last executing test programs: 8m13.506888523s ago: executing program 0 (id=1761): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x20008050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)={0x1, @le_set_cig_params={{0x2062, 0x45}, {0x0, "9a6893", "ac357d", 0xd0, 0x9, 0x6, 0x0, 0x4, 0x6, [{0x4c, 0x9, 0x8, 0x5, 0xa4, 0x7, 0x40}, {0x40, 0x8, 0x4, 0x6, 0x3, 0x0, 0x1}, {0x0, 0xb, 0x80, 0x5, 0x81, 0x3, 0x7f}, {0x26, 0x9, 0x9, 0x37, 0xd9, 0xa, 0x8}, {0x7f, 0x1bfa, 0x13c, 0xb, 0x4, 0x50, 0x5}, {0x83, 0x35, 0x6, 0xc, 0x3a, 0x2, 0x2}]}}}, 0x49) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@report={0x1424, 0x20, 0x10, 0x70bd29, 0x25dfdbfd, {0x2b, {@in=@local, @in6=@mcast2, 0x4e22, 0x101, 0x4e23, 0xfffa, 0x2, 0x80, 0x0, 0x87, 0x0, 0xee00}}, [@algo_aead={0x141, 0x12, {{'ccm(seed-generic)\x00'}, 0x7a8, 0x180, "d88902da650997aa0471f5a3061e9e834967fa31b78b82c28925d98de9bab71ce72ec856c94cc61410038f45dd18736cf4b60d3e73fb52781b3621165bf827a664edd7bd03951988f95e08fea599441fa576a13da49375c6cd8778abed0bebdf77e392078dd40966474896e96574480e301f25be9744a118a3e97b41771c6ee4286f0ef420ab47669dd25bf7f5159068ce5a6a83a6770466b04f60572818085a22946ae4775bfabebafd7ef748bca180253cdb64e2747e52e61d20302ddb4d9663949d8b7b9d1d32d37fbb3494beb104710081987e21d3079c4237c3c3d07ad85d2958cb3bbd3f4d20d3ace0898bcc9d03eca0b4ba"}}, @algo_auth_trunc={0x108, 0x14, {{'blake2b-256\x00'}, 0x5e0, 0x100, "7cc2e43f61756935fec0dac3e29c1fdc90a1255e39f0f5e07ce485b6b549b7ebb6f9b2704fa96c2c4dda0bf0d220664bd8630ab506f2889a743ac9cb9fd9be4844d9edfc57dcef2ac27e190efa61d03be0b570b38a3e384f757fc3b2fa480178961bb002a479ca7001d89487f65d8ece8e7770e313533d309bc3b43187812a9970467f0d07e5d774a6f0e0f794845a3f9f948a43e7a4d0af9c0e39f6682ca3c405009db69f158d98566bc29d03da0ef3d06f99b43ebd3cd474bf66cf"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @algo_comp={0x1048, 0x3, {{'lzjh\x00'}, 0x8000, "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"}}, @mark={0xc, 0x15, {0x35075a, 0x80}}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in6=@mcast1, 0x0, 0xa}}, @algo_auth={0x103, 0x1, {{'sha3-384-generic\x00'}, 0x5d8, "242b95f4bebe917f28ae5218d9e1a9a67f1ed77e4dbdc763aea172c335e403a9c8c183d99ae5821a1391afaa1dbc51be6de569bca3f60c131547f80a48a4a798947f16c8ada668097f1a03e3e3f791cb637e83609a366e3470d95e9b57d570bb2b632c5390ed4b7d0d7e4fe4fe63443a861f4ac2082502cf37048352c5d84b6851324f55938f44aa73768f8f1767231edac16487fde94892a7d2234adbc94c517f9709001ff7c694aa06879f7331d4a6c2b82ecc358d79c4fa95f6"}}]}, 0x1424}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014}) r10 = socket$netlink(0x10, 0x3, 0x6) writev(r10, 0x0, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a9bc07ed7b63865c68570a400c2b486efc5e284162a47c08e3c78fc321986551ee5ad409c460f1bd8009d5047e2df5a415c81d75649b"], 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xf0, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4400c000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x13, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0xb}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) 8m12.486239191s ago: executing program 0 (id=1766): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b87034100000040000000000000e76070733991b3dfd3df00040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf5", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0xc000) 8m12.29340502s ago: executing program 0 (id=1769): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r6, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r7, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x4009}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r1) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000002040)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f0000002000)={&(0x7f0000001ec0)={0x40, r12, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x21}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3ff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000084}, 0x44014) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmmsg$alg(r1, &(0x7f0000001dc0)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="33d301ab757776ddf22e02d749055ecf7ee87c7d5c2d1a0224ddd7395debe3c55614442ec1b9f7b715a79ee7841a13df434d144e180f3e195e4104d77abe41f64063e91ef9dad82b627bf72b8cd30bdcca94fcc169b5d8297c0ea6360a07c79706bfdff2cfe283e747bd7a6b3e06ec872d51361dc60dbdb4bcb4e4289b500c91669cc5e7bbbec462be69", 0x8a}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000000380)="c0518f1a068753cb91cb252b41eb12ed370f8caa0c20e040030ea7ec62ebbb051baa6748ceb7b7808f0431e8cebca17e881e343986c23208f679ca8da30998b2f017e8b8fcb19e8219697c1795cb2b19b468aa217e1f379215a3d3c77153002748693cc9950df4c995cf46d5fa0c58d6abe3b89de5fddec0b0c6b3465caf42e970fbb2345ad32a9c2e2245fa21a136218ce2bea9c0119e7b1206de1a27fa4240344b315c7f044a81aa5af94d92b39d07f066ebbf14cfb9d5ca8ce67a14b66efc7c8096a44eff5ec17f80c99d1a65dcdbf2f46ed5b05bc98ed2249a9c71595bb8f4da8b2217", 0xe5}, {&(0x7f0000000480)="5f3227b6c8dec52f709f996a3aef91274a1063916b4b3fe028fe6fe6a951e5a5e391f64c831e096f72ff28089c9b9d00fabbf04d6e1bd1fe4a94ece2e61b1dc5c20133e8ce5deecf194e8b1978eeeccaa26986b189cbbaf07825d389b13033f65f8f861cf58e8b2380862ba75ff87c68d62479798da18a027f2b79305df27d8412ec4ec5383fb4829e6e4fe8bf0276171617aad1453c", 0x96}, {&(0x7f00000005c0)="5d82626be6041635417e1e96fb1a51147cea8a2666d34d70585ee21fcd24e5", 0x1f}], 0x5, 0x0, 0x0, 0x20000000}, {0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="ed33c0e2330d734ae17edc11e3b4df615040847a95b0c1c6244b557e27152411f6b4d0aab213c3e3c48cb257dbb3b8", 0x2f}], 0x1, &(0x7f0000001b80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8011}, {0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="ea03fed252b47dbb21ec507c4c2a0c439713e455dd7ddd25f2fdae6fcf5c47f36718ed391f428120842d65af5dc6da23f60887747fad0a6f270c901ef0598d20bd6e9b27cd939f76d754aa30cf5cb92c683727b397ee370f337c878c1db8f40ef09094d7b247b8adc926744b7410a0312fb3c30e34fb50bb659f8fc2120cd685503e328193bad9b0b1f444d02d06b61e9f7682061c48ff798de7babd86539608259deffa9000cf22282fad0b69fd35e63bc5e8edb6ec70f4ad4be7d84e19b4b9ab173bf3e5327ec383ee5b094b6fd60857d64772e1298ada6da9162f5e4e4da7c3020c0645da5b81c1389e41a564471db7ef28e07921aed900", 0xf9}], 0x1, &(0x7f0000001d00)=[@op={0x18}, @iv={0x90, 0x117, 0x2, 0x77, "545a2b7956432298cf73bec6fe3484a82d4b02106ebff340e338e9211350e8aee2c3f7f2dc60f92bf0650095f2c6d96db9e8df9b85600957a4cc9b8b7ec0975a981a4a7cc882c484f97c7ca44f8105fb59f44968559d831acf68c7f31cf95e72c3fb7fa25b735daf8b8c9f9d5fd5367869a8933ccbd395"}], 0xa8, 0xc5}], 0x3, 0x4010) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m11.498849284s ago: executing program 0 (id=1777): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x2, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x89, 0x3, 0x20000000, 0x7, 0x8}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000850) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fecbd680b650", 0x8}], 0x2}, 0x5) 8m10.922181576s ago: executing program 0 (id=1783): r0 = socket$kcm(0x29, 0x2, 0x0) read(r0, &(0x7f0000000180)=""/20, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000740)={0xa, 0x4e20, 0x0, @empty, 0x1000000}, 0x1c) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/39, 0x27}, 0x80000001}], 0x1, 0x4000830b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r6, 0x25, 0x0, @void}, 0x10) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r8, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r9, 0x29, 0x42, 0x0, &(0x7f0000001640)) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1, r4}) ppoll(&(0x7f00000001c0)=[{r0, 0x4444}, {r1, 0x2002}, {r1, 0x240}], 0x3, &(0x7f0000000200), &(0x7f0000000240)={[0x10]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 8m10.646426726s ago: executing program 0 (id=1787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03076804268c989e14f088a8", 0x0, 0x90d, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m10.317330817s ago: executing program 32 (id=1787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03076804268c989e14f088a8", 0x0, 0x90d, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.477572874s ago: executing program 2 (id=4688): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) vmsplice(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001340)="0a4aab4550", 0x5}, {&(0x7f0000001280)}, {&(0x7f00000000c0)="e93050af19ed2003b06ec29674d45b2e4f1ce386afeea65d8d2b69", 0x1b}], 0x4, 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000002000004000000000000", @ANYRES32=0x0, @ANYBLOB="8b90000010e3040008000500", @ANYRES32=r3, @ANYBLOB="3000128009000100766c616e0000000020000280060001000400000010000480ea"], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 3.28881596s ago: executing program 5 (id=4692): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="e3dc3058d0e59e98aae3d9120aa23f3301518fe27124ae7fa60ff07c3729dc28e23e4875400010a5bf6d3ff33e3d45d75daf3a925535844757a69f57317bdbc91dd46414849c38859324053dc167fd8c1890d0579264fc036049ae1e3cccc36951371bdf0205e1d72fb20ac492", &(0x7f00000000c0)=@udp=r4}, 0x20) 3.25439663s ago: executing program 2 (id=4693): pipe(&(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2, 0x0, 0x11000000}, 0x38) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000100"/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x600}}, @generic={0x0, 0x9, 0x9, 0x2, 0xf}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="180000003a0000fadbdf25000000000000"], 0x18}}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x46, &(0x7f0000000380), 0x4) bind$alg(r6, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r8 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="b6"}, {&(0x7f0000000580)="b1cdc0a92435041e6be063329729ef5e76ad3fe345f5049c645eea4edf3eac61ac6125c4382bea15999372651c0bedb101c6de3cefe71b3c94b24b07b8aafdf4bdcc2569b869280ee381d3e45f30dbd8e28014119a6036cb506f7a2b2a5039de729d400860c16bc46bebeacfb205403097943553bbef64d6a817d60ca21b7944848733b0e4e78d36219fe86bf2274f10f977fa07fbc307484bc1feaf02343682711f9e4f55c773e427969ba85891fcf67bd340694e5cb9d5c00f376b9c56c24a7515286a8f0955784b81819d216b26cb77c27d976c9faeba5c250cac", 0xdc}, {&(0x7f00000007c0)="67a9692bdd01faed906c6411d8c3a7e0037340873e5a1f6e59dd24d02cac6a000e0000000000000000c5157b4b67317e2e9d65f6f94b47bb606a3b5972a27beec2880dae2aaf9fdf76039f47a0e9956f24bb4a2d94a5a46c4bcc8731b57e2dd876b270bfc262781bfefe470234d1af7089438b0300a46e3098df7afc754445be4f47dfc5548d483f2c9f1608e91ee2050fbbc9ab46e0fddf55f35049c188aaf606ec39f8e96e680d1c0e65", 0xffffff41}, {&(0x7f0000000680)="3568ced1970359734f553b38b7e823cd3e4b260c303ab8f70591545b2a2b14963069f94c3ca955f4bb502b1aeb095ad4c1b37b6b3b62288dfdd4c0b492978a19052e6e96eda0c016236e84100e5f5575853b502832362059529b4c31113a6c6befe743f70b26074f05cb699444c998bd9ed5b1765520c1581b18941abd3d3bd35902afb1637275c1924c35613d7c627f9478b466be188e7ca7b352919595291d82e87bc3127bc04a8575397369098197bc477a5f71b6e53cf90a926505375904", 0xc0}, {&(0x7f0000000980)="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", 0x51}], 0x5, 0x0, 0x0, 0x20040890}, 0x2404c800) accept(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x9}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x0) 3.032621735s ago: executing program 5 (id=4696): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000"], 0x1c}], 0x1}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x38, r1, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}]}, 0x38}}, 0x4004) recvmmsg(r0, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000002040)=""/4118, 0x1016}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1f, 0x2040, 0x0) 2.693438945s ago: executing program 1 (id=4700): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20080, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000440)={'nicvf0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000480)=0x8001, 0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x3f8, 0x100, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x1000}, 0x800) sendmmsg(r3, &(0x7f0000001a40)=[{{&(0x7f00000005c0)=@isdn={0x22, 0x8, 0x7, 0x9, 0xd}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000640)="0d5602f63908ffbdbb75cbcf8363513eec267c31d40adfb0170dd681868f3aaee5382d0f11344fbd5c8b8a6c56a2cd5f1ddf164abe00ece713532d99b3b30bb87d7c41a3894173afe6580dc4fcb4028ff7593b30c56c4637d8a036c973da2d33dc7ba3154710b5daf53ea08ebea9c8a2e15197748d670a2292a6635c21600c06e0000f440656e7852b6dcb4c986c1dbf915188d03a926f995c8d5f5995d6349964e630a8c25ff975e424fcad7ee0001502556eaae925b0b72f9c3f80eb656852c84fb007d3c161ea0d4780", 0xcb}, {&(0x7f0000000740)="4cf9259a6eddc430d32f68b3aeefb3f6f152bd", 0x13}], 0x2, &(0x7f00000007c0)=[{0x48, 0x84, 0x7, "35f1a8492cc31694217be08c8bc5c63fae6978d0aff94b30b9c175bb978259b51b365fd9e7b0b0d51a668b970b94ed79571496"}, {0x50, 0x110, 0x6, "14cfb45d500f6ca48dfba342335783e58caf3e83f176849aed4eb4cb900a3b70d24ee718197e88cc14cc6db74a62ef8d41a7ac72a851ebd40e38d235dfe2be"}, {0xd0, 0x115, 0x8, "82f260e46f78fcfb205f595a8eb4ddc00785f8d5ce305a0fdb9013d1475055f196e36ab9e9a0e2d50cd5096dc342a770c27dfa66e632791f66b7908bb8f2e319fffb1864855839bdd2edc94dbab43686509dfed75cf49f2eafd930cba3701d39663c10cb2c245219b868279b730e9637a96de78be2c76c30aba76c296a13786c9949d00876fe3d5d0e7f268c08e436fe7e3f06c08667425464e102ac79fe3b92bc826e3e8cb0df38e92775b1294245bec38268d949ccd6c98024"}, {0x1010, 0x84, 0x1, "e3601678d3fb22fac4211726449cc34d61326e6afcca5e272e29d969815671830a322b6666fab32670817e051dcb2b72c02ebe10a5f9ea5fcfcd1ca91817824cecb93f0c07047163178fb270eed1b0bd70fae5529dedbf7639a4fe9cc1f46c0c28fcca0dc3e648914d89f3de320a935011f764df8a0f6501c6fe726ddd08b4d2061cfcecfa93eb6c075c082a29b5d50ea325e7f8679b90ab9e5228c4ee5abf917ebf51c18fbbdf10ccb2b5248f4dc23c39f871eb86d627b8ecfcded0c91906441842200206df40d00f9abb3acc92beb52d73acbc3d0f9529e1778f1f242ff7365cc6e72db9cd34cbfc29060e531e6d7b850ddfd74b36209b4b971f09ee96b1d18df7bc8abf7176f610fb28df925128d374d3597fab08edca44f1e42dbb6517a4daedf734a9aa34d7f7de2324993b17e63ea2b5841c8130130058322fdb3731b609cbc2ac89fd0d81ebcbf98dc30364ab6f2ccd0fc0655581d0bb1cae13300508405587949120df35fad3924c508c85774899ce19f5dc00c719199ebf4cea55f63f9e390c8bfcb7b6ec9b0caa3f12e797918d95c7b079714d1065168b1d899a44869f200757c1f51f5f7c123049e72f8dc2d8cf2d51a28c276021a44b08f907acdc1cce7dc19043ebfb946da14ec480ed76926286ba976af8c3f2b3ba35e4f7430d67307eaa075c50dd18fddfbd2306532afcf49706ea98d83c19626c4b63ea99a0d827973f72d293a9e1cfc977d6229498fa2867312c9ae00a8868c128635a9fd1b23168ffd294f6af7af0636dc1259e0b1c415c16ac57add63270dfa7087aa4971dda9eac923259554516f5b144117b83e09542d0c3c5284693932cd7d577470c85a4a00be2601aa2e7e2614ad77d673aaebf835ff0470e5fd43c13a3c10f8faa73003413a8037048981fbb8a775c1624feafde05765b8784094525c2c25ed450d0999dcb22dc88ddc2d6045cce470a3f6cf2bef517372fc45d19d324b6f3588a8ce593139a34d9b05400d7569b4a19a341fb588c26910aea6d024aaa0297870a737f5d19a5037255cc1ddc700bf39a69f55f981a3bb2fba205dcec3a7cb485137cbe8352e6fb648bf13df2ba0d9f239111c3ad6e672bbe9088b298e37e1a3bd7b8fc2f4671fdaa7bc5c33453e71887127d6e6e7795fb766d3e9a149264f88265f34afb294b7753d7dc41c4fe148400b176f425d5cc2d7df1754f048b63159f733f6a55b446b9d5236e73267dffa8ec1b650550a9f8ada40b86149dc7627b575432e3692e93c83eec82f8d64fbaa84e325ff81db543bb03c87ac8fbf2bc2e66e1e7ab39db12f747527e960828276ecd001ee05a0221a3ad44fa71ea3562d7885fc60183ded44d320256aa6960aa2d3bf259a5da6f14614df34e134cc1ac918ab8dc4d865544dd7ea5f718415c919a28149f3a2fd68bf313d86b573b660a4f79398afcb759105a1178b43626d36a0a765de3a90f26df0d5c862f3d45ebc2ba7c3f608f843eb2522653fd29005c646b90cd393fb6c6b16ac09c2e80f9194a2b26ee43fc1875d3e5d98f6a1e573799b8227f598a51e5c123b46d3a488c28e8ad24d8d80e3498a760d75fc03fc6daaef8ae999ca69c814f27c35e8c309c89d89f7a9e4ccd04233eee5c1efbea815fed018774968efa1585419e715d629fdec95e406c0cfea4afe89d1148df6f793f0438b147772a7bfca13b3ddbe6aa6edea06f7a53a5bfeb3d623b4594265bbcc1b3c911361f4a607426e3ac073f6a4d2b6f3ad8aff28db9837384a9e6130a9ec41ec2b68968bb53fcb0cb6187ea1cdb04bb66ebf9ae3c0651b313d0d6ae70b309ad148fe62b48f2ce913f1e6f91885bdcc6c294034276bcaa5ab9beb0870793e136dc5dbd3bb81babcfbc3c945547d303f4eb75034c96595cca23bf8cba0bf0040ce4941c4ddb165428cf87df6b5758d3ec1ecb9e3ddddd37e126aea5ab2c039ac80c3f359c857d9bc366f15f11592245f4e9cf6796cbed0d7ef9a38922c18483a25fb1f70dba449a1fb45b9bb8107ce6576f667abe92b8458dd9187ab22161b362c90fb76131d371dd658f8697e3fbdd55a3acf0b2ccdfc2b5775fac4e0c286d878c8adf58f669e4ea0646cca9c3221e3d0b1e441a8978f43c65cf2fff16b908d4be6c37a70f43fc3f764d23ae0ffc5bf284a49e34a19666f4f81edf1ef244037389660ad9083e27f46057ca4898a616e0357455e7af27c71bc3427419fbe8050a02b4eda81de6d10ba8ad0dc4d4c94073c0943a0ac10d60884e6233ad97a4659e1c00153e7c6de450defb2be3f571fa54861e1f18043426ae39473c15912ac2dd627baf484d04bc453daddee2f118c654444b9fc520c42fedeabaee8912b686b085b609a64c929f773f96d10a1bdaceafc94ef4f32630187ff844c6b90f48169e7aefbf050f777a68414653c33f49496187a2e8c595ca7bd2b4c550c55ebda9d5033d48974e4d2eea79d5ebdceb96000d012bd6ad5d19a7d2462442b62b230f1fc480b4d3149efe35dad62d929ff48367142a78354cbf2b9a50bf2c93284f0193a3cb1bc8b09d38a132d4048a8cd1e472eddc0bcac545a1633af57e26045959dff26c93a048234daac8ca81df6726583fe2b1a77b61a05955b48fc1176298e7022a49fcf55dbebe2be9d64c4f899c60cb8916ae5144cd20f820b4aa9b97ff1f0fe36d4a670bd3c665cda8d9c4716df1857265be2605f75f7603ed34e576d24fa2b2018658e0cb94ec2a7f0f365d15aa72268903a000a95cc337cc51ddfb1fe7b344e59cd00a7a58e706d8af1d12e334356a192c9de24759a017e7f180c7d91156a0bd3e6d43308de2c314d6a9e8a3b292a56bd314855bcc288d03f7ac606e3860bef83991f2f7395c2ee1dd5233117a7f863f3e468b5a2cd84e55884ef353574d77cb8baa09bd9d9129d757108e05a4a440937de7a77353af00de2211b2fa5871fccd340133a92fa7aa069e4248239765fd36871d193d60b27af7ca979970fa17ab1958b7bf5ee0d0a3d83dd014be8a6ca6c87d9e8cc3b3b749c9f53f948c0fe93294f0b68f6cc28050ebfd4242ade055833954fa8fd2ee89a742c2d4ad7677f33a600edb0dd602072311b108afb6460f36ec0c48664154e24e5d2ca7dbc2b3c7723bc77f0de4f93abf62b0464ff6746ed263fea1053029922f43ed4148d4c197b1196179a19f8c964ef6cae3998d2e56a240825e32731e789cb29de95f6e543749ae1120a624d30cbf5f0d13872f1e01afb3ec5fc20a7632a0f49bed9b4aaff46e45444ebe05c26e1fa118c7983db4deef5f91207485905156799cb6ce38dba8e1892bcc35d65dcd85ecbb0da8b308599dd27b911bdb7c76ccecbdc96558435be5b2099cbb17723b89a78a6a8c1cd70f41244fa577ebf8318fd06b661f15512d38c1912e3cc465e58b4e53821079fefdc53e5fb5fb31cffc75ce11019c9c8dd3c217d99d1edc7cb75429212afb06b65aa5e2db707c672bb797e52814a096b9705933e26a07246c3db89aadb5433b8e3ddd208c0c4d2ddc1aef69fe47466f0557db1ccb0974cb96f63b08085eaf395a33fd6f40667100168f8382db40b5e82fe0572998632ac65f48f7abe8fafe0ae17bc04c4f11c903e80ad8103d08336fe362e74b84f6da1af27d0a4f12add0cf7f190d9be3269617a6da551121dfa1aa93559c2dcdd451026753662d22845980cb8013b59db02801feebd07d991c7ce013c752d6646d895437aa58aa3ff0dbe0d7c99a24f895f6e8f0c19011f57dbde46a4edacdce5962147c2108e7e0fa6bc3ba92c1b6a938a18f7366c3ae60067d69ebfacaf93f925f2ad8790314105a2433018b0a4a34f2da7e8ff6ae1fc1ba9af61e6173fe999bce5d37cf90d5b53dd22b025f38d7d26e2ebbdcb606adda42425324c0d2cdd61c780fae2c05ecac40f527c4889030165adb63553e38fddcb5d5272c95940c4b4d3c740839a1358b8af7fbf766cd6371fea47ea8ada62453c4bdb2d253b688cc5cf6c33da86d88568cffa7deb5c5e5ed892703ad21c0f8915a82916730336e1585c622adf4d01ff4ba6ccf0035961e8cff476f7a0305031682f3aeb7142f25d544d5fb0ebd4ade90214c9be2c27a3f362677ff87d79ef397da3a8ad4460fde73b69ab9560f63a8d98ebb72c359ad6ced42dff266d39ba49dae33466c9c1bec82de0efe5df8527fbc08b985c288cd458b5b6ddba1a566c0de76b2688fe63d13e6f00a4db9189d398a4dd772055f86c3a31186c78ec79ffc3bd45324593b21c9050e3293a067055a2febbb4050eafe3183d24d480c24fb17ed48dc83fa879f69cd3537581aaa685928d7bc8b81d2776f7cc7b4682b9f1eca4a2b21b16b5199afce792311bc614854d997ff4bf0af744394198ad3dd2d116bd09dfb04feb9d290ee6154befae829c8564093dcc4649f73d58685dcb23176ac60a9a39bb0585e2f81b7c5a7b772afeefe158dd42978617e379e48bd06e6cd87e7c3902ffdc90efe361041697d9127b0a067aabaa4e2e1f20509ce4093ac2085877b394ec85f867b413f454646cc01be28f72ffec77f51b99daae00de92d76eb9b39e9cd4c155f32b314b0a585f94fa5b0b9568a31290b36a8dcd8fa0e492a93b7473141c0e02d541d062503e996ae80f6a6980eb71bf1cb02a69ea6f964156660ac54a63b1be33ec4e2fd26c210390c71127cde0f04d1d45ca7b3c64fc9c92914c2cedaedf5d0110b4b25ec37bb75d4071d572411a4286c1dfc34ffc8c30e22961bea240cc27d4b600c293900e319beacc6c4c08d8feae9eacac5a9fd32e6067e2c67c0725871ebc111fa8e165367023758a59b017dbcd02e26356e545e9602b2bbc85f28e0002dda2d618565736f2414e66a6fe5c2affb885e14ee8a3e89b80b23f811ead851f677cc2b7b3464cc1440f44b39845e7d137a88aebf4a4bd017401ca5e613f6a526fd72a6eecb340c060de7d4cc90c75595582a14377c24ede680eb442bd041087eed43952f0a72f2042272baf59a6e4c1b97fcf88bd6843a4b2f2aed04aad20873a911a4fb9f4ce3d16e1932162f09616f9a32be9ecc28d01782247a0bc44d18b7c466f46ddfed025377eb34d33a73b873229112b3b3d7b7b0a85b41b05f326e2d7a5090d467cd1d3e0e515c3a0e0bf4001dae55365dfbfa07078849bf482df9b71e2123e053658c0ede3bb8e892e9c8edb37579262e351db12d590911ec9b2c8a495137f2cf9db27099b107b80f9c24944665013fb277df40c20feb6928b8539d5ddc1d0ed6b407e0f99e00bd768a4b267dfda8deadab102cbee38ffb92e28dffca40306632f93ace2dcef0cf5f7474dcc54530acd598bbf3ca9d17d1969ec58ba69a9491c9a4d58e4d2aa5e80db2340e87bb8429dc2af7797f5bc0835421e98d5adc423f58d74263425e29b484fc8ba51e8a1f8e2915387f0b58e77e2c8e3b14834ad744971bce81d0d9aeac35cf83c1949d6103b60981b99ba92df5b367c8d5794794fb496158ae574069f8cc50fe71d319f68a397c347eeb62f89756f249b8e31ad5174697086c19836659c31901555ed2e872a91d8ea0d0ac16a6dd62fbd438d862b1e1a30925cf857d1ab614074a867e51ffb6dec0488b84d6137b8de885a16f9e0122cc368b0786d078f913a13e6822861a40bcba860c605f7216e7750d38778cbe3114ad4885637e91794eb2bc2500ae85c4c8fcec8af52e19b060a14f0a27cb962045bdcfda350cfc94459a4de9ba881fd0525de1b1463b90c05fa8acdab237b98da83f376dcb9544e1d23464"}, {0xf8, 0x104, 0x7, "453cab29238917c479eac2351c4566df2477458124943f9782546985024f6d14047fed3d4e710429cd6b75a80ea32b569ec76400825fd272d36b8084ad87d9444514cbd4c4a783781495d61d4ea3971d7928a0b761e4eaa2b9a14017ae8a90948f2ba6dcd1c5bb533fc760ac71068c057f501a96d61d654b8b15899953b2801036dc4d2442829a1653b8cdd31cce9ae8bee41e6f8d0533f7a6fcfd1dd33d14514618a5f2cac0608b03d980cdcb98c2c549f25cdfd52983b19dbaf44fc6dba18e746b2da5d8fc0e5df27d227638959e91ad3db6d4f5e7b40b667e0d00867fdfc59e35b5e8e3f72a06"}], 0x1270}}], 0x1, 0x800) r4 = socket(0x1, 0x4, 0x3) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000001a80)={'sit0\x00', @link_local}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000001ac0)={0x2, 0x4e20, @empty}, 0x10) r6 = accept4$netrom(r4, 0x0, &(0x7f0000001b00), 0x80800) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000001b40)=0x4200, 0x4) sendmsg$kcm(r4, &(0x7f0000002cc0)={&(0x7f0000001b80)=@phonet={0x23, 0xf1, 0x2, 0xf3}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001c00)}, {&(0x7f0000001c40)='-K', 0x2}, {&(0x7f0000001c80)="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", 0x1000}], 0x3}, 0x20000040) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002d00), 0x545801, 0x0) ioctl$PPPIOCSMRRU(r7, 0x4004743b, &(0x7f0000002d40)=0x3) sendmsg$key(r4, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d80)={0x2, 0x5, 0x39, 0x7, 0xc, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d4, 0x4d2}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bbd, 0x5, {0x6, 0x33, 0x4, 0x1, 0x0, 0x3, 0x0, @in=@private=0xa010101, @in=@broadcast}}]}, 0x60}}, 0x20048844) connect$llc(r4, &(0x7f0000002e80)={0x1a, 0x10f, 0x7, 0x5, 0x8, 0x24}, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000002ec0)={{0x4, @remote, 0x4e24, 0x3, 'lblcr\x00', 0x1, 0x6, 0x13}, {@rand_addr=0x64010101, 0x4e23, 0x10000, 0x5, 0x5, 0xfffffffa}}, 0x44) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000002f40)=0x38, 0x4) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f0000002f80)={'veth1_to_team\x00', 0x7}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003300)={0x0, 0x2a, &(0x7f0000003000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @generic={0xff, 0xd, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x1, 0xc, 0x9, 0x7, 0x18, 0xffffffffffffffff}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003180)='GPL\x00', 0x80000000, 0x63, &(0x7f00000031c0)=""/99, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003240)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003280)=[0x1, r4, r8, 0xffffffffffffffff, r0, r3, 0x1], &(0x7f00000032c0)=[{0x4, 0x3, 0x10, 0x1}, {0x3, 0x4, 0x5, 0x9}, {0x2, 0x5, 0x7, 0xa}], 0x10, 0x1}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000033c0)=@o_path={&(0x7f0000002fc0)='./file0\x00', r9, 0x4000, r5}, 0x18) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000003600)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x400800}, 0xc, &(0x7f00000035c0)={&(0x7f0000003440)={0x17c, 0x12, 0x2, 0x70bd28, 0x25dfdbfe, {0x1e, 0x4, 0x2, 0x81, {0x4e21, 0x4e20, [0x81, 0x3c, 0x7f16, 0x40], [0x7f8, 0x6, 0x1d, 0x25b3], 0x0, [0x9, 0x804e]}, 0x1, 0xf}, [@INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "462480d849e23efddbd35974190c90cb649b75a82657ceecd6316b4e5a7219ee7b0cd4dc64b9e0411a9e387084f836654a7331e6cfcbf4cb25724b53fd02051fec47ffa251245c4cb3f4af3c0f89e62587098fb4476bae32bbd671a8cb6405dc72a0e13556d65bf52e532ba0df992fc75aae73bddb0680a216d06c040ac859c26f562efbc4f75f5b511410bc147ea3a8e80ca0a3c597143d80a0863d2908add6435a5fd718df4ee487c66329fd7dfc3f1fb3f0"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "6e7d6f1b2272a2c35ff493ba73d0d40f98853d33e59d138ef2b479f64c77c6ecc1e8e95d079fd8e39b444c059d30da60fc5e2ef39605ffafb4cc9be3340765ec2f768e5bda5cb513c776b0f42aa0883dbe2590ab4bfe2da1a37e2291c37d750750137b80c918f2d9a93da07101987c6409cf1e"}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc004}, 0x4c100) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000003640)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) syz_emit_ethernet(0x1666, &(0x7f0000003680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "8e9e32", 0x1630, 0x2f, 0xff, @mcast2, @private2, {[@routing={0x2b, 0xa, 0x2, 0x7, 0x0, [@private0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, @dev={0xfe, 0x80, '\x00', 0x24}, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @dstopts={0x1f, 0x22f, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0xb5, "3b2b4c0e17fb7230b0506b721cf3170e5c2a163c7f89cfddec6a84547a13bc9587d01ed26543cf3a4f6f3e21086787f21f5d550494dda11a35165eae0143ab4ce0fe9369128b70f24d2b5ff4fcac8f30a66c9b65e607b31242bbb852042834eeef11d001600da22ab2ec802712998f266b2b905c55626ba9bd7a8174d40cbcbd70c0f4c36aa5f7afa7e7957432e04e003f47cb1f79cb8a7d1d75d64712a42a6aa09044463577ab2daffac317c8fc2da6f0836ea93c"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x0, [0x8, 0x6, 0x3]}}, @generic={0xff, 0x1000, "7065570c0379cf0a81f03fc998c91dff7813635f9b5633f22c223495ab75664391b4f0a5efcee9419ae64eb9135bf67292b24008086366ac9a879d2227b786af54f8547ebc96dca5716896dd05c6f8e69a40c8aed9ebd474d5b5a699c86cccb84baf5ed4f8ca7872a3aec972114cbc3da8b8210df6d666bfb0d2a30297c9a3d8ea3feee7b126857d1d338826cef11019e2949ced48753a8c1feb31fdbe3b96c0b7ec30dcdf34725a73907d8ccbf1c6831a2f953b4abcb0e8114831829035a2faa6143618b102dfc4bcbdd36f8c460a463667b0f050449b6c380da94f059580a259c1eb1f790c56484614371ec65af175c8b8a1bfa77c7b43735a99186f03623307011a71e4d6d42e9d9633862135b6cd65e794d94f4b3b277a85fb9c9cd5abf29b343bb4a1d1f86080ca54744f87847ce07956d3c40b25c2dd7907550dea499281782d6a163ef7dc6a63fb32d51f41c67f566c18065b699a29648fb82e9f392fd659fae88bf6bc017a18367b2071cfb94e422a6fe233e4bcab8c55205fbb85ac0e5a928ab0ab11910cbfe99e74c879f4435d5be1febf83af9359b211f6abdd7a9d360eb0aaddfd0babf25174ccf98a05ffd8f49763d253d0b077255a2de627dce1c831d8e7969daf7c7a5bbdf28383ce599b11e3a7e1a94c6022a3da229e89c6ff886cd9253e34ad3d396db6f22f486d2380d484af9f7781d8a26999896f186cf73c8dad7b65ec3b3837c53e101fab49c87b34fbc0e5151cf9bc0fff109e522ba4acfa3803baeccc6cc0ba7247ca84a6b6b3fc37e248c27bce2907bf258c5bc8f8c8d4299eb4f271669ec974ae60c43c4d7ca6a7357699e89edb211f0398a1b12bd7636f92d566ea8a692e28824c9eb2433ab8963ebfe8e824aeaee2f187b5616e3ee71a3dcb757ea3fa45687b562e185e4f629bee1758ac18a9e21056fa77ceec98dc1877db65f4182a36b7d8ee9177bb66e4e89c7f52d2c1518b19e199b1d6b55eaded61db44f77f79ea36a6e924cf9503d627ae4d564e811f7df386965b6e0d4882c20a2c5fc77fe84971cb33b86b5b9b76b54e60ca53996e372cf289f0ff59535db3b922faeb12562e358a50f3329b8c77d86a2c4efe8469b95574b219525eff93e5fea0a9d2dacd2c9b451be58992549d4a7d9f2624d91510c007c86cde67a1d37643389008900548cd19170224819a877ca619f866cb00b739781193cb3e68ed8b7e0aa4377ed1624254b9650698bfb0b2bbcefde06f8505cbfd2d3f39e77eee5967371f69b37923fd69760496dac412ac26638e52f7ab4f5353c5e8af918cba79dae6f3c20f13dbb83097c1f72458b1e373e1768f58a7e26557121e68d0b64f6fde5881cdeaf7cdac8bb0530018e0cd90214698f083d4994af22c963329288e87d2bfde630d6abdf1bc008a9fcc682981828ddcf32032fa3f1da9ad56a1694c20934b6c7545eae204257d8ff0d84eebc0850cf3aa6337b05b1cb22cd4fbcc645f6f08dbca79e026acd8f88073ed6fe33bc7a7ec09f57da84e3acfe1e411fe2dc388b14c645e46cc03f05035905f3b258216bbb969aafa9ed23c3183fa600f4803e19354309d903ec858235a5c477363ae7094279ef38dd173e1a7e40ab393f8b46da79a69a02af84d9582d4f5ede4b5d0a229b3ed93ba394989c53ffc5eafeeb06018d4f4f1c11ffeb31702352c3733f0f074ce929e3033df50d248ecce87c843b8d9cc01f887cf64b2f5c561a2884c8d2ec741a67c99d9bf334012c13ffffa0b5c96c43ceac83c15a02044f5838cc47c9e2a6bf60cf07b14ec34ce7737a880a15de882f51d57e9d22eae2069bc8552e8a0e51e2dc7d104c39ed753444e863b4d9bca0472234e6d57454081c2d8d1f312acc6565ce9f6d3ad4234668ebb7032ed68266e6cf13eef7381f23b3d8087b37c245305e6d29672be8ce04f8ee4bcefdea510a7cbbfd93029222f631f86d8e7b2302f91d99957e6b37b7276b95bda59614e1966016c2029178ec630775e51dd765494cc737eb0ea001501613b96c05af908323243f2db8752608ce9c097e62b94ca587f9ff5a9fb970f46e2409e1ac2b2fa95ab4c6400738798b6d8e1ac7f3a8311b6ba3c87fe52cd92f12facdf90e2b4c54d30f41f9f96423537d6ed8551ac206eeae9bce7391b90da88d0d5813d059f6292ed7b0ae8a8acabad2bf3cfe88bf483d377db9d00bd40e54c17f11f0bf5314121b30924947d8f74f1d76c241b165d9334ba8746bd985f84dc74aaea6758c6d28b2964c7a7e790aecdd432f6e5f2b47b44198f9eec7e0c1d2f48dca7cca846c790c94bd0b49b983b1bd128ddcf7c74eb98bb0a026f354ddb4f045feceb3756bb0bfa0ab9c003bfabfbe564283e1621083b235c7e146e63e670ab41768c146627a1f82bba4bb3da504a92c077bb4270b4c29bdc3e91aec484e3864ad0dfea0c281f891c30347253bb6aa229b401c8324622349fda3574552f7dc08c75a533a82bab1f5a667f4be75066e61c90956185de783bc4af58e820087434359c74020c3942dfdb7d0738cea7ddbefd0db52df61331248cab3ec7f97ef49afa7b982c44ce4fd570626d646f36aaaeb97a6c9924f982c72fa2fd53b1d086b2166b1e2772f35870a54f83d33880c9d1f737afe3f7f13d82365443bbd4c47c440bdb77874f9cfe3a37e788beacbb3e980462f9b5492ce6bd901cd47739708f5f1fae191d183fef0ade5970c77a8d5d12dd30e0fee41d1168e3008c6e45f3128aa1d55a2c7e4777a8159b6e88f05521ad2cc9290839b92d87cbc12c093fbba0d9767c669ae7815b8e5bb66ebbd1f4e8030d22b7921a3cb9f8227316e7edc63123fe040d62164cad23a0bf044c031c5ff41fdd521b873df71f9e0b517f60e9b2a17cdcea8e6ab710bb2d9f37ab49acf135cb1cc709cd65b8e1d485789e47158a1d5c17cf67288bbe7e888d1fc660af57d64779b61b3dfb888b5c6eb43af66165568d4a5c205e722a77e7cf384089e9a7733868183f955ddd1458df6a13aec1519e53343c4e4689dfb88d1ffdef6781f07013f4676b0a2314d9d737a4c9a4f9d22fb80f582bf66be0efe2259a64eb2b48fb833bc576b14dfa76509cf1d04b560207fd4489a6d16f4675308be81d1c12c7458087c70fa7c361064601197aa5209dfe54f97270d0c98378577f5dc5455b8dc9b646f9db85803c6691cbebbb9720f947eff95a0e4d2637c4b1e377d593e9ab954b3c1b2e6b526f09a2b42e683374c7a06aabf2b943283523d9e9be2cd0ab7b7219381f5b432c53edfabf4efc2f2d333b05ab07d431eceed51108f7cc5ab1b8b4d25ee002ad4abf5d58be0174f5dd6fe34becad5e47e91be2f2dbb99b8b5d4782e723ace1ffd6adee2640b85948fd1ddd10ac6b2479d73cb8915f1739bb8b804fac0862336177ae6b64cbe7f66e5b1ceaebac20ac395af8853c449c14ff4ea78ca924a97c2478320f91e0794c3572dd5f67a263386a09bda0c6d46f2a511428f93eac2880970ef17cca7447bce19856d320f80f16aca5fd99edcfc0c535e3b8a2614eaebb9db68714942cf79635d4baac77d063111b758a1bbf01926549f433d677cff73e2b5e8e1ac43e51bcc9a6734d6aa6699976e2fa85a4103c1ebd5522f36a94b32b7370af00e405f3fee87085f2ef7fd207dd9ebaafa3687b1ff01830405ebd3d2111eae4114928f0e4928bd5b6b8dfc1f74e5a6e5f1c5d0a049054d28fc09d08349b3f08b9ed435b1a853dffc45fd2b116990f92db8e5eeb01063a32e9fad8b5398a32b9103d0afe5f4f45a9dd677b708abe1ff537f8849147a6c5316464a1c85da7c1e554f3f07f937565a534d7064507ee4ef01adeca200235dce615c77fe2f895471d167f31e71deca2b37b2d7bfa6e0977c77e9cc864ae3ed2086ac787631a3ac07fd4d1929864be071271b2b97aa5267da56a392f91e3c27ed03ee83d46155e15ecdbb7b1d2debc4bfb301b0175c9ad72d4bfa6ad5b6ecf91ebf4d532b5115cd8e94186be8ae13e5b5376ecdc0583f4f6e9078041cb385975393c38e85b588719044c7a8e241240e95f1f3ab8cb8a4748af96f5c0fd84cd3e2121f3d40d2d49be6410144bc53e7858f53d3ab2564c5dd162e1a3ac702bc500b018fc7f2df442edfd8c9adc5a1b2e3976379401ade6257908ca1935d6581108f97b3b477d1dd57e7d4ef5f9f8862516a87c5111000f46c2a4d730ad8c0af0bde88c5783e844dd9b3d165a962469ff53baf6c233a45ccfd100af75966aa2a96cf25f848fae5be5b8e22c4983bfd2095bbdf417e7349d743246bb186ea798b36594bc965b359e1e598d374ab37bc6559fdd37e04b75b01e1cb5b2af27db23f2e4443adc43810dd79eef9f33ed6a3d0726640bece44961b75972d7104783c0c5f7feb5c59b98a33a7c0a7e3477d8010d1422b10c9cfa76cd1134c44e0cf46d0673c0d7ee32f6f7e9d66374d5477dc72a408b8cc75d6d841044430921506983939a4b5fd1eeddc9bd0cd246e797ab589c4af39f98ce860b93fd9ca1f516fb4a335f7ad4f5d123bfd10a8a51f3091968e4e6bfb25afc3fcc7843de9aab00fe89daf7a5691a59469c4e4f7c911b8cc71148ef81475e099981547076cb7445982aa4323cb4cf776c2e8e89e23eb973f5bae8524959dbf41a6d7bdaefdab1daca65973bbf2196df45db5f598739ac97011cfe589a6bc2db6224ed0e736b026ab5b0a33cb5a5b7c3440af83c3234e39645c8c6a66072b6d6b28b849f1d8b68979ba80f0f912c9350fe8322362e4369a9ac42c7d869b06e3f40bf20e0e643adc55b9a7fdd520bee52b1598cb9ecec7520ebb1b802a3dbd864fba36abe96092131b54c58153561be7c6eca5cf985cac7ac32a8dfe711383cd771d2c0a6145388b2cf05cdd6862b87f3270d24984a162f19283b34927eb48dc05c6b0780a18012f18de6a60507b3866829898add54f2e5703e77e1d034df1c71a6a36eb030203e8bb88d12f8087dc68cfedc6f52fc11a7cf61c7631a6ad1b67c5e92a89753fc7390cc06c2e2cd84a05912efecf829e4d4a961f07b40b8103396ee8c9d0331b8e738a2f2d9e6e5f2eeaa2040bf2a25ce0227d4b5035d3377d85b1f14dcf8eba8cb4d39ee34b806e4026532974367cc660e2769a503cc04a813c7ee72b668f146b110425fa85b94ff0ba4de5e19ad1830f7288bb13a5c1533576303d075416b9c145143de95fd3d7f1f5a72d342595ec9f78b6ebc73bd21214607dd2524ced196114b6cf7a0dd9cd7d3d57aac4fca2449cb61b3dc19ef8792c8816af51f595c982324862eaef46a6de683b846426bf476c78fb8b8273292cf10f4ed39cdcde675434ef4d1122d3006cdfa3b63b041f717b7e9e455d70597a04c4d9791da0cf3f227a3199426deef5fa3d93b2f9c32e847068df8b0ed81942881e0258b33cb93d4e5d3333ce720aad2697a333ddb1a954d44ae4aeae25b2d44fb882c75b036f69a149b5178e7401102ef458aae9dbf37a51cc10822417e11e1d81cd2ae7233417d41d98c01e1c3ee9a8758a24dcc3da19edeb32d40b843c757db6ec8cc6c8c191b9bacd92fedf001ccf79b6efb0ca8764f3259190a84f670f356d1e5f6725fe5c66192347dcc05e9b472458bff5b52123a3fbd8d34d0098e0a1714949b8c350ed20e26fc33ba6cfb76e57adaf6ae0c46d2b90ed53f3152d042d1e1272305d87516a77ddc11cd5c94514b7ebe4a335297ad2276f7d3b924666cde3fcdfb0ac59480ca86eeb22b5e311f94735abc2a2422230b50de4e27a5927d20"}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x80, 0x91, "ab69af6887be7845234a150c1c00c744101ea1ee0b3ad4d9fd3b5de3ead8f4d0fa659cc8ad489d697562b4935111c77f4dd73245f1bbab35e8c8ca040f03b23aeb0cbfa79b171627a3c9084299d3223176e44051fef689d780a507269e35b501fcae88f7925a1c427062dd8c2067da2817af4af4f851429d6c484dc28ada72588969295e3fc6f4eecb38384ad1adfc7c60"}]}, @hopopts={0x3c, 0x18, '\x00', [@pad1, @calipso={0x7, 0x30, {0x0, 0xa, 0x5, 0x6, [0x0, 0x3, 0x7, 0x8, 0x1]}}, @jumbo={0xc2, 0x4, 0x7ff}, @generic={0x9, 0x29, "a3e21904e8a9f88e6d97b155fb3a4258eb1cc52f0e5fe27e6308a2b3f0faa0ff687a1587bd4647917f"}, @calipso={0x7, 0x58, {0x1, 0x14, 0x4, 0x5, [0x4, 0x9, 0x0, 0x7, 0x4, 0x1, 0x3, 0x4, 0x7, 0xd1]}}, @ra={0x5, 0x2, 0x9}]}, @hopopts={0x2b, 0x10, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @generic={0x31, 0x60, "763f8a3a70fce95bdfb129ed6c3d9c65b3bf5be64c3b37216b886254e2313e2e715fbfed2c6fb793e8491d9e235720b3c54c0a2c9d6d04a58e8acbd46cb38f2b38dc5c9fbd08ce7bcc19fb386b35551fae847e09eb777679c1d57956bbe30877"}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xd4}]}, @routing={0xff, 0x2, 0x1, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1c}]}, @routing={0x3b, 0xe, 0x1, 0x3, 0x0, [@rand_addr=' \x01\x00', @mcast2, @loopback, @mcast2, @remote, @dev={0xfe, 0x80, '\x00', 0x22}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x73, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @generic={0x2, 0x5f, "23bb5cf766011af8669910c2cec9198a14fc2077be0dae82a9a9000d8f7a7e947766ed78ac6f7d71949a1f989c24b664cbdeabc11fd1312e2500d1b4e6fe2eb218297055accd4eab80b4c930fc0fdec748b2b6203470eccd29b4b04dba07a2"}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x7b, 0x3, [0x0], "9b2e66a2a5f7e60b3ec5d7d356cd6f9299ce86a79e9bebdf7873b6e4ab97830fb2ce5a9dab3a5fff837592c2f71c80e873ae0cbde0b700b971957f027214b256e58e6cc5ae9d93d94f4af20747fd8acafc3c1fbbb22bab9867905619ce370eded702b41f51d725914cceef8baa84bc52a2a9da0f09c1843d1db8d9"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "b2047028109278b001905d7131b6d0097740f23a66b1e21d73bef4aee556be"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xa], "2211263d40ad14c3419e01a9fa6dadd36793b361a248a0966fc4c44816348c2dc54a79f01592b329f0f7762fc189ea88ee8678e38a87e1c9fd5f8a1bb7"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x4, 0x3, 0x0, 0x1, 0x0, 0x7}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0x2, 0x2, 0x0, 0x2, 0x0, 0x6}, 0x2, {0x7fff, 0xfff8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "82223bd28aaddd4ca415c5de9c0a6bba7ab3eabb81dbc6f263385cdada058f3405370b87ad6760d66364e60d5d9b257b7123f6fe649131c24d71fe14afc05c271dfa2aaf5a3902b614199e96979867440ef08d289726fa29a546cdd08fc38b1a62bc41062f7f8793112fbea129e5c238fdc4145cd2f10405aa3f1e61efdcfe255308f876641df826406e493dd45839ebe920d200ff1e97ed5b511f6463e6ddbbd03d2e3be09b841616f3a2becb9e90d5b07716d6b0cf59b10901c550a1f4e83e63b1171e85090befb68c24c73133e950de"}}}}}}}, &(0x7f0000004d00)={0x0, 0x2, [0xe35, 0xa08, 0x783, 0x91e]}) 2.609359872s ago: executing program 5 (id=4702): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x81, {0x0, 0x0, 0x0, 0x0, 0x4179b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x8000) 2.471584415s ago: executing program 4 (id=4703): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ff00000000000071118200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x34}}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) 2.468091481s ago: executing program 3 (id=4704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) (async, rerun: 64) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1600080000000000040000000100000020ef5200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000020605200700000000000000000000000c00078008001200000000000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8404) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000440), 0x0) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r9}, 0x18) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x9, 0x1, 0x9, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)}, 0x40) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) socketpair$unix(0x1, 0xa99745c3384d6919, 0x0, &(0x7f0000000540)) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000400), 0x3) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) (async) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000680)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0xa0505000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWTABLE={0x1a8, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xd3, 0x6, "e8b8eba0c379515912703c1116cf0b813619baee858a2cc412961cf298cb70c6059a2552948c4a24ce3c5eb824570981184e3518fec53d29d03ec95f82760c5a33453954c746113cd1ecc89cbcaa1f3ee491f7491d2788f4430dbcc328e1316bcb874b5a07fe134386faf04052d477a1277515e06ff5506b00192f98bca400ce2656851e7c856ebc3e912ca5093beec76c00c09d77d136155aa26ee58c2b3ef5dc9900018d18709b39e4c481190acaf3ca249caaae4739997fa4a9a4b9ac204c32abf72a868c79debf4f6b64f11c36"}, @NFTA_TABLE_USERDATA={0x9d, 0x6, "6cf09752decf429a7a05a537957bece8f0ee9822ceaea9bf4fdd58159af9f351bc84b69537b4e3d8f41596afdf3884d0d7c1442f3b985b25b489d6b43316d13e98d2115f73a919617c31202039a2ad29aa15413d7886e779fec68a0263401d45fbfb6a87f412477001da8fc9f813738f77548e866c9bf2371a4891b447df7c911e06c390bd6e170434dd6b4866c50974265f7318c2faeaf544"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0xe04, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x43c, 0x3, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x13, 0x1, "aa853d87e0429eae4bd8acc77ae2f5"}, @NFTA_DATA_VALUE={0x6a, 0x1, "49dd6fde827be99081fd29cb899248a680ccdc89d4de53e74a8763065c813e1c71c004c3df3eb99a63620923b7e6f5dfdd8c0584b7e6856419879986ec8f9d1dfa18f91b6674de270be1c5dfa0b705e06316891e0410bcfc81585f422b7f691f92485233460a"}, @NFTA_DATA_VALUE={0x1b, 0x1, "4919a884bb7795c412bbc16277596d105f3fa54d455f36"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x24c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_ELEM_KEY={0x1b0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8b, 0x1, "0cac6017574c32199113aefbb6f932a31db6576314f8d668c1f97ff8775ed90098403e8a6cb5507a54ea5bf446dd8861b43c93cf9e09fa7f527a8aedc2e3db31d0988fdf56e13546c8ed1a4e5a97f184dceb0b5b9a486ff8b214a63482cc50220eb1c42bee891a1a00845c23394fd0061c1eb5eda8d55f654e2446c5a157e5bdb7e882f84d273e"}, @NFTA_DATA_VALUE={0xe8, 0x1, "7a63ab89394b6434b178bf0f1997d32b2df88a98e28c6ddcf5486d7075ae19b87290d38a1a9accff38e98525daabceddcd0b4fde95956cab662de7e06a6a21c736c625f939999f01e4ec7b41c39f4788451346ec3a4ead4b86e4fcc3f76a994923a1b835942649f0a0fc90eba9bb35ba53a68a30c8e414fb4b7a776e16f2d4c522474bea4ccaa51352b7ba0ea45b1ffd9088fb9b3129e7db69875cd45debb613c0f08d4877bdd0a97379e037c2015f282449d1c77a4607f6fd7c13424d658031afc935fe5ba5b74333158fd06c9a9368af7f8fdd7bc2db60c34109f53480a9da3d2a3c98"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xa2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x13c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x138, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x49, 0x1, "34dfd6d3362b0202742df807b43ec37dd7dc79f3fbf66953143ff2da5069c2000f93d1d39f9abe91524878a1b07dacbbd4768002dcdfc8d84b44a52b2a771e59544b1d7144"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x25, 0x1, "26a885a90ce0a4edea51a7217b56c8222fc2d7a73ea0a3f2558208fb7cc18ad793"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x414, 0x3, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0xb8, 0x6, 0x1, 0x0, "1e4b37edc7c6c7bba762231072d9e385c72023ab04864fbc305b4cfe9e64e11597eece6f1bbb405b930060ee2b41b8f841863a3aa785ed6ddc2e2c557368162322303c461789cf50b2dd0bf7d379276be67b08618bbab4186cb03472dead55aaba549a1b2face1b24d001a89f8af5a8b8ab21648d415cef7cc3915561a4302921042b06491394f9c46f0c103435a2a42e003d404e85f5a489cca8ec69fec5bae8d419c13374f7b960585fa158639f1648fc4bc10"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @limit={{0xa}, @void}}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x44, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x108, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x103, 0x1, "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"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x190, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x18c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000001}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "bdf984c84df663a477d600975044c65e39e16c77ecbbb9"}, @NFTA_DATA_VALUE={0xcf, 0x1, "6b03b84aeb3341e6b717d2aa831b6975c37f9ff93cd1c14f6551706b1268fb62caeceabed16f685c76700755141019bc94a6aeb005d62da33a5f597406306b7f85611c54af054058313da2a902a475d81a49be8159cf0736909809fa23223dfc8acd489a65a0755768b14ce1b45fcafa940793d9871b4c2eb9ef1ab991aae180991bc286c8115c42868828790291b9fc725cf4353ac4b81ae1ab60c969bdd2b0e1f5c8761f1030fddf19cee126c2184733d7f74ef56ad4e958f1c3a5920bc64ae5672d2735404045f37b97"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x57c, 0x3, 0x0, 0x1, [{0x578, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x29c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x44, 0x1, "75d632acf15fb294e77ceb2c034fd03339199c43fe1ee8d57e1c1a86482dc7cdce65400f804b0868e63db7d029b0fe9142bef636fe44649a601c43199e47d509"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xc6, 0x1, "7e371b5e54e472b908632d6775a2dbc3d4d4f3f6ce2d89af8aefa057a44dc04b83f6cd1a0825c9f87160f9aca33526e9aaa0e1ffd30f75f92b68a5d6e6ed903d308024c03681f62ddb7509409698d1c7e8e150e2a9ffd44256172827ec2c266e9d6853c786464c5a78ad862c3ce9f749ab1651db5b2e9c1eb4b26de1b3fca7105c7620e7a7f03ffbea393504370bd140cf5b5bff0ce2e4423a694407d2e74a2cb5fa789f140d10486857cd4db2b8ec7e4d2d413dfc2668ff97b48bf5e94df26899e9"}, @NFTA_DATA_VALUE={0xc, 0x1, "5710dcb2e0086cc8"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x80000002}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x414}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4f3095c704fa4b6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xca, 0x1, "0ca936bc8b4ce22a21e25d9e1f11ff83d0d861480415e72f3e8efb5b47bd54dc2746c17bd2292664ab5910779af7630f9ece6260f2dc7304e7fb5f109eb18ec761848e1fea4908265041e1620b860e488817b139c6cfe3863daf3639763836f3103f2e9885f0227961edb258de6e6fc9f025b2ec3024c4bddf92c63803e0631803e5294584db9f622c54441f60a6c2b886a1456f11d3d348c2714d66c4dcc1362992e5e4319fac7289e51a04589ffc3e39e24762a87ae647379c9a3de5d358083b80181af111"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xd, 0x1, "6ab1419c50e7be560d"}]}, @NFTA_SET_ELEM_KEY_END={0x250, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x29, 0x1, "1593f3ee2a7583f3dd5658c8e259aeb684faa88cc54cf0c485fc5d3d9e3e01395434fdf8c8"}, @NFTA_DATA_VALUE={0x6a, 0x1, "8c4f25f7045eb7bce3377e01c4316bc8ac3f6774e9c5f996317d0ad7656273a4016c05eb61a33653e8aaa18e96864fb0f555db87ad0784ed04512def49b2415bb829436f71c1521ac5a2f2fb36da9ede4c1f23844e6faebd4526a46f8ec927621f05089ab70e"}, @NFTA_DATA_VALUE={0x96, 0x1, "21e9dd602acc903e718291984c62e6ae87ccf2a68de2acb0d04c5bc0ed2f01e5e025ffd4a68fbedd3aef5c0419479db185cf53395dd6071079b2a2bda887c82b7ad70481eda640526735139391265a1d2904aa35bbbe3c8fa084648c5593c9473a794f9e93f2b7a3a93639c5e8e16c4397d131117239072bfa4455bebde651398e2cbf4fad6f7af5dc7b93f7e43a2786bcef"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000004}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc9, 0x1, "6702f4e181f691225c3329466a45c942d7e4aad2fe8006631fc52ea3d6fc170070b017b5bff131878feef22e14cc906ddaa072b3278fe9d878b4d56bc4610a132ba4736cb11c1a9c380a99a0fd0cd3744c2692a88b64ddadc1a926c62dc265e3c78165665bf2b2dae4e506a9257bacbaef32f353ae61496451f87445ded4109537609d563a95a13e2b5fca1c4a888e67d8725a6a515d9b29d10eb172ea725dedd0a5041dedd3cb1292a8b6aafa0ef76da544f01cc3d9255d9ee6bbab8c8e7ee33a4cf4a1bf"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_USERDATA={0x5e, 0x6, 0x1, 0x0, "26e077297557b80506aa2e2d4164f7d3b267e85a7b271f743ca63739b7de90389b60be9bd8f2678b9a96e85d1c8f4e5ea28032ff7b8777a89e81f6a6b3625acf9b9a9e30303f5f7354ef823760f4aa648bca1a057a336be91b51"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x100, 0x3, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a359ba8}]}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x93f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x28df5619}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}]}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}}, @NFT_MSG_DELSET={0x54, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2c}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFT_MSG_NEWSET={0x528, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0x150, 0x12, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SREG={0x8}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x800}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x101}]}}}, {0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0xf2}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x30, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x4}]}}}, {0x38, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1e}, @NFTA_LOOKUP_SREG={0x8}]}}}, {0x40, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x10}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xf}, @NFTA_SET_DESC={0x39c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xc4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2bab}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbc93}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb26}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd0}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0x88, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5800000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd94}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x107f}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x11c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xed}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x75bd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x78}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa65}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8d26}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4c}]}]}, @NFTA_SET_DESC_CONCAT={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}]}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x79e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc18c}]}]}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14}}, 0x1738}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000000010d88c99e352d24701ba8fc51fbe3cfcfa1fce100d1e819568e0f58675e7779de63c815cc09dabebe46b8f61eee0401095db3d73e3b561dcbf43d34077c99f2e28a5e9fc45e6dc437dab3c5f9cae55454f10f51f037be59646cf414fadbdd68f5856efa7", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 2.38504569s ago: executing program 2 (id=4705): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xab}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$can_bcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000280)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x3, 0xfd, 0x5}, [@RTA_NH_ID={0x8, 0x1e, 0xfff}, @RTA_METRICS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4d4}, 0x4000050) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.306277085s ago: executing program 3 (id=4706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x4e22, @broadcast}}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000400)=@req3={0x5, 0xb7, 0x7, 0x5, 0x6, 0x10000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="3811000043000701fefffffffcdbdf25027c000004004580201101"], 0x1138}}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000580), &(0x7f0000000200)=""/159}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000580), &(0x7f0000000200)=""/159}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r0, r4}, 0xc) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB=' '], 0x38}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB=' '], 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x50}, &(0x7f00000003c0)=0x8) bind$bt_hci(r9, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r9, 0x400448e7, &(0x7f00000001c0)="f067de79e855000afa41da304772c4c27fb579ffbd0109936a84cf9b1e1f49") syz_init_net_socket$llc(0x1a, 0x1, 0x0) 2.300575005s ago: executing program 1 (id=4707): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.180890092s ago: executing program 5 (id=4708): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/146, 0x92}], 0x1}, 0x2000) 2.089326743s ago: executing program 1 (id=4709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32], 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) readv(r4, &(0x7f0000000200), 0x10000000000000ba) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0xc, 0x8, 0x1}}}}]}, 0x48}}, 0x4008800) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.945505319s ago: executing program 3 (id=4710): syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, r4, 0x4}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0xc0, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x38, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x32, 0x2, "9c4e53d4dcd02c71aa2503800fbcf590a8d083a359cdb5f9b8c89d8e06854ab82aeea16fc7268cb441c3dd784cab"}]}, @NL80211_ATTR_BEACON_HEAD={0x65, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @device_b, @from_mac, {0x5, 0x3}}, 0x8c5, @random=0x3, 0xc400, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x5}, @void, @val={0x25, 0x3, {0x0, 0xb4, 0x5}}, @void, @val={0x3c, 0x4, {0x0, 0x3, 0x28, 0xf8}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x3, 0x0, {0x100, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2}, 0x800, 0x9, 0x9}}, @void, @void, @void, [{0xdd, 0x6, "72147c4b27c6"}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) 1.618196814s ago: executing program 3 (id=4711): syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0xc0, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x38, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x32, 0x2, "9c4e53d4dcd02c71aa2503800fbcf590a8d083a359cdb5f9b8c89d8e06854ab82aeea16fc7268cb441c3dd784cab"}]}, @NL80211_ATTR_BEACON_HEAD={0x65, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @device_b, @from_mac, {0x5, 0x3}}, 0x8c5, @random=0x3, 0xc400, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x5}, @void, @val={0x25, 0x3, {0x0, 0xb4, 0x5}}, @void, @val={0x3c, 0x4, {0x0, 0x3, 0x28, 0xf8}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x3, 0x0, {0x100, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2}, 0x800, 0x9, 0x9}}, @void, @void, @void, [{0xdd, 0x6, "72147c4b27c6"}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) (fail_nth: 2) 1.605804783s ago: executing program 1 (id=4712): recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000001a40)=""/233, 0xe9}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001380)=""/124, 0x7c}, {&(0x7f0000001200)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001c40)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001700)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x27}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/94, 0x5e}, {&(0x7f0000001cc0)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x40002000, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18}, 0x94) (async) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001ec0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3, @ANYRES64, @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40036}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r4, 0x0, 0x9}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r2}) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r7}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2, 0x7}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e70000", 0x0, 0x8104, 0x8000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)=@getqdisc={0x38, 0x26, 0x8, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {0xa, 0x4}, {0x7, 0xc}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}}, 0x20004840) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) (async) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) r9 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r12, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000080)={0x10000000}) (async) r13 = epoll_create1(0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000012c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r9, &(0x7f0000000000)={0xa0000001}) 1.465605682s ago: executing program 4 (id=4713): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010700000000000000002e"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) r5 = socket$nl_rdma(0x10, 0x3, 0x14) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x140f, 0xee70877cfbc8a0b9, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004000}, 0x41804) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}]}}]}, 0x3c}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x13, 0x0, @val=@iter={0x0}}, 0x20) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0xc, 0x4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x80800) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r11, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88}, 0x4004) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x44, r11, 0xc20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xbbe}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x440}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1086}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x24040805) sendmmsg$unix(r9, &(0x7f0000003e80), 0x0, 0x40000) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20001040}, 0x8044) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r9) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00022dbd7000fbdbdf25060000004800030057ea21de0200000008000400000000000800020007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) sendmsg$L2TP_CMD_NOOP(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000400}, 0x20040040) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000500)=0x4) 1.280071795s ago: executing program 1 (id=4714): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000902d00850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x380, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c000000000000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x380, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c000000000000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1.14848741s ago: executing program 2 (id=4715): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r0, 0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001c00)=0xffffffffffffffff, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newtfilter={0x504, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r6, {0x6}, {0x0, 0xfff1}, {0x8, 0xffe0}}}, 0x504}}, 0x2000c800) r7 = socket$inet6(0xa, 0x805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) unshare(0x2c020400) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r7, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r10, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x30) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r5, 0x7fffffff, 0xffffffff, 0xd}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_fc_cleanup\x00', r11, 0x0, 0x1}, 0x18) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.030362717s ago: executing program 4 (id=4716): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xa85, 0xf) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) getpeername$qrtr(r4, &(0x7f0000000140), &(0x7f0000000180)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000240)={@private, @rand_addr, 0x0}, &(0x7f0000000340)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xb3, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x29, 0x79, 0xc6, 0x6, 0x10, @dev={0xfe, 0x80, '\x00', 0x38}, @loopback, 0x7, 0x8000, 0x7, 0xffff}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r8, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4840}, 0x80) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, r14, 0x321, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4048010) 1.030051651s ago: executing program 3 (id=4717): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x5, &(0x7f0000000940)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 796.848701ms ago: executing program 3 (id=4718): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000840)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x3) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x12, 0xa, 0x0, 0x0) 762.684863ms ago: executing program 4 (id=4719): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32=r2], 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bc2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xffffab4f, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x6, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x47, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x1, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x6, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x85e, 0xfffffff9, 0x10, 0x6, 0x1000, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x1, 0x0, 0x5, 0xa9, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x2, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x1020, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x100, 0x2, 0x3, 0x10001, 0xffff, 0x51, 0x10000d, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x8, 0x0, @mcast2}, 0x4, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000000180, 0x2000000002c6, 0x2000000004dc], 0x0, 0x0, 0x0}, 0x108) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f0000000100)={@empty, 0x73, r2}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000000800027350000007500000095"], 0x0, 0xbb5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r10, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)={0x40, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 605.529969ms ago: executing program 4 (id=4720): r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14) sendmsg$nl_route_sched_retired(r0, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)=@delqdisc={0x108, 0x25, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfff2, 0xd}, {0x1d861e3234670480, 0xa}, {0x0, 0x1}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3c}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7fff}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1c}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf000}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x800}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0xf7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], &(0x7f0000000180)='GPL\x00', 0x6, 0x46, &(0x7f00000001c0)=""/70, 0x41000, 0x14, '\x00', 0x0, @fallback=0x3e, r2, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x8, 0x6, 0x8000}, 0x10, r3, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000580)=[{0x1, 0x1, 0xf, 0x7}], 0x10, 0x669}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009e00000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x2000000000000329, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 530.315239ms ago: executing program 5 (id=4721): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x9}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5d}, @NL80211_ATTR_TXQ_LIMIT={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000380)=""/156, &(0x7f0000000300)=0x9c) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130720000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r5], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x10) 268.510809ms ago: executing program 2 (id=4722): syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x200400c4}, 0x44014) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x150, r2, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BEACON_HEAD={0xb9, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3000}, @broadcast, @device_b, @from_mac=@broadcast, {0x9, 0xd7d}}, 0x0, @random=0x2fa2, 0xcc12, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0x7f, 0x8, 0x76, 0x9}}, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x28}}, @void, [{0xdd, 0x32, "ccef9e1fe4307845351e3647058aff266ead1b304f87dd66ef71b23cab047d83575312462764a7097c3c21c32d4e1002309c"}, {0xdd, 0x42, "87011e3f4df4881d9a64bc36a94bf29bf591aad19c51a80ac406f2bcf8a39b631fb143d9267aba2ebd08d43e20d48802975b144c9105963c4b274be4561e28d375d7"}]}}, @NL80211_ATTR_BEACON_HEAD={0x71, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @device_b, @from_mac, {0x5, 0x3}}, 0x8c5, @random=0x3, 0xc420, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0x90}, @void, @val={0x6, 0x2, 0x5}, @void, @val={0x25, 0x3, {0x0, 0xb4, 0x5}}, @void, @val={0x3c, 0x4, {0x0, 0x3, 0x28, 0xf8}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x3, 0x0, {0x100, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x2}, 0x400, 0x9, 0x9}}, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5}}, @void, [{0xdd, 0x6, "72147c4b27c6"}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, [0x1, 0x3, 0x100000000, 0x3ff, 0x78, 0x6, 0x7, 0x2, 0x5, 0x5, 0x4, 0x8, 0x0, 0x7, 0x4]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0x8, @local, 0x7}}, 0x0, 0x68b}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000003c0)={r7, 0x69f5, 0xf2c2, 0x87d, 0x1, 0x4, 0x4, 0x7, {r8, @in6={{0xa, 0x4e23, 0x9, @private2, 0xa4}}, 0x7445, 0x0, 0x8, 0xa, 0x6}}, &(0x7f0000000480)=0xb0) 146.331254ms ago: executing program 4 (id=4723): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r2, 0x25, 0x4, @val=@netfilter={0x0, 0x0, 0x2, 0x71e10095c446dfea}}, 0x20) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[], 0x0) 137.77723ms ago: executing program 5 (id=4724): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010104}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x62, 0xfd, 0x80000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @loopback}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f}]}, 0x98}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) write$tcp_congestion(r1, &(0x7f00000000c0)='nv\x00', 0x3) 98.890665ms ago: executing program 1 (id=4725): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000200)=r2) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 0s ago: executing program 2 (id=4726): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b000085000000a000000095"], &(0x7f0000002dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @sched_cls=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): eady. Interface wg1 may have been left with an inconsistent configuration, please check. [ 809.614446][T18020] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.621799][T18020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.801550][T18727] __nla_validate_parse: 4 callbacks suppressed [ 809.801569][T18727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 809.830623][T18727] netlink: 'syz.4.3270': attribute type 30 has an invalid length. [ 810.017911][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3272'. [ 810.032988][T18727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 810.050505][ T5993] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.054206][T16356] Bluetooth: hci1: command tx timeout [ 810.073041][ T5993] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.081442][T18727] netlink: 'syz.4.3270': attribute type 30 has an invalid length. [ 810.111452][ T5993] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.149150][ T5993] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.213222][T18738] syzkaller0: entered promiscuous mode [ 810.218751][T18738] syzkaller0: entered allmulticast mode [ 810.273052][T18738] openvswitch: netlink: Flow key attr not present in new flow. [ 810.296016][T18742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3274'. [ 810.509323][T18599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.560184][T18749] netlink: 'syz.4.3275': attribute type 5 has an invalid length. [ 810.609151][T18749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3275'. [ 810.657970][T18599] veth0_vlan: entered promiscuous mode [ 810.686545][T18599] veth1_vlan: entered promiscuous mode [ 810.732442][T18599] veth0_macvtap: entered promiscuous mode [ 810.745343][T18599] veth1_macvtap: entered promiscuous mode [ 810.773994][T18599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.798452][T18599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.824670][ T993] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.833978][ T993] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.853618][ T993] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.048202][ T993] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.131511][T18750] block nbd4: server does not support multiple connections per device. [ 811.142891][T18750] block nbd4: shutting down sockets [ 811.438694][T18759] ipvlan2: entered promiscuous mode [ 811.447938][T18759] bridge0: port 3(ipvlan2) entered blocking state [ 811.455361][T18759] bridge0: port 3(ipvlan2) entered disabled state [ 811.463154][T18759] ipvlan2: entered allmulticast mode [ 811.468739][T18759] bridge0: entered allmulticast mode [ 811.479251][T18759] ipvlan2: left allmulticast mode [ 811.484554][T18759] bridge0: left allmulticast mode [ 811.530874][ T6945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.548108][ T6945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.637225][ T6945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.672203][ T6945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.749336][T18767] lo speed is unknown, defaulting to 1000 [ 811.812855][T18769] netlink: 'syz.1.3279': attribute type 83 has an invalid length. [ 812.132521][T16356] Bluetooth: hci1: command tx timeout [ 812.681494][T18789] syzkaller0: entered allmulticast mode [ 812.718728][T18790] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3285'. [ 812.804596][T18796] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3285'. [ 813.095779][T18816] netlink: 'syz.3.3291': attribute type 1 has an invalid length. [ 813.118163][T18816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3291'. [ 813.165991][T18820] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3290'. [ 813.277599][T18827] netlink: 'syz.2.3293': attribute type 39 has an invalid length. [ 813.293148][T18828] netlink: 'syz.2.3293': attribute type 39 has an invalid length. [ 813.348117][T18816] lo speed is unknown, defaulting to 1000 [ 813.468016][T18836] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3294'. [ 813.470139][T18830] lo speed is unknown, defaulting to 1000 [ 813.701288][T18836] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.709050][T18836] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.743671][T18836] team_slave_0: left promiscuous mode [ 813.750863][T18836] team_slave_1: left promiscuous mode [ 813.865504][T18836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.882254][T18836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.003025][T18836] geneve2: left promiscuous mode [ 814.008025][T18836] geneve2: left allmulticast mode [ 814.049001][ T6944] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.058884][ T6944] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.073730][ T6944] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.084049][ T6944] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.211109][T16356] Bluetooth: hci1: command tx timeout [ 814.525646][T18856] lo speed is unknown, defaulting to 1000 [ 814.866099][T12584] IPVS: starting estimator thread 0... [ 814.981103][T18875] IPVS: using max 27 ests per chain, 64800 per kthread [ 815.030349][T18879] __nla_validate_parse: 2 callbacks suppressed [ 815.030370][T18879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3305'. [ 815.061077][T18879] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3305'. [ 815.070086][T18879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3305'. [ 815.110709][T18879] netlink: 'syz.5.3305': attribute type 5 has an invalid length. [ 815.564414][T18894] lo speed is unknown, defaulting to 1000 [ 815.572494][ T11] block nbd1: Possible stuck request ffff8880249b0000: control (read@0,1024B). Runtime 690 seconds [ 816.169681][T18923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.234299][T18920] hsr0: entered promiscuous mode [ 816.421192][T18922] lo speed is unknown, defaulting to 1000 [ 816.446961][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3316'. [ 816.534823][T18920] hsr_slave_0: left promiscuous mode [ 816.637262][T18920] hsr0 (unregistering): left promiscuous mode [ 817.056524][T18942] netlink: 'syz.4.3320': attribute type 10 has an invalid length. [ 817.089863][T18942] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3320'. [ 817.304395][T18945] lo speed is unknown, defaulting to 1000 [ 817.359054][T18953] netlink: 'syz.3.3324': attribute type 1 has an invalid length. [ 817.382682][T18946] lo speed is unknown, defaulting to 1000 [ 817.485824][T18953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 817.581754][T18956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 817.589195][T18956] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 817.602512][T18956] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 817.721585][T18962] gretap1: entered promiscuous mode [ 817.756248][T18962] bond1: (slave gretap1): making interface the new active one [ 817.781869][T18962] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 817.854567][T18956] macvlan2: entered promiscuous mode [ 817.859914][T18956] macvlan2: entered allmulticast mode [ 817.880749][T18962] x_tables: duplicate underflow at hook 1 [ 817.898225][T18956] bond1: entered promiscuous mode [ 817.904374][T18956] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 817.941969][T18956] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 817.974101][T18956] bond1: left promiscuous mode [ 818.266590][T18969] bridge2: entered promiscuous mode [ 818.294220][T18969] bridge2: entered allmulticast mode [ 818.572208][T18979] netlink: 'syz.4.3332': attribute type 6 has an invalid length. [ 818.586167][T18979] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3332'. [ 818.607072][T18978] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3331'. [ 819.044595][T18998] syzkaller0: entered promiscuous mode [ 819.050161][T18998] syzkaller0: entered allmulticast mode [ 819.723265][T19025] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3347'. [ 819.750750][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3347'. [ 819.788247][T19025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3347'. [ 819.831720][T19032] lo speed is unknown, defaulting to 1000 [ 819.841498][T19033] syzkaller0: entered promiscuous mode [ 819.847023][T19033] syzkaller0: entered allmulticast mode [ 820.412390][T19061] __nla_validate_parse: 3 callbacks suppressed [ 820.412410][T19061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3353'. [ 820.482396][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'. [ 820.515445][T19068] netlink: 'syz.4.3356': attribute type 8 has an invalid length. [ 820.525502][T19068] sch_fq: defrate 0 ignored. [ 820.737880][T19075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 820.866663][T19075] xfrm0: entered promiscuous mode [ 820.888577][T19075] xfrm0: entered allmulticast mode [ 821.122029][T19089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3363'. [ 821.150810][T19091] netlink: 'syz.2.3364': attribute type 1 has an invalid length. [ 821.167384][T19091] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3364'. [ 821.505438][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3367'. [ 821.919474][T19112] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3369'. [ 822.166188][T19119] netlink: 'syz.2.3371': attribute type 12 has an invalid length. [ 822.313068][T19121] ip6tnl0: left promiscuous mode [ 822.330774][T19121] ip6tnl0: left allmulticast mode [ 822.353750][T19121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.372154][T19121] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 822.422654][T17494] lo speed is unknown, defaulting to 1000 [ 822.434613][T17494] syz2: Port: 1 Link ACTIVE [ 822.464061][T19130] gretap2: entered promiscuous mode [ 822.470185][T19130] batman_adv: batadv0: Adding interface: gretap2 [ 822.490878][T19130] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 822.515414][T19130] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 822.565855][T19132] netlink: 'syz.1.3375': attribute type 5 has an invalid length. [ 822.683629][T19131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3376'. [ 822.783483][T19144] netlink: 'syz.2.3380': attribute type 1 has an invalid length. [ 822.793238][T19144] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3380'. [ 822.806857][T19144] NCSI netlink: No device for ifindex 0 [ 823.037612][T19152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3383'. [ 823.122449][T19155] netlink: 'syz.3.3384': attribute type 1 has an invalid length. [ 823.170097][T19158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 823.702802][T19177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3389'. [ 824.435676][T19194] lo speed is unknown, defaulting to 1000 [ 825.234429][T19216] syzkaller1: entered promiscuous mode [ 825.239971][T19216] syzkaller1: entered allmulticast mode [ 825.435628][T19225] __nla_validate_parse: 3 callbacks suppressed [ 825.435650][T19225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3401'. [ 825.798076][T19234] lo speed is unknown, defaulting to 1000 [ 826.033454][T19249] veth1_macvtap: left promiscuous mode [ 826.073165][T19249] macsec0: entered allmulticast mode [ 826.082237][T19251] x_tables: duplicate underflow at hook 1 [ 826.130724][T19251] veth1_macvtap: entered promiscuous mode [ 826.139438][T19251] veth1_macvtap: entered allmulticast mode [ 826.182325][T19251] macsec0: left allmulticast mode [ 826.187489][T19251] veth1_macvtap: left allmulticast mode [ 826.551339][T19234] netlink: 'syz.5.3404': attribute type 6 has an invalid length. [ 827.291003][T19276] team0: Mode changed to "broadcast" [ 827.303910][T19276] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3413'. [ 827.316396][T19278] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3416'. [ 827.327299][T19279] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3417'. [ 827.549014][T19288] xt_ipcomp: unknown flags 1D [ 827.608819][T19292] lo speed is unknown, defaulting to 1000 [ 827.783095][T19301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3421'. [ 827.846689][T19295] lo speed is unknown, defaulting to 1000 [ 828.182859][T19318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 828.243882][T19318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3426'. [ 828.265571][T19318] netlink: 'syz.3.3426': attribute type 6 has an invalid length. [ 828.551108][T19329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3428'. [ 829.608812][T19381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3441'. [ 829.849468][T19391] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 829.869946][T19389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3443'. [ 829.879458][T12584] IPVS: starting estimator thread 0... [ 829.885558][T19391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.989651][T19392] IPVS: using max 35 ests per chain, 84000 per kthread [ 830.231127][T19404] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 830.625100][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.753731][T19428] lo speed is unknown, defaulting to 1000 [ 830.819648][T19429] lo speed is unknown, defaulting to 1000 [ 830.876638][T19418] __nla_validate_parse: 3 callbacks suppressed [ 830.876656][T19418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3453'. [ 830.931045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.279897][T19444] tc_dump_action: action bad kind [ 831.292271][T19446] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 831.391660][T19455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3461'. [ 831.423572][T19455] netlink: 'syz.1.3461': attribute type 4 has an invalid length. [ 831.463211][T19452] lo speed is unknown, defaulting to 1000 [ 831.469809][T19455] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3461'. [ 831.581086][T19460] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3463'. [ 831.590387][T19460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3463'. [ 831.600796][T19455] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 831.651347][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.833193][T19470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3465'. [ 832.071924][T19483] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3467'. [ 832.086006][T19482] netlink: 'syz.2.3469': attribute type 1 has an invalid length. [ 832.097653][T19482] netlink: 'syz.2.3469': attribute type 1 has an invalid length. [ 832.243788][T19484] veth3: entered promiscuous mode [ 832.534192][T12584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.691161][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.700332][T19506] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3475'. [ 832.855228][T12576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.871308][T19520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3479'. [ 832.933715][T19521] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3477'. [ 832.999953][T19525] netlink: 'syz.1.3478': attribute type 2 has an invalid length. [ 833.045387][T19523] bridge_slave_1: left allmulticast mode [ 833.052706][T19523] bridge_slave_1: left promiscuous mode [ 833.058536][T19523] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.067703][T19523] bridge_slave_0: left allmulticast mode [ 833.076101][T19523] bridge_slave_0: left promiscuous mode [ 833.082122][T19523] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.256282][T19531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 833.587482][T19549] 8021q: adding VLAN 0 to HW filter on device bond6 [ 833.730767][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.035602][T19619] netlink: 'syz.5.3506': attribute type 1 has an invalid length. [ 835.057219][T19619] netlink: 'syz.5.3506': attribute type 2 has an invalid length. [ 835.065512][T19619] netlink: 'syz.5.3506': attribute type 1 has an invalid length. [ 835.293346][T19628] pimreg: tun_chr_ioctl cmd 1074025680 [ 835.570861][T12576] net_ratelimit: 1 callbacks suppressed [ 835.570883][T12576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.622045][T19633] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.640650][T19633] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.719567][T19633] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.732364][T19633] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.811184][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.902581][T19633] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.926695][T19633] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.989553][T19633] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.006652][T19633] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.033730][T19643] __nla_validate_parse: 6 callbacks suppressed [ 836.033751][T19643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3514'. [ 836.056087][T19643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3514'. [ 836.214745][T19034] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.243951][T19034] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.289351][T19034] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.308817][T19034] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.343269][T19658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3518'. [ 836.421047][ T6944] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.437775][T19662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3517'. [ 836.460596][ T6944] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.509708][ T5972] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 836.542104][ T5972] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.655004][T19664] netlink: 'syz.1.3519': attribute type 11 has an invalid length. [ 836.851170][ T8635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.991436][T19676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3522'. [ 837.114237][T19676] tipc: Started in network mode [ 837.119531][T19676] tipc: Node identity 8a49ffb65c6e, cluster identity 4711 [ 837.127651][T19676] tipc: Enabled bearer , priority 0 [ 837.147744][T19684] pim6reg: entered allmulticast mode [ 837.158878][T19676] syzkaller0: entered promiscuous mode [ 837.167577][T19676] syzkaller0: entered allmulticast mode [ 837.184062][T19678] pim6reg: left allmulticast mode [ 837.322254][T19675] tipc: Resetting bearer [ 837.357372][T19675] tipc: Disabling bearer [ 837.648041][T19714] bond7: ARP target 9.0.0.0 is already present [ 837.654532][T19714] bond7: option arp_ip_target: invalid value (9) [ 837.683460][T19714] bond7 (unregistering): Released all slaves [ 837.854890][T19733] lo speed is unknown, defaulting to 1000 [ 837.895083][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.969319][T19740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3539'. [ 838.318890][T19755] netlink: 'syz.5.3541': attribute type 13 has an invalid length. [ 838.528575][T19757] xt_ecn: cannot match TCP bits for non-tcp packets [ 838.660647][T16055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.940711][T12584] lo speed is unknown, defaulting to 1000 [ 838.946580][T12584] syz2: Port: 1 Link DOWN [ 838.972358][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.999675][ T6944] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.031061][ T6944] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.039504][ T6944] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.080923][ T6944] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.218606][T19782] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3548'. [ 839.238554][T19777] tipc: Enabling of bearer rejected, already enabled [ 839.302392][T19783] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3546'. [ 839.354476][T19792] sctp: [Deprecated]: syz.2.3546 (pid 19792) Use of int in maxseg socket option. [ 839.354476][T19792] Use struct sctp_assoc_value instead [ 839.509184][T19795] tipc: Resetting bearer [ 839.628937][T19804] netlink: 'syz.1.3552': attribute type 1 has an invalid length. [ 839.722727][T19798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3551'. [ 839.773455][T19810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3552'. [ 839.783856][T19804] bond2: entered promiscuous mode [ 839.789226][T19804] 8021q: adding VLAN 0 to HW filter on device bond2 [ 839.804837][T19801] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 839.913165][T19798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 839.943034][T19810] bond2: entered allmulticast mode [ 840.058852][ T8635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.096701][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.627147][T19822] bond2: (slave bridge0): making interface the new active one [ 841.634919][T19822] bridge0: entered promiscuous mode [ 841.666895][T19822] bridge0: entered allmulticast mode [ 841.677393][T19822] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 841.730759][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.856613][T19838] netlink: 'syz.1.3559': attribute type 5 has an invalid length. [ 841.878061][T19838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3559'. [ 841.895206][T19838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3559'. [ 841.956069][T19843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3559'. [ 841.993284][T19839] team_slave_0: entered promiscuous mode [ 841.999104][T19839] team_slave_1: entered promiscuous mode [ 842.012532][T19839] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 842.131201][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.163785][T19853] lo: entered allmulticast mode [ 842.181966][T19853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 842.200306][T19855] batadv_slave_0: entered promiscuous mode [ 842.233645][T19855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.248920][T19857] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3564'. [ 842.259568][T19861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.312018][T19861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.341667][T19855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.453228][T19854] batadv_slave_0: left promiscuous mode [ 842.463729][T12574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.595854][T19873] lo speed is unknown, defaulting to 1000 [ 842.656963][T19878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.703053][T19880] syz.1.3569: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 842.722846][T19880] CPU: 0 UID: 0 PID: 19880 Comm: syz.1.3569 Not tainted syzkaller #0 PREEMPT(full) [ 842.722877][T19880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 842.722892][T19880] Call Trace: [ 842.722901][T19880] [ 842.722911][T19880] dump_stack_lvl+0xe8/0x150 [ 842.722946][T19880] warn_alloc+0x214/0x310 [ 842.722971][T19880] ? stack_trace_save+0x9c/0xe0 [ 842.723008][T19880] ? __pfx_warn_alloc+0x10/0x10 [ 842.723040][T19880] ? kasan_save_track+0x4f/0x80 [ 842.723060][T19880] ? kasan_save_track+0x3e/0x80 [ 842.723087][T19880] ? __kasan_kmalloc+0x93/0xb0 [ 842.723108][T19880] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 842.723127][T19880] ? xskq_create+0x56/0x170 [ 842.723159][T19880] ? xsk_setsockopt+0x4dc/0x8d0 [ 842.723185][T19880] ? do_sock_setsockopt+0x17c/0x1b0 [ 842.723208][T19880] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 842.723231][T19880] ? do_syscall_64+0xec/0xf80 [ 842.723258][T19880] __vmalloc_node_range_noprof+0x134/0x16a0 [ 842.723318][T19880] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 842.723350][T19880] ? __kasan_kmalloc+0x93/0xb0 [ 842.723381][T19880] vmalloc_user_noprof+0xad/0xf0 [ 842.723409][T19880] ? xskq_create+0xbf/0x170 [ 842.723442][T19880] xskq_create+0xbf/0x170 [ 842.723478][T19880] xsk_init_queue+0xb0/0x110 [ 842.723514][T19880] xsk_setsockopt+0x4dc/0x8d0 [ 842.723548][T19880] ? __pfx_xsk_setsockopt+0x10/0x10 [ 842.723579][T19880] ? __pfx_aa_sk_perm+0x10/0x10 [ 842.723610][T19880] ? aa_sock_opt_perm+0xff/0x1a0 [ 842.723641][T19880] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 842.723661][T19880] ? __pfx_xsk_setsockopt+0x10/0x10 [ 842.723692][T19880] do_sock_setsockopt+0x17c/0x1b0 [ 842.723720][T19880] __x64_sys_setsockopt+0x13f/0x1b0 [ 842.723757][T19880] do_syscall_64+0xec/0xf80 [ 842.723778][T19880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.723798][T19880] ? trace_irq_disable+0x37/0x100 [ 842.723826][T19880] ? clear_bhb_loop+0x60/0xb0 [ 842.723851][T19880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.723871][T19880] RIP: 0033:0x7f4a3f98f749 [ 842.723891][T19880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.723910][T19880] RSP: 002b:00007f4a408a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 842.723933][T19880] RAX: ffffffffffffffda RBX: 00007f4a3fbe5fa0 RCX: 00007f4a3f98f749 [ 842.723950][T19880] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 842.723963][T19880] RBP: 00007f4a3fa13f91 R08: 0000000000000004 R09: 0000000000000000 [ 842.723977][T19880] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.723991][T19880] R13: 00007f4a3fbe6038 R14: 00007f4a3fbe5fa0 R15: 00007ffeeb4c8468 [ 842.724027][T19880] [ 842.724126][T19880] Mem-Info: [ 842.984218][T19883] lo speed is unknown, defaulting to 1000 [ 843.054534][T19880] active_anon:6565 inactive_anon:0 isolated_anon:0 [ 843.054534][T19880] active_file:3269 inactive_file:40155 isolated_file:0 [ 843.054534][T19880] unevictable:993 dirty:81 writeback:0 [ 843.054534][T19880] slab_reclaimable:13076 slab_unreclaimable:183866 [ 843.054534][T19880] mapped:29593 shmem:1582 pagetables:1040 [ 843.054534][T19880] sec_pagetables:0 bounce:0 [ 843.054534][T19880] kernel_misc_reclaimable:0 [ 843.054534][T19880] free:1225061 free_pcp:16367 free_cma:0 [ 843.108990][T19880] Node 0 active_anon:26260kB inactive_anon:0kB active_file:13076kB inactive_file:160420kB unevictable:2536kB isolated(anon):0kB isolated(file):0kB mapped:119672kB dirty:320kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15592kB pagetables:4036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 843.155084][T19880] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 843.188452][T19880] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 843.220247][T19880] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 843.262044][T19880] Node 0 DMA32 free:996020kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26260kB inactive_anon:0kB active_file:13076kB inactive_file:160420kB unevictable:4536kB writepending:320kB zspages:0kB present:3129332kB managed:2559512kB mlocked:3000kB bounce:0kB free_pcp:53256kB local_pcp:21032kB free_cma:0kB [ 843.331650][T19880] lowmem_reserve[]: 0 0 1 1 1 [ 843.348472][T19880] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 843.405399][T19880] lowmem_reserve[]: 0 0 0 0 0 [ 843.410210][T19880] Node 1 Normal free:3887888kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12480kB local_pcp:6176kB free_cma:0kB [ 843.454934][T19880] lowmem_reserve[]: 0 0 0 0 0 [ 843.459821][T19880] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 843.472868][T19880] Node 0 DMA32: 5618*4kB (UE) 4006*8kB (UME) 2594*16kB (UME) 314*32kB (UME) 914*64kB (UME) 236*128kB (UM) 328*256kB (UME) 174*512kB (UM) 116*1024kB (UME) 47*2048kB (UME) 99*4096kB (UM) = 988376kB [ 843.493384][T19880] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 843.526308][T19880] Node 1 Normal: 162*4kB (UME) 49*8kB (UME) 48*16kB (UME) 236*32kB (UME) 66*64kB (UME) 14*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 943*4096kB (M) = 3887888kB [ 843.582291][T19880] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 843.600048][T19880] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 843.663486][T19880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 843.715179][T19880] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 843.755179][T19880] 47813 total pagecache pages [ 843.759934][T19880] 0 pages in swap cache [ 843.770379][T19880] Free swap = 124996kB [ 843.778558][T19880] Total swap = 124996kB [ 843.784151][T19880] 2097051 pages RAM [ 843.792935][T19880] 0 pages HighMem/MovableOnly [ 843.797923][T19880] 425083 pages reserved [ 843.802389][T19880] 0 pages cma reserved [ 843.839847][T19901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3574'. [ 844.336039][T19918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3579'. [ 844.386464][T19918] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3579'. [ 844.411486][T19923] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3581'. [ 844.423094][T19924] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3580'. [ 844.434331][T19918] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3579'. [ 844.496762][T19923] netlink: 'syz.3.3581': attribute type 6 has an invalid length. [ 844.594962][T19929] netlink: 'syz.5.3583': attribute type 10 has an invalid length. [ 844.639637][T19929] batadv0: entered allmulticast mode [ 844.648246][T19933] netlink: 'syz.5.3583': attribute type 10 has an invalid length. [ 844.673283][T19933] batadv0: entered promiscuous mode [ 844.723586][ T31] audit: type=1800 audit(1767829831.275:9): pid=19940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3587" name="memory.events" dev="tmpfs" ino=579 res=0 errno=0 [ 844.793240][ T31] audit: type=1804 audit(1767829831.305:10): pid=19940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3587" name="memory.events" dev="tmpfs" ino=579 res=1 errno=0 [ 845.086421][T19954] netlink: 'syz.3.3591': attribute type 1 has an invalid length. [ 845.098273][T19954] netlink: 'syz.3.3591': attribute type 11 has an invalid length. [ 845.295829][T19967] lo speed is unknown, defaulting to 1000 [ 845.660918][ T11] block nbd1: Possible stuck request ffff8880249b0000: control (read@0,1024B). Runtime 720 seconds [ 846.341442][T19978] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 846.384382][T17497] net_ratelimit: 6 callbacks suppressed [ 846.384402][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.619853][T20031] IPVS: set_ctl: invalid protocol: 59 172.20.20.60:20000 [ 846.764033][T20035] netlink: 'syz.4.3610': attribute type 1 has an invalid length. [ 846.945936][T20048] vlan2: entered allmulticast mode [ 846.978786][T20048] bond4: entered allmulticast mode [ 847.014199][T20052] x_tables: unsorted entry at hook 1 [ 847.046205][T20053] Cannot find del_set index 1 as target [ 847.334340][T20073] __nla_validate_parse: 4 callbacks suppressed [ 847.334360][T20073] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3615'. [ 847.379413][ T6944] syzkaller0: tun_net_xmit 76 [ 847.385202][ T6944] syzkaller0: tun_net_xmit 48 [ 847.422297][ T8635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.575982][T16356] Bluetooth: hci2: command 0x0406 tx timeout [ 847.812976][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.467942][ T8635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.222616][T20073] tipc: Enabled bearer , priority 0 [ 849.229803][T20067] syzkaller0: entered promiscuous mode [ 849.235651][T20067] syzkaller0: entered allmulticast mode [ 849.243054][T20060] sch_tbf: burst 380 is lower than device syzkaller0 mtu (1514) ! [ 849.282763][T20086] tipc: Resetting bearer [ 849.295461][T20058] tipc: Resetting bearer [ 849.376558][T20058] tipc: Disabling bearer [ 849.467364][T20107] netlink: 'syz.4.3626': attribute type 1 has an invalid length. [ 849.495987][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.578585][T20107] bond5: entered promiscuous mode [ 849.594068][T20119] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3629'. [ 849.647875][T20107] bond5: entered allmulticast mode [ 849.668638][T20107] 8021q: adding VLAN 0 to HW filter on device bond5 [ 849.705688][T20129] netlink: 'syz.5.3630': attribute type 12 has an invalid length. [ 849.733573][T20128] netlink: 'syz.1.3632': attribute type 3 has an invalid length. [ 849.759443][T20128] netlink: 'syz.1.3632': attribute type 1 has an invalid length. [ 849.775059][T20128] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3632'. [ 849.804065][T20128] NCSI netlink: No device for ifindex 23016 [ 849.851329][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3632'. [ 849.870323][T20128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3632'. [ 849.959038][T20137] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3635'. [ 850.084416][T20144] delete_channel: no stack [ 850.169549][T20152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3640'. [ 850.332672][T20160] syz_tun: entered allmulticast mode [ 850.394499][T20156] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3639'. [ 850.438661][T20167] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 850.456624][T20156] syzkaller1: entered promiscuous mode [ 850.462388][T20156] syzkaller1: entered allmulticast mode [ 850.531084][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.822866][T20186] netlink: 'syz.1.3650': attribute type 9 has an invalid length. [ 850.831117][T20186] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3650'. [ 850.854411][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.957521][T20195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3653'. [ 851.052386][T20195] lo speed is unknown, defaulting to 1000 [ 851.228345][T20202] pimreg: entered allmulticast mode [ 851.335322][T20202] pimreg: left allmulticast mode [ 851.576621][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.820605][T20229] syzkaller0: entered promiscuous mode [ 851.826167][T20229] syzkaller0: entered allmulticast mode [ 851.915612][T20234] Bluetooth: MGMT ver 1.23 [ 851.996969][T20239] netlink: 'syz.3.3665': attribute type 1 has an invalid length. [ 852.061445][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.078440][T20244] netlink: 'syz.5.3664': attribute type 1 has an invalid length. [ 852.116687][T20237] batadv0: left promiscuous mode [ 852.130784][T20237] hsr0: left promiscuous mode [ 852.141473][T20237] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 852.178032][T20237] vti0: left promiscuous mode [ 852.209073][T20237] veth2: left promiscuous mode [ 852.233415][T20237] bond5: left promiscuous mode [ 852.255081][T20237] ip6gretap1: left promiscuous mode [ 852.363099][T20255] Bluetooth: MGMT ver 1.23 [ 852.484350][T20258] syzkaller0: entered promiscuous mode [ 852.490048][T20258] syzkaller0: entered allmulticast mode [ 852.610723][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.136304][T20303] __nla_validate_parse: 2 callbacks suppressed [ 853.136327][T20303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3683'. [ 853.274388][T20309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3685'. [ 853.303055][T20292] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3680'. [ 853.357725][T20309] 8021q: adding VLAN 0 to HW filter on device bond6 [ 853.421552][T20315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3686'. [ 853.504601][T20313] lo speed is unknown, defaulting to 1000 [ 853.514383][T20317] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3686'. [ 853.534280][T20317] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3686'. [ 853.651054][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.823783][T20329] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3689'. [ 853.842592][T20332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3690'. [ 853.874367][T20329] .70·: renamed from hsr0 (while UP) [ 853.896196][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.908118][T20329] .70·: entered allmulticast mode [ 853.924227][T20329] hsr_slave_0: entered allmulticast mode [ 853.930842][T20337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3690'. [ 853.940007][T20329] hsr_slave_1: entered allmulticast mode [ 853.946675][T20329] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 853.962937][T20333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3691'. [ 853.984029][T20325] lo speed is unknown, defaulting to 1000 [ 853.999171][T20333] nbd: device at index 1 is going down [ 854.432514][T20350] siw: device registration error -23 [ 854.442393][T20350] tipc: Enabled bearer , priority 0 [ 854.540325][T20350] syzkaller0: entered promiscuous mode [ 854.546848][T20350] syzkaller0: entered allmulticast mode [ 854.553283][T20350] tipc: Resetting bearer [ 854.691169][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.025125][T11956] tipc: Resetting bearer [ 855.056314][T20357] tipc: Resetting bearer [ 855.415817][T20382] netlink: 'syz.2.3705': attribute type 21 has an invalid length. [ 855.740840][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.777952][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.935751][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.202148][T20357] tipc: Disabling bearer [ 857.222100][T20383] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 857.231971][T20383] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 857.245785][T20383] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 857.262611][T20392] lo: entered promiscuous mode [ 857.274734][T20392] tunl0: entered promiscuous mode [ 857.279830][T20392] tunl0: entered allmulticast mode [ 857.301658][T20392] gre0: entered promiscuous mode [ 857.331925][T20392] gre0: entered allmulticast mode [ 857.368858][T20392] gretap0: entered promiscuous mode [ 857.393328][T20392] gretap0: entered allmulticast mode [ 857.408768][T20392] erspan0: entered promiscuous mode [ 857.430542][T20392] erspan0: entered allmulticast mode [ 857.445753][T20392] ip_vti0: entered promiscuous mode [ 857.452228][T20392] ip_vti0: entered allmulticast mode [ 857.461838][T20392] ip6_vti0: entered promiscuous mode [ 857.467289][T20392] ip6_vti0: entered allmulticast mode [ 857.477734][T20392] sit0: entered promiscuous mode [ 857.482963][T20392] sit0: entered allmulticast mode [ 857.496420][T20392] ip6tnl0: entered promiscuous mode [ 857.502447][T20392] ip6tnl0: entered allmulticast mode [ 857.513464][T20392] ip6gre0: entered promiscuous mode [ 857.518878][T20392] ip6gre0: entered allmulticast mode [ 857.528374][T20392] syz_tun: entered promiscuous mode [ 857.535565][T20392] ip6gretap0: entered promiscuous mode [ 857.542152][T20392] ip6gretap0: entered allmulticast mode [ 857.553847][T20392] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.561735][T20392] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.571080][T20392] bridge0: entered promiscuous mode [ 857.576528][T20392] bridge0: entered allmulticast mode [ 857.587862][T20392] vcan0: entered promiscuous mode [ 857.594805][T20392] vcan0: entered allmulticast mode [ 857.607458][T20392] bond0: entered promiscuous mode [ 857.613240][T20392] bond_slave_0: entered promiscuous mode [ 857.619708][T20392] bond_slave_1: entered promiscuous mode [ 857.625807][T20392] bond0: entered allmulticast mode [ 857.631710][T20392] bond_slave_0: entered allmulticast mode [ 857.637692][T20392] bond_slave_1: entered allmulticast mode [ 857.666619][T20392] team0: entered promiscuous mode [ 857.672121][T20392] team_slave_0: entered promiscuous mode [ 857.678111][T20392] team_slave_1: entered promiscuous mode [ 857.685866][T20392] team0: entered allmulticast mode [ 857.692513][T20392] team_slave_0: entered allmulticast mode [ 857.698283][T20392] team_slave_1: entered allmulticast mode [ 857.708507][T20392] dummy0: entered promiscuous mode [ 857.714791][T20392] dummy0: entered allmulticast mode [ 857.729335][T20392] nlmon0: entered promiscuous mode [ 857.737345][T20392] nlmon0: entered allmulticast mode [ 857.753273][T20392] caif0: entered promiscuous mode [ 857.758371][T20392] caif0: entered allmulticast mode [ 857.771554][T20392] batadv0: entered promiscuous mode [ 857.776806][T20392] batadv0: entered allmulticast mode [ 857.789208][T20392] vxcan0: entered promiscuous mode [ 857.794742][T20392] vxcan0: entered allmulticast mode [ 857.804902][T20392] vxcan1: entered promiscuous mode [ 857.810080][T20392] vxcan1: entered allmulticast mode [ 857.817196][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.824157][T20392] veth0: entered promiscuous mode [ 857.830924][T20392] veth0: entered allmulticast mode [ 857.840667][T20392] veth1: entered promiscuous mode [ 857.845752][T20392] veth1: entered allmulticast mode [ 857.856497][T20392] wg0: entered promiscuous mode [ 857.861802][T20392] wg0: entered allmulticast mode [ 857.871202][T20392] wg1: entered promiscuous mode [ 857.876425][T20392] wg1: entered allmulticast mode [ 857.886701][T20392] wg2: entered promiscuous mode [ 857.893731][T20392] wg2: entered allmulticast mode [ 857.905647][T20392] veth0_to_bridge: entered promiscuous mode [ 857.912749][T20392] veth0_to_bridge: entered allmulticast mode [ 857.925857][T20392] veth1_to_bridge: entered promiscuous mode [ 857.932174][T20392] veth1_to_bridge: entered allmulticast mode [ 857.947626][T20392] veth0_to_bond: entered promiscuous mode [ 857.954107][T20392] veth0_to_bond: entered allmulticast mode [ 857.965374][T20392] veth1_to_bond: entered promiscuous mode [ 857.972177][T20392] veth1_to_bond: entered allmulticast mode [ 857.983032][T20392] veth0_to_team: entered promiscuous mode [ 857.988819][T20392] veth0_to_team: entered allmulticast mode [ 858.001848][T20392] veth1_to_team: entered promiscuous mode [ 858.007643][T20392] veth1_to_team: entered allmulticast mode [ 858.020992][T20392] veth0_to_batadv: entered promiscuous mode [ 858.026970][T20392] veth0_to_batadv: entered allmulticast mode [ 858.036363][T20392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 858.044517][T20392] batadv_slave_0: entered promiscuous mode [ 858.050355][T20392] batadv_slave_0: entered allmulticast mode [ 858.065316][T20392] veth1_to_batadv: entered promiscuous mode [ 858.071512][T20392] veth1_to_batadv: entered allmulticast mode [ 858.080079][T20392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 858.089200][T20392] batadv_slave_1: entered promiscuous mode [ 858.095254][T20392] batadv_slave_1: entered allmulticast mode [ 858.105214][T20392] xfrm0: entered promiscuous mode [ 858.110272][T20392] xfrm0: entered allmulticast mode [ 858.119268][T20392] veth0_to_hsr: entered promiscuous mode [ 858.125802][T20392] veth0_to_hsr: entered allmulticast mode [ 858.138225][T20392] veth1_to_hsr: entered promiscuous mode [ 858.144540][T20392] veth1_to_hsr: entered allmulticast mode [ 858.157938][T20392] .70·: entered promiscuous mode [ 858.167073][T20392] veth1_virt_wifi: entered promiscuous mode [ 858.173227][T20392] veth1_virt_wifi: entered allmulticast mode [ 858.183380][T20392] veth0_virt_wifi: entered promiscuous mode [ 858.189316][T20392] veth0_virt_wifi: entered allmulticast mode [ 858.198304][T20392] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 858.205772][T20392] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 858.215205][T20392] veth1_vlan: entered allmulticast mode [ 858.225643][T20392] veth0_vlan: entered allmulticast mode [ 858.242787][T20392] vlan0: entered promiscuous mode [ 858.248114][T20392] vlan0: entered allmulticast mode [ 858.253781][T20392] vlan1: entered promiscuous mode [ 858.258990][T20392] vlan1: entered allmulticast mode [ 858.265189][T20392] macvlan0: entered promiscuous mode [ 858.271563][T20392] macvlan0: entered allmulticast mode [ 858.279985][T20392] macvlan1: entered promiscuous mode [ 858.285525][T20392] macvlan1: entered allmulticast mode [ 858.293706][T20392] ipvlan0: entered promiscuous mode [ 858.298952][T20392] ipvlan0: entered allmulticast mode [ 858.304683][T20392] ipvlan1: entered promiscuous mode [ 858.309905][T20392] ipvlan1: entered allmulticast mode [ 858.316788][T20392] veth1_macvtap: entered allmulticast mode [ 858.326036][T20392] veth0_macvtap: entered allmulticast mode [ 858.336520][T20392] macvtap0: entered promiscuous mode [ 858.341924][T20392] macvtap0: entered allmulticast mode [ 858.352101][T20392] macsec0: entered promiscuous mode [ 858.357365][T20392] macsec0: entered allmulticast mode [ 858.367275][T20392] geneve0: entered promiscuous mode [ 858.373610][T20392] geneve0: entered allmulticast mode [ 858.382803][T20392] geneve1: entered promiscuous mode [ 858.388122][T20392] geneve1: entered allmulticast mode [ 858.403958][T20392] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 858.411561][T20392] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 858.425336][T20392] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode [ 858.433618][T20392] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 858.442835][T20392] bond1: entered promiscuous mode [ 858.448198][T20392] bond1: entered allmulticast mode [ 858.454102][T20392] bridge1: entered promiscuous mode [ 858.459435][T20392] bridge1: entered allmulticast mode [ 858.465154][T20392] bond2: entered promiscuous mode [ 858.470344][T20392] bond2: entered allmulticast mode [ 858.477395][T20392] vxlan0: entered promiscuous mode [ 858.482950][T20392] vxlan0: entered allmulticast mode [ 858.492006][T20392] vxlan1: entered promiscuous mode [ 858.497143][T20392] vxlan1: entered allmulticast mode [ 858.505108][T20392] sit1: entered promiscuous mode [ 858.510082][T20392] sit1: entered allmulticast mode [ 858.537405][T20392] wireguard0: entered promiscuous mode [ 858.543482][T20392] wireguard0: entered allmulticast mode [ 858.551103][T20392] bridge3: entered promiscuous mode [ 858.556335][T20392] bridge3: entered allmulticast mode [ 858.562666][T20392] macsec1: entered promiscuous mode [ 858.567892][T20392] macsec1: entered allmulticast mode [ 858.573461][T20392] mac80211_hwsim hwsim51 wlan2: entered promiscuous mode [ 858.580909][T20392] mac80211_hwsim hwsim51 wlan2: entered allmulticast mode [ 858.588287][T20392] netdevsim netdevsim4 eth0: entered promiscuous mode [ 858.595649][T20392] netdevsim netdevsim4 eth0: entered allmulticast mode [ 858.602865][T20392] netdevsim netdevsim4 eth1: entered promiscuous mode [ 858.609678][T20392] netdevsim netdevsim4 eth1: entered allmulticast mode [ 858.616865][T20392] netdevsim netdevsim4 eth2: entered promiscuous mode [ 858.623828][T20392] netdevsim netdevsim4 eth2: entered allmulticast mode [ 858.631034][T20392] netdevsim netdevsim4 eth3: entered promiscuous mode [ 858.638501][T20392] netdevsim netdevsim4 eth3: entered allmulticast mode [ 858.646267][T20392] bond3: entered promiscuous mode [ 858.651395][T20392] bond3: entered allmulticast mode [ 858.657381][T20392] batadv1: entered promiscuous mode [ 858.662746][T20392] batadv1: entered allmulticast mode [ 858.668244][T20392] geneve2: entered promiscuous mode [ 858.673623][T20392] geneve2: entered allmulticast mode [ 858.679089][T20392] bond4: entered promiscuous mode [ 858.686303][T20392] veth2: entered promiscuous mode [ 858.691471][T20392] veth2: entered allmulticast mode [ 858.696716][T20392] veth3: entered promiscuous mode [ 858.701841][T20392] veth3: entered allmulticast mode [ 858.707759][T20392] bond6: entered promiscuous mode [ 858.712951][T20392] bond6: entered allmulticast mode [ 858.730778][T19034] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.758693][T19034] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.786916][T19034] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.812318][T19034] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.851159][T19034] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.870062][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.891832][T19034] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.942857][T19034] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.955937][T19034] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.982340][T20425] __nla_validate_parse: 5 callbacks suppressed [ 858.982360][T20425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3716'. [ 859.014345][T20429] openvswitch: netlink: IP tunnel dst address not specified [ 859.113162][T20417] lo speed is unknown, defaulting to 1000 [ 859.605757][T20438] netlink: 1372 bytes leftover after parsing attributes in process `syz.3.3721'. [ 859.625238][T20449] netlink: 'syz.1.3724': attribute type 4 has an invalid length. [ 859.891145][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.977365][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.127578][T20468] x_tables: duplicate underflow at hook 3 [ 860.932785][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.662284][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.952249][T20471] lo speed is unknown, defaulting to 1000 [ 861.973910][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.138252][T20491] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3733'. [ 862.164195][T20489] bridge0: port 1(erspan0) entered blocking state [ 862.181031][T20489] bridge0: port 1(erspan0) entered disabled state [ 862.191718][T20489] erspan0: entered allmulticast mode [ 862.212769][T20489] erspan0: entered promiscuous mode [ 862.227514][T20497] bond_slave_0: mtu less than device minimum [ 862.235914][T20496] netlink: 'syz.2.3735': attribute type 12 has an invalid length. [ 862.249274][T20496] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3735'. [ 862.345638][T20496] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 862.396846][T20496] vlan0: entered promiscuous mode [ 862.411753][T20496] vlan0: entered allmulticast mode [ 862.416964][T20496] hsr_slave_1: entered allmulticast mode [ 862.507167][T20502] lo speed is unknown, defaulting to 1000 [ 862.712619][T20508] lo speed is unknown, defaulting to 1000 [ 863.010996][T12574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.019558][ T8635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.113435][T20524] xt_hashlimit: size too large, truncated to 1048576 [ 863.294833][T20528] lo speed is unknown, defaulting to 1000 [ 863.458146][T20543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3745'. [ 863.485890][T20536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3743'. [ 863.550629][T20536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3743'. [ 863.722177][T20536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3743'. [ 863.739027][T20536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3743'. [ 863.922262][T20536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3743'. [ 864.051646][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.078722][T20559] syzkaller1: entered promiscuous mode [ 864.089347][T20559] syzkaller1: entered allmulticast mode [ 864.482844][T20585] SET target dimension over the limit! [ 864.563376][T20583] bond7: Removing last arp target with arp_interval on [ 865.091061][ T8635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.168153][T20602] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32) [ 865.488809][T20611] __nla_validate_parse: 1 callbacks suppressed [ 865.488830][T20611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3763'. [ 865.741501][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3764'. [ 865.787719][T20620] vetè0_virt_wif: renamed from lo [ 866.051207][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.093955][T20626] netlink: 'syz.3.3769': attribute type 4 has an invalid length. [ 866.166459][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.356756][T20631] lo speed is unknown, defaulting to 1000 [ 866.973709][T20644] lo speed is unknown, defaulting to 1000 [ 867.171429][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.525597][T20655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3775'. [ 867.550524][T20655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3775'. [ 867.559677][T20655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3775'. [ 867.619044][T20655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3775'. [ 867.656271][T20657] netlink: 'syz.4.3773': attribute type 1 has an invalid length. [ 867.679885][T20657] netlink: 'syz.4.3773': attribute type 4 has an invalid length. [ 867.720336][T20657] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3773'. [ 867.726855][T20643] netlink: 'syz.4.3773': attribute type 1 has an invalid length. [ 867.770629][T20643] netlink: 'syz.4.3773': attribute type 4 has an invalid length. [ 867.771898][T20660] netlink: 'syz.4.3773': attribute type 2 has an invalid length. [ 867.812418][T20643] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3773'. [ 867.855833][T20660] !: entered promiscuous mode [ 867.889556][T20662] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3777'. [ 867.893833][T20664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3778'. [ 868.216491][ T8635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.789828][T20691] tipc: Enabled bearer , priority 0 [ 868.861636][T20691] syzkaller0: entered promiscuous mode [ 868.867179][T20691] syzkaller0: entered allmulticast mode [ 868.901322][T20703] lo speed is unknown, defaulting to 1000 [ 868.927827][T20689] tipc: Resetting bearer [ 868.972705][T20689] tipc: Disabling bearer [ 869.054892][T20708] lo speed is unknown, defaulting to 1000 [ 869.091029][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.250940][ T8635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.587633][T20728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 869.836105][T20703] lo speed is unknown, defaulting to 1000 [ 870.291210][ T8635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.550025][T20746] netlink: 'syz.1.3799': attribute type 10 has an invalid length. [ 870.576711][T20746] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 870.632546][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.037469][T20757] x_tables: duplicate underflow at hook 4 [ 871.051910][T20754] syzkaller0: entered promiscuous mode [ 871.064652][T20754] syzkaller0: entered allmulticast mode [ 871.330777][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.140800][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.373445][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.390115][T20766] netlink: 'syz.4.3805': attribute type 10 has an invalid length. [ 872.398881][T20766] __nla_validate_parse: 6 callbacks suppressed [ 872.398900][T20766] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3805'. [ 872.403640][T20765] netlink: 'syz.4.3805': attribute type 10 has an invalid length. [ 872.427481][T20765] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3805'. [ 872.691467][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 873.371064][T20766] geneve0: left promiscuous mode [ 873.376095][T20766] geneve0: left allmulticast mode [ 873.404841][T20766] geneve0: entered promiscuous mode [ 873.410354][T20766] geneve0: entered allmulticast mode [ 873.418816][ T8635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.436284][T20766] team0: Port device geneve0 added [ 873.540784][T20776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3806'. [ 873.549731][T20776] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 873.765169][T20788] netlink: 'syz.1.3812': attribute type 12 has an invalid length. [ 873.778903][T20788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3812'. [ 873.799216][T20789] netlink: 'syz.1.3812': attribute type 3 has an invalid length. [ 873.816001][T20788] netlink: 'syz.1.3812': attribute type 3 has an invalid length. [ 873.934528][T20801] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3816'. [ 874.049784][T20803] lo speed is unknown, defaulting to 1000 [ 874.203315][T20812] tipc: Enabled bearer , priority 0 [ 874.210935][T20815] syzkaller0: entered promiscuous mode [ 874.217322][T20815] syzkaller0: entered allmulticast mode [ 874.318422][T20805] tipc: Resetting bearer [ 874.346155][T20804] tipc: Resetting bearer [ 874.428866][T20804] tipc: Disabling bearer [ 874.452011][ T8635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.648250][T20827] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3822'. [ 874.722293][T20834] netlink: 'syz.2.3824': attribute type 11 has an invalid length. [ 874.824772][T20840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3826'. [ 874.837101][T20840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3826'. [ 875.143298][T20852] geneve2: entered promiscuous mode [ 875.155771][T20852] geneve2: entered allmulticast mode [ 875.172001][ T7596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.183251][T20862] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3832'. [ 875.213662][T20857] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3832'. [ 875.376665][T20867] tipc: Enabled bearer , priority 0 [ 875.457568][T20867] syzkaller0: entered promiscuous mode [ 875.464069][T20867] syzkaller0: entered allmulticast mode [ 875.474165][T20867] tipc: Resetting bearer [ 875.490964][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.604511][ T6024] tipc: Resetting bearer [ 875.611932][T20866] tipc: Resetting bearer [ 875.734648][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.758350][ T11] block nbd1: Possible stuck request ffff8880249b0000: control (read@0,1024B). Runtime 750 seconds [ 876.534998][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.519349][T20866] tipc: Disabling bearer [ 877.545027][T20900] geneve2: entered promiscuous mode [ 877.552409][T20897] syzkaller0: entered promiscuous mode [ 877.557938][T20897] syzkaller0: entered allmulticast mode [ 877.573533][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.593580][ T8635] tipc: Node number set to 876448335 [ 877.687493][T20910] __nla_validate_parse: 1 callbacks suppressed [ 877.687514][T20910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3845'. [ 877.710294][T20915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3846'. [ 877.918800][T20922] netlink: 'syz.4.3848': attribute type 4 has an invalid length. [ 878.052119][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3853'. [ 878.075896][T20937] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3854'. [ 878.119362][T20937] netlink: 'syz.4.3854': attribute type 1 has an invalid length. [ 878.145964][T20940] tipc: Enabling of bearer rejected, already enabled [ 878.222493][T20937] 8021q: adding VLAN 0 to HW filter on device bond7 [ 878.327538][T20949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3856'. [ 878.443530][T20958] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 878.610755][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.771833][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.835611][T20982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3867'. [ 878.874052][T20982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3867'. [ 878.940388][T20987] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 878.968587][T20987] syzkaller1: linktype set to 768 [ 879.028407][T20991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.032182][T20987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3868'. [ 879.052052][T20991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.079808][T18519] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 879.117179][T20999] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3869'. [ 879.141648][T21001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3870'. [ 879.196636][T20999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.259785][T20999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.368121][T21015] sctp: [Deprecated]: syz.2.3874 (pid 21015) Use of int in max_burst socket option. [ 879.368121][T21015] Use struct sctp_assoc_value instead [ 879.502995][T21019] tipc: Enabled bearer , priority 0 [ 879.515268][T21019] syzkaller0: entered promiscuous mode [ 879.539599][T21019] syzkaller0: entered allmulticast mode [ 879.615930][T21019] tipc: Resetting bearer [ 879.629305][T21018] tipc: Resetting bearer [ 879.656709][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.658931][T21018] tipc: Disabling bearer [ 880.027682][T21040] tipc: Enabling of bearer rejected, media not registered [ 880.214133][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.248683][T21095] netlink: 'syz.2.3894': attribute type 6 has an invalid length. [ 881.299023][T21095] IPv6: NLM_F_CREATE should be specified when creating new route [ 881.606447][T21117] netlink: 'syz.4.3898': attribute type 4 has an invalid length. [ 881.663681][T21122] netlink: 'syz.4.3898': attribute type 4 has an invalid length. [ 882.106169][T21129] batman_adv: batadv0: Adding interface: dummy0 [ 882.114488][T21129] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.151705][T21129] batman_adv: batadv0: Interface activated: dummy0 [ 882.268467][T21142] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 882.666586][T21175] netlink: 'syz.4.3910': attribute type 2 has an invalid length. [ 882.770795][ T8635] net_ratelimit: 28 callbacks suppressed [ 882.770817][ T8635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.919251][T21189] __nla_validate_parse: 8 callbacks suppressed [ 882.919273][T21189] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3917'. [ 882.974180][T21189] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3917'. [ 883.037035][T21189] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3917'. [ 883.048871][T21189] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3917'. [ 883.223583][T21189] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3917'. [ 883.243623][T21189] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3917'. [ 883.399024][T21209] lo speed is unknown, defaulting to 1000 [ 883.481564][T21214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 883.595859][T21215] batman_adv: batadv0: Adding interface: vlan1 [ 883.610148][T21215] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.645038][T21216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3924'. [ 883.659578][T21215] batman_adv: batadv0: Not using interface vlan1 (retrying later): interface not active [ 883.757691][T21215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3924'. [ 883.768366][T21215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3924'. [ 883.779605][T21215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3924'. [ 883.811289][ T8635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.820353][T21215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 883.921030][T21226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.929554][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.958532][T21226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.967140][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.035395][T12574] IPVS: starting estimator thread 0... [ 884.063517][T21240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.111611][T21240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.135547][T21238] IPVS: using max 25 ests per chain, 60000 per kthread [ 884.153663][T21252] netlink: 'syz.3.3929': attribute type 13 has an invalid length. [ 884.164606][T21249] bridge0: port 2(hsr0) entered blocking state [ 884.171605][T21249] bridge0: port 2(hsr0) entered disabled state [ 884.178123][T21249] hsr0: entered allmulticast mode [ 884.183420][T21249] hsr_slave_0: entered allmulticast mode [ 884.189199][T21249] hsr_slave_1: entered allmulticast mode [ 884.262141][T21249] hsr0: entered promiscuous mode [ 884.636900][T21264] netlink: 'syz.5.3935': attribute type 1 has an invalid length. [ 884.830802][T21252] gretap0: refused to change device tx_queue_len [ 884.951279][T21270] 8021q: adding VLAN 0 to HW filter on device bond9 [ 884.981813][T21271] macvlan2: entered promiscuous mode [ 884.988159][T21271] macvlan2: entered allmulticast mode [ 884.998007][T21271] bond9: entered promiscuous mode [ 885.003962][T21271] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 885.023142][T21271] bond9: left promiscuous mode [ 885.130073][T21260] lo speed is unknown, defaulting to 1000 [ 885.202689][T21274] lo speed is unknown, defaulting to 1000 [ 885.447379][T21286] nbd: nbd2 already in use [ 886.433405][T21336] syz_tun: entered promiscuous mode [ 886.719085][T21348] netlink: 'syz.4.3952': attribute type 13 has an invalid length. [ 887.288838][T21361] lo speed is unknown, defaulting to 1000 [ 887.550281][T21382] lo speed is unknown, defaulting to 1000 [ 887.977173][T21399] bond2: Removing last arp target with arp_interval on [ 888.006227][T21399] bond2: entered promiscuous mode [ 888.015510][T21399] bond2: entered allmulticast mode [ 888.021479][T21399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 888.312834][T21409] macsec2: entered promiscuous mode [ 888.545097][T21416] __nla_validate_parse: 24 callbacks suppressed [ 888.545119][T21416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3969'. [ 888.691339][T21416] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.752809][T21416] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.831715][T21429] xt_bpf: check failed: parse error [ 888.846995][T21429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3972'. [ 889.185848][T21427] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 889.588235][T21453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3976'. [ 889.628605][T21460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3978'. [ 889.686425][T21461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3978'. [ 889.861938][T21454] lo speed is unknown, defaulting to 1000 [ 890.327467][T21492] netlink: 'syz.4.3983': attribute type 27 has an invalid length. [ 890.475108][T21499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3984'. [ 890.496317][T21499] x_tables: duplicate underflow at hook 2 [ 890.522823][T21503] netlink: 'syz.2.3986': attribute type 2 has an invalid length. [ 890.535476][T21503] netlink: 'syz.2.3986': attribute type 11 has an invalid length. [ 890.544404][T21503] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3986'. [ 890.669052][T21509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3988'. [ 890.902630][T21526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3992'. [ 891.593191][T21537] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3995'. [ 892.154844][T21568] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 892.501720][T21584] net_ratelimit: 55 callbacks suppressed [ 892.501742][T21584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 892.548441][T17494] lo speed is unknown, defaulting to 1000 [ 892.558277][T17494] syz2: Port: 1 Link ACTIVE [ 892.704841][T21601] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 893.172913][T16356] Bluetooth: hci4: command 0x0406 tx timeout [ 893.283376][T21623] openvswitch: netlink: Key type 30 is not supported [ 893.527712][T21633] netlink: 'syz.4.4017': attribute type 3 has an invalid length. [ 893.559742][T21633] __nla_validate_parse: 9 callbacks suppressed [ 893.559830][T21633] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4017'. [ 893.637447][T21638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4015'. [ 893.671804][T21638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4015'. [ 893.882411][T21640] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4018'. [ 894.078599][T21643] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4019'. [ 894.097041][T21643] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4019'. [ 894.113338][T21643] netlink: 'syz.3.4019': attribute type 6 has an invalid length. [ 894.151837][T21643] netlink: 'syz.3.4019': attribute type 5 has an invalid length. [ 894.159641][T21643] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4019'. [ 894.203142][T21645] netlink: 'syz.3.4019': attribute type 4 has an invalid length. [ 894.225444][T21643] netlink: 'syz.3.4019': attribute type 4 has an invalid length. [ 894.291090][T17495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.304256][T21660] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4020'. [ 894.322405][T21643] syzkaller1: entered promiscuous mode [ 894.328201][T21643] syzkaller1: entered allmulticast mode [ 894.493663][T21662] tipc: Enabled bearer , priority 0 [ 894.521319][T21659] tipc: Disabling bearer [ 894.744018][T21665] delete_channel: no stack [ 894.950332][T21684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4026'. [ 895.218849][T21687] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.4027'. [ 895.331119][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.376509][T21689] netlink: 'syz.1.4028': attribute type 1 has an invalid length. [ 895.451635][T21693] netlink: 'syz.4.4029': attribute type 10 has an invalid length. [ 895.459546][T21693] dummy0: left promiscuous mode [ 895.482677][T21693] dummy0: left allmulticast mode [ 895.512881][T21693] team0: Device dummy0 failed to register rx_handler [ 895.547024][T21696] netlink: 'syz.4.4029': attribute type 10 has an invalid length. [ 896.075287][T21718] tipc: Enabled bearer , priority 0 [ 896.104707][T21716] tipc: Disabling bearer [ 896.214242][ T3850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.224159][T17495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.235386][T12574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.243577][T12574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.251868][T12574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.235379][T21764] can: request_module (can-proto-4) failed. [ 897.373573][T21772] netlink: 'syz.3.4051': attribute type 1 has an invalid length. [ 897.460809][T21772] bond3: entered promiscuous mode [ 897.471151][T21772] 8021q: adding VLAN 0 to HW filter on device bond3 [ 897.537156][T21782] 8021q: adding VLAN 0 to HW filter on device bond3 [ 897.552223][T21782] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 897.566582][T21772] netlink: 'syz.3.4051': attribute type 15 has an invalid length. [ 897.579396][T21782] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 897.592807][T21782] bond3: (slave gre1): making interface the new active one [ 897.600338][T21782] gre1: entered promiscuous mode [ 897.608753][T21782] bond3: (slave gre1): Enslaving as an active interface with an up link [ 897.652659][T21785] lo speed is unknown, defaulting to 1000 [ 897.892311][T17494] net_ratelimit: 7 callbacks suppressed [ 897.892332][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.953774][T21801] lo speed is unknown, defaulting to 1000 [ 898.564663][T21816] __nla_validate_parse: 5 callbacks suppressed [ 898.564688][T21816] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4061'. [ 898.746288][T21829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4065'. [ 898.873683][T21835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4067'. [ 898.920803][T21835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4067'. [ 898.930779][T17495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.086380][T21846] lo speed is unknown, defaulting to 1000 [ 899.140249][T21851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4071'. [ 899.223669][T21851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4071'. [ 899.331758][T12574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.630965][T21868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4076'. [ 899.708556][T21874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4077'. [ 899.756693][T21868] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 899.792364][T21878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 899.850360][T21875] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 899.971178][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.508052][T21913] lo speed is unknown, defaulting to 1000 [ 900.621882][T21920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4091'. [ 900.840352][T21909] pimreg: entered allmulticast mode [ 900.871777][T21931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4094'. [ 900.884781][T21913] pimreg: left allmulticast mode [ 901.013466][ T910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.027971][T21932] netlink: 'syz.2.4092': attribute type 10 has an invalid length. [ 901.085594][T21931] RDS: rds_bind could not find a transport for 4004:0:20:0:c002:0:20:0, load rds_tcp or rds_rdma? [ 901.241623][T21944] netlink: 'syz.1.4097': attribute type 4 has an invalid length. [ 901.295673][T21948] netlink: 'syz.1.4097': attribute type 4 has an invalid length. [ 901.582362][T21958] ip6tnl3: entered allmulticast mode [ 901.993333][ T6713] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.023143][ T6713] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.048021][ T6713] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.053097][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.091333][ T6713] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.371043][T12578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.625028][ T3492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.708627][T21987] lo speed is unknown, defaulting to 1000 [ 903.326380][T22026] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 903.632745][T22032] netlink: 'syz.4.4123': attribute type 1 has an invalid length. [ 903.654685][T17494] net_ratelimit: 5 callbacks suppressed [ 903.654704][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.681177][T22037] netlink: 'syz.1.4121': attribute type 32 has an invalid length. [ 903.692441][T22037] __nla_validate_parse: 15 callbacks suppressed [ 903.692483][T22037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4121'. [ 903.850977][T22037] bond4: option coupled_control: invalid value (17) [ 903.867454][T22037] bond4 (unregistering): Released all slaves [ 904.361957][T22079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4132'. [ 904.377638][T22080] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4132'. [ 904.446354][T22084] lo speed is unknown, defaulting to 1000 [ 904.489136][T22080] gre0: entered promiscuous mode [ 904.502285][T22080] gre0: entered allmulticast mode [ 904.690688][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.737761][T22095] netlink: 'syz.3.4136': attribute type 1 has an invalid length. [ 904.793137][T22096] netlink: 'syz.5.4137': attribute type 39 has an invalid length. [ 904.811451][T22098] netlink: 'syz.1.4135': attribute type 16 has an invalid length. [ 904.819489][T22098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4135'. [ 905.181936][T22095] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 905.368392][T22096] hsr_slave_1 (unregistering): left promiscuous mode [ 905.413166][T12578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.442854][T22098] veth0: entered promiscuous mode [ 905.450176][T22106] netlink: 'syz.3.4138': attribute type 12 has an invalid length. [ 905.578795][T22090] veth0: left promiscuous mode [ 905.735581][ T910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.811325][ T11] block nbd1: Possible stuck request ffff8880249b0000: control (read@0,1024B). Runtime 780 seconds [ 905.858677][T22125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4143'. [ 905.949416][T22131] pimreg: entered allmulticast mode [ 906.063053][T22134] syzkaller1: entered promiscuous mode [ 906.068714][T22134] syzkaller1: entered allmulticast mode [ 906.087003][T22142] netlink: 'syz.2.4149': attribute type 1 has an invalid length. [ 906.108184][T22137] syzkaller0: entered promiscuous mode [ 906.115605][T22137] syzkaller0: entered allmulticast mode [ 906.265040][ T7596] IPVS: starting estimator thread 0... [ 906.271109][T22144] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 906.370979][T22146] IPVS: using max 25 ests per chain, 60000 per kthread [ 906.450864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.483548][T22153] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4151'. [ 906.494106][T22154] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4151'. [ 906.506008][T22153] netlink: 116 bytes leftover after parsing attributes in process `syz.5.4151'. [ 906.520482][T22153] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4151'. [ 906.545494][T22148] netlink: 'syz.3.4146': attribute type 10 has an invalid length. [ 906.580722][T22148] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 906.708208][T22166] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4154'. [ 906.739120][T22166] syzkaller1: entered promiscuous mode [ 906.745864][T22166] syzkaller1: entered allmulticast mode [ 906.767634][T22166] netlink: 'syz.4.4154': attribute type 4 has an invalid length. [ 906.773653][T17494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.788066][T22166] netlink: 'syz.4.4154': attribute type 1 has an invalid length. [ 906.933976][T22169] Cannot find add_set index 2 as target [ 907.198492][T22185] tipc: Enabling of bearer rejected, already enabled [ 907.763482][T22212] nbd4: detected capacity change from 0 to 127 [ 907.771268][T22218] netlink: 'syz.3.4170': attribute type 10 has an invalid length. [ 907.789453][T16356] block nbd4: Receive control failed (result -32) [ 907.920922][T22224] tipc: Enabling of bearer rejected, already enabled [ 908.114920][T22228] ip6gre1: entered promiscuous mode [ 908.120207][T22228] ip6gre1: entered allmulticast mode [ 908.177298][T22228] lo speed is unknown, defaulting to 1000 [ 908.707016][T22243] lo speed is unknown, defaulting to 1000 [ 909.172561][T16356] Bluetooth: hci1: command 0x0405 tx timeout [ 909.311664][T22264] __nla_validate_parse: 3 callbacks suppressed [ 909.311686][T22264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4184'. [ 909.348767][T22266] xt_cluster: node mask cannot exceed total number of nodes [ 909.366791][T22268] Cannot find del_set index 4 as target [ 909.393503][T22266] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4186'. [ 909.703457][T22280] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 909.783852][T22281] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4189'. [ 909.923558][T22285] bond1 (unregistering): Released all slaves [ 910.148869][T22288] bond4: option arp_validate: invalid value (18446744073491447809) [ 910.191670][T22288] bond4 (unregistering): Released all slaves [ 910.334042][T22295] netpci0: tun_chr_ioctl cmd 1074025678 [ 910.346195][T22295] netpci0: group set to 0 [ 910.501505][ T6713] tipc: Subscription rejected, illegal request [ 910.674381][T22300] netlink: 'syz.2.4196': attribute type 1 has an invalid length. [ 910.762262][T22300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 910.843868][T22304] veth5: entered promiscuous mode [ 910.865257][T22304] bond1: (slave veth5): Enslaving as an active interface with an up link [ 910.995686][T22312] netlink: 'syz.1.4200': attribute type 2 has an invalid length. [ 911.034191][T22312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4200'. [ 911.167667][T22315] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4201'. [ 911.307354][T22323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4202'. [ 911.554842][T22331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4204'. [ 911.979983][T22346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4208'. [ 911.989330][T22346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4208'. [ 912.079522][T22347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 912.139548][T22349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 912.317941][T22353] tipc: Enabled bearer , priority 0 [ 912.339965][T22352] tipc: Disabling bearer [ 912.683059][T22358] bond0: Caught tx_queue_len zero misconfig [ 912.700297][T22358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4213'. [ 912.750786][T22359] lo: Caught tx_queue_len zero misconfig [ 912.937873][T22361] IPVS: Scheduler module ip_vs_sip not found [ 913.587426][T22396] netlink: 'syz.5.4223': attribute type 13 has an invalid length. [ 913.614639][T22391] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 913.663220][T22391] bond0: (slave bond_slave_0): Releasing backup interface [ 913.674289][T22391] bond0: (slave bond_slave_1): Releasing backup interface [ 913.690230][T22391] team0: Port device team_slave_0 removed [ 913.733093][T22406] netlink: 'syz.1.4221': attribute type 10 has an invalid length. [ 913.742763][T22391] team0: Port device team_slave_1 removed [ 913.749648][T22391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.768384][T22391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.803274][T22391] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 913.859733][T22406] mac80211_hwsim hwsim44 wlan1: left allmulticast mode [ 914.125582][T22421] lo speed is unknown, defaulting to 1000 [ 914.603506][T22437] syzkaller1: entered promiscuous mode [ 914.609098][T22437] syzkaller1: entered allmulticast mode [ 914.695007][T22437] sctp: [Deprecated]: syz.4.4237 (pid 22437) Use of int in max_burst socket option. [ 914.695007][T22437] Use struct sctp_assoc_value instead [ 914.719137][T22459] __nla_validate_parse: 7 callbacks suppressed [ 914.719157][T22459] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4240'. [ 914.946058][T22464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 914.980826][T22454] lo speed is unknown, defaulting to 1000 [ 915.139567][T22473] netlink: 'syz.1.4244': attribute type 1 has an invalid length. [ 915.190245][T22469] pim6reg1: entered promiscuous mode [ 915.197812][T22469] pim6reg1: entered allmulticast mode [ 915.337410][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4243'. [ 915.482652][T22479] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.492530][T22479] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.633714][T22469] netlink: 'syz.2.4243': attribute type 2 has an invalid length. [ 915.714643][T22469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4243'. [ 916.040281][T22494] x_tables: duplicate entry at hook 2 [ 916.155204][T22500] netlink: 'syz.3.4252': attribute type 1 has an invalid length. [ 916.196385][T22500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.213272][T22505] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4253'. [ 916.229297][T22505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4253'. [ 916.264917][T22505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4253'. [ 916.434548][T22519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4250'. [ 916.563858][T22524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4256'. [ 916.577280][T22524] netlink: 'syz.2.4256': attribute type 30 has an invalid length. [ 916.593901][T22524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4256'. [ 916.627670][T22521] vlan0: entered promiscuous mode [ 916.633585][T22521] geneve1: entered promiscuous mode [ 916.650749][T22521] vlan0: entered allmulticast mode [ 916.656002][T22521] geneve1: entered allmulticast mode [ 916.832137][T22530] syzkaller0: entered promiscuous mode [ 916.843057][T22530] syzkaller0: entered allmulticast mode [ 917.005082][T22536] xt_bpf: check failed: parse error [ 917.468822][T22544] netlink: 1452 bytes leftover after parsing attributes in process `syz.3.4264'. [ 920.488330][T22534] __nla_validate_parse: 3 callbacks suppressed [ 920.488356][T22534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4260'. [ 920.505082][T22526] netlink: 280 bytes leftover after parsing attributes in process `syz.5.4259'. [ 920.681177][T22553] netlink: 'syz.4.4267': attribute type 1 has an invalid length. [ 920.689126][T22553] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4267'. [ 920.725924][T22553] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4267'. [ 920.751002][T22555] x_tables: duplicate underflow at hook 1 [ 920.812256][T22560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4270'. [ 920.828726][T22562] netlink: 'syz.4.4267': attribute type 2 has an invalid length. [ 920.904677][T22565] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4271'. [ 920.983213][T22565] netlink: 'syz.5.4271': attribute type 16 has an invalid length. [ 921.011135][T22565] netlink: 'syz.5.4271': attribute type 17 has an invalid length. [ 921.109130][T12578] lo speed is unknown, defaulting to 1000 [ 921.109508][T22572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4271'. [ 921.121922][T12578] syz2: Port: 1 Link DOWN [ 921.178009][T22576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4272'. [ 921.641518][T22595] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4274'. [ 921.691912][T22596] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4274'. [ 921.994519][T22607] syzkaller0: entered promiscuous mode [ 922.000056][T22607] syzkaller0: entered allmulticast mode [ 922.360723][T22632] netlink: 'syz.2.4284': attribute type 11 has an invalid length. [ 922.373035][T22632] netlink: 'syz.2.4284': attribute type 1 has an invalid length. [ 922.438954][T22632] netlink: 'syz.2.4284': attribute type 10 has an invalid length. [ 923.014349][T22647] can: request_module (can-proto-5) failed. [ 923.985717][T22691] netlink: 'syz.4.4297': attribute type 6 has an invalid length. [ 924.010086][T22691] netlink: 'syz.4.4297': attribute type 5 has an invalid length. [ 924.156699][T22696] bridge4: entered allmulticast mode [ 924.251298][T22698] batadv1: entered promiscuous mode [ 924.389725][T22702] lo speed is unknown, defaulting to 1000 [ 924.451673][T16356] Bluetooth: hci1: command 0x0405 tx timeout [ 924.963254][T22730] netlink: ct family unspecified [ 925.032569][T22733] mac80211_hwsim hwsim44 wlan1: Device is already in use. [ 925.124912][T22733] bond0: (slave wlan1): Releasing backup interface [ 925.195605][T22735] lo speed is unknown, defaulting to 1000 [ 925.258135][T22745] xt_CT: You must specify a L4 protocol and not use inversions on it [ 925.819128][T22758] __nla_validate_parse: 32 callbacks suppressed [ 925.819151][T22758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4316'. [ 926.018540][T22762] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 926.175971][T22762] lo speed is unknown, defaulting to 1000 [ 926.365204][T22769] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 926.861856][T22784] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 927.010351][T22791] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4324'. [ 927.185907][T22803] macsec1: entered promiscuous mode [ 927.191532][T22803] macsec0: entered promiscuous mode [ 927.197035][T22803] macsec1: entered allmulticast mode [ 927.203987][T22803] macsec0: entered allmulticast mode [ 927.244346][T22803] macsec0: left allmulticast mode [ 927.252128][T22803] macsec0: left promiscuous mode [ 927.300571][T22765] lo speed is unknown, defaulting to 1000 [ 927.955884][T22844] tipc: Enabled bearer , priority 0 [ 927.972889][T22843] tipc: Disabling bearer [ 928.037857][T22846] lo speed is unknown, defaulting to 1000 [ 928.455562][T22863] lo speed is unknown, defaulting to 1000 [ 928.667249][T22870] vlan4: entered promiscuous mode [ 928.688311][T22870] gretap0: entered promiscuous mode [ 928.827667][T22859] lo speed is unknown, defaulting to 1000 [ 929.012377][T16356] Bluetooth: hci3: command 0x0405 tx timeout [ 929.116812][T22892] netlink: 'syz.1.4347': attribute type 32 has an invalid length. [ 929.262962][T22895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4348'. [ 929.380230][T22900] netlink: 'syz.1.4350': attribute type 1 has an invalid length. [ 929.403612][T22900] netlink: 'syz.1.4350': attribute type 2 has an invalid length. [ 929.425245][T22900] netlink: 'syz.1.4350': attribute type 1 has an invalid length. [ 929.434563][T22900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4350'. [ 929.445868][T22902] netlink: 'syz.1.4350': attribute type 1 has an invalid length. [ 929.566624][T22902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4350'. [ 929.627625][T22900] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 929.639326][T22900] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 929.674190][T22902] 8021q: adding VLAN 0 to HW filter on device bond4 [ 929.700073][T22913] bond4: (slave bridge3): Enslaving as an active interface with a down link [ 929.788251][T22900] macvlan2: entered promiscuous mode [ 929.807652][T22902] netlink: 'syz.1.4350': attribute type 1 has an invalid length. [ 929.816555][T22900] macvlan2: entered allmulticast mode [ 929.849334][T22900] bond4: entered promiscuous mode [ 929.868118][T22900] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 929.879717][T22900] bond4: left promiscuous mode [ 930.205377][T22936] syzkaller0: entered promiscuous mode [ 930.224666][T22936] syzkaller0: entered allmulticast mode [ 930.743165][T22963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4367'. [ 930.791145][T22965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4367'. [ 930.794762][T22964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4367'. [ 930.865441][T22973] tc_dump_action: action bad kind [ 930.928260][T22975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4371'. [ 931.124063][T22987] tipc: Enabled bearer , priority 0 [ 931.197876][T22985] syzkaller0: entered promiscuous mode [ 931.203753][T22985] syzkaller0: entered allmulticast mode [ 931.210864][T22985] tipc: Resetting bearer [ 931.216954][T22983] netlink: 'syz.3.4374': attribute type 1 has an invalid length. [ 931.230858][T22988] netlink: 'syz.3.4374': attribute type 1 has an invalid length. [ 931.251781][T22984] tipc: Resetting bearer [ 931.294406][T22988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4374'. [ 933.153841][T22984] tipc: Disabling bearer [ 933.166110][T12578] tipc: Node number set to 945596137 [ 933.208723][T22992] lo speed is unknown, defaulting to 1000 [ 933.261572][T22983] lo speed is unknown, defaulting to 1000 [ 933.948456][T23042] lo speed is unknown, defaulting to 1000 [ 934.040225][T23047] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4388'. [ 934.364694][T23061] lo speed is unknown, defaulting to 1000 [ 934.596488][T23086] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4399'. [ 934.627797][T23070] lo speed is unknown, defaulting to 1000 [ 934.692372][T23089] vlan2: entered promiscuous mode [ 934.697550][T23089] bridge0: entered promiscuous mode [ 934.778507][T23092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4401'. [ 934.839370][T23092] ip6gretap2: entered promiscuous mode [ 934.852362][T23092] ip6gretap2: entered allmulticast mode [ 934.922433][T23095] lo speed is unknown, defaulting to 1000 [ 935.072496][T23101] tipc: Enabled bearer , priority 0 [ 935.115224][T23101] tipc: Resetting bearer [ 935.305656][T23100] tipc: Disabling bearer [ 935.411521][T23109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4405'. [ 935.552870][T23121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4408'. [ 935.654633][T23125] netlink: 'syz.4.4408': attribute type 33 has an invalid length. [ 935.682764][T23125] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4408'. [ 935.694403][T23128] netlink: 'syz.1.4409': attribute type 1 has an invalid length. [ 935.717290][T23121] vlan2: entered promiscuous mode [ 935.798122][T23125] `: renamed from team0 [ 935.822531][T23132] 8021q: adding VLAN 0 to HW filter on device bond5 [ 935.840971][T23137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4411'. [ 935.856027][T23127] lo speed is unknown, defaulting to 1000 [ 935.891838][ T11] block nbd1: Possible stuck request ffff8880249b0000: control (read@0,1024B). Runtime 810 seconds [ 935.928435][T23128] veth9: entered promiscuous mode [ 935.960182][T23128] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 935.988189][T23143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4413'. [ 936.011530][T23139] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 936.041521][T23146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4413'. [ 936.066197][T23145] netlink: 'syz.2.4412': attribute type 29 has an invalid length. [ 936.093162][T23145] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4412'. [ 936.111687][T23143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4413'. [ 936.136578][T23139] netlink: 'syz.2.4412': attribute type 29 has an invalid length. [ 936.144887][T23146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4413'. [ 936.157052][T21160] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.166371][T21160] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.197523][T21160] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.273899][T21160] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.315019][T23148] lo speed is unknown, defaulting to 1000 [ 936.506401][T23158] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4416'. [ 936.731384][T23160] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4417'. [ 936.790647][T23162] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4417'. [ 936.986500][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4418'. [ 937.009496][T23169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4419'. [ 937.566861][T23194] lo speed is unknown, defaulting to 1000 [ 938.241534][T23232] netlink: 'syz.2.4434': attribute type 10 has an invalid length. [ 938.311655][T23238] x_tables: duplicate underflow at hook 1 [ 938.358975][T23242] x_tables: duplicate underflow at hook 1 [ 938.736062][T23259] tipc: Enabled bearer , priority 0 [ 938.744974][T23258] tipc: Enabling of bearer rejected, already enabled [ 938.756004][T23259] syzkaller0: entered promiscuous mode [ 938.763036][T23259] syzkaller0: entered allmulticast mode [ 938.829734][T23258] tipc: Resetting bearer [ 938.844480][T23257] tipc: Resetting bearer [ 938.872654][T23257] tipc: Disabling bearer [ 939.287724][T23274] syzkaller1: entered promiscuous mode [ 939.293529][T23274] syzkaller1: entered allmulticast mode [ 939.355091][T23279] netlink: 'syz.4.4448': attribute type 1 has an invalid length. [ 939.374161][T23278] IPv6: Can't replace route, no match found [ 939.515523][T23279] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 939.696510][T23300] xt_limit: Overflow, try lower: 271964/0 [ 939.710339][T23301] xt_limit: Overflow, try lower: 271964/0 [ 940.491007][T23355] syzkaller0: entered promiscuous mode [ 940.496558][T23355] syzkaller0: entered allmulticast mode [ 940.545418][T23358] netlink: zone id is out of range [ 940.579290][T23358] netlink: zone id is out of range [ 940.595049][T23358] netlink: zone id is out of range [ 940.600298][T23358] netlink: zone id is out of range [ 940.618982][T23358] netlink: zone id is out of range [ 940.637879][T23358] netlink: zone id is out of range [ 940.655554][T23358] netlink: zone id is out of range [ 940.681777][T23358] netlink: zone id is out of range [ 940.687705][T23358] netlink: zone id is out of range [ 940.693288][T23358] netlink: zone id is out of range [ 940.708321][T23358] netlink: 'syz.3.4466': attribute type 6 has an invalid length. [ 941.223192][T23388] __nla_validate_parse: 23 callbacks suppressed [ 941.223208][T23388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4474'. [ 941.301807][T23388] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 941.315674][T23388] bond8 (unregistering): Released all slaves [ 941.495153][T23400] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 942.026506][T23438] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4489'. [ 942.075021][T23442] syzkaller0: entered promiscuous mode [ 942.103119][T23442] syzkaller0: entered allmulticast mode [ 943.000662][T23483] netlink: 'syz.5.4493': attribute type 1 has an invalid length. [ 943.021854][T23489] syzkaller0: entered promiscuous mode [ 943.027397][T23489] syzkaller0: entered allmulticast mode [ 943.070341][T23483] erspan2: entered allmulticast mode [ 943.138872][T23494] lo speed is unknown, defaulting to 1000 [ 943.159481][T23502] netlink: 'syz.1.4499': attribute type 9 has an invalid length. [ 943.167843][T23502] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4499'. [ 943.188409][T23502] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4499'. [ 944.272607][T23511] syzkaller0: entered promiscuous mode [ 944.278117][T23511] syzkaller0: entered allmulticast mode [ 944.451846][T23540] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4507'. [ 946.150916][T23548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4508'. [ 946.682461][T23587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4516'. [ 946.694794][T23589] netlink: 'syz.2.4515': attribute type 1 has an invalid length. [ 946.762231][T23593] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 946.778111][T23589] IPVS: stopping backup sync thread 23593 ... [ 946.809180][T23589] netlink: 'syz.2.4515': attribute type 1 has an invalid length. [ 947.017451][T23603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4519'. [ 947.056739][T23599] netlink: 'syz.5.4517': attribute type 3 has an invalid length. [ 947.169201][T23574] lo speed is unknown, defaulting to 1000 [ 947.218905][T23596] netlink: 'syz.5.4517': attribute type 2 has an invalid length. [ 947.952273][T23626] netlink: 'syz.2.4525': attribute type 3 has an invalid length. [ 947.988880][T23626] syz_tun: entered allmulticast mode [ 947.996734][T23626] pimreg: left allmulticast mode [ 948.514370][T23633] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 948.652155][T23640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4528'. [ 948.682078][T23625] syz_tun: left allmulticast mode [ 948.836161][T23641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4528'. [ 949.245972][T23657] netlink: 'syz.2.4534': attribute type 13 has an invalid length. [ 949.266136][T23657] netlink: 'syz.2.4534': attribute type 17 has an invalid length. [ 949.309153][T23660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4534'. [ 949.413279][T23657] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.420575][T23657] bridge0: port 2(bridge_slave_1) entered listening state [ 949.428016][T23657] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.435240][T23657] bridge0: port 1(bridge_slave_0) entered listening state [ 949.460845][T23657] net_ratelimit: 15 callbacks suppressed [ 949.460859][T23657] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 949.727604][T23670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4538'. [ 949.817636][T23681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4538'. [ 949.826956][T23681] netlink: 'syz.2.4538': attribute type 12 has an invalid length. [ 949.848946][T23681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4538'. [ 949.858173][T23681] netlink: 'syz.2.4538': attribute type 12 has an invalid length. [ 949.889193][T23676] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4540'. [ 950.118095][T23686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4542'. [ 950.463849][T23701] xt_l2tp: unknown flags: 51 [ 950.477367][T23699] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 950.747289][T23705] syzkaller0: entered promiscuous mode [ 950.755776][T23705] syzkaller0: entered allmulticast mode [ 950.785010][T23704] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 950.896231][T23714] sctp: [Deprecated]: syz.5.4551 (pid 23714) Use of int in max_burst socket option. [ 950.896231][T23714] Use struct sctp_assoc_value instead [ 951.124062][T23724] netlink: 'syz.5.4554': attribute type 1 has an invalid length. [ 951.175320][T23724] vxcan2: entered allmulticast mode [ 951.608606][T23740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.688070][T23740] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 951.757172][T23744] lo speed is unknown, defaulting to 1000 [ 952.360794][T23777] sock: sock_set_timeout: `syz.3.4566' (pid 23777) tries to set negative timeout [ 952.370588][T16356] Bluetooth: hci1: command 0x0405 tx timeout [ 952.403999][T23778] __nla_validate_parse: 9 callbacks suppressed [ 952.404019][T23778] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4559'. [ 952.429521][T23777] sock: sock_set_timeout: `syz.3.4566' (pid 23777) tries to set negative timeout [ 952.719251][T23791] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4568'. [ 952.740127][T23791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4568'. [ 953.451310][T23819] tipc: Enabled bearer , priority 0 [ 953.482022][T23819] syzkaller0: entered promiscuous mode [ 953.487654][T23819] syzkaller0: entered allmulticast mode [ 953.523552][T23819] tipc: Resetting bearer [ 953.573831][T23817] tipc: Resetting bearer [ 953.617633][T23817] tipc: Disabling bearer [ 954.234932][T23848] netlink: 'syz.5.4584': attribute type 11 has an invalid length. [ 954.263783][T23849] dummy0: entered promiscuous mode [ 954.277886][T23849] vlan2: entered promiscuous mode [ 954.418259][T23850] bond1: (slave vetè0_virt_wif): Releasing backup interface [ 954.491905][T23850] bond1: (slave vetè0_virt_wif): last VLAN challenged slave left bond - VLAN blocking is removed [ 954.523610][T23850] vetè0_virt_wif: left promiscuous mode [ 954.529493][T23850] vetè0_virt_wif: left allmulticast mode [ 954.556561][T23850] bond0: (slave bond_slave_0): Releasing backup interface [ 954.568217][T23850] bond0: (slave bond_slave_1): Releasing backup interface [ 954.579058][T23850] team_slave_0: left promiscuous mode [ 954.585852][T23850] `: Failed to send options change via netlink (err -105) [ 954.593953][T23850] `: Failed to send port change of device team_slave_0 via netlink (err -105) [ 954.604022][T23850] `: Port device team_slave_0 removed [ 954.612601][T23850] `: Failed to send options change via netlink (err -105) [ 954.620168][T23850] `: Failed to send port change of device team_slave_1 via netlink (err -105) [ 954.630556][T23850] `: Port device team_slave_1 removed [ 954.636673][T23850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.646965][T23850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.657431][T23850] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 954.962864][T23884] 8021q: adding VLAN 0 to HW filter on device bond11 [ 955.037507][T23887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4593'. [ 955.055082][T23887] batman_adv: batadv0: Removing interface: vlan1 [ 955.121072][T23900] netlink: 'syz.5.4594': attribute type 13 has an invalid length. [ 955.198225][T23903] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 955.237681][T23906] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4596'. [ 955.274637][T23910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 956.008882][T23924] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4602'. [ 956.019741][T23924] 0ªX¹¦À: renamed from caif0 [ 956.027765][T23924] 0ªX¹¦À: left promiscuous mode [ 956.033045][T23924] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 956.108731][T23925] lo speed is unknown, defaulting to 1000 [ 956.166690][T23929] openvswitch: netlink: Message has 4 unknown bytes. [ 956.175718][T23929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 956.372218][T23935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4605'. [ 956.934410][T23940] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4606'. [ 957.177445][T23957] tipc: Enabled bearer , priority 0 [ 957.306639][T23956] tipc: Disabling bearer [ 957.793390][T23962] netlink: 'syz.1.4614': attribute type 1 has an invalid length. [ 957.815043][T23963] netlink: 'syz.1.4614': attribute type 1 has an invalid length. [ 957.897411][T23962] 8021q: adding VLAN 0 to HW filter on device bond6 [ 957.916398][T23968] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 957.927270][T23968] bond6: (slave batadv1): making interface the new active one [ 957.936447][T23968] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 957.949358][T23962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4614'. [ 958.009303][T23975] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 958.075184][T23975] x_tables: duplicate underflow at hook 1 [ 958.121186][T23975] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 958.232528][T23983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4618'. [ 958.359291][T23986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4619'. [ 958.446755][T23993] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4621'. [ 958.470285][T23995] netlink: 592 bytes leftover after parsing attributes in process `syz.4.4620'. [ 958.488300][T23993] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4621'. [ 958.525625][T23962] bond6 (unregistering): (slave batadv1): Releasing active interface [ 958.537862][T23962] bond6 (unregistering): Released all slaves [ 958.594738][T23993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4621'. [ 958.763815][T24004] tipc: Enabled bearer , priority 0 [ 958.898416][T24009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4626'. [ 958.946886][T24013] netlink: 'syz.5.4627': attribute type 11 has an invalid length. [ 958.991827][T24013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4627'. [ 959.070263][T24011] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 959.078304][T24011] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 959.086300][T24011] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 959.094249][T24011] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 959.154950][T24023] netlink: 'syz.1.4632': attribute type 3 has an invalid length. [ 959.167804][T24023] syz_tun: entered allmulticast mode [ 959.176554][T24023] siw: device registration error -23 [ 959.188426][T24024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4630'. [ 959.299399][T24023] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.390228][T24021] syz_tun: left allmulticast mode [ 959.452754][ T5972] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xe6 [ 959.555219][T24041] syzkaller0: entered promiscuous mode [ 959.570924][T24041] syzkaller0: entered allmulticast mode [ 960.795212][T24086] net_ratelimit: 51 callbacks suppressed [ 960.795233][T24086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 960.888044][T24088] 8021q: adding VLAN 0 to HW filter on device bond8 [ 961.157379][T24108] netlink: 'syz.5.4656': attribute type 1 has an invalid length. [ 961.176747][T24111] netlink: 'syz.5.4656': attribute type 1 has an invalid length. [ 963.349109][T24161] delete_channel: no stack [ 965.946007][T24187] __nla_validate_parse: 12 callbacks suppressed [ 965.946028][T24187] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4670'. [ 965.992554][ T11] block nbd1: Possible stuck request ffff8880249b0000: control (read@0,1024B). Runtime 840 seconds [ 966.343444][T24210] lo speed is unknown, defaulting to 1000 [ 966.363089][T24206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4675'. [ 966.383188][T24218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4678'. [ 966.684168][T24216] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 966.698386][T24216] bond9: (slave batadv2): Enslaving as an active interface with an up link [ 966.761896][T24215] lo speed is unknown, defaulting to 1000 [ 966.915651][T24236] netlink: 'syz.2.4680': attribute type 3 has an invalid length. [ 967.065853][T24241] nftables ruleset with unbound set [ 967.268639][T24241] netlink: 'syz.5.4682': attribute type 12 has an invalid length. [ 967.288452][T24254] GUP no longer grows the stack in syz.2.4685 (24254): 200000003000-20000000a000 (200000001000) [ 967.326777][T24254] CPU: 1 UID: 0 PID: 24254 Comm: syz.2.4685 Not tainted syzkaller #0 PREEMPT(full) [ 967.326811][T24254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 967.326826][T24254] Call Trace: [ 967.326836][T24254] [ 967.326845][T24254] dump_stack_lvl+0xe8/0x150 [ 967.326876][T24254] __get_user_pages+0x2465/0x29f0 [ 967.326902][T24254] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 967.326936][T24254] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 967.326982][T24254] ? rcu_is_watching+0x15/0xb0 [ 967.327011][T24254] __gup_longterm_locked+0xde4/0x1660 [ 967.327062][T24254] gup_fast_fallback+0x1d26/0x2290 [ 967.327121][T24254] ? __pfx_gup_fast_fallback+0x10/0x10 [ 967.327151][T24254] ? is_valid_gup_args+0x11f/0x200 [ 967.327178][T24254] ? get_user_pages_fast+0x4d/0xb0 [ 967.327204][T24254] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 967.327233][T24254] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 967.327258][T24254] ? wait_for_space+0x248/0x2d0 [ 967.327316][T24254] iov_iter_get_pages2+0x5e/0xa0 [ 967.327344][T24254] __se_sys_vmsplice+0x548/0x10d0 [ 967.327387][T24254] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 967.327417][T24254] ? __pfx_futex_wake+0x10/0x10 [ 967.327444][T24254] ? restore_signal_shadow_stack+0x3b7/0x480 [ 967.327474][T24254] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 967.327559][T24254] do_syscall_64+0xec/0xf80 [ 967.327583][T24254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.327601][T24254] ? trace_irq_disable+0x37/0x100 [ 967.327627][T24254] ? clear_bhb_loop+0x60/0xb0 [ 967.327651][T24254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.327671][T24254] RIP: 0033:0x7f3cc1b8f749 [ 967.327690][T24254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.327706][T24254] RSP: 002b:00007f3cc29e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 967.327726][T24254] RAX: ffffffffffffffda RBX: 00007f3cc1de5fa0 RCX: 00007f3cc1b8f749 [ 967.327741][T24254] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 967.327753][T24254] RBP: 00007f3cc1c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 967.327766][T24254] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 967.327790][T24254] R13: 00007f3cc1de6038 R14: 00007f3cc1de5fa0 R15: 00007ffd256015c8 [ 967.327821][T24254] [ 967.667369][T24263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4688'. [ 967.677170][T24263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4688'. [ 967.775458][T24267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4689'. [ 967.874434][T24270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4690'. [ 967.908991][T24272] netlink: 'syz.1.4691': attribute type 33 has an invalid length. [ 967.915318][T24273] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 967.929476][T24272] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4691'. [ 968.042678][T24280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4691'. [ 968.133125][T24282] netlink: 'syz.3.4695': attribute type 83 has an invalid length. [ 968.143146][T24283] x_tables: duplicate underflow at hook 3 [ 968.172319][T24288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4696'. [ 968.205347][T24282] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20001 [ 968.269111][T24282] netlink: 'syz.3.4695': attribute type 1 has an invalid length. [ 968.484201][T24275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 968.536978][T24275] team0: Port device bond2 added [ 968.551932][T24301] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 968.560015][T24301] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 968.626358][T24301] macsec1: entered promiscuous mode [ 968.646818][T24301] macsec1: entered allmulticast mode [ 969.153980][T24326] tipc: Enabled bearer , priority 0 [ 969.169630][T24326] syzkaller0: entered promiscuous mode [ 969.211444][T24326] syzkaller0: entered allmulticast mode [ 969.246795][T24326] tipc: Resetting bearer [ 969.334503][T24324] tipc: Resetting bearer [ 969.379270][T24324] tipc: Disabling bearer [ 969.617477][T24335] FAULT_INJECTION: forcing a failure. [ 969.617477][T24335] name failslab, interval 1, probability 0, space 0, times 1 [ 969.691762][T24335] CPU: 1 UID: 0 PID: 24335 Comm: syz.3.4711 Not tainted syzkaller #0 PREEMPT(full) [ 969.691807][T24335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 969.691821][T24335] Call Trace: [ 969.691830][T24335] [ 969.691839][T24335] dump_stack_lvl+0xe8/0x150 [ 969.691873][T24335] should_fail_ex+0x414/0x560 [ 969.691914][T24335] should_failslab+0xa8/0x100 [ 969.691942][T24335] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 969.691977][T24335] ? __alloc_skb+0x198/0x3a0 [ 969.691999][T24335] ? __alloc_skb+0x1dc/0x3a0 [ 969.692018][T24335] ? __local_bh_enable_ip+0xd0/0x130 [ 969.692060][T24335] ? __alloc_skb+0x198/0x3a0 [ 969.692092][T24335] __alloc_skb+0x1dc/0x3a0 [ 969.692120][T24335] netlink_sendmsg+0x5c6/0xb30 [ 969.692160][T24335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 969.692193][T24335] ? aa_sock_msg_perm+0xf1/0x1b0 [ 969.692224][T24335] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 969.692245][T24335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 969.692274][T24335] __sock_sendmsg+0x21c/0x270 [ 969.692310][T24335] ____sys_sendmsg+0x505/0x820 [ 969.692344][T24335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 969.692381][T24335] ? import_iovec+0x74/0xa0 [ 969.692412][T24335] ___sys_sendmsg+0x21f/0x2a0 [ 969.692442][T24335] ? __pfx____sys_sendmsg+0x10/0x10 [ 969.692509][T24335] ? __fget_files+0x2a/0x420 [ 969.692536][T24335] ? __fget_files+0x3a0/0x420 [ 969.692575][T24335] __x64_sys_sendmsg+0x19b/0x260 [ 969.692605][T24335] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 969.692643][T24335] ? __pfx_ksys_write+0x10/0x10 [ 969.692678][T24335] do_syscall_64+0xec/0xf80 [ 969.692701][T24335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.692721][T24335] ? trace_irq_disable+0x37/0x100 [ 969.692750][T24335] ? clear_bhb_loop+0x60/0xb0 [ 969.692777][T24335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.692799][T24335] RIP: 0033:0x7f394fd8f749 [ 969.692818][T24335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 969.692837][T24335] RSP: 002b:00007f3950cf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 969.692861][T24335] RAX: ffffffffffffffda RBX: 00007f394ffe5fa0 RCX: 00007f394fd8f749 [ 969.692878][T24335] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000003 [ 969.692892][T24335] RBP: 00007f3950cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 969.692906][T24335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.692919][T24335] R13: 00007f394ffe6038 R14: 00007f394ffe5fa0 R15: 00007ffc1ba0adf8 [ 969.692957][T24335] [ 971.084762][T24370] BUG: Bad page state in process syz.4.4723 pfn:5459e [ 971.091740][T24370] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805459ef00 pfn:0x5459e [ 971.101902][T24370] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 971.109102][T24370] raw: 00fff00000000000 dead000000000040 ffff88801fafb000 0000000000000000 [ 971.117870][T24370] raw: ffff88805459ef00 3ffffffffffffffc 00000000ffffffff 0000000000000000 [ 971.126534][T24370] page dumped because: page_pool leak [ 971.131978][T24370] page_owner tracks the page as allocated [ 971.138091][T24370] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 23, tgid 23 (ksoftirqd/1), ts 451971177213, free_ts 451940911668 [ 971.154958][T24370] post_alloc_hook+0x234/0x290 [ 971.159793][T24370] get_page_from_freelist+0x24e0/0x2580 [ 971.165436][T24370] __alloc_frozen_pages_noprof+0x181/0x370 [ 971.171330][T24370] alloc_pages_bulk_noprof+0x560/0x710 [ 971.176846][T24370] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 971.183093][T24370] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 971.188971][T24370] skb_pp_cow_data+0x285/0x13e0 [ 971.193903][T24370] do_xdp_generic+0x699/0x1190 [ 971.198723][T24370] __netif_receive_skb_core+0x10b6/0x2f90 [ 971.204574][T24370] __netif_receive_skb+0x72/0x380 [ 971.209662][T24370] process_backlog+0x54f/0x1340 [ 971.214607][T24370] __napi_poll+0xae/0x320 [ 971.218980][T24370] net_rx_action+0x64a/0xe00 [ 971.223646][T24370] handle_softirqs+0x22b/0x7c0 [ 971.228457][T24370] run_ksoftirqd+0x36/0x60 [ 971.232974][T24370] smpboot_thread_fn+0x542/0xa60 [ 971.237960][T24370] page last free pid 12048 tgid 12047 stack trace: [ 971.244529][T24370] __free_frozen_pages+0xbc8/0xd30 [ 971.249690][T24370] __kasan_populate_vmalloc+0x137/0x1d0 [ 971.255307][T24370] alloc_vmap_area+0xdc4/0x14e0 [ 971.260217][T24370] __get_vm_area_node+0x1f8/0x300 [ 971.265327][T24370] __vmalloc_node_range_noprof+0x371/0x16a0 [ 971.271304][T24370] vmalloc_noprof+0xb2/0xf0 [ 971.275849][T24370] bpf_prog_calc_tag+0x4c/0x370 [ 971.280793][T24370] bpf_check+0x17582/0x1c300 [ 971.285430][T24370] bpf_prog_load+0x13ba/0x1a10 [ 971.290253][T24370] __sys_bpf+0x507/0x860 [ 971.294593][T24370] __x64_sys_bpf+0x7c/0x90 [ 971.299061][T24370] do_syscall_64+0xec/0xf80 [ 971.303639][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.309608][T24370] Modules linked in: [ 971.313591][T24370] CPU: 1 UID: 0 PID: 24370 Comm: syz.4.4723 Not tainted syzkaller #0 PREEMPT(full) [ 971.313621][T24370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 971.313636][T24370] Call Trace: [ 971.313646][T24370] [ 971.313656][T24370] dump_stack_lvl+0xe8/0x150 [ 971.313690][T24370] bad_page+0x180/0x1c0 [ 971.313724][T24370] __free_frozen_pages+0xce6/0xd30 [ 971.313759][T24370] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 971.313808][T24370] ? lockdep_hardirqs_on+0x7b/0x110 [ 971.313840][T24370] bpf_xdp_adjust_tail+0x1d6/0x220 [ 971.313876][T24370] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 971.313898][T24370] bpf_prog_run_generic_xdp+0x665/0x14c0 [ 971.313965][T24370] do_xdp_generic+0x9f7/0x1190 [ 971.314013][T24370] ? __pfx_do_xdp_generic+0x10/0x10 [ 971.314059][T24370] ? tun_get_user+0x2331/0x3dc0 [ 971.314103][T24370] ? tun_get_user+0x2331/0x3dc0 [ 971.314133][T24370] tun_get_user+0x2465/0x3dc0 [ 971.314184][T24370] ? aa_file_perm+0x44c/0x1530 [ 971.314214][T24370] ? __pfx_tun_get_user+0x10/0x10 [ 971.314253][T24370] ? __lock_acquire+0x6b6/0x2cf0 [ 971.314281][T24370] ? __pfx___futex_wait+0x10/0x10 [ 971.314327][T24370] ? ref_tracker_alloc+0x318/0x460 [ 971.314353][T24370] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 971.314377][T24370] ? tun_get+0x1c/0x2f0 [ 971.314404][T24370] ? tun_get+0x1c/0x2f0 [ 971.314438][T24370] ? tun_get+0x1c/0x2f0 [ 971.314464][T24370] ? tun_get+0x1c/0x2f0 [ 971.314495][T24370] tun_chr_write_iter+0x113/0x200 [ 971.314525][T24370] vfs_write+0x5c9/0xb30 [ 971.314554][T24370] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 971.314584][T24370] ? __pfx_vfs_write+0x10/0x10 [ 971.314625][T24370] ? __fget_files+0x2a/0x420 [ 971.314666][T24370] ksys_write+0x145/0x250 [ 971.314692][T24370] ? __pfx_ksys_write+0x10/0x10 [ 971.314728][T24370] do_syscall_64+0xec/0xf80 [ 971.314752][T24370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.314774][T24370] ? trace_irq_disable+0x37/0x100 [ 971.314805][T24370] ? clear_bhb_loop+0x60/0xb0 [ 971.314833][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.314856][T24370] RIP: 0033:0x7f7191b8e1ff [ 971.314876][T24370] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 971.314896][T24370] RSP: 002b:00007f7192a69000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 971.314919][T24370] RAX: ffffffffffffffda RBX: 00007f7191de5fa0 RCX: 00007f7191b8e1ff [ 971.314936][T24370] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 971.314951][T24370] RBP: 00007f7191c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 971.314965][T24370] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000 [ 971.314979][T24370] R13: 00007f7191de6038 R14: 00007f7191de5fa0 R15: 00007ffe8b959b58 [ 971.315016][T24370] [ 971.315025][T24370] Disabling lock debugging due to kernel taint [ 971.595555][T24370] BUG: Bad page state in process syz.4.4723 pfn:9e468 [ 971.602474][T24370] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x9e468 [ 971.611341][T24370] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 971.618505][T24370] raw: 00fff00000000000 dead000000000040 ffff88801fafb000 0000000000000000 [ 971.627176][T24370] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 971.635857][T24370] page dumped because: page_pool leak [ 971.641285][T24370] page_owner tracks the page as allocated [ 971.647117][T24370] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 24370, tgid 24368 (syz.4.4723), ts 971084646052, free_ts 971012482895 [ 971.664486][T24370] post_alloc_hook+0x234/0x290 [ 971.669323][T24370] get_page_from_freelist+0x24e0/0x2580 [ 971.674948][T24370] __alloc_frozen_pages_noprof+0x181/0x370 [ 971.680844][T24370] alloc_pages_bulk_noprof+0x560/0x710 [ 971.686349][T24370] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 971.692505][T24370] skb_pp_cow_data+0xb47/0x13e0 [ 971.697399][T24370] do_xdp_generic+0x699/0x1190 [ 971.702242][T24370] tun_get_user+0x2465/0x3dc0 [ 971.706970][T24370] tun_chr_write_iter+0x113/0x200 [ 971.712071][T24370] vfs_write+0x5c9/0xb30 [ 971.716356][T24370] ksys_write+0x145/0x250 [ 971.720747][T24370] do_syscall_64+0xec/0xf80 [ 971.725294][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.731260][T24370] page last free pid 23 tgid 23 stack trace: [ 971.737366][T24370] __free_frozen_pages+0xbc8/0xd30 [ 971.742547][T24370] tlb_remove_table_rcu+0x85/0x100 [ 971.747702][T24370] rcu_core+0xc8e/0x1720 [ 971.752024][T24370] handle_softirqs+0x22b/0x7c0 [ 971.756844][T24370] run_ksoftirqd+0x36/0x60 [ 971.761418][T24370] smpboot_thread_fn+0x542/0xa60 [ 971.766403][T24370] kthread+0x711/0x8a0 [ 971.770536][T24370] ret_from_fork+0x510/0xa50 [ 971.775163][T24370] ret_from_fork_asm+0x1a/0x30 [ 971.779979][T24370] Modules linked in: [ 971.783932][T24370] CPU: 1 UID: 0 PID: 24370 Comm: syz.4.4723 Tainted: G B syzkaller #0 PREEMPT(full) [ 971.783966][T24370] Tainted: [B]=BAD_PAGE [ 971.783973][T24370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 971.783986][T24370] Call Trace: [ 971.783995][T24370] [ 971.784003][T24370] dump_stack_lvl+0xe8/0x150 [ 971.784033][T24370] bad_page+0x180/0x1c0 [ 971.784065][T24370] __free_frozen_pages+0xce6/0xd30 [ 971.784092][T24370] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 971.784153][T24370] ? lockdep_hardirqs_on+0x7b/0x110 [ 971.784180][T24370] bpf_xdp_adjust_tail+0x1d6/0x220 [ 971.784221][T24370] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 971.784241][T24370] bpf_prog_run_generic_xdp+0x665/0x14c0 [ 971.784292][T24370] do_xdp_generic+0x9f7/0x1190 [ 971.784332][T24370] ? __pfx_do_xdp_generic+0x10/0x10 [ 971.784373][T24370] ? tun_get_user+0x2331/0x3dc0 [ 971.784409][T24370] ? tun_get_user+0x2331/0x3dc0 [ 971.784437][T24370] tun_get_user+0x2465/0x3dc0 [ 971.784477][T24370] ? aa_file_perm+0x44c/0x1530 [ 971.784509][T24370] ? __pfx_tun_get_user+0x10/0x10 [ 971.784538][T24370] ? __lock_acquire+0x6b6/0x2cf0 [ 971.784563][T24370] ? __pfx___futex_wait+0x10/0x10 [ 971.784603][T24370] ? ref_tracker_alloc+0x318/0x460 [ 971.784628][T24370] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 971.784651][T24370] ? tun_get+0x1c/0x2f0 [ 971.784677][T24370] ? tun_get+0x1c/0x2f0 [ 971.784706][T24370] ? tun_get+0x1c/0x2f0 [ 971.784732][T24370] ? tun_get+0x1c/0x2f0 [ 971.784761][T24370] tun_chr_write_iter+0x113/0x200 [ 971.784789][T24370] vfs_write+0x5c9/0xb30 [ 971.784814][T24370] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 971.784841][T24370] ? __pfx_vfs_write+0x10/0x10 [ 971.784869][T24370] ? __fget_files+0x2a/0x420 [ 971.784903][T24370] ksys_write+0x145/0x250 [ 971.784926][T24370] ? __pfx_ksys_write+0x10/0x10 [ 971.784955][T24370] do_syscall_64+0xec/0xf80 [ 971.784979][T24370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.785001][T24370] ? trace_irq_disable+0x37/0x100 [ 971.785033][T24370] ? clear_bhb_loop+0x60/0xb0 [ 971.785058][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.785080][T24370] RIP: 0033:0x7f7191b8e1ff [ 971.785098][T24370] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 971.785119][T24370] RSP: 002b:00007f7192a69000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 971.785142][T24370] RAX: ffffffffffffffda RBX: 00007f7191de5fa0 RCX: 00007f7191b8e1ff [ 971.785159][T24370] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 971.785174][T24370] RBP: 00007f7191c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 971.785188][T24370] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000 [ 971.785210][T24370] R13: 00007f7191de6038 R14: 00007f7191de5fa0 R15: 00007ffe8b959b58 [ 971.785237][T24370] [ 971.785250][T24370] BUG: Bad page state in process syz.4.4723 pfn:9e467 [ 972.072400][T24370] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x9e467 [ 972.081318][T24370] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 972.088566][T24370] raw: 00fff00000000000 dead000000000040 ffff88801fafb000 0000000000000000 [ 972.097229][T24370] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 972.105933][T24370] page dumped because: page_pool leak [ 972.111375][T24370] page_owner tracks the page as allocated [ 972.117134][T24370] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 24370, tgid 24368 (syz.4.4723), ts 971084627837, free_ts 971012507592 [ 972.134424][T24370] post_alloc_hook+0x234/0x290 [ 972.139234][T24370] get_page_from_freelist+0x24e0/0x2580 [ 972.144852][T24370] __alloc_frozen_pages_noprof+0x181/0x370 [ 972.150759][T24370] alloc_pages_bulk_noprof+0x560/0x710 [ 972.156277][T24370] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 972.162427][T24370] skb_pp_cow_data+0xb47/0x13e0 [ 972.167311][T24370] do_xdp_generic+0x699/0x1190 [ 972.172160][T24370] tun_get_user+0x2465/0x3dc0 [ 972.176885][T24370] tun_chr_write_iter+0x113/0x200 [ 972.182024][T24370] vfs_write+0x5c9/0xb30 [ 972.186301][T24370] ksys_write+0x145/0x250 [ 972.190695][T24370] do_syscall_64+0xec/0xf80 [ 972.195238][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.201223][T24370] page last free pid 23 tgid 23 stack trace: [ 972.207240][T24370] __free_frozen_pages+0xbc8/0xd30 [ 972.212422][T24370] tlb_remove_table_rcu+0x85/0x100 [ 972.217567][T24370] rcu_core+0xc8e/0x1720 [ 972.221875][T24370] handle_softirqs+0x22b/0x7c0 [ 972.226692][T24370] run_ksoftirqd+0x36/0x60 [ 972.231183][T24370] smpboot_thread_fn+0x542/0xa60 [ 972.236167][T24370] kthread+0x711/0x8a0 [ 972.240276][T24370] ret_from_fork+0x510/0xa50 [ 972.244936][T24370] ret_from_fork_asm+0x1a/0x30 [ 972.249745][T24370] Modules linked in: [ 972.253695][T24370] CPU: 1 UID: 0 PID: 24370 Comm: syz.4.4723 Tainted: G B syzkaller #0 PREEMPT(full) [ 972.253727][T24370] Tainted: [B]=BAD_PAGE [ 972.253735][T24370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 972.253748][T24370] Call Trace: [ 972.253756][T24370] [ 972.253765][T24370] dump_stack_lvl+0xe8/0x150 [ 972.253796][T24370] bad_page+0x180/0x1c0 [ 972.253826][T24370] __free_frozen_pages+0xce6/0xd30 [ 972.253853][T24370] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 972.253894][T24370] ? lockdep_hardirqs_on+0x7b/0x110 [ 972.253920][T24370] bpf_xdp_adjust_tail+0x1d6/0x220 [ 972.253950][T24370] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 972.253969][T24370] bpf_prog_run_generic_xdp+0x665/0x14c0 [ 972.254017][T24370] do_xdp_generic+0x9f7/0x1190 [ 972.254054][T24370] ? __pfx_do_xdp_generic+0x10/0x10 [ 972.254091][T24370] ? tun_get_user+0x2331/0x3dc0 [ 972.254126][T24370] ? tun_get_user+0x2331/0x3dc0 [ 972.254160][T24370] tun_get_user+0x2465/0x3dc0 [ 972.254197][T24370] ? aa_file_perm+0x44c/0x1530 [ 972.254228][T24370] ? __pfx_tun_get_user+0x10/0x10 [ 972.254255][T24370] ? __lock_acquire+0x6b6/0x2cf0 [ 972.254279][T24370] ? __pfx___futex_wait+0x10/0x10 [ 972.254312][T24370] ? ref_tracker_alloc+0x318/0x460 [ 972.254335][T24370] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 972.254357][T24370] ? tun_get+0x1c/0x2f0 [ 972.254383][T24370] ? tun_get+0x1c/0x2f0 [ 972.254411][T24370] ? tun_get+0x1c/0x2f0 [ 972.254435][T24370] ? tun_get+0x1c/0x2f0 [ 972.254464][T24370] tun_chr_write_iter+0x113/0x200 [ 972.254491][T24370] vfs_write+0x5c9/0xb30 [ 972.254514][T24370] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 972.254540][T24370] ? __pfx_vfs_write+0x10/0x10 [ 972.254566][T24370] ? __fget_files+0x2a/0x420 [ 972.254605][T24370] ksys_write+0x145/0x250 [ 972.254644][T24370] ? __pfx_ksys_write+0x10/0x10 [ 972.254673][T24370] do_syscall_64+0xec/0xf80 [ 972.254695][T24370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.254717][T24370] ? trace_irq_disable+0x37/0x100 [ 972.254748][T24370] ? clear_bhb_loop+0x60/0xb0 [ 972.254774][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.254796][T24370] RIP: 0033:0x7f7191b8e1ff [ 972.254815][T24370] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 972.254834][T24370] RSP: 002b:00007f7192a69000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 972.254858][T24370] RAX: ffffffffffffffda RBX: 00007f7191de5fa0 RCX: 00007f7191b8e1ff [ 972.254875][T24370] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 972.254890][T24370] RBP: 00007f7191c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 972.254905][T24370] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000 [ 972.254919][T24370] R13: 00007f7191de6038 R14: 00007f7191de5fa0 R15: 00007ffe8b959b58 [ 972.254947][T24370] [ 972.254959][T24370] BUG: Bad page state in process syz.4.4723 pfn:531ca [ 972.541711][T24370] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880531ca2a0 pfn:0x531ca [ 972.551847][T24370] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 972.559008][T24370] raw: 00fff00000000000 dead000000000040 ffff88801fafb000 0000000000000000 [ 972.567677][T24370] raw: ffff8880531ca2a0 0000000000000001 00000000ffffffff 0000000000000000 [ 972.576411][T24370] page dumped because: page_pool leak [ 972.581836][T24370] page_owner tracks the page as allocated [ 972.587580][T24370] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 24370, tgid 24368 (syz.4.4723), ts 971084609435, free_ts 971012533129 [ 972.604839][T24370] post_alloc_hook+0x234/0x290 [ 972.609651][T24370] get_page_from_freelist+0x24e0/0x2580 [ 972.615273][T24370] __alloc_frozen_pages_noprof+0x181/0x370 [ 972.621168][T24370] alloc_pages_bulk_noprof+0x560/0x710 [ 972.626671][T24370] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 972.632817][T24370] skb_pp_cow_data+0xb47/0x13e0 [ 972.637707][T24370] do_xdp_generic+0x699/0x1190 [ 972.642595][T24370] tun_get_user+0x2465/0x3dc0 [ 972.647310][T24370] tun_chr_write_iter+0x113/0x200 [ 972.652402][T24370] vfs_write+0x5c9/0xb30 [ 972.656677][T24370] ksys_write+0x145/0x250 [ 972.661064][T24370] do_syscall_64+0xec/0xf80 [ 972.665605][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.671564][T24370] page last free pid 23 tgid 23 stack trace: [ 972.677571][T24370] __free_frozen_pages+0xbc8/0xd30 [ 972.682738][T24370] tlb_remove_table_rcu+0x85/0x100 [ 972.687887][T24370] rcu_core+0xc8e/0x1720 [ 972.692195][T24370] handle_softirqs+0x22b/0x7c0 [ 972.696990][T24370] run_ksoftirqd+0x36/0x60 [ 972.701465][T24370] smpboot_thread_fn+0x542/0xa60 [ 972.706441][T24370] kthread+0x711/0x8a0 [ 972.710571][T24370] ret_from_fork+0x510/0xa50 [ 972.715187][T24370] ret_from_fork_asm+0x1a/0x30 [ 972.719992][T24370] Modules linked in: [ 972.723962][T24370] CPU: 1 UID: 0 PID: 24370 Comm: syz.4.4723 Tainted: G B syzkaller #0 PREEMPT(full) [ 972.723995][T24370] Tainted: [B]=BAD_PAGE [ 972.724004][T24370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 972.724019][T24370] Call Trace: [ 972.724028][T24370] [ 972.724037][T24370] dump_stack_lvl+0xe8/0x150 [ 972.724068][T24370] bad_page+0x180/0x1c0 [ 972.724100][T24370] __free_frozen_pages+0xce6/0xd30 [ 972.724135][T24370] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 972.724177][T24370] ? lockdep_hardirqs_on+0x7b/0x110 [ 972.724204][T24370] bpf_xdp_adjust_tail+0x1d6/0x220 [ 972.724234][T24370] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 972.724256][T24370] bpf_prog_run_generic_xdp+0x665/0x14c0 [ 972.724306][T24370] do_xdp_generic+0x9f7/0x1190 [ 972.724345][T24370] ? __pfx_do_xdp_generic+0x10/0x10 [ 972.724384][T24370] ? tun_get_user+0x2331/0x3dc0 [ 972.724419][T24370] ? tun_get_user+0x2331/0x3dc0 [ 972.724448][T24370] tun_get_user+0x2465/0x3dc0 [ 972.724486][T24370] ? aa_file_perm+0x44c/0x1530 [ 972.724518][T24370] ? __pfx_tun_get_user+0x10/0x10 [ 972.724546][T24370] ? __lock_acquire+0x6b6/0x2cf0 [ 972.724572][T24370] ? __pfx___futex_wait+0x10/0x10 [ 972.724606][T24370] ? ref_tracker_alloc+0x318/0x460 [ 972.724631][T24370] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 972.724654][T24370] ? tun_get+0x1c/0x2f0 [ 972.724679][T24370] ? tun_get+0x1c/0x2f0 [ 972.724708][T24370] ? tun_get+0x1c/0x2f0 [ 972.724733][T24370] ? tun_get+0x1c/0x2f0 [ 972.724762][T24370] tun_chr_write_iter+0x113/0x200 [ 972.724791][T24370] vfs_write+0x5c9/0xb30 [ 972.724815][T24370] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 972.724842][T24370] ? __pfx_vfs_write+0x10/0x10 [ 972.724869][T24370] ? __fget_files+0x2a/0x420 [ 972.724902][T24370] ksys_write+0x145/0x250 [ 972.724925][T24370] ? __pfx_ksys_write+0x10/0x10 [ 972.724952][T24370] do_syscall_64+0xec/0xf80 [ 972.724975][T24370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.724996][T24370] ? trace_irq_disable+0x37/0x100 [ 972.725027][T24370] ? clear_bhb_loop+0x60/0xb0 [ 972.725052][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.725074][T24370] RIP: 0033:0x7f7191b8e1ff [ 972.725093][T24370] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 972.725119][T24370] RSP: 002b:00007f7192a69000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 972.725143][T24370] RAX: ffffffffffffffda RBX: 00007f7191de5fa0 RCX: 00007f7191b8e1ff [ 972.725160][T24370] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 972.725176][T24370] RBP: 00007f7191c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 972.725190][T24370] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000 [ 972.725203][T24370] R13: 00007f7191de6038 R14: 00007f7191de5fa0 R15: 00007ffe8b959b58 [ 972.725231][T24370] [ 972.725243][T24370] BUG: Bad page state in process syz.4.4723 pfn:48f7c [ 973.012117][T24370] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888048f7cdc0 pfn:0x48f7c [ 973.022242][T24370] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 973.029403][T24370] raw: 00fff00000000000 dead000000000040 ffff88801fafb000 0000000000000000 [ 973.038049][T24370] raw: ffff888048f7cdc0 0000000000000001 00000000ffffffff 0000000000000000 [ 973.046689][T24370] page dumped because: page_pool leak [ 973.052118][T24370] page_owner tracks the page as allocated [ 973.057951][T24370] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 24370, tgid 24368 (syz.4.4723), ts 971084584513, free_ts 971012558266 [ 973.075222][T24370] post_alloc_hook+0x234/0x290 [ 973.080029][T24370] get_page_from_freelist+0x24e0/0x2580 [ 973.085634][T24370] __alloc_frozen_pages_noprof+0x181/0x370 [ 973.091548][T24370] alloc_pages_bulk_noprof+0x560/0x710 [ 973.097050][T24370] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 973.103228][T24370] skb_pp_cow_data+0xb47/0x13e0 [ 973.108127][T24370] do_xdp_generic+0x699/0x1190 [ 973.112996][T24370] tun_get_user+0x2465/0x3dc0 [ 973.117733][T24370] tun_chr_write_iter+0x113/0x200 [ 973.122828][T24370] vfs_write+0x5c9/0xb30 [ 973.127112][T24370] ksys_write+0x145/0x250 [ 973.131508][T24370] do_syscall_64+0xec/0xf80 [ 973.136049][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.142025][T24370] page last free pid 23 tgid 23 stack trace: [ 973.148034][T24370] __free_frozen_pages+0xbc8/0xd30 [ 973.153213][T24370] tlb_remove_table_rcu+0x85/0x100 [ 973.158366][T24370] rcu_core+0xc8e/0x1720 [ 973.162674][T24370] handle_softirqs+0x22b/0x7c0 [ 973.167483][T24370] run_ksoftirqd+0x36/0x60 [ 973.171965][T24370] smpboot_thread_fn+0x542/0xa60 [ 973.176942][T24370] kthread+0x711/0x8a0 [ 973.181072][T24370] ret_from_fork+0x510/0xa50 [ 973.185696][T24370] ret_from_fork_asm+0x1a/0x30 [ 973.190552][T24370] Modules linked in: [ 973.194509][T24370] CPU: 1 UID: 0 PID: 24370 Comm: syz.4.4723 Tainted: G B syzkaller #0 PREEMPT(full) [ 973.194549][T24370] Tainted: [B]=BAD_PAGE [ 973.194558][T24370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 973.194574][T24370] Call Trace: [ 973.194584][T24370] [ 973.194594][T24370] dump_stack_lvl+0xe8/0x150 [ 973.194630][T24370] bad_page+0x180/0x1c0 [ 973.194664][T24370] __free_frozen_pages+0xce6/0xd30 [ 973.194696][T24370] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 973.194743][T24370] ? lockdep_hardirqs_on+0x7b/0x110 [ 973.194773][T24370] bpf_xdp_adjust_tail+0x1d6/0x220 [ 973.194820][T24370] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 973.194842][T24370] bpf_prog_run_generic_xdp+0x665/0x14c0 [ 973.194898][T24370] do_xdp_generic+0x9f7/0x1190 [ 973.194943][T24370] ? __pfx_do_xdp_generic+0x10/0x10 [ 973.194985][T24370] ? tun_get_user+0x2331/0x3dc0 [ 973.195025][T24370] ? tun_get_user+0x2331/0x3dc0 [ 973.195124][T24370] tun_get_user+0x2465/0x3dc0 [ 973.195165][T24370] ? aa_file_perm+0x44c/0x1530 [ 973.195196][T24370] ? __pfx_tun_get_user+0x10/0x10 [ 973.195231][T24370] ? __lock_acquire+0x6b6/0x2cf0 [ 973.195256][T24370] ? __pfx___futex_wait+0x10/0x10 [ 973.195290][T24370] ? ref_tracker_alloc+0x318/0x460 [ 973.195313][T24370] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 973.195335][T24370] ? tun_get+0x1c/0x2f0 [ 973.195362][T24370] ? tun_get+0x1c/0x2f0 [ 973.195391][T24370] ? tun_get+0x1c/0x2f0 [ 973.195421][T24370] ? tun_get+0x1c/0x2f0 [ 973.195450][T24370] tun_chr_write_iter+0x113/0x200 [ 973.195483][T24370] vfs_write+0x5c9/0xb30 [ 973.195507][T24370] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 973.195535][T24370] ? __pfx_vfs_write+0x10/0x10 [ 973.195561][T24370] ? __fget_files+0x2a/0x420 [ 973.195595][T24370] ksys_write+0x145/0x250 [ 973.195617][T24370] ? __pfx_ksys_write+0x10/0x10 [ 973.195645][T24370] do_syscall_64+0xec/0xf80 [ 973.195669][T24370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.195690][T24370] ? trace_irq_disable+0x37/0x100 [ 973.195721][T24370] ? clear_bhb_loop+0x60/0xb0 [ 973.195747][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.195770][T24370] RIP: 0033:0x7f7191b8e1ff [ 973.195789][T24370] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 973.195809][T24370] RSP: 002b:00007f7192a69000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 973.195833][T24370] RAX: ffffffffffffffda RBX: 00007f7191de5fa0 RCX: 00007f7191b8e1ff [ 973.195851][T24370] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 973.195865][T24370] RBP: 00007f7191c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 973.195880][T24370] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000 [ 973.195894][T24370] R13: 00007f7191de6038 R14: 00007f7191de5fa0 R15: 00007ffe8b959b58 [ 973.195921][T24370] [ 973.195935][T24370] BUG: Bad page state in process syz.4.4723 pfn:53838 [ 973.482808][T24370] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888053838dc0 pfn:0x53838 [ 973.492956][T24370] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 973.500118][T24370] raw: 00fff00000000000 dead000000000040 ffff88801fafb000 0000000000000000 [ 973.508798][T24370] raw: ffff888053838dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 973.517438][T24370] page dumped because: page_pool leak [ 973.522867][T24370] page_owner tracks the page as allocated [ 973.528608][T24370] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 24370, tgid 24368 (syz.4.4723), ts 971084566383, free_ts 971012585300 [ 973.545874][T24370] post_alloc_hook+0x234/0x290 [ 973.550708][T24370] get_page_from_freelist+0x24e0/0x2580 [ 973.556296][T24370] __alloc_frozen_pages_noprof+0x181/0x370 [ 973.562175][T24370] alloc_pages_bulk_noprof+0x560/0x710 [ 973.567675][T24370] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 973.573828][T24370] skb_pp_cow_data+0xb47/0x13e0 [ 973.578717][T24370] do_xdp_generic+0x699/0x1190 [ 973.583548][T24370] tun_get_user+0x2465/0x3dc0 [ 973.588269][T24370] tun_chr_write_iter+0x113/0x200 [ 973.593356][T24370] vfs_write+0x5c9/0xb30 [ 973.597632][T24370] ksys_write+0x145/0x250 [ 973.602017][T24370] do_syscall_64+0xec/0xf80 [ 973.606558][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.612520][T24370] page last free pid 23 tgid 23 stack trace: [ 973.618533][T24370] __free_frozen_pages+0xbc8/0xd30 [ 973.623709][T24370] tlb_remove_table_rcu+0x85/0x100 [ 973.628860][T24370] rcu_core+0xc8e/0x1720 [ 973.633168][T24370] handle_softirqs+0x22b/0x7c0 [ 973.638059][T24370] run_ksoftirqd+0x36/0x60 [ 973.642539][T24370] smpboot_thread_fn+0x542/0xa60 [ 973.647512][T24370] kthread+0x711/0x8a0 [ 973.651647][T24370] ret_from_fork+0x510/0xa50 [ 973.656277][T24370] ret_from_fork_asm+0x1a/0x30 [ 973.661114][T24370] Modules linked in: [ 973.665054][T24370] CPU: 1 UID: 0 PID: 24370 Comm: syz.4.4723 Tainted: G B syzkaller #0 PREEMPT(full) [ 973.665088][T24370] Tainted: [B]=BAD_PAGE [ 973.665096][T24370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 973.665110][T24370] Call Trace: [ 973.665118][T24370] [ 973.665128][T24370] dump_stack_lvl+0xe8/0x150 [ 973.665160][T24370] bad_page+0x180/0x1c0 [ 973.665192][T24370] __free_frozen_pages+0xce6/0xd30 [ 973.665220][T24370] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 973.665262][T24370] ? lockdep_hardirqs_on+0x7b/0x110 [ 973.665290][T24370] bpf_xdp_adjust_tail+0x1d6/0x220 [ 973.665320][T24370] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 973.665341][T24370] bpf_prog_run_generic_xdp+0x665/0x14c0 [ 973.665393][T24370] do_xdp_generic+0x9f7/0x1190 [ 973.665432][T24370] ? __pfx_do_xdp_generic+0x10/0x10 [ 973.665472][T24370] ? tun_get_user+0x2331/0x3dc0 [ 973.665508][T24370] ? tun_get_user+0x2331/0x3dc0 [ 973.665535][T24370] tun_get_user+0x2465/0x3dc0 [ 973.665575][T24370] ? aa_file_perm+0x44c/0x1530 [ 973.665607][T24370] ? __pfx_tun_get_user+0x10/0x10 [ 973.665635][T24370] ? __lock_acquire+0x6b6/0x2cf0 [ 973.665661][T24370] ? __pfx___futex_wait+0x10/0x10 [ 973.665696][T24370] ? ref_tracker_alloc+0x318/0x460 [ 973.665719][T24370] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 973.665742][T24370] ? tun_get+0x1c/0x2f0 [ 973.665768][T24370] ? tun_get+0x1c/0x2f0 [ 973.665797][T24370] ? tun_get+0x1c/0x2f0 [ 973.665830][T24370] ? tun_get+0x1c/0x2f0 [ 973.665859][T24370] tun_chr_write_iter+0x113/0x200 [ 973.665887][T24370] vfs_write+0x5c9/0xb30 [ 973.665912][T24370] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 973.665938][T24370] ? __pfx_vfs_write+0x10/0x10 [ 973.665964][T24370] ? __fget_files+0x2a/0x420 [ 973.665997][T24370] ksys_write+0x145/0x250 [ 973.666019][T24370] ? __pfx_ksys_write+0x10/0x10 [ 973.666053][T24370] do_syscall_64+0xec/0xf80 [ 973.666078][T24370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.666099][T24370] ? trace_irq_disable+0x37/0x100 [ 973.666130][T24370] ? clear_bhb_loop+0x60/0xb0 [ 973.666156][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.666183][T24370] RIP: 0033:0x7f7191b8e1ff [ 973.666201][T24370] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 973.666220][T24370] RSP: 002b:00007f7192a69000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 973.666244][T24370] RAX: ffffffffffffffda RBX: 00007f7191de5fa0 RCX: 00007f7191b8e1ff [ 973.666261][T24370] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 973.666276][T24370] RBP: 00007f7191c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 973.666289][T24370] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000 [ 973.666303][T24370] R13: 00007f7191de6038 R14: 00007f7191de5fa0 R15: 00007ffe8b959b58 [ 973.666331][T24370] [ 973.666344][T24370] BUG: Bad page state in process syz.4.4723 pfn:30d73 [ 973.952894][T24370] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x30d73 [ 973.963027][T24370] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 973.970186][T24370] raw: 00fff00000000000 dead000000000040 ffff88801fafb000 0000000000000000 [ 973.978835][T24370] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 973.987473][T24370] page dumped because: page_pool leak [ 973.992895][T24370] page_owner tracks the page as allocated [ 973.998650][T24370] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 24370, tgid 24368 (syz.4.4723), ts 971084548164, free_ts 971012611442 [ 974.015917][T24370] post_alloc_hook+0x234/0x290 [ 974.020753][T24370] get_page_from_freelist+0x24e0/0x2580 [ 974.026349][T24370] __alloc_frozen_pages_noprof+0x181/0x370 [ 974.032227][T24370] alloc_pages_bulk_noprof+0x560/0x710 [ 974.037728][T24370] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 974.043881][T24370] skb_pp_cow_data+0xb47/0x13e0 [ 974.048785][T24370] do_xdp_generic+0x699/0x1190 [ 974.053621][T24370] tun_get_user+0x2465/0x3dc0 [ 974.058342][T24370] tun_chr_write_iter+0x113/0x200 [ 974.063439][T24370] vfs_write+0x5c9/0xb30 [ 974.067717][T24370] ksys_write+0x145/0x250 [ 974.072134][T24370] do_syscall_64+0xec/0xf80 [ 974.076820][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.082784][T24370] page last free pid 23 tgid 23 stack trace: [ 974.088799][T24370] __free_frozen_pages+0xbc8/0xd30 [ 974.094066][T24370] tlb_remove_table_rcu+0x85/0x100 [ 974.099224][T24370] rcu_core+0xc8e/0x1720 [ 974.103539][T24370] handle_softirqs+0x22b/0x7c0 [ 974.108339][T24370] run_ksoftirqd+0x36/0x60 [ 974.112824][T24370] smpboot_thread_fn+0x542/0xa60 [ 974.117806][T24370] kthread+0x711/0x8a0 [ 974.121945][T24370] ret_from_fork+0x510/0xa50 [ 974.126573][T24370] ret_from_fork_asm+0x1a/0x30 [ 974.131412][T24370] Modules linked in: [ 974.135361][T24370] CPU: 1 UID: 0 PID: 24370 Comm: syz.4.4723 Tainted: G B syzkaller #0 PREEMPT(full) [ 974.135395][T24370] Tainted: [B]=BAD_PAGE [ 974.135403][T24370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 974.135417][T24370] Call Trace: [ 974.135425][T24370] [ 974.135434][T24370] dump_stack_lvl+0xe8/0x150 [ 974.135465][T24370] bad_page+0x180/0x1c0 [ 974.135497][T24370] __free_frozen_pages+0xce6/0xd30 [ 974.135525][T24370] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 974.135566][T24370] ? lockdep_hardirqs_on+0x7b/0x110 [ 974.135594][T24370] bpf_xdp_adjust_tail+0x1d6/0x220 [ 974.135624][T24370] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 974.135644][T24370] bpf_prog_run_generic_xdp+0x665/0x14c0 [ 974.135694][T24370] do_xdp_generic+0x9f7/0x1190 [ 974.135740][T24370] ? __pfx_do_xdp_generic+0x10/0x10 [ 974.135781][T24370] ? tun_get_user+0x2331/0x3dc0 [ 974.135818][T24370] ? tun_get_user+0x2331/0x3dc0 [ 974.135846][T24370] tun_get_user+0x2465/0x3dc0 [ 974.135885][T24370] ? aa_file_perm+0x44c/0x1530 [ 974.135917][T24370] ? __pfx_tun_get_user+0x10/0x10 [ 974.135946][T24370] ? __lock_acquire+0x6b6/0x2cf0 [ 974.135982][T24370] ? __pfx___futex_wait+0x10/0x10 [ 974.136016][T24370] ? ref_tracker_alloc+0x318/0x460 [ 974.136039][T24370] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 974.136061][T24370] ? tun_get+0x1c/0x2f0 [ 974.136086][T24370] ? tun_get+0x1c/0x2f0 [ 974.136115][T24370] ? tun_get+0x1c/0x2f0 [ 974.136139][T24370] ? tun_get+0x1c/0x2f0 [ 974.136167][T24370] tun_chr_write_iter+0x113/0x200 [ 974.136195][T24370] vfs_write+0x5c9/0xb30 [ 974.136218][T24370] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 974.136245][T24370] ? __pfx_vfs_write+0x10/0x10 [ 974.136270][T24370] ? __fget_files+0x2a/0x420 [ 974.136304][T24370] ksys_write+0x145/0x250 [ 974.136326][T24370] ? __pfx_ksys_write+0x10/0x10 [ 974.136371][T24370] do_syscall_64+0xec/0xf80 [ 974.136394][T24370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.136416][T24370] ? trace_irq_disable+0x37/0x100 [ 974.136446][T24370] ? clear_bhb_loop+0x60/0xb0 [ 974.136473][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.136494][T24370] RIP: 0033:0x7f7191b8e1ff [ 974.136513][T24370] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 974.136538][T24370] RSP: 002b:00007f7192a69000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 974.136562][T24370] RAX: ffffffffffffffda RBX: 00007f7191de5fa0 RCX: 00007f7191b8e1ff [ 974.136580][T24370] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 974.136595][T24370] RBP: 00007f7191c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 974.136610][T24370] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000 [ 974.136624][T24370] R13: 00007f7191de6038 R14: 00007f7191de5fa0 R15: 00007ffe8b959b58 [ 974.136651][T24370] [ 974.136664][T24370] BUG: Bad page state in process syz.4.4723 pfn:4b0b1 [ 974.423307][T24370] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4b0b1 [ 974.433439][T24370] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 974.440619][T24370] raw: 00fff00000000000 dead000000000040 ffff88801fafb000 0000000000000000 [ 974.449239][T24370] raw: ffffffffffffffff 0000000000000001 00000000ffffffff 0000000000000000 [ 974.457876][T24370] page dumped because: page_pool leak [ 974.463298][T24370] page_owner tracks the page as allocated [ 974.469045][T24370] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 24370, tgid 24368 (syz.4.4723), ts 971084529797, free_ts 971012636883 [ 974.486358][T24370] post_alloc_hook+0x234/0x290 [ 974.491191][T24370] get_page_from_freelist+0x24e0/0x2580 [ 974.496786][T24370] __alloc_frozen_pages_noprof+0x181/0x370 [ 974.502654][T24370] alloc_pages_bulk_noprof+0x560/0x710 [ 974.508157][T24370] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 974.514300][T24370] skb_pp_cow_data+0xb47/0x13e0 [ 974.519193][T24370] do_xdp_generic+0x699/0x1190 [ 974.524027][T24370] tun_get_user+0x2465/0x3dc0 [ 974.528743][T24370] tun_chr_write_iter+0x113/0x200 [ 974.533839][T24370] vfs_write+0x5c9/0xb30 [ 974.538117][T24370] ksys_write+0x145/0x250 [ 974.542502][T24370] do_syscall_64+0xec/0xf80 [ 974.547038][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.552999][T24370] page last free pid 23 tgid 23 stack trace: [ 974.559004][T24370] __free_frozen_pages+0xbc8/0xd30 [ 974.564176][T24370] tlb_remove_table_rcu+0x85/0x100 [ 974.569360][T24370] rcu_core+0xc8e/0x1720 [ 974.573665][T24370] handle_softirqs+0x22b/0x7c0 [ 974.578468][T24370] run_ksoftirqd+0x36/0x60 [ 974.582956][T24370] smpboot_thread_fn+0x542/0xa60 [ 974.587931][T24370] kthread+0x711/0x8a0 [ 974.592059][T24370] ret_from_fork+0x510/0xa50 [ 974.596682][T24370] ret_from_fork_asm+0x1a/0x30 [ 974.601537][T24370] Modules linked in: [ 974.605470][T24370] CPU: 1 UID: 0 PID: 24370 Comm: syz.4.4723 Tainted: G B syzkaller #0 PREEMPT(full) [ 974.605504][T24370] Tainted: [B]=BAD_PAGE [ 974.605514][T24370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 974.605528][T24370] Call Trace: [ 974.605537][T24370] [ 974.605547][T24370] dump_stack_lvl+0xe8/0x150 [ 974.605578][T24370] bad_page+0x180/0x1c0 [ 974.605610][T24370] __free_frozen_pages+0xce6/0xd30 [ 974.605639][T24370] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 974.605681][T24370] ? lockdep_hardirqs_on+0x7b/0x110 [ 974.605709][T24370] bpf_xdp_adjust_tail+0x1d6/0x220 [ 974.605739][T24370] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 974.605768][T24370] bpf_prog_run_generic_xdp+0x665/0x14c0 [ 974.605820][T24370] do_xdp_generic+0x9f7/0x1190 [ 974.605860][T24370] ? __pfx_do_xdp_generic+0x10/0x10 [ 974.605900][T24370] ? tun_get_user+0x2331/0x3dc0 [ 974.605936][T24370] ? tun_get_user+0x2331/0x3dc0 [ 974.605965][T24370] tun_get_user+0x2465/0x3dc0 [ 974.606005][T24370] ? aa_file_perm+0x44c/0x1530 [ 974.606037][T24370] ? __pfx_tun_get_user+0x10/0x10 [ 974.606066][T24370] ? __lock_acquire+0x6b6/0x2cf0 [ 974.606092][T24370] ? __pfx___futex_wait+0x10/0x10 [ 974.606129][T24370] ? ref_tracker_alloc+0x318/0x460 [ 974.606153][T24370] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 974.606177][T24370] ? tun_get+0x1c/0x2f0 [ 974.606203][T24370] ? tun_get+0x1c/0x2f0 [ 974.606233][T24370] ? tun_get+0x1c/0x2f0 [ 974.606259][T24370] ? tun_get+0x1c/0x2f0 [ 974.606288][T24370] tun_chr_write_iter+0x113/0x200 [ 974.606318][T24370] vfs_write+0x5c9/0xb30 [ 974.606342][T24370] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 974.606370][T24370] ? __pfx_vfs_write+0x10/0x10 [ 974.606398][T24370] ? __fget_files+0x2a/0x420 [ 974.606433][T24370] ksys_write+0x145/0x250 [ 974.606456][T24370] ? __pfx_ksys_write+0x10/0x10 [ 974.606485][T24370] do_syscall_64+0xec/0xf80 [ 974.606508][T24370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.606530][T24370] ? trace_irq_disable+0x37/0x100 [ 974.606561][T24370] ? clear_bhb_loop+0x60/0xb0 [ 974.606589][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.606613][T24370] RIP: 0033:0x7f7191b8e1ff [ 974.606632][T24370] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 974.606652][T24370] RSP: 002b:00007f7192a69000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 974.606692][T24370] RAX: ffffffffffffffda RBX: 00007f7191de5fa0 RCX: 00007f7191b8e1ff [ 974.606710][T24370] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 974.606726][T24370] RBP: 00007f7191c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 974.606741][T24370] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000 [ 974.606761][T24370] R13: 00007f7191de6038 R14: 00007f7191de5fa0 R15: 00007ffe8b959b58 [ 974.606790][T24370] [ 974.606803][T24370] BUG: Bad page state in process syz.4.4723 pfn:28f7f [ 974.893641][T24370] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x28f7f [ 974.903765][T24370] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 974.910945][T24370] raw: 00fff00000000000 dead000000000040 ffff88801fafb000 0000000000000000 [ 974.919567][T24370] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 974.928212][T24370] page dumped because: page_pool leak [ 974.933642][T24370] page_owner tracks the page as allocated [ 974.939391][T24370] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 24370, tgid 24368 (syz.4.4723), ts 971084511687, free_ts 971012662368 [ 974.956647][T24370] post_alloc_hook+0x234/0x290 [ 974.961480][T24370] get_page_from_freelist+0x24e0/0x2580 [ 974.967061][T24370] __alloc_frozen_pages_noprof+0x181/0x370 [ 974.972972][T24370] alloc_pages_bulk_noprof+0x560/0x710 [ 974.978508][T24370] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 974.984659][T24370] skb_pp_cow_data+0xb47/0x13e0 [ 974.989547][T24370] do_xdp_generic+0x699/0x1190 [ 974.994373][T24370] tun_get_user+0x2465/0x3dc0 [ 974.999096][T24370] tun_chr_write_iter+0x113/0x200 [ 975.004180][T24370] vfs_write+0x5c9/0xb30 [ 975.008482][T24370] ksys_write+0x145/0x250 [ 975.012874][T24370] do_syscall_64+0xec/0xf80 [ 975.017413][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.023359][T24370] page last free pid 23 tgid 23 stack trace: [ 975.029367][T24370] __free_frozen_pages+0xbc8/0xd30 [ 975.034539][T24370] tlb_remove_table_rcu+0x85/0x100 [ 975.039692][T24370] rcu_core+0xc8e/0x1720 [ 975.044014][T24370] handle_softirqs+0x22b/0x7c0 [ 975.048815][T24370] run_ksoftirqd+0x36/0x60 [ 975.053295][T24370] smpboot_thread_fn+0x542/0xa60 [ 975.058273][T24370] kthread+0x711/0x8a0 [ 975.062409][T24370] ret_from_fork+0x510/0xa50 [ 975.067119][T24370] ret_from_fork_asm+0x1a/0x30 [ 975.071954][T24370] Modules linked in: [ 975.075892][T24370] CPU: 1 UID: 0 PID: 24370 Comm: syz.4.4723 Tainted: G B syzkaller #0 PREEMPT(full) [ 975.075926][T24370] Tainted: [B]=BAD_PAGE [ 975.075935][T24370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 975.075951][T24370] Call Trace: [ 975.075960][T24370] [ 975.075970][T24370] dump_stack_lvl+0xe8/0x150 [ 975.076001][T24370] bad_page+0x180/0x1c0 [ 975.076034][T24370] __free_frozen_pages+0xce6/0xd30 [ 975.076064][T24370] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 975.076106][T24370] ? lockdep_hardirqs_on+0x7b/0x110 [ 975.076134][T24370] bpf_xdp_adjust_tail+0x1d6/0x220 [ 975.076165][T24370] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 975.076187][T24370] bpf_prog_run_generic_xdp+0x665/0x14c0 [ 975.076238][T24370] do_xdp_generic+0x9f7/0x1190 [ 975.076276][T24370] ? __pfx_do_xdp_generic+0x10/0x10 [ 975.076316][T24370] ? tun_get_user+0x2331/0x3dc0 [ 975.076351][T24370] ? tun_get_user+0x2331/0x3dc0 [ 975.076380][T24370] tun_get_user+0x2465/0x3dc0 [ 975.076420][T24370] ? aa_file_perm+0x44c/0x1530 [ 975.076451][T24370] ? __pfx_tun_get_user+0x10/0x10 [ 975.076480][T24370] ? __lock_acquire+0x6b6/0x2cf0 [ 975.076506][T24370] ? __pfx___futex_wait+0x10/0x10 [ 975.076541][T24370] ? ref_tracker_alloc+0x318/0x460 [ 975.076566][T24370] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 975.076590][T24370] ? tun_get+0x1c/0x2f0 [ 975.076616][T24370] ? tun_get+0x1c/0x2f0 [ 975.076646][T24370] ? tun_get+0x1c/0x2f0 [ 975.076672][T24370] ? tun_get+0x1c/0x2f0 [ 975.076702][T24370] tun_chr_write_iter+0x113/0x200 [ 975.076738][T24370] vfs_write+0x5c9/0xb30 [ 975.076763][T24370] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 975.076791][T24370] ? __pfx_vfs_write+0x10/0x10 [ 975.076819][T24370] ? __fget_files+0x2a/0x420 [ 975.076853][T24370] ksys_write+0x145/0x250 [ 975.076877][T24370] ? __pfx_ksys_write+0x10/0x10 [ 975.076906][T24370] do_syscall_64+0xec/0xf80 [ 975.076929][T24370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.076952][T24370] ? trace_irq_disable+0x37/0x100 [ 975.076984][T24370] ? clear_bhb_loop+0x60/0xb0 [ 975.077010][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.077034][T24370] RIP: 0033:0x7f7191b8e1ff [ 975.077054][T24370] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 975.077075][T24370] RSP: 002b:00007f7192a69000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 975.077099][T24370] RAX: ffffffffffffffda RBX: 00007f7191de5fa0 RCX: 00007f7191b8e1ff [ 975.077130][T24370] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 975.077145][T24370] RBP: 00007f7191c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 975.077160][T24370] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000 [ 975.077174][T24370] R13: 00007f7191de6038 R14: 00007f7191de5fa0 R15: 00007ffe8b959b58 [ 975.077200][T24370] [ 975.077213][T24370] BUG: Bad page state in process syz.4.4723 pfn:3af31 [ 975.364335][T24370] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffff00000000 pfn:0x3af31 [ 975.374461][T24370] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 975.381636][T24370] raw: 00fff00000000000 dead000000000040 ffff88801fafb000 0000000000000000 [ 975.390271][T24370] raw: ffffffff00000000 0000000000000001 00000000ffffffff 0000000000000000 [ 975.398903][T24370] page dumped because: page_pool leak [ 975.404332][T24370] page_owner tracks the page as allocated [ 975.410077][T24370] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 24370, tgid 24368 (syz.4.4723), ts 971084493296, free_ts 971012685962 [ 975.427347][T24370] post_alloc_hook+0x234/0x290 [ 975.432173][T24370] get_page_from_freelist+0x24e0/0x2580 [ 975.437759][T24370] __alloc_frozen_pages_noprof+0x181/0x370 [ 975.443624][T24370] alloc_pages_bulk_noprof+0x560/0x710 [ 975.449140][T24370] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 975.455278][T24370] skb_pp_cow_data+0xb47/0x13e0 [ 975.460175][T24370] do_xdp_generic+0x699/0x1190 [ 975.465007][T24370] tun_get_user+0x2465/0x3dc0 [ 975.469722][T24370] tun_chr_write_iter+0x113/0x200 [ 975.474807][T24370] vfs_write+0x5c9/0xb30 [ 975.479083][T24370] ksys_write+0x145/0x250 [ 975.483482][T24370] do_syscall_64+0xec/0xf80 [ 975.488029][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.493983][T24370] page last free pid 23 tgid 23 stack trace: [ 975.499988][T24370] __free_frozen_pages+0xbc8/0xd30 [ 975.505160][T24370] tlb_remove_table_rcu+0x85/0x100 [ 975.510313][T24370] rcu_core+0xc8e/0x1720 [ 975.514678][T24370] handle_softirqs+0x22b/0x7c0 [ 975.519480][T24370] run_ksoftirqd+0x36/0x60 [ 975.523965][T24370] smpboot_thread_fn+0x542/0xa60 [ 975.528935][T24370] kthread+0x711/0x8a0 [ 975.533069][T24370] ret_from_fork+0x510/0xa50 [ 975.537704][T24370] ret_from_fork_asm+0x1a/0x30 [ 975.542553][T24370] Modules linked in: [ 975.546486][T24370] CPU: 1 UID: 0 PID: 24370 Comm: syz.4.4723 Tainted: G B syzkaller #0 PREEMPT(full) [ 975.546520][T24370] Tainted: [B]=BAD_PAGE [ 975.546529][T24370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 975.546544][T24370] Call Trace: [ 975.546553][T24370] [ 975.546564][T24370] dump_stack_lvl+0xe8/0x150 [ 975.546614][T24370] bad_page+0x180/0x1c0 [ 975.546647][T24370] __free_frozen_pages+0xce6/0xd30 [ 975.546682][T24370] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 975.546724][T24370] ? lockdep_hardirqs_on+0x7b/0x110 [ 975.546750][T24370] bpf_xdp_adjust_tail+0x1d6/0x220 [ 975.546782][T24370] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 975.546803][T24370] bpf_prog_run_generic_xdp+0x665/0x14c0 [ 975.546853][T24370] do_xdp_generic+0x9f7/0x1190 [ 975.546893][T24370] ? __pfx_do_xdp_generic+0x10/0x10 [ 975.546933][T24370] ? tun_get_user+0x2331/0x3dc0 [ 975.546970][T24370] ? tun_get_user+0x2331/0x3dc0 [ 975.546999][T24370] tun_get_user+0x2465/0x3dc0 [ 975.547038][T24370] ? aa_file_perm+0x44c/0x1530 [ 975.547072][T24370] ? __pfx_tun_get_user+0x10/0x10 [ 975.547101][T24370] ? __lock_acquire+0x6b6/0x2cf0 [ 975.547127][T24370] ? __pfx___futex_wait+0x10/0x10 [ 975.547162][T24370] ? ref_tracker_alloc+0x318/0x460 [ 975.547187][T24370] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 975.547211][T24370] ? tun_get+0x1c/0x2f0 [ 975.547237][T24370] ? tun_get+0x1c/0x2f0 [ 975.547268][T24370] ? tun_get+0x1c/0x2f0 [ 975.547294][T24370] ? tun_get+0x1c/0x2f0 [ 975.547323][T24370] tun_chr_write_iter+0x113/0x200 [ 975.547353][T24370] vfs_write+0x5c9/0xb30 [ 975.547377][T24370] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 975.547406][T24370] ? __pfx_vfs_write+0x10/0x10 [ 975.547433][T24370] ? __fget_files+0x2a/0x420 [ 975.547468][T24370] ksys_write+0x145/0x250 [ 975.547492][T24370] ? __pfx_ksys_write+0x10/0x10 [ 975.547523][T24370] do_syscall_64+0xec/0xf80 [ 975.547546][T24370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.547569][T24370] ? trace_irq_disable+0x37/0x100 [ 975.547600][T24370] ? clear_bhb_loop+0x60/0xb0 [ 975.547626][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.547648][T24370] RIP: 0033:0x7f7191b8e1ff [ 975.547675][T24370] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 975.547696][T24370] RSP: 002b:00007f7192a69000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 975.547719][T24370] RAX: ffffffffffffffda RBX: 00007f7191de5fa0 RCX: 00007f7191b8e1ff [ 975.547736][T24370] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 975.547764][T24370] RBP: 00007f7191c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 975.547779][T24370] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000 [ 975.547793][T24370] R13: 00007f7191de6038 R14: 00007f7191de5fa0 R15: 00007ffe8b959b58 [ 975.547821][T24370] [ 975.547834][T24370] BUG: Bad page state in process syz.4.4723 pfn:5277a [ 975.834720][T24370] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x5277a [ 975.844942][T24370] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 975.852124][T24370] raw: 00fff00000000000 dead000000000040 ffff88801fafb000 0000000000000000 [ 975.860779][T24370] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 975.869395][T24370] page dumped because: page_pool leak [ 975.874884][T24370] page_owner tracks the page as allocated [ 975.880660][T24370] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 24370, tgid 24368 (syz.4.4723), ts 971084475056, free_ts 971012710554 [ 975.897924][T24370] post_alloc_hook+0x234/0x290 [ 975.902755][T24370] get_page_from_freelist+0x24e0/0x2580 [ 975.908347][T24370] __alloc_frozen_pages_noprof+0x181/0x370 [ 975.914224][T24370] alloc_pages_bulk_noprof+0x560/0x710 [ 975.919729][T24370] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 975.925884][T24370] skb_pp_cow_data+0xb47/0x13e0 [ 975.930820][T24370] do_xdp_generic+0x699/0x1190 [ 975.935635][T24370] tun_get_user+0x2465/0x3dc0 [ 975.940384][T24370] tun_chr_write_iter+0x113/0x200 [ 975.945464][T24370] vfs_write+0x5c9/0xb30 [ 975.949829][T24370] ksys_write+0x145/0x250 [ 975.954229][T24370] do_syscall_64+0xec/0xf80 [ 975.958810][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.964806][T24370] page last free pid 23 tgid 23 stack trace: [ 975.970844][T24370] __free_frozen_pages+0xbc8/0xd30 [ 975.975998][T24370] tlb_remove_table_rcu+0x85/0x100 [ 975.981233][T24370] rcu_core+0xc8e/0x1720 [ 975.985538][T24370] handle_softirqs+0x22b/0x7c0 [ 975.990393][T24370] run_ksoftirqd+0x36/0x60 [ 975.994851][T24370] smpboot_thread_fn+0x542/0xa60 [ 975.999830][T24370] kthread+0x711/0x8a0 [ 976.003956][T24370] ret_from_fork+0x510/0xa50 [ 976.008553][T24370] ret_from_fork_asm+0x1a/0x30 [ 976.013360][T24370] Modules linked in: [ 976.017266][T24370] CPU: 1 UID: 0 PID: 24370 Comm: syz.4.4723 Tainted: G B syzkaller #0 PREEMPT(full) [ 976.017290][T24370] Tainted: [B]=BAD_PAGE [ 976.017296][T24370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 976.017306][T24370] Call Trace: [ 976.017314][T24370] [ 976.017321][T24370] dump_stack_lvl+0xe8/0x150 [ 976.017344][T24370] bad_page+0x180/0x1c0 [ 976.017367][T24370] __free_frozen_pages+0xce6/0xd30 [ 976.017387][T24370] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 976.017417][T24370] ? lockdep_hardirqs_on+0x7b/0x110 [ 976.017437][T24370] bpf_xdp_adjust_tail+0x1d6/0x220 [ 976.017459][T24370] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 976.017473][T24370] bpf_prog_run_generic_xdp+0x665/0x14c0 [ 976.017510][T24370] do_xdp_generic+0x9f7/0x1190 [ 976.017538][T24370] ? __pfx_do_xdp_generic+0x10/0x10 [ 976.017570][T24370] ? tun_get_user+0x2331/0x3dc0 [ 976.017596][T24370] ? tun_get_user+0x2331/0x3dc0 [ 976.017616][T24370] tun_get_user+0x2465/0x3dc0 [ 976.017643][T24370] ? aa_file_perm+0x44c/0x1530 [ 976.017666][T24370] ? __pfx_tun_get_user+0x10/0x10 [ 976.017687][T24370] ? __lock_acquire+0x6b6/0x2cf0 [ 976.017705][T24370] ? __pfx___futex_wait+0x10/0x10 [ 976.017730][T24370] ? ref_tracker_alloc+0x318/0x460 [ 976.017748][T24370] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 976.017787][T24370] ? tun_get+0x1c/0x2f0 [ 976.017816][T24370] ? tun_get+0x1c/0x2f0 [ 976.017848][T24370] ? tun_get+0x1c/0x2f0 [ 976.017866][T24370] ? tun_get+0x1c/0x2f0 [ 976.017886][T24370] tun_chr_write_iter+0x113/0x200 [ 976.017907][T24370] vfs_write+0x5c9/0xb30 [ 976.017924][T24370] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 976.017944][T24370] ? __pfx_vfs_write+0x10/0x10 [ 976.017962][T24370] ? __fget_files+0x2a/0x420 [ 976.017986][T24370] ksys_write+0x145/0x250 [ 976.018002][T24370] ? __pfx_ksys_write+0x10/0x10 [ 976.018022][T24370] do_syscall_64+0xec/0xf80 [ 976.018038][T24370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.018054][T24370] ? trace_irq_disable+0x37/0x100 [ 976.018076][T24370] ? clear_bhb_loop+0x60/0xb0 [ 976.018093][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.018109][T24370] RIP: 0033:0x7f7191b8e1ff [ 976.018123][T24370] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 976.018137][T24370] RSP: 002b:00007f7192a69000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 976.018154][T24370] RAX: ffffffffffffffda RBX: 00007f7191de5fa0 RCX: 00007f7191b8e1ff [ 976.018166][T24370] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 976.018177][T24370] RBP: 00007f7191c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 976.018187][T24370] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000 [ 976.018197][T24370] R13: 00007f7191de6038 R14: 00007f7191de5fa0 R15: 00007ffe8b959b58 [ 976.018216][T24370] [ 976.018226][T24370] BUG: Bad page state in process syz.4.4723 pfn:801b6 [ 976.304378][T24370] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x801b6 [ 976.313174][T24370] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 976.320314][T24370] raw: 00fff00000000000 dead000000000040 ffff88801fafb000 0000000000000000 [ 976.328953][T24370] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 976.337594][T24370] page dumped because: page_pool leak [ 976.342987][T24370] page_owner tracks the page as allocated [ 976.348704][T24370] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 24370, tgid 24368 (syz.4.4723), ts 971084456666, free_ts 971012735892 [ 976.365932][T24370] post_alloc_hook+0x234/0x290 [ 976.370767][T24370] get_page_from_freelist+0x24e0/0x2580 [ 976.376362][T24370] __alloc_frozen_pages_noprof+0x181/0x370 [ 976.382232][T24370] alloc_pages_bulk_noprof+0x560/0x710 [ 976.387733][T24370] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 976.393875][T24370] skb_pp_cow_data+0xb47/0x13e0 [ 976.398765][T24370] do_xdp_generic+0x699/0x1190 [ 976.403774][T24370] tun_get_user+0x2465/0x3dc0 [ 976.408494][T24370] tun_chr_write_iter+0x113/0x200 [ 976.413604][T24370] vfs_write+0x5c9/0xb30 [ 976.417879][T24370] ksys_write+0x145/0x250 [ 976.422247][T24370] do_syscall_64+0xec/0xf80 [ 976.426763][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.432714][T24370] page last free pid 23 tgid 23 stack trace: [ 976.438701][T24370] __free_frozen_pages+0xbc8/0xd30 [ 976.443879][T24370] tlb_remove_table_rcu+0x85/0x100 [ 976.449015][T24370] rcu_core+0xc8e/0x1720 [ 976.453302][T24370] handle_softirqs+0x22b/0x7c0 [ 976.458078][T24370] run_ksoftirqd+0x36/0x60 [ 976.462529][T24370] smpboot_thread_fn+0x542/0xa60 [ 976.467477][T24370] kthread+0x711/0x8a0 [ 976.471577][T24370] ret_from_fork+0x510/0xa50 [ 976.476267][T24370] ret_from_fork_asm+0x1a/0x30 [ 976.481086][T24370] Modules linked in: [ 976.485010][T24370] CPU: 1 UID: 0 PID: 24370 Comm: syz.4.4723 Tainted: G B syzkaller #0 PREEMPT(full) [ 976.485034][T24370] Tainted: [B]=BAD_PAGE [ 976.485040][T24370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 976.485051][T24370] Call Trace: [ 976.485058][T24370] [ 976.485065][T24370] dump_stack_lvl+0xe8/0x150 [ 976.485088][T24370] bad_page+0x180/0x1c0 [ 976.485111][T24370] __free_frozen_pages+0xce6/0xd30 [ 976.485132][T24370] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 976.485162][T24370] ? lockdep_hardirqs_on+0x7b/0x110 [ 976.485181][T24370] bpf_xdp_adjust_tail+0x1d6/0x220 [ 976.485203][T24370] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 976.485217][T24370] bpf_prog_run_generic_xdp+0x665/0x14c0 [ 976.485254][T24370] do_xdp_generic+0x9f7/0x1190 [ 976.485281][T24370] ? __pfx_do_xdp_generic+0x10/0x10 [ 976.485309][T24370] ? tun_get_user+0x2331/0x3dc0 [ 976.485334][T24370] ? tun_get_user+0x2331/0x3dc0 [ 976.485354][T24370] tun_get_user+0x2465/0x3dc0 [ 976.485381][T24370] ? aa_file_perm+0x44c/0x1530 [ 976.485404][T24370] ? __pfx_tun_get_user+0x10/0x10 [ 976.485424][T24370] ? __lock_acquire+0x6b6/0x2cf0 [ 976.485443][T24370] ? __pfx___futex_wait+0x10/0x10 [ 976.485468][T24370] ? ref_tracker_alloc+0x318/0x460 [ 976.485485][T24370] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 976.485502][T24370] ? tun_get+0x1c/0x2f0 [ 976.485520][T24370] ? tun_get+0x1c/0x2f0 [ 976.485541][T24370] ? tun_get+0x1c/0x2f0 [ 976.485559][T24370] ? tun_get+0x1c/0x2f0 [ 976.485579][T24370] tun_chr_write_iter+0x113/0x200 [ 976.485629][T24370] vfs_write+0x5c9/0xb30 [ 976.485656][T24370] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 976.485685][T24370] ? __pfx_vfs_write+0x10/0x10 [ 976.485704][T24370] ? __fget_files+0x2a/0x420 [ 976.485728][T24370] ksys_write+0x145/0x250 [ 976.485745][T24370] ? __pfx_ksys_write+0x10/0x10 [ 976.485765][T24370] do_syscall_64+0xec/0xf80 [ 976.485781][T24370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.485797][T24370] ? trace_irq_disable+0x37/0x100 [ 976.485819][T24370] ? clear_bhb_loop+0x60/0xb0 [ 976.485837][T24370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.485853][T24370] RIP: 0033:0x7f7191b8e1ff [ 976.485868][T24370] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 976.485884][T24370] RSP: 002b:00007f7192a69000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 976.485901][T24370] RAX: ffffffffffffffda RBX: 00007f7191de5fa0 RCX: 00007f7191b8e1ff [ 976.485914][T24370] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 976.485925][T24370] RBP: 00007f7191c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 976.485936][T24370] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000 [ 976.485946][T24370] R13: 00007f7191de6038 R14: 00007f7191de5fa0 R15: 00007ffe8b959b58 [ 976.485965][T24370] [ 980.050479][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 980.057727][ C1] bridge0: port 2(bridge_slave_1) entered learning state