last executing test programs: 26.874105982s ago: executing program 3 (id=2913): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000001ec0)=0x8001, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="5068c39e4b38560ff06f0000002500090122bd7008fcffffff020000000c003d80080027000a010100080003004700000028003e", @ANYRES32=0x0, @ANYBLOB="36d70aef8dcc60ac11fd4ac897b4c95b693978de49000000"], 0x50}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) unshare(0x26020480) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000008001e00ff01000005000b"], 0x2c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r7], 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x139801, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000001580)=r12, 0x4) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="80000000", @ANYRES8=r5, @ANYRES8=r11, @ANYRES32=r10, @ANYRES16=r0], 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r6, @ANYBLOB="29002cbd7000fedbdf258100000008000300", @ANYRES32=r10, @ANYBLOB="0c009900de000000340000000a00060008021100000000004501330010a0050008021100000008021100000108021100000193020000c6c000005d0001000106969292a402362d1a002016f5ffffffffffffff000000001400000001002500000009ddf98ee1a273a43552d1bd123ac18d821fa10a6cfc3563fe1e37110c2d1042fa22eb46133b887925763909d03f028c3de366d652410f97a133983f4d5cd345271b4998f7cc2e8c50875e500f76d37594b0f3c29a50004251282df5b53657e144f65ed949ae812eb288d0195456d9186fd780f0f029b9c10143510f2765fe6a59c12d5253eb7c9fd459281b3229ee4c7a31e754618bd6121d175e4492024ca0add797b3b2b73071b15bc64cfd02b2f7f520a05a90601fd0860e7b7840922f17021209915856cc20ac080af02ccd1cca5e65c8301f620f13b445877625140241c572aca9bd68549d8ada0e552f6d95d5fc023c74b07357e7156c23482481601f2370a4d4ef7d30aae15e37972d23edfcb3b20000001e003300c01408000802"], 0x19c}, 0x1, 0x0, 0x0, 0x4000}, 0x441c1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="02002dbd7000fbdbdf2559000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 10.456456739s ago: executing program 4 (id=3027): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xc, 0x401, 0x0, 0x1}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20008040) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0xffffffff, 0xd7c7, 0x401}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000b0000000000000008000ac0b3c60000", 0x24) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getnexthop={0x18, 0x6a, 0xc9012db3028b6933, 0x70bd29, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x4000844}, 0x4008000) 10.248511586s ago: executing program 4 (id=3029): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x2, @mcast1, 0x5}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(0x3) 10.097579456s ago: executing program 4 (id=3030): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x3, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000f3437b00001e3b"], 0x1c}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xd, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r12, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 9.477378355s ago: executing program 4 (id=3032): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x151da000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xba}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/34, 0x22}], 0x1, 0x1000000000000}}, @rdma_args={0x48, 0x114, 0x1, {{0x20080, 0x9}, {&(0x7f0000000600)=""/139, 0x8b}, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/240, 0xf0}, {&(0x7f0000000900)=""/159, 0x9f}, {&(0x7f00000009c0)}], 0x3, 0x1, 0x9}}], 0x90}, 0x0) ioctl(r0, 0x4574f538, &(0x7f0000001640)="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") mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0x36, 0x0, &(0x7f0000000240)="f80204160000000000007f5386ddb44b501c817ea08344bd8700883df04a3be1e6c808b380f957d8f81905e3d0dd65598770cff05f58", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000000000010000000900010073797a3100000000080002400000000154000000030a010200000000000000000100ffff0900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310020000038000000050a4f010000000000000000010020000c00024000000000000000010900010073797a31000000000c000480080001400000000514000000110001000000"], 0xdc}}, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000040000000f00000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.006973754s ago: executing program 4 (id=3043): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x15}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32=r3], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0xcfc, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffff1}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000060a0102000000000000000005000900000000001100010000000000000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x80800) socket$packet(0x11, 0x2, 0x300) sendto$x25(r6, &(0x7f00000000c0)="a8c4d5bf4d812170d4ea53f046e3abb5e94a4fc9806d4046f34235efab60499f9c73df120f16df535df1edeee04592b88ecce0e40fb83625d7e7274ea32d", 0x3e, 0x400c007, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x12, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80008010}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c40)={0x78, 0xb, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0x2, 0xfffffffe}, 0x50) 7.220614838s ago: executing program 4 (id=3048): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) listen(r0, 0x28) poll(&(0x7f0000000040)=[{r0, 0x1146}, {r0, 0x8214}], 0x2, 0x400) shutdown(r0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000b00)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) writev(r3, &(0x7f0000003600)=[{&(0x7f0000000080)="e2ad712843f24e2bb32df4a6fbb93a2d0421c5e293a1c0d763c8f98e18fe41528ebb9dd6a931e693f607b7f88ec8bae989d47931f8c87d2b3d7ad483c417ecaca553c1493fc937da3673bb8b1b32f94e4cf01df2c3ec63a6fac8227864bfff5a963dd2ed3c4ca7cd7536402dbea1c14692cf84b1dbd5e8a557597744ac01013a1ab942294d3dbb40aac5b0e1a6f46025726f0dfd3c6aa69ddede9411475a634a9edf6f00529198b466809de4aa8284acb85d68a36d1456de2d536250f3e20d4871deccecc49cbb14e885abbeb7fa8d04add36e350850b9f87926eddbb6e40805ef0dfa", 0xe3}, {&(0x7f0000000180)="e3c0452e1ca6e0b27b25652dadd1", 0xe}, {&(0x7f00000001c0)="23c6cd2ef4140b60d1de7270a3d116f89c83377156e4463c0feb72178e6dfbd4e83d5e0f9750dba5e0ca7b9859431017fd30b0c2d0e8a04ce7fea30dcb", 0x3d}, {&(0x7f00000023c0)="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", 0x1000}, {&(0x7f00000033c0)="63842d273a5cbaef900d6d6174ce8e0f9c677864e0c06c712ba44696ceefa646616e3f13d24776e8a19e99fbf279a0287eda127745c361b63ce345d181cfd7929a86be5febdbe1df11a9f7654d420246f725721e5b02e5fcc85a0512e805cbc44bd1835ab44a28d5e80b3a9443a9006cb1f2d8c8cbcf08a66fbe617d", 0x7c}, {&(0x7f0000003440)="7ca0477e2293d23cc2aeb1cbf5b7fd2b1b6452d3b0d7b96fcb768ceba16544e7b75b88f51a9e1376692a0c0ccdb4b62cbbd9acfaa0c94bf27bab584453a6040cf84f51c6ad5d3275704bd1475c3e32e6b77432a7d2d5b1a8cd3810b6c65e010dbbec7d1338c448f8b913326a3c9c4d13325bce310c7a75a4f79870fe6219ce3861aeda160bcdc8504ad9f0ee3b6ed09d05e995", 0x93}, {&(0x7f0000003500)="76c540eedcd8ac011699687a3635128ea4e7394cbf2dc2d4b00f81b3f34c0abde06443ebdd1f2ae5cf2d64e1a6c6722ca19d406246cd609cab67b4f76d6f3ea9f3d56477dfa107f92da747a41b45ef5c27437a2f6a9424a0f84ef57c0926c955ee4bbc40b939ebef44c59b5f11d2526cdc423f997b899b91585665a9459928b8b01bfcc3c3a8a79ad5c8b9223b9ed2a44e731bc993b6e6f99cff387b685eddb36d0fbd517b5956c815579b28fafe99dbb2c87ab8d4fa565a716f15c3c9e6d64140a757a66d2af72f620cddc147c17418ec596e0e61e237394efee57bcf419656f2fd489e0f", 0xe5}], 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf250300000008000300", @ANYRES32=r5, @ANYBLOB="0500370011000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) 6.991135243s ago: executing program 3 (id=2916): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="fcffffff0000000000000000000000544412648f65090b6353e6bf770000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) close(r0) r3 = socket$packet(0x11, 0x3, 0x300) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000380)="8b99cf", 0x3}], 0x1) ppoll(&(0x7f0000000080)=[{r1, 0x1200}, {r0}], 0x2, &(0x7f00000000c0), &(0x7f0000000100)={[0x5]}, 0x8) 6.702172779s ago: executing program 3 (id=3051): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1, &(0x7f0000000640)=[@rights={{0x10}}], 0x10}, 0x120) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000200fffc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) getsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, &(0x7f00000001c0)) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2404c840) 4.659660038s ago: executing program 0 (id=3066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x2d, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0xc6e9f000) r5 = socket(0x10, 0x80003, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="14f4ff001a004f7fb3e43d2024d2f1c9fb470000", 0x14) recvmmsg(r6, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}], 0x3, 0x10122, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x49, 0x4c0, 0x2}}], 0x20, 0x24048082}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'sit0\x00'}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5000004, 0x6e073, r4, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x11d, 0x1b, 0x0, &(0x7f00000021c0)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x7, 0x1000002, 0x1, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}]}, 0x34}}, 0x40800) ioctl$NILFS_IOCTL_GET_CPSTAT(r6, 0x80186e83, &(0x7f0000000140)) 3.747555136s ago: executing program 0 (id=3069): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @initdev}, &(0x7f0000000040)=0xc) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0], 0x32600) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a0100, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x1000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x1, &(0x7f0000000200)=@raw=[@ldst={0x0, 0x0, 0x4, 0x0, 0x0, 0x10}], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', r0, 0x25, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000380)={r4, &(0x7f00000000c0)='GPL\x00', 0x90002, &(0x7f0000000140)={@_ha_fsid={[0x8554, 0x8]}, {0x6, 0xa0, 0x10000}}, 0xffff, &(0x7f0000000180), &(0x7f0000000240)=0xfe0}) 3.56427091s ago: executing program 0 (id=3070): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x2004001) 3.440503644s ago: executing program 0 (id=3071): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32], 0x48) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1a, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0xfe, 0x0, 0x4}, {0x6, 0x1}]}) write(r5, 0x0, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r6, &(0x7f00000005c0), 0x10000000000003c6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) 3.101096878s ago: executing program 2 (id=3074): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xfc, 0x40}]}, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket(0x10, 0x803, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0x8, 0x401}, 0x14}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000440)='@\n', 0x2}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000080)="94", 0x1}], 0x1}}], 0x2, 0x8000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) 3.047573752s ago: executing program 1 (id=3075): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x200, &(0x7f00000000c0)={@align=0x100000000, {0x9, 0x2, 0xc, 0x7}}, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x200, &(0x7f00000000c0)={@align=0x100000000, {0x9, 0x2, 0xc, 0x7}}, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8}) select(0xe, 0x0, 0x0, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000500170001000000060018"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000880) r5 = socket$inet6(0xa, 0x3, 0x7) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000600)={0x6c, 0x11, '\x00', [@hao={0xc9, 0x10, @remote}, @padn, @enc_lim={0x4, 0x1, 0xc8}, @generic={0x81, 0x72, "76f341cbbd8d1c1bfdc464409364ec841068e86d0741596e2979221c907ff63c72126de593d08792bdc4a14bbc9a9bfe2452545f650ba5ce1650fa3f62d5a5fbc77fb641154bd6736ffe68dfe1d913b93fe04111066612cc0264565dfafc406ebbd84c5b0f37dce64a87b019fb8097ea9101"}, @ra={0x5, 0x2, 0x8000}]}, 0x98) (async) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000600)={0x6c, 0x11, '\x00', [@hao={0xc9, 0x10, @remote}, @padn, @enc_lim={0x4, 0x1, 0xc8}, @generic={0x81, 0x72, "76f341cbbd8d1c1bfdc464409364ec841068e86d0741596e2979221c907ff63c72126de593d08792bdc4a14bbc9a9bfe2452545f650ba5ce1650fa3f62d5a5fbc77fb641154bd6736ffe68dfe1d913b93fe04111066612cc0264565dfafc406ebbd84c5b0f37dce64a87b019fb8097ea9101"}, @ra={0x5, 0x2, 0x8000}]}, 0x98) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x29}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000500)="05804ab38284c7d5a5b66406d704", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r5, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) (async) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) sendmsg$NFT_BATCH(r1, &(0x7f0000008740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xf127f9a945f0cf31}, 0xc, &(0x7f0000008700)={&(0x7f000000c900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x2e, 0x7, 0x1, 0x0, "f7150d48b2112fcbed44686aabf1dd9412602427587e41bb80dd06ad1af69d57d7db73b09cb0a7fc222a"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_DELSET={0xdc, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_USERDATA={0x51, 0xd, 0x1, 0x0, "fc82ac4c662daa1182a9583caf6702dd31869c1b607ada6263306dbdbf28ea4a2c15d4f06355b6005d4dd4be91c07615c35e2f761a1e070e62e6e788b5ccee4ba673dc0e6632110a7cc4ae6af1"}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELCHAIN={0x130, 0x5, 0xa, 0xf01, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x63, 0xc, "7013251531d30d597ecb6637aa46d4fee5adbe629402e4fbd1268d417e9833eaeca478c1fd6239e2cf7299558e34cd0ed83897b700711590a9e672288dd2805f5494d412b4eff37b8dfe7fe126279de784f3d9f4f0a1a2a3ef14f874e1fa7f"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x83, 0xc, "1cf594f0c0ec0ee5c0246e38d3c581720798c3ddae4076ce59b8849de53886da1288a21e90731b5dc29822bb18fc9dab1ba4d8c4a0c01e978a6d086791be8a5995e0feea7985effd1462de749e7e828af55f3228bac2a2d7e7a258dd361cb7c94dda80156369091f890d617c2037d8925de6f413b99d02c611e72e66966e56"}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf}]}]}, @NFT_MSG_DELSETELEM={0x3f04, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3ec4, 0x3, 0x0, 0x1, [{0x4}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xba}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x40c4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x5d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xe1, 0x1, "9104d4203bb9f6293796a19665beee73027c595cf48dece47646d49f85b618965b53162c92998253b48f410488d96b67aff123d5bd568a354770b483690e4fdfb8cb49254a58cf2ba3c06b04a334d9321e996f0845c75732c793cb3ef7e3d5f173891db168f879beb05153fda98637e9cef69198986cfa2e47b9c914790aacadab91a86163d74539c711e3cb8054d558dbb73e7bb4ac84f3c22ef38b114371e7d86ed94792f7d3fd709bd12d6c3c89b855e28e7be5278d418ceb739c54d72bd17af9d1585165f8f6fe695be9e5efceeb28cf2c2b46a439574a282d94de"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_KEY_END={0x170, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x13, 0x1, "a09702ea9d03018941ef7c30e04ba8"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VALUE={0xcd, 0x1, "263214ede79c76acca1719149d414dc21137bb935812f4204e258138c378bc446dff31ae758b71c9767f92f9ea69785fb402c8d22c7d4417d29948efff7373bcff5f03a86491d1e0e925edd6347c40147c7160cd1e1a2d7bec3d05e504804de500f3094f8fdb39e28ee93b2f963c4ab8b1365528eda90be26421f84c8d63e6765cd82bbe4417f665b20e8b1d09fe53b8a83b4e34ba3a392259a5265242a7503e3c8f3ea99117d633b625efa7ec6c940bb74ee427e057d813433268a98e080190a397d528437c70bb6a"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x2bc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xe3, 0x1, "e32e155ffdc63325cb42347554a4e12a0fc6ef3f6560c2481b2492a497ae3634ae13e956ae92f2bc4a1f712f93e17787dc83bcbeb665298fce46f5f7196ede5aa866cff6de62b102735f97a4bfc17d1172d892202ce077ce0611bf9acf46e925cd631ea38e860efe187bdf64ab7701fc746d0f2aec48225f52077ccd4694a95900080120dbdb116b750eb5675cec54bcafee61a031d91efd93a8fb2dd39b779e4d3a8528570aab75919219be707bde0bef553d8bd2c585eeb789eecf0107873bd50c5fd528f71db50d974404726e35b2a03555aabe1c001f89b1622d5c14a3"}, @NFTA_DATA_VALUE={0xd6, 0x1, "bba59fa383bbf714e36e79a65a3e3e8b041e7a6bdff6904c4bd000cc37ba85b1c3e76779543e60c12f3e680616420347993cdfefe35b481296f2a43c478182977754e29641a5cb670f6b7ba1ae4498cb3a04bb33c9b16a19fc59d73bdf4c8feb34aa4061688fe5f68ce29b59076a775b6f3491ec994c6dd83c02918de4395f3f470df3ba4416a59f5093cf26c06d6d3269bff18d02b70efbe8c1b9adaac33818955405c37400c95ba97b1fb6d934c064f3d1771e839ad3705b3f0d65ea3d955a6c12405639ce4d6f7bebb6dadc792eb96fe1"}, @NFTA_DATA_VALUE={0xaf, 0x1, "dc10eac23d39646b2a9e9831e9f1975e090818de6ce28818a568d920942aef505da29d5972b26816fc98f213d5882ba5f2298a14625fd84793d8c362f1e4963d1ce825b330a3c2d4fe8bc71d935cec270a7c55e8bbbbb69061b78db4682d9360f3fa99bc07627e387c3a34247d13aed24917ee26c26bf08db6461281e3d08532a3ce96ad2caea97a106dcdd68ae4b05099daee6d59af61fd7a61b7aa359a1c63956bc6c96f67683d8f9400"}]}]}, {0x448, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_KEY={0x14, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x3b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfd, 0x1, "5a0c1c2d37acd88457d26826ad8e8af0a0aeb7372b07630921e08dbe632a10dde8d6fb86dca41a528bba12e44135fa2c9a0f035cc61c9176c49a8ab6e3f20969567baf55111c28d77af1bb768759ec43500b635ef3ae4551624890e4aeae16c525f96da00195a59bce12b2219a389bc3e686ab70c375386a0b851b3eac3255e9953ddae468a11d74f0eb6b39ad998bd8accc1b31fc2099a62527de6124e4e1da0ce9965b4ca1fe72dc0c73ae017a6f83e32f692037035da259d900bc1615e5266abd194fbdbe5126f027a7e25604e059d4c2684b47494aaa7d89f954ae4881868bdb9e61a51ad55d2bf0fd2b8257a7e3de23220096987ffb96"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xf0, 0x1, "004dcc6a5d62d184f6b8db79d3180150c6d0a593ad3f373960a86c08b9423b78768261e1de6ec2dc7296423a7cf64e463bba793f8aab2b3caf9301f6de3c694ff28464c5ca8d725d27670a3a424cf38b54fe529fd122f3c3d2b7e4b973b9e42138b7032deaf6cf0f002cbc26f701f710e09fcc92583abb17577b04edc434b9fcaad678bbbe174e41acde4345170e4a736b0bd790a367d8977fc9f82d5c0a8a8597a3f09994a9c1e025df07d0bab04de4caad9eb369c308a87a78e388dc3f5a4fcd97764833c63f8c6dc8673908f1cc786aec65d4457e0d93be2c413d0674070aa65dbc7edb03b52b1693cce5"}, @NFTA_DATA_VALUE={0xed, 0x1, "044a0334d399f36f0d56d6c56318f6bdb91f65bbfe185fc6be9dca796df463c5e857204154daee4d348acee534292841c1600a3599247cb1b3d066adf181c9d8cbf2c58c1dd9a1978fb0db7e8bf4e209cc2c6125e3c6009619ac67a1b2a2b9fd09800376c0c847bca4e51fabed100045eabdd97ebc7e9c7e83ffea6fda7ec85edfe28f0fdbb1e90d15528244a3f583bdab3f415ab52a9b3aab6e0dfc38179f04b07877d52c3368169b5d95d4cc9b9a5c337f73f96cb9f1538b6178a354d42f152ce9ed42f24367b0baa6315fca2241f69d9bdfeb1aaf8b589b068872d7da4a64b7cd93e44a0582ca31"}, @NFTA_DATA_VALUE={0x44, 0x1, "e473cc87b6f3c68eba3f5c551c6d6d90d677c7fe960548797b3445f85a75f1e4e93fa53db46a75c854f2b7c2b8e0159833860a8cb60f7469c52f1b10a22b4060"}]}, @NFTA_SET_ELEM_KEY_END={0x20, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY_END={0x48, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1682000}]}, {0x30ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x70, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x57, 0x1, "9a7251dea9895f219aedfc04a266bd3e70d60cfe1b5dc58d8c334217e0bc52f26f23d7b2a72870abc20e89f5d69a03722b8f455f3b426f82b0c22075e5e126f7e3c50f4830f76b860018741634604e728f87e8"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x54, 0x7, 0x0, 0x1, @redir={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x3018, 0xb, 0x0, 0x1, [{0x2fac, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2f9c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_MASK={0x12c4, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x90, 0x1, "c59eadd6fd535c745a0e86613b984a11158e0e7f22a51cfd9305e23498e710a01940c61ae8603fbbb3d1193c6a5d4e6304dedbe1277d4dc06881363b1e7c9483f5e73c88b36641cef7521364dc109e1ad1c5476ef2ac2f27d25b7aa09112ff246f697e92aea24952599c851098ba68218550ed535486c8994d7d99e14f0fd43be4b1eb06d515771fe68a4e03"}, @NFTA_DATA_VALUE={0x92, 0x1, "74ba96eeca888d4e17b427d634c23f070caace4b49af07cafc77b9ab0305ce6fe3ce08e2a29283b6f6604d074a05704b8f17430065e6491a1dc89fbca4aa5f8af906651c79fd610b2a5ded66e95e0bc4040f4ef2d854acdfedc9fe69b1311a3d6f98e5f24a04e3022a24f9420b194ef4e3d5a1700f1c871be2433fa7f75c013215ebb5de4f57b0ed05cf95028dce"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}]}, @NFTA_BITWISE_XOR={0x384, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "f5408818fe5b7597fd6b44a46251918482b826c9ed33d51c95c54dd6d5479afa07f89b1db5dede6506bdd19c8a0fd6a5630807ce802ef41ba84e664e0ad9119722e493f13caab9fef4b406a68adf6ebc0e6d54d1e039efa8d2687133188127ce0e145957822245bc16ba2b8b23575e8e09341cbd1434ba7e00f95df7b84efb657acc2a41b50e213d1e802e19dda2a293770577b49d85dbf9b0efcedc4568def1556f959e2eedfed135db15c626c2291f9cbdd3884e214847fda761de0164f2c24bb504787aafe48bc98af5e3151e9751023a2b352f2931fdbf6db243d33b679a90b63dfc815735"}, @NFTA_DATA_VALUE={0x9a, 0x1, "0ee29e3e4c40f43d74e6d636c0fe9b9aa927be0928a4b5208c70d7f0aa78697058bcaf8dfd6b5d70638096694b693837cf2aacbba50170b321dc0dadbc2e41afe58c5659d52d34e3bf90f5d0ef34400c14d0a809eb0329ea739869097b0f3e1b8fbd3539719aaf1ed346c0f2881cd9ee8ae49cc8d616578c56ae618c9659e0a59aea6987dd9a2ac85d414890ba8b911ecfbeaf6f1712"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x8c, 0x1, "fbef6499ec61b41c01a4a50936c75404227e8b7391531124d178b6bfca53770854fe9f27fcfe5af8815605da2fd1a82c3d31576ba000a8641e8c8ac4318c111614999bf0db1a7d387d947a8e40df07cc2b72ad18855aa16a3025344731f651c8e8823d0ac67ca61462d0c925af41f0fe5011642b37878137a0392357459dbbbc0e4276b276c18998"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xdf, 0x1, "8e7916738f6009d8aa925730c8e444c685a78d148e5249a64e101fef1790cafb67766b6e9ce0784b37de5b0c3928dddfee981c55dc8971f8872c671a757b8318112236742a9e83dc9f641551a1dc9d55f904a3996d016fe1e327f13f12d049eb9ae0199dcb7d1d3be4cf87a91aca9d028290afa99030f3a221a57823130318544e26702635aceb9d2b0650ac62ae9139fcf322db08920d3dcfc35723c165edc954df72e8d6cb207c570670e38849a700e5aedc8aa877cf6d54db3ca2c410111301be072b14cbf103b0e11efafc8b2ad48e956f644e562cca0c565e"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0x180, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x67, 0x1, "29719d7e0dbaa0cf06bc74a0cf294ccdd52d15cf2faf05e28173774d63ab5204fe73fdd2aec1e9e3877746d05cdf8733af79bbd084e83ae84c59d85ab5f208893e5b8fe86249d57188e4f48643292eea5477b933caf8af65765c56f687fad228c1f3db"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x54, 0x1, "07b8c70150f8455994069e91e0e7299b7725b81ccbe8c6e676f31d7bb1fef13a8e24d6d18dda1abbffe3706dfc3f5b2f4fd542a013d51cc5afbbcd1e2d199c8f761a6bb396629ad6fb6eb125adc08f79"}, @NFTA_DATA_VALUE={0x22, 0x1, "039f52bf5c6b6ea3bab0d8be4bd52838f2758d9dd4068ff241082914b93d"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffa}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_BITWISE_XOR={0x454, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x79, 0x1, "eac6821ff9f9e463c0983669b34303b2d8ed025b18bbd790a76780366b4aafa20415e620535e47a4236911390ac8b04ce6d36ed97b4a20b0165ed6716a2de3393d747cd181f566230380883af4cfc0cf1663dc512c0457d9a4fab1b2e16944fbf1b04231b7521a3d157845b6f926014f8f6cafb443"}, @NFTA_DATA_VALUE={0xf7, 0x1, "f478d4b0d8e6a81fa1eadcb319bbc4c5e72263083433ab4b5f47dc2ba3da195d6f321b1c328b020117e2b7f0bf0836e0c145cce0b9657c8f712750941e9b90c3a26cd6859d7a473d9ca8333603b75e0270b918db2f2f7071b28c8ea573a7d613bf931d0beabb0193a672f3126c1dd69e2fca727e5ad16cd19617dda4e3ad9f02d01bcde65ad9d5301f1f5828c20ca6dc73ff6b80f01f3be2bf6df075792ea6bdd2f1c0c3e28cb5c1f864127aafb8c786bdeb7936a46a8b21b98960f2541608187d50a50e884bc6f6bf2a8302e8b167561bcbff3482ca1d5ca56cf91b1f40ce684e206ac2dd4ac862cd8bba282eab31d4cb6ee1"}, @NFTA_DATA_VALUE={0xa2, 0x1, "6106275ddd294d617ba8e2cf6dbd864b43bab60b74dc9b8eca744262fe9468af1a448b53300de3c986752365a0a14f050f209b767802514fe4c0b9f1381af542200bcbaafc921b3cd191ac6b4a1fc4a0e8130738a22bba41267ab0d75ec70cb1e1a1efa4ae816cb1e2ff84f823afa9b4419c30842fb3debc3e479a524a03dd8d23912c200111463dfab4a84ce46012aeb2e9158a534b0e6458e7996dad92"}, @NFTA_DATA_VALUE={0xab, 0x1, "3c4ab07c935d160827e97a178d86e2598464fb7f4df3197ba0c19fd0164bec271ffd3d81821280a9c69b2ca20876869784be62f288e91cf4c45ff8baee19e0b3b45752bc6195741f484d3d569f515cdbb776381c92231d9aca4d237b89634bd0962c6840161d8351ca4f0f43fca9ab4bc6ee63572a2bf5c8a3dc970195646acc6a4a4e05bcaead7fd77b65eaa481688ed3b847d799474439c87cf37c0a67f93f712ab533b929bb"}, @NFTA_DATA_VALUE={0x98, 0x1, "3a48e12242481562d3e03bd7f9d3083c89d34e7196203315d753967f7d68f78d94bbaa6974688f15eb33b8a36f0ef0916c3f0b9d8d2311d85a7926554b1abf4413503456e2d38b09da6e0ec973d239fe4707b01a17ee7a3ade8413b4eb2f9f2045566b063fba6a956f8d4679989b06a533f98a2f97238e9d58ddd57c346711c328b80afebe2c07f4016c511598314380ad593337"}, @NFTA_DATA_VALUE={0x48, 0x1, "f5caf47f181316dced5991ca5127e286945a2b0dab4714ca8a81754829dd5606a94f8c45888e041204971ce953b94cc2eedceb0998a3effec153df6cb3fc39b4408f9a9b"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_BITWISE_XOR={0x122c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "0fe904ec73f19d691967b0f6234ddda2d6b7283d0e5462d537ab27d95ac18ba2ef49b91b44fb27bb9d4d50b22846e42c9537ad7f45ebe76459dcf288c1e18e6ac7"}, @NFTA_DATA_VALUE={0x62, 0x1, "af3eebad7ed4439a312a6d4fee7df5961cf7d2a76aee5c5cd37b2b3201d49e6c663af68989088e110e2a86827fb5d2f59d192d78a088548adb654b0273867cc7b079107ac5db8ac023409b581f95589a8c5ff6efdc25a6d4e282022cd1d9"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xfa, 0x1, "466c4e6dfc4eaeed62e676123ed8e804f02a39e9977355bc7b11d7bb07a2e2b997177482bfc5ca6c81ef93c10cb4b26a3dd20ba8db9eeceb191584904374dc900cff998c9c012d23ebe45561454a368087b1279635de355ff1e54f4b9c84d909ba06f483263241bc57a50ba4452999171e9145139de7030588e596cc0aac59826fc84b42f027e6e5b7b9a403926529f1ea559cf207d85e45564891f096ac70d5feb3ad038f794f508f5f7b4f754bc41ea3a464c78c8eef3bb4ea478d208579815ce52bb4d924bac4e014c88a174fe3769a360348f7fbf5a77a48bcc28d4fd6ac193e6135711525a3dba8f2c329a27b7d830a1b8fe892"}]}, @NFTA_BITWISE_MASK={0x138, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe7, 0x1, "d3e59948747453f556dc86759ca3058d526ad96b7c21b2268a126bd32d5e1eece86adf417d37a9cbf1096e353997f04da3c225097a289603b0174f38d3181f9454a4ab058537fd138cc32c9d34b824b90f5f8ffb5fb98f79d5a15488d4bc806cec2f9422876455657260db58e0ab234ed56fb88b1eb306d288445608dcceb9874892dd7bd93e8a4aed83b843dec0e3592b842b64c7ac51a833c17a6779a4e81be8a701c88aa151d75abf943bff310c8ca331ed98ca99740e4373b485ec0492d9358620bf987e18a4135657045cec3349614eb3ef66d2561f43a1006990d809633e8ebe"}, @NFTA_DATA_VALUE={0x2c, 0x1, "3c4c1f031dbb7aed8cd9f4dde7ab8229f2f6c160a3d3ded04c7038a186709577f1e2c1ad8a1759f6"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x58, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000000000000000}]}, {0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xac4b}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}, {0x220, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x99f3}, @NFTA_SET_ELEM_KEY={0x1ec, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "d98b6bb6fcc4fc464ee8f480f3233fc441398680c109068627f5bed13eaead0b7b9daa0601f920385e791cd22754d22a9d64bfa11689e6edb83cba7eb2fe544617587bfe6457717d40814eb2340a6e556e78494b389a2ab14c45c4e7a26ae93e47a966f191f7bb66530da33da75218f9479c3c3c3ab741536a12b63702746caf7130808eca299849ef5e8c5070c395596f989d9feaa3bc4814487f31f8d0e89d7c16b8b8f8754cd9b8fbe42d14"}, @NFTA_DATA_VALUE={0x58, 0x1, "876c1d03f5db3b00b4d9ce37ce4d6949f42e14c6a609f2bb2d395258e80525a97263ab11064c6bc888d7a85d25e4d632589d605cce02975554b7818db52dc80cee90df19a924b98b33ff8039d607751a1bb0b608"}, @NFTA_DATA_VALUE={0xb4, 0x1, "7babdbb8651d5c23782cc09eeeb873461f43af90242c3ea2ee9bf11e5df453d8024ba73715e129e4e1f709ca94a0c22f406adc17b0e5e6f935646dded356a236911e58693b76c4216b1a0f843dbc2e1338684db0690ded8a1270763b5c090b1b09fe6c01a6a9978828055d28669fbc10a0e2f015b7c52d578efb6fca75102f9f44faebf6e9741768c95275844b3c9162d8fec4406d1c4863c999e1c95aea80895e0d2ec4dfe80116f2fd5754b8571742"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x41f0}, 0x1, 0x0, 0x0, 0x1}, 0x88c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x28b, 0x0, 0x0, 0x0, 0xb6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001380)=""/4097, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) 2.719563876s ago: executing program 2 (id=3076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="140000000000"], 0x18}, 0x800) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) recvmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000400)=0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x318, 0xffffffff, 0xffffffff, 0x318, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_team\x00', 'gretap0\x00', {}, {}, 0x29, 0x7, 0x4, 0x6}, 0x0, 0x1e0, 0x208, 0x60030000, {0x0, 0xff000000}, [@common=@rt={{0x138}, {0x6, [0x1, 0x9460], 0x203, 0x2, 0x4, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @empty, @local, @dev={0xfe, 0x80, '\x00', 0x13}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1], 0x3}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfff9, 0xe31}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x0, 0x8, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_emit_ethernet(0x85, &(0x7f0000000080)={@local, @local, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x4}}, {@mpls_uc={0x8847, {[], @llc={@llc={0x1, 0x7e, "4dc1", "2eca9ac4df20c1f976f51ed36ef15ac168ef22c4a081f4914174c704deecb64704ded09c53bd4e46b3805f1f74cc604c3b0863af9b0313a69fe139336c8f3213b7228028a7db11e74edd51ed2db01b094ecab81da555513cb9aad92569546383da7252bf19348756996ad5"}}}}}}, &(0x7f0000000140)={0x0, 0x3, [0xcdc, 0x941, 0x177, 0x535]}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x30, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01800000000000000000030202000900010053"], 0x20}, 0x1, 0x40030000000000, 0x0, 0x20000400}, 0x0) 2.611297057s ago: executing program 2 (id=3077): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x0, 0xfe}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900dd00000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ifreq(r3, 0x8920, &(0x7f0000000180)={'netdevsim0\x00', @ifru_settings={0x1000, 0x216, @fr_pvc_info=0x0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="1807000000000008000000000080001085100000030000009500007b0000000085000000812cc9130000009500000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x50}, 0x94) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)="9d827cb13031dc42ee8eaa478d6579e8090000000000001f45e025dafed20f2b4fa8c2e223b445764ca4a6274f4be8019a194ef5569e", 0xfffffece, 0x20008040, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c0002800800014057f9c185c319479157ebf760116dce67846fbfe9593f4ffd6dc1bc8d0a435ad324b6178ea4"], 0x44}, 0x1, 0x0, 0x0, 0x10004056}, 0x4000050) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') unshare(0x6a040000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000000ac0)={0x0, 0x95, 0x9, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1.520550176s ago: executing program 3 (id=3078): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 1.423905996s ago: executing program 3 (id=3079): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x400}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000014) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000040)='{+.#.\xa8\x00', 0x2000, &(0x7f0000000080)={@_ha_fsid={[0xfffffff2, 0x9]}, {0x9, 0x7f, 0x1, 0x1000}}, 0x1ff, &(0x7f00000000c0), &(0x7f0000000100)=0x10001}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff05000700008d9c18ed0f6fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x1405, 0x400, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c050}, 0x4004001) 1.351436762s ago: executing program 1 (id=3080): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f6669736829"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x0) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)="500b570fc980bb95a72f3c5647da5c85ebbf0dceeff6b1665d53d4310e2d4f4894aa1940aed0a0e82ef5805a316a765cc0b4e8e51f95633f6a8b76d1cf911ff937160ad2b7ca6b3c138d47ef3716eb6c3e9c72cf5ccdbe25b4b146ff3b3e31ea238632c3cf0122a160b979d726bf44d8d0fb70", 0x73}, {&(0x7f0000000340)="c8075843864ca0eb2ffe2decab114471786a29e4cfcf15431fc3ac9e66a5dcbc9944158e2574475f428af045d299787bd5b0bc0a4e5011d15ba0ce882ffe4cea36c55208f2c59aeb1385f29b39154b881879f2b8a1ff90b582c36739fb682d7ed05daf79def2ec848e62884a6334965fa3b5f700bb5669fafb0e1c5e9cc70dec9bec4e281177ed729e17e08f6dbc01b96ba98419fa2989f16fa1b7dbef247d7b1bc065ed65d8b5f7ce64d082d3e4953c4a3b017d20334b8874b9b08e610434d6080458d351257d", 0xc7}, {&(0x7f0000000440)="8e702ab02c109aa5fc4b9ae599d1b1c108e05788835149dd597de31bbf9d4c528d34528f1b9c195b8686767afb35d307f89e5cc0e203a1867fd2050ff26534e781cfe2fa4ad8c035138693f826365fbdcebe52459c76a1bace8f97e64dbafdd3f831fe9237721a20e812e3470c1a560aafbc277f0549", 0x76}], 0x3, &(0x7f00000010c0)=ANY=[@ANYBLOB="1100000000000000000000000100000002000000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="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"/428], 0x1d8}, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r7, &(0x7f0000001080)={&(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000d00)=""/188, 0xbc}, {&(0x7f0000000dc0)=""/196, 0xc4}, {&(0x7f0000000ec0)=""/218, 0xda}, {&(0x7f0000000fc0)=""/26, 0x1a}], 0x5, 0x0, 0x0, 0x8800}, 0x4000800) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x1, 0x7}}}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r12, 0x2, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x8000, 0x0, 0x96d}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000c80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r12, 0x300, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x50}}, 0x0) 1.179953827s ago: executing program 3 (id=3081): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'bond_slave_1\x00', 0x2000}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) connect$llc(r4, &(0x7f00000000c0)={0x1a, 0x321, 0x40, 0x6, 0x81, 0x3, @random="3050e9ae9a3c"}, 0x10) unshare(0x2a060400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000140)=[{r0, 0x4000}], 0x1, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1802ffffffff000000000000950004690000000000000000"], 0x0, 0x5}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000a0000000400000004000400f933148066cba299cdfa293fd25fa4971913b1966e6b27f7a7efebf2d0b045372c354b72d59ec18f60828d000000000000"], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 891.408625ms ago: executing program 1 (id=3082): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c0000300004802c0d"], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf253b00000008000300", @ANYRES32, @ANYBLOB="620033008000df00ffffffffffff08021100000008021100000000000000000000000000090088000406029702000602050005030201ff250300b9042a010372060303030303037107000201010203497606066f1400ff07dd"], 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r7, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x40044) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000010000100fffffff5000000000500000a2c000000200a05000000000000000000020001000c0005400000de4daf9d00020900010073797a30"], 0x54}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 504.518232ms ago: executing program 1 (id=3083): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000000600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@var={0x6, 0x0, 0x0, 0xe, 0x4, 0x1}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x5f, 0x2e, 0x0, 0x0, 0x2e]}}, &(0x7f0000000140)=""/59, 0x3b, 0x3b, 0x0, 0x9, 0x10000}, 0x28) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000340)={r1, &(0x7f0000000240)='GPL\x00', 0x400, &(0x7f0000000280)={@_ha_fsid={[0x2, 0x9]}, {0x80, 0x9, 0xffffffff, 0x40}}, 0x620, &(0x7f00000002c0), &(0x7f0000000300)=0xda}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x8, 0xa5, 0x9, 0x10000, 0x1, 0x7, '\x00', r2, r3, 0x0, 0x4, 0x1, 0x0, @void, @value, @value=r4}, 0x50) 491.034954ms ago: executing program 2 (id=3084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000400), 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001040)=ANY=[@ANYBLOB="fc0500004600070128bd7000fcdbdf25017c0000e80504"], 0x5fc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000040)="b2b6227d1ab6d4a798c7d03769569e402de906adda65126aad8e1c", 0x1b}, {&(0x7f0000000200)="f7d8f0dace8a4ac17b54ceb7052b17bfe6667918688abdbd9c0fe9742ea09a4bbe557334a0c7898f4ee23d5f031f6096287201a540a5ec6ffdd38a1899c87307462b865d1504526e9844e8cbd070b79a2391b8216ee91516272c66629b11b4f479581736ec155fc2f747850678efb4000da5bc8ae316e16becc01ee820b8ed1f806476d7", 0x84}, {&(0x7f00000002c0)="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", 0xff}, {&(0x7f0000000440)="5f90ccbaa95b5a55bd33a40e0930166b6826e804486d9c138fe57ee79e13c8022975b2cd734221c566c504e834d9f556f157b51f5c88294c520d176dea2f1477daa316a53a56db2054d2e430f4e5bf0cf81ec64a1f22d6e3a69884c4cacf95f172a1a11ba7fe412ab1a4870db44ca6051ad1573d569ffe4c0852977021a16bd0e82eeb12acfc7b6e46939094b531c3827697a4b780a0f6c66bc5e28d62485513639ef4a304506370cd99da0522cdaf7d7d391411e93524cdcd5526a339149770", 0xc0}, {&(0x7f0000000500)="1709cef291b6e8484233ae715b042aee689ee6977e8c05121b9a6d2f9705837de8c52de1523fd20e784cd8ff0e840d980156fb1969eb34b40acf6e1adece88373b52335672ca388394553ed8674a7729942eb1a286dc1a48a96077c95b5333f658bce3912eccb15467fdb43bf4698b10c48168bc7add9db21948f6d03cdcf8cfa5d35c95ce08dcf12d4f561cd596c3c3ce935ad73f962bdfd63021318f59694ef1581fff7a17195b80b818229253222e392aa0a08bd8bd0414420377ea6bc28c001e28ca5bfaaf858502e0", 0xcb}, {&(0x7f0000000800)="b9ad8fa63a57df0422cf0f2c61a8c6956232ffe7613a63a256c4a01c727c5411bcf64e90e5e84677a79d4c82449caac0e8a11172503100327057e97aaf263d4c2390083a2471b39dbd5f08d6597efda2c41839e3734ee438aac18357c9af12e54cfd3b60c3567e7e95ad0d01027a8a88f120177b0816b96d115312cd982f3dd9ae28af8ea2bb56b45f91ccf34795743ad4b28b34d44ccccb6e6af45da3ae95d311e16453a7a94bd3ba406ecbfd4fd45ec948c01f96dfbc8f20e391e54587f971f8ea6cd3d3f845c03952c9e1798be5800e6c38363c05b693b8462e51153a99dbf495467b98da00"/241, 0xf1}, {&(0x7f0000000700)="627d6d2aedb094733b3ae907468c99b5416e975ff4338f609501f993801b4c0706f0a27c4b660751dda639ee375a694220e1e88847741d69121c70b51658c830e45ee8e6825bacb1e853c3f5ec6ea0e55cac5221bd45e1fb261a8e70b164eef5b2d79d4cd2", 0x65}], 0x7) listen(r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c0000300004802c0d"], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) 376.10144ms ago: executing program 1 (id=3085): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ffffffe}, [@jmp={0x7, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @local, 0xfffffffd}, 0x1c, 0x0, 0xffffffffffffff8d, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000290000003e0000000a0000000000000014000000000000fdbd71331a965c8cd899b2e40029000000"], 0x30}, 0x40c0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x3, 0x8, 0x1, 0xf0cf, 0x6, 0x7, 0x4, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x2}, &(0x7f0000000100)=0x8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r2, 0x0, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000)=0xf, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x488, 0xffffffff, 0x0, 0x0, 0x160, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x11, 0x2, 0x8, 0x4, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0x0, 0xffffffff, 0xff000000], [0xffffffff, 0xffffff00, 0xffffff00], [0xffffff00, 0xff, 0x7f, 0xff000000], 0x418, 0x420}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffffff00], 'veth0_to_batadv\x00', 'pimreg1\x00', {}, {0xff}, 0x1d, 0x5, 0x1, 0x34}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x1d, 0x9, 0x2, 0x10, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0x0, 0x0, 0xff000000, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xff], [0xff, 0x8000007f, 0xff, 0xff000000], 0x2080}}, @common=@icmp6={{0x28}, {0xb, 'O\x00', 0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8e7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x6}, {0x0, 0x5, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 345.215891ms ago: executing program 1 (id=3086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100280088476e74dd16002c0600fe8000000000000000000000000000bb000000000000000000000000000000010000000000000000000000000000000200004e2400004e240000000300ea0003000000030000000200000002"], 0x66) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, 0x0, 0x0, 0x0) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@delqdisc={0x34, 0x25, 0x10, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x4, 0x4}, {0xffff, 0xe}, {0x1, 0x6}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6e}]}, 0x34}, 0x1, 0x0, 0x0, 0x30000013}, 0x0) socket$netlink(0x10, 0x3, 0x10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, 0x0, 0x40) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0xfff1, 0xb}, {0xa, 0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x2, 0x80000000}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010044}, 0x4000) 334.78837ms ago: executing program 0 (id=3087): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0xf) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x49801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x40}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 198.53612ms ago: executing program 0 (id=3088): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x24, 0x2c, 0x107, 0x70bd2c, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="a2447ea5"]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0xc010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1], &(0x7f0000000700), 0x200000000000, 0x1}}, 0x40) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r10, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f00000004c0)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004500090000000000000100f102000000080002"], 0x1c}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x30, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r4, r3, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfa, {0x2}}, 0x14}}, 0x8000) 194.557796ms ago: executing program 2 (id=3089): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001d90000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) (async) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) setsockopt$inet_opts(r2, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) sendmmsg$inet6(r1, &(0x7f0000003d00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)="fb", 0x1}], 0x1}}], 0x2, 0x20080058) 0s ago: executing program 2 (id=3090): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000240000000400000002"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0xe80, 0x60, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) readv(r5, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000002c0)={r0, r3}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001940)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002f00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffa7ffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000002f842867e39a3b0374ba2b2a3ccdc5a023ec95c1e2f52761e34888bf3e5498799c24117852", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x10, 0x1, 0xfffffffc}, 0x50) r8 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@empty, @initdev, 0x0}, &(0x7f0000000080)=0xc) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000046050000000000000000000008000000005f2e2e30305f00"], &(0x7f0000000180)=""/96, 0x20, 0x60, 0x0, 0xa1b5}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x9, 0x1ff, 0x0, r7, 0x3, '\x00', r10, r11, 0x1, 0x3, 0x4, 0x1}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[], 0x64}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r0, 0x600}, 0x20) syz_emit_ethernet(0xaf, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x79, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x1, "fe906d26efe393"}]}}}}}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x800) kernel console output (not intermixed with test programs): il_ex+0x412/0x560 [ 263.681985][T11967] _copy_to_user+0x31/0xb0 [ 263.682009][T11967] simple_read_from_buffer+0xe1/0x170 [ 263.682032][T11967] proc_fail_nth_read+0x1bb/0x230 [ 263.682053][T11967] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.682075][T11967] ? rw_verify_area+0x2a6/0x4d0 [ 263.682096][T11967] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.682116][T11967] vfs_read+0x20c/0xa70 [ 263.682140][T11967] ? __pfx___mutex_lock+0x10/0x10 [ 263.682156][T11967] ? __pfx_vfs_read+0x10/0x10 [ 263.682177][T11967] ? __fget_files+0x2a/0x420 [ 263.682198][T11967] ? __fget_files+0x3a0/0x420 [ 263.682215][T11967] ? __fget_files+0x2a/0x420 [ 263.682240][T11967] ksys_read+0x150/0x270 [ 263.682261][T11967] ? __pfx_ksys_read+0x10/0x10 [ 263.682289][T11967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.682305][T11967] do_syscall_64+0x15f/0xf80 [ 263.682325][T11967] ? trace_irq_disable+0x3b/0x140 [ 263.682346][T11967] ? clear_bhb_loop+0x40/0x90 [ 263.682365][T11967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.682379][T11967] RIP: 0033:0x7fe47435d68e [ 263.682394][T11967] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 263.682407][T11967] RSP: 002b:00007fe4725edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.682423][T11967] RAX: ffffffffffffffda RBX: 00007fe4725ee6c0 RCX: 00007fe47435d68e [ 263.682434][T11967] RDX: 000000000000000f RSI: 00007fe4725ee0a0 RDI: 000000000000000c [ 263.682443][T11967] RBP: 00007fe4725ee090 R08: 0000000000000000 R09: 0000000000000000 [ 263.682453][T11967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.682461][T11967] R13: 00007fe474616038 R14: 00007fe474615fa0 R15: 00007ffcde8b2838 [ 263.682488][T11967] [ 263.748472][T11970] vxcan2: entered allmulticast mode [ 263.912612][T11973] ip6tnl0: Caught tx_queue_len zero misconfig [ 263.918841][T11973] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1506'. [ 263.927397][T11974] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 263.935816][T11974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.194135][T11985] hsr0: entered promiscuous mode [ 264.316159][T11995] bridge_slave_1: left allmulticast mode [ 264.349888][T11995] bridge_slave_1: left promiscuous mode [ 264.363409][T11995] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.441443][T11995] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 264.511602][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1518'. [ 264.524418][T12012] tipc: Enabling of bearer rejected, failed to enable media [ 264.535197][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1515'. [ 264.547228][T11995] bond0: left allmulticast mode [ 264.598211][T12012] netlink: 'syz.2.1518': attribute type 8 has an invalid length. [ 264.678911][T12023] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.852668][T12030] netlink: 'syz.1.1519': attribute type 16 has an invalid length. [ 264.872327][T12030] netlink: 'syz.1.1519': attribute type 17 has an invalid length. [ 264.999890][T12030] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 265.307554][T12049] batman_adv: batadv0: Adding interface: vlan3 [ 265.325721][T12049] batman_adv: batadv0: The MTU of interface vlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.368414][T12049] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 265.762642][T12054] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 265.772814][T12054] syzkaller1: Linktype set failed because interface is up [ 265.788105][T11833] syzkaller1: tun_net_xmit 90 [ 265.802725][ T9668] syzkaller1: tun_net_xmit 86 [ 265.820217][T12057] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.827615][T12057] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.083009][T12059] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 266.160740][T12064] xfrm0: Caught tx_queue_len zero misconfig [ 266.444613][T12082] __nla_validate_parse: 5 callbacks suppressed [ 266.444629][T12082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1533'. [ 266.475666][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 266.510263][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 266.528141][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 266.572592][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 266.586936][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 266.596058][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 266.604988][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 266.618129][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 266.627328][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 266.982102][T12076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.755178][T12119] openvswitch: netlink: Flow key attr not present in new flow. [ 268.153748][T12127] netlink: 'syz.4.1544': attribute type 1 has an invalid length. [ 268.162269][T12127] netlink: 'syz.4.1544': attribute type 1 has an invalid length. [ 268.170225][T12127] netlink: 'syz.4.1544': attribute type 8 has an invalid length. [ 268.590273][T12137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.743565][T12147] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 268.879638][T12155] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 268.970810][T12159] openvswitch: netlink: IP tunnel dst address not specified [ 269.195416][T12171] netlink: 'syz.2.1556': attribute type 8 has an invalid length. [ 269.626375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.637230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.655122][ T9643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.666104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.674638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.739019][T12199] syzkaller0: entered promiscuous mode [ 270.744512][T12199] syzkaller0: entered allmulticast mode [ 271.705779][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.714464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.722991][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.795194][T12151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.992534][T12208] __nla_validate_parse: 15 callbacks suppressed [ 271.992551][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1570'. [ 272.049030][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 272.101697][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1568'. [ 272.148326][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1570'. [ 272.258482][T12221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1572'. [ 272.388609][T12226] xt_hashlimit: size too large, truncated to 1048576 [ 272.611797][T12238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.871049][T12246] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 273.074288][T12251] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1583'. [ 273.425512][T12265] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1586'. [ 273.676921][T12270] xfrm1: entered allmulticast mode [ 273.687494][T12270] veth0: entered promiscuous mode [ 273.699664][T12269] veth0: left promiscuous mode [ 274.122775][T12288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1594'. [ 274.165761][T12288] netlink: 'syz.4.1594': attribute type 8 has an invalid length. [ 274.180568][T12288] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1594'. [ 274.235080][T12293] netlink: 'syz.0.1595': attribute type 15 has an invalid length. [ 274.263475][T12288] netlink: 'syz.4.1594': attribute type 10 has an invalid length. [ 274.283503][T12293] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1595'. [ 274.372482][T12288] xt_nfacct: accounting object `syz0' does not exist [ 274.749975][T11833] net_ratelimit: 6 callbacks suppressed [ 274.750714][T11833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.765182][ T9668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.826223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.839190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.192370][T12332] bridge3: entered promiscuous mode [ 275.200467][T12332] bridge3: entered allmulticast mode [ 275.681039][T12358] openvswitch: netlink: Invalid VLAN frame [ 275.865946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.876724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.935900][T12364] openvswitch: netlink: Flow actions attr not present in new flow. [ 276.123266][T12369] syzkaller0: entered promiscuous mode [ 276.144395][T12369] syzkaller0: entered allmulticast mode [ 276.516893][ T29] audit: type=1800 audit(1778919981.587:7): pid=12377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1621" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1608 res=0 errno=0 [ 276.716561][T12388] sctp: [Deprecated]: syz.4.1622 (pid 12388) Use of int in maxseg socket option. [ 276.716561][T12388] Use struct sctp_assoc_value instead [ 276.758663][T12382] sctp: [Deprecated]: syz.4.1622 (pid 12382) Use of int in maxseg socket option. [ 276.758663][T12382] Use struct sctp_assoc_value instead [ 277.057614][T12406] netlink: 'syz.4.1629': attribute type 1 has an invalid length. [ 277.102703][T12409] __nla_validate_parse: 15 callbacks suppressed [ 277.102718][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 277.122044][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1629'. [ 277.188915][T12406] netlink: 'syz.4.1629': attribute type 10 has an invalid length. [ 277.197370][T12406] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1629'. [ 277.352034][T12423] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1636'. [ 277.662929][T12438] openvswitch: netlink: IP tunnel dst address not specified [ 277.788793][T11833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.843867][T12456] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1638'. [ 278.402879][T12473] geneve1: Caught tx_queue_len zero misconfig [ 278.421764][T12473] syzkaller0: entered promiscuous mode [ 278.429790][T12473] syzkaller0: entered allmulticast mode [ 278.485886][T12473] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1641'. [ 278.725749][T12490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'. [ 278.885390][T12496] xt_hashlimit: size too large, truncated to 1048576 [ 279.579085][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1659'. [ 279.735130][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1661'. [ 279.767630][T12537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1661'. [ 279.784406][T12537] veth1_to_team: entered promiscuous mode [ 279.793828][T12537] macvlan1: entered promiscuous mode [ 279.802624][T12537] debugfs: 'hsr1' already exists in 'hsr' [ 279.808508][T12537] Cannot create hsr debugfs directory [ 279.813975][T12537] hsr1: entered promiscuous mode [ 280.226765][T12545] xt_hashlimit: size too large, truncated to 1048576 [ 280.772152][T12592] net_ratelimit: 18 callbacks suppressed [ 280.772169][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.802110][T12593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.952804][T12602] sctp: [Deprecated]: syz.3.1677 (pid 12602) Use of int in max_burst socket option. [ 280.952804][T12602] Use struct sctp_assoc_value instead [ 280.958152][T12598] bond8: option ad_user_port_key: invalid value (65535) [ 280.969293][T12604] sctp: [Deprecated]: syz.3.1677 (pid 12604) Use of int in max_burst socket option. [ 280.969293][T12604] Use struct sctp_assoc_value instead [ 280.974813][T12598] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 281.010382][T12598] bond8 (unregistering): Released all slaves [ 281.150618][T12621] xt_nfacct: accounting object `syz1' does not exist [ 281.204207][T12603] bond8: option ad_user_port_key: invalid value (65535) [ 281.213022][T12623] netlink: 'syz.2.1681': attribute type 2 has an invalid length. [ 281.247447][T12603] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 281.294610][T12603] bond8 (unregistering): Released all slaves [ 281.358162][T12630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.374313][T12630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.397927][T12630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.434522][T12630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.461699][T12630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.488462][T12630] sctp: [Deprecated]: syz.3.1684 (pid 12630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.488462][T12630] Use struct sctp_sack_info instead [ 281.865756][ T5630] Bluetooth: hci4: command 0x0401 tx timeout [ 282.072407][T12668] netlink: 'syz.4.1694': attribute type 1 has an invalid length. [ 282.104346][T12672] netlink: 'syz.0.1695': attribute type 11 has an invalid length. [ 282.271958][T12680] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20000 [ 282.445286][T12690] Cannot find add_set index 2 as target [ 282.478813][T12690] netlink: 'syz.2.1701': attribute type 1 has an invalid length. [ 282.572239][T12702] __nla_validate_parse: 3 callbacks suppressed [ 282.572257][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1701'. [ 282.691911][T12690] 8021q: adding VLAN 0 to HW filter on device bond6 [ 282.751329][T12702] vlan2: entered allmulticast mode [ 282.773358][T12702] bond6: entered allmulticast mode [ 282.835507][T12690] bond6: (slave geneve3): making interface the new active one [ 282.872874][T12690] geneve3: entered allmulticast mode [ 282.902535][T12690] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 282.932244][ T9668] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.001943][T12728] netlink: 'syz.0.1710': attribute type 13 has an invalid length. [ 283.016613][T12728] netlink: 'syz.0.1710': attribute type 17 has an invalid length. [ 283.184181][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1710'. [ 283.653151][ T9668] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.666969][ T9668] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.675326][T12719] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1709'. [ 283.684656][T12719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1709'. [ 283.695473][T12719] netlink: 'syz.4.1709': attribute type 3 has an invalid length. [ 283.703471][T12719] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1709'. [ 283.832503][T12751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1712'. [ 283.853127][T12728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.879856][T12728] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.910529][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1714'. [ 283.928736][T12728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.990339][T12728] veth1_to_batadv: left allmulticast mode [ 284.004449][T12728] hsr0: left promiscuous mode [ 284.009453][T12728] veth1_macvtap: left promiscuous mode [ 284.015932][T12728] veth0_macvtap: left promiscuous mode [ 284.022686][T12728] veth0_macvtap: entered promiscuous mode [ 284.037066][T12728] veth1_macvtap: entered promiscuous mode [ 284.047105][T12728] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 284.063234][T12732] syzkaller0: entered promiscuous mode [ 284.069065][T12732] syzkaller0: entered allmulticast mode [ 284.089688][T12746] ÿ: renamed from bond_slave_0 (while UP) [ 284.100970][ T9668] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.270558][T12764] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.494580][T12785] openvswitch: netlink: Duplicate key (type 21). [ 284.543362][T12768] syzkaller0: entered promiscuous mode [ 284.553107][T12768] syzkaller0: entered allmulticast mode [ 284.562879][T12764] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.568769][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'. [ 284.611381][ T5635] IPVS: starting estimator thread 0... [ 284.708789][T12789] netlink: 'syz.4.1721': attribute type 1 has an invalid length. [ 284.716865][T12789] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1721'. [ 284.731816][T12787] IPVS: using max 41 ests per chain, 98400 per kthread [ 286.198604][T12764] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.328649][T12764] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.377848][T12801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1725'. [ 286.419686][T12801] netlink: 'syz.1.1725': attribute type 30 has an invalid length. [ 286.553072][T12798] netlink: 'syz.3.1723': attribute type 12 has an invalid length. [ 286.609754][ T9668] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.622147][ T9668] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.794764][T12810] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 286.905103][T12817] bridge3: entered promiscuous mode [ 286.929497][T12817] bridge3: entered allmulticast mode [ 286.978138][ T9663] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.074467][ T9668] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.210908][T12830] netlink: 'syz.1.1731': attribute type 7 has an invalid length. [ 287.243036][T12830] netlink: 'syz.1.1731': attribute type 8 has an invalid length. [ 287.365779][T12838] netlink: 'syz.2.1733': attribute type 4 has an invalid length. [ 287.427363][T12838] gtp1: entered promiscuous mode [ 287.435661][T12838] gtp1: entered allmulticast mode [ 287.976807][T12857] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 288.004509][T12857] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 288.163936][T12865] __nla_validate_parse: 7 callbacks suppressed [ 288.163952][T12865] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1741'. [ 288.520222][T12884] SET target dimension over the limit! [ 288.556790][T12886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1748'. [ 288.933742][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'. [ 288.948560][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1750'. [ 289.444850][T12920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1755'. [ 289.472111][T12924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1757'. [ 289.644683][T12929] netlink: 'syz.3.1759': attribute type 1 has an invalid length. [ 289.850268][T12929] bond5: entered promiscuous mode [ 289.872379][T12929] bond5: entered allmulticast mode [ 289.900152][T12929] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.960111][T12931] erspan1: entered allmulticast mode [ 290.008375][T12929] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1759'. [ 290.050582][T12931] bond5: (slave erspan1): making interface the new active one [ 290.067141][T12931] erspan1: entered promiscuous mode [ 290.099976][T12931] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 290.154744][T12945] syz.3.1759 (12945) used obsolete PPPIOCDETACH ioctl [ 290.438255][T12959] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 290.725293][T12974] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1768'. [ 290.873356][T12985] netlink: 'syz.1.1769': attribute type 21 has an invalid length. [ 290.892920][T12985] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1769'. [ 291.078224][T12989] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 291.156630][T12991] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 291.498606][T13005] netlink: 210640 bytes leftover after parsing attributes in process `syz.4.1774'. [ 291.531833][T13003] bond5: (slave bond_slave_1): Device is not our slave [ 291.541852][T13003] bond5: option active_slave: invalid value (bond_slave_1) [ 291.560085][T13003] bond5 (unregistering): Released all slaves [ 291.870502][T13011] netlink: 'syz.3.1776': attribute type 1 has an invalid length. [ 292.051729][T13011] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.055072][T13018] sctp: [Deprecated]: syz.3.1776 (pid 13018) Use of int in maxseg socket option. [ 292.055072][T13018] Use struct sctp_assoc_value instead [ 292.539916][T13041] raw_sendmsg: syz.4.1785 forgot to set AF_INET. Fix it! [ 292.549375][T13043] openvswitch: netlink: EtherType 80 is less than min 600 [ 293.166075][T13078] vlan3: entered promiscuous mode [ 293.195128][T13078] bridge0: entered promiscuous mode [ 293.291510][T13085] macsec1: entered promiscuous mode [ 293.298432][T13085] macsec1: entered allmulticast mode [ 293.732115][T13111] __nla_validate_parse: 65 callbacks suppressed [ 293.732132][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'. [ 293.752076][T13120] batadv_slave_0: Caught tx_queue_len zero misconfig [ 293.964981][T13129] netlink: 'syz.3.1803': attribute type 4 has an invalid length. [ 294.070906][T13138] netlink: 'syz.3.1803': attribute type 4 has an invalid length. [ 294.197090][T13121] netlink: 'syz.3.1803': attribute type 4 has an invalid length. [ 294.323852][T13150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.448666][T13155] netlink: 'syz.0.1812': attribute type 1 has an invalid length. [ 294.465826][T13156] ieee802154 phy0 wpan0: encryption failed: -22 [ 294.492037][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1810'. [ 294.504576][T13155] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1812'. [ 294.523704][T13155] netlink: 646 bytes leftover after parsing attributes in process `syz.0.1812'. [ 294.551821][T13155] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1812'. [ 294.587386][T13156] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1813'. [ 294.620065][T13156] 0ªX¹¦À: renamed from batadv0 [ 294.647320][T13156] 0ªX¹¦À: entered allmulticast mode [ 294.672392][T13156] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 294.689163][T13156] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 295.017590][T13179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1817'. [ 295.207617][T13189] netlink: 'syz.4.1820': attribute type 11 has an invalid length. [ 295.645435][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 295.680813][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'. [ 295.736140][T13205] netlink: 'syz.1.1824': attribute type 18 has an invalid length. [ 295.939127][T13219] netlink: ct family unspecified [ 295.961083][T13219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.173109][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1832'. [ 296.341755][T13248] xt_l2tp: invalid flags combination: 8 [ 296.396557][T13248] netlink: 'syz.3.1832': attribute type 1 has an invalid length. [ 296.822433][T13274] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 297.141919][T13296] netlink: 'syz.2.1844': attribute type 18 has an invalid length. [ 297.737959][T13316] bond7: entered promiscuous mode [ 297.759248][T13316] 8021q: adding VLAN 0 to HW filter on device bond7 [ 297.805646][T13316] bond7 (unregistering): Released all slaves [ 298.306448][T13364] lo: Caught tx_queue_len zero misconfig [ 298.690598][ T9663] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.731110][ T9663] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.768244][ T9649] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.785056][ T9649] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.808984][T13394] syzkaller0: entered promiscuous mode [ 298.829101][T13394] syzkaller0: entered allmulticast mode [ 298.870288][T13401] __nla_validate_parse: 11 callbacks suppressed [ 298.870304][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1863'. [ 298.914395][T13405] netlink: 'syz.1.1864': attribute type 3 has an invalid length. [ 299.137429][T13424] Cannot find del_set index 4 as target [ 299.168734][T13424] sctp: [Deprecated]: syz.0.1868 (pid 13424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.168734][T13424] Use struct sctp_sack_info instead [ 299.447587][T13441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1872'. [ 299.549508][T13446] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1872'. [ 299.760484][T13443] netlink: 'syz.2.1873': attribute type 10 has an invalid length. [ 300.352078][T13467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1879'. [ 300.389779][T13467] Cannot find del_set index 8192 as target [ 300.634376][ T9668] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.662745][ T9668] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.684255][ T9668] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.703159][ T9668] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.900299][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'. [ 300.930086][T13489] netlink: 'syz.1.1885': attribute type 5 has an invalid length. [ 300.952388][T13489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1885'. [ 300.999771][T13489] geneve2: entered promiscuous mode [ 301.017171][T13489] geneve2: entered allmulticast mode [ 301.035283][ T5950] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 301.052495][ T5950] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 301.073500][ T5950] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 301.095425][ T5950] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 301.194284][T13501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.407676][T13508] netlink: 'syz.0.1890': attribute type 1 has an invalid length. [ 301.540754][T13508] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.720197][T13510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1888'. [ 302.034043][T13529] netlink: 'syz.2.1893': attribute type 2 has an invalid length. [ 302.068528][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'. [ 302.204975][T13537] netlink: 'syz.0.1896': attribute type 1 has an invalid length. [ 302.284387][T13537] 8021q: adding VLAN 0 to HW filter on device bond9 [ 302.346894][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1896'. [ 302.487440][T13537] bond9: (slave veth7): Enslaving as an active interface with a down link [ 302.626558][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1899'. [ 302.724704][T13546] 8021q: adding VLAN 0 to HW filter on device bond5 [ 302.742498][T13556] netlink: 'syz.3.1901': attribute type 4 has an invalid length. [ 302.790829][T13552] bond5: (slave veth9): Enslaving as an active interface with an up link [ 302.818220][T13550] netlink: 'syz.3.1901': attribute type 8 has an invalid length. [ 303.029076][T13573] netlink: 'syz.3.1906': attribute type 1 has an invalid length. [ 303.146547][T13573] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.229542][T13580] bond7: (slave geneve2): making interface the new active one [ 303.257605][T13580] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 303.283321][ T5950] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.314557][ T5950] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.343234][ T5950] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.369792][ T5950] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.712480][T13600] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 304.028704][T13609] __nla_validate_parse: 3 callbacks suppressed [ 304.028720][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1915'. [ 304.065514][T13609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1915'. [ 304.109331][T13611] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1916'. [ 304.452702][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1921'. [ 304.492774][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1924'. [ 304.512788][T13631] syzkaller1: entered promiscuous mode [ 304.526061][T13631] syzkaller1: entered allmulticast mode [ 304.834742][T13642] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 305.130092][T13661] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1932'. [ 305.409977][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1937'. [ 305.524373][T13687] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 305.583508][T13677] syzkaller1: entered promiscuous mode [ 305.592424][T13677] syzkaller1: entered allmulticast mode [ 305.709401][ T8970] bridge0: entered promiscuous mode [ 305.801497][T13695] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:19999 [ 305.945400][T13703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1942'. [ 305.990268][T13703] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1942'. [ 306.121118][T13703] ip6tnl4: entered allmulticast mode [ 306.150735][T13710] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 306.162769][T13710] syzkaller1: linktype set to 825 [ 306.419540][T13725] block nbd0: NBD_DISCONNECT [ 306.443420][T13725] block nbd0: Send disconnect failed -32 [ 306.480099][T13725] block nbd0: shutting down sockets [ 306.766302][T13738] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1956'. [ 307.023473][T13747] netlink: 'syz.4.1958': attribute type 2 has an invalid length. [ 307.092007][ T29] audit: type=1804 audit(1778920012.167:8): pid=13754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1961" name="/newroot/397/memory.events" dev="tmpfs" ino=2045 res=1 errno=0 [ 307.183913][ T29] audit: type=1800 audit(1778920012.167:9): pid=13754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1961" name="memory.events" dev="tmpfs" ino=2045 res=0 errno=0 [ 307.263593][T13763] Timeout policy `syz1' can only be used by L3 protocol number 1536 [ 307.771071][T13796] veth0_macvtap: Caught tx_queue_len zero misconfig [ 308.097273][T13806] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 308.832013][T13820] xt_nfacct: accounting object `syz0' does not exist [ 309.919076][T13878] __nla_validate_parse: 3 callbacks suppressed [ 309.919092][T13878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1992'. [ 309.949483][T13875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1991'. [ 309.983122][T13883] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1994'. [ 310.059624][T13885] gtp2: entered promiscuous mode [ 310.089856][T13885] gtp2: entered allmulticast mode [ 310.101150][ T5289] veth0_vlan: left promiscuous mode [ 310.150269][ T5289] veth0_vlan: entered promiscuous mode [ 310.435772][T13912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2002'. [ 310.553179][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1999'. [ 311.139688][T13938] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2007'. [ 311.196998][T13938] netlink: 'syz.2.2007': attribute type 1 has an invalid length. [ 311.218717][T13938] netlink: 'syz.2.2007': attribute type 1 has an invalid length. [ 311.380785][T13952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2010'. [ 311.756278][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2014'. [ 311.970878][T13986] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.989514][T13988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2014'. [ 312.094440][T13978] syzkaller0: entered promiscuous mode [ 312.105762][T13978] syzkaller0: entered allmulticast mode [ 312.591078][T14014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.082818][T14002] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 314.092978][T14002] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 314.103168][T14002] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 314.380362][T14029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2025'. [ 314.893713][T14066] netlink: 'syz.3.2038': attribute type 1 has an invalid length. [ 315.044798][T14066] bond9: (slave bridge5): Enslaving as a backup interface with an up link [ 315.111274][T14081] can: request_module (can-proto-0) failed. [ 315.145040][T14085] tipc: Enabling of bearer rejected, failed to enable media [ 315.168645][T14087] sock: sock_set_timeout: `syz.2.2042' (pid 14087) tries to set negative timeout [ 315.182900][T14089] xt_hashlimit: size too large, truncated to 1048576 [ 315.483390][T14109] __nla_validate_parse: 3 callbacks suppressed [ 315.483408][T14109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2048'. [ 316.391176][T14131] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2054'. [ 316.593718][T14139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2055'. [ 316.595828][T14140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2055'. [ 316.721175][T14142] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 316.742699][T14142] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 316.807854][T14147] TCP: TCP_TX_DELAY enabled [ 316.992930][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.165960][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2058'. [ 317.786347][ T5630] Bluetooth: hci4: command 0x0401 tx timeout [ 318.462366][T14230] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 318.480909][T14230] dvmrp1: linktype set to 804 [ 318.510369][T14230] syzkaller1: entered promiscuous mode [ 318.525667][T14230] syzkaller1: entered allmulticast mode [ 318.552428][T14230] xt_hashlimit: size too large, truncated to 1048576 [ 318.577627][T14230] xt_hashlimit: max too large, truncated to 1048576 [ 318.971596][T14246] sctp: [Deprecated]: syz.0.2079 (pid 14246) Use of int in maxseg socket option. [ 318.971596][T14246] Use struct sctp_assoc_value instead [ 319.211652][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2082'. [ 319.466598][ T29] audit: type=1804 audit(1778920024.537:10): pid=14268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2084" name="/newroot/421/memory.events" dev="tmpfs" ino=2172 res=1 errno=0 [ 319.532034][ T29] audit: type=1800 audit(1778920024.547:11): pid=14268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2084" name="memory.events" dev="tmpfs" ino=2172 res=0 errno=0 [ 319.797591][T14280] netlink: 'syz.2.2087': attribute type 1 has an invalid length. [ 319.871379][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'. [ 319.890994][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 319.915635][T14285] netlink: 'syz.3.2089': attribute type 13 has an invalid length. [ 319.924822][T14285] netlink: 'syz.3.2089': attribute type 11 has an invalid length. [ 320.443128][T14314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2094'. [ 320.578119][T14314] ip6gre2: entered promiscuous mode [ 320.590837][T14314] ip6gre2: entered allmulticast mode [ 320.615329][ T5950] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 320.634018][ T5950] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 320.645310][ T5720] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 320.683398][T14323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2097'. [ 320.880364][T14324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2097'. [ 320.895508][T14324] nbd: nbd64 already in use [ 321.386111][ T5720] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 321.399323][ T5720] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 321.759704][T14367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2109'. [ 321.935129][T14367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2109'. [ 321.961462][T14380] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2112'. [ 321.972090][T14378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2112'. [ 322.067528][T14379] bond5: Unable to set down delay as MII monitoring is disabled [ 322.110764][T14379] bond5 (unregistering): Released all slaves [ 322.417497][T14402] netlink: 'syz.3.2117': attribute type 4 has an invalid length. [ 322.519146][T14413] netlink: 'syz.2.2116': attribute type 2 has an invalid length. [ 322.782416][T14422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2122'. [ 322.827209][T14431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2125'. [ 322.857887][T14431] batman_adv: batadv0: Removing interface: vlan3 [ 322.972666][T14440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2128'. [ 323.139697][T14446] syzkaller1: entered promiscuous mode [ 323.142120][T14451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.170507][T14446] syzkaller1: entered allmulticast mode [ 323.247760][T14456] xt_l2tp: invalid flags combination: 8 [ 323.304289][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 324.928062][T14538] veth0: entered promiscuous mode [ 324.994684][T14537] veth0: left promiscuous mode [ 325.065756][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 325.277856][T14552] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.288758][T14552] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.372337][T14552] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.384174][T14552] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.511561][T14552] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.521710][T14552] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.585221][T14552] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.595945][T14552] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.858902][ T9658] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.873841][T14573] __nla_validate_parse: 5 callbacks suppressed [ 325.873858][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2161'. [ 325.878033][ T9658] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.888529][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2161'. [ 325.945093][ T9658] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.965772][ T9658] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.009989][ T9658] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.022681][ T9658] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.041487][ T9668] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.057931][ T9668] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.233591][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2164'. [ 326.273815][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 326.409091][T14598] xt_l2tp: invalid flags combination: 8 [ 326.462127][T14598] netlink: 'syz.3.2166': attribute type 1 has an invalid length. [ 326.529165][T14606] netlink: 'syz.2.2171': attribute type 19 has an invalid length. [ 326.563351][T14606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2171'. [ 326.612992][T14614] netlink: 'syz.1.2173': attribute type 1 has an invalid length. [ 326.623890][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2172'. [ 326.654641][T14614] netlink: 'syz.1.2173': attribute type 2 has an invalid length. [ 326.693380][T14614] netlink: 'syz.1.2173': attribute type 1 has an invalid length. [ 326.943162][T14628] veth1_to_bond: entered allmulticast mode [ 326.999335][T14628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2178'. [ 327.054836][T14628] veth1_to_bond (unregistering): left allmulticast mode [ 327.120487][T14628] bond0: (slave bond_slave_1): Releasing backup interface [ 327.142226][T14628] bond_slave_1 (unregistering): left promiscuous mode [ 327.325192][T14651] netlink: 'syz.3.2182': attribute type 1 has an invalid length. [ 327.449713][T14651] 8021q: adding VLAN 0 to HW filter on device bond10 [ 327.499853][T14651] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2182'. [ 327.569439][T14653] bond10: (slave veth11): Enslaving as an active interface with a down link [ 327.614719][T14646] bond10: (slave dummy0): making interface the new active one [ 327.623554][T14646] dummy0: entered promiscuous mode [ 327.629856][T14646] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 327.644399][T14651] bond10: (slave dummy0): Releasing active interface [ 327.655756][T14651] dummy0 (unregistering): left promiscuous mode [ 327.714640][T14678] netlink: 'syz.1.2187': attribute type 1 has an invalid length. [ 327.769585][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2185'. [ 327.799574][T14678] 8021q: adding VLAN 0 to HW filter on device bond5 [ 327.872533][T14670] bond5: (slave gretap3): making interface the new active one [ 327.882914][T14670] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 328.183206][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2194'. [ 328.282351][T14711] bridge_slave_1 (unregistering): left allmulticast mode [ 328.289756][T14711] bridge_slave_1 (unregistering): left promiscuous mode [ 328.300825][T14711] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.468048][T14714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.509577][T14714] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 328.582652][T14714] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_0 [ 328.606954][T14714] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_1 [ 328.636339][T14714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.665251][T14714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.689280][T14714] veth1_vlan: left promiscuous mode [ 328.704119][T14714] veth0_vlan: left promiscuous mode [ 328.710876][T14714] veth0_vlan: entered promiscuous mode [ 328.723919][T14714] veth1_vlan: entered promiscuous mode [ 328.735272][T14714] veth1_macvtap: left promiscuous mode [ 328.742140][T14714] veth0_macvtap: left promiscuous mode [ 328.751417][T14714] veth0_macvtap: entered promiscuous mode [ 328.758586][T14714] veth1_macvtap: entered promiscuous mode [ 328.779495][T14714] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 328.982518][ T9658] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.002094][ T9658] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.015965][ T9658] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.039691][ T9658] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.245077][T14735] netlink: 'syz.1.2202': attribute type 1 has an invalid length. [ 329.378895][T14735] bond6: entered promiscuous mode [ 329.385875][T14735] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.438328][T14742] bond6: (slave veth3): making interface the new active one [ 329.446355][T14742] veth3: entered promiscuous mode [ 329.453522][T14742] bond6: (slave veth3): Enslaving as an active interface with an up link [ 329.548151][T14741] syzkaller0: entered promiscuous mode [ 329.564927][T14741] syzkaller0: entered allmulticast mode [ 329.892595][T14751] bond8: option ad_user_port_key: invalid value (65535) [ 329.917951][T14751] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 329.929382][T14751] bond8 (unregistering): Released all slaves [ 329.997354][T14761] sit0: entered promiscuous mode [ 330.037748][T14761] netlink: 'syz.4.2209': attribute type 1 has an invalid length. [ 330.188846][T14753] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.231545][T14753] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 330.308374][T14763] syzkaller1: entered promiscuous mode [ 330.314423][T14763] syzkaller1: entered allmulticast mode [ 330.399287][T14753] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.427541][T14753] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 330.579541][T14753] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.606826][T14753] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 330.951056][T14805] __nla_validate_parse: 8 callbacks suppressed [ 330.951090][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2218'. [ 331.131720][T14786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.152554][T14786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.650106][ T5736] syz1: Port: 1 Link DOWN [ 331.686219][ T9658] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.694749][ T9658] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.708658][T14753] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.718846][T14753] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 331.751190][ T9658] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.766484][ T9658] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.775008][ T9658] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.784195][ T9658] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.826292][ T9658] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.834868][ T9658] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.891683][ T9658] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 331.900085][ T9658] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 331.934642][ T9658] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 331.942977][ T9658] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 331.968317][ T9658] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 331.978215][ T9658] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 331.995963][ T9658] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 332.015007][ T9658] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 332.183887][T14823] ÿ: renamed from bond_slave_0 [ 333.056701][T14772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.311475][ T29] audit: type=1804 audit(1778920038.387:12): pid=14846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2226" name="/newroot/466/cgroup.controllers" dev="tmpfs" ino=2406 res=1 errno=0 [ 333.381697][ T29] audit: type=1800 audit(1778920038.387:13): pid=14846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2226" name="cgroup.controllers" dev="tmpfs" ino=2406 res=0 errno=0 [ 333.461848][ T29] audit: type=1800 audit(1778920038.387:14): pid=14846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2226" name="cgroup.controllers" dev="tmpfs" ino=2406 res=0 errno=0 [ 333.545090][ T29] audit: type=1804 audit(1778920038.387:15): pid=14846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2226" name="/newroot/466/cgroup.controllers" dev="tmpfs" ino=2406 res=1 errno=0 [ 333.711773][T14850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2227'. [ 334.591000][T14898] geneve3: entered promiscuous mode [ 334.609699][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2239'. [ 334.729024][T14901] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2239'. [ 334.795485][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2241'. [ 335.054546][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2241'. [ 335.120489][T14912] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 335.201657][T14926] syzkaller1: entered promiscuous mode [ 335.210088][T14926] syzkaller1: entered allmulticast mode [ 335.332182][T14929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2246'. [ 335.560020][T14934] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 336.037660][T14945] block nbd0: server does not support multiple connections per device. [ 336.056911][T14945] block nbd0: shutting down sockets [ 336.965214][T14976] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 337.174252][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2263'. [ 337.195344][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2263'. [ 337.484856][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2270'. [ 337.943511][T15019] netlink: 'syz.0.2278': attribute type 1 has an invalid length. [ 337.979719][T15019] netlink: 'syz.0.2278': attribute type 2 has an invalid length. [ 338.002670][T15025] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2275'. [ 338.032412][T15026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2277'. [ 338.499746][T15041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2283'. [ 338.613993][T15044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2283'. [ 338.987988][T15059] batadv_slave_0: entered promiscuous mode [ 339.121947][T15054] batadv_slave_0: left promiscuous mode [ 339.310010][T15064] bridge7: entered promiscuous mode [ 339.325276][T15064] bridge7: entered allmulticast mode [ 339.341992][T15070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.376656][T15064] team0: Port device bridge7 added [ 339.451797][T15070] IPVS: set_ctl: invalid protocol: 136 172.30.1.3:20004 [ 339.510216][T15070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.637572][T15079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2292'. [ 340.231303][T15100] netlink: 'syz.3.2295': attribute type 1 has an invalid length. [ 340.309915][T15104] netlink: 'syz.2.2298': attribute type 1 has an invalid length. [ 340.656648][T15119] openvswitch: netlink: EtherType 80 is less than min 600 [ 341.006425][T15124] xt_l2tp: unknown flags: 51 [ 341.164934][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2304'. [ 341.414378][T15128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2296'. [ 342.204924][T15177] __nla_validate_parse: 4 callbacks suppressed [ 342.204956][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2314'. [ 342.950340][T15195] openvswitch: netlink: IPv4 tun info is not correct [ 343.023289][T15200] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 343.456933][T15215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2326'. [ 343.494953][T15212] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 343.840213][T15227] veth1_macvtap: left promiscuous mode [ 343.870768][T15227] macsec0: entered promiscuous mode [ 343.894824][T15228] veth1_macvtap: entered promiscuous mode [ 343.959567][T15228] macsec0: left promiscuous mode [ 344.317018][T15235] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2329'. [ 344.362361][T15235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2329'. [ 344.608932][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2333'. [ 345.149460][T15262] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2336'. [ 345.171043][T15262] unsupported nlmsg_type 40 [ 346.024307][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2343'. [ 346.066228][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'. [ 346.761039][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2345'. [ 346.869288][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2345'. [ 347.813598][T15294] : entered promiscuous mode [ 347.845482][T15298] openvswitch: : Dropping previously announced user features [ 348.144830][T15319] syzkaller0: entered promiscuous mode [ 348.162860][T15331] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2353'. [ 348.184712][T15319] syzkaller0: entered allmulticast mode [ 348.608907][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2356'. [ 348.641441][T15344] netlink: 'syz.3.2356': attribute type 9 has an invalid length. [ 348.668596][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2356'. [ 348.690921][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2356'. [ 348.724523][T15347] netlink: 'syz.3.2356': attribute type 9 has an invalid length. [ 348.755695][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2356'. [ 349.393062][T15369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2361'. [ 349.941281][T15339] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 349.949725][T15339] gtp0: left promiscuous mode [ 349.954517][T15339] gtp0: left allmulticast mode [ 349.960361][T15339] gtp1: left promiscuous mode [ 349.965088][T15339] gtp1: left allmulticast mode [ 349.970725][T15339] bond6: left promiscuous mode [ 349.977254][T15339] xfrm1: left allmulticast mode [ 350.006607][T15339] bridge7: left allmulticast mode [ 350.024950][T15370] ip6_vti0 speed is unknown, defaulting to 1000 [ 350.026155][ T9658] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.085937][ T9658] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.102355][ T9658] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.132536][ T9658] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.172284][ T9658] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.203497][ T9658] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.217174][ T9658] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.227404][ T9658] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.243188][T15370] ip6_vti0 speed is unknown, defaulting to 1000 [ 350.285860][T15375] xt_hashlimit: size too large, truncated to 1048576 [ 350.362178][T15383] netlink: 'syz.2.2365': attribute type 1 has an invalid length. [ 350.371056][T15383] netlink: 'syz.2.2365': attribute type 3 has an invalid length. [ 350.379023][T15383] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2365'. [ 350.381639][T15384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.508518][T15370] ip6_vti0 speed is unknown, defaulting to 1000 [ 350.527429][T15388] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2367'. [ 350.940968][T15370] infiniband syz2: set active [ 350.946936][T15370] infiniband syz2: added ip6_vti0 [ 350.958966][ T8968] ip6_vti0 speed is unknown, defaulting to 1000 [ 350.975721][T15370] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 350.989055][T15370] infiniband syz2: Couldn't open port 1 [ 351.001900][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2370'. [ 351.014731][T15370] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 351.046260][T15370] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 351.098031][T15370] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 351.144428][T15370] RDS/IB: syz2: added [ 351.154502][T15370] smc: adding ib device syz2 with port count 1 [ 351.161564][T15370] smc: ib device syz2 port 1 has pnetid S (user defined) [ 351.179810][ T5820] ip6_vti0 speed is unknown, defaulting to 1000 [ 351.198628][T15370] ip6_vti0 speed is unknown, defaulting to 1000 [ 351.290150][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2372'. [ 351.865101][T15370] ip6_vti0 speed is unknown, defaulting to 1000 [ 352.383132][T15444] bridge0: port 1(syz_tun) entered blocking state [ 352.399445][T15438] IPVS: Scheduler module ip_vs_sip not found [ 352.414003][T15444] bridge0: port 1(syz_tun) entered disabled state [ 352.466285][T15444] syz_tun: entered allmulticast mode [ 352.487642][T15444] syz_tun: left allmulticast mode [ 352.884902][T15463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.079338][T15370] ip6_vti0 speed is unknown, defaulting to 1000 [ 353.122722][T15477] netlink: 'syz.0.2389': attribute type 3 has an invalid length. [ 353.155698][T15477] netlink: 'syz.0.2389': attribute type 3 has an invalid length. [ 353.177755][T15477] __nla_validate_parse: 4 callbacks suppressed [ 353.177807][T15477] netlink: 452 bytes leftover after parsing attributes in process `syz.0.2389'. [ 353.539430][T15500] netlink: 428 bytes leftover after parsing attributes in process `syz.4.2396'. [ 353.569407][T15500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2396'. [ 353.746631][T15506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.762125][T15510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.833499][T15511] syzkaller0: left promiscuous mode [ 353.859043][T15511] syzkaller0: left allmulticast mode [ 354.188669][T15370] ip6_vti0 speed is unknown, defaulting to 1000 [ 354.191267][T15517] syzkaller1: entered promiscuous mode [ 354.204104][T15517] syzkaller1: entered allmulticast mode [ 354.795199][T15370] ip6_vti0 speed is unknown, defaulting to 1000 [ 354.808260][T15530] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2406'. [ 354.954633][T15535] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2408'. [ 354.975694][T15535] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2408'. [ 355.503286][T15539] 0ªX¹¦À: left allmulticast mode [ 355.918353][T15539] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 355.994809][T15539] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 356.105435][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'. [ 356.221820][T15539] vlan2: left allmulticast mode [ 356.233652][T15539] bond6: left allmulticast mode [ 356.240591][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2421'. [ 356.250151][T15539] geneve3: left allmulticast mode [ 356.265474][T15539] gtp1: left promiscuous mode [ 356.271989][T15539] gtp1: left allmulticast mode [ 356.309115][ T9649] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.330149][T15580] ip6tnl5: entered allmulticast mode [ 356.340737][ T9649] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.365845][ T9649] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.393721][ T9649] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.639671][T15608] bond0: option arp_validate: invalid value (55553) [ 356.779710][T15619] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 357.043341][T15629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2432'. [ 357.056769][T15630] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2431'. [ 357.193207][T15629] 8021q: adding VLAN 0 to HW filter on device bond6 [ 357.261245][T15633] bond6: (slave veth11): Enslaving as an active interface with an up link [ 357.321467][T15643] syzkaller1: entered promiscuous mode [ 357.328231][T15643] syzkaller1: entered allmulticast mode [ 357.414632][T15658] netlink: 'syz.1.2438': attribute type 1 has an invalid length. [ 357.425714][T15633] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 357.436733][T15658] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 357.667974][T15678] netlink: 'syz.4.2443': attribute type 8 has an invalid length. [ 358.160597][T15706] netlink: 'syz.0.2447': attribute type 1 has an invalid length. [ 358.403622][T15722] __nla_validate_parse: 7 callbacks suppressed [ 358.403639][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'. [ 358.469553][T15729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2455'. [ 358.478852][T15729] netlink: 'syz.1.2455': attribute type 7 has an invalid length. [ 358.479018][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'. [ 358.487152][T15729] netlink: 'syz.1.2455': attribute type 8 has an invalid length. [ 358.504371][T15729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2455'. [ 358.580953][T15729] netlink: 'syz.1.2455': attribute type 4 has an invalid length. [ 358.658388][T15730] netlink: 'syz.1.2455': attribute type 4 has an invalid length. [ 359.238278][T15743] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2461'. [ 359.250850][T15747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2459'. [ 359.272234][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2461'. [ 359.432355][T15754] team0: entered promiscuous mode [ 359.447375][T15754] team_slave_0: entered promiscuous mode [ 359.458186][T15754] team_slave_1: entered promiscuous mode [ 359.465221][T15754] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 359.636790][T15764] nft_compat: unsupported protocol 0 [ 359.938339][T15779] netlink: 'syz.3.2466': attribute type 9 has an invalid length. [ 360.402887][T15804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2471'. [ 360.464608][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'. [ 360.481803][T15808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2472'. [ 360.672198][T15821] xt_TCPMSS: Only works on TCP SYN packets [ 360.787123][T15829] netlink: 'syz.3.2477': attribute type 1 has an invalid length. [ 360.923806][T15829] 8021q: adding VLAN 0 to HW filter on device bond12 [ 361.353468][T15857] syzkaller0: entered promiscuous mode [ 361.395059][T15857] syzkaller0: entered allmulticast mode [ 362.024857][T15864] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.755163][T15898] netlink: 'syz.4.2495': attribute type 3 has an invalid length. [ 362.776438][T15899] netlink: 'syz.4.2495': attribute type 3 has an invalid length. [ 362.955508][T15911] xt_policy: output policy not valid in PREROUTING and INPUT [ 363.672525][T15919] __nla_validate_parse: 8 callbacks suppressed [ 363.672542][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2500'. [ 363.884930][T15952] netlink: 'syz.1.2509': attribute type 1 has an invalid length. [ 364.040080][T15952] 8021q: adding VLAN 0 to HW filter on device bond7 [ 364.068642][T15961] netlink: 'syz.3.2511': attribute type 11 has an invalid length. [ 364.096662][T15957] bond7: (slave geneve3): making interface the new active one [ 364.107500][T15957] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 364.416892][T15963] bridge_slave_0 (unregistering): left allmulticast mode [ 364.462423][T15963] bridge_slave_0 (unregistering): left promiscuous mode [ 364.500579][T15963] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.500956][T15984] xt_hashlimit: size too large, truncated to 1048576 [ 364.621112][T15968] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2514'. [ 364.883075][T15993] netlink: 'syz.1.2520': attribute type 1 has an invalid length. [ 365.014601][T15993] 8021q: adding VLAN 0 to HW filter on device bond8 [ 365.437030][T16022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2526'. [ 365.465722][T16030] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2528'. [ 365.697330][T16025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.722429][T16025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.031951][ T24] ip6_vti0 speed is unknown, defaulting to 1000 [ 366.041635][ T24] syz2: Port: 1 Link DOWN [ 366.085352][ T9663] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 366.115533][ T9663] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 366.141100][ T9663] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 366.159604][ T9663] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 366.176980][ T5820] ip6_vti0 speed is unknown, defaulting to 1000 [ 366.202630][T16056] netlink: 'syz.4.2534': attribute type 1 has an invalid length. [ 366.216882][ T9663] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 366.228724][ T9663] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 366.299741][T16056] bond7: entered promiscuous mode [ 366.305985][T16056] 8021q: adding VLAN 0 to HW filter on device bond7 [ 366.317538][ T9663] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 366.338725][ T9663] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 366.400673][T16066] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20001 [ 366.413535][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'. [ 366.450917][T16066] unsupported nla_type 216 [ 366.461220][T16061] bond7: (slave bridge6): making interface the new active one [ 366.463448][T16069] nbd: must specify a device to reconfigure [ 366.471247][T16065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'. [ 366.484285][T16061] bridge6: entered promiscuous mode [ 366.490847][T16061] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 366.557604][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2534'. [ 366.595991][T16056] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2534'. [ 366.634169][T16068] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2538'. [ 366.706688][T16052] ip6_vti0 speed is unknown, defaulting to 1000 [ 366.894594][T16080] vlan2: entered allmulticast mode [ 366.900540][T16080] bond0: entered allmulticast mode [ 366.911474][T16080] ÿ: entered allmulticast mode [ 367.066336][T16084] bond13: Removing last ns target with arp_interval on [ 367.608146][T16108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2551'. [ 367.617822][T16108] gretap0: Device is already in use. [ 367.703588][T16111] syzkaller1: entered promiscuous mode [ 367.711951][T16111] syzkaller1: entered allmulticast mode [ 367.893117][T16117] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 368.159516][T16119] syzkaller0: entered promiscuous mode [ 368.177108][T16119] syzkaller0: entered allmulticast mode [ 368.534972][T16097] ip6_vti0 speed is unknown, defaulting to 1000 [ 368.938019][T16140] __nla_validate_parse: 1 callbacks suppressed [ 368.938048][T16140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2562'. [ 369.377660][T16160] netlink: 'syz.3.2568': attribute type 10 has an invalid length. [ 369.417641][T16159] Cannot find set identified by id 65534 to match [ 369.448071][T16159] netlink: 'syz.2.2567': attribute type 1 has an invalid length. [ 369.553451][T16159] 8021q: adding VLAN 0 to HW filter on device bond8 [ 369.631302][T16167] 8021q: adding VLAN 0 to HW filter on device bond8 [ 369.670660][T16167] bond8: (slave vcan1): The slave device specified does not support setting the MAC address [ 369.697059][T16167] bond8: (slave vcan1): Error -95 calling set_mac_address [ 370.083861][T16173] syzkaller1: entered promiscuous mode [ 370.111703][T16173] syzkaller1: entered allmulticast mode [ 370.305989][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2572'. [ 370.703751][T16203] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 370.794974][T16212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.807197][T16207] syzkaller0: entered promiscuous mode [ 370.817926][T16207] syzkaller0: entered allmulticast mode [ 371.188861][T16232] xt_cgroup: xt_cgroup: no path or classid specified [ 371.351777][T16238] nbd: must specify a device to reconfigure [ 371.709650][T16213] netlink: 'syz.2.2579': attribute type 7 has an invalid length. [ 371.733808][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2590'. [ 371.756186][T16261] netlink: 'syz.3.2590': attribute type 22 has an invalid length. [ 371.775750][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2590'. [ 371.834336][ T9649] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.849862][ T9649] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.910494][ T9649] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.932253][T16211] ip6_vti0 speed is unknown, defaulting to 1000 [ 371.940920][ T9649] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.231117][T16283] batadv_slave_0: entered promiscuous mode [ 372.254431][T16285] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2596'. [ 372.261039][T16283] syzkaller1: entered promiscuous mode [ 372.280590][T16283] syzkaller1: entered allmulticast mode [ 372.285416][T16284] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2596'. [ 372.347256][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2598'. [ 372.366120][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2598'. [ 372.441006][T16293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2597'. [ 372.628310][T16282] batadv_slave_0: left promiscuous mode [ 373.363494][T16332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.442634][T16336] xt_hashlimit: size too large, truncated to 1048576 [ 373.592029][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 373.617774][T16349] openvswitch: netlink: Flow actions attr not present in new flow. [ 373.698638][T16354] netlink: 'syz.4.2613': attribute type 1 has an invalid length. [ 373.944303][T16354] bond8: entered promiscuous mode [ 373.977020][T16354] bond8: entered allmulticast mode [ 373.985991][T16354] 8021q: adding VLAN 0 to HW filter on device bond8 [ 374.026845][T16367] __nla_validate_parse: 3 callbacks suppressed [ 374.026861][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2615'. [ 374.052113][T16358] erspan1: entered allmulticast mode [ 374.069832][T16358] bond8: (slave erspan1): making interface the new active one [ 374.087114][T16358] erspan1: entered promiscuous mode [ 374.093779][T16358] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 374.251272][T16383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2619'. [ 374.581242][T16396] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2623'. [ 375.158387][T16435] openvswitch: netlink: Actions may not be safe on all matching packets [ 375.431042][T16455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2636'. [ 375.519222][T16464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2640'. [ 375.635046][T16462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2636'. [ 375.884796][T10649] udevd[10649]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 376.245505][T16499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2647'. [ 376.759742][T16522] gtp2: entered promiscuous mode [ 376.783935][T16522] gtp2: entered allmulticast mode [ 376.813359][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2655'. [ 376.847587][T16524] syzkaller0: entered promiscuous mode [ 376.853462][T16526] netlink: 'syz.3.2655': attribute type 9 has an invalid length. [ 376.867927][T16524] syzkaller0: entered allmulticast mode [ 376.870607][T16531] netlink: 'syz.0.2656': attribute type 11 has an invalid length. [ 376.877061][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2655'. [ 377.008309][T16537] netlink: 'syz.2.2658': attribute type 1 has an invalid length. [ 377.164551][T16548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2662'. [ 377.456977][T16566] bridge7: port 1(dummy0) entered blocking state [ 377.476687][T16566] bridge7: port 1(dummy0) entered disabled state [ 377.496578][T16566] dummy0: entered allmulticast mode [ 377.525063][T16566] dummy0: entered promiscuous mode [ 377.613328][T16572] dummy0 (unregistering): left allmulticast mode [ 377.645185][T16578] IPv6: NLM_F_CREATE should be specified when creating new route [ 377.656018][T16572] dummy0 (unregistering): left promiscuous mode [ 377.683026][T16572] bridge7: port 1(dummy0) entered disabled state [ 378.023834][T16596] netlink: 'syz.1.2673': attribute type 24 has an invalid length. [ 378.952339][T16636] syzkaller0: entered promiscuous mode [ 378.958308][T16636] syzkaller0: entered allmulticast mode [ 379.090410][T16646] __nla_validate_parse: 6 callbacks suppressed [ 379.090426][T16646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2684'. [ 379.513163][T16675] xt_policy: output policy not valid in PREROUTING and INPUT [ 379.551683][T16667] IPVS: Scheduler module ip_vs_sip not found [ 379.582024][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2693'. [ 379.602257][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2694'. [ 379.617321][T16675] netlink: 'syz.4.2693': attribute type 20 has an invalid length. [ 379.631250][T16681] set match dimension is over the limit! [ 379.677583][ T9668] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.703571][ T9668] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.726956][ T9668] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.735798][ T9668] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.782620][T16686] can: request_module (can-proto-0) failed. [ 379.920123][T16699] veth0_vlan: entered allmulticast mode [ 380.322359][T16724] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2704'. [ 382.421681][T16738] tipc: Trying to set illegal importance in message [ 382.477412][T16746] netlink: 'syz.3.2710': attribute type 8 has an invalid length. [ 382.583671][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'. [ 382.627738][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2714'. [ 382.666867][T16761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.710352][T16761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2712'. [ 382.726041][T16761] debugfs: 'netdev:syzkaller0' already exists in 'phy12' [ 382.815093][T16768] netlink: 'syz.0.2717': attribute type 1 has an invalid length. [ 382.825528][T16768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.990108][T16776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2720'. [ 383.057786][T16779] netlink: 'syz.0.2722': attribute type 21 has an invalid length. [ 383.066236][T16779] netlink: 'syz.0.2722': attribute type 22 has an invalid length. [ 383.074183][T16779] netlink: 'syz.0.2722': attribute type 23 has an invalid length. [ 383.082668][T16779] netlink: 'syz.0.2722': attribute type 25 has an invalid length. [ 383.091386][T16779] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2722'. [ 383.259514][T16791] ip6tnl7: entered allmulticast mode [ 383.422439][T16800] netlink: 'syz.1.2728': attribute type 6 has an invalid length. [ 383.433468][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2728'. [ 383.591411][T16808] xt_CONNSECMARK: invalid mode: 0 [ 384.332405][T16829] __nla_validate_parse: 2 callbacks suppressed [ 384.332422][T16829] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2737'. [ 384.461211][T16840] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2740'. [ 384.645110][T16849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2743'. [ 384.896553][T16864] bridge0: left promiscuous mode [ 384.924946][T16864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.979020][T16864] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.043925][T16864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.093006][T16884] IPVS: set_ctl: invalid protocol: 12 100.1.1.1:20000 [ 385.107374][T16883] IPVS: set_ctl: invalid protocol: 12 100.1.1.1:20000 [ 385.120728][T16864] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 385.129291][T16888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2750'. [ 385.219802][T16887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2750'. [ 385.376823][T16891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2752'. [ 385.679296][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2757'. [ 385.785181][T16913] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 385.810762][T16913] bond9 (unregistering): Released all slaves [ 385.989241][T16866] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.747598][ T5736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.110596][T16944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2765'. [ 387.112128][T16942] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2766'. [ 387.189073][T16935] pim6reg1: entered promiscuous mode [ 387.195118][T16935] pim6reg1: entered allmulticast mode [ 387.202345][T16950] netlink: 'syz.3.2764': attribute type 39 has an invalid length. [ 387.257047][T16950] hsr_slave_0 (unregistering): left promiscuous mode [ 387.494247][T16959] tipc: Enabled bearer , priority 0 [ 387.504054][T16964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2771'. [ 387.657070][T16959] tipc: Resetting bearer [ 387.713142][T16958] tipc: Disabling bearer [ 387.932117][T16983] pimreg: entered allmulticast mode [ 387.962702][T16982] pimreg: left allmulticast mode [ 388.208659][T16988] nbd: nbd64 already in use [ 388.317881][T17002] Cannot find set identified by id 3 to match [ 388.351516][T17002] netlink: 'syz.0.2779': attribute type 30 has an invalid length. [ 388.390597][T10649] udevd[10649]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 388.418734][T17002] bond11: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 388.430801][T17002] bond11 (unregistering): Released all slaves [ 388.862896][T17026] x_tables: duplicate underflow at hook 3 [ 388.959140][T17032] netlink: 'syz.1.2789': attribute type 1 has an invalid length. [ 389.002553][T17037] netlink: 'syz.2.2790': attribute type 1 has an invalid length. [ 389.170797][T17037] 8021q: adding VLAN 0 to HW filter on device bond10 [ 389.379822][T17062] vxcan2: entered allmulticast mode [ 389.572902][T17017] ip6_vti0 speed is unknown, defaulting to 1000 [ 389.758141][T17088] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20003 [ 389.921680][T17099] __nla_validate_parse: 10 callbacks suppressed [ 389.921697][T17099] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2804'. [ 389.948799][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2804'. [ 389.958663][T17099] netlink: 'syz.0.2804': attribute type 1 has an invalid length. [ 390.033903][T17105] macsec0: entered allmulticast mode [ 390.151053][T17111] xt_hashlimit: max too large, truncated to 1048576 [ 390.161182][T17113] x_tables: duplicate underflow at hook 3 [ 390.177150][T17111] xt_ecn: cannot match TCP bits for non-tcp packets [ 390.219549][T17115] openvswitch: netlink: Multiple metadata blocks provided [ 390.496564][T17116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2808'. [ 392.074112][T17125] ªªªªªª: renamed from lo [ 392.624461][T17155] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2820'. [ 392.713165][T17156] sctp: [Deprecated]: syz.4.2820 (pid 17156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.713165][T17156] Use struct sctp_sack_info instead [ 392.755797][T17155] sctp: [Deprecated]: syz.4.2820 (pid 17155) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.755797][T17155] Use struct sctp_sack_info instead [ 392.803441][T17156] sctp: [Deprecated]: syz.4.2820 (pid 17156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.803441][T17156] Use struct sctp_sack_info instead [ 392.853134][T17155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2820'. [ 392.990521][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2822'. [ 393.712518][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 393.726701][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 393.735675][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 393.743604][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 393.751234][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 394.401307][T17216] tipc: Enabled bearer , priority 0 [ 394.434668][T17216] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 394.455711][T17216] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 394.474354][T17216] tipc: Resetting bearer [ 394.497818][T17206] "syz.4.2833" (17206) uses obsolete ecb(arc4) skcipher [ 394.514656][T17216] tipc: Resetting bearer [ 394.938727][T17238] netlink: 'syz.1.2841': attribute type 1 has an invalid length. [ 395.090513][T17238] 8021q: adding VLAN 0 to HW filter on device bond9 [ 395.166865][T17238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2841'. [ 395.199636][T17238] netlink: 'syz.1.2841': attribute type 7 has an invalid length. [ 395.215941][T17247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2843'. [ 395.235685][T17238] netlink: 'syz.1.2841': attribute type 8 has an invalid length. [ 395.243516][T17247] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2843'. [ 395.257173][T17238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 395.273839][T17247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2843'. [ 395.297233][T17196] ip6_vti0 speed is unknown, defaulting to 1000 [ 395.785733][ T5640] Bluetooth: hci5: command tx timeout [ 396.350461][T11835] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 396.633111][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2846'. [ 396.684716][T17267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2846'. [ 397.865757][ T5640] Bluetooth: hci5: command tx timeout [ 397.875811][ T9668] tipc: Resetting bearer [ 397.889622][ T5735] tipc: Node number set to 87070815 [ 398.187409][T17280] netlink: 'syz.1.2849': attribute type 7 has an invalid length. [ 398.351719][T17289] xt_hashlimit: max too large, truncated to 1048576 [ 398.400665][T17289] Timeout policy `syz1' can only be used by L3 protocol number 1536 [ 398.517591][T17240] ip6_vti0 speed is unknown, defaulting to 1000 [ 399.007233][T17316] macvlan1 (unregistering): left promiscuous mode [ 399.149774][T17196] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.157903][T17196] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.174023][T17196] bridge_slave_0: entered allmulticast mode [ 399.193343][T17196] bridge_slave_0: entered promiscuous mode [ 399.223869][T17196] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.242167][T17196] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.262987][T17196] bridge_slave_1: entered allmulticast mode [ 399.292305][T17196] bridge_slave_1: entered promiscuous mode [ 399.323270][T17335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 399.495439][T17334] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 399.502761][T17334] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 399.510285][T17334] ip6gre1: left allmulticast mode [ 399.517674][T17334] bond2: left promiscuous mode [ 399.522448][T17334] bridge2: left promiscuous mode [ 399.528262][T17334] macvtap1: left promiscuous mode [ 399.533302][T17334] macvtap1: left allmulticast mode [ 399.538917][T17334] macvtap2: left promiscuous mode [ 399.543978][T17334] macvtap2: left allmulticast mode [ 399.572191][T17334] hsr1: left promiscuous mode [ 399.577740][T17334] bond5: left promiscuous mode [ 399.582585][T17334] erspan1: left promiscuous mode [ 399.587915][T17334] bond5: left allmulticast mode [ 399.598211][T17334] erspan1: left allmulticast mode [ 399.610974][T17334] ip6tnl4: left allmulticast mode [ 399.625406][T17334] geneve3: left promiscuous mode [ 399.633468][T17334] ip6tnl5: left allmulticast mode [ 399.642723][T17334] ip6tnl7: left allmulticast mode [ 399.664267][T17196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.688618][T17196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.708471][ T9663] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.736063][ T9663] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.746692][ T9663] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.762631][ T9663] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.763188][T17352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2859'. [ 399.839976][T17354] xt_hashlimit: size too large, truncated to 1048576 [ 399.848577][ T9663] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.863992][ T9663] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.888156][ T9663] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.910149][ T9663] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.926040][T17352] netlink: 'syz.1.2859': attribute type 1 has an invalid length. [ 399.949451][ T5640] Bluetooth: hci5: command tx timeout [ 399.972237][T17365] netlink: 'syz.1.2859': attribute type 1 has an invalid length. [ 399.974703][T17196] team0: Port device team_slave_0 added [ 400.014066][T17196] team0: Port device team_slave_1 added [ 400.032709][T17365] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2859'. [ 400.175119][T17196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.216792][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.269406][T17196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.301345][T17196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.315704][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.390663][T17196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.613403][T17196] hsr_slave_0: entered promiscuous mode [ 400.668768][T17196] hsr_slave_1: entered promiscuous mode [ 401.174693][T17418] netlink: 'syz.3.2867': attribute type 8 has an invalid length. [ 401.194636][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2867'. [ 401.727944][T17441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.026221][ T5640] Bluetooth: hci5: command tx timeout [ 402.471296][T17475] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2878'. [ 402.484078][T17477] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 402.761520][T17196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.830280][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.847497][T17196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.869840][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.880537][T17196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.902123][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.929305][T17494] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 402.968737][T17196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.003445][T17196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.370624][T17196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.393731][T17523] netlink: 'syz.3.2888': attribute type 1 has an invalid length. [ 403.508879][T17529] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2889'. [ 403.568774][T17528] bond14: (slave bridge8): making interface the new active one [ 403.582614][T17528] bond14: (slave bridge8): Enslaving as an active interface with an up link [ 403.597231][T17196] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.670351][T17535] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2889'. [ 403.700330][T17535] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2889'. [ 403.745520][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.753376][ T5950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.807671][T17528] syzkaller0: entered promiscuous mode [ 403.813473][T17528] syzkaller0: entered allmulticast mode [ 403.872397][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.879616][ T5950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.122323][T17555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2893'. [ 404.548528][T17529] ip6_vti0 speed is unknown, defaulting to 1000 [ 404.576359][T17582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2898'. [ 404.844931][T17592] netlink: 'syz.1.2899': attribute type 21 has an invalid length. [ 404.866858][T17591] Cannot find set identified by id 0 to match [ 404.945890][T17196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.142548][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2902'. [ 405.247901][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2902'. [ 405.279262][T17196] veth0_vlan: entered promiscuous mode [ 405.327679][T17196] veth1_vlan: entered promiscuous mode [ 405.448766][T17196] veth0_macvtap: entered promiscuous mode [ 405.492902][T17196] veth1_macvtap: entered promiscuous mode [ 405.539298][T17196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.580722][T17196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.612066][ T9649] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.675486][ T9649] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.684961][ T9649] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.697632][T17627] Bluetooth: MGMT ver 1.23 [ 405.711819][ T9649] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.977383][T17634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2909'. [ 405.995968][ T5950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.018657][ T5950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.139055][ T5950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.164056][ T5950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.331825][T17645] netlink: 'syz.0.2828': attribute type 29 has an invalid length. [ 406.411964][T17651] __nla_validate_parse: 2 callbacks suppressed [ 406.411980][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2913'. [ 406.452181][T17653] batman_adv: batadv0: Interface activated: vlan2 [ 406.568244][T17653] team0: left promiscuous mode [ 406.577057][T17653] team_slave_0: left promiscuous mode [ 406.584426][T17653] team_slave_1: left promiscuous mode [ 406.595135][T17653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.650512][T17653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.659590][T17653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.677297][T17653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 406.687761][T17653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.706962][T17653] veth1_vlan: left promiscuous mode [ 406.713933][T17653] veth0_vlan: left promiscuous mode [ 406.720291][T17653] veth0_vlan: entered promiscuous mode [ 406.729155][T17653] veth1_vlan: entered promiscuous mode [ 406.740782][T17653] veth1_macvtap: left promiscuous mode [ 406.748623][T17653] veth0_macvtap: left promiscuous mode [ 406.758245][T17653] veth0_macvtap: entered promiscuous mode [ 406.770194][T17653] veth1_macvtap: entered promiscuous mode [ 406.777157][T17653] veth1_macvtap: entered allmulticast mode [ 406.787630][T17653] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 406.800333][T17653] vlan3: left promiscuous mode [ 406.805130][T17653] bridge0: left promiscuous mode [ 406.812458][T17653] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 406.824242][T17653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.838483][T17653] 8021q: adding VLAN 0 to HW filter on device  [ 406.848855][T17653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.857763][T17653] veth0_to_team: entered promiscuous mode [ 406.864893][T17653] bond0: left promiscuous mode [ 406.870166][T17653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.878613][T17653] 8021q: adding VLAN 0 to HW filter on device bond3 [ 406.889373][T17653] 8021q: adding VLAN 0 to HW filter on device bond4 [ 406.896662][T17653] virt_wifi0: entered promiscuous mode [ 406.902396][T17653] virt_wifi0: entered allmulticast mode [ 406.908909][T17653] macsec1: left promiscuous mode [ 406.916660][T17653] geneve2: left promiscuous mode [ 406.923429][T17653] gtp2: left promiscuous mode [ 406.937081][T17653] 8021q: adding VLAN 0 to HW filter on device bond5 [ 406.946055][T17653] bond6: left promiscuous mode [ 406.950827][T17653] veth3: left promiscuous mode [ 406.957142][T17653] 8021q: adding VLAN 0 to HW filter on device bond6 [ 406.967336][T17653] 8021q: adding VLAN 0 to HW filter on device eth0 [ 406.976791][T17653] 8021q: adding VLAN 0 to HW filter on device eth1 [ 406.988451][T17653] 8021q: adding VLAN 0 to HW filter on device eth2 [ 406.997104][T17653] 8021q: adding VLAN 0 to HW filter on device eth3 [ 407.008541][T17653] 8021q: adding VLAN 0 to HW filter on device bond7 [ 407.018517][T17653] 8021q: adding VLAN 0 to HW filter on device bond8 [ 407.028636][T17653] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 407.036812][T17653] tipc: Resetting bearer [ 407.094315][ T8969] ip6_vti0 speed is unknown, defaulting to 1000 [ 407.100721][ T8969] syz2: Port: 1 Link ACTIVE [ 407.112424][ T24] ip6_vti0 speed is unknown, defaulting to 1000 [ 407.277013][ T9658] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.296768][ T9658] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 407.316672][ T9658] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.335170][ T9658] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 407.364270][ T9658] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.375183][ T9658] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 407.403305][ T9658] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.429778][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 407.432352][ T9658] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 407.446542][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 407.457353][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 407.470131][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 407.478077][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 407.611008][ T9658] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.623385][ T9658] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 407.634819][ T9658] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.643384][ T9658] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 407.671782][ T9658] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.682062][ T9658] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 407.707034][ T9658] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.746381][ T9658] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 407.788613][T17692] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 407.885320][T17696] netlink: 'syz.4.2918': attribute type 4 has an invalid length. [ 408.161402][T17706] netlink: 'syz.4.2923': attribute type 2 has an invalid length. [ 408.170466][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2922'. [ 408.196791][T17706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2923'. [ 408.201544][T17704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2922'. [ 408.244919][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2922'. [ 408.277218][T17704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2922'. [ 408.404854][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2924'. [ 408.457460][T17716] netlink: 'syz.2.2924': attribute type 1 has an invalid length. [ 408.492670][T17721] netlink: 'syz.1.2927': attribute type 1 has an invalid length. [ 408.501321][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2924'. [ 408.670166][T17735] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2927'. [ 408.688671][T17721] 8021q: adding VLAN 0 to HW filter on device bond10 [ 408.812874][T17740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2930'. [ 408.905165][T17678] ip6_vti0 speed is unknown, defaulting to 1000 [ 409.191046][T17725] smc: removing ib device syz2 [ 409.290767][T17725] smbdirect: ib_dev[syz2] removed [ 409.547528][ T5640] Bluetooth: hci1: command tx timeout [ 410.912361][ T9660] team0: Port device ip6gre1 removed [ 411.319603][ T9660] bond5 (unregistering): (slave erspan1): Releasing active interface [ 411.622076][ T9660] bond7 (unregistering): (slave geneve2): Releasing active interface [ 411.642091][ T5640] Bluetooth: hci1: command tx timeout [ 411.840578][ T9660] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 412.071247][ T9660] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 412.226698][ T9660] bond14 (unregistering): (slave bridge8): Releasing active interface [ 412.284739][ T9660] bond0 (unregistering): (slave team0): Releasing backup interface [ 412.302632][ T9660] bond0 (unregistering): Released all slaves [ 412.314797][ T9660] bond1 (unregistering): Released all slaves [ 412.328200][ T9660] bond2 (unregistering): Released all slaves [ 412.341473][ T9660] bond3 (unregistering): Released all slaves [ 412.355777][ T9660] bond4 (unregistering): Released all slaves [ 412.369839][ T9660] bond5 (unregistering): Released all slaves [ 412.383010][ T9660] bond6 (unregistering): Released all slaves [ 412.404966][ T9660] bond7 (unregistering): Released all slaves [ 412.424017][ T9660] bond8 (unregistering): Released all slaves [ 412.438424][ T9660] bond9 (unregistering): Released all slaves [ 412.452545][ T9660] bond10 (unregistering): (slave veth11): Releasing active interface [ 412.463176][ T9660] bond10 (unregistering): Released all slaves [ 412.479312][ T9660] bond11 (unregistering): Released all slaves [ 412.493059][ T9660] bond12 (unregistering): Released all slaves [ 412.509521][ T9660] bond13 (unregistering): Released all slaves [ 412.526599][ T9660] bond14 (unregistering): Released all slaves [ 412.543907][T17784] mac80211_hwsim hwsim7 wlan1: Master is either lo or non-ether device [ 412.718551][T17824] gtp2: entered promiscuous mode [ 412.723625][T17824] gtp2: entered allmulticast mode [ 412.732406][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 412.874270][ T9660] 5nè: left promiscuous mode [ 413.152333][T17678] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.186656][T17678] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.209721][T17678] bridge_slave_0: entered allmulticast mode [ 413.241827][T17678] bridge_slave_0: entered promiscuous mode [ 413.276849][ T9660] tipc: Disabling bearer [ 413.297075][ T9660] tipc: Left network mode [ 413.308033][T17678] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.347721][T17678] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.377418][T17678] bridge_slave_1: entered allmulticast mode [ 413.414647][T17678] bridge_slave_1: entered promiscuous mode [ 413.436803][T17853] syzkaller1: entered promiscuous mode [ 413.452048][T17853] syzkaller1: entered allmulticast mode [ 413.486479][T17866] __nla_validate_parse: 1 callbacks suppressed [ 413.486494][T17866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2958'. [ 413.538365][T17678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.594757][T17678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.708960][ T5640] Bluetooth: hci1: command tx timeout [ 413.812068][T17884] pim6reg: entered allmulticast mode [ 413.991659][T17887] pim6reg: left allmulticast mode [ 414.061740][T17901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'. [ 414.218165][T17678] team0: Port device team_slave_0 added [ 414.235377][ T5950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.255133][T17678] team0: Port device team_slave_1 added [ 414.266121][ T5950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.287981][T17896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'. [ 414.299339][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 414.307093][T17907] xt_hashlimit: size too large, truncated to 1048576 [ 414.312279][T17896] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2965'. [ 414.352945][T17896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'. [ 414.369781][T17896] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2965'. [ 414.387937][T17909] macsec2: entered promiscuous mode [ 414.400385][T17912] netlink: 'syz.1.2966': attribute type 1 has an invalid length. [ 414.413683][T17896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'. [ 414.445658][T17912] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2966'. [ 414.576908][T17678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.601427][T17678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.653112][T17678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.679000][T17920] bridge0: port 1(erspan0) entered blocking state [ 414.692098][T17920] bridge0: port 1(erspan0) entered disabled state [ 414.700519][T17920] erspan0: entered allmulticast mode [ 414.721274][T17920] erspan0: entered promiscuous mode [ 414.838974][T17914] bond9: entered allmulticast mode [ 414.845208][T17678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.877446][T17678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.904222][T17678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.925459][T17923] erspan0: left allmulticast mode [ 414.930872][T17923] erspan0: left promiscuous mode [ 414.943286][T17923] bridge0: port 1(erspan0) entered disabled state [ 415.337538][T17678] hsr_slave_0: entered promiscuous mode [ 415.346671][T17952] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2971'. [ 415.363233][T17678] hsr_slave_1: entered promiscuous mode [ 415.373212][T17954] xt_hashlimit: size too large, truncated to 1048576 [ 415.381841][T17678] debugfs: 'hsr0' already exists in 'hsr' [ 415.388299][T17954] xt_hashlimit: max too large, truncated to 1048576 [ 415.394934][T17678] Cannot create hsr debugfs directory [ 415.401487][T17955] netlink: 'syz.2.2971': attribute type 4 has an invalid length. [ 415.468344][T17957] netlink: 'syz.1.2972': attribute type 1 has an invalid length. [ 415.481855][T17950] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 415.509963][T17961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2973'. [ 415.786097][ T5640] Bluetooth: hci1: command tx timeout [ 416.470636][T17993] bridge_slave_1: left allmulticast mode [ 416.499424][T17993] bridge_slave_1: left promiscuous mode [ 416.509991][T17993] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.537267][T17993] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 416.578041][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 416.597665][ T9660] veth1_to_team: left promiscuous mode [ 416.621038][ T9660] hsr_slave_1: left promiscuous mode [ 417.130977][T18009] ip6gre1: entered promiscuous mode [ 417.142342][T18009] ip6gre1: entered allmulticast mode [ 417.800183][ T9660] IPVS: stop unused estimator thread 0... [ 418.757563][T17678] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 418.794759][T17678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.826602][T17678] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 418.877721][T17678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 418.987971][T18086] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.020054][T18086] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 419.040433][T18086] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.060718][T18086] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 419.122515][T17678] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 419.161571][T17678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.200926][T17678] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 419.237374][T17678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.341168][T18086] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.377676][T18086] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 419.410907][T18086] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.429297][T18086] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 419.447714][T18122] __nla_validate_parse: 6 callbacks suppressed [ 419.447730][T18122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3013'. [ 419.528128][T18122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3013'. [ 419.553015][ T9643] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.570183][ T9643] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.785512][ T9643] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.867176][T18086] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.895782][T18086] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 419.936867][T18086] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.982298][T18086] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 420.033252][ T9643] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.038328][T18148] x_tables: ip_tables: ah match: only valid for protocol 51 [ 420.073880][ T9643] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.091409][ T9643] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.109174][T18148] netlink: 'syz.0.3014': attribute type 4 has an invalid length. [ 420.199814][T18086] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.244790][T18086] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 420.274680][T18086] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.299252][T18154] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3015'. [ 420.314180][T18086] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 420.326042][T18154] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3015'. [ 420.371295][ T9643] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.395166][ T9643] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.557670][ T9668] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.567563][ T9668] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 420.586032][ T9668] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 420.604870][ T9668] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.701559][ T9649] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.730125][ T9649] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 420.757190][ T9649] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 420.785790][ T9649] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.831743][ T9649] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.840168][ T9649] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 420.848767][ T9649] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 420.857088][ T9649] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.888930][ T9649] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.907573][ T9649] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 420.928041][ T9649] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 420.947247][ T9649] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.975495][T17678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.091698][T17678] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.133966][ T9668] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.141183][ T9668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.185376][ T9668] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.192598][ T9668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.404532][T18197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3021'. [ 421.481197][T18201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3021'. [ 423.270963][T18257] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.303871][T18257] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.600990][T18287] netlink: 'syz.1.3031': attribute type 1 has an invalid length. [ 423.685021][T18290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3031'. [ 423.729963][T18287] 8021q: adding VLAN 0 to HW filter on device bond11 [ 423.841574][T18257] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.862867][T18257] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.019899][T18257] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.045065][T18257] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.111884][T17678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.259917][T18257] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.292983][T18257] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.427765][T18309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3034'. [ 424.436272][T17678] veth0_vlan: entered promiscuous mode [ 424.466830][T17678] veth1_vlan: entered promiscuous mode [ 424.552558][T17678] veth0_macvtap: entered promiscuous mode [ 424.574955][T17678] veth1_macvtap: entered promiscuous mode [ 424.640608][ T9643] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.659139][ T9643] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.741092][ T9676] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.756665][T18317] --map-set only usable from mangle table [ 424.761915][ T9676] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.803550][ T9643] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.823995][ T9643] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.885534][ T9660] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.918887][ T9660] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.944586][T17678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.969075][T17678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.027989][ T9643] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.053713][ T9643] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.080152][T18327] netlink: 'syz.2.3039': attribute type 13 has an invalid length. [ 425.081230][ T9643] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.119727][ T9643] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.255354][T18341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3043'. [ 425.628521][T18351] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3044'. [ 425.666375][T18352] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3044'. [ 425.840953][ T9660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.875895][ T9660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.985266][ T9660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.020008][ T9660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.457147][T18376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.551082][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.565007][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.580299][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.592522][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 426.603987][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 427.208562][ T9676] smc: removing ib device syz1 [ 427.420542][ T9676] smbdirect: ib_dev[syz1] removed [ 427.489751][T18379] infiniband syz0: set down [ 427.506771][T18379] infiniband syz0: added ipvlan1 [ 427.568179][T18379] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 427.585005][T18379] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 427.602792][T18379] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 427.667552][T18379] RDS/IB: syz0: added [ 427.693565][T18379] smc: adding ib device syz0 with port count 1 [ 427.701333][T18379] smc: ib device syz0 port 1 has no pnetid [ 427.853737][T18423] netlink: 'syz.1.3059': attribute type 4 has an invalid length. [ 428.065909][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3061'. [ 428.388279][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3065'. [ 428.408961][T18446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3064'. [ 428.666007][ T5630] Bluetooth: hci0: command tx timeout [ 429.378499][T18452] netlink: 'syz.1.3067': attribute type 9 has an invalid length. [ 429.816568][T18470] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.855125][T18470] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.028833][T18470] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.057575][T18470] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.360673][T18490] geneve4: entered promiscuous mode [ 430.377293][T18490] geneve4: entered allmulticast mode [ 430.424461][T18489] geneve4: entered promiscuous mode [ 430.440504][T18489] geneve4: entered allmulticast mode [ 430.450767][T18493] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 430.501250][T18470] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.512179][T18470] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.622670][T18377] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.631553][T18377] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.640679][T18377] bridge_slave_0: entered allmulticast mode [ 430.648741][T18377] bridge_slave_0: entered promiscuous mode [ 430.665938][T18377] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.673943][T18377] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.681497][T18377] bridge_slave_1: entered allmulticast mode [ 430.689461][T18377] bridge_slave_1: entered promiscuous mode [ 430.734944][T18377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.748047][ T5630] Bluetooth: hci0: command tx timeout [ 430.759054][T18377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.812087][T18377] team0: Port device team_slave_0 added [ 430.827721][T18377] team0: Port device team_slave_1 added [ 430.857958][T18377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.875815][T18377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.902132][T18377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.915672][T18377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.922615][T18377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.949937][T18377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.006690][T18377] hsr_slave_0: entered promiscuous mode [ 431.013268][T18377] hsr_slave_1: entered promiscuous mode [ 431.020090][T18377] debugfs: 'hsr0' already exists in 'hsr' [ 431.025902][T18377] Cannot create hsr debugfs directory [ 431.838017][T18470] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.849381][T18470] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.850120][T18507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3080'. [ 431.923460][T18507] xt_l2tp: invalid flags combination: 8 [ 432.138314][T18507] netlink: 'syz.1.3080': attribute type 1 has an invalid length. [ 432.151238][T18508] gre0: entered promiscuous mode [ 432.159775][T18508] gre0: entered allmulticast mode [ 432.243550][ T9660] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.255203][ T9660] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.292664][T18513] netlink: 'syz.1.3082': attribute type 13 has an invalid length. [ 432.323804][ T9660] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.337502][ T9660] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.557819][T18513] tipc: Resetting bearer [ 432.564341][T18513] tipc: Resetting bearer [ 432.606248][ T9660] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.614751][ T9660] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.728096][ T9663] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.739841][ T9663] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.768527][T18526] x_tables: duplicate underflow at hook 2 [ 432.826998][ T5630] Bluetooth: hci0: command tx timeout [ 433.031738][T18533] tipc: Enabling of bearer rejected, already enabled [ 433.041070][T18536] bond0: option arp_validate: invalid value (55553) [ 433.048159][T18537] netlink: 'syz.0.3088': attribute type 1 has an invalid length. [ 433.060444][T18530] netlink: 'syz.1.3086': attribute type 10 has an invalid length. [ 433.309884][T18547] BUG: Bad page state in process syz.0.3088 pfn:b36dc [ 433.316831][T18547] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb36dc [ 433.325647][T18547] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 433.332795][T18547] page_type: f9(unknown) [ 433.337065][T18547] raw: 00fff00000000000 0000000000000000 ffff88801afab000 0000000000000000 [ 433.345676][T18547] raw: 0000000000000000 3ffffffffffffffe 00000000f9000000 0000000000000000 [ 433.354251][T18547] page dumped because: page_pool leak SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 433.359659][T18547] page_owner tracks the page as allocated [ 433.365373][T18547] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 15334, tgid 15329 (syz.2.2353), ts 349864874686, free_ts 346837930087 [ 433.382613][T18547] post_alloc_hook+0x231/0x280 [ 433.387522][T18547] get_page_from_freelist+0x24ba/0x2540 [ 433.393107][T18547] __alloc_frozen_pages_noprof+0x18d/0x380 [ 433.398972][T18547] __alloc_pages_noprof+0x10/0x100 [ 433.404099][T18547] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 433.409615][T18547] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 433.415839][T18547] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 433.421660][T18547] skb_pp_cow_data+0x287/0x19b0 [ 433.426647][T18547] do_xdp_generic+0x76b/0x12e0 [ 433.431495][T18547] __netif_receive_skb_core+0x10e5/0x3170 [ 433.437345][T18547] process_backlog+0x76d/0x1950 [ 433.442209][T18547] __napi_poll+0xae/0x340 [ 433.446610][T18547] net_rx_action+0x627/0xf70 [ 433.451221][T18547] handle_softirqs+0x22a/0x840 [ 433.456105][T18547] do_softirq+0x76/0xd0 [ 433.460264][T18547] __local_bh_enable_ip+0xf8/0x130 [ 433.465381][T18547] page last free pid 5720 tgid 5720 stack trace: [ 433.471749][T18547] __free_frozen_pages+0xbc7/0xd30 [ 433.476906][T18547] pcpu_depopulate_chunk+0x45f/0x500 [ 433.482264][T18547] pcpu_balance_workfn+0x379/0x1010 [ 433.487513][T18547] process_scheduled_works+0xb5d/0x1860 [ 433.493099][T18547] worker_thread+0xa53/0xfc0 [ 433.497839][T18547] kthread+0x389/0x470 [ 433.501946][T18547] ret_from_fork+0x514/0xb70 [ 433.506617][T18547] ret_from_fork_asm+0x1a/0x30 [ 433.511425][T18547] Modules linked in: [ 433.515341][T18547] CPU: 1 UID: 0 PID: 18547 Comm: syz.0.3088 Not tainted syzkaller #0 PREEMPT(full) [ 433.515362][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 433.515377][T18547] Call Trace: [ 433.515389][T18547] [ 433.515397][T18547] dump_stack_lvl+0xe8/0x150 [ 433.515421][T18547] bad_page+0x17f/0x1c0 [ 433.515445][T18547] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 433.515547][T18547] bpf_xdp_adjust_tail+0x1d6/0x220 [ 433.515606][T18547] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 433.515624][T18547] bpf_prog_run_generic_xdp+0x603/0x1490 [ 433.515670][T18547] do_xdp_generic+0xac5/0x12e0 [ 433.515688][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 433.515734][T18547] ? __pfx_do_xdp_generic+0x10/0x10 [ 433.515766][T18547] ? tun_get_user+0x2394/0x43e0 [ 433.515905][T18547] ? tun_get_user+0x2394/0x43e0 [ 433.515926][T18547] tun_get_user+0x24ca/0x43e0 [ 433.515964][T18547] ? aa_file_perm+0x192/0x15e0 [ 433.516048][T18547] ? aa_file_perm+0x50e/0x15e0 [ 433.516070][T18547] ? __pfx_tun_get_user+0x10/0x10 [ 433.516095][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 433.516117][T18547] ? __pfx_file_ioctl+0x10/0x10 [ 433.516163][T18547] ? ref_tracker_alloc+0x35c/0x4c0 [ 433.516265][T18547] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 433.516289][T18547] ? tun_get+0x1c/0x2f0 [ 433.516309][T18547] ? tun_get+0x1c/0x2f0 [ 433.516336][T18547] ? tun_get+0x1c/0x2f0 [ 433.516356][T18547] ? tun_get+0x1c/0x2f0 [ 433.516379][T18547] tun_chr_write_iter+0x113/0x200 [ 433.516403][T18547] vfs_write+0x61d/0xb90 [ 433.516435][T18547] ? __pfx_vfs_write+0x10/0x10 [ 433.516483][T18547] ? __fget_files+0x2a/0x420 [ 433.516521][T18547] ksys_write+0x150/0x270 [ 433.516545][T18547] ? __pfx_ksys_write+0x10/0x10 [ 433.516566][T18547] ? __pfx_kcov_ioctl+0x10/0x10 [ 433.516613][T18547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.516651][T18547] do_syscall_64+0x15f/0xf80 [ 433.516775][T18547] ? trace_irq_disable+0x3b/0x140 [ 433.516810][T18547] ? clear_bhb_loop+0x40/0x90 [ 433.516831][T18547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.516847][T18547] RIP: 0033:0x7f025715d68e [ 433.516863][T18547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 433.516940][T18547] RSP: 002b:00007f0254ff3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 433.516962][T18547] RAX: ffffffffffffffda RBX: 00007f0254ff46c0 RCX: 00007f025715d68e [ 433.516973][T18547] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 433.516983][T18547] RBP: 00007f0257232d6f R08: 0000000000000000 R09: 0000000000000000 [ 433.516992][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.517000][T18547] R13: 00007f0257416308 R14: 00007f0257416270 R15: 00007ffcbb59fd88 [ 433.517029][T18547] [ 433.786944][T18547] Disabling lock debugging due to kernel taint [ 433.793090][T18547] BUG: Bad page state in process syz.0.3088 pfn:b36b3 [ 433.799945][T18547] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb36b3 [ 433.808722][T18547] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 433.815854][T18547] page_type: f9(unknown) [ 433.820099][T18547] raw: 00fff00000000000 0000000000000000 ffff88801afab000 0000000000000000 [ 433.828714][T18547] raw: 0000000000000000 0000000000000001 00000000f9000000 0000000000000000 [ 433.837314][T18547] page dumped because: page_pool leak [ 433.842670][T18547] page_owner tracks the page as allocated [ 433.848389][T18547] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 15334, tgid 15329 (syz.2.2353), ts 349866068662, free_ts 346837890912 [ 433.865587][T18547] post_alloc_hook+0x231/0x280 [ 433.870362][T18547] get_page_from_freelist+0x24ba/0x2540 [ 433.875938][T18547] __alloc_frozen_pages_noprof+0x18d/0x380 [ 433.881754][T18547] __alloc_pages_noprof+0x10/0x100 [ 433.886890][T18547] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 433.892369][T18547] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 433.898464][T18547] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 433.904294][T18547] skb_pp_cow_data+0x287/0x19b0 [ 433.909180][T18547] do_xdp_generic+0x76b/0x12e0 [ 433.913948][T18547] __netif_receive_skb_core+0x10e5/0x3170 [ 433.919717][T18547] process_backlog+0x76d/0x1950 [ 433.924574][T18547] __napi_poll+0xae/0x340 [ 433.928930][T18547] net_rx_action+0x627/0xf70 [ 433.933517][T18547] handle_softirqs+0x22a/0x840 [ 433.938315][T18547] do_softirq+0x76/0xd0 [ 433.942467][T18547] __local_bh_enable_ip+0xf8/0x130 [ 433.947589][T18547] page last free pid 5720 tgid 5720 stack trace: [ 433.953905][T18547] __free_frozen_pages+0xbc7/0xd30 [ 433.959032][T18547] pcpu_depopulate_chunk+0x45f/0x500 [ 433.964323][T18547] pcpu_balance_workfn+0x379/0x1010 [ 433.969538][T18547] process_scheduled_works+0xb5d/0x1860 [ 433.975079][T18547] worker_thread+0xa53/0xfc0 [ 433.979682][T18547] kthread+0x389/0x470 [ 433.983751][T18547] ret_from_fork+0x514/0xb70 [ 433.988354][T18547] ret_from_fork_asm+0x1a/0x30 [ 433.993118][T18547] Modules linked in: [ 433.997033][T18547] CPU: 1 UID: 0 PID: 18547 Comm: syz.0.3088 Tainted: G B syzkaller #0 PREEMPT(full) [ 433.997055][T18547] Tainted: [B]=BAD_PAGE [ 433.997059][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 433.997066][T18547] Call Trace: [ 433.997071][T18547] [ 433.997077][T18547] dump_stack_lvl+0xe8/0x150 [ 433.997096][T18547] bad_page+0x17f/0x1c0 [ 433.997111][T18547] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 433.997133][T18547] bpf_xdp_adjust_tail+0x1d6/0x220 [ 433.997151][T18547] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 433.997163][T18547] bpf_prog_run_generic_xdp+0x603/0x1490 [ 433.997186][T18547] do_xdp_generic+0xac5/0x12e0 [ 433.997198][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 433.997219][T18547] ? __pfx_do_xdp_generic+0x10/0x10 [ 433.997235][T18547] ? tun_get_user+0x2394/0x43e0 [ 433.997256][T18547] ? tun_get_user+0x2394/0x43e0 [ 433.997269][T18547] tun_get_user+0x24ca/0x43e0 [ 433.997287][T18547] ? aa_file_perm+0x192/0x15e0 [ 433.997305][T18547] ? aa_file_perm+0x50e/0x15e0 [ 433.997319][T18547] ? __pfx_tun_get_user+0x10/0x10 [ 433.997334][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 433.997352][T18547] ? __pfx_file_ioctl+0x10/0x10 [ 433.997371][T18547] ? ref_tracker_alloc+0x35c/0x4c0 [ 433.997388][T18547] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 433.997403][T18547] ? tun_get+0x1c/0x2f0 [ 433.997416][T18547] ? tun_get+0x1c/0x2f0 [ 433.997431][T18547] ? tun_get+0x1c/0x2f0 [ 433.997444][T18547] ? tun_get+0x1c/0x2f0 [ 433.997459][T18547] tun_chr_write_iter+0x113/0x200 [ 433.997474][T18547] vfs_write+0x61d/0xb90 [ 433.997493][T18547] ? __pfx_vfs_write+0x10/0x10 [ 433.997511][T18547] ? __fget_files+0x2a/0x420 [ 433.997526][T18547] ksys_write+0x150/0x270 [ 433.997542][T18547] ? __pfx_ksys_write+0x10/0x10 [ 433.997556][T18547] ? __pfx_kcov_ioctl+0x10/0x10 [ 433.997574][T18547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.997586][T18547] do_syscall_64+0x15f/0xf80 [ 433.997602][T18547] ? trace_irq_disable+0x3b/0x140 [ 433.997618][T18547] ? clear_bhb_loop+0x40/0x90 [ 433.997631][T18547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.997642][T18547] RIP: 0033:0x7f025715d68e [ 433.997653][T18547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 433.997663][T18547] RSP: 002b:00007f0254ff3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 433.997676][T18547] RAX: ffffffffffffffda RBX: 00007f0254ff46c0 RCX: 00007f025715d68e [ 433.997685][T18547] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 433.997693][T18547] RBP: 00007f0257232d6f R08: 0000000000000000 R09: 0000000000000000 [ 433.997700][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.997707][T18547] R13: 00007f0257416308 R14: 00007f0257416270 R15: 00007ffcbb59fd88 [ 433.997721][T18547] [ 433.997733][T18547] BUG: Bad page state in process syz.0.3088 pfn:5454b [ 434.280298][T18547] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805454b000 pfn:0x5454b [ 434.290414][T18547] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 434.297538][T18547] page_type: f9(unknown) [ 434.301766][T18547] raw: 00fff00000000000 0000000000000000 ffff88801afab000 0000000000000000 [ 434.310375][T18547] raw: ffff88805454b000 0000000000000001 00000000f9000000 0000000000000000 [ 434.318974][T18547] page dumped because: page_pool leak [ 434.324320][T18547] page_owner tracks the page as allocated [ 434.330042][T18547] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 15334, tgid 15329 (syz.2.2353), ts 349866454565, free_ts 346837858623 [ 434.347247][T18547] post_alloc_hook+0x231/0x280 [ 434.352000][T18547] get_page_from_freelist+0x24ba/0x2540 [ 434.357549][T18547] __alloc_frozen_pages_noprof+0x18d/0x380 [ 434.363351][T18547] __alloc_pages_noprof+0x10/0x100 [ 434.368480][T18547] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 434.373937][T18547] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 434.380009][T18547] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 434.385829][T18547] skb_pp_cow_data+0x287/0x19b0 [ 434.390662][T18547] do_xdp_generic+0x76b/0x12e0 [ 434.395398][T18547] __netif_receive_skb_core+0x10e5/0x3170 [ 434.401125][T18547] process_backlog+0x76d/0x1950 [ 434.406001][T18547] __napi_poll+0xae/0x340 [ 434.410349][T18547] net_rx_action+0x627/0xf70 [ 434.414950][T18547] handle_softirqs+0x22a/0x840 [ 434.419772][T18547] do_softirq+0x76/0xd0 [ 434.423927][T18547] __local_bh_enable_ip+0xf8/0x130 [ 434.429055][T18547] page last free pid 5720 tgid 5720 stack trace: [ 434.435368][T18547] __free_frozen_pages+0xbc7/0xd30 [ 434.440487][T18547] pcpu_depopulate_chunk+0x45f/0x500 [ 434.445785][T18547] pcpu_balance_workfn+0x379/0x1010 [ 434.450967][T18547] process_scheduled_works+0xb5d/0x1860 [ 434.456522][T18547] worker_thread+0xa53/0xfc0 [ 434.461102][T18547] kthread+0x389/0x470 [ 434.465150][T18547] ret_from_fork+0x514/0xb70 [ 434.469743][T18547] ret_from_fork_asm+0x1a/0x30 [ 434.474509][T18547] Modules linked in: [ 434.478977][T18547] CPU: 1 UID: 0 PID: 18547 Comm: syz.0.3088 Tainted: G B syzkaller #0 PREEMPT(full) [ 434.479005][T18547] Tainted: [B]=BAD_PAGE [ 434.479010][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.479020][T18547] Call Trace: [ 434.479028][T18547] [ 434.479036][T18547] dump_stack_lvl+0xe8/0x150 [ 434.479057][T18547] bad_page+0x17f/0x1c0 [ 434.479075][T18547] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 434.479101][T18547] bpf_xdp_adjust_tail+0x1d6/0x220 [ 434.479127][T18547] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 434.479143][T18547] bpf_prog_run_generic_xdp+0x603/0x1490 [ 434.479169][T18547] do_xdp_generic+0xac5/0x12e0 [ 434.479184][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 434.479205][T18547] ? __pfx_do_xdp_generic+0x10/0x10 [ 434.479226][T18547] ? tun_get_user+0x2394/0x43e0 [ 434.479253][T18547] ? tun_get_user+0x2394/0x43e0 [ 434.479271][T18547] tun_get_user+0x24ca/0x43e0 [ 434.479297][T18547] ? aa_file_perm+0x192/0x15e0 [ 434.479319][T18547] ? aa_file_perm+0x50e/0x15e0 [ 434.479350][T18547] ? __pfx_tun_get_user+0x10/0x10 [ 434.479370][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 434.479388][T18547] ? __pfx_file_ioctl+0x10/0x10 [ 434.479413][T18547] ? ref_tracker_alloc+0x35c/0x4c0 [ 434.479435][T18547] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 434.479455][T18547] ? tun_get+0x1c/0x2f0 [ 434.479474][T18547] ? tun_get+0x1c/0x2f0 [ 434.479494][T18547] ? tun_get+0x1c/0x2f0 [ 434.479512][T18547] ? tun_get+0x1c/0x2f0 [ 434.479529][T18547] tun_chr_write_iter+0x113/0x200 [ 434.479550][T18547] vfs_write+0x61d/0xb90 [ 434.479575][T18547] ? __pfx_vfs_write+0x10/0x10 [ 434.479600][T18547] ? __fget_files+0x2a/0x420 [ 434.479623][T18547] ksys_write+0x150/0x270 [ 434.479645][T18547] ? __pfx_ksys_write+0x10/0x10 [ 434.479664][T18547] ? __pfx_kcov_ioctl+0x10/0x10 [ 434.479687][T18547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.479704][T18547] do_syscall_64+0x15f/0xf80 [ 434.479726][T18547] ? trace_irq_disable+0x3b/0x140 [ 434.479746][T18547] ? clear_bhb_loop+0x40/0x90 [ 434.479764][T18547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.479779][T18547] RIP: 0033:0x7f025715d68e [ 434.479793][T18547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 434.479806][T18547] RSP: 002b:00007f0254ff3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 434.479823][T18547] RAX: ffffffffffffffda RBX: 00007f0254ff46c0 RCX: 00007f025715d68e [ 434.479833][T18547] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 434.479843][T18547] RBP: 00007f0257232d6f R08: 0000000000000000 R09: 0000000000000000 [ 434.479915][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.479928][T18547] R13: 00007f0257416308 R14: 00007f0257416270 R15: 00007ffcbb59fd88 [ 434.479945][T18547] [ 434.479956][T18547] BUG: Bad page state in process syz.0.3088 pfn:31e43 [ 434.763541][T18547] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031e431c0 pfn:0x31e43 [ 434.773873][T18547] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 434.780993][T18547] page_type: f9(unknown) [ 434.785212][T18547] raw: 00fff00000000000 0000000000000000 ffff88801afab000 0000000000000000 [ 434.793805][T18547] raw: ffff888031e431c0 0000000000000001 00000000f9000000 0000000000000000 [ 434.802401][T18547] page dumped because: page_pool leak [ 434.807794][T18547] page_owner tracks the page as allocated [ 434.813500][T18547] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 15334, tgid 15329 (syz.2.2353), ts 349866892516, free_ts 346837831840 [ 434.830712][T18547] post_alloc_hook+0x231/0x280 [ 434.835478][T18547] get_page_from_freelist+0x24ba/0x2540 [ 434.841039][T18547] __alloc_frozen_pages_noprof+0x18d/0x380 [ 434.846861][T18547] __alloc_pages_noprof+0x10/0x100 [ 434.851957][T18547] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 434.857418][T18547] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 434.863483][T18547] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 434.869323][T18547] skb_pp_cow_data+0x287/0x19b0 [ 434.874173][T18547] do_xdp_generic+0x76b/0x12e0 [ 434.878942][T18547] __netif_receive_skb_core+0x10e5/0x3170 [ 434.884657][T18547] process_backlog+0x76d/0x1950 [ 434.889517][T18547] __napi_poll+0xae/0x340 [ 434.893841][T18547] net_rx_action+0x627/0xf70 [ 434.898441][T18547] handle_softirqs+0x22a/0x840 [ 434.903196][T18547] do_softirq+0x76/0xd0 [ 434.905925][ T5630] Bluetooth: hci0: command tx timeout [ 434.907360][T18547] __local_bh_enable_ip+0xf8/0x130 [ 434.917819][T18547] page last free pid 5720 tgid 5720 stack trace: [ 434.924137][T18547] __free_frozen_pages+0xbc7/0xd30 [ 434.929280][T18547] pcpu_depopulate_chunk+0x45f/0x500 [ 434.934570][T18547] pcpu_balance_workfn+0x379/0x1010 [ 434.939801][T18547] process_scheduled_works+0xb5d/0x1860 [ 434.945342][T18547] worker_thread+0xa53/0xfc0 [ 434.949942][T18547] kthread+0x389/0x470 [ 434.954034][T18547] ret_from_fork+0x514/0xb70 [ 434.958631][T18547] ret_from_fork_asm+0x1a/0x30 [ 434.963390][T18547] Modules linked in: [ 434.967386][T18547] CPU: 1 UID: 0 PID: 18547 Comm: syz.0.3088 Tainted: G B syzkaller #0 PREEMPT(full) [ 434.967408][T18547] Tainted: [B]=BAD_PAGE [ 434.967413][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.967422][T18547] Call Trace: [ 434.967429][T18547] [ 434.967435][T18547] dump_stack_lvl+0xe8/0x150 [ 434.967454][T18547] bad_page+0x17f/0x1c0 [ 434.967474][T18547] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 434.967499][T18547] bpf_xdp_adjust_tail+0x1d6/0x220 [ 434.967522][T18547] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 434.967537][T18547] bpf_prog_run_generic_xdp+0x603/0x1490 [ 434.967568][T18547] do_xdp_generic+0xac5/0x12e0 [ 434.967586][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 434.967607][T18547] ? __pfx_do_xdp_generic+0x10/0x10 [ 434.967629][T18547] ? tun_get_user+0x2394/0x43e0 [ 434.967654][T18547] ? tun_get_user+0x2394/0x43e0 [ 434.967673][T18547] tun_get_user+0x24ca/0x43e0 [ 434.967697][T18547] ? aa_file_perm+0x192/0x15e0 [ 434.967720][T18547] ? aa_file_perm+0x50e/0x15e0 [ 434.967739][T18547] ? __pfx_tun_get_user+0x10/0x10 [ 434.967759][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 434.967776][T18547] ? __pfx_file_ioctl+0x10/0x10 [ 434.967802][T18547] ? ref_tracker_alloc+0x35c/0x4c0 [ 434.967823][T18547] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 434.967843][T18547] ? tun_get+0x1c/0x2f0 [ 434.967862][T18547] ? tun_get+0x1c/0x2f0 [ 434.967882][T18547] ? tun_get+0x1c/0x2f0 [ 434.967900][T18547] ? tun_get+0x1c/0x2f0 [ 434.967920][T18547] tun_chr_write_iter+0x113/0x200 [ 434.967940][T18547] vfs_write+0x61d/0xb90 [ 434.967964][T18547] ? __pfx_vfs_write+0x10/0x10 [ 434.967988][T18547] ? __fget_files+0x2a/0x420 [ 434.968009][T18547] ksys_write+0x150/0x270 [ 434.968030][T18547] ? __pfx_ksys_write+0x10/0x10 [ 434.968049][T18547] ? __pfx_kcov_ioctl+0x10/0x10 [ 434.968073][T18547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.968088][T18547] do_syscall_64+0x15f/0xf80 [ 434.968111][T18547] ? trace_irq_disable+0x3b/0x140 [ 434.968132][T18547] ? clear_bhb_loop+0x40/0x90 [ 434.968150][T18547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.968165][T18547] RIP: 0033:0x7f025715d68e [ 434.968179][T18547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 434.968192][T18547] RSP: 002b:00007f0254ff3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 434.968208][T18547] RAX: ffffffffffffffda RBX: 00007f0254ff46c0 RCX: 00007f025715d68e [ 434.968219][T18547] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 434.968229][T18547] RBP: 00007f0257232d6f R08: 0000000000000000 R09: 0000000000000000 [ 434.968253][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.968262][T18547] R13: 00007f0257416308 R14: 00007f0257416270 R15: 00007ffcbb59fd88 [ 434.968280][T18547] [ 434.968290][T18547] BUG: Bad page state in process syz.0.3088 pfn:ad5ce [ 435.251069][T18547] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880ad5cec30 pfn:0xad5ce [ 435.261139][T18547] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 435.268256][T18547] page_type: f9(unknown) [ 435.272480][T18547] raw: 00fff00000000000 0000000000000000 ffff88801afab000 0000000000000000 [ 435.281064][T18547] raw: ffff8880ad5cec30 0000000000000001 00000000f9000000 0000000000000000 [ 435.289649][T18547] page dumped because: page_pool leak [ 435.294995][T18547] page_owner tracks the page as allocated [ 435.300710][T18547] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 15334, tgid 15329 (syz.2.2353), ts 349867787699, free_ts 346826792896 [ 435.317922][T18547] post_alloc_hook+0x231/0x280 [ 435.322679][T18547] get_page_from_freelist+0x24ba/0x2540 [ 435.328234][T18547] __alloc_frozen_pages_noprof+0x18d/0x380 [ 435.334038][T18547] __alloc_pages_noprof+0x10/0x100 [ 435.339184][T18547] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 435.344654][T18547] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 435.350772][T18547] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 435.356598][T18547] skb_pp_cow_data+0x287/0x19b0 [ 435.361456][T18547] do_xdp_generic+0x76b/0x12e0 [ 435.366240][T18547] __netif_receive_skb_core+0x10e5/0x3170 [ 435.371960][T18547] process_backlog+0x76d/0x1950 [ 435.376829][T18547] __napi_poll+0xae/0x340 [ 435.381157][T18547] net_rx_action+0x627/0xf70 [ 435.385760][T18547] handle_softirqs+0x22a/0x840 [ 435.390525][T18547] do_softirq+0x76/0xd0 [ 435.394662][T18547] __local_bh_enable_ip+0xf8/0x130 [ 435.399778][T18547] page last free pid 5720 tgid 5720 stack trace: [ 435.406113][T18547] __free_frozen_pages+0xbc7/0xd30 [ 435.411217][T18547] pcpu_depopulate_chunk+0x45f/0x500 [ 435.416529][T18547] pcpu_balance_workfn+0x379/0x1010 [ 435.421739][T18547] process_scheduled_works+0xb5d/0x1860 [ 435.427301][T18547] worker_thread+0xa53/0xfc0 [ 435.431887][T18547] kthread+0x389/0x470 [ 435.435964][T18547] ret_from_fork+0x514/0xb70 [ 435.440557][T18547] ret_from_fork_asm+0x1a/0x30 [ 435.445316][T18547] Modules linked in: [ 435.449221][T18547] CPU: 1 UID: 0 PID: 18547 Comm: syz.0.3088 Tainted: G B syzkaller #0 PREEMPT(full) [ 435.449243][T18547] Tainted: [B]=BAD_PAGE [ 435.449248][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 435.449256][T18547] Call Trace: [ 435.449262][T18547] [ 435.449269][T18547] dump_stack_lvl+0xe8/0x150 [ 435.449287][T18547] bad_page+0x17f/0x1c0 [ 435.449306][T18547] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 435.449332][T18547] bpf_xdp_adjust_tail+0x1d6/0x220 [ 435.449356][T18547] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 435.449371][T18547] bpf_prog_run_generic_xdp+0x603/0x1490 [ 435.449400][T18547] do_xdp_generic+0xac5/0x12e0 [ 435.449417][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 435.449437][T18547] ? __pfx_do_xdp_generic+0x10/0x10 [ 435.449460][T18547] ? tun_get_user+0x2394/0x43e0 [ 435.449488][T18547] ? tun_get_user+0x2394/0x43e0 [ 435.449507][T18547] tun_get_user+0x24ca/0x43e0 [ 435.449539][T18547] ? aa_file_perm+0x192/0x15e0 [ 435.449562][T18547] ? aa_file_perm+0x50e/0x15e0 [ 435.449581][T18547] ? __pfx_tun_get_user+0x10/0x10 [ 435.449600][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 435.449618][T18547] ? __pfx_file_ioctl+0x10/0x10 [ 435.449642][T18547] ? ref_tracker_alloc+0x35c/0x4c0 [ 435.449663][T18547] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 435.449683][T18547] ? tun_get+0x1c/0x2f0 [ 435.449701][T18547] ? tun_get+0x1c/0x2f0 [ 435.449721][T18547] ? tun_get+0x1c/0x2f0 [ 435.449740][T18547] ? tun_get+0x1c/0x2f0 [ 435.449760][T18547] tun_chr_write_iter+0x113/0x200 [ 435.449780][T18547] vfs_write+0x61d/0xb90 [ 435.449803][T18547] ? __pfx_vfs_write+0x10/0x10 [ 435.449828][T18547] ? __fget_files+0x2a/0x420 [ 435.449849][T18547] ksys_write+0x150/0x270 [ 435.449870][T18547] ? __pfx_ksys_write+0x10/0x10 [ 435.449889][T18547] ? __pfx_kcov_ioctl+0x10/0x10 [ 435.449913][T18547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.449929][T18547] do_syscall_64+0x15f/0xf80 [ 435.449951][T18547] ? trace_irq_disable+0x3b/0x140 [ 435.449973][T18547] ? clear_bhb_loop+0x40/0x90 [ 435.449990][T18547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.450005][T18547] RIP: 0033:0x7f025715d68e [ 435.450019][T18547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 435.450032][T18547] RSP: 002b:00007f0254ff3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.450048][T18547] RAX: ffffffffffffffda RBX: 00007f0254ff46c0 RCX: 00007f025715d68e [ 435.450060][T18547] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 435.450070][T18547] RBP: 00007f0257232d6f R08: 0000000000000000 R09: 0000000000000000 [ 435.450079][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.450089][T18547] R13: 00007f0257416308 R14: 00007f0257416270 R15: 00007ffcbb59fd88 [ 435.450107][T18547] [ 435.450116][T18547] BUG: Bad page state in process syz.0.3088 pfn:30d4f [ 435.733356][T18547] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030d4f070 pfn:0x30d4f [ 435.743442][T18547] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 435.750567][T18547] page_type: f9(unknown) [ 435.754801][T18547] raw: 00fff00000000000 0000000000000000 ffff88801afab000 0000000000000000 [ 435.763395][T18547] raw: ffff888030d4f070 0000000000000001 00000000f9000000 0000000000000000 [ 435.771977][T18547] page dumped because: page_pool leak [ 435.777357][T18547] page_owner tracks the page as allocated [ 435.783061][T18547] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 15334, tgid 15329 (syz.2.2353), ts 349869264488, free_ts 346826782382 [ 435.800252][T18547] post_alloc_hook+0x231/0x280 [ 435.805022][T18547] get_page_from_freelist+0x24ba/0x2540 [ 435.810576][T18547] __alloc_frozen_pages_noprof+0x18d/0x380 [ 435.816401][T18547] __alloc_pages_noprof+0x10/0x100 [ 435.821495][T18547] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 435.826957][T18547] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 435.833023][T18547] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 435.838844][T18547] skb_pp_cow_data+0x287/0x19b0 [ 435.843696][T18547] do_xdp_generic+0x76b/0x12e0 [ 435.848469][T18547] __netif_receive_skb_core+0x10e5/0x3170 [ 435.854184][T18547] process_backlog+0x76d/0x1950 [ 435.859052][T18547] __napi_poll+0xae/0x340 [ 435.863382][T18547] net_rx_action+0x627/0xf70 [ 435.867996][T18547] handle_softirqs+0x22a/0x840 [ 435.872758][T18547] do_softirq+0x76/0xd0 [ 435.876937][T18547] __local_bh_enable_ip+0xf8/0x130 [ 435.882044][T18547] page last free pid 5720 tgid 5720 stack trace: [ 435.888378][T18547] __free_frozen_pages+0xbc7/0xd30 [ 435.893489][T18547] pcpu_depopulate_chunk+0x45f/0x500 [ 435.898781][T18547] pcpu_balance_workfn+0x379/0x1010 [ 435.903981][T18547] process_scheduled_works+0xb5d/0x1860 [ 435.909531][T18547] worker_thread+0xa53/0xfc0 [ 435.914116][T18547] kthread+0x389/0x470 [ 435.918198][T18547] ret_from_fork+0x514/0xb70 [ 435.922780][T18547] ret_from_fork_asm+0x1a/0x30 [ 435.927546][T18547] Modules linked in: [ 435.931437][T18547] CPU: 1 UID: 0 PID: 18547 Comm: syz.0.3088 Tainted: G B syzkaller #0 PREEMPT(full) [ 435.931451][T18547] Tainted: [B]=BAD_PAGE [ 435.931455][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 435.931460][T18547] Call Trace: [ 435.931464][T18547] [ 435.931469][T18547] dump_stack_lvl+0xe8/0x150 [ 435.931481][T18547] bad_page+0x17f/0x1c0 [ 435.931493][T18547] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 435.931509][T18547] bpf_xdp_adjust_tail+0x1d6/0x220 [ 435.931525][T18547] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 435.931533][T18547] bpf_prog_run_generic_xdp+0x603/0x1490 [ 435.931550][T18547] do_xdp_generic+0xac5/0x12e0 [ 435.931560][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 435.931572][T18547] ? __pfx_do_xdp_generic+0x10/0x10 [ 435.931584][T18547] ? tun_get_user+0x2394/0x43e0 [ 435.931600][T18547] ? tun_get_user+0x2394/0x43e0 [ 435.931610][T18547] tun_get_user+0x24ca/0x43e0 [ 435.931624][T18547] ? aa_file_perm+0x192/0x15e0 [ 435.931638][T18547] ? aa_file_perm+0x50e/0x15e0 [ 435.931649][T18547] ? __pfx_tun_get_user+0x10/0x10 [ 435.931660][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 435.931671][T18547] ? __pfx_file_ioctl+0x10/0x10 [ 435.931685][T18547] ? ref_tracker_alloc+0x35c/0x4c0 [ 435.931697][T18547] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 435.931709][T18547] ? tun_get+0x1c/0x2f0 [ 435.931722][T18547] ? tun_get+0x1c/0x2f0 [ 435.931733][T18547] ? tun_get+0x1c/0x2f0 [ 435.931744][T18547] ? tun_get+0x1c/0x2f0 [ 435.931755][T18547] tun_chr_write_iter+0x113/0x200 [ 435.931766][T18547] vfs_write+0x61d/0xb90 [ 435.931780][T18547] ? __pfx_vfs_write+0x10/0x10 [ 435.931793][T18547] ? __fget_files+0x2a/0x420 [ 435.931805][T18547] ksys_write+0x150/0x270 [ 435.931817][T18547] ? __pfx_ksys_write+0x10/0x10 [ 435.931828][T18547] ? __pfx_kcov_ioctl+0x10/0x10 [ 435.931842][T18547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.931851][T18547] do_syscall_64+0x15f/0xf80 [ 435.931865][T18547] ? trace_irq_disable+0x3b/0x140 [ 435.931878][T18547] ? clear_bhb_loop+0x40/0x90 [ 435.931888][T18547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.931896][T18547] RIP: 0033:0x7f025715d68e [ 435.931905][T18547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 435.931913][T18547] RSP: 002b:00007f0254ff3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.931923][T18547] RAX: ffffffffffffffda RBX: 00007f0254ff46c0 RCX: 00007f025715d68e [ 435.931930][T18547] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 435.931935][T18547] RBP: 00007f0257232d6f R08: 0000000000000000 R09: 0000000000000000 [ 435.931941][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.931946][T18547] R13: 00007f0257416308 R14: 00007f0257416270 R15: 00007ffcbb59fd88 [ 435.931956][T18547] [ 435.931963][T18547] BUG: Bad page state in process syz.0.3088 pfn:ac98e [ 436.214924][T18547] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880ac98e000 pfn:0xac98e [ 436.225019][T18547] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 436.232151][T18547] page_type: f9(unknown) [ 436.236437][T18547] raw: 00fff00000000000 0000000000000000 ffff88801afab000 0000000000000000 [ 436.245023][T18547] raw: ffff8880ac98e000 0000000000000001 00000000f9000000 0000000000000000 [ 436.253640][T18547] page dumped because: page_pool leak [ 436.259028][T18547] page_owner tracks the page as allocated [ 436.264738][T18547] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 15334, tgid 15329 (syz.2.2353), ts 349870438236, free_ts 346826697616 [ 436.281938][T18547] post_alloc_hook+0x231/0x280 [ 436.286723][T18547] get_page_from_freelist+0x24ba/0x2540 [ 436.292254][T18547] __alloc_frozen_pages_noprof+0x18d/0x380 [ 436.298075][T18547] __alloc_pages_noprof+0x10/0x100 [ 436.303187][T18547] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 436.308652][T18547] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 436.314718][T18547] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 436.320555][T18547] skb_pp_cow_data+0x287/0x19b0 [ 436.325411][T18547] do_xdp_generic+0x76b/0x12e0 [ 436.330190][T18547] __netif_receive_skb_core+0x10e5/0x3170 [ 436.335924][T18547] process_backlog+0x76d/0x1950 [ 436.340757][T18547] __napi_poll+0xae/0x340 [ 436.345061][T18547] net_rx_action+0x627/0xf70 [ 436.349674][T18547] handle_softirqs+0x22a/0x840 [ 436.354437][T18547] do_softirq+0x76/0xd0 [ 436.358632][T18547] __local_bh_enable_ip+0xf8/0x130 [ 436.363745][T18547] page last free pid 5720 tgid 5720 stack trace: [ 436.370096][T18547] __free_frozen_pages+0xbc7/0xd30 [ 436.375206][T18547] pcpu_depopulate_chunk+0x45f/0x500 [ 436.380506][T18547] pcpu_balance_workfn+0x379/0x1010 [ 436.385723][T18547] process_scheduled_works+0xb5d/0x1860 [ 436.391250][T18547] worker_thread+0xa53/0xfc0 [ 436.395842][T18547] kthread+0x389/0x470 [ 436.399907][T18547] ret_from_fork+0x514/0xb70 [ 436.404474][T18547] ret_from_fork_asm+0x1a/0x30 [ 436.409241][T18547] Modules linked in: [ 436.413133][T18547] CPU: 1 UID: 0 PID: 18547 Comm: syz.0.3088 Tainted: G B syzkaller #0 PREEMPT(full) [ 436.413148][T18547] Tainted: [B]=BAD_PAGE [ 436.413151][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 436.413157][T18547] Call Trace: [ 436.413161][T18547] [ 436.413165][T18547] dump_stack_lvl+0xe8/0x150 [ 436.413178][T18547] bad_page+0x17f/0x1c0 [ 436.413190][T18547] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 436.413206][T18547] bpf_xdp_adjust_tail+0x1d6/0x220 [ 436.413221][T18547] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 436.413230][T18547] bpf_prog_run_generic_xdp+0x603/0x1490 [ 436.413247][T18547] do_xdp_generic+0xac5/0x12e0 [ 436.413257][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 436.413269][T18547] ? __pfx_do_xdp_generic+0x10/0x10 [ 436.413280][T18547] ? tun_get_user+0x2394/0x43e0 [ 436.413296][T18547] ? tun_get_user+0x2394/0x43e0 [ 436.413306][T18547] tun_get_user+0x24ca/0x43e0 [ 436.413321][T18547] ? aa_file_perm+0x192/0x15e0 [ 436.413335][T18547] ? aa_file_perm+0x50e/0x15e0 [ 436.413345][T18547] ? __pfx_tun_get_user+0x10/0x10 [ 436.413357][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 436.413366][T18547] ? __pfx_file_ioctl+0x10/0x10 [ 436.413381][T18547] ? ref_tracker_alloc+0x35c/0x4c0 [ 436.413394][T18547] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 436.413405][T18547] ? tun_get+0x1c/0x2f0 [ 436.413416][T18547] ? tun_get+0x1c/0x2f0 [ 436.413427][T18547] ? tun_get+0x1c/0x2f0 [ 436.413437][T18547] ? tun_get+0x1c/0x2f0 [ 436.413448][T18547] tun_chr_write_iter+0x113/0x200 [ 436.413460][T18547] vfs_write+0x61d/0xb90 [ 436.413474][T18547] ? __pfx_vfs_write+0x10/0x10 [ 436.413488][T18547] ? __fget_files+0x2a/0x420 [ 436.413500][T18547] ksys_write+0x150/0x270 [ 436.413511][T18547] ? __pfx_ksys_write+0x10/0x10 [ 436.413523][T18547] ? __pfx_kcov_ioctl+0x10/0x10 [ 436.413537][T18547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.413546][T18547] do_syscall_64+0x15f/0xf80 [ 436.413564][T18547] ? trace_irq_disable+0x3b/0x140 [ 436.413581][T18547] ? clear_bhb_loop+0x40/0x90 [ 436.413596][T18547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.413605][T18547] RIP: 0033:0x7f025715d68e [ 436.413613][T18547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 436.413621][T18547] RSP: 002b:00007f0254ff3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 436.413631][T18547] RAX: ffffffffffffffda RBX: 00007f0254ff46c0 RCX: 00007f025715d68e [ 436.413638][T18547] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 436.413644][T18547] RBP: 00007f0257232d6f R08: 0000000000000000 R09: 0000000000000000 [ 436.413650][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.413656][T18547] R13: 00007f0257416308 R14: 00007f0257416270 R15: 00007ffcbb59fd88 [ 436.413666][T18547] [ 436.413673][T18547] BUG: Bad page state in process syz.0.3088 pfn:7601a [ 436.696516][T18547] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7601a [ 436.706589][T18547] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 436.713692][T18547] page_type: f9(unknown) [ 436.717945][T18547] raw: 00fff00000000000 0000000000000000 ffff88801afab000 0000000000000000 [ 436.726532][T18547] raw: ffff888000000000 0000000000000001 00000000f9000000 0000000000000000 [ 436.735093][T18547] page dumped because: page_pool leak [ 436.740458][T18547] page_owner tracks the page as allocated [ 436.746178][T18547] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 15334, tgid 15329 (syz.2.2353), ts 349870991201, free_ts 346826687401 [ 436.763547][T18547] post_alloc_hook+0x231/0x280 [ 436.768332][T18547] get_page_from_freelist+0x24ba/0x2540 [ 436.773865][T18547] __alloc_frozen_pages_noprof+0x18d/0x380 [ 436.779678][T18547] __alloc_pages_noprof+0x10/0x100 [ 436.784792][T18547] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 436.790267][T18547] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 436.796362][T18547] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 436.802187][T18547] skb_pp_cow_data+0x287/0x19b0 [ 436.807084][T18547] do_xdp_generic+0x76b/0x12e0 [ 436.811854][T18547] __netif_receive_skb_core+0x10e5/0x3170 [ 436.817601][T18547] process_backlog+0x76d/0x1950 [ 436.822461][T18547] __napi_poll+0xae/0x340 [ 436.826809][T18547] net_rx_action+0x627/0xf70 [ 436.831411][T18547] handle_softirqs+0x22a/0x840 [ 436.836190][T18547] do_softirq+0x76/0xd0 [ 436.840343][T18547] __local_bh_enable_ip+0xf8/0x130 [ 436.845433][T18547] page last free pid 5720 tgid 5720 stack trace: [ 436.851756][T18547] __free_frozen_pages+0xbc7/0xd30 [ 436.856883][T18547] pcpu_depopulate_chunk+0x45f/0x500 [ 436.862153][T18547] pcpu_balance_workfn+0x379/0x1010 [ 436.867380][T18547] process_scheduled_works+0xb5d/0x1860 [ 436.872921][T18547] worker_thread+0xa53/0xfc0 [ 436.877526][T18547] kthread+0x389/0x470 [ 436.881595][T18547] ret_from_fork+0x514/0xb70 [ 436.886189][T18547] ret_from_fork_asm+0x1a/0x30 [ 436.890950][T18547] Modules linked in: [ 436.894826][T18547] CPU: 1 UID: 0 PID: 18547 Comm: syz.0.3088 Tainted: G B syzkaller #0 PREEMPT(full) [ 436.894841][T18547] Tainted: [B]=BAD_PAGE [ 436.894844][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 436.894850][T18547] Call Trace: [ 436.894854][T18547] [ 436.894858][T18547] dump_stack_lvl+0xe8/0x150 [ 436.894871][T18547] bad_page+0x17f/0x1c0 [ 436.894883][T18547] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 436.894899][T18547] bpf_xdp_adjust_tail+0x1d6/0x220 [ 436.894914][T18547] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 436.894923][T18547] bpf_prog_run_generic_xdp+0x603/0x1490 [ 436.894940][T18547] do_xdp_generic+0xac5/0x12e0 [ 436.894950][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 436.894962][T18547] ? __pfx_do_xdp_generic+0x10/0x10 [ 436.894974][T18547] ? tun_get_user+0x2394/0x43e0 [ 436.894989][T18547] ? tun_get_user+0x2394/0x43e0 [ 436.894999][T18547] tun_get_user+0x24ca/0x43e0 [ 436.895014][T18547] ? aa_file_perm+0x192/0x15e0 [ 436.895032][T18547] ? aa_file_perm+0x50e/0x15e0 [ 436.895042][T18547] ? __pfx_tun_get_user+0x10/0x10 [ 436.895054][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 436.895063][T18547] ? __pfx_file_ioctl+0x10/0x10 [ 436.895078][T18547] ? ref_tracker_alloc+0x35c/0x4c0 [ 436.895091][T18547] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 436.895103][T18547] ? tun_get+0x1c/0x2f0 [ 436.895113][T18547] ? tun_get+0x1c/0x2f0 [ 436.895124][T18547] ? tun_get+0x1c/0x2f0 [ 436.895134][T18547] ? tun_get+0x1c/0x2f0 [ 436.895145][T18547] tun_chr_write_iter+0x113/0x200 [ 436.895156][T18547] vfs_write+0x61d/0xb90 [ 436.895170][T18547] ? __pfx_vfs_write+0x10/0x10 [ 436.895183][T18547] ? __fget_files+0x2a/0x420 [ 436.895196][T18547] ksys_write+0x150/0x270 [ 436.895207][T18547] ? __pfx_ksys_write+0x10/0x10 [ 436.895218][T18547] ? __pfx_kcov_ioctl+0x10/0x10 [ 436.895233][T18547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.895242][T18547] do_syscall_64+0x15f/0xf80 [ 436.895256][T18547] ? trace_irq_disable+0x3b/0x140 [ 436.895269][T18547] ? clear_bhb_loop+0x40/0x90 [ 436.895279][T18547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.895287][T18547] RIP: 0033:0x7f025715d68e [ 436.895296][T18547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 436.895304][T18547] RSP: 002b:00007f0254ff3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 436.895314][T18547] RAX: ffffffffffffffda RBX: 00007f0254ff46c0 RCX: 00007f025715d68e [ 436.895320][T18547] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 436.895326][T18547] RBP: 00007f0257232d6f R08: 0000000000000000 R09: 0000000000000000 [ 436.895332][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.895337][T18547] R13: 00007f0257416308 R14: 00007f0257416270 R15: 00007ffcbb59fd88 [ 436.895347][T18547] [ 436.895354][T18547] BUG: Bad page state in process syz.0.3088 pfn:2fa66 [ 437.178159][T18547] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802fa66900 pfn:0x2fa66 [ 437.188241][T18547] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 437.195345][T18547] page_type: f9(unknown) [ 437.199607][T18547] raw: 00fff00000000000 0000000000000000 ffff88801afab000 0000000000000000 [ 437.208210][T18547] raw: ffff88802fa66900 0000000000000001 00000000f9000000 0000000000000000 [ 437.216793][T18547] page dumped because: page_pool leak [ 437.222140][T18547] page_owner tracks the page as allocated [ 437.227854][T18547] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 15334, tgid 15329 (syz.2.2353), ts 349871472848, free_ts 346826662145 [ 437.245055][T18547] post_alloc_hook+0x231/0x280 [ 437.249829][T18547] get_page_from_freelist+0x24ba/0x2540 [ 437.255372][T18547] __alloc_frozen_pages_noprof+0x18d/0x380 [ 437.261183][T18547] __alloc_pages_noprof+0x10/0x100 [ 437.266306][T18547] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 437.271743][T18547] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 437.277808][T18547] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 437.283616][T18547] skb_pp_cow_data+0x287/0x19b0 [ 437.288490][T18547] do_xdp_generic+0x76b/0x12e0 [ 437.293253][T18547] __netif_receive_skb_core+0x10e5/0x3170 [ 437.298997][T18547] process_backlog+0x76d/0x1950 [ 437.303848][T18547] __napi_poll+0xae/0x340 [ 437.308197][T18547] net_rx_action+0x627/0xf70 [ 437.312800][T18547] handle_softirqs+0x22a/0x840 [ 437.317607][T18547] do_softirq+0x76/0xd0 [ 437.321775][T18547] __local_bh_enable_ip+0xf8/0x130 [ 437.326909][T18547] page last free pid 5720 tgid 5720 stack trace: [ 437.333226][T18547] __free_frozen_pages+0xbc7/0xd30 [ 437.338348][T18547] pcpu_depopulate_chunk+0x45f/0x500 [ 437.343634][T18547] pcpu_balance_workfn+0x379/0x1010 [ 437.348843][T18547] process_scheduled_works+0xb5d/0x1860 [ 437.354382][T18547] worker_thread+0xa53/0xfc0 [ 437.358982][T18547] kthread+0x389/0x470 [ 437.363050][T18547] ret_from_fork+0x514/0xb70 [ 437.367644][T18547] ret_from_fork_asm+0x1a/0x30 [ 437.372404][T18547] Modules linked in: [ 437.376310][T18547] CPU: 1 UID: 0 PID: 18547 Comm: syz.0.3088 Tainted: G B syzkaller #0 PREEMPT(full) [ 437.376332][T18547] Tainted: [B]=BAD_PAGE [ 437.376337][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.376347][T18547] Call Trace: [ 437.376353][T18547] [ 437.376359][T18547] dump_stack_lvl+0xe8/0x150 [ 437.376378][T18547] bad_page+0x17f/0x1c0 [ 437.376397][T18547] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 437.376424][T18547] bpf_xdp_adjust_tail+0x1d6/0x220 [ 437.376452][T18547] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 437.376467][T18547] bpf_prog_run_generic_xdp+0x603/0x1490 [ 437.376499][T18547] do_xdp_generic+0xac5/0x12e0 [ 437.376524][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 437.376544][T18547] ? __pfx_do_xdp_generic+0x10/0x10 [ 437.376566][T18547] ? tun_get_user+0x2394/0x43e0 [ 437.376594][T18547] ? tun_get_user+0x2394/0x43e0 [ 437.376612][T18547] tun_get_user+0x24ca/0x43e0 [ 437.376638][T18547] ? aa_file_perm+0x192/0x15e0 [ 437.376661][T18547] ? aa_file_perm+0x50e/0x15e0 [ 437.376681][T18547] ? __pfx_tun_get_user+0x10/0x10 [ 437.376700][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 437.376717][T18547] ? __pfx_file_ioctl+0x10/0x10 [ 437.376742][T18547] ? ref_tracker_alloc+0x35c/0x4c0 [ 437.376764][T18547] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 437.376785][T18547] ? tun_get+0x1c/0x2f0 [ 437.376804][T18547] ? tun_get+0x1c/0x2f0 [ 437.376823][T18547] ? tun_get+0x1c/0x2f0 [ 437.376840][T18547] ? tun_get+0x1c/0x2f0 [ 437.376858][T18547] tun_chr_write_iter+0x113/0x200 [ 437.376878][T18547] vfs_write+0x61d/0xb90 [ 437.376902][T18547] ? __pfx_vfs_write+0x10/0x10 [ 437.376923][T18547] ? __fget_files+0x2a/0x420 [ 437.376944][T18547] ksys_write+0x150/0x270 [ 437.376965][T18547] ? __pfx_ksys_write+0x10/0x10 [ 437.376984][T18547] ? __pfx_kcov_ioctl+0x10/0x10 [ 437.377008][T18547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.377023][T18547] do_syscall_64+0x15f/0xf80 [ 437.377045][T18547] ? trace_irq_disable+0x3b/0x140 [ 437.377066][T18547] ? clear_bhb_loop+0x40/0x90 [ 437.377083][T18547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.377098][T18547] RIP: 0033:0x7f025715d68e [ 437.377112][T18547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 437.377125][T18547] RSP: 002b:00007f0254ff3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.377141][T18547] RAX: ffffffffffffffda RBX: 00007f0254ff46c0 RCX: 00007f025715d68e [ 437.377153][T18547] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 437.377163][T18547] RBP: 00007f0257232d6f R08: 0000000000000000 R09: 0000000000000000 [ 437.377172][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.377182][T18547] R13: 00007f0257416308 R14: 00007f0257416270 R15: 00007ffcbb59fd88 [ 437.377200][T18547] [ 437.377210][T18547] BUG: Bad page state in process syz.0.3088 pfn:b37cd [ 437.660321][T18547] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb37cd [ 437.669087][T18547] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 437.676209][T18547] page_type: f9(unknown) [ 437.680431][T18547] raw: 00fff00000000000 0000000000000000 ffff88801afab000 0000000000000000 [ 437.689015][T18547] raw: 0000000000000000 0000000000000001 00000000f9000000 0000000000000000 [ 437.697611][T18547] page dumped because: page_pool leak [ 437.702956][T18547] page_owner tracks the page as allocated [ 437.708669][T18547] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 15334, tgid 15329 (syz.2.2353), ts 349865614120, free_ts 346837902736 [ 437.725881][T18547] post_alloc_hook+0x231/0x280 [ 437.730646][T18547] get_page_from_freelist+0x24ba/0x2540 [ 437.736202][T18547] __alloc_frozen_pages_noprof+0x18d/0x380 [ 437.742013][T18547] __alloc_pages_noprof+0x10/0x100 [ 437.747150][T18547] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 437.752608][T18547] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 437.758694][T18547] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 437.764500][T18547] skb_pp_cow_data+0x287/0x19b0 [ 437.769355][T18547] do_xdp_generic+0x76b/0x12e0 [ 437.774113][T18547] __netif_receive_skb_core+0x10e5/0x3170 [ 437.779837][T18547] process_backlog+0x76d/0x1950 [ 437.784689][T18547] __napi_poll+0xae/0x340 [ 437.789027][T18547] net_rx_action+0x627/0xf70 [ 437.793612][T18547] handle_softirqs+0x22a/0x840 [ 437.798382][T18547] do_softirq+0x76/0xd0 [ 437.802534][T18547] __local_bh_enable_ip+0xf8/0x130 [ 437.807647][T18547] page last free pid 5720 tgid 5720 stack trace: [ 437.813961][T18547] __free_frozen_pages+0xbc7/0xd30 [ 437.819087][T18547] pcpu_depopulate_chunk+0x45f/0x500 [ 437.824374][T18547] pcpu_balance_workfn+0x379/0x1010 [ 437.829577][T18547] process_scheduled_works+0xb5d/0x1860 [ 437.835117][T18547] worker_thread+0xa53/0xfc0 [ 437.839707][T18547] kthread+0x389/0x470 [ 437.843772][T18547] ret_from_fork+0x514/0xb70 [ 437.848366][T18547] ret_from_fork_asm+0x1a/0x30 [ 437.853130][T18547] Modules linked in: [ 437.857054][T18547] CPU: 1 UID: 0 PID: 18547 Comm: syz.0.3088 Tainted: G B syzkaller #0 PREEMPT(full) [ 437.857075][T18547] Tainted: [B]=BAD_PAGE [ 437.857079][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.857087][T18547] Call Trace: [ 437.857092][T18547] [ 437.857098][T18547] dump_stack_lvl+0xe8/0x150 [ 437.857114][T18547] bad_page+0x17f/0x1c0 [ 437.857130][T18547] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 437.857151][T18547] bpf_xdp_adjust_tail+0x1d6/0x220 [ 437.857171][T18547] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 437.857182][T18547] bpf_prog_run_generic_xdp+0x603/0x1490 [ 437.857208][T18547] do_xdp_generic+0xac5/0x12e0 [ 437.857220][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 437.857236][T18547] ? __pfx_do_xdp_generic+0x10/0x10 [ 437.857256][T18547] ? tun_get_user+0x2394/0x43e0 [ 437.857276][T18547] ? tun_get_user+0x2394/0x43e0 [ 437.857290][T18547] tun_get_user+0x24ca/0x43e0 [ 437.857309][T18547] ? aa_file_perm+0x192/0x15e0 [ 437.857327][T18547] ? aa_file_perm+0x50e/0x15e0 [ 437.857341][T18547] ? __pfx_tun_get_user+0x10/0x10 [ 437.857356][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 437.857369][T18547] ? __pfx_file_ioctl+0x10/0x10 [ 437.857388][T18547] ? ref_tracker_alloc+0x35c/0x4c0 [ 437.857405][T18547] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 437.857420][T18547] ? tun_get+0x1c/0x2f0 [ 437.857433][T18547] ? tun_get+0x1c/0x2f0 [ 437.857448][T18547] ? tun_get+0x1c/0x2f0 [ 437.857462][T18547] ? tun_get+0x1c/0x2f0 [ 437.857477][T18547] tun_chr_write_iter+0x113/0x200 [ 437.857492][T18547] vfs_write+0x61d/0xb90 [ 437.857510][T18547] ? __pfx_vfs_write+0x10/0x10 [ 437.857530][T18547] ? __fget_files+0x2a/0x420 [ 437.857546][T18547] ksys_write+0x150/0x270 [ 437.857562][T18547] ? __pfx_ksys_write+0x10/0x10 [ 437.857576][T18547] ? __pfx_kcov_ioctl+0x10/0x10 [ 437.857594][T18547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.857606][T18547] do_syscall_64+0x15f/0xf80 [ 437.857622][T18547] ? trace_irq_disable+0x3b/0x140 [ 437.857639][T18547] ? clear_bhb_loop+0x40/0x90 [ 437.857652][T18547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.857664][T18547] RIP: 0033:0x7f025715d68e [ 437.857675][T18547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 437.857686][T18547] RSP: 002b:00007f0254ff3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.857699][T18547] RAX: ffffffffffffffda RBX: 00007f0254ff46c0 RCX: 00007f025715d68e [ 437.857708][T18547] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 437.857715][T18547] RBP: 00007f0257232d6f R08: 0000000000000000 R09: 0000000000000000 [ 437.857723][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.857730][T18547] R13: 00007f0257416308 R14: 00007f0257416270 R15: 00007ffcbb59fd88 [ 437.857744][T18547] [ 437.857755][T18547] BUG: Bad page state in process syz.0.3088 pfn:557ac [ 438.140426][T18547] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880557ace00 pfn:0x557ac [ 438.150498][T18547] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 438.157620][T18547] page_type: f9(unknown) [ 438.161861][T18547] raw: 00fff00000000000 0000000000000000 ffff88801afab000 0000000000000000 [ 438.170548][T18547] raw: ffff8880557ace00 0000000000000001 00000000f9000000 0000000000000000 [ 438.179131][T18547] page dumped because: page_pool leak [ 438.184476][T18547] page_owner tracks the page as allocated [ 438.190190][T18547] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 15334, tgid 15329 (syz.2.2353), ts 349860916405, free_ts 346838189874 [ 438.207391][T18547] post_alloc_hook+0x231/0x280 [ 438.212146][T18547] get_page_from_freelist+0x24ba/0x2540 [ 438.217694][T18547] __alloc_frozen_pages_noprof+0x18d/0x380 [ 438.223501][T18547] __alloc_pages_noprof+0x10/0x100 [ 438.228618][T18547] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 438.234073][T18547] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 438.240149][T18547] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 438.245963][T18547] skb_pp_cow_data+0x287/0x19b0 [ 438.250802][T18547] do_xdp_generic+0x76b/0x12e0 [ 438.255571][T18547] __netif_receive_skb_core+0x10e5/0x3170 [ 438.261306][T18547] process_backlog+0x76d/0x1950 [ 438.266194][T18547] __napi_poll+0xae/0x340 [ 438.270528][T18547] net_rx_action+0x627/0xf70 [ 438.275123][T18547] handle_softirqs+0x22a/0x840 [ 438.279914][T18547] do_softirq+0x76/0xd0 [ 438.284065][T18547] __local_bh_enable_ip+0xf8/0x130 [ 438.289181][T18547] page last free pid 5720 tgid 5720 stack trace: [ 438.295493][T18547] __free_frozen_pages+0xbc7/0xd30 [ 438.300613][T18547] pcpu_depopulate_chunk+0x45f/0x500 [ 438.305929][T18547] pcpu_balance_workfn+0x379/0x1010 [ 438.311128][T18547] process_scheduled_works+0xb5d/0x1860 [ 438.316707][T18547] worker_thread+0xa53/0xfc0 [ 438.321298][T18547] kthread+0x389/0x470 [ 438.325348][T18547] ret_from_fork+0x514/0xb70 [ 438.329943][T18547] ret_from_fork_asm+0x1a/0x30 [ 438.334707][T18547] Modules linked in: [ 438.338613][T18547] CPU: 1 UID: 0 PID: 18547 Comm: syz.0.3088 Tainted: G B syzkaller #0 PREEMPT(full) [ 438.338635][T18547] Tainted: [B]=BAD_PAGE [ 438.338640][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 438.338649][T18547] Call Trace: [ 438.338655][T18547] [ 438.338661][T18547] dump_stack_lvl+0xe8/0x150 [ 438.338681][T18547] bad_page+0x17f/0x1c0 [ 438.338700][T18547] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 438.338726][T18547] bpf_xdp_adjust_tail+0x1d6/0x220 [ 438.338752][T18547] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 438.338768][T18547] bpf_prog_run_generic_xdp+0x603/0x1490 [ 438.338800][T18547] do_xdp_generic+0xac5/0x12e0 [ 438.338817][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 438.338837][T18547] ? __pfx_do_xdp_generic+0x10/0x10 [ 438.338858][T18547] ? tun_get_user+0x2394/0x43e0 [ 438.338885][T18547] ? tun_get_user+0x2394/0x43e0 [ 438.338903][T18547] tun_get_user+0x24ca/0x43e0 [ 438.338929][T18547] ? aa_file_perm+0x192/0x15e0 [ 438.338952][T18547] ? aa_file_perm+0x50e/0x15e0 [ 438.338971][T18547] ? __pfx_tun_get_user+0x10/0x10 [ 438.338991][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 438.339008][T18547] ? __pfx_file_ioctl+0x10/0x10 [ 438.339032][T18547] ? ref_tracker_alloc+0x35c/0x4c0 [ 438.339054][T18547] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 438.339075][T18547] ? tun_get+0x1c/0x2f0 [ 438.339102][T18547] ? tun_get+0x1c/0x2f0 [ 438.339123][T18547] ? tun_get+0x1c/0x2f0 [ 438.339140][T18547] ? tun_get+0x1c/0x2f0 [ 438.339160][T18547] tun_chr_write_iter+0x113/0x200 [ 438.339181][T18547] vfs_write+0x61d/0xb90 [ 438.339205][T18547] ? __pfx_vfs_write+0x10/0x10 [ 438.339230][T18547] ? __fget_files+0x2a/0x420 [ 438.339251][T18547] ksys_write+0x150/0x270 [ 438.339272][T18547] ? __pfx_ksys_write+0x10/0x10 [ 438.339291][T18547] ? __pfx_kcov_ioctl+0x10/0x10 [ 438.339315][T18547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.339330][T18547] do_syscall_64+0x15f/0xf80 [ 438.339352][T18547] ? trace_irq_disable+0x3b/0x140 [ 438.339374][T18547] ? clear_bhb_loop+0x40/0x90 [ 438.339391][T18547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.339404][T18547] RIP: 0033:0x7f025715d68e [ 438.339417][T18547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 438.339430][T18547] RSP: 002b:00007f0254ff3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 438.339446][T18547] RAX: ffffffffffffffda RBX: 00007f0254ff46c0 RCX: 00007f025715d68e [ 438.339457][T18547] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 438.339467][T18547] RBP: 00007f0257232d6f R08: 0000000000000000 R09: 0000000000000000 [ 438.339477][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.339487][T18547] R13: 00007f0257416308 R14: 00007f0257416270 R15: 00007ffcbb59fd88 [ 438.339505][T18547] [ 438.339516][T18547] BUG: Bad page state in process syz.0.3088 pfn:aaa53 [ 438.622331][T18547] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880aaa53300 pfn:0xaaa53 [ 438.632412][T18547] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 438.639533][T18547] page_type: f9(unknown) [ 438.643756][T18547] raw: 00fff00000000000 0000000000000000 ffff88801afab000 0000000000000000 [ 438.652341][T18547] raw: ffff8880aaa53300 0000000000000001 00000000f9000000 0000000000000000 [ 438.660929][T18547] page dumped because: page_pool leak [ 438.666306][T18547] page_owner tracks the page as allocated [ 438.672012][T18547] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 15334, tgid 15329 (syz.2.2353), ts 349861395274, free_ts 346838162873 [ 438.689230][T18547] post_alloc_hook+0x231/0x280 [ 438.694003][T18547] get_page_from_freelist+0x24ba/0x2540 [ 438.699571][T18547] __alloc_frozen_pages_noprof+0x18d/0x380 [ 438.705385][T18547] __alloc_pages_noprof+0x10/0x100 [ 438.710536][T18547] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 438.716009][T18547] __page_pool_alloc_netmems_slow+0x151/0x7b0 [ 438.722061][T18547] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 438.727877][T18547] skb_pp_cow_data+0x287/0x19b0 [ 438.732726][T18547] do_xdp_generic+0x76b/0x12e0 [ 438.737498][T18547] __netif_receive_skb_core+0x10e5/0x3170 [ 438.743214][T18547] process_backlog+0x76d/0x1950 [ 438.748081][T18547] __napi_poll+0xae/0x340 [ 438.752408][T18547] net_rx_action+0x627/0xf70 [ 438.757004][T18547] handle_softirqs+0x22a/0x840 [ 438.761765][T18547] do_softirq+0x76/0xd0 [ 438.765924][T18547] __local_bh_enable_ip+0xf8/0x130 [ 438.771033][T18547] page last free pid 5720 tgid 5720 stack trace: [ 438.777360][T18547] __free_frozen_pages+0xbc7/0xd30 [ 438.782471][T18547] pcpu_depopulate_chunk+0x45f/0x500 [ 438.787762][T18547] pcpu_balance_workfn+0x379/0x1010 [ 438.792962][T18547] process_scheduled_works+0xb5d/0x1860 [ 438.798517][T18547] worker_thread+0xa53/0xfc0 [ 438.803100][T18547] kthread+0x389/0x470 [ 438.807179][T18547] ret_from_fork+0x514/0xb70 [ 438.811762][T18547] ret_from_fork_asm+0x1a/0x30 [ 438.816544][T18547] Modules linked in: [ 438.820447][T18547] CPU: 1 UID: 0 PID: 18547 Comm: syz.0.3088 Tainted: G B syzkaller #0 PREEMPT(full) [ 438.820468][T18547] Tainted: [B]=BAD_PAGE [ 438.820473][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 438.820481][T18547] Call Trace: [ 438.820487][T18547] [ 438.820493][T18547] dump_stack_lvl+0xe8/0x150 [ 438.820511][T18547] bad_page+0x17f/0x1c0 [ 438.820528][T18547] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 438.820553][T18547] bpf_xdp_adjust_tail+0x1d6/0x220 [ 438.820578][T18547] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 438.820592][T18547] bpf_prog_run_generic_xdp+0x603/0x1490 [ 438.820621][T18547] do_xdp_generic+0xac5/0x12e0 [ 438.820637][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 438.820657][T18547] ? __pfx_do_xdp_generic+0x10/0x10 [ 438.820679][T18547] ? tun_get_user+0x2394/0x43e0 [ 438.820700][T18547] ? tun_get_user+0x2394/0x43e0 [ 438.820714][T18547] tun_get_user+0x24ca/0x43e0 [ 438.820733][T18547] ? aa_file_perm+0x192/0x15e0 [ 438.820750][T18547] ? aa_file_perm+0x50e/0x15e0 [ 438.820764][T18547] ? __pfx_tun_get_user+0x10/0x10 [ 438.820779][T18547] ? __lock_acquire+0x6b5/0x2cf0 [ 438.820792][T18547] ? __pfx_file_ioctl+0x10/0x10 [ 438.820819][T18547] ? ref_tracker_alloc+0x35c/0x4c0 [ 438.820835][T18547] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 438.820851][T18547] ? tun_get+0x1c/0x2f0 [ 438.820865][T18547] ? tun_get+0x1c/0x2f0 [ 438.820880][T18547] ? tun_get+0x1c/0x2f0 [ 438.820893][T18547] ? tun_get+0x1c/0x2f0 [ 438.820908][T18547] tun_chr_write_iter+0x113/0x200 [ 438.820923][T18547] vfs_write+0x61d/0xb90 [ 438.820942][T18547] ? __pfx_vfs_write+0x10/0x10 [ 438.820961][T18547] ? __fget_files+0x2a/0x420 [ 438.820977][T18547] ksys_write+0x150/0x270 [ 438.820992][T18547] ? __pfx_ksys_write+0x10/0x10 [ 438.821007][T18547] ? __pfx_kcov_ioctl+0x10/0x10 [ 438.821025][T18547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.821037][T18547] do_syscall_64+0x15f/0xf80 [ 438.821055][T18547] ? trace_irq_disable+0x3b/0x140 [ 438.821072][T18547] ? clear_bhb_loop+0x40/0x90 [ 438.821085][T18547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.821098][T18547] RIP: 0033:0x7f025715d68e [ 438.821110][T18547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 438.821121][T18547] RSP: 002b:00007f0254ff3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 438.821134][T18547] RAX: ffffffffffffffda RBX: 00007f0254ff46c0 RCX: 00007f025715d68e [ 438.821142][T18547] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 438.821150][T18547] RBP: 00007f0257232d6f R08: 0000000000000000 R09: 0000000000000000 [ 438.821157][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.821164][T18547] R13: 00007f0257416308 R14: 00007f0257416270 R15: 00007ffcbb59fd88 [ 438.821178][T18547] [ 439.122917][T18377] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 439.209423][T18377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.396812][ T9649] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.420108][ T9649] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 439.445032][ T9649] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 439.455232][ T9649] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 439.541028][ T9649] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.553558][ T9649] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 439.563853][ T9649] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 439.577374][ T9649] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 439.662182][ T9649] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.672152][ T9649] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 439.682001][ T9649] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 439.691705][ T9649] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 439.758272][ T9649] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.768239][ T9649] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 439.778097][ T9649] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 439.788732][ T9649] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 439.880225][ T9649] dvmrp0: left allmulticast mode [ 439.912145][ T9649] batman_adv: batadv0: Interface deactivated: vlan2 [ 439.968217][ T9649]  (unregistering): (slave ip6erspan0): Releasing active interface [ 440.031437][ T9649] batman_adv: batadv0: Removing interface: vlan2 [ 440.051193][ T9649] bond1 (unregistering): (slave gretap1): Releasing active interface [ 440.133377][ T9649] bond5 (unregistering): (slave gretap3): Releasing active interface [ 440.182489][ T9649] bond7 (unregistering): (slave geneve3): Releasing active interface [ 440.688172][ T9649] bond1 (unregistering): Released all slaves [ 440.696987][ T9649]  (unregistering): Released all slaves [ 440.705312][ T9649] bond2 (unregistering): Released all slaves [ 440.714091][ T9649] bond0 (unregistering): Released all slaves [ 440.723298][ T9649] bond3 (unregistering): Released all slaves [ 440.732974][ T9649] bond4 (unregistering): Released all slaves [ 440.742145][ T9649] bond5 (unregistering): Released all slaves [ 440.753430][ T9649] bond6 (unregistering): (slave veth3): Releasing backup interface [ 440.762283][ T9649] bond6 (unregistering): Released all slaves [ 440.774763][ T9649] bond7 (unregistering): Released all slaves [ 440.783565][ T9649] bond8 (unregistering): Released all slaves [ 440.795049][ T9649] bond9 (unregistering): Released all slaves [ 440.806139][ T9649] bond10 (unregistering): Released all slaves [ 440.814830][ T9649] bond11 (unregistering): Released all slaves [ 440.919435][ T9649] tipc: Disabling bearer [ 440.933843][ T9649] tipc: Left network mode [ 441.058243][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 441.272818][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 441.408409][ T9649] debugfs: 'netdev:syzkaller0' already exists in 'phy12' [ 441.536448][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 441.595214][ T9649] hsr_slave_0: left promiscuous mode [ 441.602784][ T9649] hsr_slave_1: left promiscuous mode [ 441.609028][ T9649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.616691][ T9649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.624315][ T9649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.633095][ T9649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.643395][ T9649] virt_wifi0: left allmulticast mode [ 441.648947][ T9649] virt_wifi0: left promiscuous mode [ 441.654193][ T9649] veth0_to_team: left promiscuous mode [ 441.660252][ T9649] veth1_macvtap: left allmulticast mode [ 441.666031][ T9649] veth1_macvtap: left promiscuous mode [ 441.671513][ T9649] veth0_macvtap: left promiscuous mode [ 441.677444][ T9649] veth1_vlan: left promiscuous mode [ 441.682698][ T9649] veth0_vlan: left promiscuous mode [ 441.882501][ T9649] team0 (unregistering): Port device team_slave_1 removed [ 441.892907][ T9649] team0 (unregistering): Port device team_slave_0 removed [ 441.939190][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 442.099635][ T9649] IPVS: stop unused estimator thread 0... [ 442.241933][ T9649] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.289500][ T9649] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.339601][ T9649] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.379825][ T9649] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.465128][ T9649] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.475196][ T9649] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.530020][ T9649] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.543181][ T9649] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.605215][ T9649] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.615514][ T9649] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.660299][ T9649] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.675777][ T9649] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.694006][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 442.922391][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 443.155046][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 443.178222][ T9649] bridge_slave_1: left allmulticast mode [ 443.184679][ T9649] bridge_slave_1: left promiscuous mode [ 443.191020][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.199107][ T9649] bridge_slave_0: left allmulticast mode [ 443.204741][ T9649] bridge_slave_0: left promiscuous mode [ 443.210664][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.219575][ T9649] bridge_slave_1: left allmulticast mode [ 443.225337][ T9649] bridge_slave_1: left promiscuous mode [ 443.231387][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.239434][ T9649] bridge_slave_0: left allmulticast mode [ 443.245073][ T9649] bridge_slave_0: left promiscuous mode [ 443.250915][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.260220][ T9649] bridge_slave_1: left allmulticast mode [ 443.266636][ T9649] bridge_slave_1: left promiscuous mode [ 443.272287][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.280556][ T9649] bridge_slave_0: left allmulticast mode [ 443.286439][ T9649] bridge_slave_0: left promiscuous mode [ 443.292164][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state