last executing test programs: 8.511745213s ago: executing program 4 (id=1262): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000006800000429bd7000ffdbdf25020002000200000004000b00080001000200000008000100010000001400060000000000000000000000000000000001060007000800000004000b0004000400160926f72bb94ee217e2c8a800779206706767ff4c7b498b8595284256317dd0e09cc37038cf0fe35c99"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20000841) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="140000002f00010007000000fcdbdf2504a201ca"], 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000440)=0x8, 0x4) getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000140)={0x4}) r8 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0xe8, 0x8) r10 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000000000000a004e2000000634fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000070de8f2312a68e0000000000000000000000000000000000000000000000000000000000000000000000000000003c5d28b4434b0d88861d846825000000000000000000000000000000000000000000000000000000000000000000000000132103edc827a7"], 0x90) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) syz_emit_ethernet(0x19e, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x38) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r11, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x4}, 0x1c) ioctl$sock_TIOCINQ(r11, 0x541b, &(0x7f0000000040)) 7.332301518s ago: executing program 4 (id=1274): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) (async) r2 = socket$kcm(0xa, 0x2, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4088}, 0x44840) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64110101, 0x4e22, 0x3, 'nq\x00', 0x1, 0x9d3f, 0x8006b}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) socket(0x10, 0x2, 0x0) (async) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) shutdown(r4, 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/143, 0x8f}, {&(0x7f0000001780)=""/4104, 0x1008}, {&(0x7f00000005c0)=""/124, 0x7c}, {&(0x7f0000000240)=""/84, 0x54}], 0x4}, 0x0) 6.868343171s ago: executing program 4 (id=1276): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x26c8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x4f}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0x101, 0x6, [0x9, 0x6, 0x2, 0x51b8, 0x1, 0x8]}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e20, 0x4, @mcast2, 0x85}}}, &(0x7f0000000240)=0x84) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000280)={r0, 0x0, 0xe, 0x0, 0x80000000, 0x2, [0x0, 0x1, 0x9, 0x56ae, 0xfff, 0xa7]}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000300)={0x9, 0x1}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r2, 0x9}, 0x8) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x10000, 0xc000, 0x7fff, 0x3, 0x121, 0x0, 0x4}, &(0x7f0000000480)=0x9c) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) close(r6) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000004c0)=0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000500)={r1, 0x4b, "629c69092b0531edb89a7db3f6ac7d1f083a38e21a9b3a3e5b20d50ad102028097aed7c593f39b483d0edacd0fd7de01e12b6d3abe45ccb43bc67b5d1c3507d6b26d3a2a131209f984657a"}, &(0x7f0000000580)=0x53) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000005c0)={r7, 0xffffffff}, 0x8) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x24000, 0x0) ioctl$PPPIOCSNPMODE(r8, 0x4008744b, &(0x7f0000000640)={0xc029, 0x3}) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f00000006c0)={0x1, &(0x7f0000000680)=[{0x429, 0x2, 0x81, 0x8}]}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000780)={0x9, &(0x7f0000000700)=[{0x3, 0x0, 0x7, 0xf3}, {0x5, 0xfb, 0x5, 0x3}, {0x9, 0x1, 0x9, 0xef}, {0x7, 0xff, 0x0, 0x7e6}, {0x0, 0x7, 0x8, 0x2}, {0x7, 0x9, 0x6, 0x7}, {0x2, 0x95, 0x10, 0x80000000}, {0x7, 0xba}, {0xa0, 0x80, 0x4, 0x9}]}, 0x10) r9 = socket$isdn(0x22, 0x3, 0x26) ioctl$IMCTRLREQ(r9, 0x80044945, &(0x7f00000007c0)={0x800, 0x8, 0x2e9, 0xffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000900)={'gre0\x00', &(0x7f0000000800)={'gretap0\x00', 0x0, 0x700, 0x8f65036c361b1747, 0x20000000, 0x3, {{0x2c, 0x4, 0x3, 0x8, 0xb0, 0x67, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @remote, {[@end, @cipso={0x86, 0x30, 0xffffffffffffffff, [{0x2, 0xb, "963e3a9e3ff69cde3b"}, {0x1, 0x2}, {0x1, 0xe, "15a600bea6c29ef4ea3f4afb"}, {0x6, 0xf, "98bf4604072afdd851582e578b"}]}, @cipso={0x86, 0x10, 0x3, [{0x6, 0xa, "1a4fbb668cd2ccc9"}]}, @cipso={0x86, 0x1d, 0x3, [{0x0, 0x5, "f481d1"}, {0x2, 0x5, "49b0e6"}, {0x1, 0x2}, {0x1, 0xb, "20249b7452bb03ef93"}]}, @generic={0x89, 0x8, "db13fabd4bf0"}, @cipso={0x86, 0x33, 0xffffffffffffffff, [{0x1, 0x12, "1300297ca146b4c44274f8f972ea091f"}, {0x0, 0xa, "c38337182dbd437f"}, {0x5, 0x11, "8bf5192b85360ccac679700e266ce9"}]}, @noop]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000940)={{{@in6=@loopback, @in=@loopback, 0x4e22, 0x6, 0x4e23, 0x5, 0xa, 0x20, 0x20, 0x16, r10, 0xee00}, {0x8001, 0x400, 0xca8, 0x8, 0x6, 0x6, 0x3c4}, {0x6, 0x80000001, 0x3b, 0x4}, 0x2, 0x0, 0x2, 0x1, 0x1, 0x1}, {{@in=@multicast1, 0x4d3, 0x6c}, 0xa, @in=@local, 0x3500, 0x4, 0x3, 0x14, 0xfffffffe, 0x3, 0x7}}, 0xe8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000b80)={&(0x7f0000000a40), 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_USERDATA={0x68, 0xd, 0x1, 0x0, "721d38100704989d8b9e71774c8952cea0cc8cf2aff3760892ffa3e3b6bd21f09182ec8982312275a436421e63365693b830c3003e958aadb4ac24b105dc69aaf06998f0a652a71d67f6ee1a30c1805e7a263d4c933191362287ae455ef8aeb33d169307"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c844) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000bc0)={r7, 0x4}, &(0x7f0000000c00)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000c40)={r4, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}}, 0x85b, 0x7fff}, &(0x7f0000000d00)=0x90) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000d40)={r4, 0x1000, "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"}, &(0x7f0000001d80)=0x1008) socket$nl_route(0x10, 0x3, 0x0) 6.535680415s ago: executing program 4 (id=1280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000020605000000000000000000070000001400078008001140ffffffe2080012400060ffff0500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084) 5.37541311s ago: executing program 1 (id=1289): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x45, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRESOCT=r0, @ANYRES8=r0], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.131346353s ago: executing program 1 (id=1293): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000007180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006b80)=""/17, 0x11}, 0x1}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x6e22, 0x0, @mcast1}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000200fe8000000000000000000000000000aa08000100", @ANYRES32=r1, @ANYBLOB="040013001400030017"], 0x68}}, 0x0) 5.044033164s ago: executing program 2 (id=1294): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000080)=0x9, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x5, 0x7, 0x6}}}}]}, 0x48}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x16, &(0x7f00000013c0)=ANY=[@ANYBLOB="277d1e0c8768f319cc1800000907000000aed6fbc6aab4b000170000048458801acbb497a6b8c58ed7b265a014e249605970fe0925e32f2f9790019f02f7d92c849a38d459614d83f25d892c3661952357c3ddcbc0e932860f1068171996d6e369fb25fe5571cf7b1194bca556dad85cb796d25ae4217b92d6b13c89ca95bdd3fe49581281897a2765562f7b50b590126c6e48c75ade2ed3a5a42fad627de53ca789aece90b9505e2adfb79541aab1506a6053850b5864b5303b71705ab38a7668b1e0937650828a", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000181b0000", @ANYRES32=0x1, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x10000, 0x5, &(0x7f00000004c0)=""/5, 0x40f00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0x0, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x1, 0x1]}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x9, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000006c0)='syzkaller\x00', 0x7fffffff, 0x0, &(0x7f0000000700), 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x5, 0x3, 0xb83b, 0x4000000}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f00000007c0)=[0x1], &(0x7f0000000800)=[{0x4, 0x5, 0xe, 0x7}, {0x4, 0x2, 0x5, 0x7}, {0x3, 0x2, 0xf, 0x2}, {0x2, 0x2, 0x8, 0xb}, {0x1, 0x3, 0x1, 0x5}, {0x5, 0x5, 0x3, 0x3}, {0x1, 0x3, 0x7, 0x6}, {0x3, 0x1, 0x4, 0x2}, {0x5, 0x5, 0x1, 0xc}, {0x3, 0x1, 0xa, 0x5}]}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001340)={&(0x7f0000000980)=@delchain={0x888, 0x65, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x2, 0x8}, {0x5, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x8, 0xeb, 0x3a, 0x6}, {0x5, 0x4, 0x9, 0x2}, {0x1, 0x4, 0x9, 0x9}, {0x2, 0x1, 0x2, 0x6}, {0x3, 0xd, 0x84, 0xfffffff7}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FD={0x8, 0x6, r6}, @TCA_BPF_FD={0x8, 0x6, r7}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0x17}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x8}}, @filter_kind_options=@f_flow={{0x9}, {0x288, 0x2, [@TCA_FLOW_EMATCHES={0x264, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x4}, {0x0, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x98, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x1ff}, "55f5f12ceb55c0a60009295a8f86c5e1b22f3e8b50e067a7465d4d04c761b95f58bf94a15891bfb669ad0d143b42e3c105e4b86e815874e3438aae2120b3ac7931ba84605fa6c22114b7b99e1d60b5666ecdd9a3bbfc208229da6755ff3581d70d45372529cc1dee9c6d7556e2e3e65cf5046ede1049ded3ca8ea726ec73b77871661eb982696aa369ba7b57"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x4}, {0x0, 0x7, 0x9, 0x3, 0xf, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x4c, 0x3, 0x0, 0x0, {{0xa157}, "6a987a3b67505d7b8c2eae6649d79172ff5d5d23cc816811af990cfd9f7aa754d39476679eaa21a3d848106a5a56c4d3ff4772f81a551768301524f1795da9"}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x144, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xa, 0x7, 0xbffb}, {{0x3, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0x5}, {{0x2, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xd4, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xfffa}, "588b298431004333c415e1d8a9e6d588b6cad98ddc4922ed1eb36fb7ab56ca31353fa232653823ed5ab42059c3e2c2bbfe618ec470e05bef416229199eae238020c7d49e8a15cc2ba9edea0f2979403b6d3a33f6516ba41b9ee0e3cb63ba952c380bb9f792ba686449b9a94623aff473df5c17cb8e6454f7e6fd4d5339e2bebeca5ad0099bc1d201bee561a87ed434b2b8bf0243cb23c878069265b43cba592d19df6d4c77e02b7946fd19f6a169d80c234c69e529292f1be80f700139cade5975424c6ee3e6a0"}}, @TCF_EM_IPT={0x30, 0x3, 0x0, 0x0, {{0x800, 0x9, 0xd}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x19, 0x5, "ae1a12376b3c34acdac43570fedc0d5fe06ebea7ba"}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x4}, {{0x4, 0x0, 0x1}, {0x4}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x2b}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x3}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1195e}]}}, @TCA_RATE={0x6, 0x5, {0xd2, 0x7c}}, @TCA_CHAIN={0x8, 0xb, 0x3e180}, @TCA_CHAIN={0x8, 0xb, 0xb58}, @filter_kind_options=@f_fw={{0x7}, {0x530, 0x2, [@TCA_FW_POLICE={0x480, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0x4114, 0x6, 0x6, {0xf9, 0x1, 0x42c6, 0x4, 0x1, 0xfffffe01}, {0x5, 0x2, 0x6d2, 0x1, 0x2, 0xffffffc0}, 0x7ff, 0x0, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xab}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x401, 0x8, 0x7, 0xa3d3d7b6, 0xffff, 0x9, 0x3, 0x2, 0x3, 0xd27, 0x5, 0xc28, 0x4, 0x7, 0xcd, 0x6, 0xee1, 0xffff, 0x0, 0x7, 0x6, 0x1, 0x0, 0x1000, 0xc2, 0x4, 0x7, 0xfffffffc, 0x1f, 0xb79, 0x1, 0x0, 0x6, 0xc75, 0x3, 0xd, 0xfffffffe, 0xed, 0x4, 0x4, 0x4, 0xa, 0x10001, 0x3, 0x0, 0x5, 0x9294, 0x42c, 0x5, 0x883, 0x3, 0x4, 0x5, 0x401, 0x9, 0x5ef, 0x3, 0xffffffff, 0xff, 0x3, 0x9, 0xf, 0x807, 0x0, 0x3, 0xbb, 0x18000000, 0x9, 0x2, 0x4, 0x9, 0x1, 0x5, 0xbe4a, 0x10000, 0x8c6e, 0x200, 0x5, 0x8, 0x6, 0x7ff, 0x1, 0x7, 0x8, 0x8, 0x401, 0x6, 0x1, 0x16, 0xfffffffc, 0x1, 0x7, 0x0, 0x4, 0x6, 0xd553, 0x0, 0x7f, 0x6, 0x2, 0x101, 0x8, 0xe, 0xe18f, 0x9, 0x7, 0x9, 0x0, 0x1, 0x3, 0x7, 0xffffff37, 0x0, 0x0, 0x5, 0x4, 0x1, 0x10001, 0x2, 0x101, 0xc0f, 0x4, 0x6, 0x0, 0x0, 0x80, 0x493, 0x9, 0x6, 0x1, 0x5, 0x6, 0x2, 0x81, 0x1, 0x4, 0xf, 0x8001, 0x1, 0x205f, 0x1, 0x6, 0x4, 0x0, 0x2, 0x9, 0x9, 0x8, 0xe96a, 0xff, 0x9, 0x101, 0x100, 0x6, 0x3, 0x1, 0x9, 0x3, 0x7, 0x5, 0x3, 0x9, 0x7, 0x9, 0xc05, 0x8, 0xfffffffe, 0x1b44, 0xfffffffb, 0x80000000, 0x7, 0x7e, 0xe, 0x2ab0, 0x2994, 0x1, 0xffffffff, 0x3ff, 0x6, 0x3, 0xfffffffd, 0x1b, 0x8, 0x1, 0x8, 0x9, 0x516, 0x80000000, 0x6, 0x5, 0x401, 0x64, 0x7, 0x30, 0x0, 0x4, 0x1, 0x8, 0x9, 0x200, 0x7, 0x64, 0x1, 0xffffc5b9, 0x200, 0x7, 0x8, 0x0, 0xffff, 0x4, 0x101, 0x6, 0x4b8, 0x401, 0x9, 0x4, 0x0, 0x9, 0x572, 0x8, 0x4, 0x9, 0x80000001, 0x6, 0x38000, 0x3, 0x1ff, 0x6, 0x4, 0x80000000, 0x4, 0x8, 0x7, 0x6, 0x9a9, 0x7, 0x0, 0xc6, 0x7, 0x6, 0x100, 0x8, 0x3, 0x401, 0x8, 0x10000, 0x100, 0x7fff, 0x9, 0x100010b3, 0xfff, 0x8000, 0x9, 0x2]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xfff2}}, @TCA_FW_INDEV={0x14, 0x3, 'ip_vti0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xffff}, @TCA_FW_POLICE={0x88, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0xe59, 0x1000, 0x10001, {0x5c, 0x2, 0x59d, 0x0, 0x2, 0xd}, {0xff, 0x0, 0x1, 0x7ff, 0x4, 0xffffffff}, 0x7, 0x8, 0x5}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0xba}]}, 0x888}, 0x1, 0x0, 0x0, 0x24000004}, 0x40000091) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000280)={0x0, '\x00', {0x2}, 0x6}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0x10, 0x3, 0x0) r10 = socket(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="180010000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7cfcaf7e958530300000000000085000000720000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$qrtr(r10, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$xdp(r10, &(0x7f0000000080)={0x2d, 0x0, r12, 0x3e}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0xf1ffffff, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd6}}}}]}, 0x78}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002c00ed002bbd7000ffdbdf25077c0000100001800c00dd800800f400", @ANYRES32=r15, @ANYBLOB="080003"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc090) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000030605000000000000817404178774ad210ca16afbb900020000050100000073797a31000000000500010003000000"], 0x28}}, 0x14) 4.361853878s ago: executing program 3 (id=1299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000140)={'macsec0\x00', 0x7e0}) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff02000000000000000000000000000124206558"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r5, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x93800000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x28000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf18e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e3e2f3740b81f7726a86f4cd75ed15f"]) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x4c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x14, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xfffffffffffffd87, 0x1, "7b4f051a4746"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x120}}, 0x0) 4.120126189s ago: executing program 2 (id=1301): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000000400000008"], 0x48) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000300)=0xffffffff, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x8000}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x1}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000600)={{0x2, 0x4e22, @private=0xa010100}, {0x1, @random="9a964695f9f7"}, 0x14, {0x2, 0x4e22, @loopback}, 'dvmrp1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r7, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r4, &(0x7f00000001c0)="11eb0300", 0x4, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x4, 0x6, @multicast}, 0x14) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000f00000000000000", @ANYRES32=0x1, @ANYBLOB="010000000000001000"/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05000000010000000500"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) syz_genetlink_get_family_id$fou(&(0x7f0000000540), r6) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 4.119383293s ago: executing program 3 (id=1302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a01000000000000000000010000000900010073797a3000000000090002008b797a31000000001400038008000140000006000800024000000000140000001000010000000000000000000000000abbf297797f"], 0x68}, 0x1, 0x0, 0x0, 0x24000814}, 0x4000050) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005cc0)=[{0x0, 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 75:', @ANYRESHEX], 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000080), 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000002c0)='illinois', 0x8) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) getpeername$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0x0, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0xa, 0x10}, {0x3}, {0xb, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x3c}]}, 0x2c}}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000ff00f005020500120a0007003500281014000000190005407f0a4c6d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) 4.116392822s ago: executing program 4 (id=1303): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000880011801"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0, 0x96}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0xc, 0x7}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0x7, 0x8}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x172c5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0x7, 0x8}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x172c5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r9, 0x5421, 0x0) (async) ioctl$int_in(r9, 0x5421, 0x0) close(r8) (async) close(r8) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb602000008000000b70300000000000085000000050000001801000020696c250000000000202020db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b70300000000000085000000527774809500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb602000008000000b70300000000000085000000050000001801000020696c250000000000202020db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b70300000000000085000000527774809500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r10, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000600)="ab", 0x1}], 0x1}, 0x8014) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000000)="ad", 0x1) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000f20000000c000001010000000000000000000004000000004b9a"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x2}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x2}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000700000061117b000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000700000061117b000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 4.080989804s ago: executing program 1 (id=1304): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209000100ff017a31000000002c000000030a010100000000000000000a0000070900010073767a31000000001900030073797a2c0000000014000080dc298d", @ANYRES8=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x40004081}, 0x4000000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000010700000a44000000060a030400000000000000000a0000010900010073797a3100000000100004800c00018007000100727400000900020073797a32000000000500074062"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000002c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x2, 0x4e6, 0x4feb, 0x2, "3b1784a6b08081e6779852ae02c8ae53eb4d93db58ba60aa406f84584d572485ba172bdc729f32492cbf6aaed8de363e45e9bef94969244b0161d645338f429cd5a515c2843db7af13fbd3ccf91dd3fbc2b83a4110bb04f718b65dcce412594308707fcb7db6b61397c29f34502fe36b150ad20e80b090491f6a21cf673d5a84"}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000a00080000000000faffffffd40e0800000000000000691656344ab6ca913b83fbffffff0fc1566ee8aebf203e16d33e4bc3af3d13f63b1af504875b7a9d2ab656"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x56}, 0x94) 3.830174732s ago: executing program 1 (id=1307): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x100, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r3 = accept4(r0, 0x0, 0x0, 0x80800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0xfffffff9, 0x9df8, 0x5, 0xfffffffe}, {0x80000000, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x7ffe}, {0x9, 0x8001, 0x80, 0x7ff}, {0xc00, 0x23e, 0x10000, 0x2}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r3, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/17, 0x11}], 0x1}, 0x8}], 0x1, 0x2000, 0x0) 3.670919635s ago: executing program 2 (id=1308): bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000008000000000000000000000085000000200000009500000000000000fc20dffd86d333b0c4c61082817587aacba17224516358ff3d7d5d7a373aa6e75516acb11b5c429214b86f5fe1bf3001d546c0622b1b1d4852e7a7d4878b46401433759e14cc27a168f4523fc877d6e779a3f4094e4ce8df2c52aab1c5d71ff3b9048ceeeb38761b1aa3f1f73a849303229b13e1d2dc8ea91e7cd56fad0a15978d"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x64, '\x00', r0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000037c0)={0xe, 0x4, &(0x7f00000036c0)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000003200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 3.493465891s ago: executing program 2 (id=1309): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1005c, '\x00', 0x0, @fallback=0x24}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4001}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004081}, 0x40) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x17) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1d, 0x1c, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4781, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='GPL\x00', 0xb, 0xa9, &(0x7f0000000940)=""/169, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0xc, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000a80), &(0x7f0000000ac0)=[{0x2, 0x2, 0xa, 0x4}, {0x2, 0x4, 0xc, 0xa}, {0x5, 0x5, 0x0, 0x7}, {0x1, 0x3, 0xd, 0x1}, {0x4, 0x3, 0x6, 0x4}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x4, 0xe, 0x5}], 0x10, 0x6da5}, 0x94) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r1, r6, 0x13, 0x10, 0x0, @void, @value=r7}, 0x20) 3.293076499s ago: executing program 0 (id=1310): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r1, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000380)='syzkaller\x00', 0x4, 0xea, &(0x7f0000000fc0)=""/234}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x60938, 0x6093}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x51b}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) 3.244127262s ago: executing program 2 (id=1311): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x23, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000003700)=@nat={'nat\x00', 0x670, 0x5, 0x13b8, 0x0, 0x1a0, 0xffffffff, 0x1278, 0x0, 0x1320, 0x1320, 0xffffffff, 0x1320, 0x1320, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x14}, @gre_key=0xff, @gre_key=0x9}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x94, 0x0, 0x1}}, @common=@ttl={{0x28}, {0x1, 0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7d4, 0x4, 0x2939, 0x2}}}, {{@uncond, 0x0, 0x10a0, 0x10d8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0xcf, {0x6}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @multicast2, @multicast2, @icmp_id=0x65, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @empty, @private=0xa010101, @icmp_id=0x64, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1418) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x226840, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0xe, r4, 0x0, r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a00000000000000000a000000040007000000000000000000"], 0x20}}, 0x0) 3.07590208s ago: executing program 1 (id=1312): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r1, &(0x7f0000002ec0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @dev={0xac, 0x14, 0x14, 0x29}}}}], 0x20}}], 0x1, 0x40800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001900)={'ip6gre0\x00', &(0x7f0000001880)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x6, 0xb, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0xa}, 0x0, 0x7800, 0x0, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'erspan0\x00', &(0x7f0000001940)={'erspan0\x00', 0x0, 0x20, 0x8, 0xfffffffb, 0x8, {{0x18, 0x4, 0x1, 0x7, 0x60, 0x65, 0x0, 0x1d, 0x4, 0x0, @remote, @remote, {[@lsrr={0x83, 0xb, 0x5b, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x1c, 0x9e, 0x0, 0x3, [0x9, 0x6, 0x2, 0x3, 0x8, 0x2bc4]}, @lsrr={0x83, 0x13, 0x1c, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x39}]}, @lsrr={0x83, 0xf, 0x37, [@remote, @broadcast, @empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a00)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="56f01d69f607b81336e3d154c9ec8b226ce290a6580b9e", 0x17}], 0x1}, 0x4080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000002c0)={'dummy0\x00', @random="0100"}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001ac0)={'ip6_vti0\x00', &(0x7f0000001a40)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x4, 0x6, 0x14, @local, @private1, 0x700, 0x40, 0x0, 0xe9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000050c0)={'ip6_vti0\x00', &(0x7f0000005040)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x2, 0x8, 0x1, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x80, 0xb, 0x1000}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000005100), &(0x7f0000005140)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000005500)={@mcast2}, &(0x7f0000005540)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000079c0)) getpeername$packet(0xffffffffffffffff, &(0x7f0000007a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000007a40)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f000000a940)={'ip6gre0\x00', &(0x7f000000a8c0)={'syztnl0\x00', 0x0, 0x2f, 0x10, 0xf, 0x0, 0xb2c781be1296adef, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x40, 0x700, 0x400, 0x3}}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)) r5 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x18, r7, 0x1, 0x81}, 0x14) 2.965791919s ago: executing program 3 (id=1313): ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x8001) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x2, 'veth1_to_team\x00', {0x81}, 0x4}) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0xfffffc00, @local, 0x8}, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}], 0x38) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x138, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x121, 0x7f, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @tim={0x5, 0xf4, {0x4, 0x73, 0x8, "8e40ed8c2aaa5e47ac7c3e002f16c696321b2c4436fea6fcb4701b973283ec4654e4f9f9fbbc594349790145b0a4d4e0b3e081922c0001675d46df92a8722a865b9861d1aa91c1c0a169a7d8c53bd506857c632e6b32ef7df7901fc05146964af9f236a706545aee652c1f228cd36098d157f2c3a58cef815ba265f3a25b2dfba3cdfde115c8f6d8375a0fe0945e48905b769a4683b79e618089d07982c2ed785f00c211e75fea8594f10a831490669ce3e2ba0a21c72fa818de72120abc8775788f6243828ca1db6df16712339b838bf8bd171a3e87f2dc002514bcfc2a8a942b655f383394163c4d33a5f29e71fd9c44"}}, @prep={0x83, 0x1f, {{}, 0x40, 0x9, @device_b, 0xad, @void, 0xe38d, 0x9, @device_b, 0x4}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x30}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x63, "901596a0fbcd00ebfa82bf6893a40e52439fa858d2bac50989d230313971210157cce4fecf0be4195e91cb210fd36a643bafd2e4880357cb67dc5c1627cd28c3b3ca47bb3a13c2a8b9994d2edc68777eeaea4c540a274d1ebd03ff74d384d7482c700f"}, &(0x7f00000003c0)=0x6b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000400)={r6}, 0x8) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r2) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r7, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x85}, 0x10) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000005c0)="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", 0x1000) (async) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r4, 0x40109441, &(0x7f00000015c0)={0xac, 0x0, 0x7}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000810}, 0x40000) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001740), r4) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000001b40)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b00)={&(0x7f0000001780)={0x36c, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff7b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d251272}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc6}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff3d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9319}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}]}, @TIPC_NLA_NODE={0x174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf1, 0x3, "fd6e3e83447e7d2a8e59da056ea3a85c328745d6deab06adc7a6e1e576dca140c6073f4acd43864cff9a0f5c82fb7d0cd018d76f664099f0792adc1936273166feb79d10576a7ee139ca7f5f78b7450fd5965b54bcd790bcfaf28c7e47f387b170d9620344b13c071a6345fd850ca52cc5a772c0fc65bd384dbcde2d68809480cc650f788a693faef4925168b78f016a6216867352de5bcea26245c4b32d0e02677067f3b652b6addb298866673a67ffc3a51b8886c4fa433104453922cb8af1ee33706100fe12e226a0a85eed7439e090f95bae9f1b8b34260f8650975f9c1f0b056069ac024250b9ccdd3122"}, @TIPC_NLA_NODE_ID={0x36, 0x3, "3997cecdc5308a6e9fd5ea020b85dd9c1eca598367703b6c0deba0243cf6fef41b8098dd0722493efdf81fe5360f4d9e46fb"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "cca60335a98d7d258555df230d4720ff45150fc05fa9989d97"}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x1}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x70, r3, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xeee8, 0x75}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0xc8b0}, 0x20000080) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x64, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x20000841) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e40), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000001e80)={'netpci0\x00', 0x1000}) (async) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000001ec0)={0xffffffffffffffff}) setsockopt$CAIFSO_REQ_PARAM(r11, 0x116, 0x80, &(0x7f0000001f40)="ad0e832b3b65ad6ab811ffda64fa4294be02c874bdbc08c5aac3ed5032786845b388cc093e60f7a634ee8777d4c80a7a11ddb1410e2132bcae2145d12fdf3a5093ed7135094401aa5f1e893d54a86ca35641e8679f841c81415d85b04f05d03f3eadb1cd65692674f1e166dcb06639830d0ccbdc76b93e79c8566f5f3096cb3745092865af2c2b55cf9aa5c3203388ac2c42e87c4589e078dba10d2537ea13d330ee337ab0", 0xa5) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002100)={&(0x7f0000002040)={0xb4, 0x2, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5f9}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3051}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0xfffffffb, 0x9, 0x8001, 0x7, 0x8, 0x3, 0x5, 0xb]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) getpeername$inet6(0xffffffffffffffff, &(0x7f0000002180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000021c0)=0x1c) 2.965381283s ago: executing program 0 (id=1314): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000180)={0xff}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) 2.683575195s ago: executing program 0 (id=1315): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4010}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffff1f, 0x1}}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) accept4(r4, &(0x7f0000000240)=@un=@abs, &(0x7f00000002c0)=0x80, 0x800) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r8, &(0x7f0000000300)="9abbda35d2402d85f36b0903230cf08c238c6bb2cf9346f6fdb9022112e40af30ebc8c4925b1cf572fc2497217ee40aa1ba2df1f5428c5d0240a7d053a8a802f69dfe04400e163a882ead138574a5e3302629ee629d8dc6593f84b565471d41f91936c8640b48976", 0x68, 0x4000080, &(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0xffffffffffffffe4) 2.681887703s ago: executing program 2 (id=1316): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000003000000000000100004800800010003000000000000000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x40, 0x8, 0x1, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x1, 0x4, 0x2}}) sendmmsg(r0, &(0x7f0000004ec0)=[{{&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x1, 0x3, 0x4}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)="075f6784e61dff91b48070157fb8940d8f7f3cfb1da8baef44f42b58f2b4bc61b979bd010389c63448420eb1311b4a8992ee0175b1975a63a631bcaac966d77a75440385b81eeae3d658aaaefd80a1f0df269fad7a86b49e25be224d8944c4e2eb8ad681dede0174d172d2cf0dd154b85cca638f8fd6f999a66fd9b22329e6baf0f88d6e4761d0d46cd9f4eb5e", 0x8d}, {&(0x7f0000000680)="f6c3757c5b781aeb6f4f58b37ea273373b86bc3d3763241f5f1fbb1d695de34d6ec07ad75e3dcf258ea399df9eb338958d3f2818a46b0e8e3a463613b72561ddb2b8bfa6a11c3397b55ddb44d2eb762eff15fa44bc369fd0bfe3587885176b3cf9e6830ab1ef0eb40ab138c9543cb52b1e636e4a6d3c0328f18aa7381515c251a9528be4625867ea7bfa9c323252d4aa522dd18da9fdaa77e485a39c1f2274e20b4b35d61eabdab4b26c7d5dccce8604ae3e0d6980b973887a181fc37c3263a19250b98dcc3c52ebaf51e5381f2e2cf2", 0xd0}], 0x2, &(0x7f0000000a80)=[{0x28, 0x110, 0x8, "f52c391a914fc556791f75692582b4a4ce3a"}, {0x40, 0x6, 0xfffffffe, "a82b2b4e245bbf80e926edb4fc4673e145b5507f790c997c2dd1f7179f8728f2e34fd305c8bce4b42801"}, {0xb8, 0x10c, 0xfffffffa, "40a068d73da11f174adcf9ca4d892fe228ac23a3ad8471d21ec4ac7f2e947e8067d71c9c697f375d58cffb273f53935bd8e35e82a8b85d17ef04a40dac9707656083cfb2dec8a1ee4f1cdc9cb02aae0c9d67a8892b99572ec9b32594101d6e54d0b6ee9408aeee75672fc5a5079427b7db84b21d6aa0b3762173c91d6df7e0350031b5e646d99c2cb795db9393eb8a3180cc2a09fbcb610c3d56c26fbf6b00f9d5a0abcb"}, {0x20, 0x102, 0xfffff001, "a45fe547a4702ceb80d0"}, {0x98, 0x29, 0x18d, "d0a7846f0c4793cfb0b573b51c12a39f76f9020123a17051aa13dd6bcdfd465fab43f3823595771e26862030ccf6b53aec106db6c63b5edb4a9bc3b59dd2c04dd266001bfd4fafb033cf766271e310f9ca6d05e0853d82bd516f0ef378195d65bd7d8d76502458f3fdc2503788d9cf9011d7726f5f7bda4f980f4782a208d819345862885b1a58"}, {0xe0, 0x118, 0x1, "edd015323d6ad62442d3b71766df8d4280d88672c2d62efb71d3212bbd0cc9b9391b3bd406a921fb98bb51ee29840befa78b345a67de6440b220c39b518bd5f60cd190bfb24ff97bed082d31ed560945536b85c068bd8bde37f913b64901085299b8c45e8de942aeb4a20a5c2c2a14c90ba244ef3ef0c1894ce77e0c367a16e59d750b73ba85a039306ee73d972ac263f22b66a3b5f22adf764f30577c4e2b97cb7120741ba4fed651df80adcd8a43553ce158c9bc6797f6dcea890c17f136b6f7e9b4c0cb8ab48c8e89e2d354ae"}, {0x40, 0x33, 0x0, "9f7856b904bbc243654496344c3748d01d0a3148fc9d556da8bf9822a596fd40f784b617c7b71d9f6220928348e5"}, {0x30, 0x104, 0x9, "f0433d05180e3da1631b6499b4615b8f676181055a1a640a4b40"}, {0xf8, 0x108, 0x8, "0f64ff8c3d40daf2d2a882bb6dbeec60247734c7881c1fbc6ae77ba32fbd8e42cccc01c1a4be6938173fbf588545c4c761d10cab10a34b889228103cd073f1f33e332e57a96231acc13009f6fdec066c63396ab29fa468182662ebd1a3afc7cb8a421d37c39db591877faddbe53daea3353627241dfa76c3254a15fd556f95d49a346e97a59fc2dd3b66f5fc539b3a69ff44a6f576f4243998f63ad37c250cf15a3d2532278bc2e7cd21f8d83eedc4ebadabbd18e4d9656626ba81fda1418e31f702d51a916bdd9849189aa41d58f368990708e050f14e241da73d5a221f7201923c5d9a99eff6"}], 0x420}}, {{&(0x7f0000000ec0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000f40)="c0d669b7fa904cddbc6ce26575cb721b105225e409fea8ae3c6cf7780ec7c2e8dbc02644", 0x24}, {&(0x7f0000000f80)="dc8e9aa7165ea095f0593e795db80016eef7becd6e78a2535313c602a7415d83b3bf362f1b92f313c783781a34b3a31302ce7f", 0x33}, {&(0x7f0000000fc0)="3d7e52efbb45f668f474916b5709a8e9bb83ab22538f2e8effc49df96739cbef4f494bdd3bc428eb62454093534e31c381666a3953ed17f9e1bc1841a511bc845f5346daaf82f3d46ad7e6813d1f39571765ff99f0c5a704", 0x58}, {&(0x7f0000001040)="94a28153228d59ed95137c3cc315cb2d588ba3282fa2487e843d6539376a1c800fec0cc822d481fdd8662ed1e482f17bdb5c8f9187433b4fb311bcff9b445ac81d8ab13dc8943e222c1fc9d871bbf1777e368fc7ad31f6cd67251bffeb47c895aeda7714ae7169c789b811be07af95a5ee33f1ae8fd57fe0883de1b8c82b14b41817d2a5684ea09c0b49", 0x8a}, {&(0x7f0000001100)="d10e538f5bda32082c03aee27b2884ac9c78e7bd0b76a22b26a84a94e645591cc308128e0bc0bd722be6000d5d7a32578d6ba859f473296454a2ff4e52101d715acbc55e9e26a203068e08a4638089f04d3452eca3f69ab956aa77a60ac7df0a3815", 0x62}, {&(0x7f0000001180)="074268458f5d3dd89c896038a4429821e187527e7950d13c9f8c728ec55ec1573f37e4aa0c06c97b502bdff94cf252758519eb55ec5d7cdaadfb0ed29f8b18b48bcea65e3b76fa2c02693ae4c698705151b4cb1f3975223037c9f1f68280fb4415732596b636fa6a0c8ec41e66ae906210f52dd3ec78cb0966a931e3499db03f4654acf789046ca6110526a0b69d863f2540d2ad7dbd3aaa5d53ba5a67724eb207c82048b3f0c87f2dc3b8b820a56a004f076e1351c3854b332215f9793453a071eb6e9e42b89db9cb4f57c471447f8684ce853514c1c033a15e618a69fa43000ad2c9fa44fc3ec8afc91d", 0xeb}, {&(0x7f0000001280)="842c0d9e445759a1cfa70ac2e67300f4881bbf898ecd1d2eefc03f7b831e3ae46b536a6080e6977f1983cf047dd5ca0f99a2c9cb43d5299ca4606b2d8b362cbfc6fa232e862df6ea428da43c8d253adf45a1a7499a52bf26b16af2a6ddcbeae1302971102dfaa415267c20d7d412ca48d5908ba9cb301fd265e7d73b4c328017237c9738007e834c4a77a7d0a48f4cbe39338a3f98765270b630439e144d64598abc0869282df5626b9b77f687181c92fa15d0ac830efc31cef7aaf898152385fcfff0", 0xc3}], 0x7, &(0x7f0000001400)=[{0x110, 0x107, 0xd698, "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"}, {0x1010, 0x114, 0x6, "1bbde557c001ebf0f5d125ddacc2504a7c02b47b3f67561e6116e6dcd27283b49e72b58af09f9eb107c122c250475cf5a7c4f1e98d3419dec6bcd45a5ecf738438cabbd146d86e65cc281c0c8b87501a40b0d893ae5e71ea2d89f2efb56bdf847220b0d0b14f74f99612a028a8d97ef217b1fbe3c1230fe0942864e214419e7e9c64d1197fb76a8ae27d8eb605415785fd088ab6ff4141c6ca2ebd72b8266ff4cc1b18d621ae3798ecc1ee3d7165bcc78356da88ee0533825bb351e225517b33ff80f6d1573c929139a9d8f8c7da6cd82fac04cfc740db09e7c854ab86393d09091d5b9509a57f25b8a96b79cb6cae44d9c4a497861d6ff595cceb90e9053a410dce6f32b89a624a7394ea60e0dcf3edc4aa09a391f48b2b886c239593dd06ef5fc9660d05fc6fbf478f0b48476de9793cb78e478405704a3516bd539148f1558dbce877e68c24e93c2526b56af0261202e1fa59ad41a06c9e320ad5f62cd26f841e3fffa37913904804efbe6164e3b2825f8a10492284889e9b273d2849c5e87c8eef7df6d7c98201ffbfb429d4c1b019c940a938de167f552a83cad3fd6d0ee45b6349b6fe002c7601466f87ed41cb33584de1c64cbf142453a89319051ae3586dd4fd8dfcd061a14288c9d0dad058bb567c822f43dab8c74edf73458af10062f1232b52047c3ca82b92b9dbff823ae8fbd3b7614212597c76014d678e722f54521907013d364c1cdb4ddba0ef79840c1f5fb1a11b4ede2d811a37277c7e7ab7b52ca8d8504002bf0d40f2e0f609586013a2e31b1b871f86ab33fbd7b4729b548a681c2bd0cf0c16f399dbb696088d44a8510641f8ff394f50ba8c00871142cfe739bb5b9931963dc40fb69846774e71389a7f67f99874a72fe1c130e418812438e97ab0e7d48b49c05d7884843f6dad6d777cb10fb68f3fd65a1e849d59f97bd59b8682a743e3a872360f512417aebebcef11a727e82db569f1fbda6671b3ece329fe313a465626c57c506d98f73294535195219cdd658a05249c0a6f596cbc8c70fc3999cebc365504e5b59d10ee08eda8236c94cb476a669e4ae04bf44f5501d2f46698daff1b6ab372b22455f6852edb070c34bf92ff6dbd732c1b22790403f1b6ee33ad8887057ae1129454ae27bc84f3e8b35928cb14b8c72c1d001275bca9ac899a4140c8f224ff6785f94b5ff921ee3a9ac565d9018383e1f0d8165bb3da0aa1a34373ce3ab09b68f374d6ecd88bcaafe7c4b9026159a2949e36d618d845a07bd7b8df03b378282f195e5439b3806e8021310aa10714eec075dacd2995e55d09d5f8f2b4658bc40fabaf5bdb752f48c72313e215b2472c3b23949ccdfebc928bbab83132a427525fbe19f41276f47321b5c2e4f14e02a49a328074c184d0476dea1fde6449ba4e71cc1f7336fd36a9da501924e6b91fd8e222abf44a6b365e216dc14149b0d52538211728a8a3e3984125acff52c3fdcd78cd07ae64592c6804dd9660d488378e4dfc73decf808520fac8eb74d66779bf6c0394b7a04be7d7f865ef02535dcd94c6af57e90e48730aee9bf4bdb6c9408b8edab44e9e7900222b70e7e24127dc23725b74e435ba657b25f08170f5e871d817e76e2c8b1981631af0e984c643543a999df797eababb61bb03f63f8b37ae4fdda1b5b2dfa1cfac3e502e47fe3be2ca85c9021e757b9c2656090f48426ef18c4c20ed7f4314308ae2f8b951a62469df73b37205d5677d238b232f606013665737783f3e2dfcf1a45af6410ca44fc68629daa02de13801825623795eb4be683eebcac59a48d183b8501e33c2961cc971fdfad16ab1397dde860a9a76ab3aacb08ca9d5030bd2a114d3877cd3c5cf146a6570009b02b5ef4d04e1422066f92542fda769306b407cbfbac98422c9db4c2e5d7cf29da4486e546bc3ac5a68f2a8aee0bbffadeae03ddaa3c99a0f276a3cf3afe3d1397d79800d57eb02e650fe9a093f95d478e7267153aed37809766fca836c6b9595e9100d69177318b4987f0a80589aaf6c53936744fbfd43be32af3616d4d6ed15ab0190094604b6074882bfc4ba5edf5ed250853dca997ddd83f30a5a80c1f6da58cfdedf71a7b2bcb200c7fd7ea9898ade1b07f9fa44033213d83b957195cd79f1ad6a72c58c00e313b83e86fc03a7c9c2c6960a574f162dc3408377ea9b26a110771a4bdc64004875de49059591969e696dcc09993f3bcc1bd28d0c6ea59ee87a0045c3c9966b6d21c774af9de6e4c120d3fd5c3823bfa66a2047960e1d1a9f2da2e9560fd3ed6bdce9b42e5109713c08dba68fc12c05f50a3e17e0d0f7e3a750cd787eff50c9edd32538b4c1b7923593a9e184eaed4cd76e878de806b274a4f96d476c1c9a474f70ef2f3687002335e0d0e705cf07766c126613d12fb083bdb5c79e55e0f0bafa88723bc4f189258c8eac24bb7a2ee7f72f25a6321f2e42151838ccab2d4b0a72c5f4cb2141eeed82f3d933f8cf5a2b79ff073b619b754074459a7cc3fcf0848e69c22719372647ac1ac159a9c3f3d4fe1ef683c34fff221d445feded146698599cb5cccf97d71a6ab54101fc4495b6a76ddfbdbcb807966c05e690582cc89f9be0822ac484aee3cbe46ca4a0b90aa210bde74e9d893d13c6fa21555480b1827465d25f3261d4b86270b15b3a7442968488a55bb1292273227686ba2c9a5ca3b030b7efa38aa6fbef79f2e24b057c238ebde8909e24c15395eb82f7e6662c0eb2d093c98a8f6fe3e0e4762c0136a1bd112abc1d8cb3799ec77d4f2453c97b61df5eba15f38c2e5d6e9ef2a1421f7b00e265c466eba8c2c3a2050fb97ba77d1437f6c92ee5c8f4a72a3c8a8b7b7ea65580e18f78388dd684d69300434a6ce80fc4f80a8793fb4be19408acdf78c03fafb73ea0d8fcf0253cf3aeabcba0ad79fb1d81debb3d212f5df56dca9cb78791431b4ca6104d908eb2723a932172a3f75168a835dc3c66429175870ddf8a9c30fbb2731c179b5a5228d5794fde6a2cbaedb6c9fb6e4ba13107d68d912cada497df46b5e84949ce8875c8da8bfd379f758b0b62d1aaf042c0c0dc8f428f546cd529bf82bec35e48298e76efbeb5abe271e9455531972d8409837369e8df2f0a25d379d3182ad8a7a90f1082cecc3bd5230c99fbdeeb6e9525b6a6a324dee680ce716c1e759be5eb6fd6ae3c1671a192e868d3079d7927a23bf8574be793a469f35483bf83b234983c98a19783f6a716c5f5c56f11c60039b00c65a77b061252e354222a0bdbb7437f09975ba602bf687b3a37297a65ca8615b1ca9fd26646ce95712a422710da6c6444762d3a75ca039103091018c8513b7e11a54b6d8cf1cdcf705170e49678b1a6b6d70f03d0dc7b21bf65759b354ec2a1ff4397d2f8a25d01b90cac4cbebd4ac44e4b357a7e40133cf07bfb81b7e121e8f22b0adb8742cc551df9ea208d62f8d92cc6c3209abc1d0b710941ad83480d2cf473e2945f6fb68482a62ca4cf216b97cf7d94be3c60e08c9a384c324a8bac600c80c2dd08417e6ba8943e568f149109472d2d5e517942247ea2230d19268be75e50a11e62771db67626bc973b9ee8f5d0e4da43cef9d178a62416890d41a47b1c7d17c4852c48d3d620828d9d7a7ad7788ab4cccecf8eb3c2b2dc3fff67e6a1eda78afde9213a685d9ffc90650e8d49b7b6d9594e0ec3e3cc67f4710cd8cf148f8001b9b5f3705812e59989505528c054a4a68fb8f9d9dd93685bf77792c3933bbf84ee7c911c2ad8fe054d972573fe94adee6273a61b581f3aeb678ae0eca8b9bc16d23206d157583d220bcf4870d35a2cbf2b4e2b391ebec62ec75df4a48a4eb3d3a3aa37ec19bee4255948dd9a35016dc2c1fe8b29a43a4ca29aef7052726e5c0fc06ce1f7bfd24f21967b19142228e60bbf14a7b709770b65e947d2d551e6d76fbcb3bd4e6ce30160e66c624f195e4e0e56ca44e807fbcc5754c5bfa76b683acdb972d81fa5f1793c4061b5eab48b9e4be4ff5a50556cd2fe6dfc339f307d1cae93b24f9d0020e0287825ead7bc502abefb9f7b09a33c643c75b7074985a1039d6dfdb70117668ceaa6a6a41568b52703f861cbb9651d82f65f8989063425fc1fada10adc2dffbd7336afbb12cc2b966586aee40c566102786b171d3b24c9348054a8413b8c836261fb42f745311fe6f68b9c3597d5606956ea5d0ac68179a69a4b1c1cfaa96f2eaac53f0e9a5b615eb7a47f2658ac7e337f5ba70b7f99789940ba635c8de2b1e79960583a34a0bea3d78d017f1de83bced1d8789c01074d33c29301e1fcd502622bf34c3fab0117a9f70a78d0c8bf7525aee32f798e448d40e26dc680c96bae28702675315777e9fdf90a1a5365badd3eab87cc0d15f7344e7c53267dc6f9e9ab288e828d3ce75daa7aff0cf5731ca243ee419eb0d2350cf1482072bc3280caf8fc7813a0fd1a6a7b476c67ce30a73c7c15f7e74a1f32e5cdeb8925aa9f9085a00f94da04607ebed9c8ee7c30be9fe0dcfd739e955cff74b5944ea8e94d69f55d92de79a467f2dba28dce636c2408f477d36ed4110cd4b1209fac7f0c8daabaf9f2a64085cb1b2520355245f5f98d12ca26225703a2d51ae54d33359c5031aa848117801b09144666fbb3617fb5ac1c9c4e234145e3ee5dd5750993d2d676265edaa020e8705c340c5e11be3bffba9c312988e7f1c9f9b5eb4da24165e987a49b7ef7c0c9ae90b24f02e0f9ef2504b750c36097c8a4c5d4f8bd65eb12133809fed427a0e12f3ede400d90fbde873e044f95706057df23becd672ebd5a61571e032a5ba3eeca30841b4813655bc42e4c214cc137bb0c66543734ba448774212178bd77add2feabd130b1ebe376ff0c62840d0cc77934de9a6d6c7b3d1a31de800854235d7552ac2a32b033cab28d89ce31d349e5c22a08f679108a8664838a94de1e7912ea79c2fbb51800783872ab2cb1597c3046baf01745cdd75d2223f84b8601d5dd6ad0cd6c806cfb1841f2b23323ef9934bc40d248c7bba4f59d0c380e7e98911b867602d45360123e2ba837df7c4837abe669e902ce577a2db8e46fe947f66997824c2b576d8fcdc89a1168ba24f626023f622629f20a663c87d1d6eb51b11b9bcc696369ab86bfe409fa4f06dad74cc4a2e87d71a0d30f71f7b48aa03043e1af0b59f7cdb5d7dfff861ad77dcce659d43232577166890e942fc67256bd48c2f28f32f5634d414f0daa41525fcc008a85c3c933f94d84d869aa6fe8b88b13909a04609289156d7871b137d3226f4af3d32fab5f9e725322f0fd325781caa9e7e9e3dc94833de57759b60cbf07aad606c4321c5f8fe63e3eab17c8f84b3c45338091c579c9df334a081bc204d548f99f6b3a69448201cf14e565abe710c601683d9bae1b75d5951e1019a500b0e2ec6da2275a27237400df1fccd66330d22289bd76028f0938219d702745f73a0f694e6d3a586710a5a1c56919ccbcec3c3b77420c54a98c25a66be6f134ee723a74f2607ebac638dfb41a91bb7f21ade17af83434fe1c89d0b2914b71b250bbcab92ad279050ee21a571945e80dbe72fbc4a72382c2e4a7734783fdb9337ec31a1ee08a965407ee21b22c6121e24a5134f4a16bb502a77307dd7fb6f0e974384dfb74e879271f60f0432ad3d30855d74ccaede19e5f2f7be686b97eb42c7f79ce8be1a2f54931ccb8f72afecdd82d38c42183d8c3deed8f41d222b4aa242b7d59480dadb56f60e6365b706439f9420c296b5615bee7947733349ac673ee7919e30fe72a68a4a59585"}, {0x110, 0x10b, 0x2, "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"}], 0x1230}}, {{&(0x7f0000002640)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x3, 0x0, 0x1, 0x3}}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003880)="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", 0x1000}, {&(0x7f0000004880)="6f76028ce88f5f3f606018116c66cd4dae28cb348c6227a81200e0c6d1a3763b5df458df3781f16b655192637d32d9db51cd909d31c8e3368d1428202b40a72f3b5bc292396d5708e95cdd2e7762bbe827efcc728e7e169251a0ff873fc0f303cd482f0785dc7183d501fb2113ef78ed165482e4ce5443bbbab2cf6a2bec0f573a538a8c25d886c4f57c2e20eb838b7b5611dc17ad231aaaff3031c93cbccf8827e807b56fef39ae0ee0ca5fb5594bff5bf8e348209f10413632a024102dc3caf70f60dd338c104c3b92c12dbde11324636079b7f38f7a27a39afa77fa4b3c05b68f04b171ac17c875e8", 0xea}, {&(0x7f0000004980)="f1512739a857865c4ae2847358f8a6", 0xf}, {&(0x7f00000049c0)="f26f6563675610e0a611b72f71dd19047849936116cc0a39a0e51a0ceff30bd7006b0fd3769cc123e67ac6b209ac95fef2ac17ff315b751fd59431404ec8a0a9fab4502448fa5bb147b6aa7b2f16ebed03e39b5a8c5c19d95dd724e778b5cc597c88", 0x62}, {&(0x7f0000004a40)="7f41527ee1cb6538a287ac4de099f127496e8a548f7bd932191b0587bbccf842a0864859780fddbdd2fbb914ab4e9a95e3ec86699acaf484f472a772673e46c1e3455ab5c61ccca0926abbd73dcfe3e9c88dbcc53ea5ef98b4f6d209f79b8734aad0beff7ffda4239eb06998ee285aca2a72700c0db9733f1768bc98cef94a2811dd9fd7747487ca272371fe6b159534db66b7010fe4e1ebf163824e708b0ac224c901df5699cf6658e3f6bc79a8656d", 0xb0}, {&(0x7f0000004b00)="af56c29f231a", 0x6}, {&(0x7f0000004b40)="1e75bc6484bb9b44679cf3d3", 0xc}, {&(0x7f0000004b80)="d653a60adc7cdab8aecc76cdded9b6420f6d79a5f8ace0b7b934dca00d230226e5f5677d23482ae810607b815924e1d55c79e528431cbb583abdef3553de821907a454f17c13a7e9647ec29137db19c30942397928a83adaefa621de5764f3f757544c692a0a84bcd56da02f09fe792bf56f6de1d3033af470c678f86be7b05ace6233b1d540f9d7ab55c5a40b60866d88206cd768c5391091c639c702872ce4e95e7a7f5688ee8b79b24e67d010ad08a4ec78b57fa2b13765893bd95ec2a3e312aaaa10f74b2b889e08a53dc487f6ac98e673cb05231515c6e1da4497443d63dd4654d32a61340b3812f7bee0941bad", 0xf0}], 0x8, &(0x7f0000004d00)=[{0x70, 0x29, 0x6, "052d40e76d972caff4ffe23fde6213ee1ffe78a76657587b8894a22d977d2cddcf2bdd7bb8c50002438f652b122c834b2185f4964a59ced33328d1fac890ed5e7228591ff0dbfbf44d555b3d54cadf295eb683841677cb8d3d368e63"}, {0x58, 0x10b, 0x3, "6bd49ec7106e21e670a7f70dedaba779956486bccb727fe8cf46f4eb7d0f91cafa3decdd97cc94adf1ad38402ce38b52e331179278b977bbfe46930dd34e221194"}, {0xc8, 0xff, 0x4d, "a0b557bc20ddd04704898f0c3acbcac2b3f2870e986c291ad22f7dc0cdd069154b51f06cf43ca6e14ebad445d02f43ceea68ca5c9392dfdb536cd172f88e17475a79ce887efb1f348a35b71b5d91feb49b1626a4b10c6996eafbb55708c4c1c60ee1b8bf3d8d93d657b4662d3a1190fde4bcfc8b34e14096b11179681e4152794d06c28724cc446fbbc5e292db2e17426e3eb0c648643ad828bc68b3077af6347894ad4080afe999c3da489ea19d4f8cd62b20"}], 0x190}}], 0x3, 0x40000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x10, 0x8000, 0xfffffffa, 0xff, {{0xa, 0x4, 0x2, 0x17, 0x28, 0x68, 0x0, 0x4, 0x4, 0x0, @broadcast, @remote, {[@noop, @end, @generic={0x89, 0xf, "5ca23973a9db9601ff367f2591"}]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r11 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r11, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r7, r7, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYRESHEX=r4, @ANYRESDEC=r6], 0x20) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa8, r3, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x84}, 0xc010) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, [0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x2]}}) unshare(0x6a040000) syz_genetlink_get_family_id$nl80211(0x0, r0) 2.675941031s ago: executing program 3 (id=1317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_batadv\x00'}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, r3, 0x1, 0x70bd26, 0x25dfdffc}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x24004004) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}]}, 0x3c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000077c0)={'tunl0\x00', &(0x7f0000007740)={'gre0\x00', 0x0, 0x40, 0x8, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x66, 0x0, 0x1a, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x40, 0x107, 0x70bd25, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x2}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, @typed={0x8, 0x8b, 0x0, 0x0, @fd=r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x0) 2.656670334s ago: executing program 1 (id=1318): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x80, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_EMATCHES={0x4c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x4c2}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1fde, 0x3, 0x5}, {0x6, 0x2, 0x2}}}, @TCF_EM_IPT={0x58, 0x3, 0x0, 0x0, {{0x6, 0x9, 0x6}}}]}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa9a923c4b5167275}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="210000006a0000012bd37000fbdbdf25020004000000005b65e926c3933cca3346a86ad1a4089576616d0e551388039b66a5b3bcf2015897143027f515c6c9566f4b420fda24c8869cc395c0c87fd216e891ff680fc20ae97a66ffc4c95d4a8d99c037c1de1c9e7ffa69e289222b7048910527728de31d8579efc92ba0d6b4752a9cf9d57d0bc34c61997d472d92049f3a2b077da2c0cbdd711c22b8cba99d976251978861512aa9f8f662a576"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x80108906, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000140)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES64=r5, @ANYBLOB="cd1403863683a4bbf64c1f6de618a984eef9e69c9d1a8ad6acdff128e64271b251e8e6999ecc6a7050c75ed9fb2c58be8ed3beb180cd8a847f9e13f29e4ff18be74301509fc7dbf5e66dc333e1e51ee87597c2ef1f3339617f5639c78ba97a5fbe7c6b8c0fb8546a4e8019ebbd2f03d882b03b5083a8162ac1253a4f11b94a7dba2b1199ee3ef797e111b8d096c0c2fc79ce59702f7beae699321f82"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8040) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'nr0\x00'}) 2.427561213s ago: executing program 0 (id=1319): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r0, 0x0, 0xfffffffffffffee9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, &(0x7f0000000240)="d8000000d317697e00", 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r2) sendto$inet6(r2, 0x0, 0x0, 0x40851, 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$alg(r1, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x7, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0xfffffffe}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0xffff8001, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x3, 0x2}, 0x50) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="6a0ac4ff0000000071105b000000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r6 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) 2.30636832s ago: executing program 3 (id=1320): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) listen(0xffffffffffffffff, 0x568) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES8=r0, @ANYBLOB, @ANYRES8=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB="2c0000001a190100030000000000000002140000fe0000010000000006001d001eed5ce0d59e4c15f0934dff"], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r8, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x34000}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0x9, 0x2, 0xd}}], 0x38, 0x4008000}, 0x28008841) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000c40), 0x10}, 0x94) 2.012796878s ago: executing program 0 (id=1321): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xeddb528951fd56a9, 0x12, r2, 0xeb8b0000) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000005c0)={@multicast1, @empty}, 0x8) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001a40)={0x18, 0x14, 0x1, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x105, 0x0, 0x0, @fd}]}, 0x18}], 0x1, 0x0, 0x0, 0x4000}, 0x40000c4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000086c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) syz_emit_ethernet(0x26, &(0x7f00000007c0)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x18, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "8f84e8eb"}}}}, 0x0) 59.372737ms ago: executing program 0 (id=1322): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x60}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1fc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe80, &(0x7f0000001b00)=ANY=[], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18000}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r5, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r8, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fddbdf25030008000400faffffff38000180140004002001000000000000000000000000000106000500e8380000080006000700000008000700", @ANYRES32=r6, @ANYBLOB="0600010002000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r10 = socket(0x2b, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x80, 0x80}]}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a4108000140", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x20040810) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r4) sendmsg$SEG6_CMD_DUMPHMAC(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0100f07c", @ANYRES16=r11, @ANYBLOB="00022bbd7000ffdbdf2502000000050005000100000018000400060000000900000004000000020000000300000008000300020000000c0004000300000088000000080003000900000005000500030000001000040004000000050000000600000014000100fe8000000000000000000000000000aa0500050005000000"], 0x84}, 0x1, 0x0, 0x0, 0x24040000}, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r13, 0x84}], 0x1, 0x9) r14 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x24, 0x14, 0x800, 0x0, 0xffffffff, {0x10, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "6d13a20d015dc921e4"}]}, 0x24}}, 0x0) 56.808979ms ago: executing program 4 (id=1323): r0 = socket$unix(0x1, 0x5, 0x0) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@rose, @remote, @netrom, @default, @netrom, @null, @bcast]}, &(0x7f0000000080)=0x48, 0x80800) listen(r0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x4) 0s ago: executing program 3 (id=1324): r0 = socket(0x29, 0x5, 0x3) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x440c1}, 0x64000814) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x124, 0x0, 0x15215102f5c38a0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf, 0x2c}}}}, [@NL80211_ATTR_FRAME_MATCH={0xfb, 0x5b, "57356f43a2616e9ff493b12dc9f51d100521dcc44489ebab51a78adcd83a1bea839b33225f35d8f81639b7922d4d80a242669b500120ab374a1cd6f3b46ba66d31a0d324be6524ef190eca67889cc8c0fb4da1ebe94ff67ff334972f56ea6a2fec8740444119ea61754acfdfa05c765d7cb878dabfa322a0b9917cac3932a379033dc20271d68e7c88a3bbd1f42a94f1b9aa3248b20a82b48a9d26c24e2786022b26d3e17270d488d673607ff697bb2cdbb2b2660c79acef13a192da354b3fd291ec841c7a699488470bff2bd90a3eacae78e4c3cf9cd34e96aa12af6f80740d35c3cc345344a66b1792778e83cc7b38e87ea00533a655"}]}, 0x124}, 0x1, 0x0, 0x0, 0x200408c1}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000000000000000004000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc5, &(0x7f0000000080)=""/197, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 79.918314][ T5808] cgroup: Unknown subsys name 'net' [ 80.068869][ T5808] cgroup: Unknown subsys name 'cpuset' [ 80.078454][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.667084][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.833569][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.851380][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.862087][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.876277][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.883799][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.891780][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.900248][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.908662][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.917626][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.925223][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.933715][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.934664][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.954688][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.962093][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.962644][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.979862][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.987738][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.996397][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.998164][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.016372][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.069858][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.078600][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.086729][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.108566][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.116555][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.614154][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 84.682914][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 84.842595][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 84.899909][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 84.964227][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.972103][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.979410][ T5834] bridge_slave_0: entered allmulticast mode [ 84.986750][ T5834] bridge_slave_0: entered promiscuous mode [ 85.029311][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.036696][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.043982][ T5834] bridge_slave_1: entered allmulticast mode [ 85.052348][ T5834] bridge_slave_1: entered promiscuous mode [ 85.139211][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.154874][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.162176][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.170156][ T5821] bridge_slave_0: entered allmulticast mode [ 85.177491][ T5821] bridge_slave_0: entered promiscuous mode [ 85.196348][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 85.210401][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.236173][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.243589][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.251363][ T5821] bridge_slave_1: entered allmulticast mode [ 85.265267][ T5821] bridge_slave_1: entered promiscuous mode [ 85.336893][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.344091][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.352100][ T5825] bridge_slave_0: entered allmulticast mode [ 85.359474][ T5825] bridge_slave_0: entered promiscuous mode [ 85.379950][ T5834] team0: Port device team_slave_0 added [ 85.398606][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.408509][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.416151][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.423374][ T5825] bridge_slave_1: entered allmulticast mode [ 85.431001][ T5825] bridge_slave_1: entered promiscuous mode [ 85.450407][ T5834] team0: Port device team_slave_1 added [ 85.456337][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.463456][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.471050][ T5830] bridge_slave_0: entered allmulticast mode [ 85.478254][ T5830] bridge_slave_0: entered promiscuous mode [ 85.488575][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.526346][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.533544][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.540874][ T5830] bridge_slave_1: entered allmulticast mode [ 85.548456][ T5830] bridge_slave_1: entered promiscuous mode [ 85.614101][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.630210][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.637777][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.664023][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.690299][ T5821] team0: Port device team_slave_0 added [ 85.698346][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.718548][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.725771][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.759428][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.774405][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.786413][ T5821] team0: Port device team_slave_1 added [ 85.823013][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.857183][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.864388][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.871894][ T5837] bridge_slave_0: entered allmulticast mode [ 85.879021][ T5837] bridge_slave_0: entered promiscuous mode [ 85.912745][ T5825] team0: Port device team_slave_0 added [ 85.919318][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.926513][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.953101][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.973331][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.980728][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.988429][ T5832] Bluetooth: hci0: command tx timeout [ 85.994223][ T5837] bridge_slave_1: entered allmulticast mode [ 86.001351][ T5837] bridge_slave_1: entered promiscuous mode [ 86.020174][ T5825] team0: Port device team_slave_1 added [ 86.027927][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.035099][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.061344][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.065873][ T5832] Bluetooth: hci3: command tx timeout [ 86.078037][ T5829] Bluetooth: hci2: command tx timeout [ 86.078045][ T5824] Bluetooth: hci1: command tx timeout [ 86.108491][ T5830] team0: Port device team_slave_0 added [ 86.145287][ T5829] Bluetooth: hci4: command tx timeout [ 86.158317][ T5834] hsr_slave_0: entered promiscuous mode [ 86.165065][ T5834] hsr_slave_1: entered promiscuous mode [ 86.173884][ T5830] team0: Port device team_slave_1 added [ 86.182227][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.194848][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.205327][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.212279][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.239329][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.252191][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.259611][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.285849][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.371419][ T5837] team0: Port device team_slave_0 added [ 86.400067][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.407456][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.433612][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.451513][ T5821] hsr_slave_0: entered promiscuous mode [ 86.458337][ T5821] hsr_slave_1: entered promiscuous mode [ 86.464550][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 86.470639][ T5821] Cannot create hsr debugfs directory [ 86.479064][ T5837] team0: Port device team_slave_1 added [ 86.502911][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.510028][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.536601][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.610132][ T5825] hsr_slave_0: entered promiscuous mode [ 86.616702][ T5825] hsr_slave_1: entered promiscuous mode [ 86.622892][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 86.628734][ T5825] Cannot create hsr debugfs directory [ 86.657587][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.664658][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.691628][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.736814][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.743834][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.770348][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.863356][ T5830] hsr_slave_0: entered promiscuous mode [ 86.870843][ T5830] hsr_slave_1: entered promiscuous mode [ 86.877565][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 86.883303][ T5830] Cannot create hsr debugfs directory [ 86.976936][ T5837] hsr_slave_0: entered promiscuous mode [ 86.983294][ T5837] hsr_slave_1: entered promiscuous mode [ 86.995856][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 87.001691][ T5837] Cannot create hsr debugfs directory [ 87.498592][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.511961][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.542063][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.563074][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.624588][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.639732][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.650513][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.661278][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.767491][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.781962][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.793497][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.803798][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.921376][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.949947][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.962172][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.974031][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.988801][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.066186][ T5829] Bluetooth: hci0: command tx timeout [ 88.068040][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.082682][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.119697][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.127227][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.145958][ T5829] Bluetooth: hci2: command tx timeout [ 88.151499][ T5829] Bluetooth: hci3: command tx timeout [ 88.155807][ T5824] Bluetooth: hci1: command tx timeout [ 88.180634][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.187851][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.207205][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.223793][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.230657][ T5832] Bluetooth: hci4: command tx timeout [ 88.243541][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.267883][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.279272][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.298736][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.305943][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.341897][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.349089][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.377004][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.440355][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.498212][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.550170][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.564806][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.591429][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.598685][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.660648][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.667849][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.718408][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.725575][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.741718][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.748924][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.838767][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.851922][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.977409][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.992324][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.030943][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.038189][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.080109][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.122814][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.130084][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.381854][ T5825] veth0_vlan: entered promiscuous mode [ 89.444454][ T5825] veth1_vlan: entered promiscuous mode [ 89.458327][ T5834] veth0_vlan: entered promiscuous mode [ 89.474444][ T5834] veth1_vlan: entered promiscuous mode [ 89.617803][ T5825] veth0_macvtap: entered promiscuous mode [ 89.634069][ T5834] veth0_macvtap: entered promiscuous mode [ 89.659996][ T5825] veth1_macvtap: entered promiscuous mode [ 89.677813][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.690557][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.722561][ T5834] veth1_macvtap: entered promiscuous mode [ 89.752818][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.791219][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.823339][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.839574][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.866817][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.877719][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.897179][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.920777][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.964085][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.984041][ T5821] veth0_vlan: entered promiscuous mode [ 90.036913][ T5830] veth0_vlan: entered promiscuous mode [ 90.043352][ T5821] veth1_vlan: entered promiscuous mode [ 90.070268][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.079651][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.099217][ T352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.102816][ T5830] veth1_vlan: entered promiscuous mode [ 90.114126][ T352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.117028][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.132619][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.148328][ T5832] Bluetooth: hci0: command tx timeout [ 90.220111][ T5837] veth0_vlan: entered promiscuous mode [ 90.226706][ T5832] Bluetooth: hci3: command tx timeout [ 90.232161][ T5832] Bluetooth: hci2: command tx timeout [ 90.235384][ T5824] Bluetooth: hci1: command tx timeout [ 90.243657][ T352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.253698][ T352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.305740][ T5829] Bluetooth: hci4: command tx timeout [ 90.314813][ T5821] veth0_macvtap: entered promiscuous mode [ 90.349525][ T5837] veth1_vlan: entered promiscuous mode [ 90.352757][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.386143][ T5830] veth0_macvtap: entered promiscuous mode [ 90.403649][ T5821] veth1_macvtap: entered promiscuous mode [ 90.417091][ T5837] veth0_macvtap: entered promiscuous mode [ 90.455673][ T351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.463541][ T351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.508276][ T5830] veth1_macvtap: entered promiscuous mode [ 90.522350][ T5837] veth1_macvtap: entered promiscuous mode [ 90.593789][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.629846][ T352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.642448][ T352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.657703][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.677306][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.711564][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.748652][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.769650][ T3542] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.796455][ T3542] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.833598][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.857919][ T3542] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.905686][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.996104][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.016350][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.068245][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.087527][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.139820][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.161223][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.221470][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.243039][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.359419][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.374887][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.402806][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.414061][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.464143][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.475099][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.564160][ T352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.587097][ T352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.631651][ T351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.671087][ T351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.774538][ T352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.798642][ T352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.957628][ T5968] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 92.034655][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 92.096633][ T797] cfg80211: failed to load regulatory.db [ 92.226431][ T5829] Bluetooth: hci0: command tx timeout [ 92.275042][ T5974] bridge0: entered promiscuous mode [ 92.306888][ T5829] Bluetooth: hci1: command tx timeout [ 92.312598][ T5824] Bluetooth: hci2: command tx timeout [ 92.312666][ T5832] Bluetooth: hci3: command tx timeout [ 92.367931][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 92.386137][ T5832] Bluetooth: hci4: command tx timeout [ 93.258972][ T6000] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18'. [ 93.419672][ T5981] tipc: Started in network mode [ 93.440085][ T5981] tipc: Node identity 167fa2f6dc5, cluster identity 4711 [ 93.468117][ T5981] tipc: Enabled bearer , priority 0 [ 93.532022][ T6029] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.24'. [ 93.597030][ T5978] tipc: Disabling bearer [ 93.662382][ T6033] openvswitch: netlink: Missing valid actions attribute. [ 93.672103][ T6033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.773373][ T6035] pim6reg: entered allmulticast mode [ 93.791316][ T6038] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 93.942860][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.951315][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.104016][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 94.311851][ T6042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.346002][ T6042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.546579][ T6035] dummy0: entered promiscuous mode [ 94.578478][ T351] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.709946][ T351] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.727324][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.765900][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.867988][ T6084] netlink: 'syz.2.35': attribute type 10 has an invalid length. [ 94.913880][ T6075] macsec2: entered promiscuous mode [ 95.082003][ T6084] veth0_vlan: left promiscuous mode [ 95.118121][ T6084] veth0_vlan: entered promiscuous mode [ 95.136995][ T6084] team0: Device veth0_vlan failed to register rx_handler [ 95.172843][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 95.500892][ T6114] sctp: [Deprecated]: syz.2.41 (pid 6114) Use of int in max_burst socket option. [ 95.500892][ T6114] Use struct sctp_assoc_value instead [ 95.518573][ T6112] netlink: 88 bytes leftover after parsing attributes in process `syz.4.39'. [ 95.670431][ T6122] netlink: 14 bytes leftover after parsing attributes in process `syz.3.42'. [ 95.723771][ T6122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.796993][ T6122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.844101][ T6122] bond0 (unregistering): Released all slaves [ 96.079111][ T6132] bond1: option packets_per_slave: invalid value (1048582) [ 96.097673][ T6141] netlink: 36 bytes leftover after parsing attributes in process `syz.4.47'. [ 96.100362][ T6132] bond1: option packets_per_slave: allowed values 0 - 65535 [ 96.156776][ T6132] bond1 (unregistering): Released all slaves [ 96.171594][ T6145] ipt_ECN: cannot use operation on non-tcp rule [ 96.270382][ T6136] netlink: 44 bytes leftover after parsing attributes in process `syz.1.45'. [ 96.297345][ T6136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.714443][ T6159] Zero length message leads to an empty skb [ 96.911470][ T6172] IPv6: addrconf: prefix option has invalid lifetime [ 96.962389][ T6165] netlink: 'syz.3.53': attribute type 3 has an invalid length. [ 97.034544][ T6162] syzkaller1: entered promiscuous mode [ 97.059147][ T6162] syzkaller1: entered allmulticast mode [ 97.092789][ T6171] siw: device registration error -23 [ 97.105108][ T6165] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.153786][ T6165] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 97.163447][ T6180] netlink: 48 bytes leftover after parsing attributes in process `syz.0.56'. [ 97.718638][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.62'. [ 97.856456][ T6210] netlink: 108 bytes leftover after parsing attributes in process `syz.2.64'. [ 97.888362][ T6210] netlink: 108 bytes leftover after parsing attributes in process `syz.2.64'. [ 98.368229][ T6233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.70'. [ 98.443173][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.70'. [ 98.513614][ T6244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.70'. [ 98.531920][ T6244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.70'. [ 98.542619][ T6244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.70'. [ 98.571851][ T6244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.70'. [ 98.718844][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.726890][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.852270][ T6244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.868274][ T6244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.977213][ T6243] : entered promiscuous mode [ 98.982811][ T6238] netlink: 'syz.2.72': attribute type 1 has an invalid length. [ 98.991729][ T6238] netlink: 'syz.2.72': attribute type 2 has an invalid length. [ 99.013441][ T6258] warning: `syz.3.74' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.034425][ T6251] syzkaller1: entered promiscuous mode [ 99.040428][ T6251] syzkaller1: entered allmulticast mode [ 99.048355][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.057722][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.149084][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.172853][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.333628][ T6279] netlink: 'syz.3.81': attribute type 2 has an invalid length. [ 99.344189][ T6279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.752800][ T6301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.760443][ T6301] IPv6: NLM_F_CREATE should be set when creating new route [ 99.767888][ T6301] IPv6: NLM_F_CREATE should be set when creating new route [ 100.038436][ T6324] vlan2: entered promiscuous mode [ 100.048505][ T6324] bridge0: entered promiscuous mode [ 100.133426][ T6324] netlink: 'syz.4.89': attribute type 2 has an invalid length. [ 101.191580][ T6361] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 101.364616][ T6364] tap0: tun_chr_ioctl cmd 1074812118 [ 101.874904][ T6380] hsr_slave_1 (unregistering): left promiscuous mode [ 102.167524][ T6396] __nla_validate_parse: 158 callbacks suppressed [ 102.167547][ T6396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.110'. [ 102.184690][ T6400] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 102.315779][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.497554][ T6412] team0: No ports can be present during mode change [ 102.509623][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 102.824888][ T6418] netlink: 'syz.1.117': attribute type 1 has an invalid length. [ 103.079058][ T6422] netlink: 32 bytes leftover after parsing attributes in process `syz.1.117'. [ 103.167165][ T6418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.264287][ T6424] bond1: (slave geneve2): making interface the new active one [ 103.297211][ T6424] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 103.667125][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.125'. [ 103.704857][ T6447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.126'. [ 103.889465][ T6454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.127'. [ 104.186484][ T6458] ipip0: entered promiscuous mode [ 104.589506][ T6469] netlink: 'syz.3.132': attribute type 1 has an invalid length. [ 104.615650][ T6469] netlink: 228 bytes leftover after parsing attributes in process `syz.3.132'. [ 104.679477][ T6473] vlan3: entered allmulticast mode [ 104.685062][ T6473] bridge0: port 3(vlan3) entered blocking state [ 104.691959][ T6473] bridge0: port 3(vlan3) entered disabled state [ 104.730472][ T6473] vlan3: entered promiscuous mode [ 104.740174][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 104.776451][ T6477] hsr_slave_1 (unregistering): left promiscuous mode [ 105.028947][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 105.048976][ T6488] netlink: 324 bytes leftover after parsing attributes in process `syz.2.139'. [ 106.020461][ T6534] atomic_op ffff888053826998 conn xmit_atomic 0000000000000000 [ 107.353438][ T6610] "syz.4.158" (6610) uses obsolete ecb(arc4) skcipher [ 107.404141][ T6628] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 107.446071][ T5903] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 107.458194][ T6628] __nla_validate_parse: 7 callbacks suppressed [ 107.458212][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 107.509042][ T5903] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 107.795711][ T351] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 108.474545][ T6672] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 108.853831][ T6679] netlink: 'syz.4.179': attribute type 2 has an invalid length. [ 108.865901][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 108.875302][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 109.588030][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 109.722394][ T6716] syzkaller1: entered promiscuous mode [ 109.749068][ T6716] syzkaller1: entered allmulticast mode [ 109.859948][ T6722] netlink: 'syz.4.192': attribute type 2 has an invalid length. [ 109.886249][ T6722] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 109.903456][ T6722] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 110.546065][ T6742] syzkaller1: entered promiscuous mode [ 110.559561][ T6742] syzkaller1: entered allmulticast mode [ 110.630269][ T6746] tipc: Started in network mode [ 110.640138][ T6746] tipc: Node identity ac14140f, cluster identity 4711 [ 110.654845][ T6746] tipc: New replicast peer: 255.255.255.255 [ 110.670902][ T6746] tipc: Enabled bearer , priority 10 [ 111.091445][ T6764] tls_set_device_offload_rx: netdev not found [ 111.120242][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 111.130115][ T6761] bridge_slave_1: left allmulticast mode [ 111.136310][ T6761] bridge_slave_1: left promiscuous mode [ 111.161377][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.236013][ T6761] bridge_slave_0: left allmulticast mode [ 111.242058][ T6761] bridge_slave_0: left promiscuous mode [ 111.255933][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.560475][ T6776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.209'. [ 111.574348][ T6776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.209'. [ 111.623517][ T6784] atomic_op ffff88807da9c198 conn xmit_atomic 0000000000000000 [ 111.773842][ T6780] syzkaller0: entered promiscuous mode [ 111.780365][ T6780] syzkaller0: entered allmulticast mode [ 111.824436][ T9] tipc: Node number set to 2886997007 [ 112.064174][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 112.108876][ T6798] netlink: 'syz.4.216': attribute type 8 has an invalid length. [ 112.123945][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 112.230961][ T6806] netlink: 'syz.2.219': attribute type 1 has an invalid length. [ 112.351208][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 113.025467][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 113.278193][ T6806] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 113.287728][ T6814] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 113.295556][ T30] audit: type=1800 audit(1775445248.324:2): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.220" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 113.305586][ T6814] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 113.361218][ T6814] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 113.634566][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'. [ 113.757836][ T6828] syzkaller0: entered promiscuous mode [ 113.764578][ T6828] syzkaller0: entered allmulticast mode [ 114.706883][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.231'. [ 114.764313][ T6869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.231'. [ 115.823623][ T6901] syzkaller0: entered promiscuous mode [ 115.838753][ T6901] syzkaller0: entered allmulticast mode [ 115.907189][ T6895] netlink: 112 bytes leftover after parsing attributes in process `syz.4.238'. [ 116.128829][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 116.229852][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 116.264233][ T6921] : entered promiscuous mode [ 116.544176][ T6948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.253'. [ 116.554208][ T6948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.253'. [ 116.576227][ T6951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.252'. [ 116.628878][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 116.677766][ T6955] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 116.712781][ T6954] netlink: 'syz.0.255': attribute type 8 has an invalid length. [ 116.746474][ T6951] netlink: 'syz.1.252': attribute type 30 has an invalid length. [ 116.938764][ T6951] bond3: option arp_missed_max: invalid value (0) [ 116.957027][ T6951] bond3: option arp_missed_max: allowed values 1 - 255 [ 117.150095][ T6951] bond3 (unregistering): Released all slaves [ 118.637949][ T7054] __nla_validate_parse: 5 callbacks suppressed [ 118.637969][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 118.782884][ T7058] pimreg: tun_chr_ioctl cmd 1074066701 [ 118.819138][ T7046] netlink: 256 bytes leftover after parsing attributes in process `syz.3.279'. [ 118.828397][ T7057] pimreg: tun_chr_ioctl cmd 1074025677 [ 118.834041][ T7057] pimreg: linktype set to 774 [ 118.854089][ T7046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.279'. [ 118.939870][ T5889] IPVS: starting estimator thread 0... [ 119.066006][ T7066] IPVS: using max 26 ests per chain, 62400 per kthread [ 119.176847][ T7070] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 119.234243][ T7070] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 119.471258][ T7075] bond0: ARP target 9.0.0.0 is already present [ 119.477967][ T7075] bond0: option arp_ip_target: invalid value (9) [ 119.599900][ T7075] bond0 (unregistering): Released all slaves [ 119.673880][ T7087] syzkaller1: entered promiscuous mode [ 119.679988][ T7087] syzkaller1: entered allmulticast mode [ 119.768928][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 119.794693][ T7091] sctp: [Deprecated]: syz.3.289 (pid 7091) Use of int in max_burst socket option. [ 119.794693][ T7091] Use struct sctp_assoc_value instead [ 120.077908][ T7101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.291'. [ 120.091682][ T7101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.291'. [ 120.602573][ T7111] bond3: Removing last arp target with arp_interval on [ 120.913232][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.301'. [ 120.984526][ T7127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.010247][ T7127] macsec2: entered promiscuous mode [ 121.016086][ T7127] bond0: entered promiscuous mode [ 121.023065][ T7127] bond0: left promiscuous mode [ 121.160316][ T7137] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 122.122789][ T7158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.156978][ T7158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.396898][ T7176] tipc: Started in network mode [ 122.410989][ T7176] tipc: Node identity 8aced014232d, cluster identity 4711 [ 122.440536][ T7176] tipc: Enabled bearer , priority 0 [ 122.450331][ T6588] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.475574][ T7177] syzkaller0: entered promiscuous mode [ 122.485297][ T7177] syzkaller0: entered allmulticast mode [ 122.534704][ T7167] tipc: Resetting bearer [ 122.552976][ T7167] Bluetooth: MGMT ver 1.23 [ 122.566167][ T6588] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.597006][ T6588] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.617178][ T6588] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.824286][ T7165] tipc: Resetting bearer [ 122.868574][ T7165] tipc: Disabling bearer [ 122.917287][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.317'. [ 123.379342][ T7233] netlink: 44 bytes leftover after parsing attributes in process `syz.3.324'. [ 123.917093][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.330'. [ 124.150669][ T7264] veth0_virt_wifi: entered allmulticast mode [ 124.517541][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 124.540895][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'. [ 124.579706][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 124.643974][ T6588] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.671372][ T6588] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.696269][ T6588] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.723846][ T6588] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.787507][ T7300] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 124.800712][ T7306] netlink: 'syz.1.340': attribute type 1 has an invalid length. [ 124.829697][ T7305] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 125.104612][ T7318] netlink: 14 bytes leftover after parsing attributes in process `syz.0.346'. [ 125.561435][ T7346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.356'. [ 125.646074][ T7350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.354'. [ 125.739728][ T7346] syzkaller1: entered promiscuous mode [ 125.764598][ T7346] syzkaller1: entered allmulticast mode [ 125.866097][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 126.108466][ T7359] macvlan0: entered promiscuous mode [ 126.125557][ T7359] netlink: 'syz.2.358': attribute type 2 has an invalid length. [ 126.188411][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 126.623631][ T7380] x_tables: unsorted entry at hook 1 [ 126.677185][ T7383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.365'. [ 126.711809][ T7385] block nbd3: not configured, cannot reconfigure [ 126.998780][ T7396] vxcan3: entered allmulticast mode [ 127.028900][ T7401] vxcan5: entered allmulticast mode [ 127.172281][ T7410] netlink: 'syz.3.374': attribute type 2 has an invalid length. [ 127.205750][ T7410] netlink: 'syz.3.374': attribute type 1 has an invalid length. [ 127.226315][ T7410] netlink: 'syz.3.374': attribute type 1 has an invalid length. [ 127.521296][ T7431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.631905][ T7485] xt_CT: No such helper "snmp_trap" [ 128.916451][ T7504] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 128.979359][ T7504] __nla_validate_parse: 17 callbacks suppressed [ 128.979401][ T7504] netlink: 224 bytes leftover after parsing attributes in process `syz.4.401'. [ 129.679468][ T7552] raw_sendmsg: syz.3.415 forgot to set AF_INET. Fix it! [ 129.808008][ T7560] syzkaller1: entered promiscuous mode [ 129.813862][ T7560] syzkaller1: entered allmulticast mode [ 130.139824][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 130.171680][ T7572] netlink: 'syz.1.420': attribute type 13 has an invalid length. [ 130.193934][ T7572] netlink: 'syz.1.420': attribute type 12 has an invalid length. [ 130.398085][ T7583] Bluetooth: MGMT ver 1.23 [ 130.399178][ T7582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.424'. [ 130.413020][ T7580] team0: entered promiscuous mode [ 130.421057][ T7580] team_slave_0: entered promiscuous mode [ 130.436216][ T7580] team_slave_1: entered promiscuous mode [ 130.462319][ T7588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.691583][ T7597] netlink: 'syz.0.427': attribute type 1 has an invalid length. [ 130.726015][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 130.849932][ T30] audit: type=1107 audit(1775445265.884:3): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÒO6³÷wÙ¯Å×ö@16·' [ 130.873123][ T7597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.323018][ T7617] 8021q: adding VLAN 0 to HW filter on device bond4 [ 131.438149][ T7618] tipc: Enabled bearer , priority 0 [ 131.445565][ T7641] veth0_to_hsr: entered promiscuous mode [ 131.453377][ T7618] syzkaller0: entered promiscuous mode [ 131.464869][ T7618] syzkaller0: entered allmulticast mode [ 131.480619][ T7618] tipc: Resetting bearer [ 131.496227][ T7615] tipc: Resetting bearer [ 131.512598][ T7615] tipc: Disabling bearer [ 131.708384][ T7647] netlink: 32 bytes leftover after parsing attributes in process `syz.2.441'. [ 131.710313][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'. [ 131.731272][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.442'. [ 131.740307][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'. [ 131.749941][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.442'. [ 131.759136][ T7650] netlink: 36 bytes leftover after parsing attributes in process `syz.3.442'. [ 132.498741][ T7682] hsr_slave_1 (unregistering): left promiscuous mode [ 132.560324][ T7690] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 132.742630][ T7700] netlink: 'syz.0.458': attribute type 1 has an invalid length. [ 132.756606][ T7700] tipc: Enabling of bearer rejected, failed to enable media [ 132.769778][ T7701] netlink: 'syz.0.458': attribute type 1 has an invalid length. [ 132.935781][ T7711] syzkaller0: entered promiscuous mode [ 132.941602][ T7711] syzkaller0: entered allmulticast mode [ 132.987668][ T7712] syzkaller0: entered promiscuous mode [ 132.993186][ T7712] syzkaller0: entered allmulticast mode [ 133.032159][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.039321][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.262667][ T7721] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 133.292789][ T7721] bond1 (unregistering): Released all slaves [ 133.594843][ T7737] netlink: 'syz.1.469': attribute type 1 has an invalid length. [ 133.679205][ T7734] netlink: 'syz.2.467': attribute type 4 has an invalid length. [ 133.823459][ T7737] 8021q: adding VLAN 0 to HW filter on device bond5 [ 134.326542][ T7766] __nla_validate_parse: 11 callbacks suppressed [ 134.326565][ T7766] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.475'. [ 134.431787][ T7771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.476'. [ 134.549660][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 134.662017][ T7783] hsr0: entered promiscuous mode [ 134.698258][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 134.726801][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 134.758200][ T7783] hsr_slave_0: left promiscuous mode [ 134.772496][ T7783] hsr_slave_1: left promiscuous mode [ 134.785698][ T7783] hsr0 (unregistering): left promiscuous mode [ 134.789375][ T7793] sctp: [Deprecated]: syz.0.481 (pid 7793) Use of int in max_burst socket option. [ 134.789375][ T7793] Use struct sctp_assoc_value instead [ 134.958683][ T7796] xt_hashlimit: size too large, truncated to 1048576 [ 135.169936][ T7808] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 135.471135][ T7823] netlink: 48 bytes leftover after parsing attributes in process `syz.2.490'. [ 135.644177][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 135.658483][ T7834] netlink: 'syz.3.495': attribute type 3 has an invalid length. [ 135.658500][ T7832] netlink: 'syz.3.495': attribute type 3 has an invalid length. [ 135.746125][ T7840] sctp: [Deprecated]: syz.1.496 (pid 7840) Use of int in maxseg socket option. [ 135.746125][ T7840] Use struct sctp_assoc_value instead [ 135.999638][ T7847] pim6reg1: entered promiscuous mode [ 136.005537][ T7849] netlink: 'syz.0.500': attribute type 16 has an invalid length. [ 136.013676][ T7847] pim6reg1: entered allmulticast mode [ 136.020877][ T7849] netlink: 'syz.0.500': attribute type 17 has an invalid length. [ 136.350858][ T7862] netlink: 'syz.2.504': attribute type 1 has an invalid length. [ 136.489447][ T7864] gretap1: entered allmulticast mode [ 136.549494][ T7864] bond1: (slave gretap1): making interface the new active one [ 136.591516][ T7864] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 136.620186][ T7865] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.768905][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.507'. [ 136.826990][ T7876] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 136.844864][ T7874] netlink: 32 bytes leftover after parsing attributes in process `syz.0.508'. [ 137.238148][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.512'. [ 137.519645][ T7905] bond1 (unregistering): Released all slaves [ 138.272712][ T7958] netlink: 'syz.0.527': attribute type 18 has an invalid length. [ 138.353881][ T7959] netlink: 'syz.0.527': attribute type 1 has an invalid length. [ 138.384437][ T7959] netlink: 'syz.0.527': attribute type 1 has an invalid length. [ 138.941048][ T5832] Bluetooth: hci4: link tx timeout [ 138.949251][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.189613][ T8006] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 140.844491][ T8084] __nla_validate_parse: 9 callbacks suppressed [ 140.844510][ T8084] netlink: 220 bytes leftover after parsing attributes in process `syz.2.560'. [ 140.941803][ T8084] netlink: 'syz.2.560': attribute type 2 has an invalid length. [ 141.029146][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 141.132120][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 141.245264][ T8100] netlink: 236 bytes leftover after parsing attributes in process `syz.3.563'. [ 142.122447][ T8134] netlink: 'syz.3.570': attribute type 12 has an invalid length. [ 142.138184][ T8132] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 142.152517][ T8134] ve: renamed from ip6gre0 [ 142.199805][ T8132] --map-set only usable from mangle table [ 142.375414][ T8145] netlink: 'syz.3.574': attribute type 1 has an invalid length. [ 142.403150][ T8145] netlink: 248 bytes leftover after parsing attributes in process `syz.3.574'. [ 142.423432][ T8144] netlink: 'syz.3.574': attribute type 1 has an invalid length. [ 142.440260][ T8145] netlink: 2076 bytes leftover after parsing attributes in process `syz.3.574'. [ 142.492752][ T8144] netlink: 248 bytes leftover after parsing attributes in process `syz.3.574'. [ 142.513659][ T8145] sch_tbf: peakrate 7836759490224633571 is lower than or equals to rate 15540063224392467819 ! [ 142.622103][ T5882] IPVS: starting estimator thread 0... [ 142.716957][ T8162] IPVS: using max 26 ests per chain, 62400 per kthread [ 142.856814][ T8168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.999607][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 143.161747][ T8148] netlink: 132 bytes leftover after parsing attributes in process `syz.4.573'. [ 143.476330][ T8143] syzkaller0: entered promiscuous mode [ 143.482623][ T8143] syzkaller0: entered allmulticast mode [ 143.557712][ T8143] netlink: 'syz.4.573': attribute type 30 has an invalid length. [ 143.568067][ T8196] batadv0: entered promiscuous mode [ 143.573488][ T8196] batadv0: entered allmulticast mode [ 143.891925][ T8207] syzkaller0: entered promiscuous mode [ 143.910334][ T8207] syzkaller0: entered allmulticast mode [ 144.298900][ T8226] netlink: 40 bytes leftover after parsing attributes in process `syz.3.593'. [ 144.369914][ T8234] netlink: 60 bytes leftover after parsing attributes in process `syz.4.595'. [ 144.386255][ T8236] xt_hashlimit: size too large, truncated to 1048576 [ 144.398779][ T8236] xt_hashlimit: max too large, truncated to 1048576 [ 144.597518][ T8243] netlink: 'syz.1.597': attribute type 21 has an invalid length. [ 145.679140][ T8253] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 145.688458][ T8253] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 146.304117][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.319560][ T8254] bridge_slave_0 (unregistering): left allmulticast mode [ 146.326936][ T8254] bridge_slave_0 (unregistering): left promiscuous mode [ 146.333941][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.363855][ T8269] netlink: 'syz.4.603': attribute type 29 has an invalid length. [ 146.393633][ T8270] netlink: 'syz.4.603': attribute type 29 has an invalid length. [ 146.931614][ T8299] __nla_validate_parse: 1 callbacks suppressed [ 146.931636][ T8299] netlink: 68 bytes leftover after parsing attributes in process `syz.3.612'. [ 146.997959][ T8299] netlink: 'syz.3.612': attribute type 1 has an invalid length. [ 147.045230][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 147.059045][ T8299] netlink: 'syz.3.612': attribute type 1 has an invalid length. [ 147.146310][ T8307] netlink: 'syz.1.614': attribute type 4 has an invalid length. [ 147.175741][ T8307] netlink: 17 bytes leftover after parsing attributes in process `syz.1.614'. [ 147.291908][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 147.303561][ T8306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.614'. [ 147.316726][ T8304] syzkaller1: entered promiscuous mode [ 147.343036][ T8304] syzkaller1: entered allmulticast mode [ 147.676924][ T8325] netlink: 'syz.1.617': attribute type 1 has an invalid length. [ 147.860378][ T8336] netlink: 'syz.0.620': attribute type 16 has an invalid length. [ 147.905354][ T8336] netlink: 156 bytes leftover after parsing attributes in process `syz.0.620'. [ 147.937976][ T8325] bond6: entered promiscuous mode [ 147.943095][ T8325] bond6: entered allmulticast mode [ 148.007020][ T8325] 8021q: adding VLAN 0 to HW filter on device bond6 [ 148.702831][ T8357] netlink: 56 bytes leftover after parsing attributes in process `syz.0.628'. [ 148.933095][ T8363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.629'. [ 149.143104][ T8375] netlink: 'syz.3.631': attribute type 21 has an invalid length. [ 149.196620][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'. [ 149.220834][ T8375] netlink: 132 bytes leftover after parsing attributes in process `syz.3.631'. [ 150.376533][ T8412] syzkaller0: entered promiscuous mode [ 150.382365][ T8412] syzkaller0: entered allmulticast mode [ 150.391816][ T8402] syzkaller0: entered promiscuous mode [ 150.403537][ T8402] syzkaller0: entered allmulticast mode [ 150.413284][ T8404] syzkaller0: entered promiscuous mode [ 150.420466][ T8404] syzkaller0: entered allmulticast mode [ 150.659842][ T8435] netlink: 'syz.0.640': attribute type 8 has an invalid length. [ 152.116196][ T8441] __nla_validate_parse: 1 callbacks suppressed [ 152.116217][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 152.566915][ T8465] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 152.804388][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'. [ 153.326077][ T8500] netlink: 'syz.3.658': attribute type 2 has an invalid length. [ 153.336512][ T8502] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 153.541769][ T8510] netlink: 112 bytes leftover after parsing attributes in process `syz.1.659'. [ 153.803390][ T8518] netlink: 34 bytes leftover after parsing attributes in process `syz.1.661'. [ 154.160793][ T8539] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.669'. [ 154.195274][ T8539] ksmbd: Unknown IPC event: 1, ignore. [ 154.328932][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 154.338257][ T8547] netlink: 'syz.4.671': attribute type 13 has an invalid length. [ 154.346644][ T8547] netlink: 'syz.4.671': attribute type 17 has an invalid length. [ 154.366637][ T8542] openvswitch: netlink: Key type 9237 is out of range max 32 [ 154.461857][ T8554] netlink: 44 bytes leftover after parsing attributes in process `syz.4.671'. [ 154.491993][ T8547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.722157][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 155.295077][ T8591] syz.2.686: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 155.297787][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.685'. [ 155.342261][ T8591] CPU: 0 UID: 0 PID: 8591 Comm: syz.2.686 Not tainted syzkaller #0 PREEMPT(full) [ 155.342292][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 155.342304][ T8591] Call Trace: [ 155.342312][ T8591] [ 155.342322][ T8591] dump_stack_lvl+0xe8/0x150 [ 155.342360][ T8591] warn_alloc+0x249/0x340 [ 155.342387][ T8591] ? stack_trace_save+0xa9/0x100 [ 155.342412][ T8591] ? __pfx_warn_alloc+0x10/0x10 [ 155.342442][ T8591] ? kasan_save_track+0x4f/0x80 [ 155.342463][ T8591] ? kasan_save_track+0x3e/0x80 [ 155.342482][ T8591] ? __kasan_kmalloc+0x93/0xb0 [ 155.342504][ T8591] ? __kmalloc_cache_noprof+0x31c/0x660 [ 155.342525][ T8591] ? xskq_create+0x56/0x170 [ 155.342548][ T8591] ? xsk_setsockopt+0x54c/0x990 [ 155.342567][ T8591] ? do_sock_setsockopt+0x17c/0x1b0 [ 155.342592][ T8591] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 155.342616][ T8591] ? do_syscall_64+0x14d/0xf80 [ 155.342645][ T8591] __vmalloc_node_range_noprof+0x132/0x1730 [ 155.342705][ T8591] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.342737][ T8591] ? __kasan_kmalloc+0x93/0xb0 [ 155.342767][ T8591] vmalloc_user_noprof+0xad/0xe0 [ 155.342790][ T8591] ? xskq_create+0xbf/0x170 [ 155.342813][ T8591] xskq_create+0xbf/0x170 [ 155.342840][ T8591] xsk_init_queue+0x8a/0xe0 [ 155.342871][ T8591] xsk_setsockopt+0x54c/0x990 [ 155.342896][ T8591] ? __pfx_xsk_setsockopt+0x10/0x10 [ 155.342917][ T8591] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.342952][ T8591] ? aa_sock_opt_perm+0xff/0x1a0 [ 155.342975][ T8591] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 155.342994][ T8591] ? __pfx_xsk_setsockopt+0x10/0x10 [ 155.343015][ T8591] do_sock_setsockopt+0x17c/0x1b0 [ 155.343047][ T8591] __x64_sys_setsockopt+0x13d/0x1b0 [ 155.343079][ T8591] do_syscall_64+0x14d/0xf80 [ 155.343104][ T8591] ? trace_irq_disable+0x3b/0x150 [ 155.343121][ T8591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.343142][ T8591] ? clear_bhb_loop+0x40/0x90 [ 155.343173][ T8591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.343192][ T8591] RIP: 0033:0x7f4591d9c819 [ 155.343210][ T8591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.343227][ T8591] RSP: 002b:00007f4592ba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.343250][ T8591] RAX: ffffffffffffffda RBX: 00007f4592015fa0 RCX: 00007f4591d9c819 [ 155.343264][ T8591] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 155.343276][ T8591] RBP: 00007f4591e32c91 R08: 0000000000000004 R09: 0000000000000000 [ 155.343288][ T8591] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.343300][ T8591] R13: 00007f4592016038 R14: 00007f4592015fa0 R15: 00007ffe443506b8 [ 155.343333][ T8591] [ 155.343449][ T8591] Mem-Info: [ 155.655360][ T8591] active_anon:10723 inactive_anon:0 isolated_anon:0 [ 155.655360][ T8591] active_file:2949 inactive_file:39959 isolated_file:0 [ 155.655360][ T8591] unevictable:768 dirty:98 writeback:0 [ 155.655360][ T8591] slab_reclaimable:11450 slab_unreclaimable:117148 [ 155.655360][ T8591] mapped:31800 shmem:5898 pagetables:1191 [ 155.655360][ T8591] sec_pagetables:0 bounce:0 [ 155.655360][ T8591] kernel_misc_reclaimable:0 [ 155.655360][ T8591] free:1300220 free_pcp:11257 free_cma:0 [ 155.712833][ T8591] Node 0 active_anon:43092kB inactive_anon:0kB active_file:11796kB inactive_file:159632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127300kB dirty:392kB writeback:0kB shmem:22156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13072kB pagetables:4600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.733259][ T8601] ip6gre1: entered promiscuous mode [ 155.746007][ T8591] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.782405][ T8591] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.783990][ T8581] syz.3.682 (8581) used greatest stack depth: 16736 bytes left [ 155.816590][ T8601] ip6gre1: entered allmulticast mode [ 155.890529][ T8603] vlan5: entered allmulticast mode [ 155.895509][ T8591] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 155.901837][ T8591] Node 0 DMA32 free:1235628kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43292kB inactive_anon:0kB active_file:11796kB inactive_file:159632kB unevictable:1536kB writepending:392kB zspages:0kB present:3129332kB managed:2552320kB mlocked:0kB bounce:0kB free_pcp:45308kB local_pcp:19848kB free_cma:0kB [ 155.903379][ T8603] bond0: entered allmulticast mode [ 155.939200][ T8591] lowmem_reserve[]: 0 0 0 0 0 [ 155.946826][ T8591] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 155.955864][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.689'. [ 155.962927][ T8603] bond_slave_0: entered allmulticast mode [ 156.002530][ T8591] lowmem_reserve[]: 0 0 0 0 0 [ 156.009710][ T8591] Node 1 Normal free:3949392kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.023216][ T8603] bond_slave_1: entered allmulticast mode [ 156.105221][ T8591] lowmem_reserve[]: 0 0 0 0 0 [ 156.110041][ T8591] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 156.177888][ T8591] Node 0 DMA32: 2512*4kB (UME) 1392*8kB (UME) 377*16kB (UM) 89*32kB (UME) 23*64kB (UME) 53*128kB (UME) 38*256kB (UM) 24*512kB (UM) 23*1024kB (UME) 7*2048kB (U) 278*4096kB (M) = 1236912kB [ 156.204018][ T8608] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20000 [ 156.234165][ T8608] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20265 [ 156.264554][ T8591] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 156.318218][ T8591] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 5*16kB (UM) 7*32kB (UM) 6*64kB (UM) 5*128kB (UM) 6*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 3*2048kB (U) 961*4096kB (M) = 3949392kB [ 156.355342][ T8591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.383848][ T8608] netlink: 'syz.4.692': attribute type 39 has an invalid length. [ 156.385669][ T8591] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.413169][ T8591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.423617][ T8591] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.433205][ T8591] 44281 total pagecache pages [ 156.438359][ T8591] 0 pages in swap cache [ 156.442731][ T8591] Free swap = 124996kB [ 156.447054][ T8591] Total swap = 124996kB [ 156.451300][ T8591] 2097051 pages RAM [ 156.456130][ T8591] 0 pages HighMem/MovableOnly [ 156.461006][ T8591] 427137 pages reserved [ 156.469158][ T8591] 0 pages cma reserved [ 157.135900][ T8652] __nla_validate_parse: 1 callbacks suppressed [ 157.135921][ T8652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.702'. [ 157.178398][ T8652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.702'. [ 157.803358][ T8676] netlink: 104 bytes leftover after parsing attributes in process `syz.0.708'. [ 158.525295][ T8702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.714'. [ 158.654398][ T8666] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 158.874781][ T8716] sctp: [Deprecated]: syz.2.716 (pid 8716) Use of int in max_burst socket option. [ 158.874781][ T8716] Use struct sctp_assoc_value instead [ 159.135333][ T8729] netlink: 'syz.3.722': attribute type 2 has an invalid length. [ 159.143717][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.722'. [ 159.208379][ T8727] ip6gretap0: entered promiscuous mode [ 159.291754][ T8733] gre1: entered promiscuous mode [ 159.375368][ T8740] netlink: 'syz.1.726': attribute type 21 has an invalid length. [ 159.418750][ T8740] netlink: 156 bytes leftover after parsing attributes in process `syz.1.726'. [ 159.440084][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 159.721267][ T8755] veth0: entered promiscuous mode [ 159.773444][ T8755] netlink: 2912 bytes leftover after parsing attributes in process `syz.4.729'. [ 159.783452][ T8755] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 159.927894][ T8753] veth0: left promiscuous mode [ 160.145421][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.321344][ T8788] bridge2: entered promiscuous mode [ 160.339635][ T8788] bridge2: entered allmulticast mode [ 160.351231][ T8788] team0: Port device bridge2 added [ 160.724135][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 160.856756][ T8821] netlink: zone id is out of range [ 161.118834][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 161.379705][ T8853] netlink: 'syz.4.759': attribute type 2 has an invalid length. [ 161.746790][ T8872] netlink: 'syz.1.764': attribute type 1 has an invalid length. [ 161.878542][ T8873] bond7: (slave bridge3): making interface the new active one [ 161.911240][ T8873] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 162.021819][ T8877] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 162.150257][ T8889] netlink: 'syz.4.766': attribute type 39 has an invalid length. [ 162.162377][ T8890] __nla_validate_parse: 4 callbacks suppressed [ 162.162399][ T8890] netlink: 108 bytes leftover after parsing attributes in process `syz.2.768'. [ 162.213829][ T8883] x_tables: duplicate underflow at hook 1 [ 162.248081][ T8890] netlink: 108 bytes leftover after parsing attributes in process `syz.2.768'. [ 162.489514][ T8897] netlink: 'syz.1.771': attribute type 3 has an invalid length. [ 162.506008][ T8897] netlink: 'syz.1.771': attribute type 3 has an invalid length. [ 162.514071][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'. [ 163.115064][ T8929] netlink: 40 bytes leftover after parsing attributes in process `syz.0.777'. [ 163.209432][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.777'. [ 163.240020][ T8927] netlink: 'syz.0.777': attribute type 21 has an invalid length. [ 163.258766][ T8927] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.342344][ T8927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.349724][ T8927] IPv6: NLM_F_CREATE should be set when creating new route [ 163.357168][ T8927] IPv6: NLM_F_CREATE should be set when creating new route [ 163.364587][ T8927] IPv6: NLM_F_CREATE should be set when creating new route [ 163.739035][ T8954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.780'. [ 164.253298][ T8985] netlink: 'syz.4.789': attribute type 1 has an invalid length. [ 164.261828][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.788'. [ 164.399804][ T8987] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 164.411809][ T8987] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 164.496719][ T8999] netlink: 220 bytes leftover after parsing attributes in process `syz.3.792'. [ 164.519035][ T9001] netlink: 48 bytes leftover after parsing attributes in process `syz.4.789'. [ 164.552836][ T8990] bond1: (slave gretap1): making interface the new active one [ 164.563287][ T8990] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 164.611676][ T8985] macvlan3: entered promiscuous mode [ 164.621646][ T8985] macvlan3: entered allmulticast mode [ 164.632266][ T8985] bond1: entered promiscuous mode [ 164.643981][ T8985] gretap1: entered promiscuous mode [ 164.673614][ T8985] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 164.716370][ T8985] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 164.757268][ T8985] bond1: left promiscuous mode [ 164.762469][ T8985] gretap1: left promiscuous mode [ 164.922963][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'. [ 165.240104][ T9023] can: request_module (can-proto-3) failed. [ 165.429962][ T9030] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 166.336188][ T30] audit: type=1800 audit(1775445301.364:4): pid=9081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.808" name=9FEB01 dev="tmpfs" ino=842 res=0 errno=0 [ 166.394023][ T30] audit: type=1800 audit(1775445301.374:5): pid=9082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.808" name=9FEB01 dev="tmpfs" ino=842 res=0 errno=0 [ 166.668232][ T9101] netlink: 'syz.3.810': attribute type 15 has an invalid length. [ 166.679359][ T9101] dummy0: left promiscuous mode [ 166.689397][ T9101] veth0_to_hsr: left promiscuous mode [ 166.697285][ T9101] veth0_virt_wifi: left allmulticast mode [ 166.877903][ T9059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.409424][ T9137] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 167.510214][ T9137] SET target dimension over the limit! [ 167.535448][ T9143] __nla_validate_parse: 3 callbacks suppressed [ 167.535469][ T9143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.819'. [ 167.793722][ T9153] sctp: [Deprecated]: syz.4.820 (pid 9153) Use of int in maxseg socket option. [ 167.793722][ T9153] Use struct sctp_assoc_value instead [ 167.825916][ T9160] netlink: 56 bytes leftover after parsing attributes in process `syz.1.821'. [ 168.296264][ T9177] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 168.744558][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 168.865469][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.485006][ T9220] netlink: 'syz.2.836': attribute type 1 has an invalid length. [ 169.499266][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'. [ 169.533257][ T9220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.970009][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'. [ 170.187473][ T9251] syzkaller0: entered promiscuous mode [ 170.233272][ T9251] syzkaller0: entered allmulticast mode [ 170.426416][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.847'. [ 170.531648][ T5832] block nbd0: Receive control failed (result -1) [ 171.001355][ T9292] netlink: 'syz.2.853': attribute type 10 has an invalid length. [ 171.067973][ T9292] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.087767][ T9292] bond0: (slave team0): Enslaving as an active interface with an up link [ 171.112270][ T9295] netlink: 'syz.0.854': attribute type 89 has an invalid length. [ 171.519993][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 171.699945][ T9323] netlink: 'syz.2.860': attribute type 4 has an invalid length. [ 171.759639][ T9317] IPv6: NLM_F_REPLACE set, but no existing node found! [ 171.789387][ T8050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.820927][ T8050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.100956][ T9347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.865'. [ 172.237886][ T9344] syzkaller0: entered promiscuous mode [ 172.287753][ T9344] syzkaller0: entered allmulticast mode [ 173.205689][ T9386] syzkaller0: entered promiscuous mode [ 173.211252][ T9386] syzkaller0: entered allmulticast mode [ 173.254640][ T9385] syzkaller0: entered promiscuous mode [ 173.266758][ T9385] syzkaller0: entered allmulticast mode [ 173.336753][ T9389] syz.2.876 uses old SIOCAX25GETINFO [ 173.390529][ T9389] netlink: 'syz.2.876': attribute type 1 has an invalid length. [ 173.416826][ T9389] nbd: error processing sock list [ 173.815325][ T9401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.879'. [ 173.831845][ T9401] ipvlan1: entered promiscuous mode [ 173.837941][ T9403] netlink: 'syz.1.880': attribute type 3 has an invalid length. [ 173.845580][ T9401] ipvlan1: left promiscuous mode [ 174.026197][ T9410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.882'. [ 174.105865][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 174.124206][ T9412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.216357][ T9415] vlan2: entered allmulticast mode [ 174.221798][ T9415] macvtap0: entered allmulticast mode [ 174.337021][ T5889] IPVS: starting estimator thread 0... [ 174.343032][ T9426] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 174.385081][ T9430] syzkaller0: entered promiscuous mode [ 174.390954][ T9430] syzkaller0: entered allmulticast mode [ 174.428314][ T9367] netlink: 'syz.4.870': attribute type 1 has an invalid length. [ 174.455245][ T9429] IPVS: using max 32 ests per chain, 76800 per kthread [ 174.455977][ T9432] netlink: 'syz.2.888': attribute type 13 has an invalid length. [ 174.491688][ T9432] tipc: Enabling of bearer rejected, failed to enable media [ 174.940964][ T9454] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 175.051734][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.895'. [ 175.151258][ T9465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.897'. [ 175.820025][ T9489] netlink: 'syz.4.904': attribute type 3 has an invalid length. [ 175.846482][ T9489] netlink: 'syz.4.904': attribute type 3 has an invalid length. [ 175.900074][ T9489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.904'. [ 176.018402][ T9502] netlink: 48 bytes leftover after parsing attributes in process `syz.4.907'. [ 176.057806][ T9502] team0: Device vlan6 is already an upper device of the team interface [ 176.207277][ T9502] netlink: 48 bytes leftover after parsing attributes in process `syz.4.907'. [ 176.245672][ T9502] team0: Device vlan6 is already an upper device of the team interface [ 176.317694][ T9502] netlink: 48 bytes leftover after parsing attributes in process `syz.4.907'. [ 176.422241][ T9502] team0: Device vlan6 is already an upper device of the team interface [ 176.516617][ T9502] netlink: 48 bytes leftover after parsing attributes in process `syz.4.907'. [ 176.538181][ T9502] team0: Device vlan6 is already an upper device of the team interface [ 176.665950][ T9502] team0: Device vlan6 is already an upper device of the team interface [ 176.696255][ T9493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.763511][ T9502] team0: Device vlan6 is already an upper device of the team interface [ 177.218999][ T9540] trusted_key: syz.1.916 sent an empty control message without MSG_MORE. [ 177.274729][ T9544] vlan6: entered promiscuous mode [ 177.292489][ T9544] geneve1: entered promiscuous mode [ 177.302118][ T9544] vlan6: entered allmulticast mode [ 177.308775][ T9544] geneve1: entered allmulticast mode [ 177.509141][ T9557] netlink: zone id is out of range [ 177.515333][ T9557] netlink: zone id is out of range [ 177.520492][ T9557] netlink: zone id is out of range [ 177.528103][ T9557] netlink: zone id is out of range [ 177.533310][ T9557] netlink: zone id is out of range [ 177.538914][ T9557] netlink: zone id is out of range [ 177.544159][ T9557] netlink: zone id is out of range [ 177.549899][ T9557] netlink: zone id is out of range [ 177.557465][ T9557] netlink: zone id is out of range [ 177.563550][ T9557] netlink: zone id is out of range [ 177.745147][ T9565] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí [ 177.745147][ T9565] 3ìUH†5rºBnœæ [ 178.351772][ T9604] syzkaller1: entered promiscuous mode [ 178.365569][ T9604] syzkaller1: entered allmulticast mode [ 178.568330][ T8045] bond0: (slave bond_slave_0): interface is now down [ 178.576735][ T9612] bond0: option arp_validate: invalid value (55553) [ 178.602268][ T8045] bond0: (slave bond_slave_1): interface is now down [ 178.623769][ T8045] bond0: now running without any active interface! [ 178.692452][ T9624] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 178.758505][ T9624] syzkaller0: entered promiscuous mode [ 178.764128][ T9624] syzkaller0: entered allmulticast mode [ 178.797865][ T9624] tipc: Enabled bearer , priority 0 [ 178.853063][ T9635] __nla_validate_parse: 6 callbacks suppressed [ 178.853083][ T9635] netlink: 60 bytes leftover after parsing attributes in process `syz.2.946'. [ 178.904875][ T9635] netlink: 67 bytes leftover after parsing attributes in process `syz.2.946'. [ 178.950429][ T9637] tipc: Resetting bearer [ 178.972607][ T9637] tipc: Disabling bearer [ 178.993183][ T9644] netlink: 'syz.1.947': attribute type 1 has an invalid length. [ 179.034813][ T9644] bond8: entered promiscuous mode [ 179.040667][ T9644] 8021q: adding VLAN 0 to HW filter on device bond8 [ 179.164844][ T9644] 8021q: adding VLAN 0 to HW filter on device bond8 [ 179.178050][ T9644] bond8: (slave gre2): The slave device specified does not support setting the MAC address [ 179.191142][ T9644] bond8: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 179.205837][ T9644] bond8: (slave gre2): making interface the new active one [ 179.214473][ T9644] gre2: entered promiscuous mode [ 179.234546][ T9644] bond8: (slave gre2): Enslaving as an active interface with an up link [ 179.627557][ T9655] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 179.681624][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'. [ 180.188595][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'. [ 180.222040][ T9698] netlink: 'syz.3.962': attribute type 1 has an invalid length. [ 180.240143][ T9698] netlink: 'syz.3.962': attribute type 2 has an invalid length. [ 180.496617][ T9713] netlink: 272 bytes leftover after parsing attributes in process `syz.0.966'. [ 180.541283][ T9713] netlink: 32 bytes leftover after parsing attributes in process `syz.0.966'. [ 180.868375][ T9742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.974'. [ 181.071688][ T9748] netlink: 72 bytes leftover after parsing attributes in process `syz.0.977'. [ 181.134459][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.976'. [ 181.150704][ T9756] netlink: 72 bytes leftover after parsing attributes in process `syz.0.977'. [ 181.239599][ T9752] team0: Port device team_slave_0 removed [ 181.664935][ T9778] bond3: Removing last arp target with arp_interval on [ 181.748001][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 182.421400][ T9832] netlink: 'syz.4.997': attribute type 1 has an invalid length. [ 182.479472][ T9835] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 182.790002][ T9858] netlink: 'syz.4.1002': attribute type 11 has an invalid length. [ 182.877799][ T9855] bond1: entered allmulticast mode [ 182.910998][ T9856] macvlan2: entered promiscuous mode [ 182.927895][ T9856] macvlan2: entered allmulticast mode [ 182.942281][ T9856] bond1: (slave macvlan2): Opening slave failed [ 182.994794][ T9862] macvlan2: entered promiscuous mode [ 183.012129][ T9862] macvlan2: entered allmulticast mode [ 183.042304][ T9862] bond1: (slave macvlan2): Opening slave failed [ 183.246337][ T9880] syzkaller0: entered promiscuous mode [ 183.252051][ T9880] syzkaller0: entered allmulticast mode [ 183.306487][ T9883] netlink: 'syz.0.1007': attribute type 1 has an invalid length. [ 183.945752][ T9916] sit1: entered allmulticast mode [ 184.028388][ T9923] __nla_validate_parse: 7 callbacks suppressed [ 184.028409][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1013'. [ 184.044785][ T9923] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1013'. [ 184.315757][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1016'. [ 184.326103][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.370738][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.554714][ T9944] bridge5: entered promiscuous mode [ 184.595480][ T9944] bridge5: port 1(macvtap1) entered blocking state [ 184.628052][ T9944] bridge5: port 1(macvtap1) entered disabled state [ 184.634979][ T9944] macvtap1: entered allmulticast mode [ 184.725526][ T9944] bridge5: entered allmulticast mode [ 184.733606][ T9944] macvtap1: left allmulticast mode [ 184.870098][ T9944] bridge5: left allmulticast mode [ 184.879598][ T9944] bridge5: left promiscuous mode [ 184.981959][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.999530][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.022812][ T9957] netlink: 'syz.1.1019': attribute type 12 has an invalid length. [ 185.063357][ T9957] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1019'. [ 185.200273][ T9955] bridge_slave_1: left allmulticast mode [ 185.215704][ T9955] bridge_slave_1: left promiscuous mode [ 185.221611][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.273323][ T9955] bond0: (slave bond_slave_0): Releasing backup interface [ 185.347156][ T9955] bond0: (slave bond_slave_1): Releasing backup interface [ 185.386871][ T9955] team0: Port device team_slave_0 removed [ 185.413976][ T9955] team0: Port device team_slave_1 removed [ 185.454173][ T9955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.468516][ T9955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.481495][ T9955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.490068][ T9955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.511891][ T9955] bond1: (slave geneve2): Releasing active interface [ 185.547917][ T9955] team0: Port device bridge2 removed [ 185.566649][ T9955] bond7: (slave bridge3): Releasing active interface [ 185.592284][ T9981] SET target dimension over the limit! [ 185.608961][ T9955] bond8: (slave gre2): Releasing backup interface [ 185.617917][ T9955] gre2: left promiscuous mode [ 185.761401][ T30] audit: type=1800 audit(1775445320.794:6): pid=9986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1029" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1161 res=0 errno=0 [ 185.787140][ T9986] netlink: 'syz.3.1029': attribute type 1 has an invalid length. [ 185.837675][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 185.857848][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 185.874567][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 185.961833][ T9995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1030'. [ 186.132795][ T9998] batman_adv: batadv0: Adding interface: wlan1 [ 186.145354][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.182594][ T9998] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.291713][ T9998] batman_adv: batadv0: Interface activated: wlan1 [ 186.536569][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 186.632011][T10033] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1038'. [ 187.222227][T10055] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.372157][T10055] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.447021][T10071] netlink: 'syz.0.1044': attribute type 1 has an invalid length. [ 187.731631][T10055] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.919449][T10055] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.943530][T10078] syzkaller1: entered promiscuous mode [ 187.949890][T10078] syzkaller1: entered allmulticast mode [ 188.031559][T10063] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 188.073156][T10063] bond2 (unregistering): Released all slaves [ 188.345609][T10107] netlink: 'syz.2.1051': attribute type 10 has an invalid length. [ 188.405396][ T6573] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.414822][T10107] netlink: 'syz.2.1051': attribute type 1 has an invalid length. [ 188.457105][ T6573] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.558080][T10107] bond2: entered promiscuous mode [ 188.563743][T10107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.588441][ T6573] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.658781][T10115] bond2: (slave bridge0): making interface the new active one [ 188.696601][T10115] bridge0: entered promiscuous mode [ 188.712406][T10115] bridge0: left promiscuous mode [ 188.818646][ T6576] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.248177][T10158] __nla_validate_parse: 6 callbacks suppressed [ 189.248197][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 189.569299][T10171] sctp: [Deprecated]: syz.3.1062 (pid 10171) Use of int in max_burst socket option. [ 189.569299][T10171] Use struct sctp_assoc_value instead [ 189.691500][T10177] netlink: 'syz.4.1064': attribute type 10 has an invalid length. [ 189.787808][T10177] team0: Port device dummy0 added [ 189.830941][T10179] netlink: 'syz.4.1064': attribute type 10 has an invalid length. [ 189.960305][T10179] team0: Port device dummy0 removed [ 190.003326][T10179] dummy0: entered allmulticast mode [ 190.009847][T10179] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 190.130356][T10191] netlink: 'syz.2.1067': attribute type 10 has an invalid length. [ 190.526342][T10208] x_tables: duplicate underflow at hook 2 [ 190.560616][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 190.667430][T10216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1072'. [ 190.766073][T10216] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.808609][T10228] xt_TPROXY: Can be used only with -p tcp or -p udp [ 191.283848][T10253] tipc: Enabled bearer , priority 0 [ 191.366367][T10256] bridge0: entered promiscuous mode [ 191.374090][T10259] block nbd1: not configured, cannot reconfigure [ 191.386945][T10253] syzkaller0: entered promiscuous mode [ 191.392459][T10253] syzkaller0: entered allmulticast mode [ 191.476899][T10253] tipc: Resetting bearer [ 191.536180][T10253] tipc: Disabling bearer [ 191.783127][T10277] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1091'. [ 191.793082][T10265] syzkaller0: entered promiscuous mode [ 191.800116][T10265] syzkaller0: entered allmulticast mode [ 192.081390][T10288] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.109124][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1097'. [ 192.166489][T10294] bridge_slave_1 (unregistering): left allmulticast mode [ 192.203085][T10294] bridge_slave_1 (unregistering): left promiscuous mode [ 192.234195][T10294] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.322457][T10288] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.456136][T10288] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.485663][T10309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1102'. [ 192.628785][T10288] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.655043][T10312] team0: Port device syz_tun added [ 192.694393][T10313] team0: Port device syz_tun removed [ 192.707887][T10313] bond0: (slave team0): Releasing backup interface [ 192.733143][T10313] bond0: (slave bond_slave_0): Releasing backup interface [ 192.755926][T10313] bond0: (slave bond_slave_1): Releasing backup interface [ 192.798177][T10313] team0: Port device team_slave_0 removed [ 192.827994][T10313] team0: Port device team_slave_1 removed [ 192.837380][T10313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.846183][T10313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.866445][T10313] net_ratelimit: 7 callbacks suppressed [ 192.866464][T10313] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.005191][ T8050] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.023762][ T8050] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.065019][ T8050] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.093201][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'. [ 193.117605][ T8050] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.124467][T10325] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1106'. [ 193.163638][T10325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1106'. [ 193.359824][T10338] netlink: 'syz.2.1110': attribute type 58 has an invalid length. [ 193.383569][T10336] x_tables: unsorted underflow at hook 2 [ 193.400860][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 193.411933][T10340] netlink: 'syz.4.1109': attribute type 10 has an invalid length. [ 194.029084][T10379] .70·: renamed from hsr0 [ 194.060729][T10379] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.106004][T10379] .70·: entered allmulticast mode [ 194.152221][T10379] hsr_slave_0: entered allmulticast mode [ 194.217349][T10379] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 194.369734][T10399] __nla_validate_parse: 4 callbacks suppressed [ 194.369755][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 194.373980][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1124'. [ 194.401831][T10399] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 194.473141][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.499087][T10399] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 194.570416][T10406] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1127'. [ 194.592381][T10406] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1127'. [ 194.613772][T10411] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 194.622803][T10411] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 195.407678][T10455] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1138'. [ 195.420820][T10455] xt_hashlimit: max too large, truncated to 1048576 [ 195.428889][T10455] xt_hashlimit: overflow, try lower: 2/0 [ 195.787358][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'. [ 196.116209][T10488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.407642][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'. [ 196.435861][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 196.496351][T10500] netlink: 'syz.1.1153': attribute type 13 has an invalid length. [ 196.524567][T10500] netlink: 'syz.1.1153': attribute type 11 has an invalid length. [ 196.538408][T10501] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.1152'. [ 197.051774][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1161'. [ 197.332653][T10524] 8021q: adding VLAN 0 to HW filter on device bond9 [ 197.427492][T10529] macsec3: entered promiscuous mode [ 197.432877][T10529] bond9: entered promiscuous mode [ 197.485479][T10529] bond9: left promiscuous mode [ 197.774859][T10563] ip6t_srh: unknown srh invflags BA61 [ 197.791696][T10527] lec:lec_atm_close: lec0: Shut down! [ 198.431134][T10588] dvmrp0: entered allmulticast mode [ 198.599178][T10592] veth7: entered promiscuous mode [ 198.881029][T10617] netlink: 'syz.2.1180': attribute type 2 has an invalid length. [ 199.545410][ T5932] lec:lec_start_xmit: lec0:No lecd attached [ 199.782664][T10663] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.854399][T10664] netlink: 'syz.3.1191': attribute type 1 has an invalid length. [ 200.021517][T10688] __nla_validate_parse: 1 callbacks suppressed [ 200.021538][T10688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1195'. [ 200.212430][T10698] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1199'. [ 200.234111][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 200.300610][T10702] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 200.387607][T10709] netlink: 'syz.0.1200': attribute type 1 has an invalid length. [ 200.739185][T10722] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1203'. [ 200.828604][T10731] syzkaller0: entered promiscuous mode [ 200.834165][T10731] syzkaller0: entered allmulticast mode [ 200.927485][T10733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1207'. [ 200.940900][T10733] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1207'. [ 201.018661][T10739] smc: net device hsr0 applied user defined pnetid SYZ2 [ 201.375290][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1210'. [ 201.491988][T10769] netlink: 'syz.2.1215': attribute type 29 has an invalid length. [ 201.500032][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 201.516121][T10769] netlink: 'syz.2.1215': attribute type 29 has an invalid length. [ 201.575151][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 201.641848][T10769] netlink: 'syz.2.1215': attribute type 29 has an invalid length. [ 201.692934][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 201.725796][T10769] netlink: 'syz.2.1215': attribute type 29 has an invalid length. [ 201.769725][T10769] netlink: 'syz.2.1215': attribute type 29 has an invalid length. [ 201.826036][T10769] netlink: 'syz.2.1215': attribute type 29 has an invalid length. [ 201.855544][T10769] netlink: 'syz.2.1215': attribute type 29 has an invalid length. [ 202.261946][T10795] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 202.684022][T10815] macvlan2: entered promiscuous mode [ 202.731328][T10815] batadv_slave_0: entered promiscuous mode [ 202.738910][T10815] macvlan2: entered allmulticast mode [ 202.744907][T10815] batadv_slave_0: entered allmulticast mode [ 202.886245][T10822] erspan0: entered promiscuous mode [ 203.063905][T10830] bond0: entered promiscuous mode [ 203.076359][T10830] debugfs: 'hsr0' already exists in 'hsr' [ 203.082448][T10830] Cannot create hsr debugfs directory [ 203.099518][T10826] syzkaller1: entered promiscuous mode [ 203.114983][T10826] syzkaller1: entered allmulticast mode [ 203.579474][T10849] syzkaller0: entered promiscuous mode [ 203.595940][T10849] syzkaller0: entered allmulticast mode [ 204.105299][T10871] can: request_module (can-proto-5) failed. [ 205.257432][T10950] validate_nla: 17 callbacks suppressed [ 205.257451][T10950] netlink: 'syz.1.1264': attribute type 1 has an invalid length. [ 205.292007][T10950] __nla_validate_parse: 27 callbacks suppressed [ 205.292026][T10950] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1264'. [ 205.323812][T10950] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1264'. [ 205.333858][T10950] tc_dump_action: action bad kind [ 205.345143][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms [ 205.353578][ C1] lec:lec_tx_timeout: lec0 [ 205.359756][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 205.531604][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 205.569910][ T8051] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.579161][ T6576] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.589092][ T6576] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.606622][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 205.627643][ T6576] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.662795][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 205.966255][T10991] IPVS: set_ctl: invalid protocol: 0 100.17.1.1:20002 [ 206.431257][T10999] netlink: 'syz.3.1275': attribute type 4 has an invalid length. [ 206.681564][T11014] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1277'. [ 206.788846][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 206.789630][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 206.797069][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 206.801260][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 206.877007][T10986] batman_adv: batadv0: Interface deactivated: wlan1 [ 207.103661][T11034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1282'. [ 207.192451][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'. [ 207.237100][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'. [ 207.293390][T11034] netlink: 'syz.3.1282': attribute type 13 has an invalid length. [ 207.829112][T11063] netlink: 'syz.3.1285': attribute type 1 has an invalid length. [ 207.851598][T11063] netlink: 'syz.3.1285': attribute type 2 has an invalid length. [ 207.877379][T11068] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1288'. [ 208.488226][T11089] 8021q: adding VLAN 0 to HW filter on device bond5 [ 208.549624][T11091] 8021q: adding VLAN 0 to HW filter on device bond6 [ 208.706706][T11102] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 209.448454][T11148] netlink: 'syz.3.1302': attribute type 7 has an invalid length. [ 209.457944][T11148] netlink: 'syz.3.1302': attribute type 5 has an invalid length. [ 209.584674][T11140] syzkaller0: entered promiscuous mode [ 209.629934][T11140] syzkaller0: entered allmulticast mode [ 209.752911][T11159] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 210.129372][T11174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.214695][T11177] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 210.322992][T11183] __nla_validate_parse: 14 callbacks suppressed [ 210.323012][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1311'. [ 210.426967][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 210.747226][T11199] netlink: 'syz.2.1316': attribute type 1 has an invalid length. [ 210.778220][T11199] netlink: 'syz.2.1316': attribute type 2 has an invalid length. [ 210.811406][T11203] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 210.817516][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 211.105113][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 211.113232][ C1] lec:lec_tx_timeout: lec0 [ 211.119143][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 211.473679][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1320'. [ 213.270084][T11229] BUG: Bad page state in process syz.0.1322 pfn:78ece [ 213.277074][T11229] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x78ece [ 213.287238][T11229] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 213.294397][T11229] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 213.303066][T11229] raw: ffff888000000000 3ffffffffffffffe 00000000ffffffff 0000000000000000 [ 213.311717][T11229] page dumped because: page_pool leak [ 213.317145][T11229] page_owner tracks the page as allocated [ 213.322946][T11229] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13, tgid 13 (kworker/u8:1), ts 180756075286, free_ts 180685506990 [ 213.340218][T11229] post_alloc_hook+0x231/0x280 [ 213.345035][T11229] get_page_from_freelist+0x24dc/0x2580 [ 213.350880][T11229] __alloc_frozen_pages_noprof+0x18d/0x380 [ 213.356840][T11229] alloc_pages_bulk_noprof+0x558/0x700 [ 213.362429][T11229] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 213.368602][T11229] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 213.374444][T11229] skb_pp_cow_data+0x287/0x1bb0 [ 213.379379][T11229] do_xdp_generic+0x76b/0x12e0 [ 213.384272][T11229] __netif_receive_skb_core+0x10e5/0x31a0 [ 213.390142][T11229] process_backlog+0x76d/0x1950 [ 213.395052][T11229] __napi_poll+0xae/0x340 [ 213.399533][T11229] net_rx_action+0x627/0xf70 [ 213.404159][T11229] handle_softirqs+0x22a/0x870 [ 213.409097][T11229] do_softirq+0x76/0xd0 [ 213.413311][T11229] __local_bh_enable_ip+0xf8/0x130 [ 213.418518][T11229] __dev_queue_xmit+0x1efe/0x3870 [ 213.423627][T11229] page last free pid 9723 tgid 9723 stack trace: [ 213.430629][T11229] __free_frozen_pages+0xc2b/0xdb0 [ 213.435841][T11229] tlb_remove_table_rcu+0x85/0x100 [ 213.440996][T11229] rcu_core+0x7cd/0x1070 [ 213.445320][T11229] handle_softirqs+0x22a/0x870 [ 213.450213][T11229] __irq_exit_rcu+0x5f/0x150 [ 213.454859][T11229] irq_exit_rcu+0x9/0x30 [ 213.459229][T11229] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 213.464924][T11229] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 213.471000][T11229] Modules linked in: [ 213.475036][T11229] CPU: 0 UID: 0 PID: 11229 Comm: syz.0.1322 Not tainted syzkaller #0 PREEMPT(full) [ 213.475060][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 213.475075][T11229] Call Trace: [ 213.475084][T11229] [ 213.475091][T11229] dump_stack_lvl+0xe8/0x150 [ 213.475123][T11229] bad_page+0x17f/0x1c0 [ 213.475154][T11229] __free_frozen_pages+0xd62/0xdb0 [ 213.475184][T11229] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 213.475232][T11229] bpf_xdp_adjust_tail+0x1d6/0x220 [ 213.475265][T11229] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 213.475285][T11229] bpf_prog_run_generic_xdp+0x603/0x1490 [ 213.475344][T11229] do_xdp_generic+0xac5/0x12e0 [ 213.475384][T11229] ? __pfx_do_xdp_generic+0x10/0x10 [ 213.475442][T11229] ? tun_get_user+0x23c7/0x3ed0 [ 213.475466][T11229] tun_get_user+0x24f0/0x3ed0 [ 213.475511][T11229] ? aa_file_perm+0x50e/0x15e0 [ 213.475533][T11229] ? __pfx_tun_get_user+0x10/0x10 [ 213.475555][T11229] ? aa_file_perm+0x192/0x15e0 [ 213.475583][T11229] ? __lock_acquire+0x6b5/0x2cf0 [ 213.475615][T11229] ? preempt_schedule_common+0x82/0xd0 [ 213.475646][T11229] ? ref_tracker_alloc+0x35c/0x4c0 [ 213.475670][T11229] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 213.475696][T11229] ? tun_get+0x1c/0x2f0 [ 213.475724][T11229] ? tun_get+0x1c/0x2f0 [ 213.475747][T11229] ? tun_get+0x1c/0x2f0 [ 213.475772][T11229] tun_chr_write_iter+0x113/0x200 [ 213.475799][T11229] vfs_write+0x61d/0xb90 [ 213.475830][T11229] ? __pfx_vfs_write+0x10/0x10 [ 213.475861][T11229] ? __fget_files+0x2a/0x420 [ 213.475888][T11229] ksys_write+0x150/0x270 [ 213.475912][T11229] ? __pfx_ksys_write+0x10/0x10 [ 213.475945][T11229] do_syscall_64+0x14d/0xf80 [ 213.475970][T11229] ? trace_irq_disable+0x3b/0x150 [ 213.475988][T11229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.476007][T11229] ? clear_bhb_loop+0x40/0x90 [ 213.476068][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.476087][T11229] RIP: 0033:0x7f650eb5d04e [ 213.476107][T11229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.476121][T11229] RSP: 002b:00007f650cdf5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.476141][T11229] RAX: ffffffffffffffda RBX: 00007f650cdf66c0 RCX: 00007f650eb5d04e [ 213.476153][T11229] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 213.476166][T11229] RBP: 00007f650ec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 213.476177][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.476188][T11229] R13: 00007f650ee16038 R14: 00007f650ee15fa0 R15: 00007ffe69a64dd8 [ 213.476219][T11229] [ 213.737018][T11229] Disabling lock debugging due to kernel taint [ 213.743369][T11229] BUG: Bad page state in process syz.0.1322 pfn:2cc95 [ 213.750270][T11229] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cc95 [ 213.759355][T11229] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 213.766544][T11229] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 213.775258][T11229] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 213.783856][T11229] page dumped because: page_pool leak [ 213.789362][T11229] page_owner tracks the page as allocated [ 213.795165][T11229] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11229, tgid 11228 (syz.0.1322), ts 213269946210, free_ts 213238339464 [ 213.812635][T11229] post_alloc_hook+0x231/0x280 [ 213.817638][T11229] get_page_from_freelist+0x24dc/0x2580 [ 213.823427][T11229] __alloc_frozen_pages_noprof+0x18d/0x380 [ 213.829484][T11229] alloc_pages_bulk_noprof+0x558/0x700 [ 213.835200][T11229] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 213.841290][T11229] skb_pp_cow_data+0xcea/0x1bb0 [ 213.846244][T11229] do_xdp_generic+0x76b/0x12e0 [ 213.851035][T11229] tun_get_user+0x24f0/0x3ed0 [ 213.855754][T11229] tun_chr_write_iter+0x113/0x200 [ 213.860815][T11229] vfs_write+0x61d/0xb90 [ 213.865070][T11229] ksys_write+0x150/0x270 [ 213.869478][T11229] do_syscall_64+0x14d/0xf80 [ 213.874084][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.880040][T11229] page last free pid 9 tgid 9 stack trace: [ 213.885900][T11229] __free_frozen_pages+0xc2b/0xdb0 [ 213.891141][T11229] vfree+0x25a/0x400 [ 213.895109][T11229] delayed_vfree_work+0x55/0x80 [ 213.900175][T11229] process_scheduled_works+0xb6e/0x18c0 [ 213.905798][T11229] worker_thread+0xa53/0xfc0 [ 213.910427][T11229] kthread+0x388/0x470 [ 213.914539][T11229] ret_from_fork+0x51e/0xb90 [ 213.919194][T11229] ret_from_fork_asm+0x1a/0x30 [ 213.924093][T11229] Modules linked in: [ 213.928144][T11229] CPU: 0 UID: 0 PID: 11229 Comm: syz.0.1322 Tainted: G B syzkaller #0 PREEMPT(full) [ 213.928177][T11229] Tainted: [B]=BAD_PAGE [ 213.928184][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 213.928196][T11229] Call Trace: [ 213.928203][T11229] [ 213.928211][T11229] dump_stack_lvl+0xe8/0x150 [ 213.928243][T11229] bad_page+0x17f/0x1c0 [ 213.928273][T11229] __free_frozen_pages+0xd62/0xdb0 [ 213.928299][T11229] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 213.928338][T11229] bpf_xdp_adjust_tail+0x1d6/0x220 [ 213.928365][T11229] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 213.928382][T11229] bpf_prog_run_generic_xdp+0x603/0x1490 [ 213.928421][T11229] do_xdp_generic+0xac5/0x12e0 [ 213.928453][T11229] ? __pfx_do_xdp_generic+0x10/0x10 [ 213.928495][T11229] ? tun_get_user+0x23c7/0x3ed0 [ 213.928518][T11229] tun_get_user+0x24f0/0x3ed0 [ 213.928549][T11229] ? aa_file_perm+0x50e/0x15e0 [ 213.928569][T11229] ? __pfx_tun_get_user+0x10/0x10 [ 213.928590][T11229] ? aa_file_perm+0x192/0x15e0 [ 213.928611][T11229] ? __lock_acquire+0x6b5/0x2cf0 [ 213.928639][T11229] ? preempt_schedule_common+0x82/0xd0 [ 213.928665][T11229] ? ref_tracker_alloc+0x35c/0x4c0 [ 213.928687][T11229] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 213.928708][T11229] ? tun_get+0x1c/0x2f0 [ 213.928733][T11229] ? tun_get+0x1c/0x2f0 [ 213.928754][T11229] ? tun_get+0x1c/0x2f0 [ 213.928777][T11229] tun_chr_write_iter+0x113/0x200 [ 213.928812][T11229] vfs_write+0x61d/0xb90 [ 213.928837][T11229] ? __pfx_vfs_write+0x10/0x10 [ 213.928863][T11229] ? __fget_files+0x2a/0x420 [ 213.928885][T11229] ksys_write+0x150/0x270 [ 213.928907][T11229] ? __pfx_ksys_write+0x10/0x10 [ 213.928933][T11229] do_syscall_64+0x14d/0xf80 [ 213.928958][T11229] ? trace_irq_disable+0x3b/0x150 [ 213.928975][T11229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.928994][T11229] ? clear_bhb_loop+0x40/0x90 [ 213.929015][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.929034][T11229] RIP: 0033:0x7f650eb5d04e [ 213.929049][T11229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.929064][T11229] RSP: 002b:00007f650cdf5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.929086][T11229] RAX: ffffffffffffffda RBX: 00007f650cdf66c0 RCX: 00007f650eb5d04e [ 213.929100][T11229] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 213.929113][T11229] RBP: 00007f650ec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 213.929125][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.929136][T11229] R13: 00007f650ee16038 R14: 00007f650ee15fa0 R15: 00007ffe69a64dd8 [ 213.929158][T11229] [ 213.929169][T11229] BUG: Bad page state in process syz.0.1322 pfn:2cc96 [ 213.949676][T11252] netlink: 'syz.1.1325': attribute type 21 has an invalid length. [ 213.954676][T11229] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cc96 [ 213.976201][T11254] rdma_rxe: rxe_newlink: failed to add gre0 [ 213.980775][T11229] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 213.980814][T11229] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 213.980832][T11229] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 213.986488][T11252] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1325'. [ 213.991512][T11229] page dumped because: page_pool leak [ 213.991527][T11229] page_owner tracks the page as allocated [ 213.991535][T11229] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11229, tgid 11228 (syz.0.1322), ts 213269921501, free_ts 213238352647 [ 214.020235][T11252] netlink: 'syz.1.1325': attribute type 4 has an invalid length. [ 214.021700][T11229] post_alloc_hook+0x231/0x280 [ 214.021730][T11229] get_page_from_freelist+0x24dc/0x2580 [ 214.042999][T11255] netlink: 'syz.1.1325': attribute type 1 has an invalid length. [ 214.047131][T11229] __alloc_frozen_pages_noprof+0x18d/0x380 [ 214.047164][T11229] alloc_pages_bulk_noprof+0x558/0x700 [ 214.052880][T11252] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1325'. [ 214.056839][T11229] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 214.056872][T11229] skb_pp_cow_data+0xcea/0x1bb0 [ 214.056895][T11229] do_xdp_generic+0x76b/0x12e0 [ 214.056920][T11229] tun_get_user+0x24f0/0x3ed0 [ 214.056941][T11229] tun_chr_write_iter+0x113/0x200 [ 214.056961][T11229] vfs_write+0x61d/0xb90 [ 214.056980][T11229] ksys_write+0x150/0x270 [ 214.056998][T11229] do_syscall_64+0x14d/0xf80 [ 214.057021][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.057040][T11229] page last free pid 9 tgid 9 stack trace: [ 214.057051][T11229] __free_frozen_pages+0xc2b/0xdb0 [ 214.057072][T11229] vfree+0x25a/0x400 [ 214.057088][T11229] delayed_vfree_work+0x55/0x80 [ 214.057109][T11229] process_scheduled_works+0xb6e/0x18c0 [ 214.057133][T11229] worker_thread+0xa53/0xfc0 [ 214.057156][T11229] kthread+0x388/0x470 [ 214.057172][T11229] ret_from_fork+0x51e/0xb90 [ 214.057193][T11229] ret_from_fork_asm+0x1a/0x30 [ 214.079712][T11229] Modules linked in: [ 214.084585][T11255] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1325'. [ 214.088762][T11229] [ 214.088786][T11229] CPU: 0 UID: 0 PID: 11229 Comm: syz.0.1322 Tainted: G B syzkaller #0 PREEMPT(full) [ 214.088815][T11229] Tainted: [B]=BAD_PAGE [ 214.088822][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 214.088833][T11229] Call Trace: [ 214.088842][T11229] [ 214.088851][T11229] dump_stack_lvl+0xe8/0x150 [ 214.088882][T11229] bad_page+0x17f/0x1c0 [ 214.088911][T11229] __free_frozen_pages+0xd62/0xdb0 [ 214.088937][T11229] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 214.088975][T11229] bpf_xdp_adjust_tail+0x1d6/0x220 [ 214.089001][T11229] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 214.089019][T11229] bpf_prog_run_generic_xdp+0x603/0x1490 [ 214.089057][T11229] do_xdp_generic+0xac5/0x12e0 [ 214.089085][T11229] ? __pfx_do_xdp_generic+0x10/0x10 [ 214.089119][T11229] ? tun_get_user+0x23c7/0x3ed0 [ 214.089139][T11229] tun_get_user+0x24f0/0x3ed0 [ 214.089164][T11229] ? aa_file_perm+0x50e/0x15e0 [ 214.089181][T11229] ? __pfx_tun_get_user+0x10/0x10 [ 214.089198][T11229] ? aa_file_perm+0x192/0x15e0 [ 214.089217][T11229] ? __lock_acquire+0x6b5/0x2cf0 [ 214.089239][T11229] ? preempt_schedule_common+0x82/0xd0 [ 214.089262][T11229] ? ref_tracker_alloc+0x35c/0x4c0 [ 214.089280][T11229] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 214.089298][T11229] ? tun_get+0x1c/0x2f0 [ 214.089317][T11229] ? tun_get+0x1c/0x2f0 [ 214.089334][T11229] ? tun_get+0x1c/0x2f0 [ 214.089353][T11229] tun_chr_write_iter+0x113/0x200 [ 214.089373][T11229] vfs_write+0x61d/0xb90 [ 214.089394][T11229] ? __pfx_vfs_write+0x10/0x10 [ 214.089414][T11229] ? __fget_files+0x2a/0x420 [ 214.089433][T11229] ksys_write+0x150/0x270 [ 214.089452][T11229] ? __pfx_ksys_write+0x10/0x10 [ 214.089474][T11229] do_syscall_64+0x14d/0xf80 [ 214.089494][T11229] ? trace_irq_disable+0x3b/0x150 [ 214.089508][T11229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.089525][T11229] ? clear_bhb_loop+0x40/0x90 [ 214.089544][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.089580][T11229] RIP: 0033:0x7f650eb5d04e [ 214.089596][T11229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 214.089610][T11229] RSP: 002b:00007f650cdf5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.089629][T11229] RAX: ffffffffffffffda RBX: 00007f650cdf66c0 RCX: 00007f650eb5d04e [ 214.089641][T11229] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 214.089652][T11229] RBP: 00007f650ec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 214.089663][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.089673][T11229] R13: 00007f650ee16038 R14: 00007f650ee15fa0 R15: 00007ffe69a64dd8 [ 214.089691][T11229] [ 214.089701][T11229] BUG: Bad page state in process syz.0.1322 pfn:2cc97 [ 214.098521][T11229] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cc97 [ 214.098547][T11229] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 214.098572][T11229] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 214.098587][T11229] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 214.098596][T11229] page dumped because: page_pool leak [ 214.098606][T11229] page_owner tracks the page as allocated [ 214.098613][T11229] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11229, tgid 11228 (syz.0.1322), ts 213269902869, free_ts 213238366214 [ 214.098644][T11229] post_alloc_hook+0x231/0x280 [ 214.098668][T11229] get_page_from_freelist+0x24dc/0x2580 [ 214.098691][T11229] __alloc_frozen_pages_noprof+0x18d/0x380 [ 214.098714][T11229] alloc_pages_bulk_noprof+0x558/0x700 [ 214.098745][T11229] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 214.098771][T11229] skb_pp_cow_data+0xcea/0x1bb0 [ 214.190716][ T797] IPVS: starting estimator thread 0... [ 214.193924][T11229] do_xdp_generic+0x76b/0x12e0 [ 214.198865][T11259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1328'. [ 214.203972][T11229] tun_get_user+0x24f0/0x3ed0 [ 214.204003][T11229] tun_chr_write_iter+0x113/0x200 [ 214.297137][T11260] IPVS: using max 48 ests per chain, 115200 per kthread [ 214.301528][T11229] vfs_write+0x61d/0xb90 [ 214.301559][T11229] ksys_write+0x150/0x270 [ 214.301577][T11229] do_syscall_64+0x14d/0xf80 [ 214.857790][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.863720][T11229] page last free pid 9 tgid 9 stack trace: [ 214.869631][T11229] __free_frozen_pages+0xc2b/0xdb0 [ 214.874785][T11229] vfree+0x25a/0x400 [ 214.878842][T11229] delayed_vfree_work+0x55/0x80 [ 214.883772][T11229] process_scheduled_works+0xb6e/0x18c0 [ 214.889389][T11229] worker_thread+0xa53/0xfc0 [ 214.894019][T11229] kthread+0x388/0x470 [ 214.898157][T11229] ret_from_fork+0x51e/0xb90 [ 214.902786][T11229] ret_from_fork_asm+0x1a/0x30 [ 214.907604][T11229] Modules linked in: [ 214.911712][T11229] CPU: 0 UID: 0 PID: 11229 Comm: syz.0.1322 Tainted: G B syzkaller #0 PREEMPT(full) [ 214.911740][T11229] Tainted: [B]=BAD_PAGE [ 214.911747][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 214.911758][T11229] Call Trace: [ 214.911766][T11229] [ 214.911774][T11229] dump_stack_lvl+0xe8/0x150 [ 214.911799][T11229] bad_page+0x17f/0x1c0 [ 214.911825][T11229] __free_frozen_pages+0xd62/0xdb0 [ 214.911846][T11229] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 214.911881][T11229] bpf_xdp_adjust_tail+0x1d6/0x220 [ 214.911907][T11229] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 214.911925][T11229] bpf_prog_run_generic_xdp+0x603/0x1490 [ 214.911964][T11229] do_xdp_generic+0xac5/0x12e0 [ 214.911994][T11229] ? __pfx_do_xdp_generic+0x10/0x10 [ 214.912029][T11229] ? tun_get_user+0x23c7/0x3ed0 [ 214.912050][T11229] tun_get_user+0x24f0/0x3ed0 [ 214.912078][T11229] ? aa_file_perm+0x50e/0x15e0 [ 214.912095][T11229] ? __pfx_tun_get_user+0x10/0x10 [ 214.912112][T11229] ? aa_file_perm+0x192/0x15e0 [ 214.912131][T11229] ? __lock_acquire+0x6b5/0x2cf0 [ 214.912157][T11229] ? preempt_schedule_common+0x82/0xd0 [ 214.912182][T11229] ? ref_tracker_alloc+0x35c/0x4c0 [ 214.912202][T11229] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 214.912223][T11229] ? tun_get+0x1c/0x2f0 [ 214.912243][T11229] ? tun_get+0x1c/0x2f0 [ 214.912264][T11229] ? tun_get+0x1c/0x2f0 [ 214.912287][T11229] tun_chr_write_iter+0x113/0x200 [ 214.912310][T11229] vfs_write+0x61d/0xb90 [ 214.912334][T11229] ? __pfx_vfs_write+0x10/0x10 [ 214.912357][T11229] ? __fget_files+0x2a/0x420 [ 214.912379][T11229] ksys_write+0x150/0x270 [ 214.912400][T11229] ? __pfx_ksys_write+0x10/0x10 [ 214.912425][T11229] do_syscall_64+0x14d/0xf80 [ 214.912449][T11229] ? trace_irq_disable+0x3b/0x150 [ 214.912465][T11229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.912485][T11229] ? clear_bhb_loop+0x40/0x90 [ 214.912504][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.912521][T11229] RIP: 0033:0x7f650eb5d04e [ 214.912537][T11229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 214.912553][T11229] RSP: 002b:00007f650cdf5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.912574][T11229] RAX: ffffffffffffffda RBX: 00007f650cdf66c0 RCX: 00007f650eb5d04e [ 214.912588][T11229] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 214.912600][T11229] RBP: 00007f650ec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 214.912611][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.912623][T11229] R13: 00007f650ee16038 R14: 00007f650ee15fa0 R15: 00007ffe69a64dd8 [ 214.912644][T11229] [ 214.912656][T11229] BUG: Bad page state in process syz.0.1322 pfn:7f880 [ 215.185994][T11229] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807f884000 pfn:0x7f880 [ 215.196205][T11229] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 215.203608][T11229] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 215.212282][T11229] raw: ffff88807f884000 0000000000000001 00000000ffffffff 0000000000000000 [ 215.220894][T11229] page dumped because: page_pool leak [ 215.226294][T11229] page_owner tracks the page as allocated [ 215.232210][T11229] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11229, tgid 11228 (syz.0.1322), ts 213269883562, free_ts 213238421854 [ 215.249433][T11229] post_alloc_hook+0x231/0x280 [ 215.254243][T11229] get_page_from_freelist+0x24dc/0x2580 [ 215.259826][T11229] __alloc_frozen_pages_noprof+0x18d/0x380 [ 215.265674][T11229] alloc_pages_bulk_noprof+0x558/0x700 [ 215.271135][T11229] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 215.277275][T11229] skb_pp_cow_data+0xcea/0x1bb0 [ 215.282144][T11229] do_xdp_generic+0x76b/0x12e0 [ 215.287028][T11229] tun_get_user+0x24f0/0x3ed0 [ 215.291743][T11229] tun_chr_write_iter+0x113/0x200 [ 215.296811][T11229] vfs_write+0x61d/0xb90 [ 215.301081][T11229] ksys_write+0x150/0x270 [ 215.305457][T11229] do_syscall_64+0x14d/0xf80 [ 215.310109][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.316089][T11229] page last free pid 9 tgid 9 stack trace: [ 215.321924][T11229] __free_frozen_pages+0xc2b/0xdb0 [ 215.327106][T11229] vfree+0x25a/0x400 [ 215.331037][T11229] delayed_vfree_work+0x55/0x80 [ 215.335960][T11229] process_scheduled_works+0xb6e/0x18c0 [ 215.341574][T11229] worker_thread+0xa53/0xfc0 [ 215.346207][T11229] kthread+0x388/0x470 [ 215.350296][T11229] ret_from_fork+0x51e/0xb90 [ 215.354886][T11229] ret_from_fork_asm+0x1a/0x30 [ 215.359767][T11229] Modules linked in: [ 215.363705][T11229] CPU: 0 UID: 0 PID: 11229 Comm: syz.0.1322 Tainted: G B syzkaller #0 PREEMPT(full) [ 215.363727][T11229] Tainted: [B]=BAD_PAGE [ 215.363731][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 215.363739][T11229] Call Trace: [ 215.363746][T11229] [ 215.363752][T11229] dump_stack_lvl+0xe8/0x150 [ 215.363772][T11229] bad_page+0x17f/0x1c0 [ 215.363789][T11229] __free_frozen_pages+0xd62/0xdb0 [ 215.363804][T11229] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 215.363825][T11229] bpf_xdp_adjust_tail+0x1d6/0x220 [ 215.363841][T11229] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 215.363851][T11229] bpf_prog_run_generic_xdp+0x603/0x1490 [ 215.363881][T11229] do_xdp_generic+0xac5/0x12e0 [ 215.363900][T11229] ? __pfx_do_xdp_generic+0x10/0x10 [ 215.363922][T11229] ? tun_get_user+0x23c7/0x3ed0 [ 215.363935][T11229] tun_get_user+0x24f0/0x3ed0 [ 215.363951][T11229] ? aa_file_perm+0x50e/0x15e0 [ 215.363962][T11229] ? __pfx_tun_get_user+0x10/0x10 [ 215.363974][T11229] ? aa_file_perm+0x192/0x15e0 [ 215.363986][T11229] ? __lock_acquire+0x6b5/0x2cf0 [ 215.364001][T11229] ? preempt_schedule_common+0x82/0xd0 [ 215.364016][T11229] ? ref_tracker_alloc+0x35c/0x4c0 [ 215.364028][T11229] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 215.364039][T11229] ? tun_get+0x1c/0x2f0 [ 215.364052][T11229] ? tun_get+0x1c/0x2f0 [ 215.364063][T11229] ? tun_get+0x1c/0x2f0 [ 215.364076][T11229] tun_chr_write_iter+0x113/0x200 [ 215.364088][T11229] vfs_write+0x61d/0xb90 [ 215.364102][T11229] ? __pfx_vfs_write+0x10/0x10 [ 215.364116][T11229] ? __fget_files+0x2a/0x420 [ 215.364128][T11229] ksys_write+0x150/0x270 [ 215.364140][T11229] ? __pfx_ksys_write+0x10/0x10 [ 215.364153][T11229] do_syscall_64+0x14d/0xf80 [ 215.364168][T11229] ? trace_irq_disable+0x3b/0x150 [ 215.364177][T11229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.364188][T11229] ? clear_bhb_loop+0x40/0x90 [ 215.364200][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.364211][T11229] RIP: 0033:0x7f650eb5d04e [ 215.364223][T11229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.364233][T11229] RSP: 002b:00007f650cdf5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.364247][T11229] RAX: ffffffffffffffda RBX: 00007f650cdf66c0 RCX: 00007f650eb5d04e [ 215.364256][T11229] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 215.364264][T11229] RBP: 00007f650ec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 215.364271][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.364277][T11229] R13: 00007f650ee16038 R14: 00007f650ee15fa0 R15: 00007ffe69a64dd8 [ 215.364289][T11229] [ 215.364304][T11229] BUG: Bad page state in process syz.0.1322 pfn:7f881 [ 215.637398][T11229] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x7f881 [ 215.647581][T11229] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 215.654787][T11229] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 215.663526][T11229] raw: ffffffffffffffff 0000000000000001 00000000ffffffff 0000000000000000 [ 215.672344][T11229] page dumped because: page_pool leak [ 215.677790][T11229] page_owner tracks the page as allocated [ 215.683610][T11229] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11229, tgid 11228 (syz.0.1322), ts 213269864321, free_ts 213238435348 [ 215.700861][T11229] post_alloc_hook+0x231/0x280 [ 215.705697][T11229] get_page_from_freelist+0x24dc/0x2580 [ 215.711513][T11229] __alloc_frozen_pages_noprof+0x18d/0x380 [ 215.717354][T11229] alloc_pages_bulk_noprof+0x558/0x700 [ 215.722833][T11229] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 215.728944][T11229] skb_pp_cow_data+0xcea/0x1bb0 [ 215.733813][T11229] do_xdp_generic+0x76b/0x12e0 [ 215.738700][T11229] tun_get_user+0x24f0/0x3ed0 [ 215.743393][T11229] tun_chr_write_iter+0x113/0x200 [ 215.748446][T11229] vfs_write+0x61d/0xb90 [ 215.752706][T11229] ksys_write+0x150/0x270 [ 215.757063][T11229] do_syscall_64+0x14d/0xf80 [ 215.761760][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.767810][T11229] page last free pid 9 tgid 9 stack trace: [ 215.773643][T11229] __free_frozen_pages+0xc2b/0xdb0 [ 215.781882][T11229] vfree+0x25a/0x400 [ 215.785878][T11229] delayed_vfree_work+0x55/0x80 [ 215.790777][T11229] process_scheduled_works+0xb6e/0x18c0 [ 215.796544][T11229] worker_thread+0xa53/0xfc0 [ 215.801255][T11229] kthread+0x388/0x470 [ 215.805372][T11229] ret_from_fork+0x51e/0xb90 [ 215.809990][T11229] ret_from_fork_asm+0x1a/0x30 [ 215.814774][T11229] Modules linked in: [ 215.818747][T11229] CPU: 0 UID: 0 PID: 11229 Comm: syz.0.1322 Tainted: G B syzkaller #0 PREEMPT(full) [ 215.818790][T11229] Tainted: [B]=BAD_PAGE [ 215.818796][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 215.818806][T11229] Call Trace: [ 215.818813][T11229] [ 215.818820][T11229] dump_stack_lvl+0xe8/0x150 [ 215.818846][T11229] bad_page+0x17f/0x1c0 [ 215.818871][T11229] __free_frozen_pages+0xd62/0xdb0 [ 215.818893][T11229] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 215.818923][T11229] bpf_xdp_adjust_tail+0x1d6/0x220 [ 215.818945][T11229] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 215.818961][T11229] bpf_prog_run_generic_xdp+0x603/0x1490 [ 215.818997][T11229] do_xdp_generic+0xac5/0x12e0 [ 215.819024][T11229] ? __pfx_do_xdp_generic+0x10/0x10 [ 215.819056][T11229] ? tun_get_user+0x23c7/0x3ed0 [ 215.819077][T11229] tun_get_user+0x24f0/0x3ed0 [ 215.819103][T11229] ? aa_file_perm+0x50e/0x15e0 [ 215.819119][T11229] ? __pfx_tun_get_user+0x10/0x10 [ 215.819137][T11229] ? aa_file_perm+0x192/0x15e0 [ 215.819154][T11229] ? __lock_acquire+0x6b5/0x2cf0 [ 215.819176][T11229] ? preempt_schedule_common+0x82/0xd0 [ 215.819197][T11229] ? ref_tracker_alloc+0x35c/0x4c0 [ 215.819215][T11229] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 215.819233][T11229] ? tun_get+0x1c/0x2f0 [ 215.819251][T11229] ? tun_get+0x1c/0x2f0 [ 215.819270][T11229] ? tun_get+0x1c/0x2f0 [ 215.819291][T11229] tun_chr_write_iter+0x113/0x200 [ 215.819313][T11229] vfs_write+0x61d/0xb90 [ 215.819337][T11229] ? __pfx_vfs_write+0x10/0x10 [ 215.819359][T11229] ? __fget_files+0x2a/0x420 [ 215.819378][T11229] ksys_write+0x150/0x270 [ 215.819399][T11229] ? __pfx_ksys_write+0x10/0x10 [ 215.819420][T11229] do_syscall_64+0x14d/0xf80 [ 215.819441][T11229] ? trace_irq_disable+0x3b/0x150 [ 215.819456][T11229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.819475][T11229] ? clear_bhb_loop+0x40/0x90 [ 215.819497][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.819515][T11229] RIP: 0033:0x7f650eb5d04e [ 215.819531][T11229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.819547][T11229] RSP: 002b:00007f650cdf5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.819570][T11229] RAX: ffffffffffffffda RBX: 00007f650cdf66c0 RCX: 00007f650eb5d04e [ 215.819584][T11229] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 215.819598][T11229] RBP: 00007f650ec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 215.819611][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.819623][T11229] R13: 00007f650ee16038 R14: 00007f650ee15fa0 R15: 00007ffe69a64dd8 [ 215.819646][T11229] [ 215.819657][T11229] BUG: Bad page state in process syz.0.1322 pfn:7f882 [ 216.095324][T11229] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f882 [ 216.104125][T11229] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 216.111318][T11229] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 216.120039][T11229] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 216.128797][T11229] page dumped because: page_pool leak [ 216.134458][T11229] page_owner tracks the page as allocated [ 216.135112][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 216.140308][T11229] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11229, tgid 11228 (syz.0.1322), ts 213269845050, free_ts 213238449335 [ 216.148306][ C1] lec:lec_tx_timeout: lec0 [ 216.165578][T11229] post_alloc_hook+0x231/0x280 [ 216.170341][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 216.174746][T11229] get_page_from_freelist+0x24dc/0x2580 [ 216.186267][T11229] __alloc_frozen_pages_noprof+0x18d/0x380 [ 216.192349][T11229] alloc_pages_bulk_noprof+0x558/0x700 [ 216.197873][T11229] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 216.204065][T11229] skb_pp_cow_data+0xcea/0x1bb0 [ 216.209000][T11229] do_xdp_generic+0x76b/0x12e0 [ 216.213897][T11229] tun_get_user+0x24f0/0x3ed0 [ 216.218649][T11229] tun_chr_write_iter+0x113/0x200 [ 216.223783][T11229] vfs_write+0x61d/0xb90 [ 216.228075][T11229] ksys_write+0x150/0x270 [ 216.232534][T11229] do_syscall_64+0x14d/0xf80 [ 216.237259][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.243333][T11229] page last free pid 9 tgid 9 stack trace: [ 216.249193][T11229] __free_frozen_pages+0xc2b/0xdb0 [ 216.254431][T11229] vfree+0x25a/0x400 [ 216.258373][T11229] delayed_vfree_work+0x55/0x80 [ 216.263267][T11229] process_scheduled_works+0xb6e/0x18c0 [ 216.269213][T11229] worker_thread+0xa53/0xfc0 [ 216.274006][T11229] kthread+0x388/0x470 [ 216.278206][T11229] ret_from_fork+0x51e/0xb90 [ 216.282826][T11229] ret_from_fork_asm+0x1a/0x30 [ 216.287637][T11229] Modules linked in: [ 216.291564][T11229] CPU: 0 UID: 0 PID: 11229 Comm: syz.0.1322 Tainted: G B syzkaller #0 PREEMPT(full) [ 216.291585][T11229] Tainted: [B]=BAD_PAGE [ 216.291589][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 216.291596][T11229] Call Trace: [ 216.291601][T11229] [ 216.291607][T11229] dump_stack_lvl+0xe8/0x150 [ 216.291626][T11229] bad_page+0x17f/0x1c0 [ 216.291643][T11229] __free_frozen_pages+0xd62/0xdb0 [ 216.291658][T11229] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 216.291679][T11229] bpf_xdp_adjust_tail+0x1d6/0x220 [ 216.291695][T11229] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 216.291713][T11229] bpf_prog_run_generic_xdp+0x603/0x1490 [ 216.291736][T11229] do_xdp_generic+0xac5/0x12e0 [ 216.291754][T11229] ? __pfx_do_xdp_generic+0x10/0x10 [ 216.291776][T11229] ? tun_get_user+0x23c7/0x3ed0 [ 216.291789][T11229] tun_get_user+0x24f0/0x3ed0 [ 216.291806][T11229] ? aa_file_perm+0x50e/0x15e0 [ 216.291818][T11229] ? __pfx_tun_get_user+0x10/0x10 [ 216.291830][T11229] ? aa_file_perm+0x192/0x15e0 [ 216.291842][T11229] ? __lock_acquire+0x6b5/0x2cf0 [ 216.291856][T11229] ? preempt_schedule_common+0x82/0xd0 [ 216.291871][T11229] ? ref_tracker_alloc+0x35c/0x4c0 [ 216.291882][T11229] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 216.291894][T11229] ? tun_get+0x1c/0x2f0 [ 216.291907][T11229] ? tun_get+0x1c/0x2f0 [ 216.291918][T11229] ? tun_get+0x1c/0x2f0 [ 216.291930][T11229] tun_chr_write_iter+0x113/0x200 [ 216.291943][T11229] vfs_write+0x61d/0xb90 [ 216.291959][T11229] ? __pfx_vfs_write+0x10/0x10 [ 216.291973][T11229] ? __fget_files+0x2a/0x420 [ 216.291984][T11229] ksys_write+0x150/0x270 [ 216.291997][T11229] ? __pfx_ksys_write+0x10/0x10 [ 216.292011][T11229] do_syscall_64+0x14d/0xf80 [ 216.292025][T11229] ? trace_irq_disable+0x3b/0x150 [ 216.292034][T11229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.292045][T11229] ? clear_bhb_loop+0x40/0x90 [ 216.292058][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.292068][T11229] RIP: 0033:0x7f650eb5d04e [ 216.292079][T11229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 216.292090][T11229] RSP: 002b:00007f650cdf5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.292104][T11229] RAX: ffffffffffffffda RBX: 00007f650cdf66c0 RCX: 00007f650eb5d04e [ 216.292112][T11229] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 216.292120][T11229] RBP: 00007f650ec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 216.292127][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.292134][T11229] R13: 00007f650ee16038 R14: 00007f650ee15fa0 R15: 00007ffe69a64dd8 [ 216.292146][T11229] [ 216.292153][T11229] BUG: Bad page state in process syz.0.1322 pfn:7f883 [ 216.566215][T11229] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f883 [ 216.575359][T11229] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 216.582498][T11229] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 216.591340][T11229] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 216.600259][T11229] page dumped because: page_pool leak [ 216.605701][T11229] page_owner tracks the page as allocated [ 216.611543][T11229] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11229, tgid 11228 (syz.0.1322), ts 213269825494, free_ts 213238463090 [ 216.628906][T11229] post_alloc_hook+0x231/0x280 [ 216.633698][T11229] get_page_from_freelist+0x24dc/0x2580 [ 216.639394][T11229] __alloc_frozen_pages_noprof+0x18d/0x380 [ 216.645265][T11229] alloc_pages_bulk_noprof+0x558/0x700 [ 216.650845][T11229] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 216.656945][T11229] skb_pp_cow_data+0xcea/0x1bb0 [ 216.661815][T11229] do_xdp_generic+0x76b/0x12e0 [ 216.666697][T11229] tun_get_user+0x24f0/0x3ed0 [ 216.671399][T11229] tun_chr_write_iter+0x113/0x200 [ 216.676561][T11229] vfs_write+0x61d/0xb90 [ 216.680844][T11229] ksys_write+0x150/0x270 [ 216.685256][T11229] do_syscall_64+0x14d/0xf80 [ 216.689967][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.695918][T11229] page last free pid 9 tgid 9 stack trace: [ 216.701830][T11229] __free_frozen_pages+0xc2b/0xdb0 [ 216.707103][T11229] vfree+0x25a/0x400 [ 216.711123][T11229] delayed_vfree_work+0x55/0x80 [ 216.716113][T11229] process_scheduled_works+0xb6e/0x18c0 [ 216.721773][T11229] worker_thread+0xa53/0xfc0 [ 216.726401][T11229] kthread+0x388/0x470 [ 216.730580][T11229] ret_from_fork+0x51e/0xb90 [ 216.735211][T11229] ret_from_fork_asm+0x1a/0x30 [ 216.739998][T11229] Modules linked in: [ 216.744114][T11229] CPU: 0 UID: 0 PID: 11229 Comm: syz.0.1322 Tainted: G B syzkaller #0 PREEMPT(full) [ 216.744132][T11229] Tainted: [B]=BAD_PAGE [ 216.744136][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 216.744143][T11229] Call Trace: [ 216.744149][T11229] [ 216.744154][T11229] dump_stack_lvl+0xe8/0x150 [ 216.744172][T11229] bad_page+0x17f/0x1c0 [ 216.744189][T11229] __free_frozen_pages+0xd62/0xdb0 [ 216.744204][T11229] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 216.744225][T11229] bpf_xdp_adjust_tail+0x1d6/0x220 [ 216.744241][T11229] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 216.744252][T11229] bpf_prog_run_generic_xdp+0x603/0x1490 [ 216.744275][T11229] do_xdp_generic+0xac5/0x12e0 [ 216.744294][T11229] ? __pfx_do_xdp_generic+0x10/0x10 [ 216.744317][T11229] ? tun_get_user+0x23c7/0x3ed0 [ 216.744330][T11229] tun_get_user+0x24f0/0x3ed0 [ 216.744346][T11229] ? aa_file_perm+0x50e/0x15e0 [ 216.744357][T11229] ? __pfx_tun_get_user+0x10/0x10 [ 216.744369][T11229] ? aa_file_perm+0x192/0x15e0 [ 216.744380][T11229] ? __lock_acquire+0x6b5/0x2cf0 [ 216.744395][T11229] ? preempt_schedule_common+0x82/0xd0 [ 216.744411][T11229] ? ref_tracker_alloc+0x35c/0x4c0 [ 216.744423][T11229] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 216.744435][T11229] ? tun_get+0x1c/0x2f0 [ 216.744448][T11229] ? tun_get+0x1c/0x2f0 [ 216.744459][T11229] ? tun_get+0x1c/0x2f0 [ 216.744472][T11229] tun_chr_write_iter+0x113/0x200 [ 216.744485][T11229] vfs_write+0x61d/0xb90 [ 216.744499][T11229] ? __pfx_vfs_write+0x10/0x10 [ 216.744512][T11229] ? __fget_files+0x2a/0x420 [ 216.744524][T11229] ksys_write+0x150/0x270 [ 216.744536][T11229] ? __pfx_ksys_write+0x10/0x10 [ 216.744550][T11229] do_syscall_64+0x14d/0xf80 [ 216.744563][T11229] ? trace_irq_disable+0x3b/0x150 [ 216.744573][T11229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.744584][T11229] ? clear_bhb_loop+0x40/0x90 [ 216.744596][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.744607][T11229] RIP: 0033:0x7f650eb5d04e [ 216.744618][T11229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 216.744628][T11229] RSP: 002b:00007f650cdf5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.744641][T11229] RAX: ffffffffffffffda RBX: 00007f650cdf66c0 RCX: 00007f650eb5d04e [ 216.744650][T11229] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 216.744657][T11229] RBP: 00007f650ec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 216.744664][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.744671][T11229] R13: 00007f650ee16038 R14: 00007f650ee15fa0 R15: 00007ffe69a64dd8 [ 216.744682][T11229] [ 216.744690][T11229] BUG: Bad page state in process syz.0.1322 pfn:7f884 [ 217.018429][T11229] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f884 [ 217.027222][T11229] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 217.034460][T11229] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 217.043174][T11229] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 217.051808][T11229] page dumped because: page_pool leak [ 217.057235][T11229] page_owner tracks the page as allocated [ 217.062971][T11229] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11229, tgid 11228 (syz.0.1322), ts 213269806420, free_ts 213238476408 [ 217.080574][T11229] post_alloc_hook+0x231/0x280 [ 217.085413][T11229] get_page_from_freelist+0x24dc/0x2580 [ 217.091000][T11229] __alloc_frozen_pages_noprof+0x18d/0x380 [ 217.096998][T11229] alloc_pages_bulk_noprof+0x558/0x700 [ 217.102503][T11229] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 217.108664][T11229] skb_pp_cow_data+0xcea/0x1bb0 [ 217.113568][T11229] do_xdp_generic+0x76b/0x12e0 [ 217.118490][T11229] tun_get_user+0x24f0/0x3ed0 [ 217.123198][T11229] tun_chr_write_iter+0x113/0x200 [ 217.128298][T11229] vfs_write+0x61d/0xb90 [ 217.132657][T11229] ksys_write+0x150/0x270 [ 217.137165][T11229] do_syscall_64+0x14d/0xf80 [ 217.141788][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.147896][T11229] page last free pid 9 tgid 9 stack trace: [ 217.153718][T11229] __free_frozen_pages+0xc2b/0xdb0 [ 217.158996][T11229] vfree+0x25a/0x400 [ 217.162930][T11229] delayed_vfree_work+0x55/0x80 [ 217.167825][T11229] process_scheduled_works+0xb6e/0x18c0 [ 217.173400][T11229] worker_thread+0xa53/0xfc0 [ 217.178063][T11229] kthread+0x388/0x470 [ 217.182164][T11229] ret_from_fork+0x51e/0xb90 [ 217.186793][T11229] ret_from_fork_asm+0x1a/0x30 [ 217.191736][T11229] Modules linked in: [ 217.195736][T11229] CPU: 0 UID: 0 PID: 11229 Comm: syz.0.1322 Tainted: G B syzkaller #0 PREEMPT(full) [ 217.195765][T11229] Tainted: [B]=BAD_PAGE [ 217.195771][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 217.195781][T11229] Call Trace: [ 217.195789][T11229] [ 217.195796][T11229] dump_stack_lvl+0xe8/0x150 [ 217.195825][T11229] bad_page+0x17f/0x1c0 [ 217.195852][T11229] __free_frozen_pages+0xd62/0xdb0 [ 217.195876][T11229] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 217.195909][T11229] bpf_xdp_adjust_tail+0x1d6/0x220 [ 217.195932][T11229] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 217.195949][T11229] bpf_prog_run_generic_xdp+0x603/0x1490 [ 217.195988][T11229] do_xdp_generic+0xac5/0x12e0 [ 217.196022][T11229] ? __pfx_do_xdp_generic+0x10/0x10 [ 217.196065][T11229] ? tun_get_user+0x23c7/0x3ed0 [ 217.196090][T11229] tun_get_user+0x24f0/0x3ed0 [ 217.196120][T11229] ? aa_file_perm+0x50e/0x15e0 [ 217.196139][T11229] ? __pfx_tun_get_user+0x10/0x10 [ 217.196159][T11229] ? aa_file_perm+0x192/0x15e0 [ 217.196180][T11229] ? __lock_acquire+0x6b5/0x2cf0 [ 217.196205][T11229] ? preempt_schedule_common+0x82/0xd0 [ 217.196230][T11229] ? ref_tracker_alloc+0x35c/0x4c0 [ 217.196252][T11229] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 217.196272][T11229] ? tun_get+0x1c/0x2f0 [ 217.196295][T11229] ? tun_get+0x1c/0x2f0 [ 217.196315][T11229] ? tun_get+0x1c/0x2f0 [ 217.196336][T11229] tun_chr_write_iter+0x113/0x200 [ 217.196359][T11229] vfs_write+0x61d/0xb90 [ 217.196384][T11229] ? __pfx_vfs_write+0x10/0x10 [ 217.196409][T11229] ? __fget_files+0x2a/0x420 [ 217.196430][T11229] ksys_write+0x150/0x270 [ 217.196450][T11229] ? __pfx_ksys_write+0x10/0x10 [ 217.196476][T11229] do_syscall_64+0x14d/0xf80 [ 217.196499][T11229] ? trace_irq_disable+0x3b/0x150 [ 217.196515][T11229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.196533][T11229] ? clear_bhb_loop+0x40/0x90 [ 217.196554][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.196572][T11229] RIP: 0033:0x7f650eb5d04e [ 217.196591][T11229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 217.196607][T11229] RSP: 002b:00007f650cdf5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.196628][T11229] RAX: ffffffffffffffda RBX: 00007f650cdf66c0 RCX: 00007f650eb5d04e [ 217.196643][T11229] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 217.196655][T11229] RBP: 00007f650ec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 217.196677][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.196689][T11229] R13: 00007f650ee16038 R14: 00007f650ee15fa0 R15: 00007ffe69a64dd8 [ 217.196710][T11229] [ 217.196722][T11229] BUG: Bad page state in process syz.0.1322 pfn:7f885 [ 217.470411][T11229] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f885 [ 217.479214][T11229] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 217.486391][T11229] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 217.495007][T11229] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 217.503644][T11229] page dumped because: page_pool leak [ 217.509170][T11229] page_owner tracks the page as allocated [ 217.514898][T11229] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11229, tgid 11228 (syz.0.1322), ts 213269787503, free_ts 213238489734 [ 217.532294][T11229] post_alloc_hook+0x231/0x280 [ 217.537197][T11229] get_page_from_freelist+0x24dc/0x2580 [ 217.542942][T11229] __alloc_frozen_pages_noprof+0x18d/0x380 [ 217.548894][T11229] alloc_pages_bulk_noprof+0x558/0x700 [ 217.554419][T11229] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 217.560617][T11229] skb_pp_cow_data+0xcea/0x1bb0 [ 217.565613][T11229] do_xdp_generic+0x76b/0x12e0 [ 217.570397][T11229] tun_get_user+0x24f0/0x3ed0 [ 217.575111][T11229] tun_chr_write_iter+0x113/0x200 [ 217.580352][T11229] vfs_write+0x61d/0xb90 [ 217.584727][T11229] ksys_write+0x150/0x270 [ 217.589195][T11229] do_syscall_64+0x14d/0xf80 [ 217.593819][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.599751][T11229] page last free pid 9 tgid 9 stack trace: [ 217.605660][T11229] __free_frozen_pages+0xc2b/0xdb0 [ 217.610799][T11229] vfree+0x25a/0x400 [ 217.614706][T11229] delayed_vfree_work+0x55/0x80 [ 217.619674][T11229] process_scheduled_works+0xb6e/0x18c0 [ 217.625276][T11229] worker_thread+0xa53/0xfc0 [ 217.629894][T11229] kthread+0x388/0x470 [ 217.633992][T11229] ret_from_fork+0x51e/0xb90 [ 217.638751][T11229] ret_from_fork_asm+0x1a/0x30 [ 217.643551][T11229] Modules linked in: [ 217.647507][T11229] CPU: 0 UID: 0 PID: 11229 Comm: syz.0.1322 Tainted: G B syzkaller #0 PREEMPT(full) [ 217.647534][T11229] Tainted: [B]=BAD_PAGE [ 217.647540][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 217.647551][T11229] Call Trace: [ 217.647558][T11229] [ 217.647565][T11229] dump_stack_lvl+0xe8/0x150 [ 217.647594][T11229] bad_page+0x17f/0x1c0 [ 217.647620][T11229] __free_frozen_pages+0xd62/0xdb0 [ 217.647643][T11229] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 217.647681][T11229] bpf_xdp_adjust_tail+0x1d6/0x220 [ 217.647707][T11229] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 217.647727][T11229] bpf_prog_run_generic_xdp+0x603/0x1490 [ 217.647767][T11229] do_xdp_generic+0xac5/0x12e0 [ 217.647800][T11229] ? __pfx_do_xdp_generic+0x10/0x10 [ 217.647839][T11229] ? tun_get_user+0x23c7/0x3ed0 [ 217.647862][T11229] tun_get_user+0x24f0/0x3ed0 [ 217.647892][T11229] ? aa_file_perm+0x50e/0x15e0 [ 217.647911][T11229] ? __pfx_tun_get_user+0x10/0x10 [ 217.647931][T11229] ? aa_file_perm+0x192/0x15e0 [ 217.647975][T11229] ? __lock_acquire+0x6b5/0x2cf0 [ 217.648002][T11229] ? preempt_schedule_common+0x82/0xd0 [ 217.648028][T11229] ? ref_tracker_alloc+0x35c/0x4c0 [ 217.648049][T11229] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 217.648069][T11229] ? tun_get+0x1c/0x2f0 [ 217.648093][T11229] ? tun_get+0x1c/0x2f0 [ 217.648113][T11229] ? tun_get+0x1c/0x2f0 [ 217.648135][T11229] tun_chr_write_iter+0x113/0x200 [ 217.648158][T11229] vfs_write+0x61d/0xb90 [ 217.648183][T11229] ? __pfx_vfs_write+0x10/0x10 [ 217.648205][T11229] ? __fget_files+0x2a/0x420 [ 217.648227][T11229] ksys_write+0x150/0x270 [ 217.648249][T11229] ? __pfx_ksys_write+0x10/0x10 [ 217.648273][T11229] do_syscall_64+0x14d/0xf80 [ 217.648297][T11229] ? trace_irq_disable+0x3b/0x150 [ 217.648314][T11229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.648333][T11229] ? clear_bhb_loop+0x40/0x90 [ 217.648354][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.648370][T11229] RIP: 0033:0x7f650eb5d04e [ 217.648387][T11229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 217.648404][T11229] RSP: 002b:00007f650cdf5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.648427][T11229] RAX: ffffffffffffffda RBX: 00007f650cdf66c0 RCX: 00007f650eb5d04e [ 217.648442][T11229] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 217.648454][T11229] RBP: 00007f650ec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 217.648467][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.648479][T11229] R13: 00007f650ee16038 R14: 00007f650ee15fa0 R15: 00007ffe69a64dd8 [ 217.648501][T11229] [ 217.648512][T11229] BUG: Bad page state in process syz.0.1322 pfn:7f886 [ 217.921382][T11229] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f886 [ 217.930411][T11229] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 217.937690][T11229] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 217.946345][T11229] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 217.954945][T11229] page dumped because: page_pool leak [ 217.960374][T11229] page_owner tracks the page as allocated [ 217.966204][T11229] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11229, tgid 11228 (syz.0.1322), ts 213269768215, free_ts 213238503050 [ 217.983822][T11229] post_alloc_hook+0x231/0x280 [ 217.988656][T11229] get_page_from_freelist+0x24dc/0x2580 [ 217.994312][T11229] __alloc_frozen_pages_noprof+0x18d/0x380 [ 218.000179][T11229] alloc_pages_bulk_noprof+0x558/0x700 [ 218.005702][T11229] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 218.011787][T11229] skb_pp_cow_data+0xcea/0x1bb0 [ 218.016686][T11229] do_xdp_generic+0x76b/0x12e0 [ 218.021517][T11229] tun_get_user+0x24f0/0x3ed0 [ 218.026245][T11229] tun_chr_write_iter+0x113/0x200 [ 218.031297][T11229] vfs_write+0x61d/0xb90 [ 218.035603][T11229] ksys_write+0x150/0x270 [ 218.040013][T11229] do_syscall_64+0x14d/0xf80 [ 218.044644][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.050718][T11229] page last free pid 9 tgid 9 stack trace: [ 218.056604][T11229] __free_frozen_pages+0xc2b/0xdb0 [ 218.061745][T11229] vfree+0x25a/0x400 [ 218.065791][T11229] delayed_vfree_work+0x55/0x80 [ 218.070696][T11229] process_scheduled_works+0xb6e/0x18c0 [ 218.076309][T11229] worker_thread+0xa53/0xfc0 [ 218.081107][T11229] kthread+0x388/0x470 [ 218.085409][T11229] ret_from_fork+0x51e/0xb90 [ 218.090027][T11229] ret_from_fork_asm+0x1a/0x30 [ 218.094794][T11229] Modules linked in: [ 218.098906][T11229] CPU: 0 UID: 0 PID: 11229 Comm: syz.0.1322 Tainted: G B syzkaller #0 PREEMPT(full) [ 218.098935][T11229] Tainted: [B]=BAD_PAGE [ 218.098942][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 218.098951][T11229] Call Trace: [ 218.098957][T11229] [ 218.098964][T11229] dump_stack_lvl+0xe8/0x150 [ 218.098991][T11229] bad_page+0x17f/0x1c0 [ 218.099018][T11229] __free_frozen_pages+0xd62/0xdb0 [ 218.099042][T11229] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 218.099075][T11229] bpf_xdp_adjust_tail+0x1d6/0x220 [ 218.099103][T11229] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 218.099122][T11229] bpf_prog_run_generic_xdp+0x603/0x1490 [ 218.099162][T11229] do_xdp_generic+0xac5/0x12e0 [ 218.099197][T11229] ? __pfx_do_xdp_generic+0x10/0x10 [ 218.099240][T11229] ? tun_get_user+0x23c7/0x3ed0 [ 218.099264][T11229] tun_get_user+0x24f0/0x3ed0 [ 218.099293][T11229] ? aa_file_perm+0x50e/0x15e0 [ 218.099314][T11229] ? __pfx_tun_get_user+0x10/0x10 [ 218.099335][T11229] ? aa_file_perm+0x192/0x15e0 [ 218.099355][T11229] ? __lock_acquire+0x6b5/0x2cf0 [ 218.099382][T11229] ? preempt_schedule_common+0x82/0xd0 [ 218.099409][T11229] ? ref_tracker_alloc+0x35c/0x4c0 [ 218.099429][T11229] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 218.099450][T11229] ? tun_get+0x1c/0x2f0 [ 218.099474][T11229] ? tun_get+0x1c/0x2f0 [ 218.099493][T11229] ? tun_get+0x1c/0x2f0 [ 218.099515][T11229] tun_chr_write_iter+0x113/0x200 [ 218.099538][T11229] vfs_write+0x61d/0xb90 [ 218.099561][T11229] ? __pfx_vfs_write+0x10/0x10 [ 218.099585][T11229] ? __fget_files+0x2a/0x420 [ 218.099606][T11229] ksys_write+0x150/0x270 [ 218.099628][T11229] ? __pfx_ksys_write+0x10/0x10 [ 218.099651][T11229] do_syscall_64+0x14d/0xf80 [ 218.099675][T11229] ? trace_irq_disable+0x3b/0x150 [ 218.099702][T11229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.099721][T11229] ? clear_bhb_loop+0x40/0x90 [ 218.099743][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.099762][T11229] RIP: 0033:0x7f650eb5d04e [ 218.099779][T11229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 218.099797][T11229] RSP: 002b:00007f650cdf5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.099819][T11229] RAX: ffffffffffffffda RBX: 00007f650cdf66c0 RCX: 00007f650eb5d04e [ 218.099834][T11229] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 218.099846][T11229] RBP: 00007f650ec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 218.099858][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.099869][T11229] R13: 00007f650ee16038 R14: 00007f650ee15fa0 R15: 00007ffe69a64dd8 [ 218.099890][T11229] [ 218.099902][T11229] BUG: Bad page state in process syz.0.1322 pfn:7f887 [ 218.373168][T11229] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f887 [ 218.382043][T11229] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 218.389293][T11229] raw: 00fff00000000000 dead000000000040 ffff888022eff000 0000000000000000 [ 218.398011][T11229] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 218.406629][T11229] page dumped because: page_pool leak [ 218.412016][T11229] page_owner tracks the page as allocated [ 218.417788][T11229] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 11229, tgid 11228 (syz.0.1322), ts 213269749145, free_ts 213238516282 [ 218.435092][T11229] post_alloc_hook+0x231/0x280 [ 218.439899][T11229] get_page_from_freelist+0x24dc/0x2580 [ 218.445499][T11229] __alloc_frozen_pages_noprof+0x18d/0x380 [ 218.451306][T11229] alloc_pages_bulk_noprof+0x558/0x700 [ 218.456810][T11229] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 218.462917][T11229] skb_pp_cow_data+0xcea/0x1bb0 [ 218.467812][T11229] do_xdp_generic+0x76b/0x12e0 [ 218.472603][T11229] tun_get_user+0x24f0/0x3ed0 [ 218.477434][T11229] tun_chr_write_iter+0x113/0x200 [ 218.482488][T11229] vfs_write+0x61d/0xb90 [ 218.486788][T11229] ksys_write+0x150/0x270 [ 218.491166][T11229] do_syscall_64+0x14d/0xf80 [ 218.495900][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.501837][T11229] page last free pid 9 tgid 9 stack trace: [ 218.507692][T11229] __free_frozen_pages+0xc2b/0xdb0 [ 218.512842][T11229] vfree+0x25a/0x400 [ 218.516790][T11229] delayed_vfree_work+0x55/0x80 [ 218.521676][T11229] process_scheduled_works+0xb6e/0x18c0 [ 218.527364][T11229] worker_thread+0xa53/0xfc0 [ 218.532078][T11229] kthread+0x388/0x470 [ 218.536195][T11229] ret_from_fork+0x51e/0xb90 [ 218.540907][T11229] ret_from_fork_asm+0x1a/0x30 [ 218.545742][T11229] Modules linked in: [ 218.549779][T11229] CPU: 0 UID: 0 PID: 11229 Comm: syz.0.1322 Tainted: G B syzkaller #0 PREEMPT(full) [ 218.549808][T11229] Tainted: [B]=BAD_PAGE [ 218.549814][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 218.549823][T11229] Call Trace: [ 218.549829][T11229] [ 218.549836][T11229] dump_stack_lvl+0xe8/0x150 [ 218.549860][T11229] bad_page+0x17f/0x1c0 [ 218.549890][T11229] __free_frozen_pages+0xd62/0xdb0 [ 218.549911][T11229] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 218.549939][T11229] bpf_xdp_adjust_tail+0x1d6/0x220 [ 218.549959][T11229] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 218.549973][T11229] bpf_prog_run_generic_xdp+0x603/0x1490 [ 218.550005][T11229] do_xdp_generic+0xac5/0x12e0 [ 218.550030][T11229] ? __pfx_do_xdp_generic+0x10/0x10 [ 218.550060][T11229] ? tun_get_user+0x23c7/0x3ed0 [ 218.550077][T11229] tun_get_user+0x24f0/0x3ed0 [ 218.550100][T11229] ? aa_file_perm+0x50e/0x15e0 [ 218.550115][T11229] ? __pfx_tun_get_user+0x10/0x10 [ 218.550130][T11229] ? aa_file_perm+0x192/0x15e0 [ 218.550146][T11229] ? __lock_acquire+0x6b5/0x2cf0 [ 218.550167][T11229] ? preempt_schedule_common+0x82/0xd0 [ 218.550186][T11229] ? ref_tracker_alloc+0x35c/0x4c0 [ 218.550202][T11229] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 218.550217][T11229] ? tun_get+0x1c/0x2f0 [ 218.550241][T11229] ? tun_get+0x1c/0x2f0 [ 218.550257][T11229] ? tun_get+0x1c/0x2f0 [ 218.550273][T11229] tun_chr_write_iter+0x113/0x200 [ 218.550291][T11229] vfs_write+0x61d/0xb90 [ 218.550310][T11229] ? __pfx_vfs_write+0x10/0x10 [ 218.550328][T11229] ? __fget_files+0x2a/0x420 [ 218.550344][T11229] ksys_write+0x150/0x270 [ 218.550360][T11229] ? __pfx_ksys_write+0x10/0x10 [ 218.550378][T11229] do_syscall_64+0x14d/0xf80 [ 218.550396][T11229] ? trace_irq_disable+0x3b/0x150 [ 218.550409][T11229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.550423][T11229] ? clear_bhb_loop+0x40/0x90 [ 218.550439][T11229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.550453][T11229] RIP: 0033:0x7f650eb5d04e [ 218.550467][T11229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 218.550481][T11229] RSP: 002b:00007f650cdf5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.550497][T11229] RAX: ffffffffffffffda RBX: 00007f650cdf66c0 RCX: 00007f650eb5d04e [ 218.550508][T11229] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 218.550518][T11229] RBP: 00007f650ec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 218.550527][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.550537][T11229] R13: 00007f650ee16038 R14: 00007f650ee15fa0 R15: 00007ffe69a64dd8 [ 218.550553][T11229] [ 218.827706][T11254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.965994][T11256] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1327'. [ 218.975750][T11256] ksmbd: Unknown IPC event: 1, ignore. [ 220.705783][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.185236][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 221.193260][ C1] lec:lec_tx_timeout: lec0 [ 221.197853][ C1] lec:lec_start_xmit: lec0:No lecd attached