last executing test programs:

3.514058599s ago: executing program 0 (id=2140):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0xbc, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private0, @in6=@loopback, 0x4e22, 0x0, 0x1, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x31}, @in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e24, @in6=@local}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
socket(0x2b, 0x1, 0x1) (async)
r3 = socket(0x2b, 0x1, 0x1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'gretap0\x00', 0x0})
accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @remote, @rose}, &(0x7f0000000140)=0x1c, 0x0) (async)
r4 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @remote, @rose}, &(0x7f0000000140)=0x1c, 0x0)
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xd686, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x80, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null]})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6024b}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6024b}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r3)
sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x68, r5, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_FAMILY={0x5, 0xd, 0x15}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0xc76c007a4c4bef6a)

3.35153598s ago: executing program 0 (id=2143):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800ffb0b70300000000000085000000b000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.123827691s ago: executing program 0 (id=2148):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r1, 0x0, 0x40000002)
r2 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000200), 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x0, @local}})
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0x50}, 0x0, &(0x7f00000002c0)={0x3fe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000000)
recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
nanosleep(0x0, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

2.999330551s ago: executing program 4 (id=2149):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f00000000000000fd00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0xd}, 0x94)
r2 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x17a, 0x0)
epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001"], 0x4c}}, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400)
unshare(0x2c020400)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800", @ANYBLOB="9d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
clock_gettime(0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010800000000084)
sendmmsg$inet6(r7, &(0x7f0000002140)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x81, @local, 0x7}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="9c5054a5af2f81d706d451f728eeeb", 0xf}, {&(0x7f0000000780)="a356f58980a4d1bc340b4e2fde9103daf31d759e26dc8c7daf932a29deb282c831f5ac7c221bd877f910efe1305661a004d56dcdae60bf8c5afcdf94e242116d01754e2c8bf813abff4130fbf20f90d34ec6312e92c1f0702bdc590d16a0e93b9a7cb6f4a57018173bdc851f1a55fca8ff825e03bdabad1c447a88abbcfafe7b8c76a6e71a03f4abbe22454a88599438b9c3740cdbd09e74715e6a6b640fd621b67df416dcf324fe233f3e043b", 0xad}, {&(0x7f0000000340)="c046641ca8108ae11f406a3f6dd523a4b312f92777b24ad78aab6c826de6", 0x1e}, {&(0x7f0000002400)="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", 0x1074}], 0x4}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x800, @mcast2, 0x3}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000000480)="184be7dd4dd3c22fe23fa762c51b082ba5eb6264d83c7d095b25749124973489be6d38ba1b2a3ee79dae2f7d05e98974ec32f0951ed5fabce20d01f6c09e3b67e273bd1479eefa205c2bf612283ba7ac74a0c174c2ad25fb6627ef035a71c840f30dbe9b35426be8f8a06705c3f67b037b9ae965b77956c919ec011207267b5e87a5d2636a52125f31a85b5e5f877513", 0x90}, {&(0x7f0000000540)="c5bdbc41ea6d216af30c86900a947500ace21f154c5f02df17f28fea934c97e2638514a22c5f9e74b68b123429f5c5d885e23cd3586be026c82a12772f5559616080b302b6d79cf8b6f2dad8122e08101749a0fb82c3290ba5a7f46b", 0x5c}, {&(0x7f00000016c0)="c4b2b2f6a484059d81339951def3fb9d16f1b253e82c801953ac169d742ab8fc08c7e2e55379ea0b46a3c2f242acfa541aab7c4fe289e9965e4940aff91af6451c6b6ad0a711fa8cee59", 0x4a}, {&(0x7f00000005c0)="c277e799335444", 0x7}, {&(0x7f0000001740)="25fc1088813ded3a5ef4eeb8e5eac5190fa30844bec5bb9ce93c7b62dd9fd51aca5210699faf755d02433f8212123559f27d2e8218042a683b603f9065f3374a62b3859dbc32a686757565d455989d3da1f43219d507fc52ca97750a4c8bef09bc2277c3d33e44d0d1b59936285814b42cff72f534ddba51d3b0abc494aa90026f688e40a7a1744d5c9bc90b66d7066aefe19c07ce8ea633faa060454aaa93b9028e833a55d0b6ed2e22572cf6d08f3ffccac7cff601f71689732ce0c195343e", 0xc0}, {&(0x7f0000001800)="2ba52e68f13cf73c38fe3179aaf496cddd288200c601a1c2b2fd4ad023200e2dd63d10709141e9aab7f730717b5c5ad54c552f1d585fb60be701f26227daf37259c2c625adc95a7c460b2be43af55b12854c125539213c42c27b15cc04c07169244ce96ba7ff4d15b7dfe7fbfb8e5c77a79e286de396bd5e69c1fab0e4896f83170c8df15c58d07f158b21d6444c597324d923141a438aee53ce76f4c833b41c6ec1827c9c", 0xa5}], 0x6, &(0x7f0000001f00)=ANY=[@ANYBLOB="1400000000000000290000ff2207310d3804340000000000060000000000"], 0x18}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001980)="31528e6cebdca11051b51b31c269713759553a", 0x13}, {&(0x7f00000019c0)="1b5dc47c03816fb5bb06281920bf061b1dc509aec54e40237de1468e90c05e1c873517b5", 0x24}, {&(0x7f0000001f40)="0acb5f642beddb047742422f921e13bd56b9894e8ff9ecf84183eef4d2b2121fb85fcf232dcac2d9780b569c59d0bdc0e05558d75927622176b4b3216d1bd60008ae4f3f79a159324ab279f39a860201cab70650681c1169018b85f800a90d8cc438b5c1c3c3bb0ccf2e37acfd8ea171b0f977ca5142e91e2716f5ffd74b64345b66f9e4bfc2abc9659968d0915ad79d26a0b81fb30001272e10", 0x9a}, {&(0x7f0000001ac0)="d2e28d1a1fce04d8f58c25c3b48ce2fb415ce2f561c65e730e3243d33d9490046c3cf8da337d1e65d98ea136c20661bd69092a1b9802703495cdeffeee", 0x3d}, {&(0x7f0000001b00)="334ab4db6d9b9f94b67ac9cd1753a82730881f2ce8628c9e8e85945cb4ba03aba3f868162b7933102505cbaba8773fd4d79cba6e48103035e087112dcf57f75c919109f1", 0x44}, {&(0x7f0000001b80)="213fa5b18ceb14f0643b4152c759d31c7fc994cd405012c08c3b6dc58e6efc8cd1fa88a86b20486d24fb9f1155d8643c6d9cf986291a42b9f0654dd1f7ccaf1dd9db49f22a96c0c453944e3832f2a0a7feba00f40a01a7e1a0945b7f9a33fa3eccf2049b1b71e61820e6793a716cd78a25a86d62c1950ae42deb2f24f355be107f6a0be8282173facf30453c50e1447cce3271d230ef98c7d75653e12e07b60080af50f5bee909985176d66145c39f241eb2ee46801ebd01f01ae0b1c84406e606f2f437b0f89fbaf4b4b661c0685ff7f864358f55efee97f480", 0xda}, {&(0x7f0000001c80)="50fc7cd0287dd963d2a983375fbf662998a716474e7e28fbf39b8e3895548546817a62bea2cb63b33e210c128d54fa7b288dc9155aa8c9cdeab091f4e5abf60dcd82ed3d3fd0afeb065ac186db7b914270b48a1c9259a42fa038fe911b96a9ddb53d902a49a170c86b4ad5d70322a48b811a3e17c6d48a75198b937665b306980215ce71c19479ff619e01b25e543bd4f20a54662f147b50ce935334f7e781e8c1ab512c7fdbb7153b88a56a2fecfadcf9a5262d90d40d74ae1973a3dcbd097405a3083f893f4100679b965578c804dba6d2084269cd780bb4e9e1e4b5aa32c73fa75ee7c97b53e0e9ee4f5cc7b707518164bae608192247", 0xf8}, {&(0x7f0000001d80)="8dd742d1808f6d37ed8489f943e2d2e9d85062990ebfaf708b036c5116f763adf073589a99a6b70cefd6f0b5ea025459f841bf701d49f2aff88c92c95289a9653f5d422f6816c82180902476e12092d7c17d04d8de6f5a207bc2d32c64a60905647e4492bcbba4c4af225d054da6df0cd62dd504f2ede57371b15bce402062a667690d14d8ff5c3b7ebc7861768909f0cfb8b87b606b1f9598058fd5ca12222b3c1f23e3aad17fdc4eeed7809b993bb84ed3083d594dfe19ed260504d258f4780ab801e4c68b177f017783ffa435736d07f215f0fc14ada1c3407d4a42", 0xdd}], 0x8, &(0x7f0000002200)=ANY=[@ANYBLOB="300000000000000029000000370000001603000000000000040100000100000100c20400000001c20400000007040109480000000000000029000000390000008406020600000000fe8000000000000000000000000000aafe8000000000000000000000000000bbfe8800000000000000000000000000011400000000000000290000000b00000000000073000000001400000000000000290000003e00000001000100000000001400000000000000290000003e00000057d200000000000014000000000000002900000034000000080000000000004024000000000000002900000032000000200100"/248, @ANYRES32=0x0, @ANYBLOB="00000000140000000000000029000000430000000000000000000000c000000000000000290000000400000016140000000000003b8758642afd28dbec2a49f99b36ff0d2a406423e56d2b63d1ec132e4b58f8e93518a12ab21c866d4fa4153c150e0c622c7534bb64883c65c971962686464b261afdd57aafc648e2595cd468b57adb24d3a806b8b066545e5b9c6ea8930621d497cdd3e47ce5f296de28628e96ce701d2dcb7c2d5c8c65e0c92e46d502f81830c8e9d3bbf8adf311e201080000000000000000050244fe0502006f04010504010cc20400000fff00"], 0x1d8}}], 0x3, 0x4008040)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
socket$inet(0x2, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x8000000004)
socket$netlink(0x10, 0x3, 0x0)

2.519563081s ago: executing program 3 (id=2153):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000300000000ac14141f0000000000000000000000000000000000000000000000000000000000000003fffe00000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000060000000000000000000000b06b6e00000001000000000044010500fc020000000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000535000000000000000000000000000000000000fc00000000000000000000000000000000000000330000000200000000000000000000000000000000000000000000000103000004000000490000000000000000000000000000000000000000000000000004d63200000002000000fe8000000000000000000000000000aa00000000010300000000000003000000000000007f000001000000000000000000000000000000002b00000002"], 0x1fc}, 0x1, 0x0, 0xffffff80}, 0x0)

2.308799252s ago: executing program 3 (id=2155):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
socket$igmp(0x2, 0x3, 0x2)
bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
listen(r1, 0x4)
listen(r1, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4020804}, 0x50)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
unshare(0x8000400)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@fallback, 0xffffffffffffffff, 0x2, 0x11}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800101}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240408d4}, 0x854)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40010)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000070900010073797a310000130030000000030a01010000000000000000010000000900010073797a310000000008000a400000000208000b400000000088000000050a030000000000000000000a00000a090001"], 0x120}}, 0x0)

2.096324654s ago: executing program 1 (id=2158):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800ffd0b70300000000000085000000b000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.881524943s ago: executing program 4 (id=2160):
close(0x4)
unshare(0x80) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
unshare(0x6020480) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff}) (rerun: 32)
bind$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
close(0x4) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64)
unshare(0x60600) (async, rerun: 64)
close(r0) (async)
r1 = socket(0x10, 0x80002, 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000003c0)="dc8daf8d760c0b5d5c8caa98fa19c6a35a188a3775d272c579ff33a6effc0c49320ff86badc0d7f8b91fbc6ce4baa16de55d0ee6203b6db86008599c5d2f19dda7e34e3693cbb469728ec4005e4f00000000000053c282394f9f31d9210d4e736b769be32865f7dc70c5bdd6cdd0e82ac0e85e8ae59456bcda96de64e44f063dd60011126f90ef97069e", 0x8a)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4090010007e570966f4366ec9d447a3ac562261a54e3ffd3b655c8611029758c0c538d8daf61fc896b4f448e23dc22e79cc6f7bdd6b1812813e9ffc0f8c5056df6dec2a611cac928ac27bf55ef7c69fdabfa8330be444c64dd45aa90d8901e1b6966ad64b608dd2bcef178da895", @ANYBLOB="40a9384824eabf84d30861196d24a3403ff04a", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) (async, rerun: 64)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x3, 0x3, 0xff)
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32)
accept4$netrom(r3, &(0x7f0000000280)={{0x3, @netrom}, [@netrom, @bcast, @default, @bcast, @rose, @null, @netrom]}, &(0x7f00000004c0)=0x48, 0x80000) (async, rerun: 32)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
unshare(0x20800) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {0xf, 0x3}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x80}, @TCA_FLOW_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)

1.843223799s ago: executing program 1 (id=2162):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0xfffffffffffffd8f)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r4}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r6, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, r9, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x4}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000014}, 0x2404c088)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x1, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r11, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0xfb, 0x2}]})
write(r11, &(0x7f0000000280)="1a7f", 0x2)
syz_emit_ethernet(0x96, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x88, 0x65, 0x0, 0x4, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x1b, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @broadcast, {[@cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "a88022eba18f92"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x44, 0x4c, 0x1, 0x0, [{@rand_addr=0xe4010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@loopback, 0x20005}, {@loopback}, {@remote, 0x321}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x4}, {@local, 0x3}, {@broadcast, 0x2}]}]}}}}}}}, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000002100))

1.833413131s ago: executing program 3 (id=2163):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x100}, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = getpid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r6, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="a800028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004"], 0xc4}, 0x1, 0x0, 0x0, 0x44090}, 0x2404c080)

1.749787778s ago: executing program 0 (id=2164):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x64}, 0x1, 0xba01}, 0x0) (async, rerun: 32)
accept$alg(r0, 0x0, 0x0) (async, rerun: 32)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$unix(0x1, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000035c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x3, 0x9, 0x2, 0xffffffff, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r7 = socket(0x14, 0x2, 0x4)
sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x48, 0x1402, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x400461f5, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xffffffff, 0xb, 0xffff0df6, 0x808, 0xffffffffffffffff, 0x2, '\x00', r10, r11, 0x3, 0x0, 0x3, 0x8}, 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r13, 0x27, 0xe, 0x55, &(0x7f00000003c0)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r8}, &(0x7f0000000180), &(0x7f0000000080)=r13}, 0x20) (rerun: 32)

1.696673692s ago: executing program 4 (id=2166):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="f5af25bd7000000000000e00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x40041)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.318022023s ago: executing program 0 (id=2168):
r0 = socket(0x18, 0x0, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff0000"], 0x48)
socket(0x2c, 0x3, 0x0)
socket$kcm(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x14040001}, 0x24000840)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x16, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @local, @void, {@llc={0x4, {@snap={0x1, 0x1, "c8", "118190", 0x60}}}}}, 0x0)

1.156146775s ago: executing program 4 (id=2170):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r0, 0x0, 0xe, 0x0, &(0x7f0000000f80)="b70cd7297c0f8f17e640146d01be", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8fa5}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001fc0)=<r2=>0x0, &(0x7f0000002000)=0x4)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000024c0)="ad56b6c58206007e4af65430442b25b36f0000000054c7be", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg(r4, 0x0, 0x0, 0x20004810)
sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x73a, 0x0, r1, 0xa, '\x00', r2, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x4, [@struct={0x6, 0x5, 0x0, 0x4, 0x1, 0x40, [{0x3, 0x3, 0x6}, {0xd, 0x4, 0x100}, {0x9, 0x1, 0x4}, {0x0, 0x0, 0x1}, {0xe, 0x3, 0x8001}]}, @const={0x4, 0x0, 0x0, 0xa, 0x4}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x9, 0x3}, {0x10, 0x2}, {0xa, 0x4}, {0x3, 0x3}, {0x8, 0x5}, {0x4, 0x2}, {0xb, 0x1}, {0xc}, {0x6, 0x3}]}, @restrict={0xd, 0x0, 0x0, 0xb, 0x1}, @func={0x4, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f00000009c0)=""/222, 0xdc, 0xde, 0x0, 0x4b}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x5, 0x44, &(0x7f0000000780)=""/68, 0x41000, 0x40, '\x00', r2, @fallback=0x12, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x4, 0x0, 0x6, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000b40)=[r1, r1], &(0x7f0000000b80)=[{0x3, 0x4, 0x6, 0x5}, {0x1, 0x1, 0xe}, {0x1, 0x5, 0xf, 0x2}, {0x5, 0x1, 0x7, 0xc}], 0x10, 0x267}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r9 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000180)={r5, r8})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r11, 0x1, 0x0, 0x25dfdbfe, {{0x53}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2c8981}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, r11, 0x412, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffff9}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x24000800)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r14=>0x0, 0x76, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x3, 0x17, &(0x7f00000020c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f00000021c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000002200)={0x4, 0xd, 0x5, 0x4}, 0x10, 0x0, r0, 0x8, &(0x7f0000002240)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000002280)=[{0x2, 0x2, 0xb, 0x1}, {0x5, 0x4, 0xf, 0xb}, {0x2, 0x2, 0x10, 0x2}, {0x2, 0x3, 0xc, 0x2}, {0x4, 0x1, 0x6, 0x3}, {0x0, 0x3, 0xc}, {0x2, 0x5, 0x4, 0x4}, {0x4, 0x4, 0xe, 0x1}], 0x10, 0x7}, 0x94)

1.126646463s ago: executing program 0 (id=2171):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getuid() (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000062c0)={{{@in, @in6=@private1}}, {{@in=@local}, 0x0, @in6=@dev}}, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d000100000096c4fe00000000000008000c00", @ANYRES32=r3, @ANYBLOB="0b000080976b640868603000080001800400f680"], 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f00000000000000ff020000000000220000000000000001e800c204"], 0x0)
getgid()
socket$nl_generic(0x10, 0x3, 0x10) (async)
getgid()
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) (async)
r4 = socket(0xa, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f0000000040)=0x8002, 0x4) (async)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x2000013, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) (async)
sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async)
setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000180), 0x4)

1.113855185s ago: executing program 2 (id=2172):
socket(0x1, 0x803, 0x0) (async)
r0 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280)=0x4) (async)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x3) (async)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) (async)
pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)="00213ae50deba8cd1caf190e1ae69f52cf98f3a1309b", 0x16}], 0x1, 0x807, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x40, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
unshare(0x2040400) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$TUNSETNOCSUM(r7, 0xc040ff0b, 0x200000000013) (async)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000004c0)=0xff, 0x4) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000600000061115f0000000000850000001e00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, 0x1404, 0xb543001166852447, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x40804) (async)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000009b7c48acd3988b76cd01d0f69e8505d59bdcd62eea72e4651d8c47564ac17976aff0c6d577592681ae1961e0070d11c80458655af15ba9230af6e90eefe196744baa190cd8eedede64c595b21d409cf93149984997d2046bcc98", @ANYRES16=r8, @ANYBLOB="99742cbd7000fbdbdf251500000044000180130001006574683a6970366772657461703000002c0004001400010002004e210000000000000000000000001400020002004e23ac1414320000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000)

921.691338ms ago: executing program 4 (id=2173):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800fff3b70300000000000085000000b000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

880.843675ms ago: executing program 1 (id=2174):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="776152c8180000000000000000001811000000000000000004aeb041830646a9753fe83bf00766e968f7fd7414c8703fac050006d2c669e69a2983a49b3435acdb722212d1bf56f71e6ac7d1f73de103eb0bac01749d0a1e8a06177f6e318a36bc", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x57, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x2}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50)
close(0x3)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xd}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffe80, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0xfff1}}, @TCA_U32_SEL={0x54, 0x5, {0xc, 0x80, 0x4, 0x401, 0x1f, 0x3, 0x9, 0x0, [{0x3, 0x7, 0x4, 0xffffffff}, {0x80000000, 0x0, 0x6, 0x2}, {0x3, 0x2, 0x1}, {0x40, 0x370d, 0x1ff, 0x6}]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003f000000080003"], 0x2c}}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000000440)=0xc0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffff, 0x1, 0xfffff000, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0xffffffe1, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x7, 0x30000000, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100007}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0)
ioctl(r7, 0x8b2c, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)

804.047699ms ago: executing program 2 (id=2175):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
socket$igmp(0x2, 0x3, 0x2)
bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
listen(r1, 0x4)
listen(r1, 0x6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
unshare(0x8000400)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@fallback, 0xffffffffffffffff, 0x2, 0x11}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40010)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xf3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000070900010073797a310000130030000000030a01010000000000000000010000000900010073797a310000000008000a400000000208000b400000000088000000050a030000000000000000000a00000a090001"], 0x120}}, 0x0)

702.070178ms ago: executing program 4 (id=2176):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0xf810, 0x1, 0xdbc, 0x101, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x23}}}}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$caif(0xffffffffffffffff, &(0x7f0000000040)=@dgm={0x25, 0x2, 0x8}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="0f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="aef9b5", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="c5", 0x1}], 0x1}}], 0x3, 0x400a055)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
close(r5)
unshare(0x8040480)
socket$unix(0x1, 0x1, 0x0)
connect$pppl2tp(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000001200000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a300000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r6, 0x0, 0x40000002)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80003}, 0x28)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYRES16=r0], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r7, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000001880)=""/4112, 0xe37}, {&(0x7f0000001680)=""/100, 0x64}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/48, 0x30}], 0x5}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8000d3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xef23fe83}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xd9f}], 0x9, 0x2030, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x0, @local}})
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

648.985083ms ago: executing program 2 (id=2177):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003c000000fe80000000000000000000000000000b2303000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x104}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x0)

631.168204ms ago: executing program 1 (id=2178):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2c8, 0x130, 0x0, 0x148, 0x0, 0x148, 0x230, 0x240, 0x240, 0x230, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @rand_addr=0x64010100, 0x0, 0xff000000, 'gre0\x00', 'wlan1\x00', {0xff}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@multiport={{0x50}, {0x0, 0xf, [0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e22, 0x4e21, 0x4e23, 0x4e24, 0x4e20, 0x4e20, 0x4e22, 0x4e21, 0x4e22, 0x4e24, 0x4e22], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x5, 0x5, 0x8, 'netbios-ns\x00', {0x400}}}}, {{@ip={@private=0xa010102, @private=0xa010101, 0x100fffffe, 0x0, 'netdevsim0\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x40, 0x3, 0x11}, 0x0, 0xc8, 0x100, 0x3000000, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@addrtype={{0x30}, {0x80, 0x140}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x5, 0x5}, {0x0, 0x4, 0x7}, {0x5, 0x5, 0x1}, 0x0, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)

378.086354ms ago: executing program 2 (id=2179):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r1, 0x0, 0x40000002)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x0, @local}})
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0xa6ffffff, 0x0, 0x24000801}, 0x8000)

377.837426ms ago: executing program 3 (id=2180):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000018000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

223.565233ms ago: executing program 3 (id=2181):
r0 = socket(0x18, 0x0, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff0000"], 0x48)
socket(0x2c, 0x3, 0x0)
socket$kcm(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x14040001}, 0x24000840)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x16, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @local, @void, {@llc={0x4, {@snap={0x1, 0x1, "c8", "118190", 0x60}}}}}, 0x0)

194.379746ms ago: executing program 2 (id=2182):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x100, 0x111, 0x4b4, 0x100, 0xd4feffff, 0x238, 0x20a, 0x278, 0x238, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x12, 0x0, 0x30}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x4, 0x4, 0x3, 0x0, 0xc}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'pim6reg0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368)
connect$inet(r0, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000)

101.731215ms ago: executing program 1 (id=2183):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000100)={0xb, 0xfffb, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, 'wlan1\x00'})
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x3505, 0x0, 0x3, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

72.33913ms ago: executing program 3 (id=2184):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000000063aaec9f0001000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0x2}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10)
close(0x4)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x10, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x2}]}, @nested={0x4, 0x37}]}, 0x2c}], 0x1}, 0x0)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r6, 0x200, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x400c001)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002abd7000fedbdf2524000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x62040400)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r8)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r9, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

15.744989ms ago: executing program 1 (id=2185):
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x1f, 0x6000, 0x390, 0x130, 0x130, 0x1c8, 0x0, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@loopback, @local, 0xffffff00, 0xff, 'veth0\x00', 'nicvf0\x00', {}, {0xff}, 0x4, 0x6, 0x1e}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @empty, 0xffffffff, 0xffffff00, 'batadv0\x00', 'pimreg0\x00', {}, {}, 0x73, 0x1, 0x49}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x4, 0xa8}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x80}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3, 0x25, 0x4, @void}, 0x10)
syz_emit_ethernet(0xfe54, &(0x7f0000001b00)=ANY=[], 0x0)
vmsplice(r0, &(0x7f00000000c0), 0x0, 0x1)
close(r0)
socket(0x25, 0xa, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10)
unshare(0x20000400)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000200"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000306"], 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$inet6(0xa, 0x800, 0x1)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback, 0x6}, 0x31)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in=@initdev={0xac, 0x1e, 0x4, 0x0}, 0x0, 0x0, 0x0, 0xfffe, 0xa, 0x0, 0x0, 0x6c}, {0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x0, 0x4}, {0xfffffffffffffffd, 0x282c, 0x0, 0xa787}, 0xfffffffe, 0x0, 0x1, 0x0, 0x2}, {{@in6=@mcast1, 0x4d4, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x1}}, 0xe8)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a00010024bd70000000000002201400fc0200070002000008000300", @ANYRES32=r8, @ANYBLOB="08000100e000000119f402007f000001"], 0x34}}, 0xea5bc50b6199d7fe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

0s ago: executing program 2 (id=2186):
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000301010300000000000000000a0000820c0019800800010002000000300001802c000180"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x44012)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x1, 0x0)
unshare(0x20000400)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r2, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f00000002c0), &(0x7f0000000380)=""/100}, 0x20)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4b4}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r10, 0x3e}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000440)="dd329e3a6721d1001b81b58dd2bf6de4", 0x10}], 0x1}, 0x4004044)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x3, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)

kernel console output (not intermixed with test programs):

5][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'.
[  148.686721][ T8601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  148.731831][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'.
[  148.743552][ T8602] netlink: 576 bytes leftover after parsing attributes in process `syz.2.783'.
[  148.840709][ T8616] netlink: 'syz.1.788': attribute type 1 has an invalid length.
[  148.849381][ T8617] netlink: 'syz.1.788': attribute type 1 has an invalid length.
[  148.857680][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'.
[  148.866823][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'.
[  148.876808][ T8616] netlink: 'syz.1.788': attribute type 1 has an invalid length.
[  148.887421][ T8617] netlink: 'syz.1.788': attribute type 1 has an invalid length.
[  148.934138][ T8617] syzkaller1: entered promiscuous mode
[  148.941472][ T8617] syzkaller1: entered allmulticast mode
[  149.065533][ T8627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.792'.
[  149.086883][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'.
[  149.163125][ T8629] xt_CT: No such helper "pptp"
[  149.504812][ T8645] netlink: 'syz.4.797': attribute type 1 has an invalid length.
[  149.901712][ T8666] syzkaller0: entered promiscuous mode
[  149.909863][ T8666] syzkaller0: entered allmulticast mode
[  151.231170][ T6490] IPVS: starting estimator thread 0...
[  151.321160][ T8723] IPVS: using max 30 ests per chain, 72000 per kthread
[  151.503423][ T8739] netlink: 'syz.4.826': attribute type 4 has an invalid length.
[  151.719413][ T8748] IPVS: Scheduler module ip_vs_sip not found
[  152.912882][ T8832] syzkaller1: entered promiscuous mode
[  152.918586][ T8832] syzkaller1: entered allmulticast mode
[  153.022607][ T8825] xt_CT: No such helper "pptp"
[  154.290870][ T8864] syzkaller0: entered promiscuous mode
[  154.321098][ T8864] syzkaller0: entered allmulticast mode
[  154.364463][ T8864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.397846][ T8864] netlink: 'syz.0.857': attribute type 1 has an invalid length.
[  154.403220][ T8870] __nla_validate_parse: 7 callbacks suppressed
[  154.403256][ T8870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.860'.
[  154.461808][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.857'.
[  154.473661][ T8864] bond4: entered promiscuous mode
[  154.479226][ T8864] 8021q: adding VLAN 0 to HW filter on device bond4
[  154.523205][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.857'.
[  154.538508][ T8872] xt_CT: No such helper "pptp"
[  154.563898][ T8863] tipc: Resetting bearer <eth:syzkaller0>
[  154.723808][ T8863] tipc: Disabling bearer <eth:syzkaller0>
[  155.100423][ T8902] erspan0: entered promiscuous mode
[  156.637582][ T8969] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  156.645238][ T8969] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  156.945900][ T8985] xt_CT: No such helper "netbios-ns"
[  157.565140][ T9013] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  157.578367][ T9013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'.
[  157.800876][ T8969] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  157.820900][ T8969] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  157.918105][ T8969] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  157.931201][ T8969] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  157.995851][ T8969] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  158.022194][ T8969] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  158.481228][ T9041] xt_CT: No such helper "pptp"
[  158.696569][ T9065] openvswitch: netlink: IP tunnel TTL not specified.
[  158.739778][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.903'.
[  158.973044][ T9070] netlink: 76 bytes leftover after parsing attributes in process `syz.4.906'.
[  159.549177][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'.
[  159.613389][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'.
[  159.663864][ T9058] syz.0.900 (9058) used greatest stack depth: 17472 bytes left
[  159.959158][ T9095] netlink: 36 bytes leftover after parsing attributes in process `syz.1.910'.
[  160.259305][ T9116] xt_CT: You must specify a L4 protocol and not use inversions on it
[  160.459257][ T9123] openvswitch: netlink: IP tunnel TTL not specified.
[  160.486577][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'.
[  160.899916][ T9150] netlink: 'syz.2.926': attribute type 1 has an invalid length.
[  160.910288][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.922'.
[  161.009367][ T9156] netlink: 64 bytes leftover after parsing attributes in process `syz.3.924'.
[  161.073624][ T9157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.926'.
[  161.142450][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.926'.
[  161.204690][ T9157] bond2: (slave bridge2): making interface the new active one
[  161.254989][ T9157] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  161.714257][ T9150] 8021q: adding VLAN 0 to HW filter on device bond2
[  161.736305][ T9158] syzkaller1: entered promiscuous mode
[  161.759129][ T9158] syzkaller1: entered allmulticast mode
[  161.794865][ T9157] macvlan2: entered promiscuous mode
[  161.801484][ T9157] macvlan2: entered allmulticast mode
[  161.809405][ T9157] bond2: entered promiscuous mode
[  161.820617][ T9157] bridge2: entered promiscuous mode
[  161.834971][ T9168] netlink: 'syz.0.928': attribute type 1 has an invalid length.
[  161.835603][ T9157] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  161.869764][ T9168] netlink: 'syz.0.928': attribute type 2 has an invalid length.
[  161.882194][ T9157] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  161.914786][ T9157] bond2: left promiscuous mode
[  161.920084][ T9157] bridge2: left promiscuous mode
[  162.047779][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.930'.
[  162.064509][ T9175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.930'.
[  162.229959][ T9184] openvswitch: netlink: IP tunnel TTL not specified.
[  163.143036][ T9238] syzkaller0: entered promiscuous mode
[  163.167531][ T9238] syzkaller0: entered allmulticast mode
[  163.199050][ T9242] openvswitch: netlink: IP tunnel TTL not specified.
[  163.209873][ T9238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.219584][ T9238] netlink: 'syz.2.947': attribute type 1 has an invalid length.
[  163.348494][ T9238] bond3: entered promiscuous mode
[  163.381550][ T9238] 8021q: adding VLAN 0 to HW filter on device bond3
[  163.493094][ T9237] tipc: Resetting bearer <eth:syzkaller0>
[  163.615295][ T9237] tipc: Disabling bearer <eth:syzkaller0>
[  163.666164][ T9259] xt_CT: No such helper "netbios-ns"
[  164.085766][ T9290] syz_tun: left promiscuous mode
[  164.116614][ T9290] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  164.142532][ T9296] tipc: Can't bind to reserved service type 1
[  164.599342][ T9317] xt_CT: No such helper "netbios-ns"
[  165.356736][ T9353] __nla_validate_parse: 10 callbacks suppressed
[  165.356755][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.982'.
[  165.625594][ T9367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.985'.
[  165.738190][ T9367] syzkaller0: entered promiscuous mode
[  165.749748][ T9367] syzkaller0: entered allmulticast mode
[  165.796492][ T9367] netlink: 576 bytes leftover after parsing attributes in process `syz.0.985'.
[  166.316609][ T9381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.988'.
[  166.462988][ T9397] FAULT_INJECTION: forcing a failure.
[  166.462988][ T9397] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  166.507429][ T9397] CPU: 0 UID: 0 PID: 9397 Comm: syz.2.990 Not tainted syzkaller #0 PREEMPT(full) 
[  166.507457][ T9397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  166.507470][ T9397] Call Trace:
[  166.507478][ T9397]  <TASK>
[  166.507487][ T9397]  dump_stack_lvl+0xe8/0x150
[  166.507528][ T9397]  should_fail_ex+0x412/0x560
[  166.507566][ T9397]  _copy_from_user+0x2d/0xb0
[  166.507592][ T9397]  __sys_bpf+0x229/0x950
[  166.507616][ T9397]  ? __pfx___sys_bpf+0x10/0x10
[  166.507652][ T9397]  ? ksys_write+0x242/0x270
[  166.507679][ T9397]  ? __pfx_ksys_write+0x10/0x10
[  166.507711][ T9397]  __x64_sys_bpf+0x7c/0x90
[  166.507742][ T9397]  do_syscall_64+0x14d/0xf80
[  166.507773][ T9397]  ? trace_irq_disable+0x3b/0x150
[  166.507791][ T9397]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.507813][ T9397]  ? clear_bhb_loop+0x40/0x90
[  166.507840][ T9397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.507861][ T9397] RIP: 0033:0x7f2cf059c819
[  166.507881][ T9397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.507898][ T9397] RSP: 002b:00007f2cf1464028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  166.507922][ T9397] RAX: ffffffffffffffda RBX: 00007f2cf0815fa0 RCX: 00007f2cf059c819
[  166.507938][ T9397] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[  166.507951][ T9397] RBP: 00007f2cf1464090 R08: 0000000000000000 R09: 0000000000000000
[  166.507963][ T9397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.507975][ T9397] R13: 00007f2cf0816038 R14: 00007f2cf0815fa0 R15: 00007ffdc785a138
[  166.508008][ T9397]  </TASK>
[  166.597369][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.991'.
[  166.996215][ T9415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.996'.
[  167.080777][ T9419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.997'.
[  167.235015][ T9419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.997'.
[  167.272150][ T9426] netlink: 40 bytes leftover after parsing attributes in process `syz.2.999'.
[  167.333774][ T5841] block nbd64: NBD_DISCONNECT
[  167.386074][ T9426] syzkaller0: entered promiscuous mode
[  167.397896][ T9426] syzkaller0: entered allmulticast mode
[  167.411101][ T9428] xt_CT: No such helper "pptp"
[  167.429089][ T9426] netlink: 576 bytes leftover after parsing attributes in process `syz.2.999'.
[  167.889566][ T5841] udevd[5841]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  167.971438][ T9446] syzkaller0: entered promiscuous mode
[  167.976995][ T9446] syzkaller0: entered allmulticast mode
[  168.794198][ T9488] syzkaller0: entered promiscuous mode
[  168.799878][ T9488] syzkaller0: entered allmulticast mode
[  168.819929][ T9491] team0: Device vlan6 is already an upper device of the team interface
[  168.952701][ T9496] syzkaller0: entered promiscuous mode
[  168.958344][ T9496] syzkaller0: entered allmulticast mode
[  168.984232][ T9496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.994912][ T9496] netlink: 'syz.3.1017': attribute type 1 has an invalid length.
[  169.113769][ T9496] bond5: entered promiscuous mode
[  169.145387][ T9496] 8021q: adding VLAN 0 to HW filter on device bond5
[  169.205319][ T9495] tipc: Resetting bearer <eth:syzkaller0>
[  169.217753][ T9507] xt_CT: No such helper "netbios-ns"
[  169.238162][ T9495] tipc: Disabling bearer <eth:syzkaller0>
[  169.488996][ T9516] netlink: set zone limit has 4 unknown bytes
[  169.703348][ T9536] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.779469][ T9531] xt_CT: No such helper "pptp"
[  169.987441][ T9552] syzkaller0: entered promiscuous mode
[  170.003790][ T9552] syzkaller0: entered allmulticast mode
[  170.025201][ T9555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.189946][ T9552] netlink: 'syz.1.1034': attribute type 1 has an invalid length.
[  170.295809][ T9552] bond1: entered promiscuous mode
[  170.304648][ T9552] 8021q: adding VLAN 0 to HW filter on device bond1
[  170.353433][ T9559] tipc: Started in network mode
[  170.368839][ T9559] tipc: Node identity 6e831299dc1e, cluster identity 4711
[  170.400402][ T9559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.433478][ T9551] tipc: Resetting bearer <eth:syzkaller0>
[  170.476990][ T9551] tipc: Disabling bearer <eth:syzkaller0>
[  170.991705][ T9608] __nla_validate_parse: 13 callbacks suppressed
[  170.991723][ T9608] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.1044'.
[  171.054629][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1044'.
[  171.089225][ T9614] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.416960][ T9630] openvswitch: netlink: IP tunnel TTL not specified.
[  171.460185][ T9612] tipc: Disabling bearer <eth:syzkaller0>
[  171.496227][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1048'.
[  171.791211][ T9646] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1054'.
[  171.800307][ T9646] netlink: 'syz.4.1054': attribute type 1 has an invalid length.
[  172.586822][ T9671] syzkaller0: entered promiscuous mode
[  172.592556][ T9671] syzkaller0: entered allmulticast mode
[  172.628940][ T9666] netlink: 'syz.4.1059': attribute type 3 has an invalid length.
[  172.866216][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1064'.
[  173.800308][ T9709] dvmrp0: entered allmulticast mode
[  174.041776][ T9714] xt_CT: No such helper "pptp"
[  174.178400][ T9719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1074'.
[  174.201074][ T9719] netlink: 'syz.2.1074': attribute type 7 has an invalid length.
[  174.208935][ T9719] netlink: 'syz.2.1074': attribute type 8 has an invalid length.
[  174.241932][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'.
[  174.363960][ T9725] netlink: 'syz.3.1076': attribute type 32 has an invalid length.
[  174.815785][ T9739] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1081'.
[  174.836395][ T9741] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1081'.
[  174.909078][ T9735] bond6: option ad_user_port_key: invalid value (65535)
[  174.917647][ T9735] bond6: option ad_user_port_key: allowed values 0 - 1023
[  174.942931][ T9735] bond6 (unregistering): Released all slaves
[  175.070241][ T9751] geneve3: entered promiscuous mode
[  175.088549][ T9751] geneve3: entered allmulticast mode
[  175.115491][ T8778] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  175.141492][ T8778] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  175.156328][ T8778] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  175.172717][ T8778] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  175.263163][ T9765] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma?
[  175.371340][ T9759] xt_CT: No such helper "pptp"
[  175.672905][ T9777] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1089'.
[  175.858796][ T9786] syzkaller0: entered promiscuous mode
[  175.864428][ T9786] syzkaller0: entered allmulticast mode
[  176.934736][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'.
[  177.001913][ T9799] netlink: 'syz.3.1096': attribute type 13 has an invalid length.
[  177.239500][ T9808] xt_CT: No such helper "pptp"
[  177.402766][ T9815] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1100'.
[  177.536702][ T9818] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1101'.
[  177.557103][ T9815] syzkaller0: entered promiscuous mode
[  177.564266][ T9815] syzkaller0: entered allmulticast mode
[  177.573706][ T9815] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1100'.
[  177.710246][ T9818] syzkaller0: entered promiscuous mode
[  177.720085][ T9818] syzkaller0: entered allmulticast mode
[  177.729378][ T9818] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1101'.
[  177.869819][ T9832] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1107'.
[  178.344469][ T9847] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1110'.
[  178.371277][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1111'.
[  178.625283][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1116'.
[  178.655374][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1116'.
[  178.782966][ T9877] xt_CT: No such helper "netbios-ns"
[  178.984921][ T9888] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  178.992657][ T9888] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  179.136620][ T9896] netlink: zone id is out of range
[  179.413447][ T9920] netlink: 'syz.4.1132': attribute type 1 has an invalid length.
[  179.736189][ T9937] netlink: 'syz.0.1140': attribute type 1 has an invalid length.
[  179.783908][ T9937] bond5: entered promiscuous mode
[  179.789062][ T9937] bond5: entered allmulticast mode
[  179.809088][ T9937] 8021q: adding VLAN 0 to HW filter on device bond5
[  179.866014][ T9945] erspan1: entered allmulticast mode
[  179.888071][ T9945] bond5: (slave erspan1): making interface the new active one
[  179.897371][ T9945] erspan1: entered promiscuous mode
[  179.906653][ T9945] bond5: (slave erspan1): Enslaving as an active interface with an up link
[  180.201838][ T9964] syzkaller0: entered promiscuous mode
[  180.207535][ T9964] syzkaller0: entered allmulticast mode
[  180.256162][ T9958] syzkaller0: entered promiscuous mode
[  180.271022][ T9958] syzkaller0: entered allmulticast mode
[  180.279263][ T9968] xt_CT: No such helper "netbios-ns"
[  180.595968][ T9981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.639977][ T9977] tipc: Resetting bearer <eth:syzkaller0>
[  180.800507][ T9984] syzkaller0: entered promiscuous mode
[  180.813011][ T9984] syzkaller0: entered allmulticast mode
[  180.872755][ T9975] tipc: Resetting bearer <eth:syzkaller0>
[  180.930862][ T9975] tipc: Disabling bearer <eth:syzkaller0>
[  181.112730][T10010] netlink: 'syz.3.1159': attribute type 33 has an invalid length.
[  181.120706][T10010] `: renamed from team0 (while UP)
[  181.188269][T10016] lo speed is unknown, defaulting to 1000
[  181.197303][T10016] lo speed is unknown, defaulting to 1000
[  181.241348][T10015] syzkaller0: entered promiscuous mode
[  181.246911][T10015] syzkaller0: entered allmulticast mode
[  181.267465][T10016] lo speed is unknown, defaulting to 1000
[  181.576348][T10016] infiniband syz0: set active
[  181.581588][T10016] infiniband syz0: added lo
[  181.584365][ T6487] lo speed is unknown, defaulting to 1000
[  181.619948][T10016] RDS/IB: syz0: added
[  181.624552][T10016] smc: adding ib device syz0 with port count 1
[  181.630839][T10016] smc:    ib device syz0 port 1 has no pnetid
[  181.638832][ T6487] lo speed is unknown, defaulting to 1000
[  181.647682][T10016] lo speed is unknown, defaulting to 1000
[  181.834201][T10016] lo speed is unknown, defaulting to 1000
[  181.990403][T10034] netlink: 'syz.3.1168': attribute type 14 has an invalid length.
[  182.010491][T10034] __nla_validate_parse: 13 callbacks suppressed
[  182.010507][T10034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1168'.
[  182.034715][T10033] netlink: 'syz.3.1168': attribute type 2 has an invalid length.
[  183.182322][T10016] lo speed is unknown, defaulting to 1000
[  183.259011][T10041] gretap0: entered promiscuous mode
[  183.302202][T10047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  183.332073][T10049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  183.605516][T10058] syzkaller0: entered promiscuous mode
[  183.611288][T10058] syzkaller0: entered allmulticast mode
[  183.998966][T10016] lo speed is unknown, defaulting to 1000
[  184.054994][T10089] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1185'.
[  184.088054][T10089] nbd: must specify a size in bytes for the device
[  184.343252][T10101] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1189'.
[  184.361279][T10101] netlink: 'syz.1.1189': attribute type 9 has an invalid length.
[  184.379487][T10101] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1189'.
[  184.401021][T10101] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1189'.
[  184.443156][T10100] netlink: 'syz.1.1189': attribute type 4 has an invalid length.
[  184.451041][T10104] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1190'.
[  184.501209][T10100] netlink: 'syz.1.1189': attribute type 4 has an invalid length.
[  184.657388][T10113] syzkaller0: entered promiscuous mode
[  184.663313][T10113] syzkaller0: entered allmulticast mode
[  184.685421][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1191'.
[  184.685421][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1191'.
[  184.731700][T10016] lo speed is unknown, defaulting to 1000
[  185.136687][T10131] xt_CT: No such helper "pptp"
[  185.459656][T10148] FAULT_INJECTION: forcing a failure.
[  185.459656][T10148] name failslab, interval 1, probability 0, space 0, times 0
[  185.473821][T10148] CPU: 0 UID: 0 PID: 10148 Comm: syz.3.1203 Not tainted syzkaller #0 PREEMPT(full) 
[  185.473848][T10148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  185.473860][T10148] Call Trace:
[  185.473867][T10148]  <TASK>
[  185.473875][T10148]  dump_stack_lvl+0xe8/0x150
[  185.473909][T10148]  should_fail_ex+0x412/0x560
[  185.473941][T10148]  should_failslab+0xa8/0x100
[  185.473970][T10148]  __kmalloc_node_noprof+0xf0/0x7c0
[  185.473994][T10148]  ? crypto_create_tfm_node+0x83/0x3f0
[  185.474030][T10148]  crypto_create_tfm_node+0x83/0x3f0
[  185.474064][T10148]  crypto_alloc_tfm_node+0x172/0x3f0
[  185.474094][T10148]  ? tipc_crypto_key_init+0x221/0x870
[  185.474121][T10148]  tipc_crypto_key_init+0x143/0x870
[  185.474158][T10148]  tipc_nl_node_set_key+0x6ae/0x9d0
[  185.474196][T10148]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  185.474234][T10148]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  185.474263][T10148]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  185.474301][T10148]  genl_family_rcv_msg_doit+0x22a/0x330
[  185.474331][T10148]  ? __asan_memcpy+0x40/0x70
[  185.474355][T10148]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  185.474398][T10148]  ? __dev_queue_xmit+0x28b/0x3870
[  185.474436][T10148]  genl_rcv_msg+0x61c/0x7a0
[  185.474472][T10148]  ? __pfx_genl_rcv_msg+0x10/0x10
[  185.474500][T10148]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  185.474531][T10148]  ? __lock_acquire+0x6b5/0x2cf0
[  185.474582][T10148]  netlink_rcv_skb+0x232/0x4b0
[  185.474606][T10148]  ? __pfx_genl_rcv_msg+0x10/0x10
[  185.474636][T10148]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  185.474679][T10148]  ? down_read+0x272/0x2e0
[  185.474697][T10148]  ? genl_rcv+0xd/0x40
[  185.474726][T10148]  genl_rcv+0x28/0x40
[  185.474751][T10148]  netlink_unicast+0x80f/0x9b0
[  185.474800][T10148]  ? __pfx_netlink_unicast+0x10/0x10
[  185.474836][T10148]  ? netlink_sendmsg+0x650/0xb40
[  185.474857][T10148]  ? skb_put+0x11b/0x210
[  185.474886][T10148]  netlink_sendmsg+0x813/0xb40
[  185.474920][T10148]  ? __pfx_netlink_sendmsg+0x10/0x10
[  185.474947][T10148]  ? aa_sock_msg_perm+0xf1/0x1b0
[  185.474979][T10148]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  185.475007][T10148]  ____sys_sendmsg+0x972/0x9f0
[  185.475045][T10148]  ? __pfx_____sys_sendmsg+0x10/0x10
[  185.475082][T10148]  ? import_iovec+0x73/0xa0
[  185.475110][T10148]  ___sys_sendmsg+0x2a5/0x360
[  185.475143][T10148]  ? __pfx____sys_sendmsg+0x10/0x10
[  185.475210][T10148]  ? __fget_files+0x2a/0x420
[  185.475240][T10148]  ? __fget_files+0x3a0/0x420
[  185.475283][T10148]  __x64_sys_sendmsg+0x1bd/0x2a0
[  185.475314][T10148]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  185.475352][T10148]  ? __pfx_ksys_write+0x10/0x10
[  185.475389][T10148]  do_syscall_64+0x14d/0xf80
[  185.475418][T10148]  ? trace_irq_disable+0x3b/0x150
[  185.475436][T10148]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.475458][T10148]  ? clear_bhb_loop+0x40/0x90
[  185.475483][T10148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.475503][T10148] RIP: 0033:0x7f744959c819
[  185.475523][T10148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.475540][T10148] RSP: 002b:00007f744a3b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.475562][T10148] RAX: ffffffffffffffda RBX: 00007f7449815fa0 RCX: 00007f744959c819
[  185.475582][T10148] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003
[  185.475595][T10148] RBP: 00007f744a3b9090 R08: 0000000000000000 R09: 0000000000000000
[  185.475608][T10148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  185.475619][T10148] R13: 00007f7449816038 R14: 00007f7449815fa0 R15: 00007ffdc0b2d3e8
[  185.475653][T10148]  </TASK>
[  185.519017][T10150] netlink: 'syz.0.1201': attribute type 4 has an invalid length.
[  185.872327][T10155] syzkaller0: entered promiscuous mode
[  185.901090][T10155] syzkaller0: entered allmulticast mode
[  185.992696][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'.
[  186.020305][ T6487] lo speed is unknown, defaulting to 1000
[  186.043272][ T6487] syz0: Port: 1 Link DOWN
[  186.048055][ T6487] lo speed is unknown, defaulting to 1000
[  186.567312][T10191] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1214'.
[  186.595459][T10191] bond0: (slave macvlan0): Error -98 calling set_mac_address
[  186.635017][T10195] FAULT_INJECTION: forcing a failure.
[  186.635017][T10195] name failslab, interval 1, probability 0, space 0, times 0
[  186.653159][T10195] CPU: 1 UID: 0 PID: 10195 Comm: syz.2.1215 Not tainted syzkaller #0 PREEMPT(full) 
[  186.653182][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  186.653194][T10195] Call Trace:
[  186.653201][T10195]  <TASK>
[  186.653208][T10195]  dump_stack_lvl+0xe8/0x150
[  186.653239][T10195]  should_fail_ex+0x412/0x560
[  186.653271][T10195]  should_failslab+0xa8/0x100
[  186.653297][T10195]  __kmalloc_cache_noprof+0x88/0x660
[  186.653320][T10195]  ? tipc_crypto_key_init+0x221/0x870
[  186.653338][T10195]  ? crypto_aead_setkey+0x166/0x220
[  186.653365][T10195]  tipc_crypto_key_init+0x221/0x870
[  186.653397][T10195]  tipc_nl_node_set_key+0x6ae/0x9d0
[  186.653430][T10195]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  186.653464][T10195]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  186.653490][T10195]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  186.653551][T10195]  genl_family_rcv_msg_doit+0x22a/0x330
[  186.653577][T10195]  ? __asan_memcpy+0x40/0x70
[  186.653599][T10195]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  186.653636][T10195]  ? __dev_queue_xmit+0x28b/0x3870
[  186.653671][T10195]  genl_rcv_msg+0x61c/0x7a0
[  186.653702][T10195]  ? __pfx_genl_rcv_msg+0x10/0x10
[  186.653726][T10195]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  186.653753][T10195]  ? __lock_acquire+0x6b5/0x2cf0
[  186.653789][T10195]  netlink_rcv_skb+0x232/0x4b0
[  186.653810][T10195]  ? __pfx_genl_rcv_msg+0x10/0x10
[  186.653836][T10195]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  186.653871][T10195]  ? down_read+0x272/0x2e0
[  186.653887][T10195]  ? genl_rcv+0xd/0x40
[  186.653913][T10195]  genl_rcv+0x28/0x40
[  186.653935][T10195]  netlink_unicast+0x80f/0x9b0
[  186.653970][T10195]  ? __pfx_netlink_unicast+0x10/0x10
[  186.654000][T10195]  ? netlink_sendmsg+0x650/0xb40
[  186.654019][T10195]  ? skb_put+0x11b/0x210
[  186.654043][T10195]  netlink_sendmsg+0x813/0xb40
[  186.654072][T10195]  ? __pfx_netlink_sendmsg+0x10/0x10
[  186.654095][T10195]  ? aa_sock_msg_perm+0xf1/0x1b0
[  186.654125][T10195]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  186.654150][T10195]  ____sys_sendmsg+0x972/0x9f0
[  186.654183][T10195]  ? __pfx_____sys_sendmsg+0x10/0x10
[  186.654216][T10195]  ? import_iovec+0x73/0xa0
[  186.654240][T10195]  ___sys_sendmsg+0x2a5/0x360
[  186.654270][T10195]  ? __pfx____sys_sendmsg+0x10/0x10
[  186.654329][T10195]  ? __fget_files+0x2a/0x420
[  186.654356][T10195]  ? __fget_files+0x3a0/0x420
[  186.654394][T10195]  __x64_sys_sendmsg+0x1bd/0x2a0
[  186.654421][T10195]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  186.654455][T10195]  ? __pfx_ksys_write+0x10/0x10
[  186.654488][T10195]  do_syscall_64+0x14d/0xf80
[  186.654523][T10195]  ? trace_irq_disable+0x3b/0x150
[  186.654539][T10195]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.654558][T10195]  ? clear_bhb_loop+0x40/0x90
[  186.654581][T10195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.654600][T10195] RIP: 0033:0x7f2cf059c819
[  186.654617][T10195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.654633][T10195] RSP: 002b:00007f2cf1464028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  186.654653][T10195] RAX: ffffffffffffffda RBX: 00007f2cf0815fa0 RCX: 00007f2cf059c819
[  186.654667][T10195] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003
[  186.654679][T10195] RBP: 00007f2cf1464090 R08: 0000000000000000 R09: 0000000000000000
[  186.654691][T10195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  186.654701][T10195] R13: 00007f2cf0816038 R14: 00007f2cf0815fa0 R15: 00007ffdc785a138
[  186.654732][T10195]  </TASK>
[  187.484280][T10220] syzkaller0: entered promiscuous mode
[  187.531845][T10220] syzkaller0: entered allmulticast mode
[  188.442406][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1235'.
[  188.466630][T10269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1235'.
[  188.569522][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'.
[  188.766144][T10293] lo speed is unknown, defaulting to 1000
[  188.786062][ T5907] IPVS: starting estimator thread 0...
[  188.881107][T10296] IPVS: using max 29 ests per chain, 69600 per kthread
[  189.452301][T10298] syzkaller0: entered promiscuous mode
[  189.457857][T10298] syzkaller0: entered allmulticast mode
[  189.525754][T10294] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.556985][T10294] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.605603][T10311] netlink: 'syz.3.1244': attribute type 1 has an invalid length.
[  190.582925][T10294] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.607575][T10294] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.658537][T10317] xt_CT: No such helper "pptp"
[  190.872202][T10330] xt_l2tp: missing protocol rule (udp|l2tpip)
[  190.880465][T10294] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.915690][T10294] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.007839][T10336] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1252'.
[  191.052279][T10337] netlink: 'syz.3.1253': attribute type 1 has an invalid length.
[  191.077532][T10294] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  191.134932][T10294] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.399704][ T8788] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  191.408555][T10345] nbd2: detected capacity change from 0 to 63
[  191.414950][T10342] netlink: 'syz.2.1254': attribute type 1 has an invalid length.
[  191.423261][T10342] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1254'.
[  191.432082][ T8788] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.455467][T10349] syzkaller0: entered promiscuous mode
[  191.461055][T10349] syzkaller0: entered allmulticast mode
[  191.514560][ T8789] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  191.524079][ T8789] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.585654][   T51] block nbd2: Receive control failed (result -104)
[  191.594834][ T8778] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  191.605070][ T8778] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.656337][ T8785] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  191.666076][ T8785] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.675671][T10348] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  192.163531][T10378] syzkaller0: entered promiscuous mode
[  192.169060][T10378] syzkaller0: entered allmulticast mode
[  192.169928][T10382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1271'.
[  192.386528][T10399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1275'.
[  192.422961][T10393] xt_CT: No such helper "netbios-ns"
[  192.470409][T10399] syzkaller0: entered promiscuous mode
[  192.482531][T10399] syzkaller0: entered allmulticast mode
[  192.506160][T10399] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1275'.
[  192.575535][T10395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1271'.
[  192.602049][T10403] xt_CT: No such helper "pptp"
[  193.019604][T10428] syzkaller0: entered promiscuous mode
[  193.025333][T10428] syzkaller0: entered allmulticast mode
[  193.037484][T10428] FAULT_INJECTION: forcing a failure.
[  193.037484][T10428] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  193.051016][T10428] CPU: 1 UID: 0 PID: 10428 Comm: syz.0.1284 Not tainted syzkaller #0 PREEMPT(full) 
[  193.051038][T10428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  193.051049][T10428] Call Trace:
[  193.051056][T10428]  <TASK>
[  193.051063][T10428]  dump_stack_lvl+0xe8/0x150
[  193.051093][T10428]  should_fail_ex+0x412/0x560
[  193.051125][T10428]  _copy_from_user+0x2d/0xb0
[  193.051146][T10428]  ___sys_sendmsg+0x1c6/0x360
[  193.051195][T10428]  ? __pfx____sys_sendmsg+0x10/0x10
[  193.051253][T10428]  ? __fget_files+0x2a/0x420
[  193.051282][T10428]  ? __fget_files+0x3a0/0x420
[  193.051321][T10428]  __x64_sys_sendmsg+0x1bd/0x2a0
[  193.051355][T10428]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  193.051390][T10428]  ? __pfx_ksys_write+0x10/0x10
[  193.051423][T10428]  do_syscall_64+0x14d/0xf80
[  193.051462][T10428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.051481][T10428]  ? clear_bhb_loop+0x40/0x90
[  193.051504][T10428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.051521][T10428] RIP: 0033:0x7f903a59c819
[  193.051538][T10428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  193.051554][T10428] RSP: 002b:00007f903b49b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  193.051573][T10428] RAX: ffffffffffffffda RBX: 00007f903a815fa0 RCX: 00007f903a59c819
[  193.051587][T10428] RDX: 008bb3a321ef809a RSI: 0000200000000280 RDI: 0000000000000009
[  193.051599][T10428] RBP: 00007f903b49b090 R08: 0000000000000000 R09: 0000000000000000
[  193.051611][T10428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.051622][T10428] R13: 00007f903a816038 R14: 00007f903a815fa0 R15: 00007ffc2238f2d8
[  193.051667][T10428]  </TASK>
[  193.273319][T10432] syzkaller0: entered promiscuous mode
[  193.278952][T10432] syzkaller0: entered allmulticast mode
[  193.290131][T10432] 0: reclassify loop, rule prio 0, protocol 800
[  193.492377][T10438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1288'.
[  193.551570][T10441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1290'.
[  193.630407][T10441] syzkaller0: entered promiscuous mode
[  193.638129][T10441] syzkaller0: entered allmulticast mode
[  193.659282][T10441] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1290'.
[  193.819828][T10456] netlink: 'syz.2.1297': attribute type 13 has an invalid length.
[  193.830643][T10456] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1297'.
[  194.056617][T10469] 8021q: adding VLAN 0 to HW filter on device bond4
[  194.096764][T10463] syzkaller0: entered promiscuous mode
[  194.103919][T10463] syzkaller0: entered allmulticast mode
[  194.111631][T10474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1304'.
[  194.172608][T10465] syzkaller0: entered promiscuous mode
[  194.178126][T10465] syzkaller0: entered allmulticast mode
[  194.207400][T10468] xt_CT: No such helper "netbios-ns"
[  194.224410][T10469] bond4: (slave ip6gretap1): making interface the new active one
[  194.252418][T10469] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  194.282771][T10465] FAULT_INJECTION: forcing a failure.
[  194.282771][T10465] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  194.297928][T10480] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1307'.
[  194.315966][T10465] CPU: 0 UID: 0 PID: 10465 Comm: syz.1.1301 Not tainted syzkaller #0 PREEMPT(full) 
[  194.315993][T10465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  194.316005][T10465] Call Trace:
[  194.316013][T10465]  <TASK>
[  194.316031][T10465]  dump_stack_lvl+0xe8/0x150
[  194.316066][T10465]  should_fail_ex+0x412/0x560
[  194.316102][T10465]  _copy_from_user+0x2d/0xb0
[  194.316127][T10465]  __copy_msghdr+0x3c5/0x5b0
[  194.316159][T10465]  ___sys_sendmsg+0x213/0x360
[  194.316192][T10465]  ? __pfx____sys_sendmsg+0x10/0x10
[  194.316255][T10465]  ? __fget_files+0x2a/0x420
[  194.316301][T10465]  ? __fget_files+0x3a0/0x420
[  194.316339][T10465]  __x64_sys_sendmsg+0x1bd/0x2a0
[  194.316367][T10465]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  194.316402][T10465]  ? __pfx_ksys_write+0x10/0x10
[  194.316433][T10465]  do_syscall_64+0x14d/0xf80
[  194.316461][T10465]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.316481][T10465]  ? clear_bhb_loop+0x40/0x90
[  194.316505][T10465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.316524][T10465] RIP: 0033:0x7fd7b579c819
[  194.316543][T10465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  194.316560][T10465] RSP: 002b:00007fd7b658e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  194.316581][T10465] RAX: ffffffffffffffda RBX: 00007fd7b5a15fa0 RCX: 00007fd7b579c819
[  194.316596][T10465] RDX: 008bb3a321ef809a RSI: 0000200000000280 RDI: 0000000000000009
[  194.316609][T10465] RBP: 00007fd7b658e090 R08: 0000000000000000 R09: 0000000000000000
[  194.316620][T10465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  194.316631][T10465] R13: 00007fd7b5a16038 R14: 00007fd7b5a15fa0 R15: 00007fff53c6ca48
[  194.316661][T10465]  </TASK>
[  194.643774][T10488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1309'.
[  194.699942][T10488] syzkaller0: entered promiscuous mode
[  194.717334][T10488] syzkaller0: entered allmulticast mode
[  194.735569][T10488] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1309'.
[  194.766463][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1310'.
[  195.077845][T10514] xt_hashlimit: invalid rate
[  195.251022][T10518] xt_CT: No such helper "netbios-ns"
[  195.361275][T10528] netlink: 'syz.0.1321': attribute type 1 has an invalid length.
[  195.399740][T10528] netlink: 'syz.0.1321': attribute type 2 has an invalid length.
[  195.416825][T10516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1314'.
[  195.883770][T10548] syzkaller0: entered promiscuous mode
[  195.900901][T10544] FAULT_INJECTION: forcing a failure.
[  195.900901][T10544] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  195.914130][T10548] syzkaller0: entered allmulticast mode
[  195.931663][T10544] CPU: 0 UID: 0 PID: 10544 Comm: syz.0.1326 Not tainted syzkaller #0 PREEMPT(full) 
[  195.931688][T10544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  195.931701][T10544] Call Trace:
[  195.931710][T10544]  <TASK>
[  195.931718][T10544]  dump_stack_lvl+0xe8/0x150
[  195.931749][T10544]  should_fail_ex+0x412/0x560
[  195.931784][T10544]  _copy_from_iter+0x3b0/0x1670
[  195.931816][T10544]  ? process_measurement+0x195e/0x1c80
[  195.931849][T10544]  ? __pfx__copy_from_iter+0x10/0x10
[  195.931884][T10544]  ? dev_get_by_index+0x22/0x2e0
[  195.931913][T10544]  ? dev_get_by_index+0x22/0x2e0
[  195.931956][T10544]  packet_sendmsg+0x30b2/0x50f0
[  195.931993][T10544]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  195.932027][T10544]  ? __lock_acquire+0x6b5/0x2cf0
[  195.932082][T10544]  ? aa_sk_perm+0x6d5/0x900
[  195.932108][T10544]  ? __pfx_packet_sendmsg+0x10/0x10
[  195.932146][T10544]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  195.932184][T10544]  ? aa_sock_msg_perm+0xf1/0x1b0
[  195.932215][T10544]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  195.932241][T10544]  ____sys_sendmsg+0x972/0x9f0
[  195.932275][T10544]  ? __pfx_____sys_sendmsg+0x10/0x10
[  195.932310][T10544]  ? import_iovec+0x73/0xa0
[  195.932335][T10544]  ___sys_sendmsg+0x2a5/0x360
[  195.932367][T10544]  ? __pfx____sys_sendmsg+0x10/0x10
[  195.932426][T10544]  ? __fget_files+0x2a/0x420
[  195.932455][T10544]  ? __fget_files+0x3a0/0x420
[  195.932494][T10544]  __x64_sys_sendmsg+0x1bd/0x2a0
[  195.932524][T10544]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  195.932560][T10544]  ? __pfx_ksys_write+0x10/0x10
[  195.932611][T10544]  do_syscall_64+0x14d/0xf80
[  195.932641][T10544]  ? trace_irq_disable+0x3b/0x150
[  195.932659][T10544]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.932691][T10544]  ? clear_bhb_loop+0x40/0x90
[  195.932715][T10544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.932735][T10544] RIP: 0033:0x7f903a59c819
[  195.932753][T10544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  195.932770][T10544] RSP: 002b:00007f903b49b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  195.932791][T10544] RAX: ffffffffffffffda RBX: 00007f903a815fa0 RCX: 00007f903a59c819
[  195.932805][T10544] RDX: 008bb3a321ef809a RSI: 0000200000000280 RDI: 0000000000000009
[  195.932819][T10544] RBP: 00007f903b49b090 R08: 0000000000000000 R09: 0000000000000000
[  195.932831][T10544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  195.932843][T10544] R13: 00007f903a816038 R14: 00007f903a815fa0 R15: 00007ffc2238f2d8
[  195.932874][T10544]  </TASK>
[  196.252194][T10551] netlink: 'syz.1.1328': attribute type 1 has an invalid length.
[  196.270892][T10551] netlink: 'syz.1.1328': attribute type 21 has an invalid length.
[  196.278965][T10551] netlink: 'syz.1.1328': attribute type 5 has an invalid length.
[  196.288199][T10551] netlink: 'syz.1.1328': attribute type 6 has an invalid length.
[  196.414264][T10525] macvtap0: entered promiscuous mode
[  196.420179][T10525] virtio_net virtio1 eth0: entered promiscuous mode
[  196.427112][T10525] macvtap0: entered allmulticast mode
[  196.432626][T10525] virtio_net virtio1 eth0: entered allmulticast mode
[  196.521949][T10525] virtio_net virtio1 eth0: left allmulticast mode
[  196.528448][T10525] virtio_net virtio1 eth0: left promiscuous mode
[  196.733585][T10560] xt_CT: No such helper "netbios-ns"
[  196.886983][T10574] trusted_key: syz.0.1334 sent an empty control message without MSG_MORE.
[  197.185594][T10582] netlink: 'syz.4.1337': attribute type 1 has an invalid length.
[  197.419974][T10588] bond0: (slave bridge3): making interface the new active one
[  197.472004][T10588] bond0: (slave bridge3): Enslaving as an active interface with an up link
[  197.844219][T10607] bond6: entered allmulticast mode
[  197.857308][T10607] 8021q: adding VLAN 0 to HW filter on device bond6
[  197.884612][T10610] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  198.232274][T10613] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.299953][T10613] batadv0: entered allmulticast mode
[  198.324924][T10613] bond6: (slave batadv0): Enslaving as an active interface with an up link
[  198.341280][ T5489] virtio_net virtio1 eth0: entered allmulticast mode
[  198.395484][ T5489] virtio_net virtio1 eth0: entered promiscuous mode
[  198.469878][T10614] bond6 (unregistering): (slave batadv0): Releasing backup interface
[  198.514668][T10614] batadv0: left allmulticast mode
[  198.542663][T10614] bond6 (unregistering): Released all slaves
[  198.556029][T10620] xt_CT: No such helper "netbios-ns"
[  199.004006][T10646] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  199.104734][T10638] xt_CT: No such helper "syz0"
[  199.137116][T10656] dvmrp1: entered allmulticast mode
[  199.146743][T10646] netlink: del zone limit has 8 unknown bytes
[  199.162946][T10657] dvmrp0: left allmulticast mode
[  199.182911][T10657] dvmrp1: left allmulticast mode
[  199.307250][T10656] x_tables: duplicate underflow at hook 2
[  199.313994][T10656] netlink: 'syz.3.1355': attribute type 2 has an invalid length.
[  199.667377][T10672] xt_CT: No such helper "netbios-ns"
[  200.211631][T10704] __nla_validate_parse: 12 callbacks suppressed
[  200.211651][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'.
[  200.231276][T10704] netlink: 'syz.3.1368': attribute type 5 has an invalid length.
[  200.242616][T10704] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1368'.
[  200.377238][T10709] lo speed is unknown, defaulting to 1000
[  200.414316][T10714] batadv_slave_1: entered promiscuous mode
[  200.759990][T10718] xt_CT: No such helper "netbios-ns"
[  201.071617][T10703] batadv_slave_1: left promiscuous mode
[  201.093844][   T51] block nbd3: Receive control failed (result -32)
[  201.811711][T10760] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1384'.
[  202.209867][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1389'.
[  202.240029][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1389'.
[  202.338027][T10786] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1392'.
[  202.661937][T10797] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1397'.
[  202.903722][T10799] syzkaller0: entered promiscuous mode
[  202.927299][T10799] syzkaller0: entered allmulticast mode
[  202.984375][T10801] lo speed is unknown, defaulting to 1000
[  205.369945][T10812] netlink: 'syz.2.1401': attribute type 3 has an invalid length.
[  205.434138][T10814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1402'.
[  205.838021][T10814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1402'.
[  205.983764][T10819] openvswitch: netlink: Flow key attr not present in new flow.
[  206.093761][T10828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1406'.
[  206.103002][T10827] netlink: 'syz.2.1404': attribute type 61 has an invalid length.
[  206.141992][T10827] IPVS: length: 182 != 8
[  206.299961][T10836] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1409'.
[  206.323431][T10827] bond5 (unregistering): Released all slaves
[  206.464451][T10835] lo speed is unknown, defaulting to 1000
[  206.493761][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1408'.
[  207.018866][T10866] netlink: 'syz.2.1420': attribute type 1 has an invalid length.
[  207.177090][T10878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1422'.
[  207.395289][T10885] gre0 speed is unknown, defaulting to 1000
[  207.409451][T10885] gre0 speed is unknown, defaulting to 1000
[  207.437698][T10882] x_tables: unsorted underflow at hook 3
[  207.453367][T10882] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1423'.
[  207.486788][T10885] gre0 speed is unknown, defaulting to 1000
[  207.600372][T10882] lo speed is unknown, defaulting to 1000
[  208.140794][T10901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  208.290547][T10927] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1434'.
[  208.616998][T10934] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  208.738075][T10937] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1437'.
[  208.758521][T10939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1438'.
[  208.848142][T10939] syzkaller0: entered promiscuous mode
[  208.856702][T10939] syzkaller0: entered allmulticast mode
[  208.950566][T10943] Bluetooth: MGMT ver 1.23
[  209.013177][T10885] infiniband syz1: set active
[  209.018642][T10885] infiniband syz1: added gre0
[  209.032121][T10885] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  209.036632][T10885] infiniband syz1: Couldn't open port 1
[  209.099238][ T6488] gre0 speed is unknown, defaulting to 1000
[  209.154314][T10885] RDS/IB: syz1: added
[  209.158414][T10885] smc: adding ib device syz1 with port count 1
[  209.193966][T10885] smc:    ib device syz1 port 1 has no pnetid
[  209.209051][ T5962] gre0 speed is unknown, defaulting to 1000
[  209.216360][T10885] gre0 speed is unknown, defaulting to 1000
[  209.525642][T10885] gre0 speed is unknown, defaulting to 1000
[  209.673100][T10885] gre0 speed is unknown, defaulting to 1000
[  209.817676][T10885] gre0 speed is unknown, defaulting to 1000
[  209.971649][T10885] gre0 speed is unknown, defaulting to 1000
[  215.743693][T11000] syzkaller0: entered promiscuous mode
[  215.749303][T11000] syzkaller0: entered allmulticast mode
[  215.824309][T11005] __nla_validate_parse: 3 callbacks suppressed
[  215.824328][T11005] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1450'.
[  216.290437][T11022] netlink: 'syz.0.1451': attribute type 1 has an invalid length.
[  216.352240][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1451'.
[  216.365343][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1451'.
[  216.701290][T11014] syzkaller0: entered promiscuous mode
[  216.706814][T11014] syzkaller0: entered allmulticast mode
[  216.746308][T11021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.797770][T11022] bond6: entered promiscuous mode
[  216.803311][T11022] 8021q: adding VLAN 0 to HW filter on device bond6
[  216.896734][T11032] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1453'.
[  216.926500][T11009] tipc: Resetting bearer <eth:syzkaller0>
[  216.934094][T11034] netlink: 'syz.4.1454': attribute type 1 has an invalid length.
[  216.952696][T11009] tipc: Disabling bearer <eth:syzkaller0>
[  216.963041][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'.
[  216.996744][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'.
[  217.030864][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'.
[  217.040849][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'.
[  217.066142][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'.
[  217.088876][T11042] IPv6: NLM_F_CREATE should be specified when creating new route
[  217.103030][T11034] 8021q: adding VLAN 0 to HW filter on device bond3
[  217.111917][T11038] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1454'.
[  217.124194][T11038] netlink: 'syz.4.1454': attribute type 3 has an invalid length.
[  217.153243][T11039] vlan0: entered promiscuous mode
[  217.158433][T11039] bond3: entered promiscuous mode
[  217.164443][T11039] vlan0: entered allmulticast mode
[  217.169658][T11039] bond3: entered allmulticast mode
[  217.187535][T11032] syzkaller0: entered promiscuous mode
[  217.194023][T11032] syzkaller0: entered allmulticast mode
[  217.479615][ T5907] IPVS: starting estimator thread 0...
[  217.571681][T11069] IPVS: using max 32 ests per chain, 76800 per kthread
[  218.613911][T11111] FAULT_INJECTION: forcing a failure.
[  218.613911][T11111] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  218.677254][T11106] syzkaller0: entered promiscuous mode
[  218.688621][T11111] CPU: 1 UID: 0 PID: 11111 Comm: syz.0.1477 Not tainted syzkaller #0 PREEMPT(full) 
[  218.688651][T11111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  218.688663][T11111] Call Trace:
[  218.688672][T11111]  <TASK>
[  218.688681][T11111]  dump_stack_lvl+0xe8/0x150
[  218.688717][T11111]  should_fail_ex+0x412/0x560
[  218.688763][T11111]  _copy_from_user+0x2d/0xb0
[  218.688788][T11111]  kstrtouint_from_user+0xd6/0x180
[  218.688822][T11111]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  218.688874][T11111]  proc_fail_nth_write+0x8e/0x210
[  218.688908][T11111]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  218.688946][T11111]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  218.688980][T11111]  vfs_write+0x29a/0xb90
[  218.689016][T11111]  ? __pfx_vfs_write+0x10/0x10
[  218.689042][T11111]  ? __fget_files+0x2a/0x420
[  218.689080][T11111]  ? __fget_files+0x3a0/0x420
[  218.689112][T11111]  ? __fget_files+0x2a/0x420
[  218.689155][T11111]  ksys_write+0x150/0x270
[  218.689183][T11111]  ? __pfx_ksys_write+0x10/0x10
[  218.689221][T11111]  do_syscall_64+0x14d/0xf80
[  218.689253][T11111]  ? trace_irq_disable+0x3b/0x150
[  218.689272][T11111]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.689294][T11111]  ? clear_bhb_loop+0x40/0x90
[  218.689322][T11111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.689344][T11111] RIP: 0033:0x7f903a55d04e
[  218.689365][T11111] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  218.689384][T11111] RSP: 002b:00007f903b49afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  218.689407][T11111] RAX: ffffffffffffffda RBX: 00007f903b49b6c0 RCX: 00007f903a55d04e
[  218.689423][T11111] RDX: 0000000000000001 RSI: 00007f903b49b0a0 RDI: 0000000000000004
[  218.689437][T11111] RBP: 00007f903b49b090 R08: 0000000000000000 R09: 0000000000000000
[  218.689451][T11111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.689464][T11111] R13: 00007f903a816038 R14: 00007f903a815fa0 R15: 00007ffc2238f2d8
[  218.689499][T11111]  </TASK>
[  218.701308][T11106] syzkaller0: entered allmulticast mode
[  219.151373][ T6487] IPVS: starting estimator thread 0...
[  219.241185][T11132] IPVS: using max 27 ests per chain, 64800 per kthread
[  219.442209][T11138] xt_CT: No such helper "netbios-ns"
[  219.617909][T11151] openvswitch: netlink: IP tunnel TTL not specified.
[  220.286039][T11173] syzkaller0: entered promiscuous mode
[  220.305971][T11173] syzkaller0: entered allmulticast mode
[  220.810313][T11201] xt_CT: No such helper "netbios-ns"
[  220.947937][T11203] __nla_validate_parse: 43 callbacks suppressed
[  220.947959][T11203] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1498'.
[  220.978409][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'.
[  221.646084][ T1942] block nbd2: Possible stuck request ffff888026870000: control (read@0,1024B). Runtime 30 seconds
[  221.657674][ T1942] block nbd2: Possible stuck request ffff888026870200: control (read@1024,1024B). Runtime 30 seconds
[  221.668693][ T1942] block nbd2: Possible stuck request ffff888026870400: control (read@2048,1024B). Runtime 30 seconds
[  221.679634][ T1942] block nbd2: Possible stuck request ffff888026870600: control (read@3072,1024B). Runtime 30 seconds
[  222.175075][T11121] Set syz1 is full, maxelem 65536 reached
[  226.722148][T11234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1504'.
[  226.744594][T11240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1503'.
[  226.810414][T11235] xt_CT: No such helper "pptp"
[  226.983189][T11251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1508'.
[  227.235750][T11265] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 3952. macoff=96
[  227.285860][T11263] xt_CT: No such helper "netbios-ns"
[  227.522556][T11270] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1516'.
[  227.555779][T11278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1519'.
[  227.569242][T11278] nbd: must specify a device to reconfigure
[  227.576013][T11278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1519'.
[  227.705843][T11284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1520'.
[  227.790147][T11282] xt_CT: No such helper "pptp"
[  228.082080][T11298] netlink: 364 bytes leftover after parsing attributes in process `syz.2.1525'.
[  228.152314][T11301] netlink: 'syz.1.1526': attribute type 1 has an invalid length.
[  228.173448][T11301] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  228.185815][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'.
[  228.399688][T11311] xt_CT: No such helper "netbios-ns"
[  228.441737][T11319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1533'.
[  228.508256][T11320] wg0: entered promiscuous mode
[  228.518497][T11320] wg0: entered allmulticast mode
[  228.664157][T11327] syzkaller0: entered promiscuous mode
[  228.669735][T11327] syzkaller0: entered allmulticast mode
[  229.008150][T11337] bond3: Unable to set peer notification delay as MII monitoring is disabled
[  229.019723][T11343] netlink: 'syz.1.1541': attribute type 83 has an invalid length.
[  229.030848][T11337] bond3 (unregistering): Released all slaves
[  229.122656][T11350] syzkaller0: entered promiscuous mode
[  229.128263][T11350] syzkaller0: entered allmulticast mode
[  229.370312][T11364] bond5: entered promiscuous mode
[  229.381103][T11364] bond5: entered allmulticast mode
[  229.386674][T11364] 8021q: adding VLAN 0 to HW filter on device bond5
[  229.609295][T11384] openvswitch: netlink: IP tunnel TTL not specified.
[  229.989537][T11403] bond7 (unregistering): Released all slaves
[  230.145963][T11412] xt_CT: No such helper "pptp"
[  230.219408][T11407] syzkaller0: entered promiscuous mode
[  230.226035][T11407] syzkaller0: entered allmulticast mode
[  230.683861][T11446] openvswitch: netlink: IP tunnel TTL not specified.
[  230.958997][T11465] syzkaller0: entered promiscuous mode
[  230.981305][T11465] syzkaller0: entered allmulticast mode
[  231.061605][T11467] FAULT_INJECTION: forcing a failure.
[  231.061605][T11467] name failslab, interval 1, probability 0, space 0, times 0
[  231.095113][T11465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.111446][T11467] CPU: 1 UID: 0 PID: 11467 Comm: syz.2.1580 Not tainted syzkaller #0 PREEMPT(full) 
[  231.111469][T11467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  231.111481][T11467] Call Trace:
[  231.111488][T11467]  <TASK>
[  231.111496][T11467]  dump_stack_lvl+0xe8/0x150
[  231.111528][T11467]  should_fail_ex+0x412/0x560
[  231.111560][T11467]  should_failslab+0xa8/0x100
[  231.111587][T11467]  __kmalloc_node_noprof+0xf0/0x7c0
[  231.111609][T11467]  ? crypto_create_tfm_node+0x83/0x3f0
[  231.111640][T11467]  crypto_create_tfm_node+0x83/0x3f0
[  231.111671][T11467]  crypto_ahash_init_tfm+0x162/0x770
[  231.111703][T11467]  crypto_create_tfm_node+0x18c/0x3f0
[  231.111733][T11467]  crypto_spawn_tfm2+0x5c/0x90
[  231.111754][T11467]  crypto_authenc_init_tfm+0x47/0x1c0
[  231.111786][T11467]  crypto_create_tfm_node+0x18c/0x3f0
[  231.111816][T11467]  crypto_spawn_tfm2+0x5c/0x90
[  231.111835][T11467]  aead_init_geniv+0x169/0x240
[  231.111863][T11467]  crypto_create_tfm_node+0x18c/0x3f0
[  231.111893][T11467]  crypto_alloc_tfm_node+0x172/0x3f0
[  231.111926][T11467]  esp6_init_state+0x63c/0x1240
[  231.111947][T11467]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  231.111980][T11467]  ? __lock_acquire+0x6b5/0x2cf0
[  231.112012][T11467]  ? __pfx_esp6_init_state+0x10/0x10
[  231.112065][T11467]  ? __xfrm_init_state+0x842/0x1460
[  231.112097][T11467]  __xfrm_init_state+0xac9/0x1460
[  231.112122][T11467]  ? __xfrm_init_state+0x842/0x1460
[  231.112152][T11467]  xfrm_add_sa+0x3073/0x4230
[  231.112186][T11467]  ? __pfx_xfrm_add_sa+0x10/0x10
[  231.112209][T11467]  ? apparmor_capable+0x126/0x170
[  231.112235][T11467]  ? __nla_parse+0x40/0x60
[  231.112258][T11467]  xfrm_user_rcv_msg+0x7ae/0xc40
[  231.112290][T11467]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  231.112348][T11467]  ? __pfx___mutex_trylock_common+0x10/0x10
[  231.112380][T11467]  ? rcu_is_watching+0x15/0xb0
[  231.112407][T11467]  ? trace_contention_end+0x3d/0x150
[  231.112427][T11467]  ? __mutex_lock+0x319/0x1300
[  231.112461][T11467]  netlink_rcv_skb+0x232/0x4b0
[  231.112483][T11467]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  231.112511][T11467]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  231.112544][T11467]  ? netlink_deliver_tap+0x2e/0x1b0
[  231.112564][T11467]  ? netlink_deliver_tap+0x2e/0x1b0
[  231.112587][T11467]  xfrm_netlink_rcv+0x79/0x90
[  231.112612][T11467]  netlink_unicast+0x80f/0x9b0
[  231.112649][T11467]  ? __pfx_netlink_unicast+0x10/0x10
[  231.112680][T11467]  ? netlink_sendmsg+0x650/0xb40
[  231.112699][T11467]  ? skb_put+0x11b/0x210
[  231.112725][T11467]  netlink_sendmsg+0x813/0xb40
[  231.112754][T11467]  ? __pfx_netlink_sendmsg+0x10/0x10
[  231.112779][T11467]  ? aa_sock_msg_perm+0xf1/0x1b0
[  231.112808][T11467]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  231.112832][T11467]  ____sys_sendmsg+0x972/0x9f0
[  231.112865][T11467]  ? __pfx_____sys_sendmsg+0x10/0x10
[  231.112898][T11467]  ? import_iovec+0x73/0xa0
[  231.112922][T11467]  ___sys_sendmsg+0x2a5/0x360
[  231.112970][T11467]  ? __pfx____sys_sendmsg+0x10/0x10
[  231.113038][T11467]  ? __fget_files+0x2a/0x420
[  231.113068][T11467]  ? __fget_files+0x3a0/0x420
[  231.113107][T11467]  __x64_sys_sendmsg+0x1bd/0x2a0
[  231.113136][T11467]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  231.113173][T11467]  ? __pfx_ksys_write+0x10/0x10
[  231.113206][T11467]  do_syscall_64+0x14d/0xf80
[  231.113234][T11467]  ? trace_irq_disable+0x3b/0x150
[  231.113251][T11467]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.113271][T11467]  ? clear_bhb_loop+0x40/0x90
[  231.113295][T11467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.113315][T11467] RIP: 0033:0x7f2cf059c819
[  231.113333][T11467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.113350][T11467] RSP: 002b:00007f2cf1464028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  231.113371][T11467] RAX: ffffffffffffffda RBX: 00007f2cf0815fa0 RCX: 00007f2cf059c819
[  231.113386][T11467] RDX: 0000000000004050 RSI: 0000200000000180 RDI: 0000000000000003
[  231.113399][T11467] RBP: 00007f2cf1464090 R08: 0000000000000000 R09: 0000000000000000
[  231.113411][T11467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  231.113423][T11467] R13: 00007f2cf0816038 R14: 00007f2cf0815fa0 R15: 00007ffdc785a138
[  231.113455][T11467]  </TASK>
[  231.146058][T11470] netlink: 'syz.0.1578': attribute type 1 has an invalid length.
[  231.577839][T11470] bond7: entered promiscuous mode
[  231.585820][T11470] 8021q: adding VLAN 0 to HW filter on device bond7
[  231.671358][T11461] tipc: Resetting bearer <eth:syzkaller0>
[  231.716221][T11461] tipc: Disabling bearer <eth:syzkaller0>
[  231.738499][T11488] __nla_validate_parse: 19 callbacks suppressed
[  231.738519][T11488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1586'.
[  231.769210][T11486] netlink: 'syz.1.1586': attribute type 5 has an invalid length.
[  231.792487][T11486] netlink: 'syz.1.1586': attribute type 1 has an invalid length.
[  231.821302][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1586'.
[  231.831409][T11486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.891431][T11488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  232.098237][T11506] syzkaller0: entered promiscuous mode
[  232.136140][T11506] syzkaller0: entered allmulticast mode
[  232.142042][T11514] openvswitch: netlink: IP tunnel TTL not specified.
[  232.230674][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1591'.
[  232.473799][T11526] syzkaller0: entered promiscuous mode
[  232.479341][T11526] syzkaller0: entered allmulticast mode
[  232.670893][T11543] netlink: 'syz.0.1594': attribute type 1 has an invalid length.
[  232.729570][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1594'.
[  232.757742][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1594'.
[  232.773100][T11526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.808778][T11543] bond8: entered promiscuous mode
[  232.814390][T11543] 8021q: adding VLAN 0 to HW filter on device bond8
[  233.015054][T11525] tipc: Resetting bearer <eth:syzkaller0>
[  233.062271][T11525] tipc: Disabling bearer <eth:syzkaller0>
[  233.116447][T11548] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1597'.
[  233.188943][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'.
[  233.376737][T11575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1605'.
[  233.573105][T11586] xt_l2tp: missing protocol rule (udp|l2tpip)
[  233.958036][T11609] syzkaller0: entered promiscuous mode
[  233.964016][T11609] syzkaller0: entered allmulticast mode
[  233.974727][T11609] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1615'.
[  234.294258][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1617'.
[  234.932288][T11635] vxcan2: entered allmulticast mode
[  234.979594][T11636] vxcan2: entered allmulticast mode
[  235.109827][T11653] xt_l2tp: missing protocol rule (udp|l2tpip)
[  235.453201][T11664] syzkaller0: entered promiscuous mode
[  235.458735][T11664] syzkaller0: entered allmulticast mode
[  235.484791][T11666] syzkaller0: entered promiscuous mode
[  235.490304][T11666] syzkaller0: entered allmulticast mode
[  235.588287][T11666] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.595576][T11666] netlink: 'syz.0.1633': attribute type 1 has an invalid length.
[  235.596420][T11672] block nbd4: Unsupported socket: should be TCP or UNIX.
[  235.669241][T11666] bond9: entered promiscuous mode
[  235.676408][T11666] 8021q: adding VLAN 0 to HW filter on device bond9
[  235.726865][T11665] tipc: Resetting bearer <eth:syzkaller0>
[  235.781385][T11681] netlink: 'syz.4.1638': attribute type 1 has an invalid length.
[  235.794662][T11665] tipc: Disabling bearer <eth:syzkaller0>
[  235.999498][T11695] xt_l2tp: missing protocol rule (udp|l2tpip)
[  236.021776][T11686] lo speed is unknown, defaulting to 1000
[  236.463736][T11705] syzkaller0: entered promiscuous mode
[  236.479405][T11705] syzkaller0: entered allmulticast mode
[  236.544435][T11686] gre0 speed is unknown, defaulting to 1000
[  236.741930][T11722] netlink: 'syz.4.1650': attribute type 1 has an invalid length.
[  237.237823][T11746] netlink: 'syz.3.1651': attribute type 1 has an invalid length.
[  237.296360][T11747] __nla_validate_parse: 9 callbacks suppressed
[  237.296378][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1651'.
[  237.312155][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1651'.
[  238.040836][T11745] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  238.063252][T11750] xt_l2tp: missing protocol rule (udp|l2tpip)
[  238.100613][T11746] bond6: entered promiscuous mode
[  238.110390][T11746] 8021q: adding VLAN 0 to HW filter on device bond6
[  238.500188][T11772] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  238.531843][T11772] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  238.877220][T11787] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1664'.
[  239.079713][T11795] syzkaller0: entered promiscuous mode
[  239.110495][T11803] xt_l2tp: missing protocol rule (udp|l2tpip)
[  239.121472][T11795] syzkaller0: entered allmulticast mode
[  246.252137][T11840] syzkaller0: entered promiscuous mode
[  246.257804][T11840] syzkaller0: entered allmulticast mode
[  246.327928][T11840] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.335251][T11840] netlink: 'syz.3.1671': attribute type 1 has an invalid length.
[  246.381915][T11840] bond7: entered promiscuous mode
[  246.392601][T11840] 8021q: adding VLAN 0 to HW filter on device bond7
[  246.413625][T11850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1671'.
[  246.434681][T11850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1671'.
[  246.505857][T11860] FAULT_INJECTION: forcing a failure.
[  246.505857][T11860] name failslab, interval 1, probability 0, space 0, times 0
[  246.518758][T11860] CPU: 1 UID: 0 PID: 11860 Comm: syz.4.1678 Not tainted syzkaller #0 PREEMPT(full) 
[  246.518784][T11860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  246.518816][T11860] Call Trace:
[  246.518824][T11860]  <TASK>
[  246.518833][T11860]  dump_stack_lvl+0xe8/0x150
[  246.518867][T11860]  should_fail_ex+0x412/0x560
[  246.518903][T11860]  should_failslab+0xa8/0x100
[  246.518931][T11860]  __kmalloc_node_noprof+0xf0/0x7c0
[  246.518955][T11860]  ? crypto_create_tfm_node+0x83/0x3f0
[  246.518994][T11860]  crypto_create_tfm_node+0x83/0x3f0
[  246.519028][T11860]  crypto_alloc_tfm_node+0x172/0x3f0
[  246.519056][T11860]  ? tipc_crypto_key_init+0x221/0x870
[  246.519083][T11860]  tipc_crypto_key_init+0x143/0x870
[  246.519120][T11860]  tipc_nl_node_set_key+0x6ae/0x9d0
[  246.519157][T11860]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  246.519193][T11860]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  246.519222][T11860]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  246.519270][T11860]  genl_family_rcv_msg_doit+0x22a/0x330
[  246.519296][T11860]  ? __asan_memcpy+0x40/0x70
[  246.519318][T11860]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  246.519359][T11860]  ? __lock_acquire+0x6b5/0x2cf0
[  246.519390][T11860]  genl_rcv_msg+0x61c/0x7a0
[  246.519421][T11860]  ? __pfx_genl_rcv_msg+0x10/0x10
[  246.519446][T11860]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  246.519473][T11860]  ? __lock_acquire+0x6b5/0x2cf0
[  246.519508][T11860]  netlink_rcv_skb+0x232/0x4b0
[  246.519530][T11860]  ? __pfx_genl_rcv_msg+0x10/0x10
[  246.519557][T11860]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  246.519595][T11860]  ? down_read+0x272/0x2e0
[  246.519611][T11860]  ? genl_rcv+0xd/0x40
[  246.519637][T11860]  genl_rcv+0x28/0x40
[  246.519659][T11860]  netlink_unicast+0x80f/0x9b0
[  246.519696][T11860]  ? __pfx_netlink_unicast+0x10/0x10
[  246.519728][T11860]  ? netlink_sendmsg+0x650/0xb40
[  246.519748][T11860]  ? skb_put+0x11b/0x210
[  246.519774][T11860]  netlink_sendmsg+0x813/0xb40
[  246.519804][T11860]  ? __pfx_netlink_sendmsg+0x10/0x10
[  246.519829][T11860]  ? aa_sock_msg_perm+0xf1/0x1b0
[  246.519859][T11860]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  246.519884][T11860]  ____sys_sendmsg+0x972/0x9f0
[  246.519918][T11860]  ? __pfx_____sys_sendmsg+0x10/0x10
[  246.519953][T11860]  ? import_iovec+0x73/0xa0
[  246.519977][T11860]  ___sys_sendmsg+0x2a5/0x360
[  246.520013][T11860]  ? __pfx____sys_sendmsg+0x10/0x10
[  246.520073][T11860]  ? __fget_files+0x2a/0x420
[  246.520100][T11860]  ? __fget_files+0x3a0/0x420
[  246.520138][T11860]  __x64_sys_sendmsg+0x1bd/0x2a0
[  246.520166][T11860]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  246.520201][T11860]  ? rcu_is_watching+0x15/0xb0
[  246.520260][T11860]  do_syscall_64+0x14d/0xf80
[  246.520289][T11860]  ? trace_irq_disable+0x3b/0x150
[  246.520306][T11860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.520337][T11860]  ? clear_bhb_loop+0x40/0x90
[  246.520360][T11860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.520379][T11860] RIP: 0033:0x7f8fa639c819
[  246.520397][T11860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  246.520414][T11860] RSP: 002b:00007f8fa7288028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  246.520434][T11860] RAX: ffffffffffffffda RBX: 00007f8fa6615fa0 RCX: 00007f8fa639c819
[  246.520448][T11860] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003
[  246.520460][T11860] RBP: 00007f8fa7288090 R08: 0000000000000000 R09: 0000000000000000
[  246.520471][T11860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  246.520482][T11860] R13: 00007f8fa6616038 R14: 00007f8fa6615fa0 R15: 00007ffd9d1e9658
[  246.520513][T11860]  </TASK>
[  246.953823][T11839] tipc: Resetting bearer <eth:syzkaller0>
[  246.997074][T11839] tipc: Disabling bearer <eth:syzkaller0>
[  247.109781][T11872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1681'.
[  247.122299][T11872] netlink: 'syz.4.1681': attribute type 5 has an invalid length.
[  247.286987][T11877] : renamed from veth0_to_bond (while UP)
[  247.499097][T11899] FAULT_INJECTION: forcing a failure.
[  247.499097][T11899] name failslab, interval 1, probability 0, space 0, times 0
[  247.538807][T11899] CPU: 0 UID: 0 PID: 11899 Comm: syz.4.1689 Not tainted syzkaller #0 PREEMPT(full) 
[  247.538836][T11899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  247.538849][T11899] Call Trace:
[  247.538858][T11899]  <TASK>
[  247.538867][T11899]  dump_stack_lvl+0xe8/0x150
[  247.538902][T11899]  should_fail_ex+0x412/0x560
[  247.538940][T11899]  should_failslab+0xa8/0x100
[  247.538970][T11899]  __kmalloc_node_noprof+0xf0/0x7c0
[  247.538995][T11899]  ? crypto_create_tfm_node+0x83/0x3f0
[  247.539030][T11899]  crypto_create_tfm_node+0x83/0x3f0
[  247.539064][T11899]  crypto_alloc_tfm_node+0x172/0x3f0
[  247.539095][T11899]  ? tipc_crypto_key_init+0x221/0x870
[  247.539122][T11899]  tipc_crypto_key_init+0x143/0x870
[  247.539160][T11899]  tipc_nl_node_set_key+0x6ae/0x9d0
[  247.539198][T11899]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  247.539237][T11899]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  247.539267][T11899]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  247.539305][T11899]  genl_family_rcv_msg_doit+0x22a/0x330
[  247.539334][T11899]  ? __asan_memcpy+0x40/0x70
[  247.539359][T11899]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  247.539403][T11899]  ? __lock_acquire+0x6b5/0x2cf0
[  247.539438][T11899]  genl_rcv_msg+0x61c/0x7a0
[  247.539473][T11899]  ? __pfx_genl_rcv_msg+0x10/0x10
[  247.539501][T11899]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  247.539532][T11899]  ? __lock_acquire+0x6b5/0x2cf0
[  247.539571][T11899]  netlink_rcv_skb+0x232/0x4b0
[  247.539595][T11899]  ? __pfx_genl_rcv_msg+0x10/0x10
[  247.539625][T11899]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  247.539667][T11899]  ? down_read+0x272/0x2e0
[  247.539693][T11899]  ? genl_rcv+0xd/0x40
[  247.539722][T11899]  genl_rcv+0x28/0x40
[  247.539748][T11899]  netlink_unicast+0x80f/0x9b0
[  247.539790][T11899]  ? __pfx_netlink_unicast+0x10/0x10
[  247.539825][T11899]  ? netlink_sendmsg+0x650/0xb40
[  247.539846][T11899]  ? skb_put+0x11b/0x210
[  247.539876][T11899]  netlink_sendmsg+0x813/0xb40
[  247.539909][T11899]  ? __pfx_netlink_sendmsg+0x10/0x10
[  247.539937][T11899]  ? aa_sock_msg_perm+0xf1/0x1b0
[  247.539970][T11899]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  247.539998][T11899]  ____sys_sendmsg+0x972/0x9f0
[  247.540036][T11899]  ? __pfx_____sys_sendmsg+0x10/0x10
[  247.540073][T11899]  ? import_iovec+0x73/0xa0
[  247.540113][T11899]  ___sys_sendmsg+0x2a5/0x360
[  247.540161][T11899]  ? __pfx____sys_sendmsg+0x10/0x10
[  247.540239][T11899]  ? __fget_files+0x2a/0x420
[  247.540267][T11899]  ? __fget_files+0x3a0/0x420
[  247.540326][T11899]  __x64_sys_sendmsg+0x1bd/0x2a0
[  247.540357][T11899]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  247.540396][T11899]  ? __pfx_ksys_write+0x10/0x10
[  247.540433][T11899]  do_syscall_64+0x14d/0xf80
[  247.540461][T11899]  ? trace_irq_disable+0x3b/0x150
[  247.540479][T11899]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.540501][T11899]  ? clear_bhb_loop+0x40/0x90
[  247.540525][T11899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.540545][T11899] RIP: 0033:0x7f8fa639c819
[  247.540564][T11899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.540581][T11899] RSP: 002b:00007f8fa7288028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  247.540602][T11899] RAX: ffffffffffffffda RBX: 00007f8fa6615fa0 RCX: 00007f8fa639c819
[  247.540616][T11899] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003
[  247.540629][T11899] RBP: 00007f8fa7288090 R08: 0000000000000000 R09: 0000000000000000
[  247.540642][T11899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  247.540653][T11899] R13: 00007f8fa6616038 R14: 00007f8fa6615fa0 R15: 00007ffd9d1e9658
[  247.540694][T11899]  </TASK>
[  248.113291][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1694'.
[  248.140581][T11918] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1697'.
[  248.148619][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1696'.
[  248.150610][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1694'.
[  248.515621][T11937] FAULT_INJECTION: forcing a failure.
[  248.515621][T11937] name failslab, interval 1, probability 0, space 0, times 0
[  248.556709][T11937] CPU: 1 UID: 0 PID: 11937 Comm: syz.3.1704 Not tainted syzkaller #0 PREEMPT(full) 
[  248.556739][T11937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  248.556753][T11937] Call Trace:
[  248.556761][T11937]  <TASK>
[  248.556770][T11937]  dump_stack_lvl+0xe8/0x150
[  248.556807][T11937]  should_fail_ex+0x412/0x560
[  248.556846][T11937]  should_failslab+0xa8/0x100
[  248.556878][T11937]  __kmalloc_node_noprof+0xf0/0x7c0
[  248.556905][T11937]  ? crypto_create_tfm_node+0x83/0x3f0
[  248.556941][T11937]  crypto_create_tfm_node+0x83/0x3f0
[  248.556979][T11937]  crypto_alloc_tfm_node+0x172/0x3f0
[  248.557010][T11937]  ? tipc_crypto_key_init+0x221/0x870
[  248.557039][T11937]  tipc_crypto_key_init+0x143/0x870
[  248.557079][T11937]  tipc_nl_node_set_key+0x6ae/0x9d0
[  248.557119][T11937]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  248.557163][T11937]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  248.557197][T11937]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  248.557238][T11937]  genl_family_rcv_msg_doit+0x22a/0x330
[  248.557270][T11937]  ? __asan_memcpy+0x40/0x70
[  248.557296][T11937]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  248.557341][T11937]  ? __dev_queue_xmit+0x28b/0x3870
[  248.557380][T11937]  genl_rcv_msg+0x61c/0x7a0
[  248.557417][T11937]  ? __pfx_genl_rcv_msg+0x10/0x10
[  248.557446][T11937]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  248.557480][T11937]  ? __lock_acquire+0x6b5/0x2cf0
[  248.557528][T11937]  netlink_rcv_skb+0x232/0x4b0
[  248.557553][T11937]  ? __pfx_genl_rcv_msg+0x10/0x10
[  248.557585][T11937]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  248.557628][T11937]  ? down_read+0x272/0x2e0
[  248.557654][T11937]  ? genl_rcv+0xd/0x40
[  248.557686][T11937]  genl_rcv+0x28/0x40
[  248.557712][T11937]  netlink_unicast+0x80f/0x9b0
[  248.557757][T11937]  ? __pfx_netlink_unicast+0x10/0x10
[  248.557794][T11937]  ? netlink_sendmsg+0x650/0xb40
[  248.557817][T11937]  ? skb_put+0x11b/0x210
[  248.557847][T11937]  netlink_sendmsg+0x813/0xb40
[  248.557883][T11937]  ? __pfx_netlink_sendmsg+0x10/0x10
[  248.557913][T11937]  ? aa_sock_msg_perm+0xf1/0x1b0
[  248.557948][T11937]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  248.557977][T11937]  ____sys_sendmsg+0x972/0x9f0
[  248.558017][T11937]  ? __pfx_____sys_sendmsg+0x10/0x10
[  248.558055][T11937]  ? import_iovec+0x73/0xa0
[  248.558084][T11937]  ___sys_sendmsg+0x2a5/0x360
[  248.558119][T11937]  ? __pfx____sys_sendmsg+0x10/0x10
[  248.558189][T11937]  ? __fget_files+0x2a/0x420
[  248.558221][T11937]  ? __fget_files+0x3a0/0x420
[  248.558266][T11937]  __x64_sys_sendmsg+0x1bd/0x2a0
[  248.558300][T11937]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  248.558340][T11937]  ? __pfx_ksys_write+0x10/0x10
[  248.558378][T11937]  do_syscall_64+0x14d/0xf80
[  248.558409][T11937]  ? trace_irq_disable+0x3b/0x150
[  248.558428][T11937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.558451][T11937]  ? clear_bhb_loop+0x40/0x90
[  248.558478][T11937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.558500][T11937] RIP: 0033:0x7f744959c819
[  248.558521][T11937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  248.558540][T11937] RSP: 002b:00007f744a3b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  248.558564][T11937] RAX: ffffffffffffffda RBX: 00007f7449815fa0 RCX: 00007f744959c819
[  248.558581][T11937] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003
[  248.558615][T11937] RBP: 00007f744a3b9090 R08: 0000000000000000 R09: 0000000000000000
[  248.558629][T11937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  248.558648][T11937] R13: 00007f7449816038 R14: 00007f7449815fa0 R15: 00007ffdc0b2d3e8
[  248.558683][T11937]  </TASK>
[  249.028575][T11946] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1708'.
[  249.149214][T11955] openvswitch: netlink: IP tunnel TTL not specified.
[  249.272006][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1705'.
[  249.320649][T11968] lo speed is unknown, defaulting to 1000
[  249.334840][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1706'.
[  249.362375][T11963] syzkaller0: entered promiscuous mode
[  249.410610][T11963] syzkaller0: entered allmulticast mode
[  249.563326][T11972] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  249.597924][T11972] bond6 (unregistering): Released all slaves
[  249.805611][T11968] gre0 speed is unknown, defaulting to 1000
[  250.036836][T11993] xt_CT: No such helper "pptp"
[  250.106087][T11996] syzkaller0: entered promiscuous mode
[  250.111746][T11996] syzkaller0: entered allmulticast mode
[  250.716369][T12021] openvswitch: netlink: IP tunnel TTL not specified.
[  251.102611][T12037] FAULT_INJECTION: forcing a failure.
[  251.102611][T12037] name failslab, interval 1, probability 0, space 0, times 0
[  251.145781][T12037] CPU: 1 UID: 0 PID: 12037 Comm: syz.3.1731 Not tainted syzkaller #0 PREEMPT(full) 
[  251.145810][T12037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  251.145823][T12037] Call Trace:
[  251.145830][T12037]  <TASK>
[  251.145839][T12037]  dump_stack_lvl+0xe8/0x150
[  251.145872][T12037]  should_fail_ex+0x412/0x560
[  251.145907][T12037]  should_failslab+0xa8/0x100
[  251.145936][T12037]  __kmalloc_node_noprof+0xf0/0x7c0
[  251.145959][T12037]  ? crypto_create_tfm_node+0x83/0x3f0
[  251.145992][T12037]  crypto_create_tfm_node+0x83/0x3f0
[  251.146024][T12037]  crypto_alloc_tfm_node+0x172/0x3f0
[  251.146053][T12037]  ? tipc_crypto_key_init+0x221/0x870
[  251.146079][T12037]  tipc_crypto_key_init+0x143/0x870
[  251.146113][T12037]  tipc_nl_node_set_key+0x6ae/0x9d0
[  251.146150][T12037]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  251.146186][T12037]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  251.146215][T12037]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  251.146251][T12037]  genl_family_rcv_msg_doit+0x22a/0x330
[  251.146279][T12037]  ? __asan_memcpy+0x40/0x70
[  251.146301][T12037]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  251.146342][T12037]  ? __dev_queue_xmit+0x28b/0x3870
[  251.146378][T12037]  genl_rcv_msg+0x61c/0x7a0
[  251.146411][T12037]  ? __pfx_genl_rcv_msg+0x10/0x10
[  251.146438][T12037]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  251.146467][T12037]  ? __lock_acquire+0x6b5/0x2cf0
[  251.146504][T12037]  netlink_rcv_skb+0x232/0x4b0
[  251.146528][T12037]  ? __pfx_genl_rcv_msg+0x10/0x10
[  251.146556][T12037]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  251.146596][T12037]  ? down_read+0x272/0x2e0
[  251.146614][T12037]  ? genl_rcv+0xd/0x40
[  251.146641][T12037]  genl_rcv+0x28/0x40
[  251.146665][T12037]  netlink_unicast+0x80f/0x9b0
[  251.146713][T12037]  ? __pfx_netlink_unicast+0x10/0x10
[  251.146746][T12037]  ? netlink_sendmsg+0x650/0xb40
[  251.146766][T12037]  ? skb_put+0x11b/0x210
[  251.146794][T12037]  netlink_sendmsg+0x813/0xb40
[  251.146826][T12037]  ? __pfx_netlink_sendmsg+0x10/0x10
[  251.146852][T12037]  ? aa_sock_msg_perm+0xf1/0x1b0
[  251.146883][T12037]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  251.146910][T12037]  ____sys_sendmsg+0x972/0x9f0
[  251.146945][T12037]  ? __pfx_____sys_sendmsg+0x10/0x10
[  251.146980][T12037]  ? import_iovec+0x73/0xa0
[  251.147006][T12037]  ___sys_sendmsg+0x2a5/0x360
[  251.147038][T12037]  ? __pfx____sys_sendmsg+0x10/0x10
[  251.147102][T12037]  ? __fget_files+0x2a/0x420
[  251.147130][T12037]  ? __fget_files+0x3a0/0x420
[  251.147171][T12037]  __x64_sys_sendmsg+0x1bd/0x2a0
[  251.147200][T12037]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  251.147236][T12037]  ? __pfx_ksys_write+0x10/0x10
[  251.147271][T12037]  do_syscall_64+0x14d/0xf80
[  251.147298][T12037]  ? trace_irq_disable+0x3b/0x150
[  251.147315][T12037]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.147335][T12037]  ? clear_bhb_loop+0x40/0x90
[  251.147360][T12037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.147380][T12037] RIP: 0033:0x7f744959c819
[  251.147397][T12037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.147414][T12037] RSP: 002b:00007f744a3b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  251.147435][T12037] RAX: ffffffffffffffda RBX: 00007f7449815fa0 RCX: 00007f744959c819
[  251.147449][T12037] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003
[  251.147462][T12037] RBP: 00007f744a3b9090 R08: 0000000000000000 R09: 0000000000000000
[  251.147474][T12037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  251.147486][T12037] R13: 00007f7449816038 R14: 00007f7449815fa0 R15: 00007ffdc0b2d3e8
[  251.147519][T12037]  </TASK>
[  251.623111][T12042] syzkaller0: entered promiscuous mode
[  251.628632][T12042] syzkaller0: entered allmulticast mode
[  251.681321][ T1942] block nbd2: Possible stuck request ffff888026870000: control (read@0,1024B). Runtime 60 seconds
[  251.694264][ T1942] block nbd2: Possible stuck request ffff888026870200: control (read@1024,1024B). Runtime 60 seconds
[  251.705232][ T1942] block nbd2: Possible stuck request ffff888026870400: control (read@2048,1024B). Runtime 60 seconds
[  251.716929][T12044] __nla_validate_parse: 7 callbacks suppressed
[  251.716941][T12044] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1735'.
[  251.720186][T12039] xt_CT: No such helper "pptp"
[  251.759076][T12042] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1734'.
[  251.771384][ T1942] block nbd2: Possible stuck request ffff888026870600: control (read@3072,1024B). Runtime 60 seconds
[  252.109989][T12057] openvswitch: netlink: IP tunnel TTL not specified.
[  252.186993][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1741'.
[  252.252680][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1742'.
[  252.517368][T12085] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1744'.
[  252.701161][T12082] xt_CT: No such helper "netbios-ns"
[  252.717664][T12091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1749'.
[  252.768702][T12092] syzkaller0: entered promiscuous mode
[  252.777947][T12092] syzkaller0: entered allmulticast mode
[  252.786831][T12092] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1748'.
[  252.864238][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'.
[  252.873336][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'.
[  253.055692][T12103] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1755'.
[  253.146125][T12114] netlink: 'syz.0.1756': attribute type 1 has an invalid length.
[  253.157707][T12108] netlink: 'syz.0.1756': attribute type 1 has an invalid length.
[  253.349267][T12127] netlink: 'syz.3.1761': attribute type 6 has an invalid length.
[  253.450046][T12127] No such timeout policy "syz0"
[  254.328440][T12182] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  254.371867][T12189] IPv6: Can't replace route, no match found
[  254.470801][T12194] xt_CT: No such helper "pptp"
[  255.155237][T12239] block nbd0: NBD_DISCONNECT
[  255.177675][T12233] siw: device registration error -23
[  255.208006][T12233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  255.225136][ T7726] lo speed is unknown, defaulting to 1000
[  255.232359][ T7726] syz0: Port: 1 Link ACTIVE
[  255.238436][ T7726] lo speed is unknown, defaulting to 1000
[  255.726286][T12272] Bluetooth: MGMT ver 1.23
[  255.732186][T12272] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  255.895387][T12282] netlink: 'syz.1.1811': attribute type 3 has an invalid length.
[  255.936535][T12284] netlink: 'syz.1.1811': attribute type 3 has an invalid length.
[  256.594283][T12320] syzkaller0: entered promiscuous mode
[  256.603092][T12320] syzkaller0: entered allmulticast mode
[  256.654755][T12320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.683558][T12320] netlink: 'syz.2.1820': attribute type 1 has an invalid length.
[  256.725088][T12320] bond6: entered promiscuous mode
[  256.730628][T12320] 8021q: adding VLAN 0 to HW filter on device bond6
[  256.754172][T12320] __nla_validate_parse: 17 callbacks suppressed
[  256.754189][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1820'.
[  256.792133][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1820'.
[  256.873096][T12318] tipc: Resetting bearer <eth:syzkaller0>
[  256.908130][T12318] tipc: Disabling bearer <eth:syzkaller0>
[  259.860170][ T5194] udevd[5194]: worker [5841] /devices/virtual/block/nbd2 is taking a long time
[  263.210518][T12387] syzkaller0: entered promiscuous mode
[  263.231180][T12387] syzkaller0: entered allmulticast mode
[  263.316447][T12387] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.333898][T12387] netlink: 'syz.0.1836': attribute type 1 has an invalid length.
[  263.433216][T12390] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1836'.
[  263.592530][T12387] bond10: entered promiscuous mode
[  263.611546][T12387] 8021q: adding VLAN 0 to HW filter on device bond10
[  263.712570][T12405] xt_CT: No such helper "pptp"
[  263.758082][T12386] tipc: Resetting bearer <eth:syzkaller0>
[  263.819484][T12386] tipc: Disabling bearer <eth:syzkaller0>
[  264.061358][T12420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.162610][T12420] syzkaller0: entered promiscuous mode
[  264.191289][T12420] syzkaller0: entered allmulticast mode
[  264.207577][T12420] tipc: Resetting bearer <eth:syzkaller0>
[  264.269409][T12433] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.1853'.
[  264.283119][ T8786] tipc: Resetting bearer <eth:syzkaller0>
[  264.395646][T12419] tipc: Resetting bearer <eth:syzkaller0>
[  264.478777][T12439] xt_CT: No such helper "pptp"
[  264.741260][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1856'.
[  265.760077][T12419] tipc: Disabling bearer <eth:syzkaller0>
[  265.803492][T12445] lo speed is unknown, defaulting to 1000
[  265.812127][T12468] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1858'.
[  265.831642][ T6490] tipc: Node number set to 2996638361
[  266.128763][T12481] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1863'.
[  266.183177][T12475] syzkaller0: entered promiscuous mode
[  266.188716][T12475] syzkaller0: entered allmulticast mode
[  266.226348][T12483] syzkaller0: entered promiscuous mode
[  266.250578][T12483] syzkaller0: entered allmulticast mode
[  266.268440][T12475] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1860'.
[  266.429722][T12486] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.436885][T12483] netlink: 'syz.0.1862': attribute type 1 has an invalid length.
[  266.457602][T12445] gre0 speed is unknown, defaulting to 1000
[  266.511533][T12486] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1862'.
[  266.535188][T12483] bond11: entered promiscuous mode
[  266.540712][T12483] 8021q: adding VLAN 0 to HW filter on device bond11
[  266.569427][T12482] tipc: Resetting bearer <eth:syzkaller0>
[  266.590172][T12482] tipc: Disabling bearer <eth:syzkaller0>
[  266.680715][T12495] syzkaller1: entered promiscuous mode
[  266.720203][T12495] syzkaller1: entered allmulticast mode
[  266.744333][T12495] syzkaller1: left promiscuous mode
[  266.750534][T12495] syzkaller1: left allmulticast mode
[  266.925144][T12503] xt_CT: No such helper "netbios-ns"
[  266.941657][T12506] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1871'.
[  266.963995][T12507] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1871'.
[  267.221034][T12521] netlink: 'syz.4.1875': attribute type 3 has an invalid length.
[  267.272092][T12531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1877'.
[  267.583880][T12542] syzkaller0: entered promiscuous mode
[  267.589634][T12542] syzkaller0: entered allmulticast mode
[  267.667803][T12536] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.682643][T12544] syzkaller1: entered promiscuous mode
[  267.688159][T12544] syzkaller1: entered allmulticast mode
[  267.718043][T12536] netlink: 'syz.0.1880': attribute type 1 has an invalid length.
[  267.846990][T12536] bond12: entered promiscuous mode
[  267.852854][T12536] 8021q: adding VLAN 0 to HW filter on device bond12
[  267.894139][T12534] tipc: Resetting bearer <eth:syzkaller0>
[  267.937687][T12534] tipc: Disabling bearer <eth:syzkaller0>
[  276.617906][T12631] syzkaller0: entered promiscuous mode
[  276.636919][T12631] syzkaller0: entered allmulticast mode
[  276.704441][T12629] lo speed is unknown, defaulting to 1000
[  276.744156][T12636] netlink: 'syz.1.1903': attribute type 1 has an invalid length.
[  276.766098][T12640] netlink: 'syz.3.1901': attribute type 1 has an invalid length.
[  276.818409][T12649] __nla_validate_parse: 5 callbacks suppressed
[  276.818430][T12649] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1901'.
[  276.938777][T12636] bond3: entered promiscuous mode
[  276.959300][T12636] 8021q: adding VLAN 0 to HW filter on device bond3
[  277.110743][T12640] bond8: entered promiscuous mode
[  277.126359][T12640] 8021q: adding VLAN 0 to HW filter on device bond8
[  277.148771][T12653] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1904'.
[  277.212251][T12629] gre0 speed is unknown, defaulting to 1000
[  277.314191][T12660] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1906'.
[  277.435165][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1907'.
[  277.494045][T12663] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1907'.
[  277.512999][T12664] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1907'.
[  278.182580][T12704] syzkaller0: entered promiscuous mode
[  278.207486][T12704] syzkaller0: entered allmulticast mode
[  278.345944][T12712] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.374437][T12704] netlink: 'syz.2.1919': attribute type 1 has an invalid length.
[  278.435295][T12712] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1919'.
[  278.521592][T12704] bond7: entered promiscuous mode
[  278.551409][T12704] 8021q: adding VLAN 0 to HW filter on device bond7
[  278.629789][T12703] tipc: Resetting bearer <eth:syzkaller0>
[  278.722387][T12703] tipc: Disabling bearer <eth:syzkaller0>
[  279.128383][T12753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1933'.
[  279.499598][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'.
[  279.619244][T12788] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1938'.
[  279.705648][T12740] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  279.717772][T12740] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  279.770837][T12791] xt_CT: No such helper "netbios-ns"
[  279.818904][T12794] netlink: 'syz.0.1942': attribute type 4 has an invalid length.
[  279.846794][T12795] netlink: 'syz.0.1942': attribute type 4 has an invalid length.
[  279.884573][ T5957] lo speed is unknown, defaulting to 1000
[  279.891220][ T5907] lo speed is unknown, defaulting to 1000
[  279.898559][ T5907] lo speed is unknown, defaulting to 1000
[  280.228695][T12817] block nbd0: not configured, cannot reconfigure
[  280.735240][T12837] syzkaller0: entered promiscuous mode
[  280.742280][T12837] syzkaller0: entered allmulticast mode
[  280.853853][T12851] xt_l2tp: missing protocol rule (udp|l2tpip)
[  281.370559][T12885] lo: entered allmulticast mode
[  281.396785][T12885] tunl0: entered allmulticast mode
[  281.423646][T12885] gre0: entered allmulticast mode
[  281.457644][T12885] gretap0: entered allmulticast mode
[  281.496503][T12885] erspan0: entered allmulticast mode
[  281.514572][T12885] ip_vti0: entered allmulticast mode
[  281.522710][T12885] ip6_vti0: entered allmulticast mode
[  281.533788][T12885] sit0: entered allmulticast mode
[  281.561152][T12885] ip6tnl0: entered allmulticast mode
[  281.583388][T12885] ip6gre0: entered allmulticast mode
[  281.602025][T12885] syz_tun: entered allmulticast mode
[  281.629847][T12885] ip6gretap0: entered allmulticast mode
[  281.651869][T12885] bridge0: entered allmulticast mode
[  281.676842][T12885] bond0: entered allmulticast mode
[  281.683717][T12885] bond_slave_0: entered allmulticast mode
[  281.699648][T12885] bond_slave_1: entered allmulticast mode
[  281.735219][T12885] team0: entered allmulticast mode
[  281.761398][T12885] team_slave_0: entered allmulticast mode
[  281.773156][T12885] team_slave_1: entered allmulticast mode
[  281.788709][T12885] nlmon0: entered allmulticast mode
[  281.796719][ T1942] block nbd2: Possible stuck request ffff888026870000: control (read@0,1024B). Runtime 90 seconds
[  281.807767][ T1942] block nbd2: Possible stuck request ffff888026870200: control (read@1024,1024B). Runtime 90 seconds
[  281.809039][T12885] caif0: entered allmulticast mode
[  281.818813][ T1942] block nbd2: Possible stuck request ffff888026870400: control (read@2048,1024B). Runtime 90 seconds
[  281.838494][T12885] veth0: entered allmulticast mode
[  281.870417][T12885] veth1: left promiscuous mode
[  281.877684][T12885] wg0: entered allmulticast mode
[  281.885040][T12885] wg1: entered allmulticast mode
[  281.894246][T12885] wg2: entered allmulticast mode
[  281.907250][T12885] veth0_to_bridge: entered allmulticast mode
[  281.930374][T12885] veth1_to_bridge: entered allmulticast mode
[  281.942939][T12885] veth1_to_bond: entered allmulticast mode
[  281.952862][T12885] veth0_to_team: entered allmulticast mode
[  281.962517][T12885] veth1_to_team: entered allmulticast mode
[  281.978672][ T1942] block nbd2: Possible stuck request ffff888026870600: control (read@3072,1024B). Runtime 90 seconds
[  281.997046][T12885] veth0_to_batadv: entered allmulticast mode
[  282.023572][T12885] batadv_slave_0: entered allmulticast mode
[  282.062663][T12885] veth1_to_batadv: entered allmulticast mode
[  282.068953][T12899] xt_CT: No such helper "netbios-ns"
[  282.075714][T12885] batadv_slave_1: entered allmulticast mode
[  282.130164][T12885] xfrm0: entered allmulticast mode
[  282.143672][T12885] veth0_to_hsr: entered allmulticast mode
[  282.164493][T12885] hsr_slave_0: entered allmulticast mode
[  282.172477][T12885] veth1_to_hsr: entered allmulticast mode
[  282.184958][T12885] hsr_slave_1: entered allmulticast mode
[  282.218144][T12885] hsr0: entered allmulticast mode
[  282.226503][T12885] veth1_virt_wifi: entered allmulticast mode
[  282.246460][T12885] veth0_virt_wifi: entered allmulticast mode
[  282.255994][T12885] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  282.265048][T12885] veth1_macvtap: entered allmulticast mode
[  282.273632][T12885] veth0_macvtap: entered allmulticast mode
[  282.283732][T12913] __nla_validate_parse: 4 callbacks suppressed
[  282.283757][T12913] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1983'.
[  282.356281][T12885] macvtap0: entered allmulticast mode
[  282.364098][T12885] macsec0: entered allmulticast mode
[  282.427832][T12885] geneve0: entered allmulticast mode
[  282.470652][T12885] geneve1: entered allmulticast mode
[  282.484628][T12885] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  282.502382][T12885] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  282.509587][T12885] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode
[  282.537596][T12885] bond1: left promiscuous mode
[  282.542779][T12885] bond1: entered allmulticast mode
[  282.548974][T12885] vlan2: entered allmulticast mode
[  282.554779][T12885] gretap1: entered allmulticast mode
[  282.560280][T12885] syztnl2: entered allmulticast mode
[  282.566211][T12885] netdevsim netdevsim2 eth0: entered allmulticast mode
[  282.575284][T12885] netdevsim netdevsim2 eth1: entered allmulticast mode
[  282.595394][T12885] netdevsim netdevsim2 eth2: entered allmulticast mode
[  282.614101][T12885] netdevsim netdevsim2 eth3: entered allmulticast mode
[  282.627354][T12885] bridge1: entered allmulticast mode
[  282.637371][T12885] veth2: entered allmulticast mode
[  282.644133][T12885] veth4: entered allmulticast mode
[  282.649672][T12885] vlan3: entered allmulticast mode
[  282.656155][T12885] ip6tnl1: entered allmulticast mode
[  282.663347][T12885] bond2: entered allmulticast mode
[  282.674523][T12885] bridge2: entered allmulticast mode
[  282.686825][T12885] bond3: left promiscuous mode
[  282.693517][T12885] bond3: entered allmulticast mode
[  282.701747][T12885] vlan4: entered allmulticast mode
[  282.707174][T12885] bond4: entered allmulticast mode
[  282.714579][T12885] ip6gretap1: entered allmulticast mode
[  282.723063][T12885] mac80211_hwsim hwsim15 wlan3: entered allmulticast mode
[  282.742263][T12885] gretap2: entered allmulticast mode
[  282.751551][T12885] veth6: entered allmulticast mode
[  282.761595][T12885] veth7: entered allmulticast mode
[  282.771601][T12885] veth8: entered allmulticast mode
[  282.781597][T12885] veth9: entered allmulticast mode
[  282.787339][T12885] bond5: left promiscuous mode
[  282.802409][T12885] macvlan0: entered allmulticast mode
[  282.811552][T12885] macvlan1: entered allmulticast mode
[  282.828628][T12885] bond6: left promiscuous mode
[  282.834552][T12885] bond6: entered allmulticast mode
[  282.860640][T12885] vlan0: entered allmulticast mode
[  282.866422][T12885] mac80211_hwsim hwsim23 wlan4: entered allmulticast mode
[  282.891873][T12885] bond7: left promiscuous mode
[  282.899421][T12885] bond7: entered allmulticast mode
[  282.918763][T12888] macsec1: entered promiscuous mode
[  282.937269][T12888] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  282.993896][ T8778] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.007803][ T8778] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.053027][ T8778] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.086753][ T8778] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.131423][T12921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1987'.
[  283.202186][   T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  283.257801][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1991'.
[  283.275107][ T7728] IPVS: starting estimator thread 0...
[  283.282307][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1991'.
[  283.321578][T12924] lo speed is unknown, defaulting to 1000
[  283.327516][T12924] lo speed is unknown, defaulting to 1000
[  283.368772][T12924] lo speed is unknown, defaulting to 1000
[  283.381051][T12932] IPVS: using max 31 ests per chain, 74400 per kthread
[  283.394796][T12924] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  283.460720][T12924] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  283.555378][T12924] lo speed is unknown, defaulting to 1000
[  283.563786][T12924] lo speed is unknown, defaulting to 1000
[  283.572267][T12924] lo speed is unknown, defaulting to 1000
[  283.582980][T12924] lo speed is unknown, defaulting to 1000
[  283.602549][T12924] lo speed is unknown, defaulting to 1000
[  283.695202][T12942] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1995'.
[  283.740407][T12940] xt_CT: No such helper "netbios-ns"
[  283.800325][T12946] erspan1: entered promiscuous mode
[  283.810536][T12946] erspan1: entered allmulticast mode
[  283.854428][T12950] syzkaller0: entered promiscuous mode
[  283.859945][T12950] syzkaller0: entered allmulticast mode
[  284.003629][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'.
[  284.225014][T12958] syzkaller0: entered promiscuous mode
[  284.243541][T12958] syzkaller0: entered allmulticast mode
[  284.267247][T12962] pim6reg1: entered promiscuous mode
[  284.272839][T12962] pim6reg1: entered allmulticast mode
[  284.292351][T12958] netlink: 576 bytes leftover after parsing attributes in process `syz.2.2003'.
[  284.446011][T12968] xt_CT: No such helper "pptp"
[  284.622094][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2013'.
[  284.717052][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2014'.
[  284.865109][T12997] syzkaller0: entered promiscuous mode
[  284.882648][T12997] syzkaller0: entered allmulticast mode
[  284.936233][T12997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  284.943542][T12997] netlink: 'syz.2.2017': attribute type 1 has an invalid length.
[  284.975719][T12997] bond8: entered promiscuous mode
[  284.981671][T12997] 8021q: adding VLAN 0 to HW filter on device bond8
[  284.991830][T12997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2017'.
[  285.004043][T12996] tipc: Resetting bearer <eth:syzkaller0>
[  285.081191][T12996] tipc: Disabling bearer <eth:syzkaller0>
[  285.177938][T13008] syzkaller0: entered promiscuous mode
[  285.184220][T13008] syzkaller0: entered allmulticast mode
[  285.388448][T13014] syz_tun: entered promiscuous mode
[  285.431258][T13014] vlan9: entered promiscuous mode
[  285.919987][T13029] xt_CT: No such helper "netbios-ns"
[  286.106188][T13042] syzkaller0: entered promiscuous mode
[  286.119063][T13042] syzkaller0: entered allmulticast mode
[  286.223170][T13042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  286.241669][T13042] netlink: 'syz.2.2036': attribute type 1 has an invalid length.
[  286.297044][T13042] bond9: entered promiscuous mode
[  286.302722][T13042] 8021q: adding VLAN 0 to HW filter on device bond9
[  286.316054][T13046] syzkaller0: entered promiscuous mode
[  286.321837][T13046] syzkaller0: entered allmulticast mode
[  286.356290][T13040] tipc: Resetting bearer <eth:syzkaller0>
[  286.423358][T13040] tipc: Disabling bearer <eth:syzkaller0>
[  286.472037][T13049] lo speed is unknown, defaulting to 1000
[  286.810497][T13067] xt_CT: No such helper "pptp"
[  287.091488][T13049] gre0 speed is unknown, defaulting to 1000
[  287.276754][T13049] lo speed is unknown, defaulting to 1000
[  293.647686][T13121] __nla_validate_parse: 12 callbacks suppressed
[  293.647702][T13121] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2047'.
[  293.692502][T13112] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2046'.
[  293.870530][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'.
[  293.887247][T13133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2054'.
[  293.985728][T13134] xt_CT: No such helper "netbios-ns"
[  294.028516][T13133] syzkaller0: entered promiscuous mode
[  294.052758][T13133] syzkaller0: entered allmulticast mode
[  294.086892][T13133] netlink: 576 bytes leftover after parsing attributes in process `syz.2.2054'.
[  294.333392][T13157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2063'.
[  294.396660][T13159] lo speed is unknown, defaulting to 1000
[  294.439800][T13166] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2065'.
[  294.602588][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'.
[  294.667984][T13172] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2066'.
[  294.677821][T13172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2066'.
[  294.720536][T13159] gre0 speed is unknown, defaulting to 1000
[  294.989186][T13159] lo speed is unknown, defaulting to 1000
[  295.018509][T13178] bridge_slave_1: left allmulticast mode
[  295.024325][T13178] bridge_slave_1: left promiscuous mode
[  295.030100][T13178] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.048046][T13178] bridge_slave_0: left allmulticast mode
[  295.068462][T13178] bridge_slave_0: left promiscuous mode
[  295.094620][T13178] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.119445][T13182] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  295.225123][T13184] syzkaller0: entered promiscuous mode
[  295.230766][T13184] syzkaller0: entered allmulticast mode
[  295.357188][T13188] bridge4: entered promiscuous mode
[  295.371102][T13188] bridge4: entered allmulticast mode
[  295.569553][T13205] FAULT_INJECTION: forcing a failure.
[  295.569553][T13205] name failslab, interval 1, probability 0, space 0, times 0
[  295.600845][T13205] CPU: 0 UID: 0 PID: 13205 Comm: syz.4.2077 Not tainted syzkaller #0 PREEMPT(full) 
[  295.600872][T13205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  295.600883][T13205] Call Trace:
[  295.600891][T13205]  <TASK>
[  295.600911][T13205]  dump_stack_lvl+0xe8/0x150
[  295.600945][T13205]  should_fail_ex+0x412/0x560
[  295.600978][T13205]  should_failslab+0xa8/0x100
[  295.601006][T13205]  __kmalloc_cache_node_noprof+0x8a/0x6b0
[  295.601031][T13205]  ? __get_vm_area_node+0x13f/0x300
[  295.601055][T13205]  __get_vm_area_node+0x13f/0x300
[  295.601072][T13205]  ? unwind_next_frame+0xa5/0x23c0
[  295.601105][T13205]  __vmalloc_node_range_noprof+0x372/0x1730
[  295.601127][T13205]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  295.601161][T13205]  ? __lock_acquire+0x6b5/0x2cf0
[  295.601199][T13205]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  295.601221][T13205]  ? aa_file_perm+0x192/0x15e0
[  295.601251][T13205]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  295.601269][T13205]  __vmalloc_noprof+0xd2/0x120
[  295.601289][T13205]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  295.601312][T13205]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  295.601336][T13205]  bpf_prog_alloc+0x3c/0x1a0
[  295.601358][T13205]  bpf_prog_load+0x7ba/0x1ae0
[  295.601393][T13205]  ? __pfx_bpf_prog_load+0x10/0x10
[  295.601434][T13205]  ? bpf_lsm_bpf+0x9/0x20
[  295.601459][T13205]  ? security_bpf+0x7e/0x2d0
[  295.601488][T13205]  __sys_bpf+0x618/0x950
[  295.601508][T13205]  ? __pfx___sys_bpf+0x10/0x10
[  295.601524][T13205]  ? kmem_cache_free+0x187/0x630
[  295.601581][T13205]  ? ksys_write+0x1fc/0x270
[  295.601607][T13205]  ? __pfx_ksys_write+0x10/0x10
[  295.601637][T13205]  __x64_sys_bpf+0x7c/0x90
[  295.601668][T13205]  do_syscall_64+0x14d/0xf80
[  295.601698][T13205]  ? trace_irq_disable+0x3b/0x150
[  295.601716][T13205]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.601738][T13205]  ? clear_bhb_loop+0x40/0x90
[  295.601764][T13205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.601785][T13205] RIP: 0033:0x7f8fa639c819
[  295.601805][T13205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.601824][T13205] RSP: 002b:00007f8fa7288028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  295.601846][T13205] RAX: ffffffffffffffda RBX: 00007f8fa6615fa0 RCX: 00007f8fa639c819
[  295.601861][T13205] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005
[  295.601875][T13205] RBP: 00007f8fa7288090 R08: 0000000000000000 R09: 0000000000000000
[  295.601888][T13205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.601900][T13205] R13: 00007f8fa6616038 R14: 00007f8fa6615fa0 R15: 00007ffd9d1e9658
[  295.601940][T13205]  </TASK>
[  295.924392][T13205] syz.4.2077: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  295.973351][T13205] CPU: 1 UID: 0 PID: 13205 Comm: syz.4.2077 Not tainted syzkaller #0 PREEMPT(full) 
[  295.973388][T13205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  295.973402][T13205] Call Trace:
[  295.973411][T13205]  <TASK>
[  295.973420][T13205]  dump_stack_lvl+0xe8/0x150
[  295.973457][T13205]  warn_alloc+0x249/0x340
[  295.973490][T13205]  ? __pfx_warn_alloc+0x10/0x10
[  295.973525][T13205]  ? __get_vm_area_node+0x13f/0x300
[  295.973552][T13205]  ? __get_vm_area_node+0x2b5/0x300
[  295.973571][T13205]  ? unwind_next_frame+0xa5/0x23c0
[  295.973611][T13205]  __vmalloc_node_range_noprof+0x397/0x1730
[  295.973651][T13205]  ? __lock_acquire+0x6b5/0x2cf0
[  295.973694][T13205]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  295.973727][T13205]  ? aa_file_perm+0x192/0x15e0
[  295.973767][T13205]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  295.973787][T13205]  __vmalloc_noprof+0xd2/0x120
[  295.973811][T13205]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  295.973836][T13205]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  295.973864][T13205]  bpf_prog_alloc+0x3c/0x1a0
[  295.973888][T13205]  bpf_prog_load+0x7ba/0x1ae0
[  295.973933][T13205]  ? __pfx_bpf_prog_load+0x10/0x10
[  295.973979][T13205]  ? bpf_lsm_bpf+0x9/0x20
[  295.974007][T13205]  ? security_bpf+0x7e/0x2d0
[  295.974038][T13205]  __sys_bpf+0x618/0x950
[  295.974062][T13205]  ? __pfx___sys_bpf+0x10/0x10
[  295.974079][T13205]  ? kmem_cache_free+0x187/0x630
[  295.974122][T13205]  ? ksys_write+0x1fc/0x270
[  295.974148][T13205]  ? __pfx_ksys_write+0x10/0x10
[  295.974181][T13205]  __x64_sys_bpf+0x7c/0x90
[  295.974213][T13205]  do_syscall_64+0x14d/0xf80
[  295.974247][T13205]  ? trace_irq_disable+0x3b/0x150
[  295.974266][T13205]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.974289][T13205]  ? clear_bhb_loop+0x40/0x90
[  295.974315][T13205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.974337][T13205] RIP: 0033:0x7f8fa639c819
[  295.974357][T13205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.974376][T13205] RSP: 002b:00007f8fa7288028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  295.974399][T13205] RAX: ffffffffffffffda RBX: 00007f8fa6615fa0 RCX: 00007f8fa639c819
[  295.974415][T13205] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005
[  295.974429][T13205] RBP: 00007f8fa7288090 R08: 0000000000000000 R09: 0000000000000000
[  295.974443][T13205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.974456][T13205] R13: 00007f8fa6616038 R14: 00007f8fa6615fa0 R15: 00007ffd9d1e9658
[  295.974490][T13205]  </TASK>
[  295.974581][T13205] Mem-Info:
[  296.314014][T13205] active_anon:5954 inactive_anon:0 isolated_anon:0
[  296.314014][T13205]  active_file:3635 inactive_file:40020 isolated_file:0
[  296.314014][T13205]  unevictable:768 dirty:259 writeback:0
[  296.314014][T13205]  slab_reclaimable:11611 slab_unreclaimable:107089
[  296.314014][T13205]  mapped:29758 shmem:1357 pagetables:1363
[  296.314014][T13205]  sec_pagetables:0 bounce:0
[  296.314014][T13205]  kernel_misc_reclaimable:0
[  296.314014][T13205]  free:1316735 free_pcp:9903 free_cma:0
[  296.405776][T13205] Node 0 active_anon:23816kB inactive_anon:0kB active_file:14540kB inactive_file:159884kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119032kB dirty:1036kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14820kB pagetables:5328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  296.442374][T13205] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  296.541641][T13205] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  296.637086][T13205] lowmem_reserve[]: 0 2492 2493 2493 2493
[  296.659271][T13205] Node 0 DMA32 free:1316520kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23740kB inactive_anon:0kB active_file:14540kB inactive_file:159884kB unevictable:1536kB writepending:1036kB zspages:0kB present:3129332kB managed:2552328kB mlocked:0kB bounce:0kB free_pcp:39032kB local_pcp:21152kB free_cma:0kB
[  296.695711][T13205] lowmem_reserve[]: 0 0 0 0 0
[  296.702733][T13205] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB
[  296.737758][T13205] lowmem_reserve[]: 0 0 0 0 0
[  296.749505][T13205] Node 1 Normal free:3936612kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  296.807266][T13205] lowmem_reserve[]: 0 0 0 0 0
[  296.817486][T13205] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  296.851732][T13205] Node 0 DMA32: 2442*4kB (UME) 3199*8kB (UME) 1738*16kB (UME) 591*32kB (UME) 200*64kB (UM) 150*128kB (UME) 270*256kB (UM) 191*512kB (UME) 165*1024kB (UME) 101*2048kB (UM) 161*4096kB (UM) = 1316256kB
[  296.912496][T13205] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  296.933627][T13231] bond4: entered allmulticast mode
[  296.939344][T13231] 8021q: adding VLAN 0 to HW filter on device bond4
[  296.945182][T13205] Node 1 Normal: 5*4kB (UM) 14*8kB (UM) 10*16kB (UM) 10*32kB (UM) 6*64kB (UM) 5*128kB (UM) 5*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3936612kB
[  296.964376][T13205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  296.974396][T13205] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  296.983899][T13205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  296.993665][T13205] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  297.003152][T13205] 45008 total pagecache pages
[  297.007988][T13205] 0 pages in swap cache
[  297.012334][T13205] Free swap  = 124996kB
[  297.016512][T13205] Total swap = 124996kB
[  297.020990][T13205] 2097051 pages RAM
[  297.024821][T13205] 0 pages HighMem/MovableOnly
[  297.029524][T13205] 427135 pages reserved
[  297.033947][T13205] 0 pages cma reserved
[  297.049410][T13231] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  297.115590][T13238] syzkaller0: entered promiscuous mode
[  297.129086][T13238] syzkaller0: entered allmulticast mode
[  297.524045][T13257] lo speed is unknown, defaulting to 1000
[  297.862513][T13257] gre0 speed is unknown, defaulting to 1000
[  298.373122][T13295] syzkaller0: entered promiscuous mode
[  298.378649][T13295] syzkaller0: entered allmulticast mode
[  298.607823][T13257] lo speed is unknown, defaulting to 1000
[  298.733362][T13322] __nla_validate_parse: 15 callbacks suppressed
[  298.733380][T13322] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2108'.
[  305.559594][T13354] syzkaller0: entered promiscuous mode
[  305.566639][T13354] syzkaller0: entered allmulticast mode
[  305.715170][T13354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.722992][T13354] netlink: 'syz.1.2113': attribute type 1 has an invalid length.
[  305.767545][T13354] bond5: entered promiscuous mode
[  305.773813][T13354] 8021q: adding VLAN 0 to HW filter on device bond5
[  305.793479][T13354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2113'.
[  305.804805][T13371] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  305.874394][T13353] tipc: Resetting bearer <eth:syzkaller0>
[  305.982664][T13353] tipc: Disabling bearer <eth:syzkaller0>
[  306.063196][T13384] netlink: 'syz.0.2122': attribute type 13 has an invalid length.
[  306.104113][T13384] netlink: 'syz.0.2122': attribute type 17 has an invalid length.
[  306.146666][T13382] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2124'.
[  306.187490][T13378] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.195257][T13378] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.378603][T13392] xt_CT: No such helper "pptp"
[  306.746873][ T6482] lo speed is unknown, defaulting to 1000
[  306.781542][T13384] erspan0: left promiscuous mode
[  306.852352][T13384] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.862700][T13384] 8021q: adding VLAN 0 to HW filter on device team0
[  306.875260][T13384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  306.900551][ T8788] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.911122][ T8788] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  306.920825][ T8788] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.930092][ T8788] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  306.941787][T13415] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  306.964059][ T6482] lo speed is unknown, defaulting to 1000
[  306.975011][ T8788] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.988598][ T8788] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  306.999767][ T8788] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.009337][ T8788] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  307.020996][ T5827] lo speed is unknown, defaulting to 1000
[  307.219882][T13420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2133'.
[  307.268261][T13423] sctp: [Deprecated]: syz.3.2134 (pid 13423) Use of struct sctp_assoc_value in delayed_ack socket option.
[  307.268261][T13423] Use struct sctp_sack_info instead
[  307.764669][T13446] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2136'.
[  308.066372][T13424] lec:lec_atm_close: lec0: Shut down!
[  308.149530][T13469] netlink: 'syz.3.2145': attribute type 2 has an invalid length.
[  308.195960][T13469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2145'.
[  308.254969][T13471] netlink: 'syz.2.2147': attribute type 30 has an invalid length.
[  308.280625][T13471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2147'.
[  308.410246][T13471] bond10: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  308.459466][T13471] bond10 (unregistering): Released all slaves
[  308.547330][T13489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.882781][   T30] audit: type=1804 audit(1775107195.362:2): pid=13506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2154" name="/newroot/420/memory.events" dev="tmpfs" ino=2162 res=1 errno=0
[  309.143565][T13513] xt_l2tp: missing protocol rule (udp|l2tpip)
[  309.224417][T13517] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2155'.
[  309.235029][T13516] netlink: 'syz.2.2159': attribute type 3 has an invalid length.
[  309.242949][T13516] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2159'.
[  309.252018][ T5827] lec:lec_start_xmit: lec0:No lecd attached
[  309.660747][T13549] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2163'.
[  309.705439][T13531] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.726140][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2166'.
[  309.857254][T13531] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.928079][T13560] xt_l2tp: missing protocol rule (udp|l2tpip)
[  309.946117][ T8785] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  309.956923][ T8785] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  310.066555][T13531] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.164800][ T8785] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  310.183621][ T8785] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  310.321118][T13531] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.518880][ T8778] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.595594][ T1004] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.673100][ T1004] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.737564][ T8778] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.941097][T13595] xt_CT: No such helper "netbios-ns"
[  311.137233][T13610] __nla_validate_parse: 8 callbacks suppressed
[  311.137252][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2183'.
[  311.164643][T13609] xt_l2tp: missing protocol rule (udp|l2tpip)
[  311.275422][T13614] BUG: Bad page state in process syz.1.2185  pfn:3d2a2
[  311.282401][T13614] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803d2a2a00 pfn:0x3d2a2
[  311.292575][T13614] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  311.299737][T13614] raw: 00fff00000000000 dead000000000040 ffff88801afa2000 0000000000000000
[  311.308399][T13614] raw: ffff88803d2a2a00 3ffffffffffffffe 00000000ffffffff 0000000000000000
[  311.317053][T13614] page dumped because: page_pool leak
[  311.322531][T13614] page_owner tracks the page as allocated
[  311.328297][T13614] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13172, tgid 13167 (syz.1.2066), ts 294663370369, free_ts 283508598157
[  311.345611][T13614]  post_alloc_hook+0x231/0x280
[  311.350420][T13614]  get_page_from_freelist+0x24dc/0x2580
[  311.356071][T13614]  __alloc_frozen_pages_noprof+0x18d/0x380
[  311.361961][T13614]  alloc_pages_bulk_noprof+0x558/0x700
[  311.367470][T13614]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  311.373647][T13614]  page_pool_alloc_frag_netmem+0x421/0x9b0
[  311.379514][T13614]  skb_pp_cow_data+0x287/0x1bb0
[  311.384454][T13614]  do_xdp_generic+0x76b/0x12e0
[  311.389294][T13614]  tun_get_user+0x247d/0x3dd0
[  311.394050][T13614]  tun_chr_write_iter+0x113/0x200
[  311.399116][T13614]  do_iter_readv_writev+0x619/0x8c0
[  311.404403][T13614]  vfs_writev+0x33c/0x990
[  311.408793][T13614]  do_writev+0x154/0x2e0
[  311.413119][T13614]  do_syscall_64+0x14d/0xf80
[  311.417759][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.423722][T13614] page last free pid 7728 tgid 7728 stack trace:
[  311.430092][T13614]  __free_frozen_pages+0xc2b/0xdb0
[  311.435271][T13614]  kasan_depopulate_vmalloc_pte+0x6d/0x90
[  311.441063][T13614]  __apply_to_page_range+0xbdc/0x1420
[  311.446480][T13614]  __kasan_release_vmalloc+0xa2/0xd0
[  311.451829][T13614]  purge_vmap_node+0x220/0x960
[  311.456689][T13614]  __purge_vmap_area_lazy+0x779/0xb70
[  311.462147][T13614]  drain_vmap_area_work+0x27/0x40
[  311.467239][T13614]  process_scheduled_works+0xb6e/0x18c0
[  311.472871][T13614]  worker_thread+0xa53/0xfc0
[  311.477523][T13614]  kthread+0x388/0x470
[  311.481663][T13614]  ret_from_fork+0x51e/0xb90
[  311.486303][T13614]  ret_from_fork_asm+0x1a/0x30
[  311.491159][T13614] Modules linked in:
[  311.495095][T13614] CPU: 1 UID: 0 PID: 13614 Comm: syz.1.2185 Not tainted syzkaller #0 PREEMPT(full) 
[  311.495121][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  311.495135][T13614] Call Trace:
[  311.495143][T13614]  <TASK>
[  311.495171][T13614]  dump_stack_lvl+0xe8/0x150
[  311.495209][T13614]  bad_page+0x17f/0x1c0
[  311.495247][T13614]  __free_frozen_pages+0xd62/0xdb0
[  311.495281][T13614]  bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[  311.495334][T13614]  bpf_xdp_adjust_tail+0x1d6/0x220
[  311.495369][T13614]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  311.495393][T13614]  bpf_prog_run_generic_xdp+0x603/0x1490
[  311.495458][T13614]  do_xdp_generic+0xac5/0x12e0
[  311.495505][T13614]  ? __pfx_do_xdp_generic+0x10/0x10
[  311.495571][T13614]  ? tun_get_user+0x2354/0x3dd0
[  311.495598][T13614]  tun_get_user+0x247d/0x3dd0
[  311.495638][T13614]  ? aa_file_perm+0x192/0x15e0
[  311.495665][T13614]  ? aa_file_perm+0x50e/0x15e0
[  311.495688][T13614]  ? __pfx_tun_get_user+0x10/0x10
[  311.495712][T13614]  ? aa_file_perm+0x192/0x15e0
[  311.495740][T13614]  ? __lock_acquire+0x6b5/0x2cf0
[  311.495783][T13614]  ? ref_tracker_alloc+0x35c/0x4c0
[  311.495834][T13614]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  311.495893][T13614]  ? tun_get+0x1c/0x2f0
[  311.495930][T13614]  ? tun_get+0x1c/0x2f0
[  311.495954][T13614]  ? tun_get+0x1c/0x2f0
[  311.495984][T13614]  tun_chr_write_iter+0x113/0x200
[  311.496010][T13614]  vfs_write+0x61d/0xb90
[  311.496045][T13614]  ? __pfx_vfs_write+0x10/0x10
[  311.496082][T13614]  ? __fget_files+0x2a/0x420
[  311.496127][T13614]  ksys_write+0x150/0x270
[  311.496155][T13614]  ? __pfx_ksys_write+0x10/0x10
[  311.496194][T13614]  do_syscall_64+0x14d/0xf80
[  311.496226][T13614]  ? trace_irq_disable+0x3b/0x150
[  311.496246][T13614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.496269][T13614]  ? clear_bhb_loop+0x40/0x90
[  311.496297][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.496320][T13614] RIP: 0033:0x7fd7b575d04e
[  311.496341][T13614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  311.496361][T13614] RSP: 002b:00007fd7b658dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  311.496384][T13614] RAX: ffffffffffffffda RBX: 00007fd7b658e6c0 RCX: 00007fd7b575d04e
[  311.496401][T13614] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[  311.496416][T13614] RBP: 00007fd7b5832c91 R08: 0000000000000000 R09: 0000000000000000
[  311.496430][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  311.496443][T13614] R13: 00007fd7b5a16038 R14: 00007fd7b5a15fa0 R15: 00007fff53c6ca48
[  311.496480][T13614]  </TASK>
[  311.496487][T13614] Disabling lock debugging due to kernel taint
[  311.761498][T13614] BUG: Bad page state in process syz.1.2185  pfn:4f4e5
[  311.768381][T13614] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f4e5
[  311.777215][T13614] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  311.784392][T13614] raw: 00fff00000000000 dead000000000040 ffff88801afa2000 0000000000000000
[  311.793039][T13614] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  311.801665][T13614] page dumped because: page_pool leak
[  311.807057][T13614] page_owner tracks the page as allocated
[  311.812838][T13614] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13614, tgid 13613 (syz.1.2185), ts 311275206079, free_ts 311051355644
[  311.830109][T13614]  post_alloc_hook+0x231/0x280
[  311.834973][T13614]  get_page_from_freelist+0x24dc/0x2580
[  311.840564][T13614]  __alloc_frozen_pages_noprof+0x18d/0x380
[  311.846447][T13614]  alloc_pages_bulk_noprof+0x558/0x700
[  311.849038][T13620] lo speed is unknown, defaulting to 1000
[  311.851962][T13614]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  311.851998][T13614]  skb_pp_cow_data+0xcea/0x1bb0
[  311.868718][T13614]  do_xdp_generic+0x76b/0x12e0
[  311.873571][T13614]  tun_get_user+0x247d/0x3dd0
[  311.878294][T13614]  tun_chr_write_iter+0x113/0x200
[  311.883408][T13614]  vfs_write+0x61d/0xb90
[  311.887687][T13614]  ksys_write+0x150/0x270
[  311.892082][T13614]  do_syscall_64+0x14d/0xf80
[  311.896738][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.902688][T13614] page last free pid 13595 tgid 13593 stack trace:
[  311.909210][T13614]  __free_frozen_pages+0xc2b/0xdb0
[  311.914388][T13614]  tlb_remove_table_rcu+0x85/0x100
[  311.919539][T13614]  rcu_core+0x7cd/0x1070
[  311.923889][T13614]  handle_softirqs+0x22a/0x870
[  311.928703][T13614]  __irq_exit_rcu+0x5f/0x150
[  311.933366][T13614]  irq_exit_rcu+0x9/0x30
[  311.937652][T13614]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  311.943354][T13614]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  311.949370][T13614] Modules linked in:
[  311.953329][T13614] CPU: 1 UID: 0 PID: 13614 Comm: syz.1.2185 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  311.953362][T13614] Tainted: [B]=BAD_PAGE
[  311.953371][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  311.953384][T13614] Call Trace:
[  311.953393][T13614]  <TASK>
[  311.953401][T13614]  dump_stack_lvl+0xe8/0x150
[  311.953436][T13614]  bad_page+0x17f/0x1c0
[  311.953470][T13614]  __free_frozen_pages+0xd62/0xdb0
[  311.953499][T13614]  bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[  311.953542][T13614]  bpf_xdp_adjust_tail+0x1d6/0x220
[  311.953572][T13614]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  311.953593][T13614]  bpf_prog_run_generic_xdp+0x603/0x1490
[  311.953640][T13614]  do_xdp_generic+0xac5/0x12e0
[  311.953679][T13614]  ? __pfx_do_xdp_generic+0x10/0x10
[  311.953726][T13614]  ? tun_get_user+0x2354/0x3dd0
[  311.953750][T13614]  tun_get_user+0x247d/0x3dd0
[  311.953781][T13614]  ? aa_file_perm+0x192/0x15e0
[  311.953804][T13614]  ? aa_file_perm+0x50e/0x15e0
[  311.953823][T13614]  ? __pfx_tun_get_user+0x10/0x10
[  311.953846][T13614]  ? aa_file_perm+0x192/0x15e0
[  311.953869][T13614]  ? __lock_acquire+0x6b5/0x2cf0
[  311.953909][T13614]  ? ref_tracker_alloc+0x35c/0x4c0
[  311.953945][T13614]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  311.953981][T13614]  ? tun_get+0x1c/0x2f0
[  311.954006][T13614]  ? tun_get+0x1c/0x2f0
[  311.954028][T13614]  ? tun_get+0x1c/0x2f0
[  311.954069][T13614]  tun_chr_write_iter+0x113/0x200
[  311.954092][T13614]  vfs_write+0x61d/0xb90
[  311.954119][T13614]  ? __pfx_vfs_write+0x10/0x10
[  311.954145][T13614]  ? __fget_files+0x2a/0x420
[  311.954180][T13614]  ksys_write+0x150/0x270
[  311.954203][T13614]  ? __pfx_ksys_write+0x10/0x10
[  311.954230][T13614]  do_syscall_64+0x14d/0xf80
[  311.954259][T13614]  ? trace_irq_disable+0x3b/0x150
[  311.954277][T13614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.954297][T13614]  ? clear_bhb_loop+0x40/0x90
[  311.954320][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.954340][T13614] RIP: 0033:0x7fd7b575d04e
[  311.954358][T13614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  311.954377][T13614] RSP: 002b:00007fd7b658dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  311.954399][T13614] RAX: ffffffffffffffda RBX: 00007fd7b658e6c0 RCX: 00007fd7b575d04e
[  311.954415][T13614] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[  311.954428][T13614] RBP: 00007fd7b5832c91 R08: 0000000000000000 R09: 0000000000000000
[  311.954442][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  311.954454][T13614] R13: 00007fd7b5a16038 R14: 00007fd7b5a15fa0 R15: 00007fff53c6ca48
[  311.954478][T13614]  </TASK>
[  311.954489][T13614] BUG: Bad page state in process syz.1.2185  pfn:52aa0
[  312.225413][T13614] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x52aa0
[  312.235559][T13614] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  312.242753][T13614] raw: 00fff00000000000 dead000000000040 ffff88801afa2000 0000000000000000
[  312.251403][T13614] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[  312.260022][T13614] page dumped because: page_pool leak
[  312.265447][T13614] page_owner tracks the page as allocated
[  312.271221][T13614] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13614, tgid 13613 (syz.1.2185), ts 311275188873, free_ts 311051393547
[  312.288493][T13614]  post_alloc_hook+0x231/0x280
[  312.293318][T13614]  get_page_from_freelist+0x24dc/0x2580
[  312.298915][T13614]  __alloc_frozen_pages_noprof+0x18d/0x380
[  312.304825][T13614]  alloc_pages_bulk_noprof+0x558/0x700
[  312.310333][T13614]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  312.316484][T13614]  skb_pp_cow_data+0xcea/0x1bb0
[  312.321397][T13614]  do_xdp_generic+0x76b/0x12e0
[  312.326198][T13614]  tun_get_user+0x247d/0x3dd0
[  312.330928][T13614]  tun_chr_write_iter+0x113/0x200
[  312.335975][T13614]  vfs_write+0x61d/0xb90
[  312.340252][T13614]  ksys_write+0x150/0x270
[  312.344695][T13614]  do_syscall_64+0x14d/0xf80
[  312.349334][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.355293][T13614] page last free pid 13595 tgid 13593 stack trace:
[  312.361837][T13614]  __free_frozen_pages+0xc2b/0xdb0
[  312.367016][T13614]  tlb_remove_table_rcu+0x85/0x100
[  312.372199][T13614]  rcu_core+0x7cd/0x1070
[  312.376477][T13614]  handle_softirqs+0x22a/0x870
[  312.381320][T13614]  __irq_exit_rcu+0x5f/0x150
[  312.385949][T13614]  irq_exit_rcu+0x9/0x30
[  312.390257][T13614]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  312.394139][T13620] gre0 speed is unknown, defaulting to 1000
[  312.395982][T13614]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  312.396010][T13614] Modules linked in:
[  312.396041][T13614] CPU: 1 UID: 0 PID: 13614 Comm: syz.1.2185 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  312.396148][T13614] Tainted: [B]=BAD_PAGE
[  312.396169][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  312.396214][T13614] Call Trace:
[  312.396234][T13614]  <TASK>
[  312.396263][T13614]  dump_stack_lvl+0xe8/0x150
[  312.396350][T13614]  bad_page+0x17f/0x1c0
[  312.396462][T13614]  __free_frozen_pages+0xd62/0xdb0
[  312.396545][T13614]  bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[  312.396650][T13614]  bpf_xdp_adjust_tail+0x1d6/0x220
[  312.396734][T13614]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  312.396788][T13614]  bpf_prog_run_generic_xdp+0x603/0x1490
[  312.396909][T13614]  do_xdp_generic+0xac5/0x12e0
[  312.397015][T13614]  ? __pfx_do_xdp_generic+0x10/0x10
[  312.397144][T13614]  ? tun_get_user+0x2354/0x3dd0
[  312.397209][T13614]  tun_get_user+0x247d/0x3dd0
[  312.397292][T13614]  ? aa_file_perm+0x192/0x15e0
[  312.397356][T13614]  ? aa_file_perm+0x50e/0x15e0
[  312.397410][T13614]  ? __pfx_tun_get_user+0x10/0x10
[  312.397473][T13614]  ? aa_file_perm+0x192/0x15e0
[  312.397550][T13614]  ? __lock_acquire+0x6b5/0x2cf0
[  312.397657][T13614]  ? ref_tracker_alloc+0x35c/0x4c0
[  312.397753][T13614]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  312.397859][T13614]  ? tun_get+0x1c/0x2f0
[  312.397931][T13614]  ? tun_get+0x1c/0x2f0
[  312.397987][T13614]  ? tun_get+0x1c/0x2f0
[  312.398058][T13614]  tun_chr_write_iter+0x113/0x200
[  312.398124][T13614]  vfs_write+0x61d/0xb90
[  312.398200][T13614]  ? __pfx_vfs_write+0x10/0x10
[  312.398278][T13614]  ? __fget_files+0x2a/0x420
[  312.398383][T13614]  ksys_write+0x150/0x270
[  312.398442][T13614]  ? __pfx_ksys_write+0x10/0x10
[  312.398518][T13614]  do_syscall_64+0x14d/0xf80
[  312.398620][T13614]  ? trace_irq_disable+0x3b/0x150
[  312.398674][T13614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.398730][T13614]  ? clear_bhb_loop+0x40/0x90
[  312.398801][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.398864][T13614] RIP: 0033:0x7fd7b575d04e
[  312.398929][T13614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  312.398996][T13614] RSP: 002b:00007fd7b658dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  312.399066][T13614] RAX: ffffffffffffffda RBX: 00007fd7b658e6c0 RCX: 00007fd7b575d04e
[  312.399110][T13614] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[  312.399151][T13614] RBP: 00007fd7b5832c91 R08: 0000000000000000 R09: 0000000000000000
[  312.399193][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  312.399226][T13614] R13: 00007fd7b5a16038 R14: 00007fd7b5a15fa0 R15: 00007fff53c6ca48
[  312.399298][T13614]  </TASK>
[  312.399322][T13614] BUG: Bad page state in process syz.1.2185  pfn:8ebd9
[  312.682965][T13614] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88808ebd9dc0 pfn:0x8ebd9
[  312.693139][T13614] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  312.700291][T13614] raw: 00fff00000000000 dead000000000040 ffff88801afa2000 0000000000000000
[  312.708953][T13614] raw: ffff88808ebd9dc0 0000000000000001 00000000ffffffff 0000000000000000
[  312.717622][T13614] page dumped because: page_pool leak
[  312.723077][T13614] page_owner tracks the page as allocated
[  312.728835][T13614] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13614, tgid 13613 (syz.1.2185), ts 311275158450, free_ts 311051430918
[  312.746124][T13614]  post_alloc_hook+0x231/0x280
[  312.750966][T13614]  get_page_from_freelist+0x24dc/0x2580
[  312.756569][T13614]  __alloc_frozen_pages_noprof+0x18d/0x380
[  312.762467][T13614]  alloc_pages_bulk_noprof+0x558/0x700
[  312.767994][T13614]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  312.774162][T13614]  skb_pp_cow_data+0xcea/0x1bb0
[  312.779069][T13614]  do_xdp_generic+0x76b/0x12e0
[  312.783933][T13614]  tun_get_user+0x247d/0x3dd0
[  312.788665][T13614]  tun_chr_write_iter+0x113/0x200
[  312.793781][T13614]  vfs_write+0x61d/0xb90
[  312.798064][T13614]  ksys_write+0x150/0x270
[  312.802493][T13614]  do_syscall_64+0x14d/0xf80
[  312.807155][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.813131][T13614] page last free pid 13595 tgid 13593 stack trace:
[  312.819683][T13614]  __free_frozen_pages+0xc2b/0xdb0
[  312.823972][T13620] lo speed is unknown, defaulting to 1000
[  312.824889][T13614]  tlb_remove_table_rcu+0x85/0x100
[  312.835770][T13614]  rcu_core+0x7cd/0x1070
[  312.840065][T13614]  handle_softirqs+0x22a/0x870
[  312.844933][T13614]  __irq_exit_rcu+0x5f/0x150
[  312.849590][T13614]  irq_exit_rcu+0x9/0x30
[  312.853931][T13614]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  312.859638][T13614]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  312.865717][T13614] Modules linked in:
[  312.869690][T13614] CPU: 1 UID: 0 PID: 13614 Comm: syz.1.2185 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  312.869725][T13614] Tainted: [B]=BAD_PAGE
[  312.869735][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  312.869750][T13614] Call Trace:
[  312.869759][T13614]  <TASK>
[  312.869769][T13614]  dump_stack_lvl+0xe8/0x150
[  312.869807][T13614]  bad_page+0x17f/0x1c0
[  312.869845][T13614]  __free_frozen_pages+0xd62/0xdb0
[  312.869880][T13614]  bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[  312.869930][T13614]  bpf_xdp_adjust_tail+0x1d6/0x220
[  312.869964][T13614]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  312.869986][T13614]  bpf_prog_run_generic_xdp+0x603/0x1490
[  312.870041][T13614]  do_xdp_generic+0xac5/0x12e0
[  312.870085][T13614]  ? __pfx_do_xdp_generic+0x10/0x10
[  312.870140][T13614]  ? tun_get_user+0x2354/0x3dd0
[  312.870168][T13614]  tun_get_user+0x247d/0x3dd0
[  312.870203][T13614]  ? aa_file_perm+0x192/0x15e0
[  312.870230][T13614]  ? aa_file_perm+0x50e/0x15e0
[  312.870252][T13614]  ? __pfx_tun_get_user+0x10/0x10
[  312.870278][T13614]  ? aa_file_perm+0x192/0x15e0
[  312.870303][T13614]  ? __lock_acquire+0x6b5/0x2cf0
[  312.870339][T13614]  ? ref_tracker_alloc+0x35c/0x4c0
[  312.870378][T13614]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  312.870419][T13614]  ? tun_get+0x1c/0x2f0
[  312.870448][T13614]  ? tun_get+0x1c/0x2f0
[  312.870474][T13614]  ? tun_get+0x1c/0x2f0
[  312.870511][T13614]  tun_chr_write_iter+0x113/0x200
[  312.870537][T13614]  vfs_write+0x61d/0xb90
[  312.870574][T13614]  ? __pfx_vfs_write+0x10/0x10
[  312.870602][T13614]  ? __fget_files+0x2a/0x420
[  312.870641][T13614]  ksys_write+0x150/0x270
[  312.870667][T13614]  ? __pfx_ksys_write+0x10/0x10
[  312.870697][T13614]  do_syscall_64+0x14d/0xf80
[  312.870730][T13614]  ? trace_irq_disable+0x3b/0x150
[  312.870750][T13614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.870773][T13614]  ? clear_bhb_loop+0x40/0x90
[  312.870798][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.870822][T13614] RIP: 0033:0x7fd7b575d04e
[  312.870841][T13614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  312.870861][T13614] RSP: 002b:00007fd7b658dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  312.870891][T13614] RAX: ffffffffffffffda RBX: 00007fd7b658e6c0 RCX: 00007fd7b575d04e
[  312.870907][T13614] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[  312.870921][T13614] RBP: 00007fd7b5832c91 R08: 0000000000000000 R09: 0000000000000000
[  312.870934][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  312.870948][T13614] R13: 00007fd7b5a16038 R14: 00007fd7b5a15fa0 R15: 00007fff53c6ca48
[  312.870974][T13614]  </TASK>
[  313.134236][T13614] BUG: Bad page state in process syz.1.2185  pfn:2ac18
[  313.141136][T13614] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x2ac18
[  313.151256][T13614] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  313.158408][T13614] raw: 00fff00000000000 dead000000000040 ffff88801afa2000 0000000000000000
[  313.167058][T13614] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[  313.175703][T13614] page dumped because: page_pool leak
[  313.181117][T13614] page_owner tracks the page as allocated
[  313.186860][T13614] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13614, tgid 13613 (syz.1.2185), ts 311275140784, free_ts 311051494879
[  313.204127][T13614]  post_alloc_hook+0x231/0x280
[  313.208944][T13614]  get_page_from_freelist+0x24dc/0x2580
[  313.214592][T13614]  __alloc_frozen_pages_noprof+0x18d/0x380
[  313.220451][T13614]  alloc_pages_bulk_noprof+0x558/0x700
[  313.225996][T13614]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  313.232139][T13614]  skb_pp_cow_data+0xcea/0x1bb0
[  313.237028][T13614]  do_xdp_generic+0x76b/0x12e0
[  313.241841][T13614]  tun_get_user+0x247d/0x3dd0
[  313.246561][T13614]  tun_chr_write_iter+0x113/0x200
[  313.251655][T13614]  vfs_write+0x61d/0xb90
[  313.255945][T13614]  ksys_write+0x150/0x270
[  313.260323][T13614]  do_syscall_64+0x14d/0xf80
[  313.264991][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.270959][T13614] page last free pid 13595 tgid 13593 stack trace:
[  313.277493][T13614]  __free_frozen_pages+0xc2b/0xdb0
[  313.282687][T13614]  tlb_remove_table_rcu+0x85/0x100
[  313.287910][T13614]  rcu_core+0x7cd/0x1070
[  313.292224][T13614]  handle_softirqs+0x22a/0x870
[  313.297041][T13614]  __irq_exit_rcu+0x5f/0x150
[  313.301716][T13614]  irq_exit_rcu+0x9/0x30
[  313.306015][T13614]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  313.311721][T13614]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  313.317753][T13614] Modules linked in:
[  313.321728][T13614] CPU: 1 UID: 0 PID: 13614 Comm: syz.1.2185 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  313.321756][T13614] Tainted: [B]=BAD_PAGE
[  313.321762][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  313.321772][T13614] Call Trace:
[  313.321778][T13614]  <TASK>
[  313.321784][T13614]  dump_stack_lvl+0xe8/0x150
[  313.321809][T13614]  bad_page+0x17f/0x1c0
[  313.321835][T13614]  __free_frozen_pages+0xd62/0xdb0
[  313.321857][T13614]  bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[  313.321889][T13614]  bpf_xdp_adjust_tail+0x1d6/0x220
[  313.321910][T13614]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  313.321929][T13614]  bpf_prog_run_generic_xdp+0x603/0x1490
[  313.321964][T13614]  do_xdp_generic+0xac5/0x12e0
[  313.321992][T13614]  ? __pfx_do_xdp_generic+0x10/0x10
[  313.322026][T13614]  ? tun_get_user+0x2354/0x3dd0
[  313.322044][T13614]  tun_get_user+0x247d/0x3dd0
[  313.322065][T13614]  ? aa_file_perm+0x192/0x15e0
[  313.322082][T13614]  ? aa_file_perm+0x50e/0x15e0
[  313.322096][T13614]  ? __pfx_tun_get_user+0x10/0x10
[  313.322112][T13614]  ? aa_file_perm+0x192/0x15e0
[  313.322128][T13614]  ? __lock_acquire+0x6b5/0x2cf0
[  313.322153][T13614]  ? ref_tracker_alloc+0x35c/0x4c0
[  313.322178][T13614]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  313.322205][T13614]  ? tun_get+0x1c/0x2f0
[  313.322223][T13614]  ? tun_get+0x1c/0x2f0
[  313.322239][T13614]  ? tun_get+0x1c/0x2f0
[  313.322256][T13614]  tun_chr_write_iter+0x113/0x200
[  313.322274][T13614]  vfs_write+0x61d/0xb90
[  313.322294][T13614]  ? __pfx_vfs_write+0x10/0x10
[  313.322315][T13614]  ? __fget_files+0x2a/0x420
[  313.322341][T13614]  ksys_write+0x150/0x270
[  313.322359][T13614]  ? __pfx_ksys_write+0x10/0x10
[  313.322380][T13614]  do_syscall_64+0x14d/0xf80
[  313.322403][T13614]  ? trace_irq_disable+0x3b/0x150
[  313.322417][T13614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.322432][T13614]  ? clear_bhb_loop+0x40/0x90
[  313.322449][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.322465][T13614] RIP: 0033:0x7fd7b575d04e
[  313.322478][T13614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  313.322492][T13614] RSP: 002b:00007fd7b658dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  313.322508][T13614] RAX: ffffffffffffffda RBX: 00007fd7b658e6c0 RCX: 00007fd7b575d04e
[  313.322519][T13614] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[  313.322530][T13614] RBP: 00007fd7b5832c91 R08: 0000000000000000 R09: 0000000000000000
[  313.322540][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  313.322549][T13614] R13: 00007fd7b5a16038 R14: 00007fd7b5a15fa0 R15: 00007fff53c6ca48
[  313.322567][T13614]  </TASK>
[  313.322580][T13614] BUG: Bad page state in process syz.1.2185  pfn:8ebd7
[  313.593281][T13614] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x8ebd7
[  313.603420][T13614] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  313.610585][T13614] raw: 00fff00000000000 dead000000000040 ffff88801afa2000 0000000000000000
[  313.619238][T13614] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[  313.627860][T13614] page dumped because: page_pool leak
[  313.633285][T13614] page_owner tracks the page as allocated
[  313.639018][T13614] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13614, tgid 13613 (syz.1.2185), ts 311275123181, free_ts 311051537829
[  313.656263][T13614]  post_alloc_hook+0x231/0x280
[  313.661088][T13614]  get_page_from_freelist+0x24dc/0x2580
[  313.666669][T13614]  __alloc_frozen_pages_noprof+0x18d/0x380
[  313.672551][T13614]  alloc_pages_bulk_noprof+0x558/0x700
[  313.678064][T13614]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  313.684186][T13614]  skb_pp_cow_data+0xcea/0x1bb0
[  313.689071][T13614]  do_xdp_generic+0x76b/0x12e0
[  313.693902][T13614]  tun_get_user+0x247d/0x3dd0
[  313.698611][T13614]  tun_chr_write_iter+0x113/0x200
[  313.703685][T13614]  vfs_write+0x61d/0xb90
[  313.707966][T13614]  ksys_write+0x150/0x270
[  313.712343][T13614]  do_syscall_64+0x14d/0xf80
[  313.716986][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.722935][T13614] page last free pid 13595 tgid 13593 stack trace:
[  313.729469][T13614]  __free_frozen_pages+0xc2b/0xdb0
[  313.734629][T13614]  tlb_remove_table_rcu+0x85/0x100
[  313.739786][T13614]  rcu_core+0x7cd/0x1070
[  313.744119][T13614]  handle_softirqs+0x22a/0x870
[  313.748928][T13614]  __irq_exit_rcu+0x5f/0x150
[  313.753574][T13614]  irq_exit_rcu+0x9/0x30
[  313.757836][T13614]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  313.763555][T13614]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  313.769579][T13614] Modules linked in:
[  313.773577][T13614] CPU: 1 UID: 0 PID: 13614 Comm: syz.1.2185 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  313.773608][T13614] Tainted: [B]=BAD_PAGE
[  313.773616][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  313.773629][T13614] Call Trace:
[  313.773637][T13614]  <TASK>
[  313.773645][T13614]  dump_stack_lvl+0xe8/0x150
[  313.773677][T13614]  bad_page+0x17f/0x1c0
[  313.773711][T13614]  __free_frozen_pages+0xd62/0xdb0
[  313.773742][T13614]  bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[  313.773793][T13614]  bpf_xdp_adjust_tail+0x1d6/0x220
[  313.773823][T13614]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  313.773844][T13614]  bpf_prog_run_generic_xdp+0x603/0x1490
[  313.773892][T13614]  do_xdp_generic+0xac5/0x12e0
[  313.773932][T13614]  ? __pfx_do_xdp_generic+0x10/0x10
[  313.773979][T13614]  ? tun_get_user+0x2354/0x3dd0
[  313.774004][T13614]  tun_get_user+0x247d/0x3dd0
[  313.774053][T13614]  ? aa_file_perm+0x192/0x15e0
[  313.774078][T13614]  ? aa_file_perm+0x50e/0x15e0
[  313.774099][T13614]  ? __pfx_tun_get_user+0x10/0x10
[  313.774122][T13614]  ? aa_file_perm+0x192/0x15e0
[  313.774147][T13614]  ? __lock_acquire+0x6b5/0x2cf0
[  313.774188][T13614]  ? ref_tracker_alloc+0x35c/0x4c0
[  313.774226][T13614]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  313.774264][T13614]  ? tun_get+0x1c/0x2f0
[  313.774290][T13614]  ? tun_get+0x1c/0x2f0
[  313.774314][T13614]  ? tun_get+0x1c/0x2f0
[  313.774339][T13614]  tun_chr_write_iter+0x113/0x200
[  313.774366][T13614]  vfs_write+0x61d/0xb90
[  313.774395][T13614]  ? __pfx_vfs_write+0x10/0x10
[  313.774425][T13614]  ? __fget_files+0x2a/0x420
[  313.774463][T13614]  ksys_write+0x150/0x270
[  313.774489][T13614]  ? __pfx_ksys_write+0x10/0x10
[  313.774540][T13614]  do_syscall_64+0x14d/0xf80
[  313.774573][T13614]  ? trace_irq_disable+0x3b/0x150
[  313.774593][T13614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.774616][T13614]  ? clear_bhb_loop+0x40/0x90
[  313.774642][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.774664][T13614] RIP: 0033:0x7fd7b575d04e
[  313.774684][T13614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  313.774704][T13614] RSP: 002b:00007fd7b658dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  313.774733][T13614] RAX: ffffffffffffffda RBX: 00007fd7b658e6c0 RCX: 00007fd7b575d04e
[  313.774751][T13614] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[  313.774772][T13614] RBP: 00007fd7b5832c91 R08: 0000000000000000 R09: 0000000000000000
[  313.774787][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  313.774800][T13614] R13: 00007fd7b5a16038 R14: 00007fd7b5a15fa0 R15: 00007fff53c6ca48
[  313.774827][T13614]  </TASK>
[  313.774841][T13614] BUG: Bad page state in process syz.1.2185  pfn:227e4
[  314.045668][T13614] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x227e4
[  314.055794][T13614] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  314.062961][T13614] raw: 00fff00000000000 dead000000000040 ffff88801afa2000 0000000000000000
[  314.071605][T13614] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[  314.080201][T13614] page dumped because: page_pool leak
[  314.085617][T13614] page_owner tracks the page as allocated
[  314.091361][T13614] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13614, tgid 13613 (syz.1.2185), ts 311275105313, free_ts 311051556485
[  314.108601][T13614]  post_alloc_hook+0x231/0x280
[  314.113412][T13614]  get_page_from_freelist+0x24dc/0x2580
[  314.118975][T13614]  __alloc_frozen_pages_noprof+0x18d/0x380
[  314.124836][T13614]  alloc_pages_bulk_noprof+0x558/0x700
[  314.130417][T13614]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  314.136541][T13614]  skb_pp_cow_data+0xcea/0x1bb0
[  314.141460][T13614]  do_xdp_generic+0x76b/0x12e0
[  314.146267][T13614]  tun_get_user+0x247d/0x3dd0
[  314.151009][T13614]  tun_chr_write_iter+0x113/0x200
[  314.156065][T13614]  vfs_write+0x61d/0xb90
[  314.160350][T13614]  ksys_write+0x150/0x270
[  314.164784][T13614]  do_syscall_64+0x14d/0xf80
[  314.169409][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.175347][T13614] page last free pid 13595 tgid 13593 stack trace:
[  314.181881][T13614]  __free_frozen_pages+0xc2b/0xdb0
[  314.187020][T13614]  tlb_remove_table_rcu+0x85/0x100
[  314.192220][T13614]  rcu_core+0x7cd/0x1070
[  314.196490][T13614]  handle_softirqs+0x22a/0x870
[  314.201288][T13614]  __irq_exit_rcu+0x5f/0x150
[  314.205900][T13614]  irq_exit_rcu+0x9/0x30
[  314.210144][T13614]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  314.215832][T13614]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  314.221859][T13614] Modules linked in:
[  314.225771][T13614] CPU: 1 UID: 0 PID: 13614 Comm: syz.1.2185 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  314.225802][T13614] Tainted: [B]=BAD_PAGE
[  314.225810][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  314.225823][T13614] Call Trace:
[  314.225831][T13614]  <TASK>
[  314.225840][T13614]  dump_stack_lvl+0xe8/0x150
[  314.225873][T13614]  bad_page+0x17f/0x1c0
[  314.225907][T13614]  __free_frozen_pages+0xd62/0xdb0
[  314.225939][T13614]  bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[  314.225983][T13614]  bpf_xdp_adjust_tail+0x1d6/0x220
[  314.226011][T13614]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  314.226029][T13614]  bpf_prog_run_generic_xdp+0x603/0x1490
[  314.226074][T13614]  do_xdp_generic+0xac5/0x12e0
[  314.226111][T13614]  ? __pfx_do_xdp_generic+0x10/0x10
[  314.226158][T13614]  ? tun_get_user+0x2354/0x3dd0
[  314.226183][T13614]  tun_get_user+0x247d/0x3dd0
[  314.226218][T13614]  ? aa_file_perm+0x192/0x15e0
[  314.226235][T13614]  ? aa_file_perm+0x50e/0x15e0
[  314.226249][T13614]  ? __pfx_tun_get_user+0x10/0x10
[  314.226281][T13614]  ? aa_file_perm+0x192/0x15e0
[  314.226297][T13614]  ? __lock_acquire+0x6b5/0x2cf0
[  314.226328][T13614]  ? ref_tracker_alloc+0x35c/0x4c0
[  314.226354][T13614]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  314.226380][T13614]  ? tun_get+0x1c/0x2f0
[  314.226398][T13614]  ? tun_get+0x1c/0x2f0
[  314.226414][T13614]  ? tun_get+0x1c/0x2f0
[  314.226432][T13614]  tun_chr_write_iter+0x113/0x200
[  314.226449][T13614]  vfs_write+0x61d/0xb90
[  314.226469][T13614]  ? __pfx_vfs_write+0x10/0x10
[  314.226489][T13614]  ? __fget_files+0x2a/0x420
[  314.226516][T13614]  ksys_write+0x150/0x270
[  314.226534][T13614]  ? __pfx_ksys_write+0x10/0x10
[  314.226562][T13614]  do_syscall_64+0x14d/0xf80
[  314.226584][T13614]  ? trace_irq_disable+0x3b/0x150
[  314.226598][T13614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.226614][T13614]  ? clear_bhb_loop+0x40/0x90
[  314.226632][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.226648][T13614] RIP: 0033:0x7fd7b575d04e
[  314.226662][T13614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  314.226675][T13614] RSP: 002b:00007fd7b658dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  314.226692][T13614] RAX: ffffffffffffffda RBX: 00007fd7b658e6c0 RCX: 00007fd7b575d04e
[  314.226704][T13614] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[  314.226714][T13614] RBP: 00007fd7b5832c91 R08: 0000000000000000 R09: 0000000000000000
[  314.226724][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.226733][T13614] R13: 00007fd7b5a16038 R14: 00007fd7b5a15fa0 R15: 00007fff53c6ca48
[  314.226751][T13614]  </TASK>
[  314.226760][T13614] BUG: Bad page state in process syz.1.2185  pfn:75d03
[  314.497549][T13614] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x75d03
[  314.507717][T13614] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  314.514893][T13614] raw: 00fff00000000000 dead000000000040 ffff88801afa2000 0000000000000000
[  314.523682][T13614] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[  314.532305][T13614] page dumped because: page_pool leak
[  314.537710][T13614] page_owner tracks the page as allocated
[  314.543493][T13614] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13614, tgid 13613 (syz.1.2185), ts 311275087513, free_ts 311051613280
[  314.560760][T13614]  post_alloc_hook+0x231/0x280
[  314.565596][T13614]  get_page_from_freelist+0x24dc/0x2580
[  314.571213][T13614]  __alloc_frozen_pages_noprof+0x18d/0x380
[  314.577075][T13614]  alloc_pages_bulk_noprof+0x558/0x700
[  314.582589][T13614]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  314.588704][T13614]  skb_pp_cow_data+0xcea/0x1bb0
[  314.593610][T13614]  do_xdp_generic+0x76b/0x12e0
[  314.598412][T13614]  tun_get_user+0x247d/0x3dd0
[  314.603145][T13614]  tun_chr_write_iter+0x113/0x200
[  314.608198][T13614]  vfs_write+0x61d/0xb90
[  314.612503][T13614]  ksys_write+0x150/0x270
[  314.616874][T13614]  do_syscall_64+0x14d/0xf80
[  314.621516][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.627436][T13614] page last free pid 13595 tgid 13593 stack trace:
[  314.633983][T13614]  __free_frozen_pages+0xc2b/0xdb0
[  314.639117][T13614]  tlb_remove_table_rcu+0x85/0x100
[  314.644289][T13614]  rcu_core+0x7cd/0x1070
[  314.648562][T13614]  handle_softirqs+0x22a/0x870
[  314.653379][T13614]  __irq_exit_rcu+0x5f/0x150
[  314.658008][T13614]  irq_exit_rcu+0x9/0x30
[  314.662304][T13614]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  314.667968][T13614]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  314.674187][T13614] Modules linked in:
[  314.678147][T13614] CPU: 1 UID: 0 PID: 13614 Comm: syz.1.2185 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  314.678182][T13614] Tainted: [B]=BAD_PAGE
[  314.678191][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  314.678205][T13614] Call Trace:
[  314.678211][T13614]  <TASK>
[  314.678219][T13614]  dump_stack_lvl+0xe8/0x150
[  314.678247][T13614]  bad_page+0x17f/0x1c0
[  314.678275][T13614]  __free_frozen_pages+0xd62/0xdb0
[  314.678300][T13614]  bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[  314.678337][T13614]  bpf_xdp_adjust_tail+0x1d6/0x220
[  314.678361][T13614]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  314.678377][T13614]  bpf_prog_run_generic_xdp+0x603/0x1490
[  314.678418][T13614]  do_xdp_generic+0xac5/0x12e0
[  314.678450][T13614]  ? __pfx_do_xdp_generic+0x10/0x10
[  314.678495][T13614]  ? tun_get_user+0x2354/0x3dd0
[  314.678516][T13614]  tun_get_user+0x247d/0x3dd0
[  314.678541][T13614]  ? aa_file_perm+0x192/0x15e0
[  314.678560][T13614]  ? aa_file_perm+0x50e/0x15e0
[  314.678576][T13614]  ? __pfx_tun_get_user+0x10/0x10
[  314.678594][T13614]  ? aa_file_perm+0x192/0x15e0
[  314.678612][T13614]  ? __lock_acquire+0x6b5/0x2cf0
[  314.678640][T13614]  ? ref_tracker_alloc+0x35c/0x4c0
[  314.678671][T13614]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  314.678703][T13614]  ? tun_get+0x1c/0x2f0
[  314.678724][T13614]  ? tun_get+0x1c/0x2f0
[  314.678743][T13614]  ? tun_get+0x1c/0x2f0
[  314.678763][T13614]  tun_chr_write_iter+0x113/0x200
[  314.678784][T13614]  vfs_write+0x61d/0xb90
[  314.678807][T13614]  ? __pfx_vfs_write+0x10/0x10
[  314.678830][T13614]  ? __fget_files+0x2a/0x420
[  314.678861][T13614]  ksys_write+0x150/0x270
[  314.678881][T13614]  ? __pfx_ksys_write+0x10/0x10
[  314.678905][T13614]  do_syscall_64+0x14d/0xf80
[  314.678932][T13614]  ? trace_irq_disable+0x3b/0x150
[  314.678947][T13614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.678966][T13614]  ? clear_bhb_loop+0x40/0x90
[  314.678986][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.679003][T13614] RIP: 0033:0x7fd7b575d04e
[  314.679019][T13614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  314.679035][T13614] RSP: 002b:00007fd7b658dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  314.679055][T13614] RAX: ffffffffffffffda RBX: 00007fd7b658e6c0 RCX: 00007fd7b575d04e
[  314.679069][T13614] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[  314.679081][T13614] RBP: 00007fd7b5832c91 R08: 0000000000000000 R09: 0000000000000000
[  314.679092][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.679103][T13614] R13: 00007fd7b5a16038 R14: 00007fd7b5a15fa0 R15: 00007fff53c6ca48
[  314.679124][T13614]  </TASK>
[  314.679138][T13614] BUG: Bad page state in process syz.1.2185  pfn:38bf5
[  314.949865][T13614] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38bf5
[  314.958722][T13614] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  314.965918][T13614] raw: 00fff00000000000 dead000000000040 ffff88801afa2000 0000000000000000
[  314.974567][T13614] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  314.983197][T13614] page dumped because: page_pool leak
[  314.988570][T13614] page_owner tracks the page as allocated
[  314.994340][T13614] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13614, tgid 13613 (syz.1.2185), ts 311275069191, free_ts 311051656606
[  315.011592][T13614]  post_alloc_hook+0x231/0x280
[  315.016376][T13614]  get_page_from_freelist+0x24dc/0x2580
[  315.022006][T13614]  __alloc_frozen_pages_noprof+0x18d/0x380
[  315.027862][T13614]  alloc_pages_bulk_noprof+0x558/0x700
[  315.033427][T13614]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  315.039581][T13614]  skb_pp_cow_data+0xcea/0x1bb0
[  315.041269][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  315.044660][T13614]  do_xdp_generic+0x76b/0x12e0
[  315.052474][    C0] lec:lec_tx_timeout: lec0
[  315.057344][T13614]  tun_get_user+0x247d/0x3dd0
[  315.062490][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  315.066519][T13614]  tun_chr_write_iter+0x113/0x200
[  315.077518][T13614]  vfs_write+0x61d/0xb90
[  315.081835][T13614]  ksys_write+0x150/0x270
[  315.086341][T13614]  do_syscall_64+0x14d/0xf80
[  315.091023][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.096951][T13614] page last free pid 13595 tgid 13593 stack trace:
[  315.103510][T13614]  __free_frozen_pages+0xc2b/0xdb0
[  315.108759][T13614]  tlb_remove_table_rcu+0x85/0x100
[  315.113970][T13614]  rcu_core+0x7cd/0x1070
[  315.118262][T13614]  handle_softirqs+0x22a/0x870
[  315.123111][T13614]  __irq_exit_rcu+0x5f/0x150
[  315.127746][T13614]  irq_exit_rcu+0x9/0x30
[  315.132092][T13614]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  315.137762][T13614]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  315.143794][T13614] Modules linked in:
[  315.147718][T13614] CPU: 1 UID: 0 PID: 13614 Comm: syz.1.2185 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  315.147741][T13614] Tainted: [B]=BAD_PAGE
[  315.147747][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  315.147757][T13614] Call Trace:
[  315.147763][T13614]  <TASK>
[  315.147769][T13614]  dump_stack_lvl+0xe8/0x150
[  315.147794][T13614]  bad_page+0x17f/0x1c0
[  315.147819][T13614]  __free_frozen_pages+0xd62/0xdb0
[  315.147840][T13614]  bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[  315.147871][T13614]  bpf_xdp_adjust_tail+0x1d6/0x220
[  315.147891][T13614]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  315.147906][T13614]  bpf_prog_run_generic_xdp+0x603/0x1490
[  315.147940][T13614]  do_xdp_generic+0xac5/0x12e0
[  315.147967][T13614]  ? __pfx_do_xdp_generic+0x10/0x10
[  315.148001][T13614]  ? tun_get_user+0x2354/0x3dd0
[  315.148019][T13614]  tun_get_user+0x247d/0x3dd0
[  315.148041][T13614]  ? aa_file_perm+0x192/0x15e0
[  315.148058][T13614]  ? aa_file_perm+0x50e/0x15e0
[  315.148072][T13614]  ? __pfx_tun_get_user+0x10/0x10
[  315.148088][T13614]  ? aa_file_perm+0x192/0x15e0
[  315.148104][T13614]  ? __lock_acquire+0x6b5/0x2cf0
[  315.148128][T13614]  ? ref_tracker_alloc+0x35c/0x4c0
[  315.148154][T13614]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  315.148180][T13614]  ? tun_get+0x1c/0x2f0
[  315.148198][T13614]  ? tun_get+0x1c/0x2f0
[  315.148214][T13614]  ? tun_get+0x1c/0x2f0
[  315.148232][T13614]  tun_chr_write_iter+0x113/0x200
[  315.148250][T13614]  vfs_write+0x61d/0xb90
[  315.148270][T13614]  ? __pfx_vfs_write+0x10/0x10
[  315.148290][T13614]  ? __fget_files+0x2a/0x420
[  315.148317][T13614]  ksys_write+0x150/0x270
[  315.148334][T13614]  ? __pfx_ksys_write+0x10/0x10
[  315.148355][T13614]  do_syscall_64+0x14d/0xf80
[  315.148378][T13614]  ? trace_irq_disable+0x3b/0x150
[  315.148391][T13614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.148407][T13614]  ? clear_bhb_loop+0x40/0x90
[  315.148430][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.148445][T13614] RIP: 0033:0x7fd7b575d04e
[  315.148459][T13614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  315.148472][T13614] RSP: 002b:00007fd7b658dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  315.148489][T13614] RAX: ffffffffffffffda RBX: 00007fd7b658e6c0 RCX: 00007fd7b575d04e
[  315.148501][T13614] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[  315.148511][T13614] RBP: 00007fd7b5832c91 R08: 0000000000000000 R09: 0000000000000000
[  315.148521][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  315.148530][T13614] R13: 00007fd7b5a16038 R14: 00007fd7b5a15fa0 R15: 00007fff53c6ca48
[  315.148549][T13614]  </TASK>
[  315.148558][T13614] BUG: Bad page state in process syz.1.2185  pfn:3768e
[  315.419471][T13614] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803768e980 pfn:0x3768e
[  315.429612][T13614] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  315.436804][T13614] raw: 00fff00000000000 dead000000000040 ffff88801afa2000 0000000000000000
[  315.445984][T13614] raw: ffff88803768e980 0000000000000001 00000000ffffffff 0000000000000000
[  315.454628][T13614] page dumped because: page_pool leak
[  315.460031][T13614] page_owner tracks the page as allocated
[  315.465802][T13614] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13614, tgid 13613 (syz.1.2185), ts 311275024601, free_ts 311051676127
[  315.483060][T13614]  post_alloc_hook+0x231/0x280
[  315.487953][T13614]  get_page_from_freelist+0x24dc/0x2580
[  315.493573][T13614]  __alloc_frozen_pages_noprof+0x18d/0x380
[  315.499420][T13614]  alloc_pages_bulk_noprof+0x558/0x700
[  315.504943][T13614]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  315.511169][T13614]  skb_pp_cow_data+0xcea/0x1bb0
[  315.516055][T13614]  do_xdp_generic+0x76b/0x12e0
[  315.520832][T13614]  tun_get_user+0x247d/0x3dd0
[  315.525565][T13614]  tun_chr_write_iter+0x113/0x200
[  315.530989][T13614]  vfs_write+0x61d/0xb90
[  315.535285][T13614]  ksys_write+0x150/0x270
[  315.539626][T13614]  do_syscall_64+0x14d/0xf80
[  315.544316][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.550245][T13614] page last free pid 13595 tgid 13593 stack trace:
[  315.556801][T13614]  __free_frozen_pages+0xc2b/0xdb0
[  315.561984][T13614]  tlb_remove_table_rcu+0x85/0x100
[  315.567105][T13614]  rcu_core+0x7cd/0x1070
[  315.571396][T13614]  handle_softirqs+0x22a/0x870
[  315.576201][T13614]  __irq_exit_rcu+0x5f/0x150
[  315.580803][T13614]  irq_exit_rcu+0x9/0x30
[  315.585146][T13614]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  315.590833][T13614]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  315.597331][T13614] Modules linked in:
[  315.601333][T13614] CPU: 1 UID: 0 PID: 13614 Comm: syz.1.2185 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  315.601366][T13614] Tainted: [B]=BAD_PAGE
[  315.601374][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  315.601388][T13614] Call Trace:
[  315.601398][T13614]  <TASK>
[  315.601407][T13614]  dump_stack_lvl+0xe8/0x150
[  315.601451][T13614]  bad_page+0x17f/0x1c0
[  315.601485][T13614]  __free_frozen_pages+0xd62/0xdb0
[  315.601516][T13614]  bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[  315.601561][T13614]  bpf_xdp_adjust_tail+0x1d6/0x220
[  315.601590][T13614]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  315.601611][T13614]  bpf_prog_run_generic_xdp+0x603/0x1490
[  315.601671][T13614]  do_xdp_generic+0xac5/0x12e0
[  315.601710][T13614]  ? __pfx_do_xdp_generic+0x10/0x10
[  315.601776][T13614]  ? tun_get_user+0x2354/0x3dd0
[  315.601802][T13614]  tun_get_user+0x247d/0x3dd0
[  315.601833][T13614]  ? aa_file_perm+0x192/0x15e0
[  315.601858][T13614]  ? aa_file_perm+0x50e/0x15e0
[  315.601891][T13614]  ? __pfx_tun_get_user+0x10/0x10
[  315.601913][T13614]  ? aa_file_perm+0x192/0x15e0
[  315.601936][T13614]  ? __lock_acquire+0x6b5/0x2cf0
[  315.601969][T13614]  ? ref_tracker_alloc+0x35c/0x4c0
[  315.602005][T13614]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  315.602043][T13614]  ? tun_get+0x1c/0x2f0
[  315.602068][T13614]  ? tun_get+0x1c/0x2f0
[  315.602091][T13614]  ? tun_get+0x1c/0x2f0
[  315.602116][T13614]  tun_chr_write_iter+0x113/0x200
[  315.602141][T13614]  vfs_write+0x61d/0xb90
[  315.602168][T13614]  ? __pfx_vfs_write+0x10/0x10
[  315.602196][T13614]  ? __fget_files+0x2a/0x420
[  315.602234][T13614]  ksys_write+0x150/0x270
[  315.602259][T13614]  ? __pfx_ksys_write+0x10/0x10
[  315.602307][T13614]  do_syscall_64+0x14d/0xf80
[  315.602341][T13614]  ? trace_irq_disable+0x3b/0x150
[  315.602361][T13614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.602384][T13614]  ? clear_bhb_loop+0x40/0x90
[  315.602409][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.602445][T13614] RIP: 0033:0x7fd7b575d04e
[  315.602465][T13614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  315.602486][T13614] RSP: 002b:00007fd7b658dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  315.602509][T13614] RAX: ffffffffffffffda RBX: 00007fd7b658e6c0 RCX: 00007fd7b575d04e
[  315.602527][T13614] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[  315.602543][T13614] RBP: 00007fd7b5832c91 R08: 0000000000000000 R09: 0000000000000000
[  315.602558][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  315.602572][T13614] R13: 00007fd7b5a16038 R14: 00007fd7b5a15fa0 R15: 00007fff53c6ca48
[  315.602598][T13614]  </TASK>
[  315.602611][T13614] BUG: Bad page state in process syz.1.2185  pfn:7b20b
[  315.873564][T13614] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7b20b
[  315.883699][T13614] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  315.890870][T13614] raw: 00fff00000000000 dead000000000040 ffff88801afa2000 0000000000000000
[  315.899753][T13614] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[  315.908428][T13614] page dumped because: page_pool leak
[  315.913843][T13614] page_owner tracks the page as allocated
[  315.919558][T13614] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13614, tgid 13613 (syz.1.2185), ts 311275006944, free_ts 311251650144
[  315.936808][T13614]  post_alloc_hook+0x231/0x280
[  315.941619][T13614]  get_page_from_freelist+0x24dc/0x2580
[  315.947191][T13614]  __alloc_frozen_pages_noprof+0x18d/0x380
[  315.953052][T13614]  alloc_pages_bulk_noprof+0x558/0x700
[  315.958546][T13614]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  315.964671][T13614]  skb_pp_cow_data+0xcea/0x1bb0
[  315.969567][T13614]  do_xdp_generic+0x76b/0x12e0
[  315.974424][T13614]  tun_get_user+0x247d/0x3dd0
[  315.979143][T13614]  tun_chr_write_iter+0x113/0x200
[  315.984223][T13614]  vfs_write+0x61d/0xb90
[  315.988501][T13614]  ksys_write+0x150/0x270
[  315.992892][T13614]  do_syscall_64+0x14d/0xf80
[  315.997534][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.003509][T13614] page last free pid 23 tgid 23 stack trace:
[  316.009509][T13614]  __free_frozen_pages+0xc2b/0xdb0
[  316.014685][T13614]  tlb_remove_table_rcu+0x85/0x100
[  316.019824][T13614]  rcu_core+0x7cd/0x1070
[  316.024156][T13614]  handle_softirqs+0x22a/0x870
[  316.028965][T13614]  run_ksoftirqd+0x36/0x60
[  316.033455][T13614]  smpboot_thread_fn+0x541/0xa50
[  316.038439][T13614]  kthread+0x388/0x470
[  316.042596][T13614]  ret_from_fork+0x51e/0xb90
[  316.047224][T13614]  ret_from_fork_asm+0x1a/0x30
[  316.052065][T13614] Modules linked in:
[  316.055997][T13614] CPU: 1 UID: 0 PID: 13614 Comm: syz.1.2185 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  316.056018][T13614] Tainted: [B]=BAD_PAGE
[  316.056023][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  316.056032][T13614] Call Trace:
[  316.056037][T13614]  <TASK>
[  316.056042][T13614]  dump_stack_lvl+0xe8/0x150
[  316.056065][T13614]  bad_page+0x17f/0x1c0
[  316.056087][T13614]  __free_frozen_pages+0xd62/0xdb0
[  316.056107][T13614]  bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[  316.056135][T13614]  bpf_xdp_adjust_tail+0x1d6/0x220
[  316.056154][T13614]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  316.056167][T13614]  bpf_prog_run_generic_xdp+0x603/0x1490
[  316.056198][T13614]  do_xdp_generic+0xac5/0x12e0
[  316.056222][T13614]  ? __pfx_do_xdp_generic+0x10/0x10
[  316.056253][T13614]  ? tun_get_user+0x2354/0x3dd0
[  316.056269][T13614]  tun_get_user+0x247d/0x3dd0
[  316.056289][T13614]  ? aa_file_perm+0x192/0x15e0
[  316.056304][T13614]  ? aa_file_perm+0x50e/0x15e0
[  316.056317][T13614]  ? __pfx_tun_get_user+0x10/0x10
[  316.056331][T13614]  ? aa_file_perm+0x192/0x15e0
[  316.056346][T13614]  ? __lock_acquire+0x6b5/0x2cf0
[  316.056374][T13614]  ? ref_tracker_alloc+0x35c/0x4c0
[  316.056397][T13614]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  316.056421][T13614]  ? tun_get+0x1c/0x2f0
[  316.056437][T13614]  ? tun_get+0x1c/0x2f0
[  316.056451][T13614]  ? tun_get+0x1c/0x2f0
[  316.056467][T13614]  tun_chr_write_iter+0x113/0x200
[  316.056483][T13614]  vfs_write+0x61d/0xb90
[  316.056502][T13614]  ? __pfx_vfs_write+0x10/0x10
[  316.056520][T13614]  ? __fget_files+0x2a/0x420
[  316.056544][T13614]  ksys_write+0x150/0x270
[  316.056560][T13614]  ? __pfx_ksys_write+0x10/0x10
[  316.056579][T13614]  do_syscall_64+0x14d/0xf80
[  316.056599][T13614]  ? trace_irq_disable+0x3b/0x150
[  316.056612][T13614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.056626][T13614]  ? clear_bhb_loop+0x40/0x90
[  316.056642][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.056656][T13614] RIP: 0033:0x7fd7b575d04e
[  316.056669][T13614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  316.056682][T13614] RSP: 002b:00007fd7b658dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  316.056697][T13614] RAX: ffffffffffffffda RBX: 00007fd7b658e6c0 RCX: 00007fd7b575d04e
[  316.056707][T13614] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[  316.056717][T13614] RBP: 00007fd7b5832c91 R08: 0000000000000000 R09: 0000000000000000
[  316.056726][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  316.056734][T13614] R13: 00007fd7b5a16038 R14: 00007fd7b5a15fa0 R15: 00007fff53c6ca48
[  316.056751][T13614]  </TASK>
[  316.056760][T13614] BUG: Bad page state in process syz.1.2185  pfn:35f6e
[  316.326982][T13614] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x35f6e
[  316.337106][T13614] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  316.344257][T13614] raw: 00fff00000000000 dead000000000040 ffff88801afa2000 0000000000000000
[  316.352881][T13614] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[  316.361497][T13614] page dumped because: page_pool leak
[  316.366900][T13614] page_owner tracks the page as allocated
[  316.372682][T13614] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 13614, tgid 13613 (syz.1.2185), ts 311274989375, free_ts 311251695894
[  316.389947][T13614]  post_alloc_hook+0x231/0x280
[  316.394799][T13614]  get_page_from_freelist+0x24dc/0x2580
[  316.400431][T13614]  __alloc_frozen_pages_noprof+0x18d/0x380
[  316.406317][T13614]  alloc_pages_bulk_noprof+0x558/0x700
[  316.411854][T13614]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  316.417936][T13614]  skb_pp_cow_data+0xcea/0x1bb0
[  316.422849][T13614]  do_xdp_generic+0x76b/0x12e0
[  316.427653][T13614]  tun_get_user+0x247d/0x3dd0
[  316.432403][T13614]  tun_chr_write_iter+0x113/0x200
[  316.437467][T13614]  vfs_write+0x61d/0xb90
[  316.441770][T13614]  ksys_write+0x150/0x270
[  316.446133][T13614]  do_syscall_64+0x14d/0xf80
[  316.450733][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.456678][T13614] page last free pid 23 tgid 23 stack trace:
[  316.462722][T13614]  __free_frozen_pages+0xc2b/0xdb0
[  316.467842][T13614]  tlb_remove_table_rcu+0x85/0x100
[  316.473019][T13614]  rcu_core+0x7cd/0x1070
[  316.477288][T13614]  handle_softirqs+0x22a/0x870
[  316.482106][T13614]  run_ksoftirqd+0x36/0x60
[  316.486559][T13614]  smpboot_thread_fn+0x541/0xa50
[  316.491549][T13614]  kthread+0x388/0x470
[  316.495642][T13614]  ret_from_fork+0x51e/0xb90
[  316.500235][T13614]  ret_from_fork_asm+0x1a/0x30
[  316.505051][T13614] Modules linked in:
[  316.508971][T13614] CPU: 1 UID: 0 PID: 13614 Comm: syz.1.2185 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  316.508999][T13614] Tainted: [B]=BAD_PAGE
[  316.509005][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  316.509016][T13614] Call Trace:
[  316.509022][T13614]  <TASK>
[  316.509028][T13614]  dump_stack_lvl+0xe8/0x150
[  316.509053][T13614]  bad_page+0x17f/0x1c0
[  316.509080][T13614]  __free_frozen_pages+0xd62/0xdb0
[  316.509102][T13614]  bpf_xdp_frags_shrink_tail+0x4da/0x7d0
[  316.509135][T13614]  bpf_xdp_adjust_tail+0x1d6/0x220
[  316.509157][T13614]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  316.509172][T13614]  bpf_prog_run_generic_xdp+0x603/0x1490
[  316.509207][T13614]  do_xdp_generic+0xac5/0x12e0
[  316.509237][T13614]  ? __pfx_do_xdp_generic+0x10/0x10
[  316.509272][T13614]  ? tun_get_user+0x2354/0x3dd0
[  316.509290][T13614]  tun_get_user+0x247d/0x3dd0
[  316.509313][T13614]  ? aa_file_perm+0x192/0x15e0
[  316.509330][T13614]  ? aa_file_perm+0x50e/0x15e0
[  316.509345][T13614]  ? __pfx_tun_get_user+0x10/0x10
[  316.509366][T13614]  ? aa_file_perm+0x192/0x15e0
[  316.509383][T13614]  ? __lock_acquire+0x6b5/0x2cf0
[  316.509408][T13614]  ? ref_tracker_alloc+0x35c/0x4c0
[  316.509435][T13614]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  316.509462][T13614]  ? tun_get+0x1c/0x2f0
[  316.509482][T13614]  ? tun_get+0x1c/0x2f0
[  316.509498][T13614]  ? tun_get+0x1c/0x2f0
[  316.509516][T13614]  tun_chr_write_iter+0x113/0x200
[  316.509535][T13614]  vfs_write+0x61d/0xb90
[  316.509556][T13614]  ? __pfx_vfs_write+0x10/0x10
[  316.509576][T13614]  ? __fget_files+0x2a/0x420
[  316.509606][T13614]  ksys_write+0x150/0x270
[  316.509625][T13614]  ? __pfx_ksys_write+0x10/0x10
[  316.509647][T13614]  do_syscall_64+0x14d/0xf80
[  316.509672][T13614]  ? trace_irq_disable+0x3b/0x150
[  316.509686][T13614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.509702][T13614]  ? clear_bhb_loop+0x40/0x90
[  316.509720][T13614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.509736][T13614] RIP: 0033:0x7fd7b575d04e
[  316.509750][T13614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  316.509766][T13614] RSP: 002b:00007fd7b658dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  316.509784][T13614] RAX: ffffffffffffffda RBX: 00007fd7b658e6c0 RCX: 00007fd7b575d04e
[  316.509797][T13614] RDX: 000000000000fe54 RSI: 0000200000001b00 RDI: 00000000000000c8
[  316.509807][T13614] RBP: 00007fd7b5832c91 R08: 0000000000000000 R09: 0000000000000000
[  316.509817][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  316.509827][T13614] R13: 00007fd7b5a16038 R14: 00007fd7b5a15fa0 R15: 00007fff53c6ca48
[  316.509846][T13614]  </TASK>
[  316.797813][ T1942] block nbd2: Possible stuck request ffff888026870000: control (read@0,1024B). Runtime 120 seconds
[  316.891111][ T1942] block nbd2: Possible stuck request ffff888026870200: control (read@1024,1024B). Runtime 120 seconds
[  316.904232][ T1942] block nbd2: Possible stuck request ffff888026870400: control (read@2048,1024B). Runtime 120 seconds
[  316.916067][ T1942] block nbd2: Possible stuck request ffff888026870600: control (read@3072,1024B). Runtime 120 seconds
[  320.801052][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms
[  320.809418][    C0] lec:lec_tx_timeout: lec0
[  320.814381][    C0] lec:lec_start_xmit: lec0:No lecd attached