaves [ 147.730661][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.928728][ T7279] syzkaller0: entered promiscuous mode [ 147.957389][ T7279] syzkaller0: entered allmulticast mode [ 148.716087][ T7344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.340'. [ 150.425408][ T9] tipc: Node number set to 298019605 [ 150.445405][ T7334] geneve2: entered promiscuous mode [ 150.508047][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 55004 - 0 [ 150.531436][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 55004 - 0 [ 150.553493][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 55004 - 0 [ 150.574113][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 55004 - 0 [ 150.778582][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 150.793796][ T7382] Cannot find add_set index 0 as target [ 150.978627][ T7398] netlink: 'syz.4.344': attribute type 3 has an invalid length. [ 151.110348][ T7404] syzkaller0: entered promiscuous mode [ 151.127423][ T7404] syzkaller0: entered allmulticast mode [ 151.155632][ T7403] syzkaller0: entered promiscuous mode [ 151.182424][ T7403] syzkaller0: entered allmulticast mode [ 151.232540][ T7403] tc action pedit 'at' offset 2047 out of bounds [ 151.240202][ T7403] tc action pedit 'at' offset 2047 out of bounds [ 151.246675][ T7403] tc action pedit 'at' offset 2047 out of bounds [ 151.253093][ T7403] tc action pedit 'at' offset 2047 out of bounds [ 151.259458][ T7403] tc action pedit 'at' offset 2047 out of bounds [ 151.265891][ T7403] tc action pedit 'at' offset 2047 out of bounds [ 151.272313][ T7403] tc action pedit 'at' offset 2047 out of bounds [ 151.278708][ T7403] tc action pedit 'at' offset 2047 out of bounds [ 151.285153][ T7403] tc action pedit 'at' offset 2047 out of bounds [ 151.291561][ T7403] tc action pedit 'at' offset 2047 out of bounds [ 151.297961][ T7403] TC_ACT_REPEAT abuse ? [ 151.593191][ T7425] sit0: entered promiscuous mode [ 151.628687][ T7425] netlink: 'syz.1.353': attribute type 1 has an invalid length. [ 151.655402][ T7425] netlink: 1 bytes leftover after parsing attributes in process `syz.1.353'. [ 151.768498][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 151.800981][ T7433] netlink: 36 bytes leftover after parsing attributes in process `syz.3.356'. [ 151.884294][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 152.282817][ T7443] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 152.320821][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 152.587788][ T7462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.363'. [ 152.636088][ T7462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.363'. [ 152.761158][ T7467] syzkaller1: entered promiscuous mode [ 152.775980][ T7467] syzkaller1: entered allmulticast mode [ 152.962463][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.370'. [ 153.428565][ T7498] netlink: 'syz.4.375': attribute type 1 has an invalid length. [ 153.472271][ T7498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.497589][ T7498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.505491][ T7498] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 153.516622][ T7498] bond2: (slave gre1): Error -95 calling set_mac_address [ 153.545031][ T7507] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 153.555550][ T7507] bond2: (slave gre1): Error -95 calling set_mac_address [ 153.937668][ T7516] netlink: 'syz.3.379': attribute type 10 has an invalid length. [ 154.253015][ T7516] dummy0: entered promiscuous mode [ 154.298872][ T7516] team0: Port device dummy0 added [ 154.406650][ T7540] netlink: 32 bytes leftover after parsing attributes in process `syz.2.384'. [ 154.479905][ T7540] ªªªªª!: renamed from virt_wifi0 [ 155.842794][ T7589] __nla_validate_parse: 5 callbacks suppressed [ 155.842818][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 156.010327][ T7602] : entered promiscuous mode [ 156.599923][ T7618] bridge_slave_0 (unregistering): left allmulticast mode [ 156.607535][ T7618] bridge_slave_0 (unregistering): left promiscuous mode [ 156.618243][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.646725][ T7617] netlink: 68 bytes leftover after parsing attributes in process `syz.4.408'. [ 156.717586][ T7615] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 156.750690][ T7615] netlink: 116 bytes leftover after parsing attributes in process `syz.3.407'. [ 156.835130][ T7615] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 157.304644][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 158.294459][ T7659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.411'. [ 158.826995][ T7593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.846097][ T7589] netlink: 256 bytes leftover after parsing attributes in process `syz.2.401'. [ 158.941171][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'. [ 158.996703][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'. [ 158.999263][ T7680] netlink: 'syz.0.416': attribute type 30 has an invalid length. [ 159.052284][ T7681] netlink: 'syz.0.416': attribute type 30 has an invalid length. [ 159.125546][ T7688] netlink: 44 bytes leftover after parsing attributes in process `syz.3.419'. [ 159.143228][ T7692] netlink: 56 bytes leftover after parsing attributes in process `syz.4.417'. [ 159.182144][ T7694] netlink: 'syz.3.419': attribute type 9 has an invalid length. [ 159.192316][ T7694] netlink: 'syz.3.419': attribute type 6 has an invalid length. [ 159.221753][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.242427][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.265364][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.311441][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.529484][ T7699] macsec1: entered allmulticast mode [ 159.542054][ T7699] bond0: entered allmulticast mode [ 159.554683][ T7699] bond_slave_0: entered allmulticast mode [ 159.577540][ T7699] bond_slave_1: entered allmulticast mode [ 159.590833][ T7699] bond_slave_0: entered promiscuous mode [ 159.597569][ T7699] bond_slave_1: entered promiscuous mode [ 159.605459][ T7699] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 160.020142][ T7714] netlink: 'syz.0.426': attribute type 1 has an invalid length. [ 160.075939][ T7714] bond1: entered promiscuous mode [ 160.083102][ T7714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.135634][ T7714] bond1: (slave bridge1): making interface the new active one [ 160.144909][ T7714] bridge1: entered promiscuous mode [ 160.153983][ T7714] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 160.843005][ T7735] C: renamed from veth1_to_team [ 160.889190][ T7735] netlink: 'syz.2.430': attribute type 1 has an invalid length. [ 160.913716][ T7735] __nla_validate_parse: 3 callbacks suppressed [ 160.913740][ T7735] netlink: 116 bytes leftover after parsing attributes in process `syz.2.430'. [ 160.953317][ T7735] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 161.314644][ T7751] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.437'. [ 161.418065][ T7755] syzkaller1: entered promiscuous mode [ 161.436300][ T7755] syzkaller1: entered allmulticast mode [ 161.453884][ T7756] nbd: must specify at least one socket [ 161.484818][ T7755] xt_l2tp: missing protocol rule (udp|l2tpip) [ 161.584952][ T7763] netlink: 56 bytes leftover after parsing attributes in process `syz.1.439'. [ 161.756926][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 162.092125][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.445'. [ 162.157573][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.445'. [ 162.336277][ T7804] C: renamed from veth1_to_team [ 162.351819][ T7804] netlink: 'syz.4.448': attribute type 1 has an invalid length. [ 162.365710][ T7804] netlink: 116 bytes leftover after parsing attributes in process `syz.4.448'. [ 162.387927][ T7804] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 162.466551][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 162.752700][ T7811] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 162.798017][ T7811] bond1: left promiscuous mode [ 162.804003][ T7811] bridge2: left promiscuous mode [ 162.849295][ T7827] netlink: 'syz.4.454': attribute type 10 has an invalid length. [ 162.892626][ T7827] geneve1: entered promiscuous mode [ 162.938337][ T7827] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 162.983754][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.015202][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.042978][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.075985][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.762471][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 163.775158][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 163.784398][ T7856] netlink: 'syz.0.462': attribute type 18 has an invalid length. [ 163.808560][ T7857] netlink: 'syz.0.462': attribute type 18 has an invalid length. [ 164.164331][ T7878] netlink: 'syz.2.468': attribute type 11 has an invalid length. [ 164.226491][ T7874] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 164.266861][ T7874] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 164.303470][ T7874] veth0_virt_wifi: entered allmulticast mode [ 164.341402][ T7874] veth0_virt_wifi: entered promiscuous mode [ 164.367031][ T7874] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 164.374454][ T7874] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 164.392988][ T7883] netlink: 'syz.2.468': attribute type 22 has an invalid length. [ 164.407315][ T7885] netlink: 'syz.1.469': attribute type 1 has an invalid length. [ 164.592445][ T7890] x_tables: duplicate underflow at hook 1 [ 164.611219][ T7885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.704114][ T7888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.879111][ T7901] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 165.660752][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.447727][ T7954] __nla_validate_parse: 7 callbacks suppressed [ 166.447755][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'. [ 166.483534][ T7954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.485'. [ 167.055520][ T7980] openvswitch: netlink: Duplicate or invalid key (type 0). [ 167.089936][ T7980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.572566][ T7988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.862297][ T8004] netlink: 'syz.1.495': attribute type 6 has an invalid length. [ 167.897580][ T8006] netlink: 'syz.0.493': attribute type 3 has an invalid length. [ 167.967542][ T8004] netlink: 'syz.1.495': attribute type 11 has an invalid length. [ 168.207748][ T8014] netlink: 88 bytes leftover after parsing attributes in process `syz.4.497'. [ 169.291482][ T8042] vlan2: entered promiscuous mode [ 169.307319][ T8042] bridge0: entered promiscuous mode [ 169.363340][ T8042] netlink: 136 bytes leftover after parsing attributes in process `syz.1.504'. [ 169.457189][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 169.486134][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 169.887774][ T8059] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 169.939388][ T8059] batman_adv: batadv0: Adding interface: gretap1 [ 169.963898][ T8059] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.050748][ T8059] batman_adv: batadv0: Interface activated: gretap1 [ 170.636159][ T8087] ÿ: renamed from bond_slave_0 [ 170.687867][ T8089] netlink: 'syz.1.520': attribute type 9 has an invalid length. [ 170.698947][ T8089] netlink: 'syz.1.520': attribute type 6 has an invalid length. [ 170.707219][ T8089] netlink: 'syz.1.520': attribute type 7 has an invalid length. [ 170.714996][ T8087] netlink: 40 bytes leftover after parsing attributes in process `syz.4.517'. [ 170.735692][ T8086] syzkaller0: entered promiscuous mode [ 170.743432][ T8089] netlink: 'syz.1.520': attribute type 8 has an invalid length. [ 170.751346][ T8086] syzkaller0: entered allmulticast mode [ 170.773578][ T8086] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 171.005832][ T5766] IPVS: starting estimator thread 0... [ 171.120691][ T8103] IPVS: using max 28 ests per chain, 67200 per kthread [ 172.153561][ T8134] syzkaller1: entered promiscuous mode [ 172.183939][ T8134] syzkaller1: entered allmulticast mode [ 172.250607][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 172.381840][ T8111] hsr_slave_0: left promiscuous mode [ 172.409825][ T8111] hsr_slave_1: left promiscuous mode [ 172.786221][ T8158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.535'. [ 173.323869][ T8181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.543'. [ 173.348784][ T8181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.543'. [ 173.395824][ T8185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.543'. [ 173.426521][ T8189] netlink: 'syz.4.544': attribute type 21 has an invalid length. [ 173.446939][ T8181] netlink: 'syz.3.543': attribute type 1 has an invalid length. [ 173.471480][ T8189] netlink: 128 bytes leftover after parsing attributes in process `syz.4.544'. [ 173.629404][ T8189] netlink: 'syz.4.544': attribute type 4 has an invalid length. [ 173.639344][ T8189] netlink: 'syz.4.544': attribute type 3 has an invalid length. [ 173.648544][ T8189] netlink: 3 bytes leftover after parsing attributes in process `syz.4.544'. [ 173.674126][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.549'. [ 173.889961][ T8217] netlink: 'syz.0.551': attribute type 4 has an invalid length. [ 173.900787][ T8205] netlink: 'syz.3.549': attribute type 1 has an invalid length. [ 173.944788][ T8223] netlink: 'syz.0.551': attribute type 4 has an invalid length. [ 175.206282][ T8271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.568'. [ 175.243765][ T8273] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 175.497751][ T8281] ipip1: entered promiscuous mode [ 175.508775][ T8254] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.563'. [ 175.797413][ T8301] FAULT_INJECTION: forcing a failure. [ 175.797413][ T8301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.846459][ T8301] CPU: 0 UID: 0 PID: 8301 Comm: syz.0.579 Not tainted syzkaller #0 PREEMPT(full) [ 175.846490][ T8301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.846502][ T8301] Call Trace: [ 175.846510][ T8301] [ 175.846519][ T8301] dump_stack_lvl+0xe8/0x150 [ 175.846571][ T8301] should_fail_ex+0x40c/0x560 [ 175.846608][ T8301] _copy_from_user+0x2d/0xb0 [ 175.846633][ T8301] __sys_bpf+0x229/0x950 [ 175.846665][ T8301] ? __pfx___sys_bpf+0x10/0x10 [ 175.846710][ T8301] ? ksys_write+0x242/0x270 [ 175.846744][ T8301] ? __pfx_ksys_write+0x10/0x10 [ 175.846775][ T8301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.846797][ T8301] __x64_sys_bpf+0x7c/0x90 [ 175.846826][ T8301] do_syscall_64+0x174/0x580 [ 175.846851][ T8301] ? trace_irq_disable+0x3b/0x140 [ 175.846882][ T8301] ? clear_bhb_loop+0x40/0x90 [ 175.846906][ T8301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.846926][ T8301] RIP: 0033:0x7f594299ce59 [ 175.846944][ T8301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.846960][ T8301] RSP: 002b:00007f59437b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.846980][ T8301] RAX: ffffffffffffffda RBX: 00007f5942c15fa0 RCX: 00007f594299ce59 [ 175.846993][ T8301] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 175.847004][ T8301] RBP: 00007f59437b0090 R08: 0000000000000000 R09: 0000000000000000 [ 175.847015][ T8301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.847025][ T8301] R13: 00007f5942c16038 R14: 00007f5942c15fa0 R15: 00007ffc63b38228 [ 175.847053][ T8301] [ 176.199776][ T8314] netlink: 'syz.4.581': attribute type 7 has an invalid length. [ 176.848757][ T8299] ipvlan2: entered promiscuous mode [ 176.911283][ T8323] syzkaller0: entered promiscuous mode [ 176.927092][ T8323] syzkaller0: entered allmulticast mode [ 177.209065][ T8353] FAULT_INJECTION: forcing a failure. [ 177.209065][ T8353] name failslab, interval 1, probability 0, space 0, times 0 [ 177.222252][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.4.590 Not tainted syzkaller #0 PREEMPT(full) [ 177.222282][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.222295][ T8353] Call Trace: [ 177.222304][ T8353] [ 177.222313][ T8353] dump_stack_lvl+0xe8/0x150 [ 177.222347][ T8353] should_fail_ex+0x40c/0x560 [ 177.222388][ T8353] should_failslab+0xa8/0x100 [ 177.222424][ T8353] __kmalloc_cache_node_noprof+0x8c/0x690 [ 177.222456][ T8353] ? unwind_next_frame+0x8f/0x2550 [ 177.222485][ T8353] ? __get_vm_area_node+0x136/0x300 [ 177.222518][ T8353] __get_vm_area_node+0x136/0x300 [ 177.222549][ T8353] __vmalloc_node_range_noprof+0x358/0x1730 [ 177.222595][ T8353] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 177.222659][ T8353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 177.222689][ T8353] ? __lock_acquire+0x683/0x2cd0 [ 177.222723][ T8353] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 177.222755][ T8353] __vmalloc_noprof+0xd2/0x120 [ 177.222783][ T8353] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 177.222835][ T8353] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 177.222867][ T8353] ? bpf_prog_alloc+0x2a/0x1a0 [ 177.222902][ T8353] bpf_prog_alloc+0x3c/0x1a0 [ 177.222942][ T8353] bpf_prog_load+0x788/0x1a10 [ 177.223002][ T8353] ? get_pid_task+0x20/0x1f0 [ 177.223034][ T8353] ? __pfx_bpf_prog_load+0x10/0x10 [ 177.223067][ T8353] ? __might_fault+0xaf/0x130 [ 177.223110][ T8353] ? bpf_lsm_bpf+0x9/0x20 [ 177.223129][ T8353] ? security_bpf+0x7e/0x2d0 [ 177.223161][ T8353] __sys_bpf+0x618/0x950 [ 177.223194][ T8353] ? __pfx___sys_bpf+0x10/0x10 [ 177.223241][ T8353] ? ksys_write+0x242/0x270 [ 177.223278][ T8353] ? __pfx_ksys_write+0x10/0x10 [ 177.223313][ T8353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.223336][ T8353] __x64_sys_bpf+0x7c/0x90 [ 177.223365][ T8353] do_syscall_64+0x174/0x580 [ 177.223391][ T8353] ? trace_irq_disable+0x3b/0x140 [ 177.223422][ T8353] ? clear_bhb_loop+0x40/0x90 [ 177.223447][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.223467][ T8353] RIP: 0033:0x7f5390f9ce59 [ 177.223486][ T8353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.223503][ T8353] RSP: 002b:00007f5391efc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 177.223537][ T8353] RAX: ffffffffffffffda RBX: 00007f5391215fa0 RCX: 00007f5390f9ce59 [ 177.223550][ T8353] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 177.223561][ T8353] RBP: 00007f5391efc090 R08: 0000000000000000 R09: 0000000000000000 [ 177.223572][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.223584][ T8353] R13: 00007f5391216038 R14: 00007f5391215fa0 R15: 00007ffd50368ea8 [ 177.223611][ T8353] [ 177.224001][ T8353] syz.4.590: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 177.562852][ T8353] CPU: 1 UID: 0 PID: 8353 Comm: syz.4.590 Not tainted syzkaller #0 PREEMPT(full) [ 177.562886][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.562898][ T8353] Call Trace: [ 177.562908][ T8353] [ 177.562917][ T8353] dump_stack_lvl+0xe8/0x150 [ 177.562953][ T8353] warn_alloc+0x249/0x340 [ 177.562995][ T8353] ? __pfx_warn_alloc+0x10/0x10 [ 177.563029][ T8353] ? __get_vm_area_node+0x136/0x300 [ 177.563062][ T8353] ? __get_vm_area_node+0x2af/0x300 [ 177.563096][ T8353] __vmalloc_node_range_noprof+0x37d/0x1730 [ 177.563156][ T8353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 177.563203][ T8353] ? __lock_acquire+0x683/0x2cd0 [ 177.563237][ T8353] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 177.563270][ T8353] __vmalloc_noprof+0xd2/0x120 [ 177.563298][ T8353] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 177.563333][ T8353] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 177.563365][ T8353] ? bpf_prog_alloc+0x2a/0x1a0 [ 177.563399][ T8353] bpf_prog_alloc+0x3c/0x1a0 [ 177.563434][ T8353] bpf_prog_load+0x788/0x1a10 [ 177.563485][ T8353] ? get_pid_task+0x20/0x1f0 [ 177.563555][ T8353] ? __pfx_bpf_prog_load+0x10/0x10 [ 177.563588][ T8353] ? __might_fault+0xaf/0x130 [ 177.563634][ T8353] ? bpf_lsm_bpf+0x9/0x20 [ 177.563652][ T8353] ? security_bpf+0x7e/0x2d0 [ 177.563686][ T8353] __sys_bpf+0x618/0x950 [ 177.563720][ T8353] ? __pfx___sys_bpf+0x10/0x10 [ 177.563773][ T8353] ? ksys_write+0x242/0x270 [ 177.563808][ T8353] ? __pfx_ksys_write+0x10/0x10 [ 177.563844][ T8353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.563873][ T8353] __x64_sys_bpf+0x7c/0x90 [ 177.563904][ T8353] do_syscall_64+0x174/0x580 [ 177.563931][ T8353] ? trace_irq_disable+0x3b/0x140 [ 177.563964][ T8353] ? clear_bhb_loop+0x40/0x90 [ 177.563991][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.564012][ T8353] RIP: 0033:0x7f5390f9ce59 [ 177.564034][ T8353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.564051][ T8353] RSP: 002b:00007f5391efc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 177.564075][ T8353] RAX: ffffffffffffffda RBX: 00007f5391215fa0 RCX: 00007f5390f9ce59 [ 177.564090][ T8353] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 177.564103][ T8353] RBP: 00007f5391efc090 R08: 0000000000000000 R09: 0000000000000000 [ 177.564116][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.564128][ T8353] R13: 00007f5391216038 R14: 00007f5391215fa0 R15: 00007ffd50368ea8 [ 177.564166][ T8353] [ 177.564210][ T8353] Mem-Info: [ 177.851094][ T8353] active_anon:5767 inactive_anon:0 isolated_anon:0 [ 177.851094][ T8353] active_file:3574 inactive_file:39990 isolated_file:0 [ 177.851094][ T8353] unevictable:768 dirty:290 writeback:0 [ 177.851094][ T8353] slab_reclaimable:10329 slab_unreclaimable:137725 [ 177.851094][ T8353] mapped:29724 shmem:1287 pagetables:1327 [ 177.851094][ T8353] sec_pagetables:0 bounce:0 [ 177.851094][ T8353] kernel_misc_reclaimable:0 [ 177.851094][ T8353] free:1291153 free_pcp:9668 free_cma:0 [ 177.924967][ T8353] Node 0 active_anon:23168kB inactive_anon:0kB active_file:14296kB inactive_file:159768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118896kB dirty:1160kB writeback:0kB shmem:3612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12432kB pagetables:5032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 177.987530][ T8353] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 178.041692][ T8353] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.075357][ T8353] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 178.082215][ T8353] Node 0 DMA32 free:1216040kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23668kB inactive_anon:0kB active_file:14296kB inactive_file:159768kB unevictable:1536kB writepending:1160kB zspages:0kB present:3129332kB managed:2552904kB mlocked:0kB bounce:0kB free_pcp:38320kB local_pcp:16092kB free_cma:0kB [ 178.117604][ T8353] lowmem_reserve[]: 0 0 0 0 0 [ 178.123514][ T8360] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.171680][ T8353] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.242466][ T8353] lowmem_reserve[]: 0 0 0 0 0 [ 178.247425][ T8353] Node 1 Normal free:3945012kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 178.302174][ T8353] lowmem_reserve[]: 0 0 0 0 0 [ 178.308406][ T8365] syzkaller1: entered promiscuous mode [ 178.322943][ T8365] syzkaller1: entered allmulticast mode [ 178.337727][ T8353] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 178.351237][ T8353] Node 0 DMA32: 3321*4kB (UM) 2072*8kB (UM) 981*16kB (UME) 148*32kB (ME) 289*64kB (UME) 243*128kB (UME) 182*256kB (UME) 84*512kB (UM) 62*1024kB (UM) 28*2048kB (UME) 221*4096kB (UM) = 1215540kB [ 178.371104][ T8353] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 178.383033][ T8353] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 8*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 2*2048kB (U) 961*4096kB (M) = 3945064kB [ 178.400628][ T8353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.427330][ T8353] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.437530][ T8353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.447233][ T8353] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.456837][ T8353] 44847 total pagecache pages [ 178.464072][ T8353] 0 pages in swap cache [ 178.468318][ T8353] Free swap = 124996kB [ 178.472761][ T8353] Total swap = 124996kB [ 178.477036][ T8353] 2097051 pages RAM [ 178.482187][ T8353] 0 pages HighMem/MovableOnly [ 178.506354][ T8353] 427040 pages reserved [ 178.513668][ T8353] 0 pages cma reserved [ 179.590856][ T8406] bridge3: entered promiscuous mode [ 179.596754][ T8406] bridge3: entered allmulticast mode [ 179.609074][ T8406] __nla_validate_parse: 5 callbacks suppressed [ 179.609090][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 181.228529][ T8371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.487192][ T8410] x_tables: duplicate underflow at hook 2 [ 181.562304][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.607'. [ 181.597456][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'. [ 181.865223][ T8434] syzkaller0: entered promiscuous mode [ 181.896661][ T8434] syzkaller0: entered allmulticast mode [ 182.488108][ T8457] syzkaller1: entered promiscuous mode [ 182.508042][ T8457] syzkaller1: entered allmulticast mode [ 182.535726][ T8457] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 182.562701][ T8457] netlink: 'syz.0.614': attribute type 1 has an invalid length. [ 183.128524][ T5293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.257005][ T8491] syzkaller0: entered promiscuous mode [ 183.276817][ T8491] syzkaller0: entered allmulticast mode [ 183.579528][ T8500] netlink: 'syz.4.626': attribute type 1 has an invalid length. [ 183.710317][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 183.725594][ T8505] netlink: 'syz.2.628': attribute type 29 has an invalid length. [ 183.735535][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 183.800363][ T8500] bond4: entered promiscuous mode [ 183.814193][ T8510] netlink: 'syz.1.629': attribute type 1 has an invalid length. [ 183.824488][ T8500] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.857407][ T8502] bond4: (slave bridge4): making interface the new active one [ 183.867934][ T8502] bridge4: entered promiscuous mode [ 183.882459][ T8502] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 183.919546][ T8507] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 184.030063][ T8510] bond2: entered promiscuous mode [ 184.044666][ T8510] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.106473][ T8516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.116526][ T8523] netlink: 40 bytes leftover after parsing attributes in process `syz.2.631'. [ 184.127089][ T8516] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 184.141384][ T8516] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 184.175233][ T8516] bond2: (slave vti0): making interface the new active one [ 184.191807][ T8516] vti0: entered promiscuous mode [ 184.199886][ T8516] bond2: (slave vti0): Enslaving as an active interface with an up link [ 184.367286][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 184.509758][ T8539] netlink: 104 bytes leftover after parsing attributes in process `syz.1.635'. [ 184.779553][ T8548] syzkaller0: entered promiscuous mode [ 184.791348][ T8548] syzkaller0: entered allmulticast mode [ 184.907243][ T8548] FAULT_INJECTION: forcing a failure. [ 184.907243][ T8548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.968782][ T8548] CPU: 1 UID: 0 PID: 8548 Comm: syz.0.639 Not tainted syzkaller #0 PREEMPT(full) [ 184.968812][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.968823][ T8548] Call Trace: [ 184.968832][ T8548] [ 184.968840][ T8548] dump_stack_lvl+0xe8/0x150 [ 184.968870][ T8548] should_fail_ex+0x40c/0x560 [ 184.968906][ T8548] _copy_from_iter+0x1d3/0x1660 [ 184.968925][ T8548] ? skb_set_owner_w+0x263/0x3d0 [ 184.968957][ T8548] ? __pfx__copy_from_iter+0x10/0x10 [ 184.968982][ T8548] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 184.969006][ T8548] skb_copy_datagram_from_iter+0xe6/0x720 [ 184.969030][ T8548] ? dev_get_by_index+0x22/0x2d0 [ 184.969055][ T8548] ? skb_put+0x112/0x210 [ 184.969074][ T8548] packet_sendmsg+0x36ab/0x5040 [ 184.969106][ T8548] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 184.969133][ T8548] ? __lock_acquire+0x683/0x2cd0 [ 184.969164][ T8548] ? __pfx_clear_nonspinnable+0x1/0x10 [ 184.969208][ T8548] ? __pfx_packet_sendmsg+0x10/0x10 [ 184.969226][ T8548] ? aa_sk_perm+0x6d5/0x900 [ 184.969259][ T8548] ? __pfx_aa_sk_perm+0x10/0x10 [ 184.969281][ T8548] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 184.969317][ T8548] ? aa_sock_msg_perm+0xf1/0x1b0 [ 184.969345][ T8548] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.969370][ T8548] ? __pfx_packet_sendmsg+0x10/0x10 [ 184.969391][ T8548] __sys_sendto+0x672/0x710 [ 184.969423][ T8548] ? __pfx___sys_sendto+0x10/0x10 [ 184.969460][ T8548] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 184.969497][ T8548] ? __fget_files+0x3a2/0x420 [ 184.969533][ T8548] ? ksys_write+0x242/0x270 [ 184.969562][ T8548] ? __pfx_ksys_write+0x10/0x10 [ 184.969592][ T8548] __x64_sys_sendto+0xde/0x100 [ 184.969621][ T8548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.969641][ T8548] do_syscall_64+0x174/0x580 [ 184.969662][ T8548] ? trace_irq_disable+0x3b/0x140 [ 184.969689][ T8548] ? clear_bhb_loop+0x40/0x90 [ 184.969711][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.969729][ T8548] RIP: 0033:0x7f594299ce59 [ 184.969751][ T8548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.969766][ T8548] RSP: 002b:00007f59437b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 184.969789][ T8548] RAX: ffffffffffffffda RBX: 00007f5942c15fa0 RCX: 00007f594299ce59 [ 184.969802][ T8548] RDX: 0000000000000036 RSI: 0000200000000240 RDI: 0000000000000006 [ 184.969823][ T8548] RBP: 00007f59437b0090 R08: 00002000000001c0 R09: 0000000000000014 [ 184.969835][ T8548] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 184.969845][ T8548] R13: 00007f5942c16038 R14: 00007f5942c15fa0 R15: 00007ffc63b38228 [ 184.969876][ T8548] [ 185.299429][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 185.365431][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 185.503293][ T8570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.645'. [ 185.742166][ T8581] Bluetooth: MGMT ver 1.23 [ 185.993011][ T8593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.651'. [ 186.092216][ T8593] IPv6: sit1: Disabled Multicast RS [ 186.150779][ T8593] sit1: entered allmulticast mode [ 186.584231][ T8621] syzkaller0: entered promiscuous mode [ 186.605027][ T8621] syzkaller0: entered allmulticast mode [ 186.623368][ T8618] syzkaller1: entered promiscuous mode [ 186.645504][ T8618] syzkaller1: entered allmulticast mode [ 186.698936][ T8618] xt_l2tp: missing protocol rule (udp|l2tpip) [ 186.742018][ T8621] FAULT_INJECTION: forcing a failure. [ 186.742018][ T8621] name failslab, interval 1, probability 0, space 0, times 0 [ 186.757073][ T8621] CPU: 1 UID: 0 PID: 8621 Comm: syz.2.657 Not tainted syzkaller #0 PREEMPT(full) [ 186.757104][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 186.757117][ T8621] Call Trace: [ 186.757126][ T8621] [ 186.757136][ T8621] dump_stack_lvl+0xe8/0x150 [ 186.757171][ T8621] should_fail_ex+0x40c/0x560 [ 186.757214][ T8621] should_failslab+0xa8/0x100 [ 186.757250][ T8621] ? skb_clone+0x212/0x3a0 [ 186.757276][ T8621] kmem_cache_alloc_noprof+0x87/0x650 [ 186.757308][ T8621] ? __pfx_skb_orphan_partial+0x10/0x10 [ 186.757340][ T8621] skb_clone+0x212/0x3a0 [ 186.757362][ T8621] ? netem_enqueue+0xeb8/0x32b0 [ 186.757387][ T8621] netem_enqueue+0xecb/0x32b0 [ 186.757412][ T8621] ? do_raw_spin_lock+0x12b/0x2f0 [ 186.757456][ T8621] dev_qdisc_enqueue+0x4e/0x260 [ 186.757497][ T8621] ? __dev_queue_xmit+0x1b26/0x37f0 [ 186.757526][ T8621] __dev_queue_xmit+0x1b40/0x37f0 [ 186.757567][ T8621] ? __dev_queue_xmit+0x29b/0x37f0 [ 186.757604][ T8621] ? __pfx___dev_queue_xmit+0x10/0x10 [ 186.757636][ T8621] ? __pfx___vlan_get_protocol_offset+0x10/0x10 [ 186.757678][ T8621] ? __pfx_packet_parse_headers+0x10/0x10 [ 186.757715][ T8621] ? packet_xmit+0x68/0x330 [ 186.757740][ T8621] ? skb_put+0x112/0x210 [ 186.757763][ T8621] packet_sendmsg+0x3d95/0x5040 [ 186.757800][ T8621] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 186.757832][ T8621] ? __lock_acquire+0x683/0x2cd0 [ 186.757867][ T8621] ? __pfx_clear_nonspinnable+0x1/0x10 [ 186.757922][ T8621] ? __pfx_packet_sendmsg+0x10/0x10 [ 186.757944][ T8621] ? aa_sk_perm+0x6d5/0x900 [ 186.757983][ T8621] ? __pfx_aa_sk_perm+0x10/0x10 [ 186.758011][ T8621] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 186.758053][ T8621] ? aa_sock_msg_perm+0xf1/0x1b0 [ 186.758102][ T8621] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.758132][ T8621] ? __pfx_packet_sendmsg+0x10/0x10 [ 186.758158][ T8621] __sys_sendto+0x672/0x710 [ 186.758197][ T8621] ? __pfx___sys_sendto+0x10/0x10 [ 186.758228][ T8621] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 186.758271][ T8621] ? __fget_files+0x3a2/0x420 [ 186.758311][ T8621] ? ksys_write+0x242/0x270 [ 186.758347][ T8621] ? __pfx_ksys_write+0x10/0x10 [ 186.758384][ T8621] __x64_sys_sendto+0xde/0x100 [ 186.758419][ T8621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.758444][ T8621] do_syscall_64+0x174/0x580 [ 186.758468][ T8621] ? trace_irq_disable+0x3b/0x140 [ 186.758508][ T8621] ? clear_bhb_loop+0x40/0x90 [ 186.758536][ T8621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.758557][ T8621] RIP: 0033:0x7f9cf259ce59 [ 186.758578][ T8621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.758597][ T8621] RSP: 002b:00007f9cf34a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 186.758620][ T8621] RAX: ffffffffffffffda RBX: 00007f9cf2815fa0 RCX: 00007f9cf259ce59 [ 186.758636][ T8621] RDX: 0000000000000036 RSI: 0000200000000240 RDI: 0000000000000006 [ 186.758649][ T8621] RBP: 00007f9cf34a7090 R08: 00002000000001c0 R09: 0000000000000014 [ 186.758662][ T8621] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 186.758674][ T8621] R13: 00007f9cf2816038 R14: 00007f9cf2815fa0 R15: 00007ffc75646148 [ 186.758710][ T8621] [ 188.163676][ T8679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.670'. [ 188.414614][ T8668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.667'. [ 188.849684][ T8702] syzkaller0: entered promiscuous mode [ 188.885449][ T8702] syzkaller0: entered allmulticast mode [ 188.919934][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 188.937253][ T8706] netlink: 'syz.2.675': attribute type 8 has an invalid length. [ 188.947435][ T8705] openvswitch: netlink: Flow actions attr not present in new flow. [ 189.037464][ T8702] FAULT_INJECTION: forcing a failure. [ 189.037464][ T8702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.071391][ T8702] CPU: 0 UID: 0 PID: 8702 Comm: syz.0.674 Not tainted syzkaller #0 PREEMPT(full) [ 189.071417][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 189.071427][ T8702] Call Trace: [ 189.071434][ T8702] [ 189.071442][ T8702] dump_stack_lvl+0xe8/0x150 [ 189.071470][ T8702] should_fail_ex+0x40c/0x560 [ 189.071502][ T8702] _copy_to_user+0x31/0xb0 [ 189.071523][ T8702] simple_read_from_buffer+0xe1/0x170 [ 189.071550][ T8702] proc_fail_nth_read+0x1bb/0x230 [ 189.071577][ T8702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.071600][ T8702] ? rw_verify_area+0x24a/0x4c0 [ 189.071624][ T8702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.071644][ T8702] vfs_read+0x213/0xa80 [ 189.071670][ T8702] ? __pfx___mutex_lock+0x10/0x10 [ 189.071693][ T8702] ? __pfx_vfs_read+0x10/0x10 [ 189.071716][ T8702] ? __fget_files+0x2a/0x420 [ 189.071755][ T8702] ? __fget_files+0x3a2/0x420 [ 189.071773][ T8702] ? __fget_files+0x2a/0x420 [ 189.071798][ T8702] ksys_read+0x150/0x270 [ 189.071823][ T8702] ? __pfx_ksys_read+0x10/0x10 [ 189.071853][ T8702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.071871][ T8702] do_syscall_64+0x174/0x580 [ 189.071888][ T8702] ? trace_irq_disable+0x3b/0x140 [ 189.071913][ T8702] ? clear_bhb_loop+0x40/0x90 [ 189.071937][ T8702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.071953][ T8702] RIP: 0033:0x7f594295d68e [ 189.071970][ T8702] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 189.071983][ T8702] RSP: 002b:00007f59437affe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.072002][ T8702] RAX: ffffffffffffffda RBX: 00007f59437b06c0 RCX: 00007f594295d68e [ 189.072013][ T8702] RDX: 000000000000000f RSI: 00007f59437b00a0 RDI: 0000000000000007 [ 189.072023][ T8702] RBP: 00007f59437b0090 R08: 0000000000000000 R09: 0000000000000000 [ 189.072033][ T8702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.072043][ T8702] R13: 00007f5942c16038 R14: 00007f5942c15fa0 R15: 00007ffc63b38228 [ 189.072072][ T8702] [ 189.356080][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'. [ 189.559878][ T8720] xt_hashlimit: size too large, truncated to 1048576 [ 189.728816][ T8728] vlan2: entered promiscuous mode [ 189.744578][ T8728] bridge0: entered promiscuous mode [ 189.753938][ T8732] FAULT_INJECTION: forcing a failure. [ 189.753938][ T8732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.824192][ T8732] CPU: 1 UID: 0 PID: 8732 Comm: syz.4.682 Not tainted syzkaller #0 PREEMPT(full) [ 189.824227][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 189.824240][ T8732] Call Trace: [ 189.824248][ T8732] [ 189.824256][ T8732] dump_stack_lvl+0xe8/0x150 [ 189.824291][ T8732] should_fail_ex+0x40c/0x560 [ 189.824329][ T8732] _copy_from_user+0x2d/0xb0 [ 189.824355][ T8732] __sys_bpf+0x229/0x950 [ 189.824391][ T8732] ? __pfx___sys_bpf+0x10/0x10 [ 189.824454][ T8732] ? ksys_write+0x242/0x270 [ 189.824489][ T8732] ? __pfx_ksys_write+0x10/0x10 [ 189.824522][ T8732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.824545][ T8732] __x64_sys_bpf+0x7c/0x90 [ 189.824575][ T8732] do_syscall_64+0x174/0x580 [ 189.824602][ T8732] ? trace_irq_disable+0x3b/0x140 [ 189.824633][ T8732] ? clear_bhb_loop+0x40/0x90 [ 189.824660][ T8732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.824681][ T8732] RIP: 0033:0x7f5390f9ce59 [ 189.824703][ T8732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.824721][ T8732] RSP: 002b:00007f5391efc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.824757][ T8732] RAX: ffffffffffffffda RBX: 00007f5391215fa0 RCX: 00007f5390f9ce59 [ 189.824791][ T8732] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 189.824804][ T8732] RBP: 00007f5391efc090 R08: 0000000000000000 R09: 0000000000000000 [ 189.824822][ T8732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.824833][ T8732] R13: 00007f5391216038 R14: 00007f5391215fa0 R15: 00007ffd50368ea8 [ 189.824867][ T8732] [ 190.346063][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 190.421772][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 190.466267][ T8750] pimreg: entered allmulticast mode [ 190.499332][ T8750] pimreg: left allmulticast mode [ 191.342832][ T8785] FAULT_INJECTION: forcing a failure. [ 191.342832][ T8785] name failslab, interval 1, probability 0, space 0, times 0 [ 191.369421][ T8785] CPU: 1 UID: 0 PID: 8785 Comm: syz.3.695 Not tainted syzkaller #0 PREEMPT(full) [ 191.369453][ T8785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.369465][ T8785] Call Trace: [ 191.369474][ T8785] [ 191.369482][ T8785] dump_stack_lvl+0xe8/0x150 [ 191.369529][ T8785] should_fail_ex+0x40c/0x560 [ 191.369571][ T8785] should_failslab+0xa8/0x100 [ 191.369609][ T8785] __kmalloc_noprof+0xe8/0x750 [ 191.369641][ T8785] ? bpf_test_init+0x9f/0x150 [ 191.369663][ T8785] ? __lock_acquire+0x683/0x2cd0 [ 191.369691][ T8785] bpf_test_init+0x9f/0x150 [ 191.369718][ T8785] bpf_prog_test_run_skb+0x31e/0x2230 [ 191.369760][ T8785] ? __fget_files+0x3a2/0x420 [ 191.369786][ T8785] ? __fget_files+0x2a/0x420 [ 191.369817][ T8785] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 191.369841][ T8785] bpf_prog_test_run+0x2c5/0x340 [ 191.369867][ T8785] __sys_bpf+0x643/0x950 [ 191.369901][ T8785] ? __pfx___sys_bpf+0x10/0x10 [ 191.369954][ T8785] ? rcu_is_watching+0x15/0xb0 [ 191.369986][ T8785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.370028][ T8785] __x64_sys_bpf+0x7c/0x90 [ 191.370068][ T8785] do_syscall_64+0x174/0x580 [ 191.370094][ T8785] ? trace_irq_disable+0x3b/0x140 [ 191.370126][ T8785] ? clear_bhb_loop+0x40/0x90 [ 191.370154][ T8785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.370176][ T8785] RIP: 0033:0x7f67df59ce59 [ 191.370197][ T8785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.370215][ T8785] RSP: 002b:00007f67e046b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.370239][ T8785] RAX: ffffffffffffffda RBX: 00007f67df815fa0 RCX: 00007f67df59ce59 [ 191.370254][ T8785] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 191.370267][ T8785] RBP: 00007f67e046b090 R08: 0000000000000000 R09: 0000000000000000 [ 191.370279][ T8785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.370291][ T8785] R13: 00007f67df816038 R14: 00007f67df815fa0 R15: 00007fff14f602d8 [ 191.370327][ T8785] [ 191.640263][ T8787] netlink: 32 bytes leftover after parsing attributes in process `syz.0.696'. [ 192.447097][ T8815] netlink: 'syz.1.702': attribute type 32 has an invalid length. [ 193.164871][ T8837] netlink: 'syz.4.707': attribute type 49 has an invalid length. [ 193.291439][ T8841] netlink: 'syz.2.709': attribute type 4 has an invalid length. [ 193.325063][ T8841] netlink: 'syz.2.709': attribute type 4 has an invalid length. [ 193.642863][ T8851] netlink: 72 bytes leftover after parsing attributes in process `syz.2.714'. [ 195.477620][ T8927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.732'. [ 195.773247][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.734'. [ 196.076370][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'. [ 196.093841][ T8956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.738'. [ 196.112231][ T8951] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 196.112231][ T8951] Please contact the netfilter-devel mailing list or update your nftables rules. [ 196.118432][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 196.214623][ T8951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.739'. [ 196.281129][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.739'. [ 196.357310][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'. [ 196.671442][ T8977] netlink: 'syz.2.745': attribute type 21 has an invalid length. [ 196.679543][ T8977] netlink: 128 bytes leftover after parsing attributes in process `syz.2.745'. [ 196.688896][ T8977] netlink: 'syz.2.745': attribute type 5 has an invalid length. [ 196.696832][ T8977] netlink: 3 bytes leftover after parsing attributes in process `syz.2.745'. [ 197.283227][ T8994] FAULT_INJECTION: forcing a failure. [ 197.283227][ T8994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.312050][ T8994] CPU: 0 UID: 0 PID: 8994 Comm: syz.0.750 Not tainted syzkaller #0 PREEMPT(full) [ 197.312082][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 197.312094][ T8994] Call Trace: [ 197.312102][ T8994] [ 197.312111][ T8994] dump_stack_lvl+0xe8/0x150 [ 197.312144][ T8994] should_fail_ex+0x40c/0x560 [ 197.312186][ T8994] _copy_to_user+0x31/0xb0 [ 197.312214][ T8994] bpf_test_finish+0x1db/0x6b0 [ 197.312249][ T8994] ? trace_kmem_cache_alloc+0x29/0xe0 [ 197.312280][ T8994] ? __pfx_bpf_test_finish+0x10/0x10 [ 197.312315][ T8994] bpf_prog_test_run_skb+0x11fe/0x2230 [ 197.312356][ T8994] ? __fget_files+0x3a2/0x420 [ 197.312381][ T8994] ? __fget_files+0x2a/0x420 [ 197.312411][ T8994] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 197.312434][ T8994] bpf_prog_test_run+0x2c5/0x340 [ 197.312468][ T8994] __sys_bpf+0x643/0x950 [ 197.312502][ T8994] ? __pfx___sys_bpf+0x10/0x10 [ 197.312550][ T8994] ? ksys_write+0x242/0x270 [ 197.312584][ T8994] ? __pfx_ksys_write+0x10/0x10 [ 197.312618][ T8994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.312640][ T8994] __x64_sys_bpf+0x7c/0x90 [ 197.312670][ T8994] do_syscall_64+0x174/0x580 [ 197.312695][ T8994] ? trace_irq_disable+0x3b/0x140 [ 197.312725][ T8994] ? clear_bhb_loop+0x40/0x90 [ 197.312751][ T8994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.312772][ T8994] RIP: 0033:0x7f594299ce59 [ 197.312791][ T8994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.312808][ T8994] RSP: 002b:00007f59437b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 197.312830][ T8994] RAX: ffffffffffffffda RBX: 00007f5942c15fa0 RCX: 00007f594299ce59 [ 197.312845][ T8994] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 197.312858][ T8994] RBP: 00007f59437b0090 R08: 0000000000000000 R09: 0000000000000000 [ 197.312887][ T8994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.312899][ T8994] R13: 00007f5942c16038 R14: 00007f5942c15fa0 R15: 00007ffc63b38228 [ 197.312932][ T8994] [ 197.730018][ T9008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.231871][ T9033] unsupported nla_type 11811 [ 198.423897][ T9038] netlink: 'syz.0.762': attribute type 10 has an invalid length. [ 198.473194][ T9038] dummy0: entered promiscuous mode [ 198.502320][ T9038] dummy0: entered allmulticast mode [ 198.542291][ T9038] bridge0: port 3(dummy0) entered blocking state [ 198.550011][ T9038] bridge0: port 3(dummy0) entered disabled state [ 198.575057][ T9038] bridge0: port 3(dummy0) entered blocking state [ 198.581743][ T9038] bridge0: port 3(dummy0) entered forwarding state [ 199.666777][ T9086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.122556][ T9101] Bluetooth: MGMT ver 1.23 [ 200.497499][ T9120] __nla_validate_parse: 11 callbacks suppressed [ 200.497526][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'. [ 200.866109][ T9101] : entered promiscuous mode [ 200.879854][ T9133] FAULT_INJECTION: forcing a failure. [ 200.879854][ T9133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.920939][ T9138] netlink: 'syz.3.783': attribute type 1 has an invalid length. [ 200.941438][ T9133] CPU: 1 UID: 0 PID: 9133 Comm: syz.0.781 Not tainted syzkaller #0 PREEMPT(full) [ 200.941469][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.941482][ T9133] Call Trace: [ 200.941492][ T9133] [ 200.941502][ T9133] dump_stack_lvl+0xe8/0x150 [ 200.941536][ T9133] should_fail_ex+0x40c/0x560 [ 200.941591][ T9133] _copy_to_user+0x31/0xb0 [ 200.941620][ T9133] bpf_test_finish+0x53c/0x6b0 [ 200.941651][ T9133] ? trace_kmem_cache_alloc+0x29/0xe0 [ 200.941683][ T9133] ? __pfx_bpf_test_finish+0x10/0x10 [ 200.941719][ T9133] bpf_prog_test_run_skb+0x11fe/0x2230 [ 200.941765][ T9133] ? __fget_files+0x3a2/0x420 [ 200.941791][ T9133] ? __fget_files+0x2a/0x420 [ 200.941821][ T9133] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 200.941862][ T9133] bpf_prog_test_run+0x2c5/0x340 [ 200.941887][ T9133] __sys_bpf+0x643/0x950 [ 200.941921][ T9133] ? __pfx___sys_bpf+0x10/0x10 [ 200.941968][ T9133] ? ksys_write+0x242/0x270 [ 200.942002][ T9133] ? __pfx_ksys_write+0x10/0x10 [ 200.942038][ T9133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.942061][ T9133] __x64_sys_bpf+0x7c/0x90 [ 200.942091][ T9133] do_syscall_64+0x174/0x580 [ 200.942116][ T9133] ? trace_irq_disable+0x3b/0x140 [ 200.942148][ T9133] ? clear_bhb_loop+0x40/0x90 [ 200.942174][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.942202][ T9133] RIP: 0033:0x7f594299ce59 [ 200.942222][ T9133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.942251][ T9133] RSP: 002b:00007f59437b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 200.942273][ T9133] RAX: ffffffffffffffda RBX: 00007f5942c15fa0 RCX: 00007f594299ce59 [ 200.942288][ T9133] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 200.942301][ T9133] RBP: 00007f59437b0090 R08: 0000000000000000 R09: 0000000000000000 [ 200.942313][ T9133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.942324][ T9133] R13: 00007f5942c16038 R14: 00007f5942c15fa0 R15: 00007ffc63b38228 [ 200.942357][ T9133] [ 201.184414][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.783'. [ 201.204992][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.783'. [ 201.416695][ T9138] bond3: entered promiscuous mode [ 201.444575][ T9143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.495913][ T9138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.596955][ T9150] bond3: (slave bridge3): making interface the new active one [ 201.620429][ T9150] bridge3: entered promiscuous mode [ 201.638217][ T9150] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 202.021410][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 202.133279][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.661674][ T9206] netlink: 'syz.1.793': attribute type 10 has an invalid length. [ 202.801960][ T9206] team0: Device veth1_to_hsr is of different type [ 203.137309][ T9227] syzkaller0: entered promiscuous mode [ 203.157593][ T9227] syzkaller0: entered allmulticast mode [ 203.527715][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.800'. [ 203.993328][ T9260] syzkaller0: entered promiscuous mode [ 204.022228][ T9260] syzkaller0: entered allmulticast mode [ 204.337001][ T9268] netlink: 20 bytes leftover after parsing attributes in process `syz.4.811'. [ 204.459423][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 204.682749][ T9282] tipc: Enabling of bearer rejected, failed to enable media [ 204.697158][ T9256] netlink: 44 bytes leftover after parsing attributes in process `syz.1.808'. [ 204.856493][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.815'. [ 204.937873][ T9289] netlink: 'syz.0.816': attribute type 13 has an invalid length. [ 205.109394][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'. [ 205.351497][ T5867] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.842143][ T9309] wg0: entered allmulticast mode [ 205.903393][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'. [ 205.928147][ T5767] IPVS: starting estimator thread 0... [ 205.965496][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'. [ 206.030599][ T9321] IPVS: using max 25 ests per chain, 60000 per kthread [ 206.086509][ T9314] syzkaller0: entered promiscuous mode [ 206.094613][ T9314] syzkaller0: entered allmulticast mode [ 206.452584][ T5867] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.421536][ T9346] netlink: 32 bytes leftover after parsing attributes in process `syz.0.829'. [ 208.433590][ T9354] netlink: 64 bytes leftover after parsing attributes in process `syz.1.830'. [ 208.444447][ T9355] netlink: 64 bytes leftover after parsing attributes in process `syz.1.830'. [ 208.668282][ T9361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.833'. [ 208.707380][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 208.883942][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 208.890772][ T9373] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 209.067231][ T9373] bond5 (unregistering): Released all slaves [ 209.117028][ T9374] netlink: 'syz.0.836': attribute type 6 has an invalid length. [ 209.440928][ T9393] xt_hashlimit: size too large, truncated to 1048576 [ 209.652421][ T9402] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.841'. [ 209.693075][ T9402] netlink: Conntrack attr has 4 unknown bytes [ 210.459245][ T9431] bond3: option ad_user_port_key: invalid value (65535) [ 210.481921][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.853'. [ 210.495842][ T9431] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 210.511551][ T9431] bond3 (unregistering): Released all slaves [ 210.867973][ T9458] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 211.392019][ T9476] syz_tun: entered allmulticast mode [ 211.585379][ T9482] syzkaller0: entered promiscuous mode [ 211.656765][ T9482] syzkaller0: entered allmulticast mode [ 211.760947][ T9476] syz_tun: left allmulticast mode [ 211.926847][ T9503] IPVS: ip_vs_edit_dest(): server weight less than zero [ 211.946165][ T9506] IPVS: length: 118 != 24 [ 212.022972][ T9506] bond0: Error: Cannot enslave bond to itself. [ 212.049351][ T9510] __nla_validate_parse: 4 callbacks suppressed [ 212.049389][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'. [ 212.338903][ T9525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.115500][ T9555] netlink: 164 bytes leftover after parsing attributes in process `syz.3.877'. [ 213.148707][ T9553] syzkaller0: entered promiscuous mode [ 213.158945][ T9553] syzkaller0: entered allmulticast mode [ 213.325637][ T9562] nbd: must specify an index to disconnect [ 213.498029][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 213.766114][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'. [ 214.776243][ T9628] netlink: 40 bytes leftover after parsing attributes in process `syz.4.899'. [ 214.833526][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'. [ 215.112386][ T9636] syzkaller0: entered promiscuous mode [ 215.121315][ T9636] syzkaller0: entered allmulticast mode [ 215.151979][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 215.943686][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.905'. [ 216.768722][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 216.788599][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.909'. [ 217.236583][ T9703] IPVS: length: 101 != 8 [ 218.844489][ T9681] netlink: 'syz.2.908': attribute type 1 has an invalid length. [ 218.862076][ T9687] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 218.927010][ T9699] tipc: Enabling of bearer rejected, failed to enable media [ 218.969979][ T9719] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 219.013424][ T9731] __nla_validate_parse: 1 callbacks suppressed [ 219.013448][ T9731] netlink: 60 bytes leftover after parsing attributes in process `syz.4.915'. [ 219.371831][ T9746] sctp: [Deprecated]: syz.2.919 (pid 9746) Use of int in max_burst socket option. [ 219.371831][ T9746] Use struct sctp_assoc_value instead [ 219.443621][ T9746] netlink: 'syz.2.919': attribute type 7 has an invalid length. [ 219.486555][ T9751] pim6reg0: tun_chr_ioctl cmd 35111 [ 219.529677][ T9758] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 219.580495][ T9715] Bluetooth: hci3: command 0x0406 tx timeout [ 219.587453][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 219.596813][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 219.992141][ T9770] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 220.037499][ T9772] tipc: Enabled bearer , priority 10 [ 220.069541][ T9774] netlink: 72 bytes leftover after parsing attributes in process `syz.1.928'. [ 220.332276][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 220.358103][ T9790] bridge5: entered promiscuous mode [ 220.369216][ T9790] bridge5: entered allmulticast mode [ 220.438236][ T9789] syzkaller0: entered promiscuous mode [ 220.446285][ T9789] syzkaller0: entered allmulticast mode [ 220.703814][ T9801] sctp: [Deprecated]: syz.4.936 (pid 9801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.703814][ T9801] Use struct sctp_sack_info instead [ 221.122529][ T9815] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 222.073009][ T9849] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 222.092686][ T9845] team0: Port device xfrm0 removed [ 222.141403][ T9845] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 222.163686][ T1107] tipc: Resetting bearer [ 222.172095][ T9852] netlink: 'syz.1.946': attribute type 3 has an invalid length. [ 222.190058][ T9852] netlink: 132 bytes leftover after parsing attributes in process `syz.1.946'. [ 222.714816][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.951'. [ 223.276255][ T9895] syzkaller0: entered promiscuous mode [ 223.324982][ T9895] syzkaller0: entered allmulticast mode [ 223.358244][ T9896] netlink: 7 bytes leftover after parsing attributes in process `syz.4.952'. [ 223.418469][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.952'. [ 223.504743][ T9896] netlink: 44 bytes leftover after parsing attributes in process `syz.4.952'. [ 223.741983][ T9895] bond5: entered promiscuous mode [ 223.763301][ T9895] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.782668][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 223.791871][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 225.283145][ T9980] __nla_validate_parse: 1 callbacks suppressed [ 225.283449][ T9980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 227.400141][ T9984] syzkaller1: entered promiscuous mode [ 227.406976][ T9984] syzkaller1: entered allmulticast mode [ 227.682041][T10012] xt_bpf: check failed: parse error [ 227.805946][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 227.869021][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.981'. [ 227.906845][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.981'. [ 227.906845][T10019] bond6: Removing last ns target with arp_interval on [ 227.944763][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.982'. [ 227.999671][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 228.052223][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 228.116336][T10034] tipc: Enabled bearer , priority 0 [ 228.134319][T10036] xt_hashlimit: size too large, truncated to 1048576 [ 228.148074][T10034] syzkaller0: entered promiscuous mode [ 228.159849][T10036] xt_hashlimit: invalid interval [ 228.168573][T10034] syzkaller0: entered allmulticast mode [ 228.248177][T10034] syzkaller0: mtu less than device minimum [ 228.305739][T10024] tipc: Resetting bearer [ 228.368438][T10024] tipc: Disabling bearer [ 228.605253][T10054] syzkaller0: entered promiscuous mode [ 228.613794][T10054] syzkaller0: entered allmulticast mode [ 228.768814][T10061] netlink: 'syz.0.991': attribute type 13 has an invalid length. [ 228.781421][T10061] netlink: 'syz.0.991': attribute type 17 has an invalid length. [ 229.133774][T10082] netlink: 'syz.4.996': attribute type 16 has an invalid length. [ 229.161244][T10057] bridge0: port 3(dummy0) entered disabled state [ 229.168039][T10057] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.170565][T10082] netlink: 'syz.4.996': attribute type 17 has an invalid length. [ 229.183120][T10057] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.248349][T10057] bond_slave_0: left promiscuous mode [ 229.290782][T10057] bond_slave_1: left promiscuous mode [ 229.420314][T10057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.437522][T10057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.642235][T10057] bond0: left allmulticast mode [ 229.647625][T10057] bond_slave_0: left allmulticast mode [ 229.661854][T10057] bond_slave_1: left allmulticast mode [ 229.832716][T10061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.843496][T10061] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.855867][T10061] bridge0: port 3(dummy0) entered blocking state [ 229.864058][T10061] bridge0: port 3(dummy0) entered forwarding state [ 229.876790][T10061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.904596][T10061] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.911930][T10061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.932774][T10061] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.940099][T10061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.964289][T10061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.975811][T10061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.997081][T10061] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 230.006828][T10061] veth1_vlan: left promiscuous mode [ 230.014571][T10061] veth0_vlan: left promiscuous mode [ 230.022383][T10061] veth0_vlan: entered promiscuous mode [ 230.034034][T10061] veth1_vlan: entered promiscuous mode [ 230.047036][T10061] veth1_macvtap: left promiscuous mode [ 230.054549][T10061] veth0_macvtap: left promiscuous mode [ 230.063084][T10061] veth0_macvtap: entered promiscuous mode [ 230.084900][T10061] veth1_macvtap: entered promiscuous mode [ 230.103704][T10061] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.119457][T10061] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.136923][T10061] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.177774][T10061] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.260023][T10061] ip6gre1: left promiscuous mode [ 230.265151][T10061] ip6gre1: left allmulticast mode [ 230.299378][T10061] bond0: entered allmulticast mode [ 230.304657][T10061] bond_slave_0: entered allmulticast mode [ 230.310698][T10061] bond_slave_1: entered allmulticast mode [ 230.316516][T10061] bond_slave_0: entered promiscuous mode [ 230.324339][T10061] bond_slave_1: entered promiscuous mode [ 230.331304][T10061] macsec1: left allmulticast mode [ 230.336436][T10061] bond0: left allmulticast mode [ 230.341435][T10061] bond_slave_0: left allmulticast mode [ 230.346946][T10061] bond_slave_1: left allmulticast mode [ 230.353966][T10061] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 230.362559][T10061] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 230.372758][T10061] bond1: left promiscuous mode [ 230.377575][T10061] bridge1: left promiscuous mode [ 230.385935][T10061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.401014][T10061] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.409158][T10061] vlan2: left promiscuous mode [ 230.447154][T10065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.994'. [ 230.562905][T10082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.573371][T10082] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.584916][T10082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.632138][T10082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.645506][T10082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.667567][T10082] veth1_vlan: left promiscuous mode [ 230.676859][T10082] veth0_vlan: left promiscuous mode [ 230.684310][T10082] veth0_vlan: entered promiscuous mode [ 230.697330][T10082] veth1_vlan: entered promiscuous mode [ 230.709330][T10082] veth1_macvtap: left promiscuous mode [ 230.716935][T10082] veth0_macvtap: left promiscuous mode [ 230.725652][T10082] veth0_macvtap: entered promiscuous mode [ 230.733789][T10082] veth1_macvtap: entered promiscuous mode [ 230.745253][T10082] geneve1: left promiscuous mode [ 230.758264][T10082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.767304][T10082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.778591][T10082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.789957][T10082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.811673][T10082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.825806][T10082] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.843636][T10082] bridge3: left promiscuous mode [ 230.848853][T10082] bridge3: left allmulticast mode [ 230.859231][T10082] bond4: left promiscuous mode [ 230.864808][T10082] bridge4: left promiscuous mode [ 230.875291][T10082] sit1: left allmulticast mode [ 230.881230][T10082] bridge5: left promiscuous mode [ 230.886256][T10082] bridge5: left allmulticast mode [ 230.895768][T10082] bond5: left promiscuous mode [ 230.904196][T10082] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.059812][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.067118][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.173087][ T7645] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 231.218944][ T7645] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 231.229390][ T6789] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 231.395690][T10113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.417338][ T1180] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 231.512316][ T3267] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.749281][T10122] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.927942][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1009'. [ 234.059099][T10099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.518053][T10165] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 234.819802][T10179] syzkaller0: entered promiscuous mode [ 234.852376][T10179] syzkaller0: entered allmulticast mode [ 234.893626][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1018'. [ 235.015923][T10183] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1018'. [ 235.325495][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 235.335044][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.382739][T10203] dvmrp0: entered allmulticast mode [ 235.499789][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'. [ 235.517381][T10214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1029'. [ 235.538232][T10216] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1030'. [ 235.556603][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'. [ 235.590626][T10214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1029'. [ 235.813391][T10222] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1034'. [ 236.092655][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 236.107677][T10235] openvswitch: netlink: Invalid VLAN frame [ 236.225018][T10243] netlink: 'syz.1.1039': attribute type 1 has an invalid length. [ 236.237954][T10243] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1039'. [ 236.455771][T10230] syzkaller1: entered promiscuous mode [ 236.465339][T10230] syzkaller1: entered allmulticast mode [ 236.588239][T10252] syzkaller0: entered promiscuous mode [ 236.596055][T10252] syzkaller0: entered allmulticast mode [ 236.677785][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 236.762095][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 236.952349][T10266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.003334][T10268] netlink: 'syz.1.1044': attribute type 19 has an invalid length. [ 237.572802][T10290] syzkaller1: entered promiscuous mode [ 237.594735][T10290] syzkaller1: entered allmulticast mode [ 237.716246][T10291] xt_hashlimit: size too large, truncated to 1048576 [ 238.124616][T10305] netlink: 'syz.0.1058': attribute type 1 has an invalid length. [ 238.217237][T10305] 8021q: adding VLAN 0 to HW filter on device bond3 [ 238.385129][T10313] netlink: 'syz.0.1058': attribute type 10 has an invalid length. [ 238.481430][T10305] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 238.550307][T10311] bridge0: port 3(dummy0) entered disabled state [ 238.593169][T10311] dummy0: left allmulticast mode [ 238.618514][T10311] dummy0: left promiscuous mode [ 238.639737][T10311] bridge0: port 3(dummy0) entered disabled state [ 238.709263][T10311] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 238.723314][T10313] dummy0: entered promiscuous mode [ 238.737567][T10313] bond3: (slave dummy0): Releasing backup interface [ 239.252888][T10346] syzkaller1: entered promiscuous mode [ 239.258505][T10346] syzkaller1: entered allmulticast mode [ 239.305608][T10346] xt_l2tp: missing protocol rule (udp|l2tpip) [ 240.247079][T10392] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.302101][T10392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.009379][T10392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.022773][T10392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.058837][T10392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.086536][T10392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.099001][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 243.138178][T10392] veth1_vlan: left promiscuous mode [ 243.165985][T10392] veth0_vlan: left promiscuous mode [ 243.185833][T10392] veth0_vlan: entered promiscuous mode [ 243.197630][T10392] veth1_vlan: entered promiscuous mode [ 243.208493][T10392] veth1_macvtap: left promiscuous mode [ 243.216628][T10392] veth0_macvtap: left promiscuous mode [ 243.223959][T10392] veth0_macvtap: entered promiscuous mode [ 243.231717][T10392] veth1_macvtap: entered promiscuous mode [ 243.244903][T10412] __nla_validate_parse: 12 callbacks suppressed [ 243.244919][T10412] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1087'. [ 243.263252][T10392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 243.278889][T10392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 243.289289][T10392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 243.311532][T10392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.321478][T10392] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 243.362017][T10400] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 243.369906][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.385578][ T3267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.401582][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.408795][ T3267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.511246][ T80] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.532137][ T80] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.553524][ T80] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.684157][T10426] syzkaller1: entered promiscuous mode [ 243.709142][T10426] syzkaller1: entered allmulticast mode [ 243.739885][T10423] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 243.755794][T10424] xt_l2tp: missing protocol rule (udp|l2tpip) [ 243.765768][T10423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.900742][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1090'. [ 243.915148][T10414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.927197][T10414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 243.939251][T10414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.019052][T10434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.115985][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1093'. [ 244.137505][T10435] gretap3: entered allmulticast mode [ 244.332827][T10414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.345481][T10414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 244.357702][T10414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.383691][T10454] openvswitch: netlink: IPv4 tun info is not correct [ 244.404294][T10450] netlink: 'syz.4.1095': attribute type 1 has an invalid length. [ 247.644896][T10414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.677753][T10414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 247.706026][T10414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.774902][T10467] netlink: 'syz.4.1098': attribute type 1 has an invalid length. [ 247.806017][T10467] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1098'. [ 247.823011][T10467] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 247.958240][T10414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.968678][T10414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 247.982377][T10414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.039960][T10485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.079103][T10485] netlink: 'syz.1.1102': attribute type 21 has an invalid length. [ 248.384770][ T7645] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.399931][ T7645] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 248.409157][ T7645] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.498909][ T1180] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.510708][ T1180] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 248.519454][ T1180] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.586624][ T1180] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.596338][ T1180] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 248.617707][ T1180] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.683994][ T1180] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.714976][ T1180] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 248.752766][ T1180] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.921818][T10503] sctp: [Deprecated]: syz.0.1108 (pid 10503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.921818][T10503] Use struct sctp_sack_info instead [ 249.743653][T10530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1114'. [ 250.744158][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 250.973920][T10570] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.1124'. [ 250.983737][T10570] openvswitch: netlink: Message has 8 unknown bytes. [ 251.197780][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'. [ 251.224483][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1127'. [ 251.250117][T10583] netlink: 'syz.0.1127': attribute type 18 has an invalid length. [ 251.536360][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1130'. [ 251.602647][T10598] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.713337][T10564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.017897][T10610] netlink: 'syz.3.1132': attribute type 1 has an invalid length. [ 252.055147][T10612] netlink: 'syz.4.1131': attribute type 23 has an invalid length. [ 252.621395][ T1180] wlan0: Trigger new scan to find an IBSS to join [ 254.342418][T10610] 8021q: adding VLAN 0 to HW filter on device bond6 [ 254.686440][T10637] syzkaller0: entered promiscuous mode [ 254.705776][T10637] syzkaller0: entered allmulticast mode [ 254.825008][T10652] tipc: Started in network mode [ 254.832926][T10652] tipc: Node identity ac14140f, cluster identity 4711 [ 254.841215][T10652] tipc: Enabling of bearer rejected, failed to enable media [ 254.987603][T10655] netlink: 'syz.3.1141': attribute type 1 has an invalid length. [ 255.016519][T10655] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1141'. [ 255.039050][T10655] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 255.513022][T10682] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 255.554601][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1149'. [ 255.638063][T10649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.658291][T10682] netlink: 'syz.0.1149': attribute type 3 has an invalid length. [ 255.682942][T10682] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1149'. [ 255.730935][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1149'. [ 255.897817][T10690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1151'. [ 255.933486][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1151'. [ 255.957019][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1151'. [ 256.072568][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 256.223963][T10700] syzkaller0: entered promiscuous mode [ 256.238602][T10700] syzkaller0: entered allmulticast mode [ 256.620469][ T80] wlan0: Trigger new scan to find an IBSS to join [ 256.628835][T10714] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1158'. [ 256.679449][T10719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1160'. [ 256.695732][T10716] syzkaller1: entered promiscuous mode [ 256.702535][T10716] syzkaller1: entered allmulticast mode [ 256.995805][T10732] Cannot find del_set index 1 as target [ 257.584202][ T7645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.606030][T10756] syzkaller0: entered promiscuous mode [ 257.621060][T10756] syzkaller0: entered allmulticast mode [ 257.788205][T10772] netlink: 'syz.3.1174': attribute type 11 has an invalid length. [ 258.059102][T10782] netlink: 'syz.0.1177': attribute type 2 has an invalid length. [ 258.453644][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.966614][T10864] netlink: 'syz.3.1199': attribute type 3 has an invalid length. [ 260.043689][T10866] __nla_validate_parse: 7 callbacks suppressed [ 260.043715][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 260.046651][T10864] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1199'. [ 260.088122][T10869] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1201'. [ 260.170647][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 260.236712][T10864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1199'. [ 261.019112][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'. [ 261.667257][T10927] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1212'. [ 261.722013][T10927] netlink: 'syz.3.1212': attribute type 1 has an invalid length. [ 261.758784][T10927] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1212'. [ 261.980082][T10944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1216'. [ 262.053978][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1217'. [ 262.088515][T10943] syzkaller0: entered promiscuous mode [ 262.118630][T10943] syzkaller0: entered allmulticast mode [ 262.835626][T10958] tipc: Resetting bearer [ 263.293077][T10976] netlink: 'syz.2.1222': attribute type 4 has an invalid length. [ 264.393716][ T7645] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.430566][ T7645] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.441735][ T7645] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 55004 - 0 [ 264.466735][ T7645] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.490881][ T7645] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.506229][ T7645] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 55004 - 0 [ 264.598907][ T7645] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.635282][ T7645] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.664490][ T7645] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 55004 - 0 [ 264.688226][ T7645] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.698398][ T7645] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.723661][ T7645] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 55004 - 0 [ 265.008598][T11013] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 265.031415][T11008] syzkaller0: entered promiscuous mode [ 265.053249][T11008] syzkaller0: entered allmulticast mode [ 265.067354][T11013] __nla_validate_parse: 2 callbacks suppressed [ 265.067375][T11013] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1233'. [ 265.132227][T11013] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1233'. [ 265.164581][T11013] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 265.388415][T11018] syzkaller0: entered promiscuous mode [ 265.414453][T11018] syzkaller0: entered allmulticast mode [ 265.662719][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1237'. [ 265.715005][T11034] netlink: 'syz.1.1238': attribute type 1 has an invalid length. [ 265.764101][T11034] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 265.772751][T11042] xt_hashlimit: size too large, truncated to 1048576 [ 265.796553][T11041] xt_hashlimit: size too large, truncated to 1048576 [ 265.990587][T11052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1242'. [ 266.348224][T11062] bridge_slave_1: invalid flags given to default FDB implementation [ 266.465184][T11071] syzkaller0: entered promiscuous mode [ 266.493866][T11071] syzkaller0: entered allmulticast mode [ 266.702513][T11079] netlink: zone id is out of range [ 266.716778][T11079] netlink: zone id is out of range [ 266.733283][T11079] netlink: zone id is out of range [ 266.738689][T11079] netlink: zone id is out of range [ 266.745982][T11079] netlink: zone id is out of range [ 266.752236][T11079] netlink: zone id is out of range [ 266.759024][T11080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1248'. [ 266.779672][T11079] netlink: zone id is out of range [ 266.793957][T11079] netlink: zone id is out of range [ 266.799980][T11079] netlink: zone id is out of range [ 266.807089][T11079] netlink: zone id is out of range [ 267.131097][T11102] netlink: 'syz.4.1253': attribute type 1 has an invalid length. [ 267.154977][T11102] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1253'. [ 267.198105][ T5738] IPVS: starting estimator thread 0... [ 267.264468][T11108] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1254'. [ 267.287442][T11111] netlink: 'syz.0.1256': attribute type 13 has an invalid length. [ 267.293844][T11108] unsupported nlmsg_type 40 [ 267.344573][T11107] IPVS: using max 29 ests per chain, 69600 per kthread [ 267.391256][T11118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1257'. [ 267.560988][T11125] netlink: 'syz.1.1260': attribute type 1 has an invalid length. [ 267.569002][T11124] netlink: 'syz.1.1260': attribute type 1 has an invalid length. [ 267.616974][T11125] bond3: entered promiscuous mode [ 267.622769][T11125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.727105][T11133] xt_l2tp: missing protocol rule (udp|l2tpip) [ 267.755713][T11128] bond3: (slave bridge4): making interface the new active one [ 267.763987][T11128] bridge4: entered promiscuous mode [ 267.771212][T11128] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 267.792457][T11127] syzkaller1: entered promiscuous mode [ 267.801848][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 267.817678][T11127] syzkaller1: entered allmulticast mode [ 267.827298][T11132] tipc: Started in network mode [ 267.834373][T11132] tipc: Node identity ac1414aa, cluster identity 4711 [ 267.842388][T11132] tipc: Enabled bearer , priority 10 [ 267.938778][T11140] syzkaller0: entered promiscuous mode [ 267.944789][T11140] syzkaller0: entered allmulticast mode [ 267.957830][T11142] pim6reg: entered allmulticast mode [ 268.096782][T11145] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1267'. [ 268.124457][T11145] 0ªX¹¦À: renamed from batadv0 (while UP) [ 268.157898][T11145] 0ªX¹¦À: entered allmulticast mode [ 268.312714][T11147] bond7: option broadcast_neighbor: invalid value (30) [ 268.363802][T11147] bond7 (unregistering): Released all slaves [ 268.477896][T11169] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 268.709981][T11181] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 269.122621][T11203] xt_l2tp: missing protocol rule (udp|l2tpip) [ 269.168782][ T5738] tipc: Node number set to 2886997162 [ 269.317529][T11201] syzkaller1: entered promiscuous mode [ 269.337006][T11201] syzkaller1: entered allmulticast mode [ 269.450074][T11215] netlink: 'syz.3.1281': attribute type 11 has an invalid length. [ 269.544690][T11220] syzkaller0: entered promiscuous mode [ 269.584691][T11220] syzkaller0: entered allmulticast mode [ 270.105482][T11234] __nla_validate_parse: 4 callbacks suppressed [ 270.105508][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1286'. [ 270.259879][T11246] netlink: 'syz.3.1288': attribute type 13 has an invalid length. [ 270.305880][T11246] netlink: 'syz.3.1288': attribute type 17 has an invalid length. [ 270.510856][T11261] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1290'. [ 270.534256][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1288'. [ 270.560962][T11259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1290'. [ 270.673075][T11240] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 270.681200][T11240] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.688917][T11240] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.966364][T11273] xt_l2tp: missing protocol rule (udp|l2tpip) [ 273.725554][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'. [ 273.762120][T11240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.775385][T11240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.207235][T11246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.216211][T11246] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.237111][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1294'. [ 274.245085][T11246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.271425][T11246] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.278633][T11246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.289963][T11246] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.299139][T11246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.320722][T11246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.331182][T11246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.346224][T11246] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 274.353468][T11246] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 274.362815][T11246] veth1_vlan: left promiscuous mode [ 274.369417][T11246] veth0_vlan: left promiscuous mode [ 274.377357][T11246] veth0_vlan: entered promiscuous mode [ 274.387796][T11246] veth1_vlan: entered promiscuous mode [ 274.401165][T11246] veth1_macvtap: left promiscuous mode [ 274.407684][T11246] veth0_macvtap: left promiscuous mode [ 274.416338][T11246] veth0_macvtap: entered promiscuous mode [ 274.497103][T11246] veth1_macvtap: entered promiscuous mode [ 274.513203][T11246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 274.563703][T11246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 274.603850][T11246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 274.648603][T11246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 274.700637][T11246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.709147][T11246] vlan2: left allmulticast mode [ 274.714135][T11246] bond1: left allmulticast mode [ 274.719014][T11246] bridge2: left allmulticast mode [ 274.729592][T11246] ipip1: left promiscuous mode [ 274.736299][T11246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 274.746857][T11246] bond3: left promiscuous mode [ 274.752209][T11246] bridge3: left promiscuous mode [ 274.758361][T11246] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.771432][T11246] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.782432][T11246] 8021q: adding VLAN 0 to HW filter on device bond5 [ 274.794893][T11246] 8021q: adding VLAN 0 to HW filter on device bond6 [ 274.811851][T11261] ip6gre2: entered promiscuous mode [ 274.817117][T11261] ip6gre2: entered allmulticast mode [ 274.969234][T11270] syzkaller1: entered promiscuous mode [ 274.975803][T11270] syzkaller1: entered allmulticast mode [ 274.997534][T11275] vlan3: entered promiscuous mode [ 275.002923][T11275] syz_tun: entered promiscuous mode [ 275.126628][T11296] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1297'. [ 275.149030][T11296] net_ratelimit: 393 callbacks suppressed [ 275.149101][T11296] openvswitch: netlink: Key type 769 is out of range max 32 [ 275.247480][T11289] syzkaller0: entered promiscuous mode [ 275.261700][T11289] syzkaller0: entered allmulticast mode [ 275.820272][T11328] netlink: 'syz.3.1302': attribute type 11 has an invalid length. [ 276.102574][T11341] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 279.121029][T11347] syzkaller0: entered promiscuous mode [ 279.126703][T11347] syzkaller0: entered allmulticast mode [ 279.167417][ T5738] IPVS: starting estimator thread 0... [ 279.270524][T11371] IPVS: using max 28 ests per chain, 67200 per kthread [ 279.496553][T11372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1308'. [ 281.855042][T11387] syzkaller1: entered promiscuous mode [ 281.905958][T11387] syzkaller1: entered allmulticast mode [ 281.954545][T11388] xt_l2tp: missing protocol rule (udp|l2tpip) [ 282.014368][T11396] netlink: 'syz.2.1313': attribute type 3 has an invalid length. [ 282.098516][T11401] syzkaller0: entered promiscuous mode [ 282.113403][T11401] syzkaller0: entered allmulticast mode [ 282.535960][T11415] netlink: 'syz.2.1315': attribute type 1 has an invalid length. [ 283.063660][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1320'. [ 285.744032][T11415] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 285.869437][T11456] Set syz1 is full, maxelem 2 reached [ 286.106710][T11462] bond7: entered promiscuous mode [ 286.515664][T11497] syzkaller1: entered promiscuous mode [ 286.538146][T11497] syzkaller1: entered allmulticast mode [ 286.549474][T11497] xt_l2tp: missing protocol rule (udp|l2tpip) [ 286.558093][T11500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1330'. [ 286.655605][T11483] netlink: 'syz.1.1327': attribute type 2 has an invalid length. [ 286.680786][T11483] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1327'. [ 287.179216][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1332'. [ 287.906042][T11538] lo: entered allmulticast mode [ 287.914133][T11538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.532628][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 288.866375][T11456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.076656][T11552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.225570][T11564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1345'. [ 289.283119][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 289.462562][T11564] ÿÿ: renamed from ip_vti0 (while UP) [ 289.540198][T11564] ÿÿ: entered promiscuous mode [ 289.598260][T11564] ÿÿ: entered allmulticast mode [ 289.634323][T11564] A link change request failed with some changes committed already. Interface ÿÿ may have been left with an inconsistent configuration, please check. [ 289.814037][ T1180] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 290.199503][T11606] syzkaller1: entered promiscuous mode [ 290.218953][T11606] syzkaller1: entered allmulticast mode [ 290.235044][T11593] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1351'. [ 290.252767][T11606] xt_l2tp: missing protocol rule (udp|l2tpip) [ 290.306032][T11613] netlink: 'syz.3.1359': attribute type 1 has an invalid length. [ 290.428012][T11613] bond8: entered promiscuous mode [ 290.470046][T11613] bond8: entered allmulticast mode [ 290.485855][T11613] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.508616][T11617] erspan1: entered allmulticast mode [ 290.594658][T11617] bond8: (slave erspan1): making interface the new active one [ 290.631746][T11617] erspan1: entered promiscuous mode [ 290.685862][T11617] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 290.859962][T11613] syz.3.1359 (11613) used obsolete PPPIOCDETACH ioctl [ 290.895745][T11632] netlink: 'syz.0.1361': attribute type 1 has an invalid length. [ 290.914151][T11632] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1361'. [ 290.944338][T11632] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 291.231854][T11644] vlan2: entered promiscuous mode [ 291.248754][T11644] bridge0: entered promiscuous mode [ 291.285922][T11650] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1366'. [ 291.371318][T11648] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 291.404918][T11648] bond4 (unregistering): Released all slaves [ 291.446472][T11659] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1367'. [ 291.704723][T11665] syzkaller1: entered promiscuous mode [ 291.714761][T11665] syzkaller1: entered allmulticast mode [ 291.724447][T11665] xt_l2tp: missing protocol rule (udp|l2tpip) [ 292.627788][T11714] netlink: 'syz.2.1380': attribute type 1 has an invalid length. [ 292.651503][T11714] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1380'. [ 292.683896][T11714] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 292.724096][T11720] netlink: 'syz.3.1384': attribute type 1 has an invalid length. [ 292.772041][T11720] 8021q: adding VLAN 0 to HW filter on device bond9 [ 292.930823][T11735] netlink: 'syz.3.1384': attribute type 10 has an invalid length. [ 292.941820][T11735] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1384'. [ 293.003468][T11720] bond9: (slave veth3): Enslaving as an active interface with a down link [ 293.078300][T11729] dummy0: left promiscuous mode [ 293.089440][T11729] team0: Port device dummy0 removed [ 293.119159][T11729] bond9: (slave dummy0): making interface the new active one [ 293.137153][T11729] dummy0: entered promiscuous mode [ 293.144363][T11729] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 293.176977][T11735] bond9: (slave dummy0): Releasing active interface [ 293.264907][T11742] xt_l2tp: missing protocol rule (udp|l2tpip) [ 293.417955][T11746] syzkaller1: entered promiscuous mode [ 293.428529][T11746] syzkaller1: entered allmulticast mode [ 293.452672][T11752] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1390'. [ 293.470029][T11754] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1391'. [ 293.573766][T11752] netlink: 'syz.2.1390': attribute type 7 has an invalid length. [ 293.623510][T11752] : entered promiscuous mode [ 293.921731][T11771] 8021q: VLANs not supported on wg1 [ 294.024971][T11781] netlink: 'syz.3.1396': attribute type 1 has an invalid length. [ 294.048530][T11781] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 294.476624][T11799] __nla_validate_parse: 10 callbacks suppressed [ 294.476652][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1401'. [ 294.493933][T11802] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 294.516726][T11802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.577556][T11805] syzkaller1: entered promiscuous mode [ 294.600198][T11805] syzkaller1: entered allmulticast mode [ 294.643690][T11805] xt_l2tp: missing protocol rule (udp|l2tpip) [ 294.693935][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 294.776690][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 294.802356][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 294.846820][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 294.872323][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 294.889631][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 294.917445][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 294.949375][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 294.978488][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 295.346790][T11827] syzkaller0: entered promiscuous mode [ 295.368202][T11827] syzkaller0: entered allmulticast mode [ 295.714769][T11852] netlink: 'syz.3.1414': attribute type 5 has an invalid length. [ 295.777272][T11854] netlink: 'syz.0.1413': attribute type 1 has an invalid length. [ 295.816614][T11854] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 295.870140][T11864] Cannot find map_set index 17 as target [ 296.152234][T11876] BUG: Bad page state in process syz.3.1418 pfn:900b2 [ 296.159350][T11876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x900b2 [ 296.169627][T11876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 296.176830][T11876] raw: 00fff00000000000 dead000000000040 ffff88801af17000 0000000000000000 [ 296.185513][T11876] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 296.194163][T11876] page dumped because: page_pool leak [ 296.199628][T11876] page_owner tracks the page as allocated [ 296.205501][T11876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11876, tgid 11875 (syz.3.1418), ts 296152110734, free_ts 295621761818 [ 296.222795][T11876] post_alloc_hook+0x22d/0x280 [ 296.227815][T11876] get_page_from_freelist+0x24ae/0x2530 [ 296.233485][T11876] __alloc_frozen_pages_noprof+0x18d/0x380 [ 296.239380][T11876] __alloc_pages_noprof+0x10/0x100 [ 296.244590][T11876] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 296.250129][T11876] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 296.256462][T11876] skb_pp_cow_data+0xcd0/0x19a0 [ 296.261472][T11876] do_xdp_generic+0x770/0x12d0 [ 296.266306][T11876] tun_get_user+0x24a0/0x4350 [ 296.271188][T11876] tun_chr_write_iter+0x113/0x200 [ 296.276285][T11876] vfs_write+0x612/0xba0 [ 296.280686][T11876] ksys_write+0x150/0x270 [ 296.285090][T11876] do_syscall_64+0x174/0x580 [ 296.289875][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.295912][T11876] page last free pid 15 tgid 15 stack trace: [ 296.301961][T11876] __free_frozen_pages+0xc0d/0xd20 [ 296.307129][T11876] tlb_remove_table_rcu+0x85/0x100 [ 296.312380][T11876] rcu_core+0x78b/0x10a0 [ 296.316761][T11876] handle_softirqs+0x225/0x840 [ 296.321654][T11876] run_ksoftirqd+0x36/0x60 [ 296.326126][T11876] smpboot_thread_fn+0x57c/0xa80 [ 296.331181][T11876] kthread+0x389/0x470 [ 296.335308][T11876] ret_from_fork+0x514/0xb70 [ 296.340014][T11876] ret_from_fork_asm+0x1a/0x30 [ 296.344927][T11876] Modules linked in: [ 296.349014][T11876] CPU: 0 UID: 0 PID: 11876 Comm: syz.3.1418 Not tainted syzkaller #0 PREEMPT(full) [ 296.349045][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.349123][T11876] Call Trace: [ 296.349158][T11876] [ 296.349213][T11876] dump_stack_lvl+0xe8/0x150 [ 296.349266][T11876] bad_page+0x17f/0x1c0 [ 296.349298][T11876] __free_frozen_pages+0xcca/0xd20 [ 296.349341][T11876] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 296.349398][T11876] bpf_xdp_adjust_tail+0x1ce/0x210 [ 296.349432][T11876] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 296.349490][T11876] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 296.349549][T11876] do_xdp_generic+0xac2/0x12d0 [ 296.349578][T11876] ? __lock_acquire+0x683/0x2cd0 [ 296.349650][T11876] ? do_xdp_generic+0x6ba/0x12d0 [ 296.349686][T11876] ? __pfx_do_xdp_generic+0x10/0x10 [ 296.349742][T11876] ? tun_get_user+0x2373/0x4350 [ 296.349793][T11876] ? tun_get_user+0x2373/0x4350 [ 296.349815][T11876] tun_get_user+0x24a0/0x4350 [ 296.349886][T11876] ? aa_file_perm+0x18b/0x15f0 [ 296.349980][T11876] ? aa_file_perm+0x4ed/0x15f0 [ 296.350001][T11876] ? __pfx_tun_get_user+0x10/0x10 [ 296.350027][T11876] ? __lock_acquire+0x683/0x2cd0 [ 296.350058][T11876] ? preempt_schedule_thunk+0x16/0x30 [ 296.350097][T11876] ? ref_tracker_alloc+0x341/0x4b0 [ 296.350176][T11876] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 296.350201][T11876] ? tun_get+0x1c/0x2f0 [ 296.350221][T11876] ? tun_get+0x1c/0x2f0 [ 296.350248][T11876] ? tun_get+0x1c/0x2f0 [ 296.350267][T11876] ? tun_get+0x1c/0x2f0 [ 296.350292][T11876] tun_chr_write_iter+0x113/0x200 [ 296.350334][T11876] vfs_write+0x612/0xba0 [ 296.350380][T11876] ? __pfx_vfs_write+0x10/0x10 [ 296.350424][T11876] ? __fget_files+0x2a/0x420 [ 296.350483][T11876] ksys_write+0x150/0x270 [ 296.350519][T11876] ? __pfx_ksys_write+0x10/0x10 [ 296.350558][T11876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.350613][T11876] do_syscall_64+0x174/0x580 [ 296.350644][T11876] ? clear_bhb_loop+0x40/0x90 [ 296.350692][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.350716][T11876] RIP: 0033:0x7f67df55d68e [ 296.350738][T11876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 296.350760][T11876] RSP: 002b:00007f67e046afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.350808][T11876] RAX: ffffffffffffffda RBX: 00007f67e046b6c0 RCX: 00007f67df55d68e [ 296.350826][T11876] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 296.350841][T11876] RBP: 00007f67df632d6f R08: 0000000000000000 R09: 0000000000000000 [ 296.350855][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.350869][T11876] R13: 00007f67df816038 R14: 00007f67df815fa0 R15: 00007fff14f602d8 [ 296.350906][T11876] [ 296.623958][T11876] Disabling lock debugging due to kernel taint [ 296.630291][T11876] BUG: Bad page state in process syz.3.1418 pfn:57c60 [ 296.637231][T11876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057c60000 pfn:0x57c60 [ 296.647404][T11876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 296.654603][T11876] raw: 00fff00000000000 dead000000000040 ffff88801af17000 0000000000000000 [ 296.663248][T11876] raw: ffff888057c60000 0000000000000001 00000000ffffffff 0000000000000000 [ 296.671889][T11876] page dumped because: page_pool leak [ 296.677284][T11876] page_owner tracks the page as allocated [ 296.683064][T11876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11876, tgid 11875 (syz.3.1418), ts 296152093087, free_ts 295641702400 [ 296.700341][T11876] post_alloc_hook+0x22d/0x280 [ 296.705173][T11876] get_page_from_freelist+0x24ae/0x2530 [ 296.710822][T11876] __alloc_frozen_pages_noprof+0x18d/0x380 [ 296.716684][T11876] __alloc_pages_noprof+0x10/0x100 [ 296.721902][T11876] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 296.727414][T11876] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 296.733554][T11876] skb_pp_cow_data+0xcd0/0x19a0 [ 296.738465][T11876] do_xdp_generic+0x770/0x12d0 [ 296.743305][T11876] tun_get_user+0x24a0/0x4350 [ 296.748036][T11876] tun_chr_write_iter+0x113/0x200 [ 296.753147][T11876] vfs_write+0x612/0xba0 [ 296.757444][T11876] ksys_write+0x150/0x270 [ 296.761852][T11876] do_syscall_64+0x174/0x580 [ 296.766487][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.772448][T11876] page last free pid 10985 tgid 10985 stack trace: [ 296.778984][T11876] __free_frozen_pages+0xc0d/0xd20 [ 296.784164][T11876] vfree+0x1fd/0x330 [ 296.788101][T11876] delayed_vfree_work+0x55/0x80 [ 296.793032][T11876] process_scheduled_works+0xa8e/0x14e0 [ 296.798620][T11876] worker_thread+0xa47/0xfb0 [ 296.803273][T11876] kthread+0x389/0x470 [ 296.807383][T11876] ret_from_fork+0x514/0xb70 [ 296.812040][T11876] ret_from_fork_asm+0x1a/0x30 [ 296.816855][T11876] Modules linked in: [ 296.820860][T11876] CPU: 0 UID: 0 PID: 11876 Comm: syz.3.1418 Tainted: G B syzkaller #0 PREEMPT(full) [ 296.820910][T11876] Tainted: [B]=BAD_PAGE [ 296.820916][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.820929][T11876] Call Trace: [ 296.820938][T11876] [ 296.820947][T11876] dump_stack_lvl+0xe8/0x150 [ 296.820974][T11876] bad_page+0x17f/0x1c0 [ 296.821002][T11876] __free_frozen_pages+0xcca/0xd20 [ 296.821035][T11876] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 296.821073][T11876] bpf_xdp_adjust_tail+0x1ce/0x210 [ 296.821097][T11876] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 296.821116][T11876] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 296.821157][T11876] do_xdp_generic+0xac2/0x12d0 [ 296.821182][T11876] ? __lock_acquire+0x683/0x2cd0 [ 296.821208][T11876] ? do_xdp_generic+0x6ba/0x12d0 [ 296.821237][T11876] ? __pfx_do_xdp_generic+0x10/0x10 [ 296.821270][T11876] ? tun_get_user+0x2373/0x4350 [ 296.821301][T11876] ? tun_get_user+0x2373/0x4350 [ 296.821321][T11876] tun_get_user+0x24a0/0x4350 [ 296.821352][T11876] ? aa_file_perm+0x18b/0x15f0 [ 296.821374][T11876] ? aa_file_perm+0x4ed/0x15f0 [ 296.821393][T11876] ? __pfx_tun_get_user+0x10/0x10 [ 296.821414][T11876] ? __lock_acquire+0x683/0x2cd0 [ 296.821438][T11876] ? preempt_schedule_thunk+0x16/0x30 [ 296.821471][T11876] ? ref_tracker_alloc+0x341/0x4b0 [ 296.821496][T11876] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 296.821518][T11876] ? tun_get+0x1c/0x2f0 [ 296.821536][T11876] ? tun_get+0x1c/0x2f0 [ 296.821555][T11876] ? tun_get+0x1c/0x2f0 [ 296.821572][T11876] ? tun_get+0x1c/0x2f0 [ 296.821592][T11876] tun_chr_write_iter+0x113/0x200 [ 296.821626][T11876] vfs_write+0x612/0xba0 [ 296.821662][T11876] ? __pfx_vfs_write+0x10/0x10 [ 296.821698][T11876] ? __fget_files+0x2a/0x420 [ 296.821729][T11876] ksys_write+0x150/0x270 [ 296.821773][T11876] ? __pfx_ksys_write+0x10/0x10 [ 296.821809][T11876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.821832][T11876] do_syscall_64+0x174/0x580 [ 296.821877][T11876] ? clear_bhb_loop+0x40/0x90 [ 296.821903][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.821926][T11876] RIP: 0033:0x7f67df55d68e [ 296.821946][T11876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 296.821971][T11876] RSP: 002b:00007f67e046afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.821995][T11876] RAX: ffffffffffffffda RBX: 00007f67e046b6c0 RCX: 00007f67df55d68e [ 296.822011][T11876] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 296.822025][T11876] RBP: 00007f67df632d6f R08: 0000000000000000 R09: 0000000000000000 [ 296.822039][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.822054][T11876] R13: 00007f67df816038 R14: 00007f67df815fa0 R15: 00007fff14f602d8 [ 296.822095][T11876] [ 296.822108][T11876] BUG: Bad page state in process syz.3.1418 pfn:57c61 [ 296.973929][T11886] syzkaller1: entered promiscuous mode [ 296.976245][T11876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x57c61 [ 296.976275][T11876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 297.065669][T11886] syzkaller1: entered allmulticast mode [ 297.066339][T11876] raw: 00fff00000000000 dead000000000040 ffff88801af17000 0000000000000000 [ 297.119800][T11884] xt_l2tp: missing protocol rule (udp|l2tpip) [ 297.124096][T11876] raw: ffffffffffffffff 0000000000000001 00000000ffffffff 0000000000000000 [ 297.124115][T11876] page dumped because: page_pool leak [ 297.124128][T11876] page_owner tracks the page as allocated [ 297.124137][T11876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11876, tgid 11875 (syz.3.1418), ts 296152074700, free_ts 295641720140 [ 297.188583][T11876] post_alloc_hook+0x22d/0x280 [ 297.193434][T11876] get_page_from_freelist+0x24ae/0x2530 [ 297.199039][T11876] __alloc_frozen_pages_noprof+0x18d/0x380 [ 297.204940][T11876] __alloc_pages_noprof+0x10/0x100 [ 297.210120][T11876] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 297.215661][T11876] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 297.221824][T11876] skb_pp_cow_data+0xcd0/0x19a0 [ 297.226741][T11876] do_xdp_generic+0x770/0x12d0 [ 297.231574][T11876] tun_get_user+0x24a0/0x4350 [ 297.236288][T11876] tun_chr_write_iter+0x113/0x200 [ 297.241391][T11876] vfs_write+0x612/0xba0 [ 297.245689][T11876] ksys_write+0x150/0x270 [ 297.250082][T11876] do_syscall_64+0x174/0x580 [ 297.254767][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.260760][T11876] page last free pid 10985 tgid 10985 stack trace: [ 297.267287][T11876] __free_frozen_pages+0xc0d/0xd20 [ 297.272504][T11876] vfree+0x1fd/0x330 [ 297.276445][T11876] delayed_vfree_work+0x55/0x80 [ 297.281398][T11876] process_scheduled_works+0xa8e/0x14e0 [ 297.287019][T11876] worker_thread+0xa47/0xfb0 [ 297.291689][T11876] kthread+0x389/0x470 [ 297.295819][T11876] ret_from_fork+0x514/0xb70 [ 297.300471][T11876] ret_from_fork_asm+0x1a/0x30 [ 297.305282][T11876] Modules linked in: [ 297.309315][T11876] CPU: 0 UID: 0 PID: 11876 Comm: syz.3.1418 Tainted: G B syzkaller #0 PREEMPT(full) [ 297.309345][T11876] Tainted: [B]=BAD_PAGE [ 297.309351][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 297.309363][T11876] Call Trace: [ 297.309370][T11876] [ 297.309384][T11876] dump_stack_lvl+0xe8/0x150 [ 297.309410][T11876] bad_page+0x17f/0x1c0 [ 297.309432][T11876] __free_frozen_pages+0xcca/0xd20 [ 297.309462][T11876] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 297.309497][T11876] bpf_xdp_adjust_tail+0x1ce/0x210 [ 297.309537][T11876] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 297.309554][T11876] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 297.309589][T11876] do_xdp_generic+0xac2/0x12d0 [ 297.309609][T11876] ? __lock_acquire+0x683/0x2cd0 [ 297.309629][T11876] ? do_xdp_generic+0x6ba/0x12d0 [ 297.309652][T11876] ? __pfx_do_xdp_generic+0x10/0x10 [ 297.309678][T11876] ? tun_get_user+0x2373/0x4350 [ 297.309703][T11876] ? tun_get_user+0x2373/0x4350 [ 297.309718][T11876] tun_get_user+0x24a0/0x4350 [ 297.309747][T11876] ? aa_file_perm+0x18b/0x15f0 [ 297.309766][T11876] ? aa_file_perm+0x4ed/0x15f0 [ 297.309781][T11876] ? __pfx_tun_get_user+0x10/0x10 [ 297.309797][T11876] ? __lock_acquire+0x683/0x2cd0 [ 297.309821][T11876] ? preempt_schedule_thunk+0x16/0x30 [ 297.309849][T11876] ? ref_tracker_alloc+0x341/0x4b0 [ 297.309869][T11876] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 297.309888][T11876] ? tun_get+0x1c/0x2f0 [ 297.309902][T11876] ? tun_get+0x1c/0x2f0 [ 297.309930][T11876] ? tun_get+0x1c/0x2f0 [ 297.309943][T11876] ? tun_get+0x1c/0x2f0 [ 297.309958][T11876] tun_chr_write_iter+0x113/0x200 [ 297.309985][T11876] vfs_write+0x612/0xba0 [ 297.310013][T11876] ? __pfx_vfs_write+0x10/0x10 [ 297.310040][T11876] ? __fget_files+0x2a/0x420 [ 297.310065][T11876] ksys_write+0x150/0x270 [ 297.310089][T11876] ? __pfx_ksys_write+0x10/0x10 [ 297.310116][T11876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.310133][T11876] do_syscall_64+0x174/0x580 [ 297.310155][T11876] ? clear_bhb_loop+0x40/0x90 [ 297.310175][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.310193][T11876] RIP: 0033:0x7f67df55d68e [ 297.310209][T11876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 297.310224][T11876] RSP: 002b:00007f67e046afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 297.310243][T11876] RAX: ffffffffffffffda RBX: 00007f67e046b6c0 RCX: 00007f67df55d68e [ 297.310256][T11876] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 297.310267][T11876] RBP: 00007f67df632d6f R08: 0000000000000000 R09: 0000000000000000 [ 297.310279][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.310291][T11876] R13: 00007f67df816038 R14: 00007f67df815fa0 R15: 00007fff14f602d8 [ 297.310311][T11876] [ 297.588234][T11876] BUG: Bad page state in process syz.3.1418 pfn:57c62 [ 297.595158][T11876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57c62 [ 297.603997][T11876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 297.611197][T11876] raw: 00fff00000000000 dead000000000040 ffff88801af17000 0000000000000000 [ 297.619826][T11876] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 297.628483][T11876] page dumped because: page_pool leak [ 297.633915][T11876] page_owner tracks the page as allocated [ 297.639661][T11876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11876, tgid 11875 (syz.3.1418), ts 296152057395, free_ts 295641733945 [ 297.656955][T11876] post_alloc_hook+0x22d/0x280 [ 297.661814][T11876] get_page_from_freelist+0x24ae/0x2530 [ 297.667422][T11876] __alloc_frozen_pages_noprof+0x18d/0x380 [ 297.673308][T11876] __alloc_pages_noprof+0x10/0x100 [ 297.678479][T11876] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 297.684023][T11876] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 297.690140][T11876] skb_pp_cow_data+0xcd0/0x19a0 [ 297.695085][T11876] do_xdp_generic+0x770/0x12d0 [ 297.699888][T11876] tun_get_user+0x24a0/0x4350 [ 297.704624][T11876] tun_chr_write_iter+0x113/0x200 [ 297.709708][T11876] vfs_write+0x612/0xba0 [ 297.714027][T11876] ksys_write+0x150/0x270 [ 297.718408][T11876] do_syscall_64+0x174/0x580 [ 297.723065][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.728997][T11876] page last free pid 10985 tgid 10985 stack trace: [ 297.735538][T11876] __free_frozen_pages+0xc0d/0xd20 [ 297.740724][T11876] vfree+0x1fd/0x330 [ 297.744718][T11876] delayed_vfree_work+0x55/0x80 [ 297.749621][T11876] process_scheduled_works+0xa8e/0x14e0 [ 297.755246][T11876] worker_thread+0xa47/0xfb0 [ 297.759881][T11876] kthread+0x389/0x470 [ 297.764062][T11876] ret_from_fork+0x514/0xb70 [ 297.768693][T11876] ret_from_fork_asm+0x1a/0x30 [ 297.773530][T11876] Modules linked in: [ 297.777490][T11876] CPU: 0 UID: 0 PID: 11876 Comm: syz.3.1418 Tainted: G B syzkaller #0 PREEMPT(full) [ 297.777525][T11876] Tainted: [B]=BAD_PAGE [ 297.777535][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 297.777549][T11876] Call Trace: [ 297.777558][T11876] [ 297.777568][T11876] dump_stack_lvl+0xe8/0x150 [ 297.777598][T11876] bad_page+0x17f/0x1c0 [ 297.777625][T11876] __free_frozen_pages+0xcca/0xd20 [ 297.777661][T11876] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 297.777707][T11876] bpf_xdp_adjust_tail+0x1ce/0x210 [ 297.777733][T11876] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 297.777761][T11876] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 297.777804][T11876] do_xdp_generic+0xac2/0x12d0 [ 297.777830][T11876] ? __lock_acquire+0x683/0x2cd0 [ 297.777853][T11876] ? do_xdp_generic+0x6ba/0x12d0 [ 297.777883][T11876] ? __pfx_do_xdp_generic+0x10/0x10 [ 297.777916][T11876] ? tun_get_user+0x2373/0x4350 [ 297.777947][T11876] ? tun_get_user+0x2373/0x4350 [ 297.777966][T11876] tun_get_user+0x24a0/0x4350 [ 297.777995][T11876] ? aa_file_perm+0x18b/0x15f0 [ 297.778018][T11876] ? aa_file_perm+0x4ed/0x15f0 [ 297.778037][T11876] ? __pfx_tun_get_user+0x10/0x10 [ 297.778058][T11876] ? __lock_acquire+0x683/0x2cd0 [ 297.778102][T11876] ? preempt_schedule_thunk+0x16/0x30 [ 297.778137][T11876] ? ref_tracker_alloc+0x341/0x4b0 [ 297.778162][T11876] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 297.778186][T11876] ? tun_get+0x1c/0x2f0 [ 297.778204][T11876] ? tun_get+0x1c/0x2f0 [ 297.778226][T11876] ? tun_get+0x1c/0x2f0 [ 297.778243][T11876] ? tun_get+0x1c/0x2f0 [ 297.778264][T11876] tun_chr_write_iter+0x113/0x200 [ 297.778299][T11876] vfs_write+0x612/0xba0 [ 297.778336][T11876] ? __pfx_vfs_write+0x10/0x10 [ 297.778373][T11876] ? __fget_files+0x2a/0x420 [ 297.778404][T11876] ksys_write+0x150/0x270 [ 297.778436][T11876] ? __pfx_ksys_write+0x10/0x10 [ 297.778472][T11876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.778513][T11876] do_syscall_64+0x174/0x580 [ 297.778555][T11876] ? clear_bhb_loop+0x40/0x90 [ 297.778581][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.778602][T11876] RIP: 0033:0x7f67df55d68e [ 297.778623][T11876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 297.778644][T11876] RSP: 002b:00007f67e046afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 297.778669][T11876] RAX: ffffffffffffffda RBX: 00007f67e046b6c0 RCX: 00007f67df55d68e [ 297.778686][T11876] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 297.778701][T11876] RBP: 00007f67df632d6f R08: 0000000000000000 R09: 0000000000000000 [ 297.778715][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.778728][T11876] R13: 00007f67df816038 R14: 00007f67df815fa0 R15: 00007fff14f602d8 [ 297.778763][T11876] [ 297.778793][T11876] BUG: Bad page state in process syz.3.1418 pfn:57c63 [ 298.065104][T11876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57c63 [ 298.073950][T11876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 298.081186][T11876] raw: 00fff00000000000 dead000000000040 ffff88801af17000 0000000000000000 [ 298.089814][T11876] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 298.098465][T11876] page dumped because: page_pool leak [ 298.103903][T11876] page_owner tracks the page as allocated [ 298.109651][T11876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11876, tgid 11875 (syz.3.1418), ts 296152036201, free_ts 295641747259 [ 298.126955][T11876] post_alloc_hook+0x22d/0x280 [ 298.131816][T11876] get_page_from_freelist+0x24ae/0x2530 [ 298.137427][T11876] __alloc_frozen_pages_noprof+0x18d/0x380 [ 298.143319][T11876] __alloc_pages_noprof+0x10/0x100 [ 298.148489][T11876] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 298.154036][T11876] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 298.160159][T11876] skb_pp_cow_data+0xcd0/0x19a0 [ 298.165098][T11876] do_xdp_generic+0x770/0x12d0 [ 298.169915][T11876] tun_get_user+0x24a0/0x4350 [ 298.174673][T11876] tun_chr_write_iter+0x113/0x200 [ 298.179788][T11876] vfs_write+0x612/0xba0 [ 298.184122][T11876] ksys_write+0x150/0x270 [ 298.188523][T11876] do_syscall_64+0x174/0x580 [ 298.193197][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.199133][T11876] page last free pid 10985 tgid 10985 stack trace: [ 298.205700][T11876] __free_frozen_pages+0xc0d/0xd20 [ 298.210981][T11876] vfree+0x1fd/0x330 [ 298.214921][T11876] delayed_vfree_work+0x55/0x80 [ 298.219824][T11876] process_scheduled_works+0xa8e/0x14e0 [ 298.225440][T11876] worker_thread+0xa47/0xfb0 [ 298.230079][T11876] kthread+0x389/0x470 [ 298.234218][T11876] ret_from_fork+0x514/0xb70 [ 298.238857][T11876] ret_from_fork_asm+0x1a/0x30 [ 298.243691][T11876] Modules linked in: [ 298.247744][T11876] CPU: 0 UID: 0 PID: 11876 Comm: syz.3.1418 Tainted: G B syzkaller #0 PREEMPT(full) [ 298.247781][T11876] Tainted: [B]=BAD_PAGE [ 298.247788][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.247802][T11876] Call Trace: [ 298.247811][T11876] [ 298.247821][T11876] dump_stack_lvl+0xe8/0x150 [ 298.247849][T11876] bad_page+0x17f/0x1c0 [ 298.247877][T11876] __free_frozen_pages+0xcca/0xd20 [ 298.247913][T11876] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 298.247956][T11876] bpf_xdp_adjust_tail+0x1ce/0x210 [ 298.247983][T11876] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 298.248003][T11876] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 298.248045][T11876] do_xdp_generic+0xac2/0x12d0 [ 298.248071][T11876] ? __lock_acquire+0x683/0x2cd0 [ 298.248094][T11876] ? do_xdp_generic+0x6ba/0x12d0 [ 298.248124][T11876] ? __pfx_do_xdp_generic+0x10/0x10 [ 298.248156][T11876] ? tun_get_user+0x2373/0x4350 [ 298.248186][T11876] ? tun_get_user+0x2373/0x4350 [ 298.248205][T11876] tun_get_user+0x24a0/0x4350 [ 298.248234][T11876] ? aa_file_perm+0x18b/0x15f0 [ 298.248258][T11876] ? aa_file_perm+0x4ed/0x15f0 [ 298.248277][T11876] ? __pfx_tun_get_user+0x10/0x10 [ 298.248297][T11876] ? __lock_acquire+0x683/0x2cd0 [ 298.248323][T11876] ? preempt_schedule_thunk+0x16/0x30 [ 298.248357][T11876] ? ref_tracker_alloc+0x341/0x4b0 [ 298.248381][T11876] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 298.248405][T11876] ? tun_get+0x1c/0x2f0 [ 298.248423][T11876] ? tun_get+0x1c/0x2f0 [ 298.248443][T11876] ? tun_get+0x1c/0x2f0 [ 298.248460][T11876] ? tun_get+0x1c/0x2f0 [ 298.248482][T11876] tun_chr_write_iter+0x113/0x200 [ 298.248518][T11876] vfs_write+0x612/0xba0 [ 298.248577][T11876] ? __pfx_vfs_write+0x10/0x10 [ 298.248621][T11876] ? __fget_files+0x2a/0x420 [ 298.248655][T11876] ksys_write+0x150/0x270 [ 298.248697][T11876] ? __pfx_ksys_write+0x10/0x10 [ 298.248734][T11876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.248757][T11876] do_syscall_64+0x174/0x580 [ 298.248785][T11876] ? clear_bhb_loop+0x40/0x90 [ 298.248811][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.248833][T11876] RIP: 0033:0x7f67df55d68e [ 298.248854][T11876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 298.248874][T11876] RSP: 002b:00007f67e046afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.248897][T11876] RAX: ffffffffffffffda RBX: 00007f67e046b6c0 RCX: 00007f67df55d68e [ 298.248913][T11876] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 298.248927][T11876] RBP: 00007f67df632d6f R08: 0000000000000000 R09: 0000000000000000 [ 298.248941][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.248954][T11876] R13: 00007f67df816038 R14: 00007f67df815fa0 R15: 00007fff14f602d8 [ 298.248982][T11876] [ 298.248995][T11876] BUG: Bad page state in process syz.3.1418 pfn:57c64 [ 298.535145][T11876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57c64 [ 298.544009][T11876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 298.551211][T11876] raw: 00fff00000000000 dead000000000040 ffff88801af17000 0000000000000000 [ 298.559840][T11876] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 298.568488][T11876] page dumped because: page_pool leak [ 298.573925][T11876] page_owner tracks the page as allocated [ 298.579696][T11876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11876, tgid 11875 (syz.3.1418), ts 296149847803, free_ts 295641760337 [ 298.596981][T11876] post_alloc_hook+0x22d/0x280 [ 298.601833][T11876] get_page_from_freelist+0x24ae/0x2530 [ 298.607473][T11876] __alloc_frozen_pages_noprof+0x18d/0x380 [ 298.613368][T11876] __alloc_pages_noprof+0x10/0x100 [ 298.618532][T11876] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 298.624080][T11876] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 298.630198][T11876] skb_pp_cow_data+0xcd0/0x19a0 [ 298.635134][T11876] do_xdp_generic+0x770/0x12d0 [ 298.639946][T11876] tun_get_user+0x24a0/0x4350 [ 298.644692][T11876] tun_chr_write_iter+0x113/0x200 [ 298.649777][T11876] vfs_write+0x612/0xba0 [ 298.654096][T11876] ksys_write+0x150/0x270 [ 298.658554][T11876] do_syscall_64+0x174/0x580 [ 298.663344][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.669270][T11876] page last free pid 10985 tgid 10985 stack trace: [ 298.675823][T11876] __free_frozen_pages+0xc0d/0xd20 [ 298.681024][T11876] vfree+0x1fd/0x330 [ 298.684972][T11876] delayed_vfree_work+0x55/0x80 [ 298.689870][T11876] process_scheduled_works+0xa8e/0x14e0 [ 298.695485][T11876] worker_thread+0xa47/0xfb0 [ 298.700123][T11876] kthread+0x389/0x470 [ 298.704265][T11876] ret_from_fork+0x514/0xb70 [ 298.708888][T11876] ret_from_fork_asm+0x1a/0x30 [ 298.713728][T11876] Modules linked in: [ 298.717745][T11876] CPU: 0 UID: 0 PID: 11876 Comm: syz.3.1418 Tainted: G B syzkaller #0 PREEMPT(full) [ 298.717796][T11876] Tainted: [B]=BAD_PAGE [ 298.717804][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.717819][T11876] Call Trace: [ 298.717828][T11876] [ 298.717835][T11876] dump_stack_lvl+0xe8/0x150 [ 298.717859][T11876] bad_page+0x17f/0x1c0 [ 298.717884][T11876] __free_frozen_pages+0xcca/0xd20 [ 298.717915][T11876] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 298.717956][T11876] bpf_xdp_adjust_tail+0x1ce/0x210 [ 298.717982][T11876] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 298.718001][T11876] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 298.718041][T11876] do_xdp_generic+0xac2/0x12d0 [ 298.718066][T11876] ? __lock_acquire+0x683/0x2cd0 [ 298.718089][T11876] ? do_xdp_generic+0x6ba/0x12d0 [ 298.718116][T11876] ? __pfx_do_xdp_generic+0x10/0x10 [ 298.718147][T11876] ? tun_get_user+0x2373/0x4350 [ 298.718175][T11876] ? tun_get_user+0x2373/0x4350 [ 298.718193][T11876] tun_get_user+0x24a0/0x4350 [ 298.718221][T11876] ? aa_file_perm+0x18b/0x15f0 [ 298.718242][T11876] ? aa_file_perm+0x4ed/0x15f0 [ 298.718260][T11876] ? __pfx_tun_get_user+0x10/0x10 [ 298.718280][T11876] ? __lock_acquire+0x683/0x2cd0 [ 298.718303][T11876] ? preempt_schedule_thunk+0x16/0x30 [ 298.718336][T11876] ? ref_tracker_alloc+0x341/0x4b0 [ 298.718360][T11876] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 298.718382][T11876] ? tun_get+0x1c/0x2f0 [ 298.718417][T11876] ? tun_get+0x1c/0x2f0 [ 298.718439][T11876] ? tun_get+0x1c/0x2f0 [ 298.718456][T11876] ? tun_get+0x1c/0x2f0 [ 298.718478][T11876] tun_chr_write_iter+0x113/0x200 [ 298.718513][T11876] vfs_write+0x612/0xba0 [ 298.718551][T11876] ? __pfx_vfs_write+0x10/0x10 [ 298.718587][T11876] ? __fget_files+0x2a/0x420 [ 298.718620][T11876] ksys_write+0x150/0x270 [ 298.718653][T11876] ? __pfx_ksys_write+0x10/0x10 [ 298.718689][T11876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.718713][T11876] do_syscall_64+0x174/0x580 [ 298.718740][T11876] ? clear_bhb_loop+0x40/0x90 [ 298.718777][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.718798][T11876] RIP: 0033:0x7f67df55d68e [ 298.718819][T11876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 298.718841][T11876] RSP: 002b:00007f67e046afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.718866][T11876] RAX: ffffffffffffffda RBX: 00007f67e046b6c0 RCX: 00007f67df55d68e [ 298.718883][T11876] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 298.718898][T11876] RBP: 00007f67df632d6f R08: 0000000000000000 R09: 0000000000000000 [ 298.718911][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.718938][T11876] R13: 00007f67df816038 R14: 00007f67df815fa0 R15: 00007fff14f602d8 [ 298.718965][T11876] [ 298.718979][T11876] BUG: Bad page state in process syz.3.1418 pfn:38618 [ 299.005641][T11876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803861c000 pfn:0x38618 [ 299.015807][T11876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 299.022997][T11876] raw: 00fff00000000000 dead000000000040 ffff88801af17000 0000000000000000 [ 299.031678][T11876] raw: ffff88803861c000 0000000000000001 00000000ffffffff 0000000000000000 [ 299.040365][T11876] page dumped because: page_pool leak [ 299.045766][T11876] page_owner tracks the page as allocated [ 299.051558][T11876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11876, tgid 11875 (syz.3.1418), ts 296149828827, free_ts 295671510629 [ 299.068843][T11876] post_alloc_hook+0x22d/0x280 [ 299.073731][T11876] get_page_from_freelist+0x24ae/0x2530 [ 299.079352][T11876] __alloc_frozen_pages_noprof+0x18d/0x380 [ 299.085248][T11876] __alloc_pages_noprof+0x10/0x100 [ 299.090438][T11876] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 299.095952][T11876] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 299.102108][T11876] skb_pp_cow_data+0xcd0/0x19a0 [ 299.107017][T11876] do_xdp_generic+0x770/0x12d0 [ 299.111903][T11876] tun_get_user+0x24a0/0x4350 [ 299.116625][T11876] tun_chr_write_iter+0x113/0x200 [ 299.121734][T11876] vfs_write+0x612/0xba0 [ 299.126025][T11876] ksys_write+0x150/0x270 [ 299.130424][T11876] do_syscall_64+0x174/0x580 [ 299.135055][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.141047][T11876] page last free pid 10985 tgid 10985 stack trace: [ 299.147597][T11876] __free_frozen_pages+0xc0d/0xd20 [ 299.152798][T11876] vfree+0x1fd/0x330 [ 299.156743][T11876] delayed_vfree_work+0x55/0x80 [ 299.161682][T11876] process_scheduled_works+0xa8e/0x14e0 [ 299.168053][T11876] worker_thread+0xa47/0xfb0 [ 299.172725][T11876] kthread+0x389/0x470 [ 299.176847][T11876] ret_from_fork+0x514/0xb70 [ 299.181512][T11876] ret_from_fork_asm+0x1a/0x30 [ 299.186329][T11876] Modules linked in: [ 299.190270][T11876] CPU: 0 UID: 0 PID: 11876 Comm: syz.3.1418 Tainted: G B syzkaller #0 PREEMPT(full) [ 299.190307][T11876] Tainted: [B]=BAD_PAGE [ 299.190318][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.190337][T11876] Call Trace: [ 299.190346][T11876] [ 299.190355][T11876] dump_stack_lvl+0xe8/0x150 [ 299.190383][T11876] bad_page+0x17f/0x1c0 [ 299.190411][T11876] __free_frozen_pages+0xcca/0xd20 [ 299.190448][T11876] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 299.190490][T11876] bpf_xdp_adjust_tail+0x1ce/0x210 [ 299.190517][T11876] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 299.190538][T11876] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 299.190605][T11876] do_xdp_generic+0xac2/0x12d0 [ 299.190633][T11876] ? __lock_acquire+0x683/0x2cd0 [ 299.190659][T11876] ? do_xdp_generic+0x6ba/0x12d0 [ 299.190690][T11876] ? __pfx_do_xdp_generic+0x10/0x10 [ 299.190723][T11876] ? tun_get_user+0x2373/0x4350 [ 299.190756][T11876] ? tun_get_user+0x2373/0x4350 [ 299.190775][T11876] tun_get_user+0x24a0/0x4350 [ 299.190802][T11876] ? aa_file_perm+0x18b/0x15f0 [ 299.190825][T11876] ? aa_file_perm+0x4ed/0x15f0 [ 299.190844][T11876] ? __pfx_tun_get_user+0x10/0x10 [ 299.190864][T11876] ? __lock_acquire+0x683/0x2cd0 [ 299.190889][T11876] ? preempt_schedule_thunk+0x16/0x30 [ 299.190924][T11876] ? ref_tracker_alloc+0x341/0x4b0 [ 299.190950][T11876] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 299.190974][T11876] ? tun_get+0x1c/0x2f0 [ 299.190994][T11876] ? tun_get+0x1c/0x2f0 [ 299.191016][T11876] ? tun_get+0x1c/0x2f0 [ 299.191035][T11876] ? tun_get+0x1c/0x2f0 [ 299.191057][T11876] tun_chr_write_iter+0x113/0x200 [ 299.191094][T11876] vfs_write+0x612/0xba0 [ 299.191134][T11876] ? __pfx_vfs_write+0x10/0x10 [ 299.191172][T11876] ? __fget_files+0x2a/0x420 [ 299.191205][T11876] ksys_write+0x150/0x270 [ 299.191238][T11876] ? __pfx_ksys_write+0x10/0x10 [ 299.191276][T11876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.191300][T11876] do_syscall_64+0x174/0x580 [ 299.191328][T11876] ? clear_bhb_loop+0x40/0x90 [ 299.191354][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.191377][T11876] RIP: 0033:0x7f67df55d68e [ 299.191411][T11876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 299.191433][T11876] RSP: 002b:00007f67e046afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 299.191460][T11876] RAX: ffffffffffffffda RBX: 00007f67e046b6c0 RCX: 00007f67df55d68e [ 299.191477][T11876] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 299.191492][T11876] RBP: 00007f67df632d6f R08: 0000000000000000 R09: 0000000000000000 [ 299.191507][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.191520][T11876] R13: 00007f67df816038 R14: 00007f67df815fa0 R15: 00007fff14f602d8 [ 299.191549][T11876] [ 299.469770][T11876] BUG: Bad page state in process syz.3.1418 pfn:38619 [ 299.476690][T11876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x38619 [ 299.486832][T11876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 299.494041][T11876] raw: 00fff00000000000 dead000000000040 ffff88801af17000 0000000000000000 [ 299.502693][T11876] raw: ffffffffffffffff 0000000000000001 00000000ffffffff 0000000000000000 [ 299.511351][T11876] page dumped because: page_pool leak [ 299.516754][T11876] page_owner tracks the page as allocated [ 299.522519][T11876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11876, tgid 11875 (syz.3.1418), ts 296149809338, free_ts 295671529081 [ 299.539785][T11876] post_alloc_hook+0x22d/0x280 [ 299.544650][T11876] get_page_from_freelist+0x24ae/0x2530 [ 299.550272][T11876] __alloc_frozen_pages_noprof+0x18d/0x380 [ 299.556188][T11876] __alloc_pages_noprof+0x10/0x100 [ 299.561390][T11876] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 299.566900][T11876] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 299.573592][T11876] skb_pp_cow_data+0xcd0/0x19a0 [ 299.578516][T11876] do_xdp_generic+0x770/0x12d0 [ 299.583505][T11876] tun_get_user+0x24a0/0x4350 [ 299.588239][T11876] tun_chr_write_iter+0x113/0x200 [ 299.593363][T11876] vfs_write+0x612/0xba0 [ 299.597651][T11876] ksys_write+0x150/0x270 [ 299.602072][T11876] do_syscall_64+0x174/0x580 [ 299.606710][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.612686][T11876] page last free pid 10985 tgid 10985 stack trace: [ 299.619212][T11876] __free_frozen_pages+0xc0d/0xd20 [ 299.624403][T11876] vfree+0x1fd/0x330 [ 299.628370][T11876] delayed_vfree_work+0x55/0x80 [ 299.633514][T11876] process_scheduled_works+0xa8e/0x14e0 [ 299.639119][T11876] worker_thread+0xa47/0xfb0 [ 299.643784][T11876] kthread+0x389/0x470 [ 299.647920][T11876] ret_from_fork+0x514/0xb70 [ 299.652590][T11876] ret_from_fork_asm+0x1a/0x30 [ 299.657412][T11876] Modules linked in: [ 299.661380][T11876] CPU: 0 UID: 0 PID: 11876 Comm: syz.3.1418 Tainted: G B syzkaller #0 PREEMPT(full) [ 299.661412][T11876] Tainted: [B]=BAD_PAGE [ 299.661420][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.661435][T11876] Call Trace: [ 299.661443][T11876] [ 299.661453][T11876] dump_stack_lvl+0xe8/0x150 [ 299.661481][T11876] bad_page+0x17f/0x1c0 [ 299.661508][T11876] __free_frozen_pages+0xcca/0xd20 [ 299.661543][T11876] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 299.661590][T11876] bpf_xdp_adjust_tail+0x1ce/0x210 [ 299.661619][T11876] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 299.661640][T11876] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 299.661689][T11876] do_xdp_generic+0xac2/0x12d0 [ 299.661715][T11876] ? __lock_acquire+0x683/0x2cd0 [ 299.661739][T11876] ? do_xdp_generic+0x6ba/0x12d0 [ 299.661787][T11876] ? __pfx_do_xdp_generic+0x10/0x10 [ 299.661820][T11876] ? tun_get_user+0x2373/0x4350 [ 299.661852][T11876] ? tun_get_user+0x2373/0x4350 [ 299.661872][T11876] tun_get_user+0x24a0/0x4350 [ 299.661903][T11876] ? aa_file_perm+0x18b/0x15f0 [ 299.661941][T11876] ? aa_file_perm+0x4ed/0x15f0 [ 299.661959][T11876] ? __pfx_tun_get_user+0x10/0x10 [ 299.661980][T11876] ? __lock_acquire+0x683/0x2cd0 [ 299.662006][T11876] ? preempt_schedule_thunk+0x16/0x30 [ 299.662061][T11876] ? ref_tracker_alloc+0x341/0x4b0 [ 299.662087][T11876] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 299.662111][T11876] ? tun_get+0x1c/0x2f0 [ 299.662128][T11876] ? tun_get+0x1c/0x2f0 [ 299.662150][T11876] ? tun_get+0x1c/0x2f0 [ 299.662166][T11876] ? tun_get+0x1c/0x2f0 [ 299.662188][T11876] tun_chr_write_iter+0x113/0x200 [ 299.662224][T11876] vfs_write+0x612/0xba0 [ 299.662261][T11876] ? __pfx_vfs_write+0x10/0x10 [ 299.662297][T11876] ? __fget_files+0x2a/0x420 [ 299.662329][T11876] ksys_write+0x150/0x270 [ 299.662362][T11876] ? __pfx_ksys_write+0x10/0x10 [ 299.662399][T11876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.662422][T11876] do_syscall_64+0x174/0x580 [ 299.662449][T11876] ? clear_bhb_loop+0x40/0x90 [ 299.662475][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.662497][T11876] RIP: 0033:0x7f67df55d68e [ 299.662518][T11876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 299.662539][T11876] RSP: 002b:00007f67e046afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 299.662564][T11876] RAX: ffffffffffffffda RBX: 00007f67e046b6c0 RCX: 00007f67df55d68e [ 299.662581][T11876] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 299.662596][T11876] RBP: 00007f67df632d6f R08: 0000000000000000 R09: 0000000000000000 [ 299.662610][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.662623][T11876] R13: 00007f67df816038 R14: 00007f67df815fa0 R15: 00007fff14f602d8 [ 299.662650][T11876] [ 299.662663][T11876] BUG: Bad page state in process syz.3.1418 pfn:3861a [ 299.948570][T11876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3861a [ 299.957386][T11876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 299.964565][T11876] raw: 00fff00000000000 dead000000000040 ffff88801af17000 0000000000000000 [ 299.973214][T11876] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 299.981840][T11876] page dumped because: page_pool leak [ 299.987212][T11876] page_owner tracks the page as allocated [ 299.992971][T11876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11876, tgid 11875 (syz.3.1418), ts 296149778126, free_ts 295671542414 [ 300.010214][T11876] post_alloc_hook+0x22d/0x280 [ 300.015057][T11876] get_page_from_freelist+0x24ae/0x2530 [ 300.020679][T11876] __alloc_frozen_pages_noprof+0x18d/0x380 [ 300.026509][T11876] __alloc_pages_noprof+0x10/0x100 [ 300.031697][T11876] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 300.037229][T11876] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 300.043386][T11876] skb_pp_cow_data+0xcd0/0x19a0 [ 300.048280][T11876] do_xdp_generic+0x770/0x12d0 [ 300.053122][T11876] tun_get_user+0x24a0/0x4350 [ 300.057833][T11876] tun_chr_write_iter+0x113/0x200 [ 300.062922][T11876] vfs_write+0x612/0xba0 [ 300.067209][T11876] ksys_write+0x150/0x270 [ 300.071595][T11876] do_syscall_64+0x174/0x580 [ 300.076230][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.082196][T11876] page last free pid 10985 tgid 10985 stack trace: [ 300.088717][T11876] __free_frozen_pages+0xc0d/0xd20 [ 300.093892][T11876] vfree+0x1fd/0x330 [ 300.097823][T11876] delayed_vfree_work+0x55/0x80 [ 300.102736][T11876] process_scheduled_works+0xa8e/0x14e0 [ 300.108310][T11876] worker_thread+0xa47/0xfb0 [ 300.112951][T11876] kthread+0x389/0x470 [ 300.117055][T11876] ret_from_fork+0x514/0xb70 [ 300.121705][T11876] ret_from_fork_asm+0x1a/0x30 [ 300.126508][T11876] Modules linked in: [ 300.130450][T11876] CPU: 0 UID: 0 PID: 11876 Comm: syz.3.1418 Tainted: G B syzkaller #0 PREEMPT(full) [ 300.130480][T11876] Tainted: [B]=BAD_PAGE [ 300.130488][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 300.130501][T11876] Call Trace: [ 300.130510][T11876] [ 300.130520][T11876] dump_stack_lvl+0xe8/0x150 [ 300.130551][T11876] bad_page+0x17f/0x1c0 [ 300.130580][T11876] __free_frozen_pages+0xcca/0xd20 [ 300.130615][T11876] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 300.130668][T11876] bpf_xdp_adjust_tail+0x1ce/0x210 [ 300.130696][T11876] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 300.130717][T11876] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 300.130794][T11876] do_xdp_generic+0xac2/0x12d0 [ 300.130821][T11876] ? __lock_acquire+0x683/0x2cd0 [ 300.130845][T11876] ? do_xdp_generic+0x6ba/0x12d0 [ 300.130871][T11876] ? __pfx_do_xdp_generic+0x10/0x10 [ 300.130901][T11876] ? tun_get_user+0x2373/0x4350 [ 300.130932][T11876] ? tun_get_user+0x2373/0x4350 [ 300.130951][T11876] tun_get_user+0x24a0/0x4350 [ 300.130981][T11876] ? aa_file_perm+0x18b/0x15f0 [ 300.131006][T11876] ? aa_file_perm+0x4ed/0x15f0 [ 300.131025][T11876] ? __pfx_tun_get_user+0x10/0x10 [ 300.131046][T11876] ? __lock_acquire+0x683/0x2cd0 [ 300.131072][T11876] ? preempt_schedule_thunk+0x16/0x30 [ 300.131106][T11876] ? ref_tracker_alloc+0x341/0x4b0 [ 300.131132][T11876] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 300.131155][T11876] ? tun_get+0x1c/0x2f0 [ 300.131172][T11876] ? tun_get+0x1c/0x2f0 [ 300.131191][T11876] ? tun_get+0x1c/0x2f0 [ 300.131207][T11876] ? tun_get+0x1c/0x2f0 [ 300.131223][T11876] tun_chr_write_iter+0x113/0x200 [ 300.131256][T11876] vfs_write+0x612/0xba0 [ 300.131290][T11876] ? __pfx_vfs_write+0x10/0x10 [ 300.131325][T11876] ? __fget_files+0x2a/0x420 [ 300.131356][T11876] ksys_write+0x150/0x270 [ 300.131387][T11876] ? __pfx_ksys_write+0x10/0x10 [ 300.131445][T11876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.131469][T11876] do_syscall_64+0x174/0x580 [ 300.131497][T11876] ? clear_bhb_loop+0x40/0x90 [ 300.131523][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.131544][T11876] RIP: 0033:0x7f67df55d68e [ 300.131566][T11876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.131585][T11876] RSP: 002b:00007f67e046afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 300.131607][T11876] RAX: ffffffffffffffda RBX: 00007f67e046b6c0 RCX: 00007f67df55d68e [ 300.131622][T11876] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 300.131644][T11876] RBP: 00007f67df632d6f R08: 0000000000000000 R09: 0000000000000000 [ 300.131658][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.131671][T11876] R13: 00007f67df816038 R14: 00007f67df815fa0 R15: 00007fff14f602d8 [ 300.131696][T11876] [ 300.131715][T11876] BUG: Bad page state in process syz.3.1418 pfn:3861b [ 300.417030][T11876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3861b [ 300.425893][T11876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 300.433083][T11876] raw: 00fff00000000000 dead000000000040 ffff88801af17000 0000000000000000 [ 300.441731][T11876] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 300.450387][T11876] page dumped because: page_pool leak [ 300.455803][T11876] page_owner tracks the page as allocated [ 300.461569][T11876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11876, tgid 11875 (syz.3.1418), ts 296149759486, free_ts 295671570984 [ 300.478813][T11876] post_alloc_hook+0x22d/0x280 [ 300.483676][T11876] get_page_from_freelist+0x24ae/0x2530 [ 300.489272][T11876] __alloc_frozen_pages_noprof+0x18d/0x380 [ 300.495169][T11876] __alloc_pages_noprof+0x10/0x100 [ 300.500368][T11876] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 300.505881][T11876] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 300.512010][T11876] skb_pp_cow_data+0xcd0/0x19a0 [ 300.516900][T11876] do_xdp_generic+0x770/0x12d0 [ 300.521717][T11876] tun_get_user+0x24a0/0x4350 [ 300.526431][T11876] tun_chr_write_iter+0x113/0x200 [ 300.531537][T11876] vfs_write+0x612/0xba0 [ 300.535813][T11876] ksys_write+0x150/0x270 [ 300.540155][T11876] do_syscall_64+0x174/0x580 [ 300.544815][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.550795][T11876] page last free pid 10985 tgid 10985 stack trace: [ 300.557298][T11876] __free_frozen_pages+0xc0d/0xd20 [ 300.562496][T11876] vfree+0x1fd/0x330 [ 300.566434][T11876] delayed_vfree_work+0x55/0x80 [ 300.571351][T11876] process_scheduled_works+0xa8e/0x14e0 [ 300.576920][T11876] worker_thread+0xa47/0xfb0 [ 300.581570][T11876] kthread+0x389/0x470 [ 300.585671][T11876] ret_from_fork+0x514/0xb70 [ 300.590271][T11876] ret_from_fork_asm+0x1a/0x30 [ 300.595144][T11876] Modules linked in: [ 300.599100][T11876] CPU: 0 UID: 0 PID: 11876 Comm: syz.3.1418 Tainted: G B syzkaller #0 PREEMPT(full) [ 300.599123][T11876] Tainted: [B]=BAD_PAGE [ 300.599145][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 300.599155][T11876] Call Trace: [ 300.599162][T11876] [ 300.599170][T11876] dump_stack_lvl+0xe8/0x150 [ 300.599192][T11876] bad_page+0x17f/0x1c0 [ 300.599212][T11876] __free_frozen_pages+0xcca/0xd20 [ 300.599239][T11876] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 300.599271][T11876] bpf_xdp_adjust_tail+0x1ce/0x210 [ 300.599290][T11876] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 300.599304][T11876] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 300.599335][T11876] do_xdp_generic+0xac2/0x12d0 [ 300.599353][T11876] ? __lock_acquire+0x683/0x2cd0 [ 300.599370][T11876] ? do_xdp_generic+0x6ba/0x12d0 [ 300.599390][T11876] ? __pfx_do_xdp_generic+0x10/0x10 [ 300.599413][T11876] ? tun_get_user+0x2373/0x4350 [ 300.599434][T11876] ? tun_get_user+0x2373/0x4350 [ 300.599447][T11876] tun_get_user+0x24a0/0x4350 [ 300.599504][T11876] ? aa_file_perm+0x18b/0x15f0 [ 300.599521][T11876] ? aa_file_perm+0x4ed/0x15f0 [ 300.599534][T11876] ? __pfx_tun_get_user+0x10/0x10 [ 300.599548][T11876] ? __lock_acquire+0x683/0x2cd0 [ 300.599565][T11876] ? preempt_schedule_thunk+0x16/0x30 [ 300.599589][T11876] ? ref_tracker_alloc+0x341/0x4b0 [ 300.599607][T11876] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 300.599623][T11876] ? tun_get+0x1c/0x2f0 [ 300.599636][T11876] ? tun_get+0x1c/0x2f0 [ 300.599650][T11876] ? tun_get+0x1c/0x2f0 [ 300.599662][T11876] ? tun_get+0x1c/0x2f0 [ 300.599677][T11876] tun_chr_write_iter+0x113/0x200 [ 300.599702][T11876] vfs_write+0x612/0xba0 [ 300.599728][T11876] ? __pfx_vfs_write+0x10/0x10 [ 300.599754][T11876] ? __fget_files+0x2a/0x420 [ 300.599777][T11876] ksys_write+0x150/0x270 [ 300.599799][T11876] ? __pfx_ksys_write+0x10/0x10 [ 300.599824][T11876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.599840][T11876] do_syscall_64+0x174/0x580 [ 300.599861][T11876] ? clear_bhb_loop+0x40/0x90 [ 300.599878][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.599894][T11876] RIP: 0033:0x7f67df55d68e [ 300.599910][T11876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.599923][T11876] RSP: 002b:00007f67e046afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 300.599941][T11876] RAX: ffffffffffffffda RBX: 00007f67e046b6c0 RCX: 00007f67df55d68e [ 300.599952][T11876] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 300.599962][T11876] RBP: 00007f67df632d6f R08: 0000000000000000 R09: 0000000000000000 [ 300.599971][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.599981][T11876] R13: 00007f67df816038 R14: 00007f67df815fa0 R15: 00007fff14f602d8 [ 300.599999][T11876] [ 300.600061][T11876] BUG: Bad page state in process syz.3.1418 pfn:3861c [ 300.885605][T11876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3861c [ 300.894431][T11876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 300.901607][T11876] raw: 00fff00000000000 dead000000000040 ffff88801af17000 0000000000000000 [ 300.910192][T11876] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 300.918829][T11876] page dumped because: page_pool leak [ 300.924242][T11876] page_owner tracks the page as allocated [ 300.929959][T11876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11876, tgid 11875 (syz.3.1418), ts 296149740916, free_ts 295671583380 [ 300.947212][T11876] post_alloc_hook+0x22d/0x280 [ 300.952054][T11876] get_page_from_freelist+0x24ae/0x2530 [ 300.957646][T11876] __alloc_frozen_pages_noprof+0x18d/0x380 [ 300.963524][T11876] __alloc_pages_noprof+0x10/0x100 [ 300.968681][T11876] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 300.974198][T11876] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 300.980302][T11876] skb_pp_cow_data+0xcd0/0x19a0 [ 300.985243][T11876] do_xdp_generic+0x770/0x12d0 [ 300.990015][T11876] tun_get_user+0x24a0/0x4350 [ 300.994739][T11876] tun_chr_write_iter+0x113/0x200 [ 300.999811][T11876] vfs_write+0x612/0xba0 [ 301.004143][T11876] ksys_write+0x150/0x270 [ 301.008510][T11876] do_syscall_64+0x174/0x580 [ 301.013162][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.019079][T11876] page last free pid 10985 tgid 10985 stack trace: [ 301.025628][T11876] __free_frozen_pages+0xc0d/0xd20 [ 301.030817][T11876] vfree+0x1fd/0x330 [ 301.034745][T11876] delayed_vfree_work+0x55/0x80 [ 301.039620][T11876] process_scheduled_works+0xa8e/0x14e0 [ 301.045220][T11876] worker_thread+0xa47/0xfb0 [ 301.049844][T11876] kthread+0x389/0x470 [ 301.053977][T11876] ret_from_fork+0x514/0xb70 [ 301.058597][T11876] ret_from_fork_asm+0x1a/0x30 [ 301.063420][T11876] Modules linked in: [ 301.067350][T11876] CPU: 0 UID: 0 PID: 11876 Comm: syz.3.1418 Tainted: G B syzkaller #0 PREEMPT(full) [ 301.067373][T11876] Tainted: [B]=BAD_PAGE [ 301.067378][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.067389][T11876] Call Trace: [ 301.067396][T11876] [ 301.067403][T11876] dump_stack_lvl+0xe8/0x150 [ 301.067423][T11876] bad_page+0x17f/0x1c0 [ 301.067448][T11876] __free_frozen_pages+0xcca/0xd20 [ 301.067474][T11876] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 301.067506][T11876] bpf_xdp_adjust_tail+0x1ce/0x210 [ 301.067526][T11876] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 301.067540][T11876] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 301.067570][T11876] do_xdp_generic+0xac2/0x12d0 [ 301.067588][T11876] ? __lock_acquire+0x683/0x2cd0 [ 301.067620][T11876] ? do_xdp_generic+0x6ba/0x12d0 [ 301.067641][T11876] ? __pfx_do_xdp_generic+0x10/0x10 [ 301.067663][T11876] ? tun_get_user+0x2373/0x4350 [ 301.067685][T11876] ? tun_get_user+0x2373/0x4350 [ 301.067698][T11876] tun_get_user+0x24a0/0x4350 [ 301.067718][T11876] ? aa_file_perm+0x18b/0x15f0 [ 301.067735][T11876] ? aa_file_perm+0x4ed/0x15f0 [ 301.067748][T11876] ? __pfx_tun_get_user+0x10/0x10 [ 301.067762][T11876] ? __lock_acquire+0x683/0x2cd0 [ 301.067779][T11876] ? preempt_schedule_thunk+0x16/0x30 [ 301.067803][T11876] ? ref_tracker_alloc+0x341/0x4b0 [ 301.067821][T11876] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 301.067838][T11876] ? tun_get+0x1c/0x2f0 [ 301.067850][T11876] ? tun_get+0x1c/0x2f0 [ 301.067864][T11876] ? tun_get+0x1c/0x2f0 [ 301.067877][T11876] ? tun_get+0x1c/0x2f0 [ 301.067891][T11876] tun_chr_write_iter+0x113/0x200 [ 301.067916][T11876] vfs_write+0x612/0xba0 [ 301.067942][T11876] ? __pfx_vfs_write+0x10/0x10 [ 301.067967][T11876] ? __fget_files+0x2a/0x420 [ 301.067990][T11876] ksys_write+0x150/0x270 [ 301.068012][T11876] ? __pfx_ksys_write+0x10/0x10 [ 301.068036][T11876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.068053][T11876] do_syscall_64+0x174/0x580 [ 301.068073][T11876] ? clear_bhb_loop+0x40/0x90 [ 301.068092][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.068107][T11876] RIP: 0033:0x7f67df55d68e [ 301.068122][T11876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 301.068135][T11876] RSP: 002b:00007f67e046afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 301.068151][T11876] RAX: ffffffffffffffda RBX: 00007f67e046b6c0 RCX: 00007f67df55d68e [ 301.068163][T11876] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 301.068173][T11876] RBP: 00007f67df632d6f R08: 0000000000000000 R09: 0000000000000000 [ 301.068182][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.068191][T11876] R13: 00007f67df816038 R14: 00007f67df815fa0 R15: 00007fff14f602d8 [ 301.068210][T11876] [ 301.384491][T11906] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 301.393537][T11906] team0: entered promiscuous mode [ 301.399616][T11906] team_slave_0: entered promiscuous mode [ 301.424616][T11906] team_slave_1: entered promiscuous mode