last executing test programs:

3.536175705s ago: executing program 0 (id=3428):
r0 = socket(0x1d, 0x2, 0x6)
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18)
sendmsg$inet6(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="fc8fb7f4a942e353afb35458bdc150c174b56da730802b945e942fa8550a492a64e9da57dfeda449be747e8380c1b2a00af423d4114ccddef5bb5b6c41f63e8f6114453b6401badd08d4a9", 0x4b}, {&(0x7f0000001880)="036c8ae7ec9c4f5b0471b628e21082756ad474df81b56b1ad0c203d863120435cc7c5913ebe854a566d70fcf5dd196455c2876b94eae0194a3c33e870720a538c9ae00063bd223663eb3fe52b1d33ebed449d83b839d506baf9740edd7fdcc909051967f881e26e824e58bcb10a448100d62f186b6ee92c03a64de84c375cb65a5f0f2b64a6638e5521918f80183828df215be24490880df3813e0c10365b4e3d607f91bbcdf88be94e772f9bc6512ede02e440381d60004771db5498318928afb243db5772c499077799c5bfe68d38dbcdeb1f78fdccf99588defc7001105fcb8e4fc993ef89af778464a67827efec064f2637af7a62d6f3224eb2e997736b4f696d44d4fbd98c79cb21cf410a7355c45c2b3548ae15979d001ff5f8a6b746ccb978bb8a532276a8fc940631d6dea20044838ed3a86562bab68ce0b304c8a4ec0cb04412dd46fce54ebff600aabfb7d4977d22b6ab3e0f44d1f4ae64e78c62efa904c225895eba4f051106f71e623bd55f94585b426dac2233d0603c9fea08a6f5b9d6a0d562f797166a70f631e0b9366f2f24ac38f6be4b37655e2957ec73f971e48096b3918990b906d9205ca3e96b0a74ac1c2a70a35a0e46f6e7a2d9604a1b63d7b83f4ff3ca3bb5e1defaa9c5fe5e7322dee4bed946e5a99d71aee456fd52b45b9cb68e1ae5fdea4aae4e5739ea5260a0cb234ef470e826fd6d8d653735db046134ba0f1e620b2db691f0d2f9a00f2268c41f9ff7b1b4b65704ccd68861eba7820fbbb61840e2f952f08df76be9730816510851fccb44d3dbee79d2e9cc00e3c5cc24bd3240aa02329777243c8de21df4a7c91d52aac5dbfa978c5b8feead45ebec7b90ee46604482cf7d1ee31036e70cdd7c3afbb67f3297481761cf03aaf0c306d09cb4099320c64d55f44fcb2e614eb180febd33cb0edaf2f0957d44267f82e1de7f5aa97b2c806b6d43c9c886f59cba7bca4c8314c7d4590d15bcfe84627d2dfe8902e1b2bb07f13c23da467933df36916b43aa0823f2193ba0f424fd89d7c94263040ad86539a5b9d7b3785944f8ec14c481ac23fa0a81099c949a69e41c7eb3af2842f817c2c3cebc433a1a1b3c8e94ca46903d5fb5e81b2982abf3da89db88b8a77f5b7a663d91f5a2564d0b107fdca54ba12fdf796400ddb2ea393cabf5eaa7c9813ffb5c03ce65e938f23893402efbb0548f6cebca0ae263a5fb26e2f07145971dcc851cf50ae21fec19d28e9a02132dfe66564d2986c3dbac88e271500ff2e3f84a75747e16c962038739c47b6c43576a9683e3cb05fad04c7b72842bf88de40be3c10f75a2b86a04b149263e1fedc43c9e299177f7c02362cd492b2609260941941bbef2cb48fb1c92eccdcf9baaab36b212f797eb34dadff04fe4b4a998f26a04891a3409e4e75344223610bff0be4b70369e91823dc1256cd9dbbc7dae654aa30d2a5734e2f7af1f060046ff67092699eeff659d2f066e9df1c36bce988482461f3ea091d117d11f16a97e9a51ff8d18e8fc1511e8f2f51aa897d70de79b498b7a8dc7bb3ac8155ada07df34df18b1a82d58e97905abc43d636d5d4f4d5dbb7245feecad048262d853eb028069074bc41399e9db9343fb839bd24a401a6410f7b946cb10e2ad4eb49f4379b1fcce28cc2663fe51009562f75cf5e938ae84017cc91b6aef4288b26a701a5d495b38b9d7de589bc132a7074aad3591cf0e34248120f90e86eae05a59ca26a75104dc78843b63d6548a4c960d65e39e5c4fb44e6788504d8c2b0009414f0175a366ccbd68df7c1ad977290dc2d70404801aaa3977f091fbd55c06482af9944776ca218a028756376ce1e18c119c33fecff248bbe191d03b9977757fa26d3864c712329cb648386a5185f6156ae6dffbe1ae6cc7f2529ea5ecd5515c3a0384bcab8f83cf4385fb87545fd522097758bb8e6d2200c97ae12795cc3fc5ef69f1f21795dd9b1b382e0a062fa0864d523f63cb27d852b63a512bef7df990f6a41baeef9bcb83e0712d47a8d3dcd68b60952e217b7dfe14283a22543a49979b9a9d24e4f8f3136e5893264d52e873e95d608b92d068f54ef4d3637de11eb0d9c93737a4fd0c9a8ade4a8fc26297794cdb2a269a450d26fe08a97a9fb68dd3cfc1d15fe1b3ba4ac24b5366486c778b7bc57b0a039762b07e78552ec3337bea46f90523e254573853097899bc08cec391462f9d7d800bc5a5c17a117067fe7468df5bcfa97b390aded929cb60644765cf8721d1fdb97c4715c08c325f38e94a3791078fec9fe9dd0e80e420e3be0abe2615c0026b10ca26cc7ded207a5bfee43809be48128783bbefc8d08e469c2addb7b2c5b09aac1823aa59e8bfeb2e00bf9cf6c0c9c5bab4f14ba25f7314e27304399e7b19868ae5570e7e38e88270e927b0833fda0d3a3d262b7d01a328000e76fb08e7ec6232b475596d45302adfc5b0d7d45fe0f4aa1c3d18d8eeaef6b1ec924cbc138752090df453d1996b727fb14c088054dc23586dc95d51f6fa8b35298520c5bb19fe65b52713edb642a8c12ed1fb8612b4553c414a8ec71416516a4ab6878c8ad4221688d8594c080f84ac63289dc7ed70a24a088ff10997de9bcd0dfbda5c7db81f5db990833f26b5e6707d88b4d10cc548ca66e51691eb55a98846bc114ba597aa86c951dd907cc98cea0625b7ba5d46cc8c9adcbe12a55a125be800706c087e4a6b43754dcff479f5bc1bcd4ae0179cd2dd38de6be2c43a45d1436ba66ce2a2683282a753ea584c48663ebd17ce5b26991a4a38dd09f59d385792e29f094ebe372f4b06911c94976f67c5ede0fcfaff724fcdcfbd77675b5fdb56030307482b18dd0cd2776a04ce2cf042d336585b03232d9cfe657129423f4f464cbcadae7657915681e187845b34c4ccc51fcdfa9002f179138fa70403958145082f5c11b584ce31803f623a9207602b248fcec43fc12eb103a6a3cbca621c15a003b7fe87c5bf70f688aa84379529a0ddcdbbac5f6bc9a88bebe6956f225dfbe95e2fdb005cab7ae56d6bb0ae9915729da5266f87ebf1cf2c5b563a38c25bbd977bd757cac6d852309e383425b200c040dfdc3ba1e97366125e778b64ee3d21db546cc215465f145e9ee81513732f1b8b0cadfcdf42521f9128380b3bfa432454c2d7c0b637634106b6ca3a7fe9374bdafc4d516135cadb3adf719aeb339a357d90a6ad95ab9a63781996374289609ae2f9d3d10de5ddde4874d6dd19b09ff48c71b171e18e0874ab6cae59abb3286706cfec77abb094c781fef32abc5b334bc7cdf7aa6cd2b776c270c4d73ee36b421cec8f4d165fa10b4a591e113153e3f277d093462648df2304d5400f3e4a23682e30589411e02388ce488fa50f6cbebed19378c5aab510f0bc6992294e30412fe77f60e4304cade609bc71820218d3dbfa1a200a91ae64ca28686355bed535744b6f69580a14cf68433a3606dff2b00caaad5d844b0fa303f941753d71d55bc5e6bc51320aefbd342ae08a4dbe9bb9db3cd6a23597661bb3ed31a4f19825f078ec1f202e9d42c23fff296c144ccbc147bc46f4cbabcc893028fac3fb80a74f67806da8438062e468df5addd08d23cccc315fdc86394078752232dd13258fef5d0c4accd80afbd84151a5623b91f3561b06101e9abecb0b9b689e838a9a1411212cb4c8f71cac90872449e820370a496e452424aa65e36c7372b46dec3e2196b738c03b966943e5cd9875fe824e8d806014cbdedefbb346a57a55dceae9d43973ce9f9e18d89c3e3480537d95cedf75594f43912668fe7e2e257be703896233f86bc8ee6fdbc05f6870cc343dc7daeae578035df11db995c5f0fdbe7d9c09938dca5649acf014a83effdfe6e45fcfc145241687618ea65aa29196a128d6d41e477063363a218925380f336bddc3e3d397f4c376fae56594f2de276d81c65d9c12279872a6b51f32ab9ea08638d9cdc92acbed2fcd99df773307b76ff143bc4f57c8ef4cbbc89b5009ad5a4e190d78b4442fe41b830f6e4ceef81bdfd224c94f210743717fd079a6366aea296ece34599eb1d3625e92b71018a0ca813aa997952c6828f5328033b1b4f85991879cde162338ea421d2471c8813a36df9a4566e4973ff1438a8f807ac8a46d7089362d1ff141b649faeb901300a5553abc892a119245ce90a78609f9b887438d28576d64bbd90f0f04a8aae3644db0db7277eb430915d0a76fe14132640e7092cdda4ab86521432bf4520115549881f92514a0ffb8b484fab7ae2c9c645f0318a341bab00861a06dd7e886435d9072992aa2f9582f076e2b711fb4cde83d042e3d74866a46bf752cbda668233bed13ddf81e2593bfe72d1f2aad4713a22382052e9d0d878c2e7b24d411d44f3d3b425bd63f0df1a0534002b8c5d1ae3c0854202cade6010b680c1f1d4c59b9cf313ed5ba061dabd9fc6a16e2c1871fef638e9b1e6e6663d68c44af3e72f8b8e3e7c56cb7077c3b126e05b24d18fcb31a36ac72719d9b71faa74e9bf2458b2be36727f81aad574e3ca60abd66a78c27374a9d7571c6c29866b66a79068ae28d7c7ce53fcb49fe249d8c04a578588e787bea4c4319f0084b57c4e4afa32327f6acb9eb5b7c9203ce76f4cf6c0480904595b81627b8048a0a4f0c45bb53b61c5ac1d04616a21585b31bd14000399847fec429c4a051058deed032555f493aa57abed5fb71ca470814249d09121cd24e97130bd3f83dc7df6ab7c66e8eadd107e9a538c4badc02ab5507ef54a5465d370c5e7097202fba12a5f663da4af81e6ac47c6375e5e68a4a083893eaa2c42c7ef5486fb777af87df4867c71c27a0b238ba27a6d38fdecaadbe3cb5c8f077d9c2f2664e25de7a3fcbc05b068988c1bb55dbbb36168e973adcbc894e18ce6c6bfbc196cd9096b65ef6e5f0000869401db794c7f1dbc81f195bfef08fbb9cf94a4c9775c60e6ccc9960115d77ce21c9ea111fa2b2b9d68880d49f8b59087f3f33adf09b1a3a649199b1f5003d3eba5794a390fafae2c2b0e2161c401d9ced316dafd4d2055d6e7e0f7a318c1ae054b8e47bac4c84f547283c4896f4a0e9c5408a7d19893f68b95c14ff7d3577c8fd742de7932fa505090cdec7982f4cb1262cda7d6c48b85177fc86b2b3b6b85d2c9ddca094acc109c1c3291241ad549f4b5aacec43018091b35a7ce490c7adb098492c5faae25c4dbf85d51b9f2f84e646c4f7c5daeda9ac021cec5229dca7ea9d024c19003db89a0c1d88216c139b09325e936991e40f56333c7d4bd824855d260ac625baf2d5934aacd40ad0d25a16eb2ac73da708568cea36857d327b453efa0ff1f3208f3b32c57448c4828f533a0b4ac6ad3b465f252b7423f2df36c9e50ac4ba5f8157c3025501e8d7eeab0aeaa551d3cbdaeb88706489737a7cd2aa86a37813eb2c41b74528a86c3407bd90c058bd375cf78688c81f372087905be9508ce8688129c3749ae55b6fd37661f4d3cd8e04638d5b45dccd0d96d9069474f814dc49253f4c8edef38d8239de8506c886c4d5db64be71716ac75107f273f2b3d8860027ab18fcf25bfa6281193dc0bfcd7a97b372b6c6547b87654fc3559e139427dce17b13b2547804c8315a09315d20fa49586780c4d8c9c6302e17dffde5f150b967d5f559f54ccd7685747c0f28215289cb6e2aba4d32d28c1c62a7fe81c7ad5381554debd66ba4d443a9f84435b6c3d2f4696ea519acf540191f8918ec0bc6a09258616cddbc6650d07c1d5f985166b07bf64ee869c8a408ced7fea", 0x1000}, {&(0x7f0000000200)="3197883dcb7508f7de5627b0c8e478fedc4bb60e2502411b2188d918f7bc28a42de570faa406f50901bb002f964588fb086591c33fdd92c7f1d54e3a3a0bf3b5221955e883e088daf13b32924316229828c2e074499ed4d02f7b3c5f9656b717b307217f9b3b899970fe7fca36db7f462f319b0ea71b64e60f9dfc680f6ce23fb623ae327bbcf615a5efd6f1016b4406e95392a33753a510ec77bf812666deb0daade05288a969be2d871d", 0xab}, {&(0x7f00000003c0)="940ae4cfc6956971d4fb9a2174d122ca7714db234bdca6879c317ee1b3bf78e4556bf733e7efee9edf357f6fe2051d2d14802dcd3221208a1372516ac3cba825b3a9f20428667c7a00a39b23904f16a7593179c6b7ecbe233169caee9a122059e9f01e0b080ea69a18714fb17ddb04b784771d0f53aac1515a85a869b1cf4c9871d40f009ad5ecf7bd37482eaf6dcee7f1d4a0007b0ef3642eb0556fc0ffe9e46110f1e0c80e6f8a29201299085c3aad4ea4d7da87fce89c295a9470f7156b9ce18b8d837f890b1c2efba2ea043d603eaa06ce42ced25755711ae446041cb64b45c385eef86390488ccf8335591e4082b80899", 0xf3}, {&(0x7f0000002880)}], 0x5, &(0x7f0000000740)=[@dstopts={{0x48, 0x29, 0x37, {0x67, 0x5, '\x00', [@hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x1}]}}}], 0x48}, 0x0)

3.084927942s ago: executing program 1 (id=3432):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x8}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (fail_nth: 57)

2.918566325s ago: executing program 3 (id=3435):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x24000804)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x301, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)

2.762750941s ago: executing program 1 (id=3437):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e10500000086dd00050003ee0b80558ddbba9b37786fd808252372a31e493988", 0x31}], 0x1}, 0x2404c0d0)

2.578246518s ago: executing program 2 (id=3439):
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRESDEC, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003865eb6209bcb556943698fc0775e66083b024ac327f363276585978feaa9c7896e3f875a86181df62a8c442fa3ecb84849403"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8fffffeb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000080)="2e7a465dca508aefbea444c48f13657cd18b5e0ae694de7ad620e15f8858f0cc7c2c574b416d072a70bb1dcdd940db5d2cee8c07b018", &(0x7f0000000c00)=""/4096}, 0x20)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0xc810) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0}) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x24, r7, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) (async)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x2}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x30, &(0x7f0000000540)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x51cc0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xe}], &(0x7f00000006c0)='syzkaller\x00', 0x3b, 0xb5, &(0x7f0000000700)=""/181, 0x40f00, 0x24, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000007c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x7, 0x7, 0x20000}, 0x10, 0x19291, 0xffffffffffffffff, 0x2, &(0x7f0000000840)=[0x1, r0, r0, r5, r2, r0], &(0x7f0000000880)=[{0x2, 0x5, 0x1, 0x3}, {0x5, 0x2, 0xd, 0x2}], 0x10, 0xd}, 0x94) (async)
syz_emit_ethernet(0x5e, &(0x7f0000002280)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x28, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[@srh={0x1, 0x4, 0x4, 0x2, 0x80, 0x38, 0x6, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1]}]}}}}}, 0x0) (async)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x10000040)
close(r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

2.32556637s ago: executing program 4 (id=3440):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

2.298481474s ago: executing program 0 (id=3441):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

2.260545369s ago: executing program 2 (id=3442):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x40083}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x7ff}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x2ce}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008004}, 0x4040)

2.258990733s ago: executing program 1 (id=3443):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x3000000, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

2.127247583s ago: executing program 4 (id=3444):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000030c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000003100)=0xc)
r7 = gettid()
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003400)={0x0, <r8=>0x0}, &(0x7f0000003440)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003480)={0x0, 0x0, <r9=>0x0}, &(0x7f00000034c0)=0xc)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000003500)=<r10=>0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003540)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000003640)=0xe8)
r12 = getgid()
r13 = getuid()
r14 = getgid()
r15 = gettid()
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003680)=<r16=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000036c0)={0x0, 0x0, <r17=>0x0}, &(0x7f0000003700)=0xc)
r18 = accept4$llc(r1, &(0x7f0000003a40)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000003a80)=0x10, 0x80000)
r19 = getpid()
r20 = socket$nl_generic(0x10, 0x3, 0x10)
r21 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r20, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r21, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r19}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003ac0)={0x0, 0x0, <r22=>0x0}, &(0x7f0000003b00)=0xc)
r23 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r23, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r24 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="000200000000000000020000000000000018714238f27ce024e684fdec90dff2622f006116082e7c3ae79f5d244e8329427082a2c6be6f478df98b7b4f8be8a7cbdce4171a4d5bc94b2b0a3b4f24be52539cd207824b211c23c02a44fd20b1dc90974cee878c292cb5476abe8e2bf7790a5213b6fb1a4d81a5b429f9efbff094e7845d7cdd6ece5947ea43223b87c3e17c01371c00000000449d858081b9463ac93dcaf73300"/176, @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000050000000500"/28], 0x50)
sendmmsg$unix(r1, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="aa0442307773dc37916a345a7f5c95c76cd118b3033eb0fa52fd03ade725de1c473b490ea4952ce6fa8403f817881b0c180df3a9cbd044a25e78e8acaebd69efe308342fb00032901ed29c9476cfb5c1e4e27f851e9e3f9f22ddd3e2c92707fcc6caf532f19dc63769b4a3a47199e0232827b6a89bca362bb55071e5a42f7b8054cfc0274ef52c1d11e3ed0a75f7ca192992dacac0395951531f7aa0eb6605771070369f5a00781c3fbdf9c32e9aba6edc40548b00b57dc2", 0xb8}], 0x1, &(0x7f00000006c0)=[@rights={{0x20, 0x1, 0x1, [r1, r1, r1, r3]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r1]}}, @rights={{0x20, 0x1, 0x1, [r3, r1, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0]}}], 0xc8, 0x20048040}}, {{&(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000840)="a5c9e7f3e34808153a4fd531f9ceeef1915cb0a518e9199e3fec254ff5aa86a58ceaad6e35e261a36b809f94461043bf0b224cce1ef83cb627aef2416f1986a33c5e3c4cc8c1ddde8b4b4d5d41194747820c9b8b483024fc9b8a909253acd6f5af4327c9c15faaa5f47e251feb7cd7956559305cadc9f44e9d10077ea8d5bb97e46dcbac4327e7f9fbe3b746fafd2d5026b995536a3e0199c33d0c2045bdeb062dae724f528c55f22a80e7e184e9e03914d7a70c9cd2c5ac8d5654d11554055eae18c240bb8b8768593c3885e9", 0xcd}, {&(0x7f0000000940)}, {&(0x7f0000000980)="71778f82d98c462ec031f06bc1bf1564cbc159a82b2a385597804716ae9e064abe3e9c467414b322ee68b706970c317b59635cddbbae28789d5389951f19172e7265f4e6ce393db5547aebb68eb5f05544bdf3588063213ee67c98c263c98fc695b6a5fec2ef0a69c2144c40f27cfbbca81238eb26d690d2c7cd23d48b931afa7720f91e0d65df3e", 0x88}, {&(0x7f0000000a40)="cb56cee13a3960b5eff33d0aa71936968c5eb978db43d72d013f58985ce7e53f318babfbf2374b08b1922fdf262efd365a08ef360475734e33eb8e27d4018b3a9cc8db88335b0faa0f74304b6cea48f08c", 0x51}, {&(0x7f0000000ac0)="e8e4a12b8a14a037bff5500fce1ed6ec31cece7acbfb1b04305cc374a7f9ef62f21401ab17d2739bc37e03ef4176c44076c24a77", 0x34}, {&(0x7f0000000b00)="8a4000e497e3cff51b2997671992a0542bdd1bc775521832327c8194aecf9af0a720aae27c567d70699d85e14f9d1d6ef6ee10f1eb242169eb09d6bc4c22ec0dc0a68b0756cd3c2a27129c91d292996e0a5f9b9f580df6c2f1c5e94a5a", 0x5d}, {&(0x7f0000000b80)="457f056690d68d0000f11a27a0e5cf02ddbf15880df17a547a0eddc0290e595d3a10374744435cb27e87532379542fe062599cc3bd3b184967e6102539d16cc0f82ca2f828fe3dadf7ca112f87bfd9412121954884da96672b82cd36512dbe36dc85151ad3821ed476137c8b33a7aafec1dec0971fe63c2dc3fda9444bd07f92c656aa7227a433780649de98c3c8680b2282d9327e0b8c67bb0f353be8a513b52ae2be7c303f672f5a", 0xa9}], 0x7, &(0x7f0000000e80)=[@rights={{0x18, 0x1, 0x1, [r3, r1]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x58, 0x24000800}}, {{&(0x7f0000000f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000f80)="47789a4c6e4ff666e480af8484731864d0933631a6569d2e5bd2782baa3ee273d0c4e2d194ab4302ba21e2dc0afbec6a8024b43d2e6e87b01779fbc2a6140d02ca1fc4467f4120198ef28055b4bc9b096a46931be28566b5bfb83d75367def56d79d14d01e00cd646f640e9136fa", 0x6e}], 0x1, 0x0, 0x0, 0x804}}, {{&(0x7f0000001040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001100)=[{&(0x7f00000010c0)="36d51b15d07233a39bb6211a8141f86efd40", 0x12}], 0x1, &(0x7f0000001400)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="30000000c5c27be951638d1e1f033bc2", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x8000}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="c3e4fe0e376da3a4a76c5cb9097b20276eed2a0d2b77fd679ae343fa6b43862d18b4606401163190d035754e187d972f4a2eeeae25353c96caa4177fb97010d4f5d72d9e7d723a5d2584ec37d03af94d3aeb23549789cf000679919ca13678c89f27aa50ea811953e32646616b2d441022e194dcbbc1c0baa8c465d1f4d18062ed68ef0fe6a885f80998860c57d6546dbb7ed9ecadcd10905b1620d3047d707f3f8360c11b8d33f30e6119bc6b155f283803daa90ec4dabadc4ac9a5d730317b66657e7b525dfa6f89c081c021756e7c1001112fc542612360ef4b83a9c1a77164bd0c", 0xe3}, {&(0x7f00000015c0)="3bdba957c7cce3a29d9917d0d9e789ad4a5cdcbe3058e6c0e71750d93e063e2757149c4d901e6f76ab8f2ea8563066c00cf3783e8f464f4909807076c2ce9ce0d328279c9c4034ac2c72145f6d75d939bf1fa9f57b47872fef6b9cd085f46dfffd0d2a5932fa87165ea309bf2aa34f5f278de508ec8b420cd343ce6e6adb4f8e629036b1b49260bb3676df2befb51b79ed4a81da0c5998efe38daa072c1aae7bfd58b7922129d12fdf719d7e3c3503c6f9c3afab06102a09e5271b7ba25758a1", 0xc0}], 0x2, &(0x7f0000001740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r14}}}], 0x20, 0x800}}, {{&(0x7f0000001780)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000001800)="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", 0x1000}], 0x1, &(0x7f0000002880)=[@rights={{0x20, 0x1, 0x1, [r1, r3, r0, r0]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r3, r3, r3, 0xffffffffffffffff, r3, r1, r0, 0xffffffffffffffff]}}], 0x78, 0x14}}, {{&(0x7f0000002900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002980)="4bed7d344412fba0d3f709bba418c5a9f9fa24f04b7947a0b48c8a7a65f37cabe42ff9af832d5917df363523f82829c431fa568ff696052375f5e4dd965e00f7124f38129b04678096304390fdde14db9ac47fbf3bbf539852187e9639aa8393df21981e642e3fbb16f0d547a366139cb4c296de4428199983257bc5950ff46542f5447c70957145663395d4e563ca23c62b7c25e1d93e3a65ffb68e32915e02929efa28cfb7", 0xa6}, {&(0x7f0000002a40)="a17b2d575e97a2eff30bd4b1918cd5a55fb90a3063e604f8e0e7010a463a893160851e0898c0398c5a640627871268cf6eb60593c3a5c75e666eabc9eb7988b04395029c607ece695a8e26331a3097b0aa424dbda218b1526ee21a", 0x5b}, {&(0x7f0000002ac0)="921d12cc534e2598ac287ed4af5a774db556e43ed46e7395e4599c9c658da84bd504903d7126fc54304ac87e0fe68236c3163c03eea85e0894d4d1259c055a692cbd70b9eab578b5a236c0e4b278d9b9654ca282d2f9da85006513d0142e196338e9aca1ec44e08cc71edcc388b7ed0670a76a97babb05ff71e29448c0e2b09e34bf463c1a738adf89376f2ac32968279bfe2f466e71f6e773e2fb2492119fe6438e7117df490c095dab5cce40fb4e8ca4eab551fbda39920ca914538f7d4f514c53be3cfe54daa6eb75c642ed831afa4dfe5292d47e1d1a7e83cba891de09a89611906923a55255699e834c2bc280", 0xef}], 0x3, &(0x7f0000003140)=[@rights={{0x1c, 0x1, 0x1, [r3, r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1, r0, r0]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r1, r0, r3, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff, r1, r3, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x168, 0x48000}}, {{&(0x7f00000032c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003340)="24d49eb9a866ae78d8d7637f33a1717f819176ff38a2005d0b2225a7293407295d1cfdd4ceceaf0e7b4f8603d0582120f5a15db7c24f54337330ecb1e883c571a7aaa97e0b7136bdf117b460212d23e2789085aa", 0x54}], 0x1, &(0x7f0000003740)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="000000001000000000000000010000000100000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="140000001200"/16, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1], 0x100, 0x20000080}}, {{&(0x7f0000003840)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e, &(0x7f0000003a00)=[{&(0x7f00000038c0)="193fa9f5799fb747a9c8a8488d95cf4465b1185682b0f9bb4cb282c46a8b961413c0c2007e60f87dfa21d8cec7f6155ddbddedfeedbc432efb4f493989a785553a1998aa099f32e8872fee71a3834839be75be4e3a1d771357c27e36458340752bcdfc56fcc62316bd608db76ef4b19c22cc44ca2780cb4dbc1c014e85b05eaeba43a01bcbc82bf2b9764680", 0x8c}, {&(0x7f0000003980)="16b4f7bdde6482bd9759e8636319153df95ae46ad3d2a14082ad24e3a77162aaf921a963c040554e064369627ccd0bdefd4c186a6faa0a4938efe8775fea11282fd48fa93158bcc58a945105a064ccd349369c214675c3b4fd6deeff154986", 0x5f}], 0x2, &(0x7f0000003bc0)=[@rights={{0x2c, 0x1, 0x1, [r18, r3, r3, r0, r3, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r19, 0xee01, r22}}}, @rights={{0x2c, 0x1, 0x1, [r1, r23, r0, r24, r3, r0, r1]}}], 0x80, 0x800}}], 0x9, 0x81)
sendto$packet(r0, &(0x7f0000000400)="05", 0x1, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

2.043456282s ago: executing program 3 (id=3445):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x1000004, 0x0, {0x80}}, 0x14}}, 0x0)
recvfrom(r1, &(0x7f0000000400)=""/4096, 0x1000, 0x2, &(0x7f0000000040)=@ax25={{0x3, @bcast, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null]}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.988500969s ago: executing program 2 (id=3446):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c40"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x5f, 0x30, 0x15f68a878522e060]}}, 0x0, 0x35}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r3=>0x0})
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r4, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r4, r5, 0x4, r1}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000024000000000000000a0000008500000027000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40}, 0x94)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r8 = socket$phonet(0x23, 0x2, 0x1)
writev(r8, &(0x7f0000002600)=[{&(0x7f00000010c0)="b58c3b06", 0x4}], 0x1)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r7, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040)
sendmmsg(r7, &(0x7f0000016bc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000014780)="f2", 0x1}], 0x1, &(0x7f0000000540)=ANY=[], 0x10}}], 0x1, 0x4044044)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x2f, 0xe, 0x0, &(0x7f0000000540)="ccb9547ed368dbe9ab15d10e1a92", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.969704137s ago: executing program 3 (id=3447):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x63, 0xfffffffb, 0x5}}}}]}, 0x44}}, 0x20040084)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0x8}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041010}, 0x4044000)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0x8}, {}, {0x0, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x24040004)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

1.735793628s ago: executing program 0 (id=3448):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000202019b8971abb16e4c789fd90091fc0a04000000000000", @ANYRESDEC], 0x50}, 0x1, 0x0, 0x0, 0x8008c90}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r2)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x84, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4044010}, 0x85) (async)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0}) (async)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
r11 = accept4(r10, 0x0, 0x0, 0x0)
recvmmsg(r11, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
close(0x3)

1.595182966s ago: executing program 2 (id=3449):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='lp', 0x2)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001440)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001480)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001c80)={'gre0\x00', &(0x7f0000001bc0)={'gretap0\x00', 0x0, 0x7800, 0x800f, 0x9662, 0x0, {{0x17, 0x4, 0x1, 0x6, 0x5c, 0x64, 0x0, 0x9, 0x2f, 0x0, @multicast2, @remote, {[@noop, @timestamp={0x44, 0x8, 0x5e, 0x0, 0x7, [0x9]}, @lsrr={0x83, 0x7, 0x34, [@loopback]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x72, 0x0, 0xc, [0xfe, 0x2, 0xfff, 0xc, 0x8, 0x81, 0xc5c2, 0x3]}, @generic={0x86, 0x10, "eeaa421badb73e6c095b1f1cf4f7"}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004d00)={'team0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x20000, @local, 0x13}, 0x1c)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000300)=@int=0x800, 0x4)
getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f00000001c0)={@loopback}, &(0x7f0000006700)=0x14)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0xfe}], 0x1, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb9c9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)}, {&(0x7f0000004d80)="dc2e36baa3ab3424452bc2c4a7528b93e168a10a741ab49a211764528511e5f313cebab507bb34bae02b601156402f8b2200bb8890d6acef2f6d2100449c2d4cf4e1295267a8bd0d1797a991c1fd90731fe22271a4ddcf05c8fe4427f4cbc3b62e681164789a9b68d4ea61bdd0de955c029c49aa7748ab7ac0b34e10c7578400000000", 0x83}], 0x2, &(0x7f00000014c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @remote}}}], 0x20}}, {{&(0x7f0000001500)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000001540)="c30d60ffcbf09c78ba11458db9af1167275d5a050e763ca1692dc8778568ec2bd39ab323a7e2c3ca0247f0a54ef10b6603995e8e59f242ff9f9ed345b22ebf431196e0290c27e1ad95ad760a02bcd5d1bc3fef769f054089d0223aab167915734f69eaf6c14fdb027b82806dfbedad749e71cb4dd8617754b5187b5010310bdb278d9c40de3552031d6b0e527793f46dcf03b10b5864c014964b55545d7d0dd21a99a46daca95ae48077e0eea5aa7813961626178dc175ef6e30776e41853811f6975d811557265eb798aacf5e", 0xcd}, {&(0x7f0000001640)="19bf052ac245d9767b5489f6518ae8c36b6b9036490dba5c668588e15d830d0d70722b35db18eec73429d74250f4af391bb8be0da48c6befbd8e6bcf47c697f688757094ab", 0x45}, {&(0x7f0000001380)="6f0d0e0000000000005e003cbd405b1ff56a8a760e98f98b2c052c480942a305004bb5bbbf3bbb307c3b00000000000000", 0x31}, {&(0x7f0000001700)="6f7a50a30c8ff0dacea9b11cc4172030165a6a46b7fff854c6929ef247b5f7e352c7e3526d39d086bbdfab2480204efd938325de02069c86e7a8a935c6c66a3bb7b29441bc27bf463d49a18814c294ff00beeb06feb5b6b97f17cf9d76d2a4674c74cf1381304079cfcb9f2af88fb897368fa409518ed2940b49f7eaab2c3cca5fe2927278d6f5908991a62b15465a4d68d93104e4", 0x95}, {&(0x7f0000000380)="7c920e2988328c9c2a144331817c8ba40d909e6b9aa5b7023301c64f37d4002282ed4bce34d65206056bb09a825846454f2a08d3d2850000003993f33fd876edb351d3406dd9e73851c32e028de4431b7c1fa41b3c3152796c3720be59ac12b8f6dbce44a0763f9a2a1bef343ffe7aea521a6148eae24efce2eeba0fa2e3bee295d4317529984244609bd24b3c320668861c368e64840a30dcc0c785ca919ab86a643e1480097a931db79f76a22d18ac56cb05ca81c3a994d37815deb5cd8bf3b48b46383e07c9860822bec482b247a7fdbaae3d8a664c5c3169ab3309178ef2f705e0bed575b0a9921b382f30b8", 0xee}, {&(0x7f0000001800)="d0fa3bcbbd9ee9fdc11b687b0f2afd6f52cb5a2f1bd0b6a548b7779b2c5e24aff9ecf2c5188584e76456017ac6df5280f4218c3fc89172f4a9e017298c9630c63e0142f5070b21d28e5dd17f8733be3c68e57f992c5115ef98baae540ed3f7bc2adcedbf7909b3d91390fd3321f823b4355bc9f83f895ed2ed4be94d5f0a4cbee49517fa8991ffb4c8d588d1e025b2142ecc2dcf80ba9437217f69c8889912b8f95eddef3c6b77d1f130eceba81f5962c0de6f32d6942a8a628fce7c4da0c4f06aeafe589557366eab1a62fe25875841ddb113d4ef89d95c", 0xd8}, {&(0x7f0000001900)="f472fd92db177f31bcde19c1c23b3ea50161140f394a67b345dbc4c2e1f7b8736cabf16591b1f5b4425e700894047e4f260e106163b9bea6364dd5320a7b78ce00970b5bf360d9cba11f0692bd377facc503a075a3a8260e7ed7922974d045bf0931ae99478c1815b539261dc5de1b86c21dbbb0405770d016ac48de13ea7cc6ea3b7a49b2767d792558574137a1fc51e4611e5a565e60ef7f4008ac7bde1785e0d1aedf73b016fa6b6742a2715cc639f06c9a", 0xb3}, {&(0x7f0000006740)="3fc8174da91fe4de2ff3179825aa69f55ecbc1c7708b1b74464c1af6d2e33fb53d1714bd8cc6cf84b312c9ab26f5e8a88719679d5a94c51a418436a733a0e1aa1acb6dac584e05233c0ffb5dc8e372c8b4ac9bd0542af68671655b7dc422c59458b17eaefc2ce21e5bb46dd259f9cbe2af52f0e7a344945e9df007018d41da4ae5e581e6f61a429cdf58a5ca56fcdeb0530b6eb4a31e0ea313e67939c93df80addedc8a9c68d0691cdd521cce1", 0xad}, {0x0}], 0x9, &(0x7f0000001cc0)}}, {{&(0x7f0000001dc0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002180)=[{&(0x7f0000001e00)="a1603af4ee100e91b9f1447a0644004ea82e4a6331db179955e3b658ae1f29fe9e594d2dde084d5d4184d1be7c31b42e0c93049555820ee234fdbc07012674bb48aa2e9a646388690773bdd8489dfb897cd0a3641b77ddb9efddd4034a5dba4e4736", 0x62}, {&(0x7f0000001e80)="8c86167a83358689f673b96ce30ddc76a87395591932553be31e66d779530d3540f57cfcf17e7d2854eda60a2c347ea51dda1c4fb1e1e1ad95e40348141611a8cdb16ab0cce1901d72472d167b3d8a70a1a20222b97c3eae1968177cef53dc1abe9c2612ae87876d309d6d3395a9a6ab90e216119ce76bcbb6c856b4527f9991f81f08788fd74cb7cbf95cced4fd4839eb8ad2ea6829fab97940e1853c069eeaf229127ef91f87106c2627f289efc612c4", 0xb1}, {&(0x7f0000001f40)="82ba999a18f7fc0dd5a300f6f873b6f0229c8b639b7f845050fa13d1a577943eefec722c87f961475a35c0c635e1f1832a7b757bb95fe09770d6773869010566355e0c06b306749556edc2efeffe3cbc35c1480652126b145badfd847a07f0a6d6415d7233cb5f8a6057e6d08c6fc4791214368ee7306bcc8e6b523a2284457440e26afb03d491674febf7ee8cb3be24704cebac1439d5007b28b290bdbaf4c6ec70f282f0e810f857128e593ba4bf57c7a154ee604ec35ce612ac585df151ac85f9eeab6a733c9b216ef160fbfe9fef89f7e8981b337c", 0xd7}, {&(0x7f0000002040)="22e99825bc45c2ca395cca98938be7e9a261ebe7aa9d8877706c444ab31234e8c591060a5c347976677ab18bae2b00eba4aa88ddb5c11a9e6850d88500582df197f8916d85355e7435331c685291b8fe0742b70d5838e6d8448035ce5ac0a070efcaa13624b2541411c7151b0040d265c48847fbbaf6aaaf64510601afa2e0b91e9e06885420738d70672f51b0c461888c05d1d848757895bd8e2662d8f28ef5ac69de6ea3c23619165d", 0xaa}, {&(0x7f0000002100)="15fb28cfb5c28c8bb832192b07f78c50620ab4076ecb46a39bf87397486762800c920cda3e17d33577fb72f9e8f6a954f406338837ccd1fed88a1ddc380cc6253cb0f348ed4ddaed422a03224299107d68d09f130e3a174e51d06aa47e7d1f7c912e3352f09b03d6882752e7aca4f8ae0fc9715a4403ee09", 0x78}], 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000007000000000000000000000000700000044143d230a010100f4fff801e0000001000000074414a443ffffffff00000001640101020000a59c7696010102000007ffac1414aa000000057f00000100000003ac14143d000000010a010100000000"], 0xa0}}, {{&(0x7f0000002280)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000002440)=[{&(0x7f00000022c0)="030f8545e1af1711bd7976bcfff00ce6b4a100bf7559317d65163861eac1448887aa32284fbce24ad0f2ce3dac95cfbce339e9ec726139b7c7f3c1163e1fde0e6b22a750cca3f66d", 0x48}, {&(0x7f0000002340)="5d4179e95ad277dbb99090544608790bb959e52db45534b54ced0315a6914b10edc0abc3687792b4a7022e6a71924f2e2595fe25172b78cd54c78ea0c2f83cbe9ebc17b9b75320f8b9e0c40faa8fc9c2f919d5d795b5f1062157cb95e8c245d0066eb586d898b9acb612695f757fdaa305aaac4e0b54bae1b1c70792332c8d7849911e855295455bfdfab01bb5d3dea8df4607f698c0051e10316223da77268038d14dd6087429887f8bd161ec51e82e933856d6099c690e75d442ff670421ecdb19942102485b3d77ddd9418496f2d8ebf1320d74394559ff", 0xd9}], 0x2, &(0x7f0000002480)=ANY=[], 0x1c8}}, {{&(0x7f0000002680)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000039c0)}}, {{&(0x7f0000003a00)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000006880)=ANY=[@ANYBLOB="1400000000000000000000fa0200000001000000000000001100000000000000000002000100000009000000000000001c009a6df702b1ed5e0000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="ac1414aaac1414aa0000000014000000000000000000000002000000a1000000000000001400000000000000000000000200000080000000000000001400000000000000000000000100000001000080000000001400000000000000000000000200000004000000000000007800000000"], 0x128}}, {{&(0x7f0000004e40)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb89}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x49, 0x0, 0x8, [0x8001, 0x4]}, @timestamp={0x44, 0x8, 0xdf, 0x0, 0x8, [0x4]}, @end, @cipso={0x86, 0x4a, 0xfffffffffffffffe, [{0x5, 0xa, "1641b2ddb38f55e3"}, {0x5, 0x10, "0c97aaecd950584f17460450c5b6"}, {0x5, 0x6, "2676c820"}, {0x1, 0x8, "54b3f1589006"}, {0x0, 0x7, "e235c58d8c"}, {0x1, 0x5, "91eafe"}, {0x5, 0x10, "5f6942717a9d6640a61af0740d78"}]}]}}}], 0xe8}}, {{&(0x7f00000060c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000006400)=[{&(0x7f0000006100)="5edc727afaeb7919bb83e5e517328e2d4e43d9ef905303f0020d8143cd9672d3451a6495c91a4fc201d1a3d712bbc23e69e6ca9deebd7f0532ab077d2797d1e8ba438c67bc648403651fbcde1d2b093fe1e4526bf704b747e5a07532dec147dadc47b30b3074beefcd89e555bdf70114d52201469e3d374613964d0173fe322cee43db313b85ecc511674a1c6cfd35bf4cecfad5676ff69850254c70fc6eea98a525f496c831bfda63391102c6f0206703376186fe82bc69f51ddcbfbe25b9fb09c688421637ad80aa3827d1fd3aab7005db1be6", 0xd4}, {&(0x7f0000006200)="2081cad60d7ace69c29a2e8876050018dab781fd9341f17e8fcc288e634fd1dec4ead782d0683043f6041ad477c0727c054c485ec63551f6863137", 0x3b}, {&(0x7f0000006280)="aa395860bdac4a75902391f7779876727064d1d85900f37a63e478cc5398fe107725933d6d0eca9f35217f625d440eb1e7e41c4b5ed385fc005a0b7c380c19dc20f0ae33942c2891732c7005fe9188f648a370f8430a82626c54acc351b7b8cf700c58229ec96360f5ae5b315e9616d2bb8ae4f6c3792cd3a68bce3f19cb5341b6773ee47314cd7f368124759c7323d6d9f9de224a3cf1e530ebea5bb40f2bcab2c2c21d9368cb1b0c5d55b1", 0xac}, {&(0x7f00000008c0)="500335a8f6f1b3764a682457dbc140f26dff1a4dff50d2dd1b50629d0f46f1d1", 0x20}, {&(0x7f0000006380)="bc5f5b493d9555b0609e512859041f555c7b4d9b83945bfbda8628e3df6ad03380aa8ff658ea6e71af4a40894d4d5dae66167d6ab0aa2e16672ce215511980f054bdf686", 0x44}], 0x5}}], 0xa, 0x20000010)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001a00010003000000fd027f445d8bc0478100000000000000080019004218fd0ef9575909652a617d477a7486f1e090fb44448ec4479ebeb2e0efbd557af6305c48312a2cf5127125feb6fa7cad4f65ac585fafb11f7386e37a39361240f02be2c6ee7d479fd3219ddca0cae514a1f399d0e6db0c808ab8b09a9c21fa0b791e6713dba3bc866e5fa16e038194c946b3eb918cc3643efaaaef7e38bfa060fee8dd1963e8fd157dee557e6eb93bce428ee6532f15dc7e87bf42be3ed75c078215d64cea9455b796a6cd7587111f2ad23a6690e80a5fef14e23b1f7198", @ANYRES32, @ANYBLOB="05001b003a000000"], 0x2c}}, 0x0)
recvfrom$inet(r2, &(0x7f0000000080), 0x0, 0x40010721, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94)
shutdown(r2, 0x1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1342, 0x0)
r8 = socket$inet(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, 0x0, &(0x7f0000000040))
gettid()
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x40000020)
close(0x3)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x140f, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0xc0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000880715af8ff00000000bfa200000000000007020000f8ffff0200000085fcc90015000000181100"/68, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000810a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.446940765s ago: executing program 3 (id=3450):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x2c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ffffff7f000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000021a00008500000082000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.376809107s ago: executing program 0 (id=3451):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003c3142a1561680094ec1dab6249750d8e4e2f0000000000001ada00006b110400000000009500800000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500002a28b1a202f4ee380600000009019078ac1e0101ac1414aa030590781209183f2500000000650000000100007f0000017f00000100"], 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f00000014c0)={@val={0x0, 0x800}, @val={0x2, 0x0, 0x3}, @mpls={[{0x8}], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0xfbc, 0x0, 0x11, 0x3, 0x21, 0x0, @broadcast, @broadcast}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "50726483718ba3e6d08f7571cc59e627d3ed353e879d805784c220746fc2eba11f56fe932b544f53b43a34b265bd5d44fd38791b56b3b8767c382bc52ee2b8fcbbd661f151afd5315d5f502920c297a3916d7e"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x5}}}, {0x8, 0x6558, 0x4, "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"}}}}}, 0xfce)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={r7, 0x7, 0xc}, 0x8)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

1.223916607s ago: executing program 3 (id=3452):
r0 = socket(0x1d, 0x2, 0x6)
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18)
sendmsg$inet6(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="fc8fb7f4a942e353afb35458bdc150c174b56da730802b945e942fa8550a492a64e9da57dfeda449be747e8380c1b2a00af423d4114ccddef5bb5b6c41f63e8f6114453b6401badd08d4a9", 0x4b}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000000200)="3197883dcb7508f7de5627b0c8e478fedc4bb60e2502411b2188d918f7bc28a42de570faa406f50901bb002f964588fb086591c33fdd92c7f1d54e3a3a0bf3b5221955e883e088daf13b32924316229828c2e074499ed4d02f7b3c5f9656b717b307217f9b3b899970fe7fca36db7f462f319b0ea71b64e60f9dfc680f6ce23fb623ae327bbcf615a5efd6f1016b4406e95392a33753a510ec77bf812666deb0daade05288a969be2d871d", 0xab}, {&(0x7f00000003c0)="940ae4cfc6956971d4fb9a2174d122ca7714db234bdca6879c317ee1b3bf78e4556bf733e7efee9edf357f6fe2051d2d14802dcd3221208a1372516ac3cba825b3a9f20428667c7a00a39b23904f16a7593179c6b7ecbe233169caee9a122059e9f01e0b080ea69a18714fb17ddb04b784771d0f53aac1515a85a869b1cf4c9871d40f009ad5ecf7bd37482eaf6dcee7f1d4a0007b0ef3642eb0556fc0ffe9e46110f1e0c80e6f8a29201299085c3aad4ea4d7da87fce89c295a9470f7156b9ce18b8d837f890b1c2efba2ea043d603eaa06ce42ced25755711ae446041cb64b45c385eef86390488ccf8335591e4082b80899", 0xf3}, {&(0x7f0000002880)}], 0x5, &(0x7f0000000740)=[@dstopts={{0x48, 0x29, 0x37, {0x67, 0x5, '\x00', [@hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x1}]}}}], 0x48}, 0x0)

1.142220515s ago: executing program 1 (id=3453):
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0806000108000604"], 0x0)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000009f80)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e20, 0x3, 'sed\x00', 0x29, 0x9, 0x3}, 0x2c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)

913.014552ms ago: executing program 1 (id=3454):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

899.539397ms ago: executing program 1 (id=3455):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x41}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000b00)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

757.088618ms ago: executing program 4 (id=3456):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000009000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000340000000020013"], 0x50}}, 0x0)

518.92329ms ago: executing program 4 (id=3457):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x18})
mmap(&(0x7f000039f000/0x1000)=nil, 0x1000, 0x300000e, 0x11, r1, 0x9cc21000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000010c0)={r2, r3, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x36, &(0x7f00000037c0)={@link_local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x8, 0x28, 0x67, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x6, 0x0, 0x6}}}}}}, 0x0)

514.528211ms ago: executing program 2 (id=3458):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000000)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

427.988345ms ago: executing program 4 (id=3459):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x67, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
socket$can_bcm(0x1d, 0x2, 0x2)

292.548316ms ago: executing program 2 (id=3460):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x63, 0xfffffffb, 0x5}}}}]}, 0x44}}, 0x20040084)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0x8}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041010}, 0x4044000)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1, 0x8}, {}, {0x0, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x24040004)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

275.248098ms ago: executing program 0 (id=3461):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000380)=0x16f16885, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @remote, 0x2c0}, 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f0000000000)=""/127, &(0x7f0000000080)=0x7f)

139.67002ms ago: executing program 4 (id=3462):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
unshare(0x400)
clock_gettime(0x0, &(0x7f0000000040))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0)

106.378513ms ago: executing program 0 (id=3463):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000010c0)={r1, r2, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x11dc0, &(0x7f00000037c0)={@link_local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x8, 0x28, 0x67, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x6, 0x0, 0x6}}}}}}, 0x0)

0s ago: executing program 3 (id=3464):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000db00833a00000000000000000a00000a20000000000a0500000000000000000016000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a0104000000feceb437b8277a810008000b40000000002c0004802800018008000100667764001c0002800800034000000002080002400000000308000140000000060900010073797a30008b24700daab9000000140000001100010000000000000000000000000a0000000000"], 0xc8}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x200, @remote, 0x9}, 0x1c)
r5 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001000)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x1c8, 0x260, 0x98, 0x0, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r6)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000600)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x8880)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc)
sendto$inet6(r4, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
shutdown(r4, 0x1)
sendto(r3, 0x0, 0x0, 0x8000, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="f800000040000701feffffff00000000017c000004004280dc000180d8000600800a4cca0aec2fe2f8539abd65901eb3273142254ae2fffe8b6c7b88e33b1003b2a7593c3b049606846bdb1d1199f5ad53dcd43d90ccca96a525a70a7346a2aeba5f2158606310ec45ffc863410a379bb7f043003677bcdd261587c9e86d5fbceff10141a3457c8f812a783e784a8e948844ffc3827e2bb83ab88709c1b4689eacb29b03f582244b10aef1418eeaa40ce80e773f5bcd84cb0fe1f1a06a4de54dfce51902183314f59c16bb509eb672e2a73019369a4cd782a10e4fc0d92bda637b8921f0000000000004000280"], 0xf8}, 0x1, 0x0, 0x0, 0x40800}, 0xc000)
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'veth0_to_bond\x00', @random="0131013000"})

kernel console output (not intermixed with test programs):

1][T13388]  ? __lock_acquire+0x6b5/0x2cf0
[  275.354994][T13388]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  275.355014][T13388]  __vmalloc_noprof+0xd2/0x120
[  275.355032][T13388]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  275.355054][T13388]  bpf_prog_alloc_no_stats+0x4a/0x4d0
[  275.355081][T13388]  bpf_prog_alloc+0x3c/0x1a0
[  275.355116][T13388]  bpf_prog_load+0x7ba/0x1ae0
[  275.355135][T13388]  ? get_pid_task+0x20/0x1f0
[  275.355172][T13388]  ? __pfx_bpf_prog_load+0x10/0x10
[  275.355193][T13388]  ? __might_fault+0xaf/0x130
[  275.355242][T13388]  ? bpf_lsm_bpf+0x9/0x20
[  275.355264][T13388]  ? security_bpf+0x7e/0x2d0
[  275.355288][T13388]  __sys_bpf+0x570/0x920
[  275.355311][T13388]  ? __pfx___sys_bpf+0x10/0x10
[  275.355354][T13388]  ? rcu_is_watching+0x15/0xb0
[  275.355382][T13388]  __x64_sys_bpf+0x7c/0x90
[  275.355412][T13388]  do_syscall_64+0xe2/0xf80
[  275.355437][T13388]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.355455][T13388]  ? trace_irq_disable+0x37/0x100
[  275.355472][T13388]  ? clear_bhb_loop+0x60/0xb0
[  275.355495][T13388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.355513][T13388] RIP: 0033:0x7f5d6679aeb9
[  275.355530][T13388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  275.355546][T13388] RSP: 002b:00007f5d6771d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  275.355569][T13388] RAX: ffffffffffffffda RBX: 00007f5d66a15fa0 RCX: 00007f5d6679aeb9
[  275.355583][T13388] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[  275.355596][T13388] RBP: 00007f5d6771d090 R08: 0000000000000000 R09: 0000000000000000
[  275.355608][T13388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  275.355619][T13388] R13: 00007f5d66a16038 R14: 00007f5d66a15fa0 R15: 00007ffdbc334e88
[  275.355649][T13388]  </TASK>
[  275.355657][T13388] Mem-Info:
[  275.609047][T13388] active_anon:6067 inactive_anon:0 isolated_anon:0
[  275.609047][T13388]  active_file:3276 inactive_file:40007 isolated_file:0
[  275.609047][T13388]  unevictable:768 dirty:170 writeback:0
[  275.609047][T13388]  slab_reclaimable:11563 slab_unreclaimable:172580
[  275.609047][T13388]  mapped:32646 shmem:1361 pagetables:1316
[  275.609047][T13388]  sec_pagetables:0 bounce:0
[  275.609047][T13388]  kernel_misc_reclaimable:0
[  275.609047][T13388]  free:1244506 free_pcp:14117 free_cma:0
[  275.654717][T13388] Node 0 active_anon:24268kB inactive_anon:0kB active_file:13104kB inactive_file:159828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130584kB dirty:680kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14252kB pagetables:5108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  275.687444][T13388] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  275.719455][T13388] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  275.750891][T13388] lowmem_reserve[]: 0 2494 2495 2495 2495
[  275.756746][T13388] Node 0 DMA32 free:1069468kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24168kB inactive_anon:0kB active_file:13104kB inactive_file:159828kB unevictable:1536kB writepending:680kB zspages:0kB present:3129332kB managed:2553996kB mlocked:0kB bounce:0kB free_pcp:41704kB local_pcp:20776kB free_cma:0kB
[  275.805849][T13388] lowmem_reserve[]: 0 0 1 1 1
[  275.813393][T13388] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  275.843639][T13388] lowmem_reserve[]: 0 0 0 0 0
[  275.899213][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2104'.
[  275.917946][T13409] netlink: 'syz.4.2104': attribute type 30 has an invalid length.
[  275.931126][T13388] Node 1 Normal free:3893304kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15488kB local_pcp:10624kB free_cma:0kB
[  275.972152][T11102] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  275.974886][T13388] lowmem_reserve[]: 0 0 0 0 0
[  275.984417][T11102] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  275.997536][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2104'.
[  276.006973][T13409] netlink: 'syz.4.2104': attribute type 30 has an invalid length.
[  276.017938][T11102] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  276.027163][T13388] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  276.041884][T11102] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  276.043666][T13388] Node 0 DMA32: 2132*4kB (UM) 2130*8kB (UM) 863*16kB (UME) 212*32kB (UME) 328*64kB (UM) 187*128kB (UME) 116*256kB (UM) 89*512kB (UME) 49*1024kB (UME) 25*2048kB (UM) 196*4096kB (M) = 1070544kB
[  276.071271][T13388] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  276.084707][T13388] Node 1 Normal: 176*4kB (UE) 33*8kB (UME) 39*16kB (UME) 74*32kB (UME) 27*64kB (UME) 10*128kB (UME) 7*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3893304kB
[  276.157742][T13388] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  276.187925][T13388] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  276.203758][T13388] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  276.218006][T13419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2109'.
[  276.228477][T13388] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  276.251705][T13388] 44640 total pagecache pages
[  276.256439][T13388] 0 pages in swap cache
[  276.277597][T13388] Free swap  = 124996kB
[  276.290399][T13388] Total swap = 124996kB
[  276.294769][T13388] 2097051 pages RAM
[  276.296042][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2109'.
[  276.303713][T13388] 0 pages HighMem/MovableOnly
[  276.318831][T13388] 426654 pages reserved
[  276.327412][T13388] 0 pages cma reserved
[  276.333437][T13430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2113'.
[  276.489311][T13437] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.615583][T13437] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.706669][T13437] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.824389][T13437] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.015070][T11103] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.027577][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  277.035690][    C1] lec:lec_tx_timeout: lec0
[  277.040375][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  277.082872][T11100] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.109733][T11104] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.133412][T11104] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.628469][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2200'.
[  279.681209][T13636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2201'.
[  279.690886][T13636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2201'.
[  279.703918][T13636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2201'.
[  279.713566][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2201'.
[  279.843624][T11102] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.894470][T11102] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.927730][T11102] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  279.946378][T13643] lo speed is unknown, defaulting to 1000
[  279.960033][T11102] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  280.098343][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2207'.
[  280.156418][T13659] batadv0: mtu less than device minimum
[  280.221022][T13664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'.
[  280.425574][T13675] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.483854][T13663] netlink: 'syz.4.2207': attribute type 3 has an invalid length.
[  280.861091][T13691] syzkaller0: entered promiscuous mode
[  280.883912][T13691] syzkaller0: entered allmulticast mode
[  281.134837][T13710] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2221'.
[  281.144741][T13710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2221'.
[  282.051343][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  282.059426][    C1] lec:lec_tx_timeout: lec0
[  282.064146][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  282.579842][T13722] ..0ªî{X¹¦: left allmulticast mode
[  282.607676][T13722] vxcan1: left promiscuous mode
[  282.612614][T13722] vxcan1: left allmulticast mode
[  282.643781][T13722] vlan2: left promiscuous mode
[  282.677844][T13722] bridge0: left promiscuous mode
[  282.683079][T13722] macsec0: left promiscuous mode
[  282.700196][T13722] ip6tnl3: left promiscuous mode
[  282.705226][T13722] ip6tnl3: left allmulticast mode
[  282.726436][T13722] gretap0: left allmulticast mode
[  282.732109][T13722] geneve2: left promiscuous mode
[  282.762895][T13722] geneve3: left promiscuous mode
[  282.777004][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2226'.
[  282.786905][T13722] geneve4: left promiscuous mode
[  282.798936][T11102] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.807438][T11102] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.817114][T11102] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.881403][T11102] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.363693][T13762] lo speed is unknown, defaulting to 1000
[  283.445012][T13780] netlink: 'syz.1.2241': attribute type 1 has an invalid length.
[  283.454226][T13776] netlink: 'syz.0.2240': attribute type 7 has an invalid length.
[  283.471116][T13776] netlink: 'syz.0.2240': attribute type 5 has an invalid length.
[  283.480327][T13781] erspan1: entered allmulticast mode
[  283.523872][T13780] bond7: entered promiscuous mode
[  283.529205][T13780] bond7: entered allmulticast mode
[  283.534894][T13780] 8021q: adding VLAN 0 to HW filter on device bond7
[  283.942429][T13806] netlink: 'syz.1.2251': attribute type 1 has an invalid length.
[  283.986612][T13806] syzkaller0: entered promiscuous mode
[  283.997657][T13806] syzkaller0: entered allmulticast mode
[  284.108702][T13812] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.461908][T13827] geneve2: entered promiscuous mode
[  284.495587][T11100] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.506048][T11100] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.580894][T13838] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.614381][T11100] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.625325][T11100] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.649059][T13836] __nla_validate_parse: 8 callbacks suppressed
[  284.649079][T13836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2261'.
[  284.735072][T13842] netlink: 644 bytes leftover after parsing attributes in process `syz.2.2263'.
[  286.520264][T13842] bond0: Caught tx_queue_len zero misconfig
[  286.688585][T13865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2267'.
[  286.754779][T13876] sctp: [Deprecated]: syz.3.2269 (pid 13876) Use of int in maxseg socket option.
[  286.754779][T13876] Use struct sctp_assoc_value instead
[  286.967441][T13884] lo speed is unknown, defaulting to 1000
[  286.976855][T13880] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  287.077510][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  287.085659][    C1] lec:lec_tx_timeout: lec0
[  287.090752][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  287.117367][T11101] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.137001][T11101] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.212989][T11101] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.244355][T11101] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.276837][T13902] syzkaller0: entered promiscuous mode
[  287.285840][T13902] syzkaller0: entered allmulticast mode
[  287.460795][T13914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2282'.
[  287.471468][T13914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2282'.
[  287.925085][T13935] syzkaller0: entered promiscuous mode
[  287.942129][T13935] syzkaller0: entered allmulticast mode
[  288.060445][T13944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2295'.
[  288.559571][T13967] syzkaller0: entered promiscuous mode
[  288.566726][T13967] syzkaller0: entered allmulticast mode
[  288.613493][T13969] syzkaller0: entered promiscuous mode
[  288.620220][T13969] syzkaller0: entered allmulticast mode
[  288.726802][T13975] syzkaller0: entered promiscuous mode
[  288.739814][T13975] syzkaller0: entered allmulticast mode
[  288.802238][T13979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2312'.
[  289.077256][T13989] x_tables: ip_tables: ah match: only valid for protocol 51
[  289.103294][T13989] netlink: 'syz.1.2317': attribute type 1 has an invalid length.
[  289.124556][T13989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2317'.
[  289.205041][T14000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2321'.
[  289.418629][T13997] syzkaller0: entered promiscuous mode
[  289.424707][T13997] syzkaller0: entered allmulticast mode
[  289.664612][T13987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2315'.
[  289.685450][ T6071] udevd[6071]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  291.058508][T13987] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  291.275388][T14041] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2332'.
[  291.402672][T14045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2334'.
[  291.428614][T14048] FAULT_INJECTION: forcing a failure.
[  291.428614][T14048] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  291.437771][T14045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2334'.
[  291.484312][T14048] CPU: 1 UID: 0 PID: 14048 Comm: syz.4.2335 Not tainted syzkaller #0 PREEMPT(full) 
[  291.484342][T14048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  291.484354][T14048] Call Trace:
[  291.484363][T14048]  <TASK>
[  291.484371][T14048]  dump_stack_lvl+0xe8/0x150
[  291.484403][T14048]  should_fail_ex+0x412/0x560
[  291.484433][T14048]  _copy_from_iter+0x1d3/0x1670
[  291.484460][T14048]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  291.484488][T14048]  ? __pfx_policy_nodemask+0x10/0x10
[  291.484514][T14048]  ? __pfx__copy_from_iter+0x10/0x10
[  291.484545][T14048]  ? set_page_refcounted+0xa0/0x1e0
[  291.484567][T14048]  ? page_copy_sane+0x4e/0x270
[  291.484594][T14048]  copy_page_from_iter+0xdd/0x170
[  291.484625][T14048]  tun_get_user+0x1d4b/0x3dd0
[  291.484645][T14048]  ? tun_get_user+0x6ff/0x3dd0
[  291.484685][T14048]  ? aa_file_perm+0x440/0x1630
[  291.484710][T14048]  ? __pfx_tun_get_user+0x10/0x10
[  291.484733][T14048]  ? __lock_acquire+0x6b5/0x2cf0
[  291.484776][T14048]  ? ref_tracker_alloc+0x363/0x4d0
[  291.484804][T14048]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  291.484829][T14048]  ? tun_get+0x1c/0x2f0
[  291.484850][T14048]  ? tun_get+0x1c/0x2f0
[  291.484876][T14048]  ? tun_get+0x1c/0x2f0
[  291.484895][T14048]  ? tun_get+0x1c/0x2f0
[  291.484920][T14048]  tun_chr_write_iter+0x113/0x200
[  291.484945][T14048]  vfs_write+0x61d/0xb90
[  291.484982][T14048]  ? __pfx_vfs_write+0x10/0x10
[  291.485021][T14048]  ? __fget_files+0x2a/0x420
[  291.485052][T14048]  ksys_write+0x150/0x270
[  291.485082][T14048]  ? __pfx_ksys_write+0x10/0x10
[  291.485122][T14048]  do_syscall_64+0xe2/0xf80
[  291.485147][T14048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.485166][T14048]  ? trace_irq_disable+0x37/0x100
[  291.485184][T14048]  ? clear_bhb_loop+0x60/0xb0
[  291.485208][T14048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.485227][T14048] RIP: 0033:0x7f7c2295b78e
[  291.485245][T14048] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  291.485261][T14048] RSP: 002b:00007f7c2393bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  291.485291][T14048] RAX: ffffffffffffffda RBX: 00007f7c2393c6c0 RCX: 00007f7c2295b78e
[  291.485305][T14048] RDX: 0000000000000032 RSI: 0000200000000280 RDI: 00000000000000c8
[  291.485318][T14048] RBP: 00007f7c2393c090 R08: 0000000000000000 R09: 0000000000000000
[  291.485330][T14048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.485342][T14048] R13: 00007f7c22c16038 R14: 00007f7c22c15fa0 R15: 00007fff687a4808
[  291.485375][T14048]  </TASK>
[  291.853304][T14046] netlink: 'syz.2.2333': attribute type 10 has an invalid length.
[  291.885794][T14046] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2333'.
[  292.087714][T14064] netlink: 'syz.1.2340': attribute type 1 has an invalid length.
[  292.097587][T14064] netlink: 'syz.1.2340': attribute type 1 has an invalid length.
[  292.107762][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  292.115877][    C1] lec:lec_tx_timeout: lec0
[  292.120615][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  292.321017][T14079] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2341'.
[  292.340044][T14083] sctp: [Deprecated]: syz.1.2344 (pid 14083) Use of int in max_burst socket option deprecated.
[  292.340044][T14083] Use struct sctp_assoc_value instead
[  292.355962][T14081] syzkaller0: entered promiscuous mode
[  292.355988][T14081] syzkaller0: entered allmulticast mode
[  292.462699][T14079] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2341'.
[  292.479357][T14079] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2341'.
[  292.497277][T14093] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  292.598266][T14097] bond0: (slave bond_slave_1): Releasing backup interface
[  293.364338][T14134] syzkaller0: entered promiscuous mode
[  293.397547][T14134] syzkaller0: entered allmulticast mode
[  293.927654][T14160] netlink: 'syz.4.2366': attribute type 2 has an invalid length.
[  294.213387][T14177] netlink: 2220 bytes leftover after parsing attributes in process `syz.1.2374'.
[  294.344989][T14181] syzkaller0: entered promiscuous mode
[  294.360820][T14181] syzkaller0: entered allmulticast mode
[  294.370209][T14185] netlink: 'syz.0.2377': attribute type 2 has an invalid length.
[  294.391512][T14185] netlink: 'syz.0.2377': attribute type 8 has an invalid length.
[  294.409999][T14185] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2377'.
[  295.020302][T14218] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2391'.
[  295.031000][T14218] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2391'.
[  295.440249][T14239] syzkaller0: mtu greater than device maximum
[  295.592383][T14245] netlink: 'syz.4.2403': attribute type 4 has an invalid length.
[  295.594055][T14248] FAULT_INJECTION: forcing a failure.
[  295.594055][T14248] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.646157][T14248] CPU: 1 UID: 0 PID: 14248 Comm: syz.0.2405 Not tainted syzkaller #0 PREEMPT(full) 
[  295.646200][T14248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  295.646212][T14248] Call Trace:
[  295.646220][T14248]  <TASK>
[  295.646229][T14248]  dump_stack_lvl+0xe8/0x150
[  295.646261][T14248]  should_fail_ex+0x412/0x560
[  295.646291][T14248]  _copy_from_user+0x2d/0xb0
[  295.646322][T14248]  kstrtouint_from_user+0xd6/0x180
[  295.646351][T14248]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  295.646394][T14248]  proc_fail_nth_write+0x8e/0x210
[  295.646423][T14248]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  295.646457][T14248]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  295.646487][T14248]  vfs_write+0x29a/0xb90
[  295.646527][T14248]  ? __pfx_vfs_write+0x10/0x10
[  295.646556][T14248]  ? __fget_files+0x2a/0x420
[  295.646583][T14248]  ? __fget_files+0x3a0/0x420
[  295.646603][T14248]  ? __fget_files+0x2a/0x420
[  295.646635][T14248]  ksys_write+0x150/0x270
[  295.646665][T14248]  ? __pfx_ksys_write+0x10/0x10
[  295.646707][T14248]  do_syscall_64+0xe2/0xf80
[  295.646733][T14248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.646751][T14248]  ? trace_irq_disable+0x37/0x100
[  295.646770][T14248]  ? clear_bhb_loop+0x60/0xb0
[  295.646794][T14248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.646813][T14248] RIP: 0033:0x7fb5bc55b78e
[  295.646831][T14248] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  295.646847][T14248] RSP: 002b:00007fb5bd38dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  295.646870][T14248] RAX: ffffffffffffffda RBX: 00007fb5bd38e6c0 RCX: 00007fb5bc55b78e
[  295.646885][T14248] RDX: 0000000000000001 RSI: 00007fb5bd38e0a0 RDI: 0000000000000004
[  295.646897][T14248] RBP: 00007fb5bd38e090 R08: 0000000000000000 R09: 0000000000000000
[  295.646909][T14248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.646921][T14248] R13: 00007fb5bc816038 R14: 00007fb5bc815fa0 R15: 00007ffcd2d88558
[  295.646956][T14248]  </TASK>
[  296.063994][T14260] FAULT_INJECTION: forcing a failure.
[  296.063994][T14260] name failslab, interval 1, probability 0, space 0, times 0
[  296.120762][T14260] CPU: 0 UID: 0 PID: 14260 Comm: syz.2.2411 Not tainted syzkaller #0 PREEMPT(full) 
[  296.120792][T14260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  296.120804][T14260] Call Trace:
[  296.120812][T14260]  <TASK>
[  296.120821][T14260]  dump_stack_lvl+0xe8/0x150
[  296.120852][T14260]  should_fail_ex+0x412/0x560
[  296.120882][T14260]  should_failslab+0xa8/0x100
[  296.120906][T14260]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  296.120934][T14260]  ? __alloc_skb+0x186/0x7d0
[  296.120958][T14260]  ? __alloc_skb+0x1d0/0x7d0
[  296.120978][T14260]  ? __local_bh_enable_ip+0xd0/0x130
[  296.121002][T14260]  __alloc_skb+0x1d0/0x7d0
[  296.121024][T14260]  ? is_bpf_text_address+0x26/0x2b0
[  296.121050][T14260]  alloc_skb_with_frags+0xca/0x890
[  296.121080][T14260]  ? __pfx_xfrm_state_find+0x10/0x10
[  296.121109][T14260]  ? __lock_acquire+0x6b5/0x2cf0
[  296.121140][T14260]  sock_alloc_send_pskb+0x878/0x990
[  296.121189][T14260]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  296.121224][T14260]  ? __lock_acquire+0x6b5/0x2cf0
[  296.121257][T14260]  __ip_append_data+0x2bc5/0x3f30
[  296.121306][T14260]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  296.121336][T14260]  ? ipv4_mtu+0x23/0x650
[  296.121371][T14260]  ? ipv4_mtu+0x23/0x650
[  296.121397][T14260]  ? __pfx___ip_append_data+0x10/0x10
[  296.121423][T14260]  ? ipv4_mtu+0x23/0x650
[  296.121446][T14260]  ? __pfx_ipv4_mtu+0x10/0x10
[  296.121468][T14260]  ? ip_setup_cork+0x57e/0xa50
[  296.121497][T14260]  ip_make_skb+0x22e/0x450
[  296.121540][T14260]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  296.121566][T14260]  ? __pfx_ip_make_skb+0x10/0x10
[  296.121612][T14260]  udp_sendmsg+0x19fb/0x22f0
[  296.121632][T14260]  ? count_memcg_event_mm+0x21/0x260
[  296.121674][T14260]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  296.121704][T14260]  ? __pfx_udp_sendmsg+0x10/0x10
[  296.121772][T14260]  ? sock_rps_record_flow+0x19/0x400
[  296.121808][T14260]  ? inet_sendmsg+0x29c/0x370
[  296.121835][T14260]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  296.121868][T14260]  ____sys_sendmsg+0x894/0xad0
[  296.121893][T14260]  ? irqentry_exit+0x59c/0x620
[  296.121926][T14260]  ? __pfx_____sys_sendmsg+0x10/0x10
[  296.121962][T14260]  ? import_iovec+0x73/0xa0
[  296.121994][T14260]  ___sys_sendmsg+0x2a5/0x360
[  296.122019][T14260]  ? __lock_acquire+0x6b5/0x2cf0
[  296.122050][T14260]  ? __pfx____sys_sendmsg+0x10/0x10
[  296.122082][T14260]  ? kstrtouint+0x6e/0xe0
[  296.122133][T14260]  ? __fget_files+0x2a/0x420
[  296.122153][T14260]  ? __fget_files+0x3a0/0x420
[  296.122194][T14260]  __sys_sendmmsg+0x27c/0x4e0
[  296.122227][T14260]  ? __pfx___sys_sendmmsg+0x10/0x10
[  296.122251][T14260]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  296.122304][T14260]  ? ksys_write+0x242/0x270
[  296.122334][T14260]  ? __pfx_ksys_write+0x10/0x10
[  296.122369][T14260]  __x64_sys_sendmmsg+0xa0/0xc0
[  296.122398][T14260]  do_syscall_64+0xe2/0xf80
[  296.122423][T14260]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.122441][T14260]  ? trace_irq_disable+0x37/0x100
[  296.122459][T14260]  ? clear_bhb_loop+0x60/0xb0
[  296.122483][T14260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.122509][T14260] RIP: 0033:0x7f5d6679aeb9
[  296.122528][T14260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  296.122545][T14260] RSP: 002b:00007f5d6771d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  296.122566][T14260] RAX: ffffffffffffffda RBX: 00007f5d66a15fa0 RCX: 00007f5d6679aeb9
[  296.122581][T14260] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003
[  296.122593][T14260] RBP: 00007f5d6771d090 R08: 0000000000000000 R09: 0000000000000000
[  296.122606][T14260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  296.122617][T14260] R13: 00007f5d66a16038 R14: 00007f5d66a15fa0 R15: 00007ffdbc334e88
[  296.122650][T14260]  </TASK>
[  296.659624][T14268] FAULT_INJECTION: forcing a failure.
[  296.659624][T14268] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  296.684948][T14268] CPU: 0 UID: 0 PID: 14268 Comm: syz.0.2412 Not tainted syzkaller #0 PREEMPT(full) 
[  296.684977][T14268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  296.684989][T14268] Call Trace:
[  296.684998][T14268]  <TASK>
[  296.685006][T14268]  dump_stack_lvl+0xe8/0x150
[  296.685038][T14268]  should_fail_ex+0x412/0x560
[  296.685067][T14268]  _copy_from_user+0x2d/0xb0
[  296.685097][T14268]  kstrtouint_from_user+0xd6/0x180
[  296.685125][T14268]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  296.685169][T14268]  proc_fail_nth_write+0x8e/0x210
[  296.685198][T14268]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  296.685243][T14268]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  296.685271][T14268]  vfs_write+0x29a/0xb90
[  296.685309][T14268]  ? __pfx_vfs_write+0x10/0x10
[  296.685338][T14268]  ? __fget_files+0x2a/0x420
[  296.685364][T14268]  ? __fget_files+0x3a0/0x420
[  296.685381][T14268]  ? __fget_files+0x2a/0x420
[  296.685411][T14268]  ksys_write+0x150/0x270
[  296.685442][T14268]  ? __pfx_ksys_write+0x10/0x10
[  296.685482][T14268]  do_syscall_64+0xe2/0xf80
[  296.685508][T14268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.685525][T14268]  ? trace_irq_disable+0x37/0x100
[  296.685544][T14268]  ? clear_bhb_loop+0x60/0xb0
[  296.685568][T14268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.685587][T14268] RIP: 0033:0x7fb5bc55b78e
[  296.685606][T14268] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  296.685622][T14268] RSP: 002b:00007fb5bd38dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  296.685645][T14268] RAX: ffffffffffffffda RBX: 00007fb5bd38e6c0 RCX: 00007fb5bc55b78e
[  296.685659][T14268] RDX: 0000000000000001 RSI: 00007fb5bd38e0a0 RDI: 0000000000000004
[  296.685671][T14268] RBP: 00007fb5bd38e090 R08: 0000000000000000 R09: 0000000000000000
[  296.685682][T14268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  296.685693][T14268] R13: 00007fb5bc816038 R14: 00007fb5bc815fa0 R15: 00007ffcd2d88558
[  296.685727][T14268]  </TASK>
[  296.899672][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2416'.
[  297.127560][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  297.135716][    C1] lec:lec_tx_timeout: lec0
[  297.140833][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  297.569648][T14301] FAULT_INJECTION: forcing a failure.
[  297.569648][T14301] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  297.603448][T14301] CPU: 1 UID: 0 PID: 14301 Comm: syz.3.2425 Not tainted syzkaller #0 PREEMPT(full) 
[  297.603477][T14301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  297.603489][T14301] Call Trace:
[  297.603498][T14301]  <TASK>
[  297.603507][T14301]  dump_stack_lvl+0xe8/0x150
[  297.603539][T14301]  should_fail_ex+0x412/0x560
[  297.603569][T14301]  _copy_from_user+0x2d/0xb0
[  297.603599][T14301]  kstrtouint_from_user+0xd6/0x180
[  297.603628][T14301]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  297.603672][T14301]  proc_fail_nth_write+0x8e/0x210
[  297.603700][T14301]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  297.603735][T14301]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  297.603764][T14301]  vfs_write+0x29a/0xb90
[  297.603802][T14301]  ? __pfx_vfs_write+0x10/0x10
[  297.603832][T14301]  ? __fget_files+0x2a/0x420
[  297.603859][T14301]  ? __fget_files+0x3a0/0x420
[  297.603877][T14301]  ? __fget_files+0x2a/0x420
[  297.603909][T14301]  ksys_write+0x150/0x270
[  297.603940][T14301]  ? __pfx_ksys_write+0x10/0x10
[  297.603981][T14301]  do_syscall_64+0xe2/0xf80
[  297.604006][T14301]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.604024][T14301]  ? trace_irq_disable+0x37/0x100
[  297.604043][T14301]  ? clear_bhb_loop+0x60/0xb0
[  297.604067][T14301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.604085][T14301] RIP: 0033:0x7fa2a895b78e
[  297.604105][T14301] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  297.604121][T14301] RSP: 002b:00007fa2a98cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  297.604143][T14301] RAX: ffffffffffffffda RBX: 00007fa2a98cf6c0 RCX: 00007fa2a895b78e
[  297.604158][T14301] RDX: 0000000000000001 RSI: 00007fa2a98cf0a0 RDI: 0000000000000004
[  297.604169][T14301] RBP: 00007fa2a98cf090 R08: 0000000000000000 R09: 0000000000000000
[  297.604181][T14301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  297.604193][T14301] R13: 00007fa2a8c16038 R14: 00007fa2a8c15fa0 R15: 00007ffea622e4a8
[  297.604228][T14301]  </TASK>
[  297.839672][T14303] syzkaller0: entered promiscuous mode
[  297.845206][T14303] syzkaller0: entered allmulticast mode
[  297.900452][T14310] netlink: 'syz.1.2429': attribute type 1 has an invalid length.
[  298.084765][T14316] bond8: (slave geneve3): making interface the new active one
[  298.116273][T14316] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  298.134292][T11102] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  298.164373][T11102] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  298.213939][T14308] lo: entered allmulticast mode
[  298.236236][T11096] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  298.253930][T11096] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  298.311025][T14330] lo speed is unknown, defaulting to 1000
[  298.675634][T14347] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  298.754783][T14349] syzkaller0: entered promiscuous mode
[  298.764487][T14349] syzkaller0: entered allmulticast mode
[  298.894584][T14357] FAULT_INJECTION: forcing a failure.
[  298.894584][T14357] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  298.908698][T14357] CPU: 0 UID: 0 PID: 14357 Comm: syz.4.2446 Not tainted syzkaller #0 PREEMPT(full) 
[  298.908727][T14357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  298.908738][T14357] Call Trace:
[  298.908746][T14357]  <TASK>
[  298.908754][T14357]  dump_stack_lvl+0xe8/0x150
[  298.908785][T14357]  should_fail_ex+0x412/0x560
[  298.908815][T14357]  prepare_alloc_pages+0x22a/0x650
[  298.908844][T14357]  __alloc_frozen_pages_noprof+0x12f/0x380
[  298.908868][T14357]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  298.908891][T14357]  ? __pfx_policy_nodemask+0x10/0x10
[  298.908925][T14357]  alloc_pages_mpol+0x232/0x4a0
[  298.908952][T14357]  vma_alloc_folio_noprof+0xea/0x210
[  298.908975][T14357]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  298.909008][T14357]  do_wp_page+0x127b/0x5990
[  298.909043][T14357]  ? ___pte_offset_map+0x29/0x240
[  298.909071][T14357]  ? ___pte_offset_map+0x29/0x240
[  298.909102][T14357]  ? __pfx_do_wp_page+0x10/0x10
[  298.909124][T14357]  ? do_raw_spin_lock+0x12b/0x2f0
[  298.909159][T14357]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  298.909192][T14357]  handle_mm_fault+0x1520/0x32a0
[  298.909234][T14357]  ? handle_mm_fault+0xee/0x32a0
[  298.909268][T14357]  ? __pfx_handle_mm_fault+0x10/0x10
[  298.909309][T14357]  ? __lock_acquire+0x6b5/0x2cf0
[  298.909338][T14357]  ? lock_mm_and_find_vma+0xa7/0x340
[  298.909360][T14357]  do_user_addr_fault+0x75b/0x1360
[  298.909403][T14357]  exc_page_fault+0x6a/0xc0
[  298.909430][T14357]  asm_exc_page_fault+0x26/0x30
[  298.909447][T14357] RIP: 0010:__put_user_4+0xd/0x20
[  298.909470][T14357] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 87 72 03 00 90 90 90 90 90 90 90 90 90 90
[  298.909485][T14357] RSP: 0018:ffffc9000df5fc98 EFLAGS: 00050202
[  298.909503][T14357] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000007ff8
[  298.909515][T14357] RDX: 0000000000000000 RSI: ffffffff8df39461 RDI: ffffffff8c073980
[  298.909527][T14357] RBP: ffffc9000df5feb0 R08: ffffffff821374af R09: ffff888054658340
[  298.909539][T14357] R10: 00000000ffffff97 R11: 0000000000000000 R12: 1ffff92001bebf9c
[  298.909551][T14357] R13: 0000000000040000 R14: 0000200000007fc0 R15: 00000000000003ff
[  298.909571][T14357]  ? __might_fault+0xaf/0x130
[  298.909605][T14357]  __sys_sendmmsg+0x2b0/0x4e0
[  298.909639][T14357]  ? __pfx___sys_sendmmsg+0x10/0x10
[  298.909660][T14357]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  298.909713][T14357]  ? ksys_write+0x242/0x270
[  298.909743][T14357]  ? __pfx_ksys_write+0x10/0x10
[  298.909785][T14357]  __x64_sys_sendmmsg+0xa0/0xc0
[  298.909812][T14357]  do_syscall_64+0xe2/0xf80
[  298.909836][T14357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.909854][T14357]  ? trace_irq_disable+0x37/0x100
[  298.909872][T14357]  ? clear_bhb_loop+0x60/0xb0
[  298.909896][T14357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.909914][T14357] RIP: 0033:0x7f7c2299aeb9
[  298.909932][T14357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.909946][T14357] RSP: 002b:00007f7c2393c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  298.909965][T14357] RAX: ffffffffffffffda RBX: 00007f7c22c15fa0 RCX: 00007f7c2299aeb9
[  298.909978][T14357] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003
[  298.909991][T14357] RBP: 00007f7c2393c090 R08: 0000000000000000 R09: 0000000000000000
[  298.910003][T14357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  298.910014][T14357] R13: 00007f7c22c16038 R14: 00007f7c22c15fa0 R15: 00007fff687a4808
[  298.910048][T14357]  </TASK>
[  299.298128][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2448'.
[  299.324091][T14362] macvtap1: entered promiscuous mode
[  299.329680][T14362] team0: entered promiscuous mode
[  299.334795][T14362] team_slave_0: entered promiscuous mode
[  299.341245][T14362] team_slave_1: entered promiscuous mode
[  299.347282][T14362] macvtap1: entered allmulticast mode
[  299.352772][T14362] team0: entered allmulticast mode
[  299.358083][T14362] team_slave_0: entered allmulticast mode
[  299.363930][T14362] team_slave_1: entered allmulticast mode
[  299.371319][T14362] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  299.413919][T14366] team0 (unregistering): Port device gtp0 removed
[  299.429763][T14367] team0: left allmulticast mode
[  299.434678][T14367] team_slave_0: left allmulticast mode
[  299.442272][T14367] team_slave_1: left allmulticast mode
[  299.448448][T14367] team0: left promiscuous mode
[  299.466032][T14367] team_slave_0: left promiscuous mode
[  299.472936][T14367] team_slave_1: left promiscuous mode
[  299.537989][T14366] vxcan1: entered allmulticast mode
[  299.564295][T14370] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  299.598523][T14377] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  299.640475][T14377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2452'.
[  299.661065][T14374] lo speed is unknown, defaulting to 1000
[  300.008031][T14390] 8021q: adding VLAN 0 to HW filter on device bond4
[  300.520141][T14425] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2468'.
[  300.861573][T14446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2479'.
[  300.940865][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2478'.
[  300.991390][T14454] bond1: entered allmulticast mode
[  300.996587][T14454] vti0: entered allmulticast mode
[  301.006820][T14449] bond1: left allmulticast mode
[  301.017764][T14449] vti0: left allmulticast mode
[  301.199882][T14459] syzkaller0: entered promiscuous mode
[  301.226633][T14459] syzkaller0: entered allmulticast mode
[  301.880905][ T5828] block nbd0: Receive control failed (result -22)
[  302.074733][T14488] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2494'.
[  302.254550][T14493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2496'.
[  302.929289][T14476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2491'.
[  303.125315][T14500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2499'.
[  303.147573][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6010 ms
[  303.148162][T14500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2499'.
[  303.155675][    C1] lec:lec_tx_timeout: lec0
[  303.169879][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  303.348559][T14512] veth0_macvtap: entered allmulticast mode
[  303.373965][T14517] netlink: 'syz.1.2506': attribute type 9 has an invalid length.
[  303.578311][T14529] netlink: 'syz.1.2512': attribute type 2 has an invalid length.
[  303.586316][T14529] netlink: 'syz.1.2512': attribute type 1 has an invalid length.
[  303.665072][T14524] syzkaller0: entered promiscuous mode
[  303.676087][T14524] syzkaller0: entered allmulticast mode
[  304.376933][T14582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2530'.
[  304.401206][T14582] openvswitch: netlink: Flow actions attr not present in new flow.
[  305.614284][T14555] tipc: Resetting bearer <eth:gre0>
[  305.720528][T11103] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.756970][T11103] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.797590][T11103] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.826785][T11103] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.918312][T14604] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2536'.
[  305.938466][T14605] 8021q: VLANs not supported on ipvlan1
[  306.227637][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2544'.
[  306.238841][T14615] syzkaller0: entered promiscuous mode
[  306.244373][T14615] syzkaller0: entered allmulticast mode
[  306.323357][T14626] netlink: 'syz.0.2547': attribute type 7 has an invalid length.
[  306.831709][T14651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2558'.
[  308.544880][T14687] syzkaller0: entered promiscuous mode
[  308.550656][T14687] syzkaller0: entered allmulticast mode
[  308.907492][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  308.915619][    C1] lec:lec_tx_timeout: lec0
[  308.920838][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  309.328220][T14718] netlink: 'syz.1.2584': attribute type 1 has an invalid length.
[  309.341882][T14718] netlink: 'syz.1.2584': attribute type 2 has an invalid length.
[  309.536073][T14724] netlink: 'syz.1.2587': attribute type 2 has an invalid length.
[  309.555451][T14724] netlink: 'syz.1.2587': attribute type 1 has an invalid length.
[  310.678720][T14736] bond5: entered promiscuous mode
[  311.153923][T14775] netlink: 'syz.4.2611': attribute type 10 has an invalid length.
[  311.163471][T14775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  311.177397][T14773] netlink: 'syz.1.2610': attribute type 16 has an invalid length.
[  311.185558][T14775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  311.197826][T14773] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2610'.
[  311.207134][T14775] hsr0: entered promiscuous mode
[  311.227065][T14773] bridge_slave_0: entered allmulticast mode
[  311.472336][T14782] syzkaller0: entered promiscuous mode
[  311.479832][T14782] syzkaller0: entered allmulticast mode
[  313.155292][T14807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  313.402628][T14823] syzkaller0: entered promiscuous mode
[  313.408320][T14823] syzkaller0: entered allmulticast mode
[  313.425599][T14831] syzkaller0: entered promiscuous mode
[  313.433802][T14831] syzkaller0: entered allmulticast mode
[  313.947537][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  313.955717][    C1] lec:lec_tx_timeout: lec0
[  313.960546][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  315.028363][T14837] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2634'.
[  315.220272][T14859] syzkaller0: entered promiscuous mode
[  315.232299][T14859] syzkaller0: entered allmulticast mode
[  316.885120][T14876] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2648'.
[  316.961133][T14899] syzkaller0: entered promiscuous mode
[  316.966745][T14899] syzkaller0: entered allmulticast mode
[  317.112459][T14914] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2661'.
[  317.232615][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  318.967509][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  318.975597][    C1] lec:lec_tx_timeout: lec0
[  318.981138][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  319.145546][T14952] syzkaller0: entered promiscuous mode
[  319.151930][T14952] syzkaller0: entered allmulticast mode
[  320.767947][T14961] ipvlan1: entered allmulticast mode
[  320.773606][T14961] veth0_vlan: entered allmulticast mode
[  320.782243][T14967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2685'.
[  320.985883][T14999] ipip0: entered promiscuous mode
[  320.995632][T14999] ipip0: entered allmulticast mode
[  321.002214][T15002] sch_fq: defrate 0 ignored.
[  321.909648][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  321.919729][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  321.928131][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  321.936678][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  321.944647][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  322.092827][T15021] lo speed is unknown, defaulting to 1000
[  322.546367][T15021] chnl_net:caif_netlink_parms(): no params data found
[  322.746642][T15021] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.754098][T15021] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.762092][T15021] bridge_slave_0: entered allmulticast mode
[  322.770305][T15021] bridge_slave_0: entered promiscuous mode
[  322.779912][T15021] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.787164][T15021] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.795625][T15021] bridge_slave_1: entered allmulticast mode
[  322.804916][T15021] bridge_slave_1: entered promiscuous mode
[  322.865110][T15021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  322.879215][T15021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.946107][T15069] bond6: option xmit_hash_policy: invalid value (9)
[  322.955687][T15069] bond6 (unregistering): Released all slaves
[  322.984949][T15021] team0: Port device team_slave_0 added
[  322.995901][T15021] team0: Port device team_slave_1 added
[  323.041322][T15021] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.048592][T15021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.085728][T15021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.100235][T15021] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.107683][T15021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.133884][T15021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.196508][T15021] hsr_slave_0: entered promiscuous mode
[  323.203993][T15021] hsr_slave_1: entered promiscuous mode
[  323.210843][T15021] debugfs: 'hsr0' already exists in 'hsr'
[  323.216637][T15021] Cannot create hsr debugfs directory
[  323.351302][T15021] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.431567][T15021] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.483704][T15021] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.561313][T15021] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.605985][T15091] vlan2: entered promiscuous mode
[  323.611204][T15091] bond0: entered promiscuous mode
[  323.616367][T15091] bond_slave_0: entered promiscuous mode
[  323.746090][T15021] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  323.761966][T15021] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  323.774497][T15021] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  323.787138][T15021] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  323.914385][T15021] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.963368][T15021] 8021q: adding VLAN 0 to HW filter on device team0
[  323.989373][T11100] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.996576][T11100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.004190][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  324.012275][    C1] lec:lec_tx_timeout: lec0
[  324.017131][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  324.027662][ T5838] Bluetooth: hci5: command tx timeout
[  324.042465][T11096] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.049660][T11096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.341279][T15127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2749'.
[  324.525661][T15021] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.674505][T15021] veth0_vlan: entered promiscuous mode
[  324.749794][T15021] veth1_vlan: entered promiscuous mode
[  324.850934][T15021] veth0_macvtap: entered promiscuous mode
[  324.887185][T15021] veth1_macvtap: entered promiscuous mode
[  324.948528][T15021] batman_adv: batadv0: Interface activated: batadv_slave_0
[  324.979064][T15021] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.044035][T11103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.055161][T11103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.083204][T11103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.114283][T11103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.109539][ T5838] Bluetooth: hci5: command tx timeout
[  326.151586][T11084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.189032][T11084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.282299][T11100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.294040][T11100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.716424][T15223] vlan0: entered promiscuous mode
[  327.860452][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2823'.
[  328.084031][T15303] netlink: 'syz.2.2829': attribute type 1 has an invalid length.
[  328.092172][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2829'.
[  328.189113][ T5838] Bluetooth: hci5: command tx timeout
[  328.848822][T15331] ipvlan1: entered allmulticast mode
[  328.863833][T15331] veth0_vlan: entered allmulticast mode
[  328.936578][T15335] IPv6: NLM_F_CREATE should be specified when creating new route
[  328.993880][T15337] netlink: 'syz.4.2845': attribute type 16 has an invalid length.
[  329.015829][T15337] netlink: 'syz.4.2845': attribute type 17 has an invalid length.
[  329.027616][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  329.035716][    C1] lec:lec_tx_timeout: lec0
[  329.038204][T15337] netlink: 'syz.4.2845': attribute type 27 has an invalid length.
[  329.040676][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  329.202182][T15351] netlink: 'syz.4.2851': attribute type 2 has an invalid length.
[  329.794334][T15385] lo: entered promiscuous mode
[  330.269755][ T5838] Bluetooth: hci5: command tx timeout
[  330.726178][T15439] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2891'.
[  330.737178][T15434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2891'.
[  330.751327][T15434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2891'.
[  330.760868][T15434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2891'.
[  330.775181][T15434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2891'.
[  330.787584][T15434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2891'.
[  330.798121][T15434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2891'.
[  330.807737][T15434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2891'.
[  330.817007][T15434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2891'.
[  330.846472][T15434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2891'.
[  331.129236][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  331.143114][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  331.151464][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  331.160041][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  331.173114][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  331.238946][T15450] lo speed is unknown, defaulting to 1000
[  331.518471][T15450] chnl_net:caif_netlink_parms(): no params data found
[  331.670150][T15450] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.680360][T15450] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.688528][T15450] bridge_slave_0: entered allmulticast mode
[  331.697083][T15450] bridge_slave_0: entered promiscuous mode
[  331.707158][T15450] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.715941][T15450] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.723877][T15450] bridge_slave_1: entered allmulticast mode
[  331.732873][T15450] bridge_slave_1: entered promiscuous mode
[  331.781331][T15450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.801817][T15450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.849186][T15450] team0: Port device team_slave_0 added
[  331.860342][T15450] team0: Port device team_slave_1 added
[  331.911537][T15450] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.919030][T15450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  331.951239][T15450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.966022][T15450] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.982302][T15450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  332.011436][T15450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.126119][T15450] hsr_slave_0: entered promiscuous mode
[  332.152512][T15450] hsr_slave_1: entered promiscuous mode
[  332.177015][T15450] debugfs: 'hsr0' already exists in 'hsr'
[  332.209621][T15450] Cannot create hsr debugfs directory
[  332.695295][T11103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.719471][T11103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.743159][T11103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  332.875723][T15500] geneve2: entered promiscuous mode
[  332.921287][T11103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.949456][T11103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.980258][T11103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  333.090480][T15504] syzkaller0: entered promiscuous mode
[  333.096259][T15504] syzkaller0: entered allmulticast mode
[  333.204840][T11103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.217402][T11103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.230070][ T5838] Bluetooth: hci2: command tx timeout
[  333.236511][T11103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  334.067488][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  334.075822][    C1] lec:lec_tx_timeout: lec0
[  334.080770][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  335.145087][T11103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.158024][T11103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.181518][T11103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  335.214465][T15532] lo: entered promiscuous mode
[  335.244836][T15532] tunl0: entered promiscuous mode
[  335.261104][T15532] gre0: entered promiscuous mode
[  335.298140][T15532] gretap0: entered promiscuous mode
[  335.307591][ T5838] Bluetooth: hci2: command tx timeout
[  335.316524][T15532] erspan0: entered promiscuous mode
[  335.328406][T15532] ip_vti0: entered promiscuous mode
[  335.336688][T15532] ip6_vti0: entered promiscuous mode
[  335.351910][T15532] sit0: entered promiscuous mode
[  335.364910][T15532] ip6tnl0: entered promiscuous mode
[  335.376746][T15532] ip6gre0: entered promiscuous mode
[  335.387323][T15532] syz_tun: entered promiscuous mode
[  335.403252][T15532] ip6gretap0: entered promiscuous mode
[  335.415903][T15532] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.423462][T15532] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.431550][T15532] bridge0: entered promiscuous mode
[  335.441286][T15532] vcan0: entered promiscuous mode
[  335.449696][T15532] bond0: entered promiscuous mode
[  335.454774][T15532] bond_slave_0: entered promiscuous mode
[  335.463197][T15532] bond_slave_1: entered promiscuous mode
[  335.472490][T15532] team0: entered promiscuous mode
[  335.477815][T15532] team_slave_0: entered promiscuous mode
[  335.483800][T15532] team_slave_1: entered promiscuous mode
[  335.493362][T15532] dummy0: entered promiscuous mode
[  335.501715][T15532] nlmon0: entered promiscuous mode
[  335.508736][T15532] caif0: entered promiscuous mode
[  335.514513][T15532] batadv0: entered promiscuous mode
[  335.523594][T15532] vxcan0: entered promiscuous mode
[  335.530754][T15532] vxcan1: entered promiscuous mode
[  335.537293][T15532] veth0: entered promiscuous mode
[  335.546715][T15532] veth1: entered promiscuous mode
[  335.559304][T15532] wg0: entered promiscuous mode
[  335.567039][T15532] wg1: entered promiscuous mode
[  335.574824][T15532] wg2: entered promiscuous mode
[  335.582183][T15532] veth0_to_bridge: entered promiscuous mode
[  335.593644][T15532] veth1_to_bridge: entered promiscuous mode
[  335.605986][T15532] veth0_to_bond: entered promiscuous mode
[  335.615964][T15532] veth1_to_bond: entered promiscuous mode
[  335.625727][T15532] veth0_to_team: entered promiscuous mode
[  335.636760][T15532] veth1_to_team: entered promiscuous mode
[  335.648887][T15532] veth0_to_batadv: entered promiscuous mode
[  335.657215][T15532] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.665476][T15532] batadv_slave_0: entered promiscuous mode
[  335.675786][T15532] veth1_to_batadv: entered promiscuous mode
[  335.684655][T15532] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.693327][T15532] batadv_slave_1: entered promiscuous mode
[  335.704371][T15532] xfrm0: entered promiscuous mode
[  335.712334][T15532] veth0_to_hsr: entered promiscuous mode
[  335.725626][T15532] veth1_to_hsr: entered promiscuous mode
[  335.736845][T15532] hsr0: entered promiscuous mode
[  335.745153][T15532] veth1_virt_wifi: entered promiscuous mode
[  335.754415][T15532] veth0_virt_wifi: entered promiscuous mode
[  335.763079][T15532] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  335.780696][T15532] vlan1: entered promiscuous mode
[  335.787163][T15532] macvlan0: entered promiscuous mode
[  335.796606][T15532] macvlan1: entered promiscuous mode
[  335.805500][T15532] ipvlan0: entered promiscuous mode
[  335.811864][T15532] ipvlan1: entered promiscuous mode
[  335.824011][T15532] macvtap0: entered promiscuous mode
[  335.832444][T15532] macsec0: entered promiscuous mode
[  335.841713][T15532] geneve0: entered promiscuous mode
[  335.850566][T15532] geneve1: entered promiscuous mode
[  335.859772][T15532] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  335.870938][T15532] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  335.881117][T15532] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[  335.892164][T15532] netdevsim netdevsim2 netdevsim3: entered promiscuous mode
[  335.908693][T15532] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode
[  335.927292][T15532] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode
[  335.940307][T15532] vlan2: entered promiscuous mode
[  335.948664][T11102] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.962796][T11102] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.983729][T11102] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.000638][T11102] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.811894][T11103] bond8 (unregistering): (slave geneve3): Releasing active interface
[  337.397629][ T5838] Bluetooth: hci2: command tx timeout
[  338.461770][T11103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  338.471415][T11103] bond_slave_0: left promiscuous mode
[  338.478298][T11103] bond0 (unregistering): Released all slaves
[  338.574764][T11103] bond1 (unregistering): Released all slaves
[  338.682254][T11103] bond2 (unregistering): Released all slaves
[  338.781111][T11103] bond3 (unregistering): (slave batadv1): Releasing active interface
[  338.791575][T11103] bond3 (unregistering): Released all slaves
[  338.893100][T11103] bond4 (unregistering): (slave macvlan3): Releasing backup interface
[  338.902539][T11103] veth0_to_bond: left allmulticast mode
[  338.908662][T11103] veth0_to_bond: left promiscuous mode
[  338.915954][T11103] bond4 (unregistering): Released all slaves
[  339.016890][T11103] team0: Port device bond5 removed
[  339.023481][T11103] bond5 (unregistering): Released all slaves
[  339.087545][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  339.095657][    C1] lec:lec_tx_timeout: lec0
[  339.100329][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  339.141769][T11103] bond6 (unregistering): Released all slaves
[  339.243142][T11103] bond7 (unregistering): Released all slaves
[  339.256447][T11103] bond8 (unregistering): Released all slaves
[  339.476958][ T5838] Bluetooth: hci2: command tx timeout
[  339.576993][T11103] tipc: Disabling bearer <eth:batadv0>
[  339.627406][T11103] tipc: Left network mode
[  339.708177][T11103] IPVS: stopping master sync thread 8184 ...
[  339.720529][T15600] __nla_validate_parse: 26 callbacks suppressed
[  339.720550][T15600] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2951'.
[  339.776086][T15600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2951'.
[  340.200807][T15620] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2957'.
[  340.380112][T15450] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  340.420039][T15626] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2959'.
[  340.438019][T11103] batadv0: left promiscuous mode
[  340.461113][T15629] sock: sock_timestamping_bind_phc: sock not bind to device
[  340.472832][T11103] hsr_slave_0: left promiscuous mode
[  340.488677][T11103] hsr_slave_1: left promiscuous mode
[  340.502640][T11103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  340.521039][T11103] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.544459][T11103] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  340.552875][T11103] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.596759][T11103] veth1_macvtap: left promiscuous mode
[  340.606694][T11103] veth1_vlan: left promiscuous mode
[  340.617304][T11103] veth0_vlan: left promiscuous mode
[  341.068512][T15651] netlink: 'syz.4.2969': attribute type 15 has an invalid length.
[  341.076601][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2969'.
[  341.381321][T11103] team0 (unregistering): Port device team_slave_1 removed
[  341.425377][T11103] team0 (unregistering): Port device team_slave_0 removed
[  341.829665][T15450] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  341.857875][T15450] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  341.901586][T15450] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  342.212639][T15450] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.265946][T15450] 8021q: adding VLAN 0 to HW filter on device team0
[  342.321647][T11101] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.328983][T11101] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.392163][T11101] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.399535][T11101] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.750173][T15696] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2984'.
[  342.796753][T11103] IPVS: stop unused estimator thread 0...
[  343.055068][T15450] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.158501][T15450] veth0_vlan: entered promiscuous mode
[  343.186758][T15450] veth1_vlan: entered promiscuous mode
[  343.277789][T15450] veth0_macvtap: entered promiscuous mode
[  343.295249][T15450] veth1_macvtap: entered promiscuous mode
[  343.384125][T15450] batman_adv: batadv0: Interface activated: batadv_slave_0
[  343.415635][T15450] batman_adv: batadv0: Interface activated: batadv_slave_1
[  343.452336][T11104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.471234][T11104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.504992][T11104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.523978][T11104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.811866][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.843206][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.930370][T11100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.941062][T11100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.107681][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  344.115881][    C1] lec:lec_tx_timeout: lec0
[  344.120653][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  344.485554][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  344.496078][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  344.508372][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  344.528681][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  344.545192][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  344.740230][T15752] lo speed is unknown, defaulting to 1000
[  344.889289][ T5825] team0: Port device syz_tun removed
[  345.466656][T15788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3017'.
[  345.521930][T15793] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3018'.
[  345.589671][T15752] chnl_net:caif_netlink_parms(): no params data found
[  345.789397][T15752] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.796671][T15752] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.804752][T15752] bridge_slave_0: entered allmulticast mode
[  345.813143][T15752] bridge_slave_0: entered promiscuous mode
[  345.823654][T15752] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.831349][T15752] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.839485][T15752] bridge_slave_1: entered allmulticast mode
[  345.848305][T15752] bridge_slave_1: entered promiscuous mode
[  345.902359][T15752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.916702][T15752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.994386][T15752] team0: Port device team_slave_0 added
[  346.008789][T15752] team0: Port device team_slave_1 added
[  346.057415][T15752] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.075335][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  346.111967][T15752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.134899][T15752] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.152125][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  346.190225][T15752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.259326][T15752] hsr_slave_0: entered promiscuous mode
[  346.266299][T15752] hsr_slave_1: entered promiscuous mode
[  346.279038][T15752] debugfs: 'hsr0' already exists in 'hsr'
[  346.287572][T15752] Cannot create hsr debugfs directory
[  346.588434][ T5838] Bluetooth: hci3: command tx timeout
[  346.859410][T15861] xt_hashlimit: size too large, truncated to 1048576
[  346.934237][T15752] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  346.952511][T15752] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  346.964575][T15752] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  346.977208][T15752] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  347.124781][T15752] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.158251][T15752] 8021q: adding VLAN 0 to HW filter on device team0
[  347.179363][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.186767][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.205468][T11084] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.212673][T11084] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.539672][T15752] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.701333][T15752] veth0_vlan: entered promiscuous mode
[  347.747305][T15752] veth1_vlan: entered promiscuous mode
[  347.812692][T15900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3055'.
[  347.866676][T15900] bond3: entered promiscuous mode
[  347.874623][T15900] bond3: entered allmulticast mode
[  347.900827][T15900] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3055'.
[  347.910398][T15752] veth0_macvtap: entered promiscuous mode
[  347.922038][T15752] veth1_macvtap: entered promiscuous mode
[  347.946337][T15752] batman_adv: batadv0: Interface activated: batadv_slave_0
[  347.980899][T15752] batman_adv: batadv0: Interface activated: batadv_slave_1
[  347.989592][T15900] bond3: left promiscuous mode
[  347.994417][T15900] bond3: left allmulticast mode
[  348.001350][T15900] 8021q: adding VLAN 0 to HW filter on device bond3
[  348.054422][T11100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.082939][T11100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.124886][T11100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.144492][T11100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.358212][T15916] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.366072][T15916] syzkaller0: entered promiscuous mode
[  348.372101][T15916] syzkaller0: entered allmulticast mode
[  348.411006][T15916] tipc: Resetting bearer <eth:syzkaller0>
[  348.419491][T11103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.445573][T11103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.447723][T15915] tipc: Resetting bearer <eth:syzkaller0>
[  348.540320][T15915] tipc: Disabling bearer <eth:syzkaller0>
[  348.619427][T11104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.647573][T11104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.668277][ T5838] Bluetooth: hci3: command tx timeout
[  349.127496][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  349.135595][    C1] lec:lec_tx_timeout: lec0
[  349.141012][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  349.591088][T15991] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3093'.
[  349.832359][T15997] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3096'.
[  350.747942][ T5838] Bluetooth: hci3: command tx timeout
[  351.242153][T16081] syzkaller0: entered promiscuous mode
[  351.248363][T16081] syzkaller0: entered allmulticast mode
[  351.639401][T16084] bond4: entered promiscuous mode
[  351.646670][T16087] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3135'.
[  351.762593][T16084] bond4: entered allmulticast mode
[  351.801522][T16086] ip6gretap1: entered promiscuous mode
[  351.812505][T16086] ip6gretap1: entered allmulticast mode
[  351.819109][T16086] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  351.830488][T16087] bond4: left promiscuous mode
[  351.841080][T16087] ip6gretap1: left promiscuous mode
[  351.847008][T16087] bond4: left allmulticast mode
[  351.855230][T16087] ip6gretap1: left allmulticast mode
[  351.862876][T16087] 8021q: adding VLAN 0 to HW filter on device bond4
[  352.005873][T16098] syzkaller0: entered promiscuous mode
[  352.012810][T16098] syzkaller0: entered allmulticast mode
[  352.311401][T16111] syzkaller0: entered promiscuous mode
[  352.316935][T16111] syzkaller0: entered allmulticast mode
[  352.815320][T16132] syzkaller0: entered promiscuous mode
[  352.827963][ T5838] Bluetooth: hci3: command tx timeout
[  352.833823][T16132] syzkaller0: entered allmulticast mode
[  352.920373][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  352.939269][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  352.954077][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  352.968476][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  352.976258][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  353.069209][T16135] lo speed is unknown, defaulting to 1000
[  353.352429][T16147] syzkaller0: entered promiscuous mode
[  353.378182][T16147] syzkaller0: entered allmulticast mode
[  353.432779][T16135] chnl_net:caif_netlink_parms(): no params data found
[  353.604332][T16135] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.611844][T16135] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.619255][T16135] bridge_slave_0: entered allmulticast mode
[  353.627823][T16135] bridge_slave_0: entered promiscuous mode
[  353.637833][T16135] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.645244][T16135] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.652895][T16135] bridge_slave_1: entered allmulticast mode
[  353.662410][T16135] bridge_slave_1: entered promiscuous mode
[  353.698207][T16160] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3163'.
[  353.716004][T16135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  353.730906][T16135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  353.741794][T16160] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3163'.
[  353.789701][T16135] team0: Port device team_slave_0 added
[  353.799236][T16135] team0: Port device team_slave_1 added
[  353.840917][T16135] batman_adv: batadv0: Adding interface: batadv_slave_0
[  353.869813][T16135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  353.907163][T16135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  353.924160][T16135] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.931370][T16135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  353.966260][T16135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.035000][T16135] hsr_slave_0: entered promiscuous mode
[  354.042288][T16135] hsr_slave_1: entered promiscuous mode
[  354.049301][T16135] debugfs: 'hsr0' already exists in 'hsr'
[  354.055452][T16135] Cannot create hsr debugfs directory
[  354.107928][T16174] syzkaller0: entered promiscuous mode
[  354.113598][T16174] syzkaller0: entered allmulticast mode
[  354.330197][T16180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3172'.
[  354.829199][T16199] syzkaller0: entered promiscuous mode
[  354.834723][T16199] syzkaller0: entered allmulticast mode
[  354.987466][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms
[  354.995724][    C1] lec:lec_tx_timeout: lec0
[  355.004149][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  355.032290][T16209] netem: change failed
[  355.061026][T16135] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  355.067646][ T5838] Bluetooth: hci4: command tx timeout
[  355.104609][T16135] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  355.131369][T16135] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  355.233604][T16135] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  355.498769][T16135] 8021q: adding VLAN 0 to HW filter on device bond0
[  355.566662][T16135] 8021q: adding VLAN 0 to HW filter on device team0
[  355.595801][T11103] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.603026][T11103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.646078][T11103] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.653418][T11103] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.696423][T16239] syzkaller0: entered promiscuous mode
[  355.709910][T16239] syzkaller0: entered allmulticast mode
[  356.152818][T16267] lo: left promiscuous mode
[  356.158898][T16267] lo: left allmulticast mode
[  356.168084][T16267] erspan0: left promiscuous mode
[  356.173930][T16267] team0: left promiscuous mode
[  356.183156][T16267] team_slave_0: left promiscuous mode
[  356.190116][T16267] team_slave_1: left promiscuous mode
[  356.195938][T16267] team0: left allmulticast mode
[  356.201432][T16267] team_slave_0: left allmulticast mode
[  356.207025][T16267] team_slave_1: left allmulticast mode
[  356.213566][T16267] wg1: left promiscuous mode
[  356.218814][T16267] wg1: left allmulticast mode
[  356.227077][T16267] hsr0: left promiscuous mode
[  356.239861][T16267] vlan2: left promiscuous mode
[  356.245511][T16267] vlan2: left allmulticast mode
[  356.251199][T16267] geneve1: left allmulticast mode
[  356.257262][T16267] vlan3: left promiscuous mode
[  356.264256][T16267] geneve1: left promiscuous mode
[  356.273760][T16267] bond1: left promiscuous mode
[  356.279460][T16267] vti0: left promiscuous mode
[  356.284947][T16267] bond2: left promiscuous mode
[  356.322202][T16135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  356.401056][T16135] veth0_vlan: entered promiscuous mode
[  356.416477][T16135] veth1_vlan: entered promiscuous mode
[  356.479615][T16135] veth0_macvtap: entered promiscuous mode
[  356.494608][T16135] veth1_macvtap: entered promiscuous mode
[  356.524937][T16135] batman_adv: batadv0: Interface activated: batadv_slave_0
[  356.543389][T16135] batman_adv: batadv0: Interface activated: batadv_slave_1
[  356.561667][T11103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  356.574725][T11103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  356.586430][T11103] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  356.598026][T11103] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.712003][T11103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.735996][T11103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.776839][T11101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.785774][T11101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  357.148296][ T5838] Bluetooth: hci4: command tx timeout
[  357.245220][T16295] syzkaller0: entered promiscuous mode
[  357.270936][T16295] syzkaller0: entered allmulticast mode
[  357.684728][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  357.715692][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  357.732132][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  357.748521][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  357.768113][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  359.231557][ T5828] Bluetooth: hci4: command tx timeout
[  359.684394][T16328] lo speed is unknown, defaulting to 1000
[  359.868256][ T5828] Bluetooth: hci1: command tx timeout
[  359.988040][T16345] lo speed is unknown, defaulting to 1000
[  360.013705][T16360] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3238'.
[  360.023004][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  360.023037][    C1] lec:lec_tx_timeout: lec0
[  360.032747][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  360.373875][T16366] syzkaller0: entered promiscuous mode
[  360.379669][T16366] syzkaller0: entered allmulticast mode
[  361.253768][T16383] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING
[  361.302726][T16383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.320071][ T5828] Bluetooth: hci4: command tx timeout
[  361.433022][T16391] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3250'.
[  361.951885][ T5828] Bluetooth: hci1: command tx timeout
[  362.502819][T16403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3253'.
[  362.657219][T16403] team0 (unregistering): Port device team_slave_0 removed
[  362.709699][T16403] team0 (unregistering): Port device team_slave_1 removed
[  362.740789][T11100] bridge_slave_1: left allmulticast mode
[  362.754824][T11100] bridge_slave_1: left promiscuous mode
[  362.770082][T11100] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.833649][T11100] bridge_slave_0: left allmulticast mode
[  362.842374][T11100] bridge_slave_0: left promiscuous mode
[  362.853616][T11100] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.896077][T11100] veth7: left allmulticast mode
[  362.903264][T11100] veth7: left promiscuous mode
[  362.913657][T11100] bridge1: port 3(veth7) entered disabled state
[  362.932425][T11100] veth0_to_bond: left allmulticast mode
[  362.939181][T11100] veth0_to_bond: left promiscuous mode
[  362.945463][T11100] bridge1: port 2(veth0_to_bond) entered disabled state
[  362.956141][T11100] veth5: left allmulticast mode
[  362.964323][T11100] veth5: left promiscuous mode
[  362.969851][T11100] bridge1: port 1(veth5) entered disabled state
[  363.009622][T16431] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3258'.
[  363.084940][T11100] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface
[  363.323987][T11100] bond1 (unregistering): (slave vti0): Releasing backup interface
[  363.380712][T11100] tipc: Disabling bearer <eth:gre0>
[  363.680162][T11100] bridge0 (unregistering): left promiscuous mode
[  363.862169][T11100] bond0 (unregistering): left promiscuous mode
[  363.870717][T11100] bond_slave_0: left promiscuous mode
[  363.876589][T11100] bond_slave_1: left promiscuous mode
[  363.902069][T11100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  363.915850][T11100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  363.926378][T11100] bond0 (unregistering): Released all slaves
[  364.029130][ T5828] Bluetooth: hci1: command tx timeout
[  364.069269][T11100] bond1 (unregistering): Released all slaves
[  364.187245][T11100] bond2 (unregistering): Released all slaves
[  364.295390][T11100] bond3 (unregistering): Released all slaves
[  364.399174][T11100] bond4 (unregistering): Released all slaves
[  364.582875][T16437] syzkaller0: entered promiscuous mode
[  364.590962][T16437] syzkaller0: entered allmulticast mode
[  364.604618][T11100] !: left promiscuous mode
[  364.633084][T16328] chnl_net:caif_netlink_parms(): no params data found
[  365.037562][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  365.045653][    C1] lec:lec_tx_timeout: lec0
[  365.050312][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  365.209138][T16463] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.3272'.
[  366.107718][ T5828] Bluetooth: hci1: command tx timeout
[  366.349860][T11100] tipc: Left network mode
[  366.368578][T16462] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3272'.
[  366.438461][T11100] IPVS: stopping master sync thread 6173 ...
[  366.558901][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3275'.
[  366.768664][T16328] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.775951][T16328] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.794604][T16328] bridge_slave_0: entered allmulticast mode
[  366.822340][T16328] bridge_slave_0: entered promiscuous mode
[  366.846272][T16328] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.855685][T16328] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.877309][T16328] bridge_slave_1: entered allmulticast mode
[  366.888572][T16328] bridge_slave_1: entered promiscuous mode
[  367.060328][T16328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.094484][T16328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  367.281445][T16328] team0: Port device team_slave_0 added
[  367.355976][T16328] team0: Port device team_slave_1 added
[  367.410052][ T5912] IPVS: starting estimator thread 0...
[  367.486421][T16328] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.497541][T16513] IPVS: using max 24 ests per chain, 57600 per kthread
[  367.509604][T16328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.549800][T16328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  367.573729][T11100] hsr_slave_0: left promiscuous mode
[  367.585085][T11100] hsr_slave_1: left promiscuous mode
[  368.054326][T11100] team0 (unregistering): Port device team_slave_1 removed
[  368.098192][T11100] team0 (unregistering): Port device team_slave_0 removed
[  368.466426][T16516] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  368.476978][T16328] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.485314][T16328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.487599][T16516] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  368.525281][T16516] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  368.534462][T16328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.719578][T16328] hsr_slave_0: entered promiscuous mode
[  368.739039][T16328] hsr_slave_1: entered promiscuous mode
[  368.814009][T16541] FAULT_INJECTION: forcing a failure.
[  368.814009][T16541] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  368.850324][T16541] CPU: 0 UID: 0 PID: 16541 Comm: syz.0.3294 Not tainted syzkaller #0 PREEMPT(full) 
[  368.850354][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  368.850366][T16541] Call Trace:
[  368.850375][T16541]  <TASK>
[  368.850383][T16541]  dump_stack_lvl+0xe8/0x150
[  368.850417][T16541]  should_fail_ex+0x412/0x560
[  368.850447][T16541]  _copy_from_user+0x2d/0xb0
[  368.850477][T16541]  ____sys_sendmsg+0x334/0xad0
[  368.850515][T16541]  ? __pfx_____sys_sendmsg+0x10/0x10
[  368.850560][T16541]  ? import_iovec+0x73/0xa0
[  368.850593][T16541]  ___sys_sendmsg+0x2a5/0x360
[  368.850617][T16541]  ? __lock_acquire+0x6b5/0x2cf0
[  368.850648][T16541]  ? __pfx____sys_sendmsg+0x10/0x10
[  368.850681][T16541]  ? kstrtouint+0x6e/0xe0
[  368.850732][T16541]  ? __fget_files+0x2a/0x420
[  368.850753][T16541]  ? __fget_files+0x3a0/0x420
[  368.850785][T16541]  __sys_sendmmsg+0x27c/0x4e0
[  368.850817][T16541]  ? __pfx___sys_sendmmsg+0x10/0x10
[  368.850841][T16541]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  368.850895][T16541]  ? ksys_write+0x242/0x270
[  368.850926][T16541]  ? __pfx_ksys_write+0x10/0x10
[  368.850967][T16541]  __x64_sys_sendmmsg+0xa0/0xc0
[  368.850996][T16541]  do_syscall_64+0xe2/0xf80
[  368.851021][T16541]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.851039][T16541]  ? trace_irq_disable+0x37/0x100
[  368.851057][T16541]  ? clear_bhb_loop+0x60/0xb0
[  368.851081][T16541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.851099][T16541] RIP: 0033:0x7fbde959aeb9
[  368.851118][T16541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  368.851135][T16541] RSP: 002b:00007fbdea3bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  368.851157][T16541] RAX: ffffffffffffffda RBX: 00007fbde9815fa0 RCX: 00007fbde959aeb9
[  368.851171][T16541] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000003
[  368.851183][T16541] RBP: 00007fbdea3bf090 R08: 0000000000000000 R09: 0000000000000000
[  368.851194][T16541] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001
[  368.851206][T16541] R13: 00007fbde9816038 R14: 00007fbde9815fa0 R15: 00007ffe9b06e758
[  368.851239][T16541]  </TASK>
[  369.492093][T11100] IPVS: stop unused estimator thread 0...
[  369.595351][T16568] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3303'.
[  369.734039][T16573] FAULT_INJECTION: forcing a failure.
[  369.734039][T16573] name failslab, interval 1, probability 0, space 0, times 0
[  369.778797][T16573] CPU: 1 UID: 0 PID: 16573 Comm: syz.3.3304 Not tainted syzkaller #0 PREEMPT(full) 
[  369.778832][T16573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  369.778844][T16573] Call Trace:
[  369.778852][T16573]  <TASK>
[  369.778861][T16573]  dump_stack_lvl+0xe8/0x150
[  369.778893][T16573]  should_fail_ex+0x412/0x560
[  369.778922][T16573]  should_failslab+0xa8/0x100
[  369.778945][T16573]  __kmalloc_noprof+0xde/0x7e0
[  369.778965][T16573]  ? sk_prot_alloc+0xe7/0x210
[  369.778996][T16573]  sk_prot_alloc+0xe7/0x210
[  369.779019][T16573]  ? sk_alloc+0x27/0x390
[  369.779044][T16573]  sk_alloc+0x3a/0x390
[  369.779073][T16573]  bpf_prog_test_run_skb+0x3ed/0x1c90
[  369.779108][T16573]  ? __fget_files+0x2a/0x420
[  369.779129][T16573]  ? __fget_files+0x3a0/0x420
[  369.779149][T16573]  ? __fget_files+0x2a/0x420
[  369.779174][T16573]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  369.779197][T16573]  bpf_prog_test_run+0x2c7/0x340
[  369.779223][T16573]  __sys_bpf+0x5cb/0x920
[  369.779245][T16573]  ? __pfx___sys_bpf+0x10/0x10
[  369.779282][T16573]  ? ksys_write+0x242/0x270
[  369.779312][T16573]  ? __pfx_ksys_write+0x10/0x10
[  369.779347][T16573]  __x64_sys_bpf+0x7c/0x90
[  369.779376][T16573]  do_syscall_64+0xe2/0xf80
[  369.779401][T16573]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.779438][T16573]  ? trace_irq_disable+0x37/0x100
[  369.779539][T16573]  ? clear_bhb_loop+0x60/0xb0
[  369.779566][T16573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.779585][T16573] RIP: 0033:0x7f1b8759aeb9
[  369.779604][T16573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  369.779620][T16573] RSP: 002b:00007f1b88496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  369.779642][T16573] RAX: ffffffffffffffda RBX: 00007f1b87815fa0 RCX: 00007f1b8759aeb9
[  369.779657][T16573] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a
[  369.779669][T16573] RBP: 00007f1b88496090 R08: 0000000000000000 R09: 0000000000000000
[  369.779680][T16573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  369.779691][T16573] R13: 00007f1b87816038 R14: 00007f1b87815fa0 R15: 00007ffc19941588
[  369.779723][T16573]  </TASK>
[  370.057525][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  370.065624][    C1] lec:lec_tx_timeout: lec0
[  370.076348][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  370.293189][T16585] lo speed is unknown, defaulting to 1000
[  370.850563][T16328] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  371.021918][T16328] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  371.222024][T16641] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3318'.
[  371.249662][T16328] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  371.300226][T16328] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  371.650385][T16328] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.675638][T16665] netlink: 'syz.0.3323': attribute type 12 has an invalid length.
[  371.698865][T16665] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3323'.
[  371.730277][T16328] 8021q: adding VLAN 0 to HW filter on device team0
[  371.764455][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.771762][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.824087][T11084] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.831365][T11084] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.419795][T16328] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.545084][T16328] veth0_vlan: entered promiscuous mode
[  373.599599][T16328] veth1_vlan: entered promiscuous mode
[  373.697007][T16328] veth0_macvtap: entered promiscuous mode
[  373.723560][T16328] veth1_macvtap: entered promiscuous mode
[  373.793336][T16328] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.834195][T16328] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.893691][ T2962] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.928926][ T2962] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.988712][ T2962] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.006234][ T2962] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.056015][T16751] lo speed is unknown, defaulting to 1000
[  374.321734][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.336632][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.415675][T11104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.423975][T11104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.665106][T16779] FAULT_INJECTION: forcing a failure.
[  374.665106][T16779] name failslab, interval 1, probability 0, space 0, times 0
[  374.686344][T16781] FAULT_INJECTION: forcing a failure.
[  374.686344][T16781] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  374.697557][T16779] CPU: 0 UID: 0 PID: 16779 Comm: syz.2.3349 Not tainted syzkaller #0 PREEMPT(full) 
[  374.697583][T16779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  374.697594][T16779] Call Trace:
[  374.697601][T16779]  <TASK>
[  374.697608][T16779]  dump_stack_lvl+0xe8/0x150
[  374.697638][T16779]  should_fail_ex+0x412/0x560
[  374.697664][T16779]  should_failslab+0xa8/0x100
[  374.697686][T16779]  kmem_cache_alloc_noprof+0x87/0x6e0
[  374.697711][T16779]  ? sctp_chunkify+0x5a/0x260
[  374.697737][T16779]  sctp_chunkify+0x5a/0x260
[  374.697761][T16779]  _sctp_make_chunk+0x122/0x290
[  374.697785][T16779]  sctp_make_heartbeat+0xc5/0x4c0
[  374.697807][T16779]  ? is_bpf_text_address+0x26/0x2b0
[  374.697831][T16779]  ? __pfx_sctp_make_heartbeat+0x10/0x10
[  374.697857][T16779]  ? is_bpf_text_address+0x26/0x2b0
[  374.697884][T16779]  sctp_sf_do_prm_requestheartbeat+0x32/0x280
[  374.697908][T16779]  sctp_do_sm+0x238/0x5cf0
[  374.697925][T16779]  ? __pfx_sctp_pname+0x10/0x10
[  374.697942][T16779]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  374.697963][T16779]  ? arch_stack_walk+0xfb/0x150
[  374.697993][T16779]  ? __pfx_sctp_do_sm+0x10/0x10
[  374.698009][T16779]  ? __lock_acquire+0x6b5/0x2cf0
[  374.698069][T16779]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  374.698093][T16779]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  374.698114][T16779]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  374.698139][T16779]  ? sctp_v6_addr_to_user+0x217/0x420
[  374.698164][T16779]  sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0
[  374.698194][T16779]  sctp_apply_peer_addr_params+0xdf/0x1880
[  374.698212][T16779]  ? __pfx_sctp_addr_id2transport+0x10/0x10
[  374.698242][T16779]  sctp_setsockopt_peer_addr_params+0x5e5/0x940
[  374.698279][T16779]  sctp_setsockopt+0x752/0x12c0
[  374.698300][T16779]  ? sock_common_setsockopt+0x36/0xc0
[  374.698321][T16779]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  374.698341][T16779]  do_sock_setsockopt+0x17c/0x1b0
[  374.698368][T16779]  __x64_sys_setsockopt+0x13d/0x1b0
[  374.698395][T16779]  do_syscall_64+0xe2/0xf80
[  374.698418][T16779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.698434][T16779]  ? trace_irq_disable+0x37/0x100
[  374.698450][T16779]  ? clear_bhb_loop+0x60/0xb0
[  374.698471][T16779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.698495][T16779] RIP: 0033:0x7f7d6179aeb9
[  374.698512][T16779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  374.698526][T16779] RSP: 002b:00007f7d5f9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  374.698553][T16779] RAX: ffffffffffffffda RBX: 00007f7d61a16090 RCX: 00007f7d6179aeb9
[  374.698565][T16779] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003
[  374.698576][T16779] RBP: 00007f7d5f9d5090 R08: 000000000000009c R09: 0000000000000000
[  374.698587][T16779] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001
[  374.698598][T16779] R13: 00007f7d61a16128 R14: 00007f7d61a16090 R15: 00007ffe1f52fa68
[  374.698628][T16779]  </TASK>
[  374.708320][T16751] netlink: 'syz.0.3344': attribute type 4 has an invalid length.
[  374.750974][T16781] CPU: 1 UID: 0 PID: 16781 Comm: syz.1.3351 Not tainted syzkaller #0 PREEMPT(full) 
[  374.751003][T16781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  374.751015][T16781] Call Trace:
[  374.751023][T16781]  <TASK>
[  374.751031][T16781]  dump_stack_lvl+0xe8/0x150
[  374.751063][T16781]  should_fail_ex+0x412/0x560
[  374.751093][T16781]  _copy_to_user+0x31/0xb0
[  374.751125][T16781]  simple_read_from_buffer+0xe1/0x170
[  374.751152][T16781]  proc_fail_nth_read+0x1bb/0x230
[  374.751183][T16781]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  374.751215][T16781]  ? rw_verify_area+0x2a6/0x4d0
[  374.751241][T16781]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  374.751270][T16781]  vfs_read+0x20c/0xa70
[  374.751295][T16781]  ? fdget_pos+0x246/0x320
[  374.751322][T16781]  ? __pfx___mutex_lock+0x10/0x10
[  374.751348][T16781]  ? __pfx_vfs_read+0x10/0x10
[  374.751373][T16781]  ? __fget_files+0x2a/0x420
[  374.751396][T16781]  ? __fget_files+0x3a0/0x420
[  374.751413][T16781]  ? __fget_files+0x2a/0x420
[  374.751440][T16781]  ksys_read+0x150/0x270
[  374.751466][T16781]  ? __pfx_ksys_read+0x10/0x10
[  374.751506][T16781]  do_syscall_64+0xe2/0xf80
[  374.751527][T16781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.751544][T16781]  ? trace_irq_disable+0x37/0x100
[  374.751560][T16781]  ? clear_bhb_loop+0x60/0xb0
[  374.751580][T16781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.751597][T16781] RIP: 0033:0x7f67df55b78e
[  374.751613][T16781] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  374.751627][T16781] RSP: 002b:00007f67e0437fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  374.751646][T16781] RAX: ffffffffffffffda RBX: 00007f67e04386c0 RCX: 00007f67df55b78e
[  374.751659][T16781] RDX: 000000000000000f RSI: 00007f67e04380a0 RDI: 0000000000000004
[  374.751670][T16781] RBP: 00007f67e0438090 R08: 0000000000000000 R09: 0000000000000000
[  374.751681][T16781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  374.751691][T16781] R13: 00007f67df816038 R14: 00007f67df815fa0 R15: 00007ffd4a213ba8
[  374.751721][T16781]  </TASK>
[  375.087874][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  375.238252][    C1] lec:lec_tx_timeout: lec0
[  375.243813][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  375.609782][T16798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3357'.
[  375.638017][T16797] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3356'.
[  375.846035][T16806] lo speed is unknown, defaulting to 1000
[  376.030898][T16822] FAULT_INJECTION: forcing a failure.
[  376.030898][T16822] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  376.079128][T16822] CPU: 1 UID: 0 PID: 16822 Comm: syz.0.3364 Not tainted syzkaller #0 PREEMPT(full) 
[  376.079155][T16822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  376.079166][T16822] Call Trace:
[  376.079173][T16822]  <TASK>
[  376.079182][T16822]  dump_stack_lvl+0xe8/0x150
[  376.079211][T16822]  should_fail_ex+0x412/0x560
[  376.079240][T16822]  _copy_to_user+0x31/0xb0
[  376.079269][T16822]  bpf_test_finish+0x1db/0x6b0
[  376.079300][T16822]  ? __pfx_bpf_test_finish+0x10/0x10
[  376.079321][T16822]  ? eth_type_trans+0x35e/0x6d0
[  376.079343][T16822]  ? ip_mroute_setsockopt+0x6fe/0xff0
[  376.079399][T16822]  bpf_prog_test_run_skb+0x10c6/0x1c90
[  376.079434][T16822]  ? __fget_files+0x2a/0x420
[  376.079454][T16822]  ? __fget_files+0x3a0/0x420
[  376.079472][T16822]  ? __fget_files+0x2a/0x420
[  376.079498][T16822]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  376.079519][T16822]  bpf_prog_test_run+0x2c7/0x340
[  376.079544][T16822]  __sys_bpf+0x5cb/0x920
[  376.079565][T16822]  ? __pfx___sys_bpf+0x10/0x10
[  376.079599][T16822]  ? ksys_write+0x242/0x270
[  376.079628][T16822]  ? __pfx_ksys_write+0x10/0x10
[  376.079662][T16822]  __x64_sys_bpf+0x7c/0x90
[  376.079690][T16822]  do_syscall_64+0xe2/0xf80
[  376.079715][T16822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.079741][T16822]  ? trace_irq_disable+0x37/0x100
[  376.079759][T16822]  ? clear_bhb_loop+0x60/0xb0
[  376.079783][T16822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.079801][T16822] RIP: 0033:0x7fbde959aeb9
[  376.079818][T16822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  376.079835][T16822] RSP: 002b:00007fbdea3bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  376.079858][T16822] RAX: ffffffffffffffda RBX: 00007fbde9815fa0 RCX: 00007fbde959aeb9
[  376.079871][T16822] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a
[  376.079884][T16822] RBP: 00007fbdea3bf090 R08: 0000000000000000 R09: 0000000000000000
[  376.079896][T16822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  376.079908][T16822] R13: 00007fbde9816038 R14: 00007fbde9815fa0 R15: 00007ffe9b06e758
[  376.079941][T16822]  </TASK>
[  376.581102][T16839] vlan0: entered promiscuous mode
[  377.062078][T16854] FAULT_INJECTION: forcing a failure.
[  377.062078][T16854] name failslab, interval 1, probability 0, space 0, times 0
[  377.084286][T16854] CPU: 0 UID: 0 PID: 16854 Comm: syz.4.3374 Not tainted syzkaller #0 PREEMPT(full) 
[  377.084315][T16854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  377.084326][T16854] Call Trace:
[  377.084334][T16854]  <TASK>
[  377.084343][T16854]  dump_stack_lvl+0xe8/0x150
[  377.084375][T16854]  should_fail_ex+0x412/0x560
[  377.084403][T16854]  should_failslab+0xa8/0x100
[  377.084426][T16854]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  377.084454][T16854]  ? __alloc_skb+0x1d0/0x7d0
[  377.084474][T16854]  ? __local_bh_enable_ip+0xd0/0x130
[  377.084495][T16854]  __alloc_skb+0x1d0/0x7d0
[  377.084523][T16854]  sctp_packet_transmit+0x290/0x2ac0
[  377.084561][T16854]  ? sctp_outq_flush+0xc0c/0x31b0
[  377.084582][T16854]  ? sctp_outq_flush+0xc0c/0x31b0
[  377.084608][T16854]  ? sctp_outq_flush+0xc0c/0x31b0
[  377.084626][T16854]  ? sctp_outq_flush+0xc0c/0x31b0
[  377.084647][T16854]  sctp_outq_flush+0xee8/0x31b0
[  377.084665][T16854]  ? sctp_outq_flush+0xc0c/0x31b0
[  377.084695][T16854]  ? sctp_make_heartbeat+0x3c9/0x4c0
[  377.084728][T16854]  ? __pfx_sctp_make_heartbeat+0x10/0x10
[  377.084756][T16854]  ? __pfx_sctp_outq_flush+0x10/0x10
[  377.084784][T16854]  ? sctp_outq_tail+0x612/0x920
[  377.084804][T16854]  ? sctp_do_8_2_transport_strike+0x43c/0x8d0
[  377.084826][T16854]  ? sctp_outq_uncork+0x4d/0xa0
[  377.084848][T16854]  sctp_do_sm+0x54c7/0x5cf0
[  377.084872][T16854]  ? arch_stack_walk+0xfb/0x150
[  377.084907][T16854]  ? __pfx_sctp_do_sm+0x10/0x10
[  377.084925][T16854]  ? __lock_acquire+0x6b5/0x2cf0
[  377.084995][T16854]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  377.085023][T16854]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  377.085048][T16854]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  377.085078][T16854]  ? sctp_v6_addr_to_user+0x217/0x420
[  377.085106][T16854]  sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0
[  377.085141][T16854]  sctp_apply_peer_addr_params+0xdf/0x1880
[  377.085162][T16854]  ? __pfx_sctp_addr_id2transport+0x10/0x10
[  377.085197][T16854]  sctp_setsockopt_peer_addr_params+0x5e5/0x940
[  377.085240][T16854]  sctp_setsockopt+0x752/0x12c0
[  377.085266][T16854]  ? sock_common_setsockopt+0x36/0xc0
[  377.085287][T16854]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  377.085311][T16854]  do_sock_setsockopt+0x17c/0x1b0
[  377.085338][T16854]  __x64_sys_setsockopt+0x13d/0x1b0
[  377.085366][T16854]  do_syscall_64+0xe2/0xf80
[  377.085389][T16854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.085407][T16854]  ? trace_irq_disable+0x37/0x100
[  377.085424][T16854]  ? clear_bhb_loop+0x60/0xb0
[  377.085447][T16854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.085466][T16854] RIP: 0033:0x7f73edf9aeb9
[  377.085483][T16854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.085500][T16854] RSP: 002b:00007f73eed74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  377.085521][T16854] RAX: ffffffffffffffda RBX: 00007f73ee215fa0 RCX: 00007f73edf9aeb9
[  377.085534][T16854] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003
[  377.085545][T16854] RBP: 00007f73eed74090 R08: 000000000000009c R09: 0000000000000000
[  377.085556][T16854] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001
[  377.085568][T16854] R13: 00007f73ee216038 R14: 00007f73ee215fa0 R15: 00007ffc2e2e93c8
[  377.085602][T16854]  </TASK>
[  377.088098][T16855] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  377.437720][ T5829] IPVS: starting estimator thread 0...
[  377.537571][T16863] IPVS: using max 24 ests per chain, 57600 per kthread
[  378.670080][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  380.907927][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms
[  380.915974][    C1] lec:lec_tx_timeout: lec0
[  380.921868][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  385.947546][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  385.955621][    C1] lec:lec_tx_timeout: lec0
[  385.960747][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  390.967817][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  390.976018][    C1] lec:lec_tx_timeout: lec0
[  390.981159][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  395.987562][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  395.995585][    C1] lec:lec_tx_timeout: lec0
[  396.000655][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  401.007843][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  401.016095][    C1] lec:lec_tx_timeout: lec0
[  401.021135][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  406.027829][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  406.035847][    C1] lec:lec_tx_timeout: lec0
[  406.040835][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  411.047860][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  411.055980][    C1] lec:lec_tx_timeout: lec0
[  411.060973][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  416.067811][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  416.075837][    C1] lec:lec_tx_timeout: lec0
[  416.080849][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  421.087819][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  421.095854][    C1] lec:lec_tx_timeout: lec0
[  421.100815][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  426.107653][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  426.115707][    C1] lec:lec_tx_timeout: lec0
[  426.120518][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  431.127813][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  431.135867][    C1] lec:lec_tx_timeout: lec0
[  431.140817][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  436.907490][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms
[  436.915556][    C1] lec:lec_tx_timeout: lec0
[  436.920647][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  440.110327][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  441.947866][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  441.955924][    C1] lec:lec_tx_timeout: lec0
[  441.961094][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  446.967842][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  446.975880][    C1] lec:lec_tx_timeout: lec0
[  446.980800][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  447.308045][T16881] Bluetooth: hci5: command 0x0406 tx timeout
[  448.418753][T16887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3382'.
[  448.656040][T16895] netlink: 'syz.3.3384': attribute type 2 has an invalid length.
[  448.775833][T16895] netlink: 'syz.3.3384': attribute type 1 has an invalid length.
[  448.892704][T16895] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3384'.
[  449.100473][T16910] FAULT_INJECTION: forcing a failure.
[  449.100473][T16910] name failslab, interval 1, probability 0, space 0, times 0
[  449.177938][T16910] CPU: 1 UID: 0 PID: 16910 Comm: syz.4.3389 Not tainted syzkaller #0 PREEMPT(full) 
[  449.177969][T16910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  449.177981][T16910] Call Trace:
[  449.177989][T16910]  <TASK>
[  449.177998][T16910]  dump_stack_lvl+0xe8/0x150
[  449.178028][T16910]  should_fail_ex+0x412/0x560
[  449.178058][T16910]  should_failslab+0xa8/0x100
[  449.178081][T16910]  __kmalloc_noprof+0xde/0x7e0
[  449.178098][T16910]  ? rcu_is_watching+0x15/0xb0
[  449.178120][T16910]  ? security_sk_alloc+0x52/0x360
[  449.178151][T16910]  security_sk_alloc+0x52/0x360
[  449.178179][T16910]  sk_prot_alloc+0x101/0x210
[  449.178202][T16910]  ? sk_alloc+0x27/0x390
[  449.178227][T16910]  sk_alloc+0x3a/0x390
[  449.178255][T16910]  bpf_prog_test_run_skb+0x3ed/0x1c90
[  449.178288][T16910]  ? __fget_files+0x2a/0x420
[  449.178307][T16910]  ? __fget_files+0x3a0/0x420
[  449.178325][T16910]  ? __fget_files+0x2a/0x420
[  449.178351][T16910]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  449.178373][T16910]  bpf_prog_test_run+0x2c7/0x340
[  449.178399][T16910]  __sys_bpf+0x5cb/0x920
[  449.178421][T16910]  ? __pfx___sys_bpf+0x10/0x10
[  449.178457][T16910]  ? ksys_write+0x242/0x270
[  449.178487][T16910]  ? __pfx_ksys_write+0x10/0x10
[  449.178522][T16910]  __x64_sys_bpf+0x7c/0x90
[  449.178551][T16910]  do_syscall_64+0xe2/0xf80
[  449.178574][T16910]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.178593][T16910]  ? trace_irq_disable+0x37/0x100
[  449.178611][T16910]  ? clear_bhb_loop+0x60/0xb0
[  449.178654][T16910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.178672][T16910] RIP: 0033:0x7f73edf9aeb9
[  449.178701][T16910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  449.178718][T16910] RSP: 002b:00007f73eed74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  449.178740][T16910] RAX: ffffffffffffffda RBX: 00007f73ee215fa0 RCX: 00007f73edf9aeb9
[  449.178754][T16910] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  449.178767][T16910] RBP: 00007f73eed74090 R08: 0000000000000000 R09: 0000000000000000
[  449.178779][T16910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  449.178790][T16910] R13: 00007f73ee216038 R14: 00007f73ee215fa0 R15: 00007ffc2e2e93c8
[  449.178823][T16910]  </TASK>
[  449.711537][T16917] syzkaller0: entered promiscuous mode
[  449.727469][T16917] syzkaller0: entered allmulticast mode
[  449.779537][T16920] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993
[  449.879599][T16925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3395'.
[  449.898476][T16925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3395'.
[  450.004268][T16927] FAULT_INJECTION: forcing a failure.
[  450.004268][T16927] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  450.018242][T16927] CPU: 1 UID: 0 PID: 16927 Comm: syz.3.3396 Not tainted syzkaller #0 PREEMPT(full) 
[  450.018269][T16927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  450.018281][T16927] Call Trace:
[  450.018289][T16927]  <TASK>
[  450.018298][T16927]  dump_stack_lvl+0xe8/0x150
[  450.018329][T16927]  should_fail_ex+0x412/0x560
[  450.018359][T16927]  _copy_from_user+0x2d/0xb0
[  450.018388][T16927]  ___sys_recvmsg+0x175/0x590
[  450.018423][T16927]  ? __pfx____sys_recvmsg+0x10/0x10
[  450.018456][T16927]  ? __fget_files+0x2a/0x420
[  450.018512][T16927]  do_recvmmsg+0x334/0x800
[  450.018549][T16927]  ? __pfx_do_recvmmsg+0x10/0x10
[  450.018589][T16927]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  450.018654][T16927]  __x64_sys_recvmmsg+0x198/0x250
[  450.018685][T16927]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  450.018725][T16927]  do_syscall_64+0xe2/0xf80
[  450.018750][T16927]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.018768][T16927]  ? trace_irq_disable+0x37/0x100
[  450.018787][T16927]  ? clear_bhb_loop+0x60/0xb0
[  450.018811][T16927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.018830][T16927] RIP: 0033:0x7f1b8759aeb9
[  450.018848][T16927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.018865][T16927] RSP: 002b:00007f1b88496028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  450.018887][T16927] RAX: ffffffffffffffda RBX: 00007f1b87815fa0 RCX: 00007f1b8759aeb9
[  450.018901][T16927] RDX: 040000000000026c RSI: 00002000000005c0 RDI: 0000000000000003
[  450.018914][T16927] RBP: 00007f1b88496090 R08: 0000000000000000 R09: 0000000000000000
[  450.018926][T16927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  450.018938][T16927] R13: 00007f1b87816038 R14: 00007f1b87815fa0 R15: 00007ffc19941588
[  450.018980][T16927]  </TASK>
[  450.513083][T16938] netlink: 'syz.3.3399': attribute type 1 has an invalid length.
[  450.575373][T16938] bond1: entered promiscuous mode
[  450.581460][T16938] 8021q: adding VLAN 0 to HW filter on device bond1
[  450.632415][T16944] 8021q: adding VLAN 0 to HW filter on device bond1
[  450.653977][T16944] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  450.679815][T16944] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  450.697202][T16944] bond1: (slave gre1): making interface the new active one
[  450.705343][T16944] gre1: entered promiscuous mode
[  450.713190][T16944] bond1: (slave gre1): Enslaving as an active interface with an up link
[  451.088812][T16954] FAULT_INJECTION: forcing a failure.
[  451.088812][T16954] name failslab, interval 1, probability 0, space 0, times 0
[  451.108818][T16954] CPU: 0 UID: 0 PID: 16954 Comm: syz.3.3407 Not tainted syzkaller #0 PREEMPT(full) 
[  451.108847][T16954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  451.108858][T16954] Call Trace:
[  451.108866][T16954]  <TASK>
[  451.108875][T16954]  dump_stack_lvl+0xe8/0x150
[  451.108907][T16954]  should_fail_ex+0x412/0x560
[  451.108936][T16954]  should_failslab+0xa8/0x100
[  451.108969][T16954]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  451.109001][T16954]  ? __alloc_skb+0x1d0/0x7d0
[  451.109023][T16954]  ? __local_bh_enable_ip+0xd0/0x130
[  451.109047][T16954]  __alloc_skb+0x1d0/0x7d0
[  451.109069][T16954]  ? sctp_outq_flush+0x10bb/0x31b0
[  451.109094][T16954]  _sctp_make_chunk+0x59/0x290
[  451.109124][T16954]  sctp_make_heartbeat_ack+0x3b/0x310
[  451.109155][T16954]  sctp_sf_beat_8_3+0x4eb/0x7b0
[  451.109191][T16954]  sctp_do_sm+0x238/0x5cf0
[  451.109210][T16954]  ? __pfx_sctp_cname+0x10/0x10
[  451.109229][T16954]  ? sctp_do_8_2_transport_strike+0x43c/0x8d0
[  451.109251][T16954]  ? sctp_outq_uncork+0x4d/0xa0
[  451.109273][T16954]  ? sctp_do_sm+0x5571/0x5cf0
[  451.109295][T16954]  ? arch_stack_walk+0xfb/0x150
[  451.109319][T16954]  ? __pfx_sctp_do_sm+0x10/0x10
[  451.109336][T16954]  ? __lock_acquire+0x6b5/0x2cf0
[  451.109409][T16954]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  451.109433][T16954]  ? lockdep_hardirqs_on+0x7a/0x110
[  451.109457][T16954]  ? ktime_get+0x45/0x200
[  451.109476][T16954]  ? seqcount_lockdep_reader_access+0xea/0x100
[  451.109505][T16954]  sctp_assoc_bh_rcv+0x3f2/0x630
[  451.109542][T16954]  sctp_backlog_rcv+0x167/0x380
[  451.109570][T16954]  ? __local_bh_enable_ip+0xd0/0x130
[  451.109592][T16954]  ? __pfx_sctp_backlog_rcv+0x10/0x10
[  451.109619][T16954]  __release_sock+0x297/0x3a0
[  451.109659][T16954]  release_sock+0x5f/0x1f0
[  451.109685][T16954]  sctp_setsockopt+0xb42/0x12c0
[  451.109709][T16954]  ? sock_common_setsockopt+0x36/0xc0
[  451.109730][T16954]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  451.109754][T16954]  do_sock_setsockopt+0x17c/0x1b0
[  451.109786][T16954]  __x64_sys_setsockopt+0x13d/0x1b0
[  451.109823][T16954]  do_syscall_64+0xe2/0xf80
[  451.109848][T16954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.109867][T16954]  ? clear_bhb_loop+0x60/0xb0
[  451.109892][T16954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.109910][T16954] RIP: 0033:0x7f1b8759aeb9
[  451.109928][T16954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  451.109952][T16954] RSP: 002b:00007f1b88496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  451.109975][T16954] RAX: ffffffffffffffda RBX: 00007f1b87815fa0 RCX: 00007f1b8759aeb9
[  451.109989][T16954] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003
[  451.110001][T16954] RBP: 00007f1b88496090 R08: 000000000000009c R09: 0000000000000000
[  451.110013][T16954] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001
[  451.110025][T16954] R13: 00007f1b87816038 R14: 00007f1b87815fa0 R15: 00007ffc19941588
[  451.110060][T16954]  </TASK>
[  451.614463][T16956] syzkaller0: entered promiscuous mode
[  451.642099][T16956] syzkaller0: entered allmulticast mode
[  451.987857][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  451.995939][    C1] lec:lec_tx_timeout: lec0
[  452.001231][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  452.116315][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3415'.
[  452.126716][T16975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3415'.
[  452.148515][T16987] FAULT_INJECTION: forcing a failure.
[  452.148515][T16987] name failslab, interval 1, probability 0, space 0, times 0
[  452.169029][T16975] netlink: 'syz.1.3415': attribute type 13 has an invalid length.
[  452.179383][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3415'.
[  452.188999][T16975] netlink: 'syz.1.3415': attribute type 11 has an invalid length.
[  452.218539][T16987] CPU: 1 UID: 0 PID: 16987 Comm: syz.2.3418 Not tainted syzkaller #0 PREEMPT(full) 
[  452.218567][T16987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  452.218579][T16987] Call Trace:
[  452.218587][T16987]  <TASK>
[  452.218595][T16987]  dump_stack_lvl+0xe8/0x150
[  452.218649][T16987]  should_fail_ex+0x412/0x560
[  452.218677][T16987]  should_failslab+0xa8/0x100
[  452.218701][T16987]  kmem_cache_alloc_noprof+0x87/0x6e0
[  452.218738][T16987]  ? dst_alloc+0x105/0x170
[  452.218770][T16987]  dst_alloc+0x105/0x170
[  452.218792][T16987]  ? ip_check_mc_rcu+0x400/0x680
[  452.218817][T16987]  ip_route_output_key_hash_rcu+0x14d0/0x25d0
[  452.218853][T16987]  ? ip_route_output_key_hash+0xd8/0x2a0
[  452.218878][T16987]  ip_route_output_key_hash+0x18d/0x2a0
[  452.218904][T16987]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  452.218946][T16987]  ip_route_output_flow+0x2a/0x150
[  452.218965][T16987]  ? security_sk_classify_flow+0x6d/0x150
[  452.218995][T16987]  udp_sendmsg+0x154a/0x22f0
[  452.219030][T16987]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  452.219057][T16987]  ? __pfx_udp_sendmsg+0x10/0x10
[  452.219117][T16987]  ? __pfx_aa_sk_perm+0x10/0x10
[  452.219134][T16987]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  452.219161][T16987]  ? sock_rps_record_flow+0x19/0x400
[  452.219189][T16987]  ? inet_sendmsg+0x29c/0x370
[  452.219213][T16987]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  452.219236][T16987]  ____sys_sendmsg+0x894/0xad0
[  452.219265][T16987]  ? __might_fault+0xaf/0x130
[  452.219297][T16987]  ? __pfx_____sys_sendmsg+0x10/0x10
[  452.219330][T16987]  ? import_iovec+0x73/0xa0
[  452.219360][T16987]  ___sys_sendmsg+0x2a5/0x360
[  452.219393][T16987]  ? __pfx____sys_sendmsg+0x10/0x10
[  452.219415][T16987]  ? __lock_acquire+0x6b5/0x2cf0
[  452.219494][T16987]  __sys_sendmmsg+0x27c/0x4e0
[  452.219526][T16987]  ? __pfx___sys_sendmmsg+0x10/0x10
[  452.219547][T16987]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  452.219600][T16987]  ? ksys_write+0x242/0x270
[  452.219629][T16987]  ? __pfx_ksys_write+0x10/0x10
[  452.219664][T16987]  __x64_sys_sendmmsg+0xa0/0xc0
[  452.219692][T16987]  do_syscall_64+0xe2/0xf80
[  452.219723][T16987]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.219741][T16987]  ? trace_irq_disable+0x37/0x100
[  452.219760][T16987]  ? clear_bhb_loop+0x60/0xb0
[  452.219782][T16987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.219801][T16987] RIP: 0033:0x7f7d6179aeb9
[  452.219820][T16987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.219836][T16987] RSP: 002b:00007f7d5f9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  452.219858][T16987] RAX: ffffffffffffffda RBX: 00007f7d61a15fa0 RCX: 00007f7d6179aeb9
[  452.219872][T16987] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003
[  452.219885][T16987] RBP: 00007f7d5f9f6090 R08: 0000000000000000 R09: 0000000000000000
[  452.219897][T16987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  452.219909][T16987] R13: 00007f7d61a16038 R14: 00007f7d61a15fa0 R15: 00007ffe1f52fa68
[  452.219944][T16987]  </TASK>
[  452.220412][T16979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3415'.
[  452.239972][T16990] netlink: 'syz.4.3419': attribute type 1 has an invalid length.
[  452.442911][T16993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3419'.
[  452.596182][T16993] veth1_to_batadv: entered promiscuous mode
[  452.643607][T16993] veth1_to_batadv: entered allmulticast mode
[  452.877339][T17007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3422'.
[  453.599364][T17024] syzkaller0: entered promiscuous mode
[  453.608040][T17024] syzkaller0: entered allmulticast mode
[  453.675734][T17030] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3429'.
[  454.395326][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3434'.
[  454.878119][T17075] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3440'.
[  455.045567][T17081] syzkaller0: entered promiscuous mode
[  455.053471][T17081] syzkaller0: entered allmulticast mode
[  455.149388][T17089] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3446'.
[  455.153304][T17083] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.160026][T17089] netlink: ct family unspecified
[  455.293125][T17083] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.462173][T17103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3448'.
[  455.477681][T17083] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.653184][T17083] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.777280][T17119] sctp: [Deprecated]: syz.2.3449 (pid 17119) Use of int in max_burst socket option deprecated.
[  455.777280][T17119] Use struct sctp_assoc_value instead
[  456.032592][T11100] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.165626][T11084] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.189533][T11084] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.231728][T11084] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.047283][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms
[  457.055502][    C1] lec:lec_tx_timeout: lec0
[  457.074606][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  457.095266][T17163] BUG: Bad page state in process syz.0.3463  pfn:33797
[  457.102323][T17163] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x33797
[  457.112574][T17163] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  457.119762][T17163] raw: 00fff00000000000 dead000000000040 ffff888021695000 0000000000000000
[  457.128520][T17163] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[  457.137131][T17163] page dumped because: page_pool leak
[  457.142570][T17163] page_owner tracks the page as allocated
[  457.148345][T17163] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17163, tgid 17159 (syz.0.3463), ts 457095117456, free_ts 456647649129
[  457.165602][T17163]  post_alloc_hook+0x228/0x280
[  457.170424][T17163]  get_page_from_freelist+0x24dc/0x2580
[  457.176029][T17163]  __alloc_frozen_pages_noprof+0x18d/0x380
[  457.181900][T17163]  alloc_pages_bulk_noprof+0x558/0x700
[  457.187435][T17163]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  457.193740][T17163]  skb_pp_cow_data+0xc21/0x1680
[  457.198689][T17163]  do_xdp_generic+0x76b/0x12e0
[  457.203607][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  457.209437][T17163]  netif_receive_skb+0x1fe/0xbb0
[  457.214416][T17163]  tun_rx_batched+0x1de/0x790
[  457.219192][T17163]  tun_get_user+0x2a78/0x3dd0
[  457.223905][T17163]  tun_chr_write_iter+0x113/0x200
[  457.229029][T17163]  vfs_write+0x61d/0xb90
[  457.233314][T17163]  ksys_write+0x150/0x270
[  457.237733][T17163]  do_syscall_64+0xe2/0xf80
[  457.242276][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.248249][T17163] page last free pid 15 tgid 15 stack trace:
[  457.254254][T17163]  __free_frozen_pages+0xbf8/0xd70
[  457.259463][T17163]  tlb_remove_table_rcu+0x85/0x100
[  457.264620][T17163]  rcu_core+0xc9e/0x1750
[  457.268969][T17163]  handle_softirqs+0x22a/0x7c0
[  457.273765][T17163]  run_ksoftirqd+0x36/0x60
[  457.278278][T17163]  smpboot_thread_fn+0x541/0xa50
[  457.283251][T17163]  kthread+0x726/0x8b0
[  457.287366][T17163]  ret_from_fork+0x51b/0xa40
[  457.292279][T17163]  ret_from_fork_asm+0x1a/0x30
[  457.297084][T17163] Modules linked in:
[  457.301089][T17163] CPU: 0 UID: 0 PID: 17163 Comm: syz.0.3463 Not tainted syzkaller #0 PREEMPT(full) 
[  457.301118][T17163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  457.301130][T17163] Call Trace:
[  457.301139][T17163]  <TASK>
[  457.301148][T17163]  dump_stack_lvl+0xe8/0x150
[  457.301179][T17163]  bad_page+0x17f/0x1c0
[  457.301209][T17163]  __free_frozen_pages+0xd28/0xd70
[  457.301242][T17163]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  457.301291][T17163]  bpf_xdp_adjust_tail+0x1d6/0x220
[  457.301322][T17163]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  457.301341][T17163]  bpf_prog_run_generic_xdp+0x603/0x1490
[  457.301390][T17163]  do_xdp_generic+0xac5/0x12e0
[  457.301420][T17163]  ? __pfx_do_xdp_generic+0x10/0x10
[  457.301476][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  457.301503][T17163]  ? __pfx___up_read+0x10/0x10
[  457.301532][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  457.301581][T17163]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  457.301602][T17163]  ? lockdep_hardirqs_on+0x7a/0x110
[  457.301628][T17163]  ? irqentry_exit+0x59c/0x620
[  457.301652][T17163]  ? trace_irq_disable+0x37/0x100
[  457.301677][T17163]  ? netif_receive_skb+0x102/0xbb0
[  457.301693][T17163]  ? lock_acquire+0x106/0x330
[  457.301718][T17163]  ? netif_receive_skb+0x102/0xbb0
[  457.301744][T17163]  ? rep_movs_alternative+0x4a/0x90
[  457.301761][T17163]  ? netif_receive_skb+0x102/0xbb0
[  457.301780][T17163]  ? netif_receive_skb+0x102/0xbb0
[  457.301801][T17163]  netif_receive_skb+0x1fe/0xbb0
[  457.301827][T17163]  ? __pfx_netif_receive_skb+0x10/0x10
[  457.301846][T17163]  ? __pfx__copy_from_iter+0x10/0x10
[  457.301869][T17163]  ? sock_alloc_send_pskb+0x896/0x990
[  457.301901][T17163]  ? tun_rx_batched+0x185/0x790
[  457.301925][T17163]  tun_rx_batched+0x1de/0x790
[  457.301954][T17163]  ? __pfx_tun_rx_batched+0x10/0x10
[  457.301975][T17163]  ? tun_get_user+0x2669/0x3dd0
[  457.301998][T17163]  ? tun_get_user+0x2669/0x3dd0
[  457.302023][T17163]  ? tun_get_user+0x2354/0x3dd0
[  457.302043][T17163]  ? __local_bh_enable_ip+0xd0/0x130
[  457.302066][T17163]  ? tun_get_user+0x2669/0x3dd0
[  457.302085][T17163]  tun_get_user+0x2a78/0x3dd0
[  457.302120][T17163]  ? aa_file_perm+0x12d/0x1630
[  457.302152][T17163]  ? aa_file_perm+0x440/0x1630
[  457.302175][T17163]  ? __pfx_tun_get_user+0x10/0x10
[  457.302200][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  457.302229][T17163]  ? __pfx_file_ioctl+0x10/0x10
[  457.302264][T17163]  ? ref_tracker_alloc+0x363/0x4d0
[  457.302292][T17163]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  457.302320][T17163]  ? tun_get+0x1c/0x2f0
[  457.302341][T17163]  ? tun_get+0x1c/0x2f0
[  457.302368][T17163]  ? tun_get+0x1c/0x2f0
[  457.302389][T17163]  ? tun_get+0x1c/0x2f0
[  457.302415][T17163]  tun_chr_write_iter+0x113/0x200
[  457.302440][T17163]  vfs_write+0x61d/0xb90
[  457.302478][T17163]  ? __pfx_vfs_write+0x10/0x10
[  457.302517][T17163]  ? __fget_files+0x2a/0x420
[  457.302548][T17163]  ksys_write+0x150/0x270
[  457.302595][T17163]  ? __pfx_ksys_write+0x10/0x10
[  457.302622][T17163]  ? __pfx_kcov_ioctl+0x10/0x10
[  457.302654][T17163]  do_syscall_64+0xe2/0xf80
[  457.302679][T17163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.302698][T17163]  ? trace_irq_disable+0x37/0x100
[  457.302717][T17163]  ? clear_bhb_loop+0x60/0xb0
[  457.302740][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.302757][T17163] RIP: 0033:0x7fbde955b78e
[  457.302776][T17163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  457.302793][T17163] RSP: 002b:00007fbdea39dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  457.302816][T17163] RAX: ffffffffffffffda RBX: 00007fbdea39e6c0 RCX: 00007fbde955b78e
[  457.302829][T17163] RDX: 0000000000011dc0 RSI: 00002000000037c0 RDI: 00000000000000c8
[  457.302842][T17163] RBP: 00007fbde9608c1f R08: 0000000000000000 R09: 0000000000000000
[  457.302854][T17163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  457.302866][T17163] R13: 00007fbde9816128 R14: 00007fbde9816090 R15: 00007ffe9b06e758
[  457.302900][T17163]  </TASK>
[  457.302909][T17163] Disabling lock debugging due to kernel taint
[  457.379253][T17169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3464'.
[  457.380537][T17163] BUG: Bad page state in process syz.0.3463  pfn:34e91
[  457.414030][T17169] openvswitch: netlink: Flow actions attr not present in new flow.
[  457.416716][T17163] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034e91280 pfn:0x34e91
[  457.416744][T17163] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  457.416783][T17163] raw: 00fff00000000000 dead000000000040 ffff888021695000 0000000000000000
[  457.750966][T17163] raw: ffff888034e91280 0000000000000001 00000000ffffffff 0000000000000000
[  457.759582][T17163] page dumped because: page_pool leak
[  457.764972][T17163] page_owner tracks the page as allocated
[  457.770728][T17163] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17163, tgid 17159 (syz.0.3463), ts 457095097172, free_ts 456647661792
[  457.788056][T17163]  post_alloc_hook+0x228/0x280
[  457.792844][T17163]  get_page_from_freelist+0x24dc/0x2580
[  457.798444][T17163]  __alloc_frozen_pages_noprof+0x18d/0x380
[  457.804266][T17163]  alloc_pages_bulk_noprof+0x558/0x700
[  457.809775][T17163]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  457.815958][T17163]  skb_pp_cow_data+0xc21/0x1680
[  457.820845][T17163]  do_xdp_generic+0x76b/0x12e0
[  457.826063][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  457.831847][T17163]  netif_receive_skb+0x1fe/0xbb0
[  457.836809][T17163]  tun_rx_batched+0x1de/0x790
[  457.841569][T17163]  tun_get_user+0x2a78/0x3dd0
[  457.846331][T17163]  tun_chr_write_iter+0x113/0x200
[  457.851516][T17163]  vfs_write+0x61d/0xb90
[  457.855973][T17163]  ksys_write+0x150/0x270
[  457.860381][T17163]  do_syscall_64+0xe2/0xf80
[  457.864920][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.870880][T17163] page last free pid 15 tgid 15 stack trace:
[  457.876891][T17163]  __free_frozen_pages+0xbf8/0xd70
[  457.882078][T17163]  tlb_remove_table_rcu+0x85/0x100
[  457.887216][T17163]  rcu_core+0xc9e/0x1750
[  457.891625][T17163]  handle_softirqs+0x22a/0x7c0
[  457.896407][T17163]  run_ksoftirqd+0x36/0x60
[  457.900968][T17163]  smpboot_thread_fn+0x541/0xa50
[  457.905950][T17163]  kthread+0x726/0x8b0
[  457.910064][T17163]  ret_from_fork+0x51b/0xa40
[  457.914678][T17163]  ret_from_fork_asm+0x1a/0x30
[  457.919507][T17163] Modules linked in:
[  457.923433][T17163] CPU: 0 UID: 0 PID: 17163 Comm: syz.0.3463 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  457.923453][T17163] Tainted: [B]=BAD_PAGE
[  457.923457][T17163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  457.923464][T17163] Call Trace:
[  457.923469][T17163]  <TASK>
[  457.923474][T17163]  dump_stack_lvl+0xe8/0x150
[  457.923492][T17163]  bad_page+0x17f/0x1c0
[  457.923508][T17163]  __free_frozen_pages+0xd28/0xd70
[  457.923522][T17163]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  457.923545][T17163]  bpf_xdp_adjust_tail+0x1d6/0x220
[  457.923561][T17163]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  457.923572][T17163]  bpf_prog_run_generic_xdp+0x603/0x1490
[  457.923596][T17163]  do_xdp_generic+0xac5/0x12e0
[  457.923608][T17163]  ? __pfx_do_xdp_generic+0x10/0x10
[  457.923626][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  457.923639][T17163]  ? __pfx___up_read+0x10/0x10
[  457.923653][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  457.923670][T17163]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  457.923682][T17163]  ? lockdep_hardirqs_on+0x7a/0x110
[  457.923696][T17163]  ? irqentry_exit+0x59c/0x620
[  457.923710][T17163]  ? trace_irq_disable+0x37/0x100
[  457.923723][T17163]  ? netif_receive_skb+0x102/0xbb0
[  457.923733][T17163]  ? lock_acquire+0x106/0x330
[  457.923747][T17163]  ? netif_receive_skb+0x102/0xbb0
[  457.923759][T17163]  ? rep_movs_alternative+0x4a/0x90
[  457.923769][T17163]  ? netif_receive_skb+0x102/0xbb0
[  457.923779][T17163]  ? netif_receive_skb+0x102/0xbb0
[  457.923789][T17163]  netif_receive_skb+0x1fe/0xbb0
[  457.923801][T17163]  ? __pfx_netif_receive_skb+0x10/0x10
[  457.923812][T17163]  ? __pfx__copy_from_iter+0x10/0x10
[  457.923828][T17163]  ? sock_alloc_send_pskb+0x896/0x990
[  457.923846][T17163]  ? tun_rx_batched+0x185/0x790
[  457.923859][T17163]  tun_rx_batched+0x1de/0x790
[  457.923872][T17163]  ? __pfx_tun_rx_batched+0x10/0x10
[  457.923883][T17163]  ? tun_get_user+0x2669/0x3dd0
[  457.923895][T17163]  ? tun_get_user+0x2669/0x3dd0
[  457.923906][T17163]  ? tun_get_user+0x2354/0x3dd0
[  457.923917][T17163]  ? __local_bh_enable_ip+0xd0/0x130
[  457.923928][T17163]  ? tun_get_user+0x2669/0x3dd0
[  457.923939][T17163]  tun_get_user+0x2a78/0x3dd0
[  457.923953][T17163]  ? aa_file_perm+0x12d/0x1630
[  457.923968][T17163]  ? aa_file_perm+0x440/0x1630
[  457.923981][T17163]  ? __pfx_tun_get_user+0x10/0x10
[  457.923993][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  457.924009][T17163]  ? __pfx_file_ioctl+0x10/0x10
[  457.924026][T17163]  ? ref_tracker_alloc+0x363/0x4d0
[  457.924041][T17163]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  457.924054][T17163]  ? tun_get+0x1c/0x2f0
[  457.924065][T17163]  ? tun_get+0x1c/0x2f0
[  457.924076][T17163]  ? tun_get+0x1c/0x2f0
[  457.924086][T17163]  ? tun_get+0x1c/0x2f0
[  457.924097][T17163]  tun_chr_write_iter+0x113/0x200
[  457.924115][T17163]  vfs_write+0x61d/0xb90
[  457.924143][T17163]  ? __pfx_vfs_write+0x10/0x10
[  457.924173][T17163]  ? __fget_files+0x2a/0x420
[  457.924190][T17163]  ksys_write+0x150/0x270
[  457.924206][T17163]  ? __pfx_ksys_write+0x10/0x10
[  457.924221][T17163]  ? __pfx_kcov_ioctl+0x10/0x10
[  457.924234][T17163]  do_syscall_64+0xe2/0xf80
[  457.924248][T17163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.924259][T17163]  ? trace_irq_disable+0x37/0x100
[  457.924269][T17163]  ? clear_bhb_loop+0x60/0xb0
[  457.924282][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.924292][T17163] RIP: 0033:0x7fbde955b78e
[  457.924304][T17163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  457.924313][T17163] RSP: 002b:00007fbdea39dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  457.924327][T17163] RAX: ffffffffffffffda RBX: 00007fbdea39e6c0 RCX: 00007fbde955b78e
[  457.924335][T17163] RDX: 0000000000011dc0 RSI: 00002000000037c0 RDI: 00000000000000c8
[  457.924343][T17163] RBP: 00007fbde9608c1f R08: 0000000000000000 R09: 0000000000000000
[  457.924350][T17163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  457.924357][T17163] R13: 00007fbde9816128 R14: 00007fbde9816090 R15: 00007ffe9b06e758
[  457.924369][T17163]  </TASK>
[  457.924377][T17163] BUG: Bad page state in process syz.0.3463  pfn:6d28a
[  458.328372][T17163] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806d28adc0 pfn:0x6d28a
[  458.338477][T17163] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  458.345650][T17163] raw: 00fff00000000000 dead000000000040 ffff888021695000 0000000000000000
[  458.354298][T17163] raw: ffff88806d28adc0 0000000000000001 00000000ffffffff 0000000000000000
[  458.363122][T17163] page dumped because: page_pool leak
[  458.368523][T17163] page_owner tracks the page as allocated
[  458.374244][T17163] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17163, tgid 17159 (syz.0.3463), ts 457095076998, free_ts 456647684939
[  458.391555][T17163]  post_alloc_hook+0x228/0x280
[  458.396340][T17163]  get_page_from_freelist+0x24dc/0x2580
[  458.401924][T17163]  __alloc_frozen_pages_noprof+0x18d/0x380
[  458.407812][T17163]  alloc_pages_bulk_noprof+0x558/0x700
[  458.413300][T17163]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  458.419413][T17163]  skb_pp_cow_data+0xc21/0x1680
[  458.424289][T17163]  do_xdp_generic+0x76b/0x12e0
[  458.429103][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  458.434939][T17163]  netif_receive_skb+0x1fe/0xbb0
[  458.439901][T17163]  tun_rx_batched+0x1de/0x790
[  458.444595][T17163]  tun_get_user+0x2a78/0x3dd0
[  458.449305][T17163]  tun_chr_write_iter+0x113/0x200
[  458.454349][T17163]  vfs_write+0x61d/0xb90
[  458.458654][T17163]  ksys_write+0x150/0x270
[  458.463028][T17163]  do_syscall_64+0xe2/0xf80
[  458.467608][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.473533][T17163] page last free pid 15 tgid 15 stack trace:
[  458.479538][T17163]  __free_frozen_pages+0xbf8/0xd70
[  458.484665][T17163]  tlb_remove_table_rcu+0x85/0x100
[  458.489826][T17163]  rcu_core+0xc9e/0x1750
[  458.494106][T17163]  handle_softirqs+0x22a/0x7c0
[  458.498911][T17163]  run_ksoftirqd+0x36/0x60
[  458.503360][T17163]  smpboot_thread_fn+0x541/0xa50
[  458.508351][T17163]  kthread+0x726/0x8b0
[  458.512593][T17163]  ret_from_fork+0x51b/0xa40
[  458.517227][T17163]  ret_from_fork_asm+0x1a/0x30
[  458.522044][T17163] Modules linked in:
[  458.525969][T17163] CPU: 0 UID: 0 PID: 17163 Comm: syz.0.3463 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  458.525989][T17163] Tainted: [B]=BAD_PAGE
[  458.525994][T17163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  458.526001][T17163] Call Trace:
[  458.526006][T17163]  <TASK>
[  458.526011][T17163]  dump_stack_lvl+0xe8/0x150
[  458.526029][T17163]  bad_page+0x17f/0x1c0
[  458.526044][T17163]  __free_frozen_pages+0xd28/0xd70
[  458.526057][T17163]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  458.526080][T17163]  bpf_xdp_adjust_tail+0x1d6/0x220
[  458.526096][T17163]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  458.526106][T17163]  bpf_prog_run_generic_xdp+0x603/0x1490
[  458.526124][T17163]  do_xdp_generic+0xac5/0x12e0
[  458.526136][T17163]  ? __pfx_do_xdp_generic+0x10/0x10
[  458.526154][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  458.526167][T17163]  ? __pfx___up_read+0x10/0x10
[  458.526181][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  458.526198][T17163]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  458.526210][T17163]  ? lockdep_hardirqs_on+0x7a/0x110
[  458.526224][T17163]  ? irqentry_exit+0x59c/0x620
[  458.526238][T17163]  ? trace_irq_disable+0x37/0x100
[  458.526250][T17163]  ? netif_receive_skb+0x102/0xbb0
[  458.526260][T17163]  ? lock_acquire+0x106/0x330
[  458.526275][T17163]  ? netif_receive_skb+0x102/0xbb0
[  458.526287][T17163]  ? rep_movs_alternative+0x4a/0x90
[  458.526298][T17163]  ? netif_receive_skb+0x102/0xbb0
[  458.526308][T17163]  ? netif_receive_skb+0x102/0xbb0
[  458.526318][T17163]  netif_receive_skb+0x1fe/0xbb0
[  458.526331][T17163]  ? __pfx_netif_receive_skb+0x10/0x10
[  458.526341][T17163]  ? __pfx__copy_from_iter+0x10/0x10
[  458.526356][T17163]  ? sock_alloc_send_pskb+0x896/0x990
[  458.526376][T17163]  ? tun_rx_batched+0x185/0x790
[  458.526397][T17163]  tun_rx_batched+0x1de/0x790
[  458.526417][T17163]  ? __pfx_tun_rx_batched+0x10/0x10
[  458.526437][T17163]  ? tun_get_user+0x2669/0x3dd0
[  458.526454][T17163]  ? tun_get_user+0x2669/0x3dd0
[  458.526476][T17163]  ? tun_get_user+0x2354/0x3dd0
[  458.526493][T17163]  ? __local_bh_enable_ip+0xd0/0x130
[  458.526512][T17163]  ? tun_get_user+0x2669/0x3dd0
[  458.526531][T17163]  tun_get_user+0x2a78/0x3dd0
[  458.526556][T17163]  ? aa_file_perm+0x12d/0x1630
[  458.526583][T17163]  ? aa_file_perm+0x440/0x1630
[  458.526616][T17163]  ? __pfx_tun_get_user+0x10/0x10
[  458.526637][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  458.526664][T17163]  ? __pfx_file_ioctl+0x10/0x10
[  458.526693][T17163]  ? ref_tracker_alloc+0x363/0x4d0
[  458.526718][T17163]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  458.526739][T17163]  ? tun_get+0x1c/0x2f0
[  458.526757][T17163]  ? tun_get+0x1c/0x2f0
[  458.526776][T17163]  ? tun_get+0x1c/0x2f0
[  458.526793][T17163]  ? tun_get+0x1c/0x2f0
[  458.526814][T17163]  tun_chr_write_iter+0x113/0x200
[  458.526835][T17163]  vfs_write+0x61d/0xb90
[  458.526860][T17163]  ? __pfx_vfs_write+0x10/0x10
[  458.526888][T17163]  ? __fget_files+0x2a/0x420
[  458.526912][T17163]  ksys_write+0x150/0x270
[  458.526940][T17163]  ? __pfx_ksys_write+0x10/0x10
[  458.526976][T17163]  ? __pfx_kcov_ioctl+0x10/0x10
[  458.526999][T17163]  do_syscall_64+0xe2/0xf80
[  458.527024][T17163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.527042][T17163]  ? trace_irq_disable+0x37/0x100
[  458.527059][T17163]  ? clear_bhb_loop+0x60/0xb0
[  458.527079][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.527097][T17163] RIP: 0033:0x7fbde955b78e
[  458.527114][T17163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  458.527132][T17163] RSP: 002b:00007fbdea39dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  458.527153][T17163] RAX: ffffffffffffffda RBX: 00007fbdea39e6c0 RCX: 00007fbde955b78e
[  458.527167][T17163] RDX: 0000000000011dc0 RSI: 00002000000037c0 RDI: 00000000000000c8
[  458.527181][T17163] RBP: 00007fbde9608c1f R08: 0000000000000000 R09: 0000000000000000
[  458.527193][T17163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  458.527205][T17163] R13: 00007fbde9816128 R14: 00007fbde9816090 R15: 00007ffe9b06e758
[  458.527227][T17163]  </TASK>
[  458.527239][T17163] BUG: Bad page state in process syz.0.3463  pfn:786f9
[  458.930703][T17163] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x786f9
[  458.940971][T17163] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  458.948141][T17163] raw: 00fff00000000000 dead000000000040 ffff888021695000 0000000000000000
[  458.956893][T17163] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[  458.965501][T17163] page dumped because: page_pool leak
[  458.970900][T17163] page_owner tracks the page as allocated
[  458.976609][T17163] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17163, tgid 17159 (syz.0.3463), ts 457095056868, free_ts 456647707873
[  458.993949][T17163]  post_alloc_hook+0x228/0x280
[  458.998755][T17163]  get_page_from_freelist+0x24dc/0x2580
[  459.004391][T17163]  __alloc_frozen_pages_noprof+0x18d/0x380
[  459.010246][T17163]  alloc_pages_bulk_noprof+0x558/0x700
[  459.015738][T17163]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  459.021837][T17163]  skb_pp_cow_data+0xc21/0x1680
[  459.026706][T17163]  do_xdp_generic+0x76b/0x12e0
[  459.031496][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  459.037231][T17163]  netif_receive_skb+0x1fe/0xbb0
[  459.042197][T17163]  tun_rx_batched+0x1de/0x790
[  459.046894][T17163]  tun_get_user+0x2a78/0x3dd0
[  459.051598][T17163]  tun_chr_write_iter+0x113/0x200
[  459.056648][T17163]  vfs_write+0x61d/0xb90
[  459.061134][T17163]  ksys_write+0x150/0x270
[  459.065494][T17163]  do_syscall_64+0xe2/0xf80
[  459.070039][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.075946][T17163] page last free pid 15 tgid 15 stack trace:
[  459.081951][T17163]  __free_frozen_pages+0xbf8/0xd70
[  459.087081][T17163]  tlb_remove_table_rcu+0x85/0x100
[  459.092241][T17163]  rcu_core+0xc9e/0x1750
[  459.096503][T17163]  handle_softirqs+0x22a/0x7c0
[  459.101392][T17163]  run_ksoftirqd+0x36/0x60
[  459.105918][T17163]  smpboot_thread_fn+0x541/0xa50
[  459.110895][T17163]  kthread+0x726/0x8b0
[  459.115080][T17163]  ret_from_fork+0x51b/0xa40
[  459.119741][T17163]  ret_from_fork_asm+0x1a/0x30
[  459.124534][T17163] Modules linked in:
[  459.128473][T17163] CPU: 0 UID: 0 PID: 17163 Comm: syz.0.3463 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  459.128503][T17163] Tainted: [B]=BAD_PAGE
[  459.128510][T17163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  459.128520][T17163] Call Trace:
[  459.128528][T17163]  <TASK>
[  459.128536][T17163]  dump_stack_lvl+0xe8/0x150
[  459.128562][T17163]  bad_page+0x17f/0x1c0
[  459.128587][T17163]  __free_frozen_pages+0xd28/0xd70
[  459.128609][T17163]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  459.128660][T17163]  bpf_xdp_adjust_tail+0x1d6/0x220
[  459.128689][T17163]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  459.128709][T17163]  bpf_prog_run_generic_xdp+0x603/0x1490
[  459.128739][T17163]  do_xdp_generic+0xac5/0x12e0
[  459.128763][T17163]  ? __pfx_do_xdp_generic+0x10/0x10
[  459.128793][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  459.128818][T17163]  ? __pfx___up_read+0x10/0x10
[  459.128842][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  459.128871][T17163]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  459.128889][T17163]  ? lockdep_hardirqs_on+0x7a/0x110
[  459.128913][T17163]  ? irqentry_exit+0x59c/0x620
[  459.128937][T17163]  ? trace_irq_disable+0x37/0x100
[  459.128958][T17163]  ? netif_receive_skb+0x102/0xbb0
[  459.128975][T17163]  ? lock_acquire+0x106/0x330
[  459.128998][T17163]  ? netif_receive_skb+0x102/0xbb0
[  459.129019][T17163]  ? rep_movs_alternative+0x4a/0x90
[  459.129037][T17163]  ? netif_receive_skb+0x102/0xbb0
[  459.129055][T17163]  ? netif_receive_skb+0x102/0xbb0
[  459.129074][T17163]  netif_receive_skb+0x1fe/0xbb0
[  459.129095][T17163]  ? __pfx_netif_receive_skb+0x10/0x10
[  459.129114][T17163]  ? __pfx__copy_from_iter+0x10/0x10
[  459.129138][T17163]  ? sock_alloc_send_pskb+0x896/0x990
[  459.129166][T17163]  ? tun_rx_batched+0x185/0x790
[  459.129188][T17163]  tun_rx_batched+0x1de/0x790
[  459.129210][T17163]  ? __pfx_tun_rx_batched+0x10/0x10
[  459.129230][T17163]  ? tun_get_user+0x2669/0x3dd0
[  459.129251][T17163]  ? tun_get_user+0x2669/0x3dd0
[  459.129272][T17163]  ? tun_get_user+0x2354/0x3dd0
[  459.129291][T17163]  ? __local_bh_enable_ip+0xd0/0x130
[  459.129309][T17163]  ? tun_get_user+0x2669/0x3dd0
[  459.129328][T17163]  tun_get_user+0x2a78/0x3dd0
[  459.129352][T17163]  ? aa_file_perm+0x12d/0x1630
[  459.129379][T17163]  ? aa_file_perm+0x440/0x1630
[  459.129403][T17163]  ? __pfx_tun_get_user+0x10/0x10
[  459.129423][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  459.129449][T17163]  ? __pfx_file_ioctl+0x10/0x10
[  459.129480][T17163]  ? ref_tracker_alloc+0x363/0x4d0
[  459.129503][T17163]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  459.129528][T17163]  ? tun_get+0x1c/0x2f0
[  459.129548][T17163]  ? tun_get+0x1c/0x2f0
[  459.129570][T17163]  ? tun_get+0x1c/0x2f0
[  459.129589][T17163]  ? tun_get+0x1c/0x2f0
[  459.129611][T17163]  tun_chr_write_iter+0x113/0x200
[  459.129642][T17163]  vfs_write+0x61d/0xb90
[  459.129671][T17163]  ? __pfx_vfs_write+0x10/0x10
[  459.129698][T17163]  ? __fget_files+0x2a/0x420
[  459.129723][T17163]  ksys_write+0x150/0x270
[  459.129751][T17163]  ? __pfx_ksys_write+0x10/0x10
[  459.129774][T17163]  ? __pfx_kcov_ioctl+0x10/0x10
[  459.129798][T17163]  do_syscall_64+0xe2/0xf80
[  459.129821][T17163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.129840][T17163]  ? trace_irq_disable+0x37/0x100
[  459.129856][T17163]  ? clear_bhb_loop+0x60/0xb0
[  459.129877][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.129896][T17163] RIP: 0033:0x7fbde955b78e
[  459.129914][T17163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  459.129930][T17163] RSP: 002b:00007fbdea39dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  459.129952][T17163] RAX: ffffffffffffffda RBX: 00007fbdea39e6c0 RCX: 00007fbde955b78e
[  459.129967][T17163] RDX: 0000000000011dc0 RSI: 00002000000037c0 RDI: 00000000000000c8
[  459.129980][T17163] RBP: 00007fbde9608c1f R08: 0000000000000000 R09: 0000000000000000
[  459.129992][T17163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  459.130003][T17163] R13: 00007fbde9816128 R14: 00007fbde9816090 R15: 00007ffe9b06e758
[  459.130025][T17163]  </TASK>
[  459.130036][T17163] BUG: Bad page state in process syz.0.3463  pfn:41467
[  459.533322][T17163] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x41467
[  459.542187][T17163] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  459.549353][T17163] raw: 00fff00000000000 dead000000000040 ffff888021695000 0000000000000000
[  459.557991][T17163] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  459.566590][T17163] page dumped because: page_pool leak
[  459.572079][T17163] page_owner tracks the page as allocated
[  459.577878][T17163] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17163, tgid 17159 (syz.0.3463), ts 457095036531, free_ts 456647730358
[  459.595204][T17163]  post_alloc_hook+0x228/0x280
[  459.600010][T17163]  get_page_from_freelist+0x24dc/0x2580
[  459.605630][T17163]  __alloc_frozen_pages_noprof+0x18d/0x380
[  459.611465][T17163]  alloc_pages_bulk_noprof+0x558/0x700
[  459.616944][T17163]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  459.623038][T17163]  skb_pp_cow_data+0xc21/0x1680
[  459.627920][T17163]  do_xdp_generic+0x76b/0x12e0
[  459.632678][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  459.638682][T17163]  netif_receive_skb+0x1fe/0xbb0
[  459.643632][T17163]  tun_rx_batched+0x1de/0x790
[  459.648451][T17163]  tun_get_user+0x2a78/0x3dd0
[  459.653236][T17163]  tun_chr_write_iter+0x113/0x200
[  459.658321][T17163]  vfs_write+0x61d/0xb90
[  459.662588][T17163]  ksys_write+0x150/0x270
[  459.666913][T17163]  do_syscall_64+0xe2/0xf80
[  459.671445][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.677361][T17163] page last free pid 15 tgid 15 stack trace:
[  459.683385][T17163]  __free_frozen_pages+0xbf8/0xd70
[  459.688636][T17163]  tlb_remove_table_rcu+0x85/0x100
[  459.693764][T17163]  rcu_core+0xc9e/0x1750
[  459.698038][T17163]  handle_softirqs+0x22a/0x7c0
[  459.702820][T17163]  run_ksoftirqd+0x36/0x60
[  459.707229][T17163]  smpboot_thread_fn+0x541/0xa50
[  459.712198][T17163]  kthread+0x726/0x8b0
[  459.716288][T17163]  ret_from_fork+0x51b/0xa40
[  459.720910][T17163]  ret_from_fork_asm+0x1a/0x30
[  459.725696][T17163] Modules linked in:
[  459.729632][T17163] CPU: 0 UID: 0 PID: 17163 Comm: syz.0.3463 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  459.729661][T17163] Tainted: [B]=BAD_PAGE
[  459.729668][T17163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  459.729678][T17163] Call Trace:
[  459.729686][T17163]  <TASK>
[  459.729694][T17163]  dump_stack_lvl+0xe8/0x150
[  459.729720][T17163]  bad_page+0x17f/0x1c0
[  459.729745][T17163]  __free_frozen_pages+0xd28/0xd70
[  459.729767][T17163]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  459.729803][T17163]  bpf_xdp_adjust_tail+0x1d6/0x220
[  459.729827][T17163]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  459.729847][T17163]  bpf_prog_run_generic_xdp+0x603/0x1490
[  459.729879][T17163]  do_xdp_generic+0xac5/0x12e0
[  459.729904][T17163]  ? __pfx_do_xdp_generic+0x10/0x10
[  459.729936][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  459.729959][T17163]  ? __pfx___up_read+0x10/0x10
[  459.729983][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  459.730012][T17163]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  459.730032][T17163]  ? lockdep_hardirqs_on+0x7a/0x110
[  459.730053][T17163]  ? irqentry_exit+0x59c/0x620
[  459.730076][T17163]  ? trace_irq_disable+0x37/0x100
[  459.730098][T17163]  ? netif_receive_skb+0x102/0xbb0
[  459.730116][T17163]  ? lock_acquire+0x106/0x330
[  459.730139][T17163]  ? netif_receive_skb+0x102/0xbb0
[  459.730160][T17163]  ? rep_movs_alternative+0x4a/0x90
[  459.730178][T17163]  ? netif_receive_skb+0x102/0xbb0
[  459.730195][T17163]  ? netif_receive_skb+0x102/0xbb0
[  459.730214][T17163]  netif_receive_skb+0x1fe/0xbb0
[  459.730235][T17163]  ? __pfx_netif_receive_skb+0x10/0x10
[  459.730255][T17163]  ? __pfx__copy_from_iter+0x10/0x10
[  459.730278][T17163]  ? sock_alloc_send_pskb+0x896/0x990
[  459.730305][T17163]  ? tun_rx_batched+0x185/0x790
[  459.730327][T17163]  tun_rx_batched+0x1de/0x790
[  459.730349][T17163]  ? __pfx_tun_rx_batched+0x10/0x10
[  459.730368][T17163]  ? tun_get_user+0x2669/0x3dd0
[  459.730387][T17163]  ? tun_get_user+0x2669/0x3dd0
[  459.730406][T17163]  ? tun_get_user+0x2354/0x3dd0
[  459.730426][T17163]  ? __local_bh_enable_ip+0xd0/0x130
[  459.730444][T17163]  ? tun_get_user+0x2669/0x3dd0
[  459.730462][T17163]  tun_get_user+0x2a78/0x3dd0
[  459.730487][T17163]  ? aa_file_perm+0x12d/0x1630
[  459.730513][T17163]  ? aa_file_perm+0x440/0x1630
[  459.730535][T17163]  ? __pfx_tun_get_user+0x10/0x10
[  459.730565][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  459.730592][T17163]  ? __pfx_file_ioctl+0x10/0x10
[  459.730620][T17163]  ? ref_tracker_alloc+0x363/0x4d0
[  459.730646][T17163]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  459.730669][T17163]  ? tun_get+0x1c/0x2f0
[  459.730689][T17163]  ? tun_get+0x1c/0x2f0
[  459.730712][T17163]  ? tun_get+0x1c/0x2f0
[  459.730731][T17163]  ? tun_get+0x1c/0x2f0
[  459.730752][T17163]  tun_chr_write_iter+0x113/0x200
[  459.730774][T17163]  vfs_write+0x61d/0xb90
[  459.730801][T17163]  ? __pfx_vfs_write+0x10/0x10
[  459.730831][T17163]  ? __fget_files+0x2a/0x420
[  459.730855][T17163]  ksys_write+0x150/0x270
[  459.730882][T17163]  ? __pfx_ksys_write+0x10/0x10
[  459.730907][T17163]  ? __pfx_kcov_ioctl+0x10/0x10
[  459.730930][T17163]  do_syscall_64+0xe2/0xf80
[  459.730954][T17163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.730972][T17163]  ? trace_irq_disable+0x37/0x100
[  459.730990][T17163]  ? clear_bhb_loop+0x60/0xb0
[  459.731011][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.731028][T17163] RIP: 0033:0x7fbde955b78e
[  459.731046][T17163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  459.731063][T17163] RSP: 002b:00007fbdea39dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  459.731086][T17163] RAX: ffffffffffffffda RBX: 00007fbdea39e6c0 RCX: 00007fbde955b78e
[  459.731100][T17163] RDX: 0000000000011dc0 RSI: 00002000000037c0 RDI: 00000000000000c8
[  459.731113][T17163] RBP: 00007fbde9608c1f R08: 0000000000000000 R09: 0000000000000000
[  459.731126][T17163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  459.731138][T17163] R13: 00007fbde9816128 R14: 00007fbde9816090 R15: 00007ffe9b06e758
[  459.731159][T17163]  </TASK>
[  459.731170][T17163] BUG: Bad page state in process syz.0.3463  pfn:9767a
[  460.133648][T17163] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x9767a
[  460.142551][T17163] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  460.149706][T17163] raw: 00fff00000000000 dead000000000040 ffff888021695000 0000000000000000
[  460.158338][T17163] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  460.166926][T17163] page dumped because: page_pool leak
[  460.172334][T17163] page_owner tracks the page as allocated
[  460.178091][T17163] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17163, tgid 17159 (syz.0.3463), ts 457095016134, free_ts 456647752858
[  460.195323][T17163]  post_alloc_hook+0x228/0x280
[  460.200125][T17163]  get_page_from_freelist+0x24dc/0x2580
[  460.205668][T17163]  __alloc_frozen_pages_noprof+0x18d/0x380
[  460.211496][T17163]  alloc_pages_bulk_noprof+0x558/0x700
[  460.217366][T17163]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  460.223524][T17163]  skb_pp_cow_data+0xc21/0x1680
[  460.228426][T17163]  do_xdp_generic+0x76b/0x12e0
[  460.233218][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  460.239145][T17163]  netif_receive_skb+0x1fe/0xbb0
[  460.244196][T17163]  tun_rx_batched+0x1de/0x790
[  460.248910][T17163]  tun_get_user+0x2a78/0x3dd0
[  460.253602][T17163]  tun_chr_write_iter+0x113/0x200
[  460.258743][T17163]  vfs_write+0x61d/0xb90
[  460.263003][T17163]  ksys_write+0x150/0x270
[  460.267352][T17163]  do_syscall_64+0xe2/0xf80
[  460.272027][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.277966][T17163] page last free pid 15 tgid 15 stack trace:
[  460.283957][T17163]  __free_frozen_pages+0xbf8/0xd70
[  460.289103][T17163]  tlb_remove_table_rcu+0x85/0x100
[  460.294227][T17163]  rcu_core+0xc9e/0x1750
[  460.298623][T17163]  handle_softirqs+0x22a/0x7c0
[  460.303412][T17163]  run_ksoftirqd+0x36/0x60
[  460.307888][T17163]  smpboot_thread_fn+0x541/0xa50
[  460.312845][T17163]  kthread+0x726/0x8b0
[  460.316908][T17163]  ret_from_fork+0x51b/0xa40
[  460.321558][T17163]  ret_from_fork_asm+0x1a/0x30
[  460.326373][T17163] Modules linked in:
[  460.330349][T17163] CPU: 0 UID: 0 PID: 17163 Comm: syz.0.3463 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  460.330380][T17163] Tainted: [B]=BAD_PAGE
[  460.330387][T17163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  460.330400][T17163] Call Trace:
[  460.330409][T17163]  <TASK>
[  460.330418][T17163]  dump_stack_lvl+0xe8/0x150
[  460.330443][T17163]  bad_page+0x17f/0x1c0
[  460.330468][T17163]  __free_frozen_pages+0xd28/0xd70
[  460.330489][T17163]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  460.330528][T17163]  bpf_xdp_adjust_tail+0x1d6/0x220
[  460.330555][T17163]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  460.330573][T17163]  bpf_prog_run_generic_xdp+0x603/0x1490
[  460.330602][T17163]  do_xdp_generic+0xac5/0x12e0
[  460.330627][T17163]  ? __pfx_do_xdp_generic+0x10/0x10
[  460.330661][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  460.330685][T17163]  ? __pfx___up_read+0x10/0x10
[  460.330708][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  460.330737][T17163]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  460.330757][T17163]  ? lockdep_hardirqs_on+0x7a/0x110
[  460.330781][T17163]  ? irqentry_exit+0x59c/0x620
[  460.330805][T17163]  ? trace_irq_disable+0x37/0x100
[  460.330850][T17163]  ? netif_receive_skb+0x102/0xbb0
[  460.330869][T17163]  ? lock_acquire+0x106/0x330
[  460.330893][T17163]  ? netif_receive_skb+0x102/0xbb0
[  460.330913][T17163]  ? rep_movs_alternative+0x4a/0x90
[  460.330930][T17163]  ? netif_receive_skb+0x102/0xbb0
[  460.330947][T17163]  ? netif_receive_skb+0x102/0xbb0
[  460.330964][T17163]  netif_receive_skb+0x1fe/0xbb0
[  460.330984][T17163]  ? __pfx_netif_receive_skb+0x10/0x10
[  460.331002][T17163]  ? __pfx__copy_from_iter+0x10/0x10
[  460.331023][T17163]  ? sock_alloc_send_pskb+0x896/0x990
[  460.331051][T17163]  ? tun_rx_batched+0x185/0x790
[  460.331072][T17163]  tun_rx_batched+0x1de/0x790
[  460.331095][T17163]  ? __pfx_tun_rx_batched+0x10/0x10
[  460.331116][T17163]  ? tun_get_user+0x2669/0x3dd0
[  460.331137][T17163]  ? tun_get_user+0x2669/0x3dd0
[  460.331158][T17163]  ? tun_get_user+0x2354/0x3dd0
[  460.331177][T17163]  ? __local_bh_enable_ip+0xd0/0x130
[  460.331195][T17163]  ? tun_get_user+0x2669/0x3dd0
[  460.331214][T17163]  tun_get_user+0x2a78/0x3dd0
[  460.331239][T17163]  ? aa_file_perm+0x12d/0x1630
[  460.331266][T17163]  ? aa_file_perm+0x440/0x1630
[  460.331288][T17163]  ? __pfx_tun_get_user+0x10/0x10
[  460.331309][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  460.331334][T17163]  ? __pfx_file_ioctl+0x10/0x10
[  460.331363][T17163]  ? ref_tracker_alloc+0x363/0x4d0
[  460.331388][T17163]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  460.331411][T17163]  ? tun_get+0x1c/0x2f0
[  460.331429][T17163]  ? tun_get+0x1c/0x2f0
[  460.331451][T17163]  ? tun_get+0x1c/0x2f0
[  460.331468][T17163]  ? tun_get+0x1c/0x2f0
[  460.331489][T17163]  tun_chr_write_iter+0x113/0x200
[  460.331509][T17163]  vfs_write+0x61d/0xb90
[  460.331539][T17163]  ? __pfx_vfs_write+0x10/0x10
[  460.331569][T17163]  ? __fget_files+0x2a/0x420
[  460.331592][T17163]  ksys_write+0x150/0x270
[  460.331619][T17163]  ? __pfx_ksys_write+0x10/0x10
[  460.331644][T17163]  ? __pfx_kcov_ioctl+0x10/0x10
[  460.331668][T17163]  do_syscall_64+0xe2/0xf80
[  460.331694][T17163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.331713][T17163]  ? trace_irq_disable+0x37/0x100
[  460.331732][T17163]  ? clear_bhb_loop+0x60/0xb0
[  460.331754][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.331774][T17163] RIP: 0033:0x7fbde955b78e
[  460.331792][T17163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  460.331809][T17163] RSP: 002b:00007fbdea39dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  460.331840][T17163] RAX: ffffffffffffffda RBX: 00007fbdea39e6c0 RCX: 00007fbde955b78e
[  460.331853][T17163] RDX: 0000000000011dc0 RSI: 00002000000037c0 RDI: 00000000000000c8
[  460.331866][T17163] RBP: 00007fbde9608c1f R08: 0000000000000000 R09: 0000000000000000
[  460.331878][T17163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  460.331890][T17163] R13: 00007fbde9816128 R14: 00007fbde9816090 R15: 00007ffe9b06e758
[  460.331912][T17163]  </TASK>
[  460.331924][T17163] BUG: Bad page state in process syz.0.3463  pfn:89bf5
[  460.734460][T17163] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x89bf5
[  460.743282][T17163] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  460.750436][T17163] raw: 00fff00000000000 dead000000000040 ffff888021695000 0000000000000000
[  460.759144][T17163] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  460.767762][T17163] page dumped because: page_pool leak
[  460.773140][T17163] page_owner tracks the page as allocated
[  460.778896][T17163] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17163, tgid 17159 (syz.0.3463), ts 457094959848, free_ts 456647775114
[  460.796150][T17163]  post_alloc_hook+0x228/0x280
[  460.800952][T17163]  get_page_from_freelist+0x24dc/0x2580
[  460.806517][T17163]  __alloc_frozen_pages_noprof+0x18d/0x380
[  460.812353][T17163]  alloc_pages_bulk_noprof+0x558/0x700
[  460.817852][T17163]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  460.823951][T17163]  skb_pp_cow_data+0xc21/0x1680
[  460.829005][T17163]  do_xdp_generic+0x76b/0x12e0
[  460.833807][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  460.839554][T17163]  netif_receive_skb+0x1fe/0xbb0
[  460.844511][T17163]  tun_rx_batched+0x1de/0x790
[  460.849221][T17163]  tun_get_user+0x2a78/0x3dd0
[  460.853996][T17163]  tun_chr_write_iter+0x113/0x200
[  460.859045][T17163]  vfs_write+0x61d/0xb90
[  460.863303][T17163]  ksys_write+0x150/0x270
[  460.867655][T17163]  do_syscall_64+0xe2/0xf80
[  460.872261][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.878347][T17163] page last free pid 15 tgid 15 stack trace:
[  460.884335][T17163]  __free_frozen_pages+0xbf8/0xd70
[  460.889475][T17163]  tlb_remove_table_rcu+0x85/0x100
[  460.894604][T17163]  rcu_core+0xc9e/0x1750
[  460.898874][T17163]  handle_softirqs+0x22a/0x7c0
[  460.903650][T17163]  run_ksoftirqd+0x36/0x60
[  460.908102][T17163]  smpboot_thread_fn+0x541/0xa50
[  460.913052][T17163]  kthread+0x726/0x8b0
[  460.917117][T17163]  ret_from_fork+0x51b/0xa40
[  460.921750][T17163]  ret_from_fork_asm+0x1a/0x30
[  460.926533][T17163] Modules linked in:
[  460.930464][T17163] CPU: 0 UID: 0 PID: 17163 Comm: syz.0.3463 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  460.930494][T17163] Tainted: [B]=BAD_PAGE
[  460.930501][T17163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  460.930512][T17163] Call Trace:
[  460.930518][T17163]  <TASK>
[  460.930526][T17163]  dump_stack_lvl+0xe8/0x150
[  460.930552][T17163]  bad_page+0x17f/0x1c0
[  460.930585][T17163]  __free_frozen_pages+0xd28/0xd70
[  460.930609][T17163]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  460.930651][T17163]  bpf_xdp_adjust_tail+0x1d6/0x220
[  460.930679][T17163]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  460.930697][T17163]  bpf_prog_run_generic_xdp+0x603/0x1490
[  460.930727][T17163]  do_xdp_generic+0xac5/0x12e0
[  460.930750][T17163]  ? __pfx_do_xdp_generic+0x10/0x10
[  460.930781][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  460.930804][T17163]  ? __pfx___up_read+0x10/0x10
[  460.930825][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  460.930855][T17163]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  460.930875][T17163]  ? lockdep_hardirqs_on+0x7a/0x110
[  460.930899][T17163]  ? irqentry_exit+0x59c/0x620
[  460.930922][T17163]  ? trace_irq_disable+0x37/0x100
[  460.930944][T17163]  ? netif_receive_skb+0x102/0xbb0
[  460.930961][T17163]  ? lock_acquire+0x106/0x330
[  460.930987][T17163]  ? netif_receive_skb+0x102/0xbb0
[  460.931009][T17163]  ? rep_movs_alternative+0x4a/0x90
[  460.931028][T17163]  ? netif_receive_skb+0x102/0xbb0
[  460.931046][T17163]  ? netif_receive_skb+0x102/0xbb0
[  460.931066][T17163]  netif_receive_skb+0x1fe/0xbb0
[  460.931089][T17163]  ? __pfx_netif_receive_skb+0x10/0x10
[  460.931109][T17163]  ? __pfx__copy_from_iter+0x10/0x10
[  460.931133][T17163]  ? sock_alloc_send_pskb+0x896/0x990
[  460.931161][T17163]  ? tun_rx_batched+0x185/0x790
[  460.931182][T17163]  tun_rx_batched+0x1de/0x790
[  460.931203][T17163]  ? __pfx_tun_rx_batched+0x10/0x10
[  460.931223][T17163]  ? tun_get_user+0x2669/0x3dd0
[  460.931242][T17163]  ? tun_get_user+0x2669/0x3dd0
[  460.931264][T17163]  ? tun_get_user+0x2354/0x3dd0
[  460.931283][T17163]  ? __local_bh_enable_ip+0xd0/0x130
[  460.931303][T17163]  ? tun_get_user+0x2669/0x3dd0
[  460.931321][T17163]  tun_get_user+0x2a78/0x3dd0
[  460.931345][T17163]  ? aa_file_perm+0x12d/0x1630
[  460.931371][T17163]  ? aa_file_perm+0x440/0x1630
[  460.931393][T17163]  ? __pfx_tun_get_user+0x10/0x10
[  460.931413][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  460.931440][T17163]  ? __pfx_file_ioctl+0x10/0x10
[  460.931469][T17163]  ? ref_tracker_alloc+0x363/0x4d0
[  460.931492][T17163]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  460.931515][T17163]  ? tun_get+0x1c/0x2f0
[  460.931534][T17163]  ? tun_get+0x1c/0x2f0
[  460.931554][T17163]  ? tun_get+0x1c/0x2f0
[  460.931582][T17163]  ? tun_get+0x1c/0x2f0
[  460.931603][T17163]  tun_chr_write_iter+0x113/0x200
[  460.931623][T17163]  vfs_write+0x61d/0xb90
[  460.931653][T17163]  ? __pfx_vfs_write+0x10/0x10
[  460.931682][T17163]  ? __fget_files+0x2a/0x420
[  460.931705][T17163]  ksys_write+0x150/0x270
[  460.931733][T17163]  ? __pfx_ksys_write+0x10/0x10
[  460.931758][T17163]  ? __pfx_kcov_ioctl+0x10/0x10
[  460.931781][T17163]  do_syscall_64+0xe2/0xf80
[  460.931805][T17163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.931823][T17163]  ? trace_irq_disable+0x37/0x100
[  460.931840][T17163]  ? clear_bhb_loop+0x60/0xb0
[  460.931861][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.931880][T17163] RIP: 0033:0x7fbde955b78e
[  460.931898][T17163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  460.931915][T17163] RSP: 002b:00007fbdea39dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  460.931937][T17163] RAX: ffffffffffffffda RBX: 00007fbdea39e6c0 RCX: 00007fbde955b78e
[  460.931951][T17163] RDX: 0000000000011dc0 RSI: 00002000000037c0 RDI: 00000000000000c8
[  460.931965][T17163] RBP: 00007fbde9608c1f R08: 0000000000000000 R09: 0000000000000000
[  460.931977][T17163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  460.931989][T17163] R13: 00007fbde9816128 R14: 00007fbde9816090 R15: 00007ffe9b06e758
[  460.932016][T17163]  </TASK>
[  460.932028][T17163] BUG: Bad page state in process syz.0.3463  pfn:7c8ea
[  461.334192][T17163] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7c8ea
[  461.344289][T17163] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  461.351435][T17163] raw: 00fff00000000000 dead000000000040 ffff888021695000 0000000000000000
[  461.360052][T17163] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[  461.368657][T17163] page dumped because: page_pool leak
[  461.374015][T17163] page_owner tracks the page as allocated
[  461.379749][T17163] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17163, tgid 17159 (syz.0.3463), ts 457094939152, free_ts 456647797582
[  461.396983][T17163]  post_alloc_hook+0x228/0x280
[  461.401779][T17163]  get_page_from_freelist+0x24dc/0x2580
[  461.407340][T17163]  __alloc_frozen_pages_noprof+0x18d/0x380
[  461.413182][T17163]  alloc_pages_bulk_noprof+0x558/0x700
[  461.418688][T17163]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  461.424773][T17163]  skb_pp_cow_data+0xc21/0x1680
[  461.429643][T17163]  do_xdp_generic+0x76b/0x12e0
[  461.434418][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  461.440162][T17163]  netif_receive_skb+0x1fe/0xbb0
[  461.445110][T17163]  tun_rx_batched+0x1de/0x790
[  461.449810][T17163]  tun_get_user+0x2a78/0x3dd0
[  461.454506][T17163]  tun_chr_write_iter+0x113/0x200
[  461.459551][T17163]  vfs_write+0x61d/0xb90
[  461.463812][T17163]  ksys_write+0x150/0x270
[  461.468161][T17163]  do_syscall_64+0xe2/0xf80
[  461.472679][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.478621][T17163] page last free pid 15 tgid 15 stack trace:
[  461.484602][T17163]  __free_frozen_pages+0xbf8/0xd70
[  461.489734][T17163]  tlb_remove_table_rcu+0x85/0x100
[  461.494856][T17163]  rcu_core+0xc9e/0x1750
[  461.499132][T17163]  handle_softirqs+0x22a/0x7c0
[  461.503915][T17163]  run_ksoftirqd+0x36/0x60
[  461.508358][T17163]  smpboot_thread_fn+0x541/0xa50
[  461.513307][T17163]  kthread+0x726/0x8b0
[  461.517417][T17163]  ret_from_fork+0x51b/0xa40
[  461.522044][T17163]  ret_from_fork_asm+0x1a/0x30
[  461.526802][T17163] Modules linked in:
[  461.530743][T17163] CPU: 0 UID: 0 PID: 17163 Comm: syz.0.3463 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  461.530772][T17163] Tainted: [B]=BAD_PAGE
[  461.530779][T17163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  461.530790][T17163] Call Trace:
[  461.530797][T17163]  <TASK>
[  461.530804][T17163]  dump_stack_lvl+0xe8/0x150
[  461.530829][T17163]  bad_page+0x17f/0x1c0
[  461.530853][T17163]  __free_frozen_pages+0xd28/0xd70
[  461.530890][T17163]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  461.530930][T17163]  bpf_xdp_adjust_tail+0x1d6/0x220
[  461.530957][T17163]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  461.530975][T17163]  bpf_prog_run_generic_xdp+0x603/0x1490
[  461.531005][T17163]  do_xdp_generic+0xac5/0x12e0
[  461.531028][T17163]  ? __pfx_do_xdp_generic+0x10/0x10
[  461.531058][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  461.531080][T17163]  ? __pfx___up_read+0x10/0x10
[  461.531100][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  461.531128][T17163]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  461.531148][T17163]  ? lockdep_hardirqs_on+0x7a/0x110
[  461.531172][T17163]  ? irqentry_exit+0x59c/0x620
[  461.531196][T17163]  ? trace_irq_disable+0x37/0x100
[  461.531217][T17163]  ? netif_receive_skb+0x102/0xbb0
[  461.531235][T17163]  ? lock_acquire+0x106/0x330
[  461.531262][T17163]  ? netif_receive_skb+0x102/0xbb0
[  461.531284][T17163]  ? rep_movs_alternative+0x4a/0x90
[  461.531303][T17163]  ? netif_receive_skb+0x102/0xbb0
[  461.531322][T17163]  ? netif_receive_skb+0x102/0xbb0
[  461.531341][T17163]  netif_receive_skb+0x1fe/0xbb0
[  461.531364][T17163]  ? __pfx_netif_receive_skb+0x10/0x10
[  461.531383][T17163]  ? __pfx__copy_from_iter+0x10/0x10
[  461.531406][T17163]  ? sock_alloc_send_pskb+0x896/0x990
[  461.531434][T17163]  ? tun_rx_batched+0x185/0x790
[  461.531455][T17163]  tun_rx_batched+0x1de/0x790
[  461.531476][T17163]  ? __pfx_tun_rx_batched+0x10/0x10
[  461.531496][T17163]  ? tun_get_user+0x2669/0x3dd0
[  461.531515][T17163]  ? tun_get_user+0x2669/0x3dd0
[  461.531537][T17163]  ? tun_get_user+0x2354/0x3dd0
[  461.531556][T17163]  ? __local_bh_enable_ip+0xd0/0x130
[  461.531574][T17163]  ? tun_get_user+0x2669/0x3dd0
[  461.531592][T17163]  tun_get_user+0x2a78/0x3dd0
[  461.531616][T17163]  ? aa_file_perm+0x12d/0x1630
[  461.531643][T17163]  ? aa_file_perm+0x440/0x1630
[  461.531666][T17163]  ? __pfx_tun_get_user+0x10/0x10
[  461.531687][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  461.531713][T17163]  ? __pfx_file_ioctl+0x10/0x10
[  461.531740][T17163]  ? ref_tracker_alloc+0x363/0x4d0
[  461.531764][T17163]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  461.531788][T17163]  ? tun_get+0x1c/0x2f0
[  461.531806][T17163]  ? tun_get+0x1c/0x2f0
[  461.531826][T17163]  ? tun_get+0x1c/0x2f0
[  461.531843][T17163]  ? tun_get+0x1c/0x2f0
[  461.531873][T17163]  tun_chr_write_iter+0x113/0x200
[  461.531893][T17163]  vfs_write+0x61d/0xb90
[  461.531924][T17163]  ? __pfx_vfs_write+0x10/0x10
[  461.531953][T17163]  ? __fget_files+0x2a/0x420
[  461.531978][T17163]  ksys_write+0x150/0x270
[  461.532011][T17163]  ? __pfx_ksys_write+0x10/0x10
[  461.532036][T17163]  ? __pfx_kcov_ioctl+0x10/0x10
[  461.532059][T17163]  do_syscall_64+0xe2/0xf80
[  461.532083][T17163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.532101][T17163]  ? trace_irq_disable+0x37/0x100
[  461.532119][T17163]  ? clear_bhb_loop+0x60/0xb0
[  461.532140][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.532158][T17163] RIP: 0033:0x7fbde955b78e
[  461.532176][T17163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  461.532193][T17163] RSP: 002b:00007fbdea39dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  461.532216][T17163] RAX: ffffffffffffffda RBX: 00007fbdea39e6c0 RCX: 00007fbde955b78e
[  461.532230][T17163] RDX: 0000000000011dc0 RSI: 00002000000037c0 RDI: 00000000000000c8
[  461.532243][T17163] RBP: 00007fbde9608c1f R08: 0000000000000000 R09: 0000000000000000
[  461.532256][T17163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  461.532268][T17163] R13: 00007fbde9816128 R14: 00007fbde9816090 R15: 00007ffe9b06e758
[  461.532290][T17163]  </TASK>
[  461.532301][T17163] BUG: Bad page state in process syz.0.3463  pfn:98ad6
[  461.934244][T17163] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x98ad6
[  461.943046][T17163] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  461.950190][T17163] raw: 00fff00000000000 dead000000000040 ffff888021695000 0000000000000000
[  461.958799][T17163] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  461.967601][T17163] page dumped because: page_pool leak
[  461.973003][T17163] page_owner tracks the page as allocated
[  461.978740][T17163] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17163, tgid 17159 (syz.0.3463), ts 457094917843, free_ts 456937181274
[  461.995973][T17163]  post_alloc_hook+0x228/0x280
[  462.000815][T17163]  get_page_from_freelist+0x24dc/0x2580
[  462.006396][T17163]  __alloc_frozen_pages_noprof+0x18d/0x380
[  462.012283][T17163]  alloc_pages_bulk_noprof+0x558/0x700
[  462.017797][T17163]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  462.023898][T17163]  skb_pp_cow_data+0xc21/0x1680
[  462.028949][T17163]  do_xdp_generic+0x76b/0x12e0
[  462.033740][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  462.039495][T17163]  netif_receive_skb+0x1fe/0xbb0
[  462.044447][T17163]  tun_rx_batched+0x1de/0x790
[  462.049165][T17163]  tun_get_user+0x2a78/0x3dd0
[  462.053859][T17163]  tun_chr_write_iter+0x113/0x200
[  462.059020][T17163]  vfs_write+0x61d/0xb90
[  462.063399][T17163]  ksys_write+0x150/0x270
[  462.067814][T17163]  do_syscall_64+0xe2/0xf80
[  462.072342][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.078271][T17163] page last free pid 17153 tgid 17153 stack trace:
[  462.084867][T17163]  __free_frozen_pages+0xbf8/0xd70
[  462.087776][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  462.090017][T17163]  tlb_finish_mmu+0x144/0x230
[  462.097997][    C1] lec:lec_tx_timeout: lec0
[  462.102656][T17163]  exit_mmap+0x451/0xb30
[  462.107581][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  462.111324][T17163]  __mmput+0x118/0x430
[  462.121284][T17163]  exit_mm+0x168/0x220
[  462.125373][T17163]  do_exit+0x62e/0x2310
[  462.129598][T17163]  do_group_exit+0x21b/0x2d0
[  462.134288][T17163]  __x64_sys_exit_group+0x3f/0x40
[  462.139362][T17163]  __pfx_syscall_get_nr+0x0/0x10
[  462.144410][T17163]  do_syscall_64+0xe2/0xf80
[  462.148939][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.154846][T17163] Modules linked in:
[  462.159046][T17163] CPU: 0 UID: 0 PID: 17163 Comm: syz.0.3463 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  462.159074][T17163] Tainted: [B]=BAD_PAGE
[  462.159081][T17163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  462.159092][T17163] Call Trace:
[  462.159099][T17163]  <TASK>
[  462.159106][T17163]  dump_stack_lvl+0xe8/0x150
[  462.159133][T17163]  bad_page+0x17f/0x1c0
[  462.159157][T17163]  __free_frozen_pages+0xd28/0xd70
[  462.159180][T17163]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  462.159217][T17163]  bpf_xdp_adjust_tail+0x1d6/0x220
[  462.159245][T17163]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  462.159263][T17163]  bpf_prog_run_generic_xdp+0x603/0x1490
[  462.159296][T17163]  do_xdp_generic+0xac5/0x12e0
[  462.159321][T17163]  ? __pfx_do_xdp_generic+0x10/0x10
[  462.159351][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  462.159375][T17163]  ? __pfx___up_read+0x10/0x10
[  462.159398][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  462.159427][T17163]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  462.159448][T17163]  ? lockdep_hardirqs_on+0x7a/0x110
[  462.159472][T17163]  ? irqentry_exit+0x59c/0x620
[  462.159495][T17163]  ? trace_irq_disable+0x37/0x100
[  462.159517][T17163]  ? netif_receive_skb+0x102/0xbb0
[  462.159535][T17163]  ? lock_acquire+0x106/0x330
[  462.159559][T17163]  ? netif_receive_skb+0x102/0xbb0
[  462.159591][T17163]  ? rep_movs_alternative+0x4a/0x90
[  462.159611][T17163]  ? netif_receive_skb+0x102/0xbb0
[  462.159628][T17163]  ? netif_receive_skb+0x102/0xbb0
[  462.159646][T17163]  netif_receive_skb+0x1fe/0xbb0
[  462.159668][T17163]  ? __pfx_netif_receive_skb+0x10/0x10
[  462.159687][T17163]  ? __pfx__copy_from_iter+0x10/0x10
[  462.159710][T17163]  ? sock_alloc_send_pskb+0x896/0x990
[  462.159739][T17163]  ? tun_rx_batched+0x185/0x790
[  462.159761][T17163]  tun_rx_batched+0x1de/0x790
[  462.159783][T17163]  ? __pfx_tun_rx_batched+0x10/0x10
[  462.159804][T17163]  ? tun_get_user+0x2669/0x3dd0
[  462.159823][T17163]  ? tun_get_user+0x2669/0x3dd0
[  462.159843][T17163]  ? tun_get_user+0x2354/0x3dd0
[  462.159862][T17163]  ? __local_bh_enable_ip+0xd0/0x130
[  462.159881][T17163]  ? tun_get_user+0x2669/0x3dd0
[  462.159900][T17163]  tun_get_user+0x2a78/0x3dd0
[  462.159925][T17163]  ? aa_file_perm+0x12d/0x1630
[  462.159951][T17163]  ? aa_file_perm+0x440/0x1630
[  462.159975][T17163]  ? __pfx_tun_get_user+0x10/0x10
[  462.159995][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  462.160022][T17163]  ? __pfx_file_ioctl+0x10/0x10
[  462.160050][T17163]  ? ref_tracker_alloc+0x363/0x4d0
[  462.160073][T17163]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  462.160096][T17163]  ? tun_get+0x1c/0x2f0
[  462.160114][T17163]  ? tun_get+0x1c/0x2f0
[  462.160134][T17163]  ? tun_get+0x1c/0x2f0
[  462.160152][T17163]  ? tun_get+0x1c/0x2f0
[  462.160173][T17163]  tun_chr_write_iter+0x113/0x200
[  462.160192][T17163]  vfs_write+0x61d/0xb90
[  462.160222][T17163]  ? __pfx_vfs_write+0x10/0x10
[  462.160251][T17163]  ? __fget_files+0x2a/0x420
[  462.160275][T17163]  ksys_write+0x150/0x270
[  462.160302][T17163]  ? __pfx_ksys_write+0x10/0x10
[  462.160326][T17163]  ? __pfx_kcov_ioctl+0x10/0x10
[  462.160350][T17163]  do_syscall_64+0xe2/0xf80
[  462.160375][T17163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.160394][T17163]  ? trace_irq_disable+0x37/0x100
[  462.160412][T17163]  ? clear_bhb_loop+0x60/0xb0
[  462.160434][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.160453][T17163] RIP: 0033:0x7fbde955b78e
[  462.160472][T17163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  462.160490][T17163] RSP: 002b:00007fbdea39dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  462.160512][T17163] RAX: ffffffffffffffda RBX: 00007fbdea39e6c0 RCX: 00007fbde955b78e
[  462.160526][T17163] RDX: 0000000000011dc0 RSI: 00002000000037c0 RDI: 00000000000000c8
[  462.160540][T17163] RBP: 00007fbde9608c1f R08: 0000000000000000 R09: 0000000000000000
[  462.160553][T17163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  462.160572][T17163] R13: 00007fbde9816128 R14: 00007fbde9816090 R15: 00007ffe9b06e758
[  462.160594][T17163]  </TASK>
[  462.160606][T17163] BUG: Bad page state in process syz.0.3463  pfn:5536c
[  462.563481][T17163] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805536c640 pfn:0x5536c
[  462.573571][T17163] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  462.580731][T17163] raw: 00fff00000000000 dead000000000040 ffff888021695000 0000000000000000
[  462.589426][T17163] raw: ffff88805536c640 0000000000000001 00000000ffffffff 0000000000000000
[  462.598031][T17163] page dumped because: page_pool leak
[  462.603390][T17163] page_owner tracks the page as allocated
[  462.609123][T17163] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17163, tgid 17159 (syz.0.3463), ts 457094896630, free_ts 457072855929
[  462.626357][T17163]  post_alloc_hook+0x228/0x280
[  462.631207][T17163]  get_page_from_freelist+0x24dc/0x2580
[  462.636775][T17163]  __alloc_frozen_pages_noprof+0x18d/0x380
[  462.642607][T17163]  alloc_pages_bulk_noprof+0x558/0x700
[  462.648095][T17163]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  462.654159][T17163]  skb_pp_cow_data+0xc21/0x1680
[  462.659046][T17163]  do_xdp_generic+0x76b/0x12e0
[  462.663840][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  462.669662][T17163]  netif_receive_skb+0x1fe/0xbb0
[  462.674618][T17163]  tun_rx_batched+0x1de/0x790
[  462.679327][T17163]  tun_get_user+0x2a78/0x3dd0
[  462.684017][T17163]  tun_chr_write_iter+0x113/0x200
[  462.689190][T17163]  vfs_write+0x61d/0xb90
[  462.693478][T17163]  ksys_write+0x150/0x270
[  462.697881][T17163]  do_syscall_64+0xe2/0xf80
[  462.702434][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.708372][T17163] page last free pid 17156 tgid 17156 stack trace:
[  462.714911][T17163]  __free_frozen_pages+0xbf8/0xd70
[  462.720169][T17163]  __slab_free+0x2ce/0x320
[  462.724615][T17163]  qlist_free_all+0x97/0x100
[  462.729259][T17163]  kasan_quarantine_reduce+0x148/0x160
[  462.734843][T17163]  __kasan_slab_alloc+0x22/0x80
[  462.739736][T17163]  kmem_cache_alloc_noprof+0x370/0x6e0
[  462.745222][T17163]  proc_reg_open+0x1f4/0x540
[  462.749937][T17163]  do_dentry_open+0x7ce/0x1420
[  462.754752][T17163]  vfs_open+0x3b/0x340
[  462.758860][T17163]  path_openat+0x3486/0x3e20
[  462.763499][T17163]  do_filp_open+0x22d/0x490
[  462.768052][T17163]  do_sys_openat2+0x12f/0x220
[  462.772777][T17163]  __x64_sys_openat+0x138/0x170
[  462.777673][T17163]  do_syscall_64+0xe2/0xf80
[  462.782369][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.788289][T17163] Modules linked in:
[  462.792201][T17163] CPU: 0 UID: 0 PID: 17163 Comm: syz.0.3463 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  462.792221][T17163] Tainted: [B]=BAD_PAGE
[  462.792225][T17163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  462.792232][T17163] Call Trace:
[  462.792237][T17163]  <TASK>
[  462.792243][T17163]  dump_stack_lvl+0xe8/0x150
[  462.792259][T17163]  bad_page+0x17f/0x1c0
[  462.792275][T17163]  __free_frozen_pages+0xd28/0xd70
[  462.792288][T17163]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  462.792312][T17163]  bpf_xdp_adjust_tail+0x1d6/0x220
[  462.792328][T17163]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  462.792339][T17163]  bpf_prog_run_generic_xdp+0x603/0x1490
[  462.792356][T17163]  do_xdp_generic+0xac5/0x12e0
[  462.792369][T17163]  ? __pfx_do_xdp_generic+0x10/0x10
[  462.792387][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  462.792400][T17163]  ? __pfx___up_read+0x10/0x10
[  462.792414][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  462.792432][T17163]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  462.792444][T17163]  ? lockdep_hardirqs_on+0x7a/0x110
[  462.792458][T17163]  ? irqentry_exit+0x59c/0x620
[  462.792473][T17163]  ? trace_irq_disable+0x37/0x100
[  462.792485][T17163]  ? netif_receive_skb+0x102/0xbb0
[  462.792496][T17163]  ? lock_acquire+0x106/0x330
[  462.792511][T17163]  ? netif_receive_skb+0x102/0xbb0
[  462.792522][T17163]  ? rep_movs_alternative+0x4a/0x90
[  462.792540][T17163]  ? netif_receive_skb+0x102/0xbb0
[  462.792551][T17163]  ? netif_receive_skb+0x102/0xbb0
[  462.792562][T17163]  netif_receive_skb+0x1fe/0xbb0
[  462.792574][T17163]  ? __pfx_netif_receive_skb+0x10/0x10
[  462.792585][T17163]  ? __pfx__copy_from_iter+0x10/0x10
[  462.792599][T17163]  ? sock_alloc_send_pskb+0x896/0x990
[  462.792616][T17163]  ? tun_rx_batched+0x185/0x790
[  462.792629][T17163]  tun_rx_batched+0x1de/0x790
[  462.792643][T17163]  ? __pfx_tun_rx_batched+0x10/0x10
[  462.792654][T17163]  ? tun_get_user+0x2669/0x3dd0
[  462.792666][T17163]  ? tun_get_user+0x2669/0x3dd0
[  462.792678][T17163]  ? tun_get_user+0x2354/0x3dd0
[  462.792689][T17163]  ? __local_bh_enable_ip+0xd0/0x130
[  462.792700][T17163]  ? tun_get_user+0x2669/0x3dd0
[  462.792711][T17163]  tun_get_user+0x2a78/0x3dd0
[  462.792725][T17163]  ? aa_file_perm+0x12d/0x1630
[  462.792740][T17163]  ? aa_file_perm+0x440/0x1630
[  462.792754][T17163]  ? __pfx_tun_get_user+0x10/0x10
[  462.792766][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  462.792781][T17163]  ? __pfx_file_ioctl+0x10/0x10
[  462.792800][T17163]  ? ref_tracker_alloc+0x363/0x4d0
[  462.792815][T17163]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  462.792829][T17163]  ? tun_get+0x1c/0x2f0
[  462.792840][T17163]  ? tun_get+0x1c/0x2f0
[  462.792852][T17163]  ? tun_get+0x1c/0x2f0
[  462.792862][T17163]  ? tun_get+0x1c/0x2f0
[  462.792874][T17163]  tun_chr_write_iter+0x113/0x200
[  462.792886][T17163]  vfs_write+0x61d/0xb90
[  462.792904][T17163]  ? __pfx_vfs_write+0x10/0x10
[  462.792921][T17163]  ? __fget_files+0x2a/0x420
[  462.792936][T17163]  ksys_write+0x150/0x270
[  462.792952][T17163]  ? __pfx_ksys_write+0x10/0x10
[  462.792967][T17163]  ? __pfx_kcov_ioctl+0x10/0x10
[  462.792981][T17163]  do_syscall_64+0xe2/0xf80
[  462.792994][T17163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.793005][T17163]  ? trace_irq_disable+0x37/0x100
[  462.793015][T17163]  ? clear_bhb_loop+0x60/0xb0
[  462.793027][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.793038][T17163] RIP: 0033:0x7fbde955b78e
[  462.793049][T17163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  462.793060][T17163] RSP: 002b:00007fbdea39dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  462.793076][T17163] RAX: ffffffffffffffda RBX: 00007fbdea39e6c0 RCX: 00007fbde955b78e
[  462.793084][T17163] RDX: 0000000000011dc0 RSI: 00002000000037c0 RDI: 00000000000000c8
[  462.793092][T17163] RBP: 00007fbde9608c1f R08: 0000000000000000 R09: 0000000000000000
[  462.793099][T17163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  462.793106][T17163] R13: 00007fbde9816128 R14: 00007fbde9816090 R15: 00007ffe9b06e758
[  462.793119][T17163]  </TASK>
[  462.793127][T17163] BUG: Bad page state in process syz.0.3463  pfn:30783
[  463.195813][T17163] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030783000 pfn:0x30783
[  463.206013][T17163] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  463.213178][T17163] raw: 00fff00000000000 dead000000000040 ffff888021695000 0000000000000000
[  463.221791][T17163] raw: ffff888030783000 0000000000000001 00000000ffffffff 0000000000000000
[  463.230403][T17163] page dumped because: page_pool leak
[  463.235869][T17163] page_owner tracks the page as allocated
[  463.241698][T17163] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17163, tgid 17159 (syz.0.3463), ts 457094876199, free_ts 457073010535
[  463.259028][T17163]  post_alloc_hook+0x228/0x280
[  463.263799][T17163]  get_page_from_freelist+0x24dc/0x2580
[  463.269395][T17163]  __alloc_frozen_pages_noprof+0x18d/0x380
[  463.275222][T17163]  alloc_pages_bulk_noprof+0x558/0x700
[  463.280725][T17163]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  463.286906][T17163]  skb_pp_cow_data+0xc21/0x1680
[  463.291900][T17163]  do_xdp_generic+0x76b/0x12e0
[  463.296680][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  463.302519][T17163]  netif_receive_skb+0x1fe/0xbb0
[  463.307511][T17163]  tun_rx_batched+0x1de/0x790
[  463.312213][T17163]  tun_get_user+0x2a78/0x3dd0
[  463.317078][T17163]  tun_chr_write_iter+0x113/0x200
[  463.322143][T17163]  vfs_write+0x61d/0xb90
[  463.326409][T17163]  ksys_write+0x150/0x270
[  463.330791][T17163]  do_syscall_64+0xe2/0xf80
[  463.335405][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.341422][T17163] page last free pid 17156 tgid 17156 stack trace:
[  463.347968][T17163]  __free_frozen_pages+0xbf8/0xd70
[  463.353089][T17163]  __slab_free+0x2ce/0x320
[  463.357545][T17163]  qlist_free_all+0x97/0x100
[  463.362168][T17163]  kasan_quarantine_reduce+0x148/0x160
[  463.367665][T17163]  __kasan_slab_alloc+0x22/0x80
[  463.372531][T17163]  kmem_cache_alloc_noprof+0x370/0x6e0
[  463.378026][T17163]  proc_reg_open+0x1f4/0x540
[  463.382634][T17163]  do_dentry_open+0x7ce/0x1420
[  463.387430][T17163]  vfs_open+0x3b/0x340
[  463.391510][T17163]  path_openat+0x3486/0x3e20
[  463.396099][T17163]  do_filp_open+0x22d/0x490
[  463.400751][T17163]  do_sys_openat2+0x12f/0x220
[  463.405443][T17163]  __x64_sys_openat+0x138/0x170
[  463.410324][T17163]  do_syscall_64+0xe2/0xf80
[  463.414867][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.420785][T17163] Modules linked in:
[  463.424799][T17163] CPU: 0 UID: 0 PID: 17163 Comm: syz.0.3463 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  463.424820][T17163] Tainted: [B]=BAD_PAGE
[  463.424824][T17163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  463.424832][T17163] Call Trace:
[  463.424837][T17163]  <TASK>
[  463.424850][T17163]  dump_stack_lvl+0xe8/0x150
[  463.424869][T17163]  bad_page+0x17f/0x1c0
[  463.424885][T17163]  __free_frozen_pages+0xd28/0xd70
[  463.424899][T17163]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  463.424922][T17163]  bpf_xdp_adjust_tail+0x1d6/0x220
[  463.424938][T17163]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  463.424949][T17163]  bpf_prog_run_generic_xdp+0x603/0x1490
[  463.424967][T17163]  do_xdp_generic+0xac5/0x12e0
[  463.424979][T17163]  ? __pfx_do_xdp_generic+0x10/0x10
[  463.424997][T17163]  __netif_receive_skb_core+0x10e5/0x3150
[  463.425010][T17163]  ? __pfx___up_read+0x10/0x10
[  463.425024][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  463.425041][T17163]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  463.425053][T17163]  ? lockdep_hardirqs_on+0x7a/0x110
[  463.425067][T17163]  ? irqentry_exit+0x59c/0x620
[  463.425081][T17163]  ? trace_irq_disable+0x37/0x100
[  463.425094][T17163]  ? netif_receive_skb+0x102/0xbb0
[  463.425104][T17163]  ? lock_acquire+0x106/0x330
[  463.425119][T17163]  ? netif_receive_skb+0x102/0xbb0
[  463.425131][T17163]  ? rep_movs_alternative+0x4a/0x90
[  463.425141][T17163]  ? netif_receive_skb+0x102/0xbb0
[  463.425151][T17163]  ? netif_receive_skb+0x102/0xbb0
[  463.425162][T17163]  netif_receive_skb+0x1fe/0xbb0
[  463.425174][T17163]  ? __pfx_netif_receive_skb+0x10/0x10
[  463.425185][T17163]  ? __pfx__copy_from_iter+0x10/0x10
[  463.425199][T17163]  ? sock_alloc_send_pskb+0x896/0x990
[  463.425217][T17163]  ? tun_rx_batched+0x185/0x790
[  463.425230][T17163]  tun_rx_batched+0x1de/0x790
[  463.425243][T17163]  ? __pfx_tun_rx_batched+0x10/0x10
[  463.425255][T17163]  ? tun_get_user+0x2669/0x3dd0
[  463.425266][T17163]  ? tun_get_user+0x2669/0x3dd0
[  463.425279][T17163]  ? tun_get_user+0x2354/0x3dd0
[  463.425289][T17163]  ? __local_bh_enable_ip+0xd0/0x130
[  463.425300][T17163]  ? tun_get_user+0x2669/0x3dd0
[  463.425312][T17163]  tun_get_user+0x2a78/0x3dd0
[  463.425326][T17163]  ? aa_file_perm+0x12d/0x1630
[  463.425341][T17163]  ? aa_file_perm+0x440/0x1630
[  463.425354][T17163]  ? __pfx_tun_get_user+0x10/0x10
[  463.425366][T17163]  ? __lock_acquire+0x6b5/0x2cf0
[  463.425382][T17163]  ? __pfx_file_ioctl+0x10/0x10
[  463.425399][T17163]  ? ref_tracker_alloc+0x363/0x4d0
[  463.425414][T17163]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  463.425428][T17163]  ? tun_get+0x1c/0x2f0
[  463.425439][T17163]  ? tun_get+0x1c/0x2f0
[  463.425451][T17163]  ? tun_get+0x1c/0x2f0
[  463.425461][T17163]  ? tun_get+0x1c/0x2f0
[  463.425472][T17163]  tun_chr_write_iter+0x113/0x200
[  463.425485][T17163]  vfs_write+0x61d/0xb90
[  463.425502][T17163]  ? __pfx_vfs_write+0x10/0x10
[  463.425520][T17163]  ? __fget_files+0x2a/0x420
[  463.425534][T17163]  ksys_write+0x150/0x270
[  463.425550][T17163]  ? __pfx_ksys_write+0x10/0x10
[  463.425565][T17163]  ? __pfx_kcov_ioctl+0x10/0x10
[  463.425582][T17163]  do_syscall_64+0xe2/0xf80
[  463.425603][T17163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.425618][T17163]  ? trace_irq_disable+0x37/0x100
[  463.425632][T17163]  ? clear_bhb_loop+0x60/0xb0
[  463.425649][T17163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.425667][T17163] RIP: 0033:0x7fbde955b78e
[  463.425683][T17163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  463.425699][T17163] RSP: 002b:00007fbdea39dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  463.425722][T17163] RAX: ffffffffffffffda RBX: 00007fbdea39e6c0 RCX: 00007fbde955b78e
[  463.425735][T17163] RDX: 0000000000011dc0 RSI: 00002000000037c0 RDI: 00000000000000c8
[  463.425745][T17163] RBP: 00007fbde9608c1f R08: 0000000000000000 R09: 0000000000000000
[  463.425752][T17163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  463.425759][T17163] R13: 00007fbde9816128 R14: 00007fbde9816090 R15: 00007ffe9b06e758
[  463.425771][T17163]  </TASK>
[  463.433926][T16881] Bluetooth: hci2: command 0x0406 tx timeout