last executing test programs:

1.825261342s ago: executing program 2 (id=3722):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00')
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x1402, 0x18, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x48804)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=r2, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000a06b9fc49a19760f7ff8ffffff000008000000100000cacbcd5bdbf83bd7"], 0x50)

1.739211914s ago: executing program 1 (id=3725):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/167, 0xa7}, 0x8}], 0x1, 0x22, 0x0)
socket$isdn(0x22, 0x2, 0x21) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) (async, rerun: 32)
setsockopt$sock_int(r4, 0x1, 0x5, 0x0, 0x0) (async, rerun: 32)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r5, 0x0, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffff, 0x1, 0x78, 0x6}]}) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) (async)
listen(r5, 0x0) (async, rerun: 32)
close(0x3) (rerun: 32)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) (async)
r8 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000100)=0xf90, 0x4) (async)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'})

1.693679759s ago: executing program 2 (id=3726):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x22, 0x4, 0x6}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r0, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r1}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e80)={0x1a8, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x11, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed3103bc77d35b296674f1fe35663c0d236fd88d7ba"}]}, @nested={0x144, 0x6, 0x0, 0x1, [@nested={0x140, 0x75, 0x0, 0x1, [@nested={0x13c, 0x105, 0x0, 0x1, [@nested={0x138, 0xce, 0x0, 0x1, [@nested={0x134, 0x53, 0x0, 0x1, [@nested={0x8, 0xec, 0x0, 0x1, [@nested={0x4, 0x26}]}, @nested={0x128, 0x3a, 0x0, 0x1, [@nested={0x124, 0x10a, 0x0, 0x1, [@nested={0x115, 0xd9, 0x0, 0x1, [@typed={0x14, 0x88, 0x0, 0x0, @ipv6=@loopback}, @generic="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"]}, @typed={0x8, 0x9c, 0x0, 0x0, @u32=0x7e60eb28}]}]}]}]}]}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x800)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='cubic', 0x5)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r4 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x8040)

1.393120897s ago: executing program 4 (id=3730):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000740)=0x80000000, 0x4)
setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0xfffffffd, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e29, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r0, &(0x7f00000000c0)="e9", 0xe7ff, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)

1.389510413s ago: executing program 1 (id=3732):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001a00010028bd700000000000022020200004fd070000000008000300", @ANYRES32=r4, @ANYBLOB="08000100e000000108000200e5"], 0x34}}, 0x0)
r5 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000500)=0x4)
r6 = socket(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
unshare(0x22020600)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f00000002c0)=0xe, 0x4)
bind$bt_hci(r8, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6)
write(r8, &(0x7f0000000000)="2e000300010000", 0x7)
sendmsg$AUDIT_TRIM(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
connect$netlink(r6, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f00000001c0)={0x77359400}, 0x10)
write(r6, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r6, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f00000028c0)=[{{&(0x7f0000000380)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000740)="ffbb441142d75130aa85d0fe3f5e254a5743d219f3a82aa2521d03e84e0ec9d6cdb475841abae0159dbb807df6418e5d997ea2789938c5189cd6036abb858eeba2b2cee795b3a31217eac034b3bf58d2389cf7193295afcb34a4cb8eec6248e5909248a08cf3125f4bae262b63a3e3daf858", 0x72}], 0x3, &(0x7f0000000800)=[@ip_retopts={{0x10}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x37, 0x3, 0x5, [{@private=0xa010101}, {@local, 0x7}]}, @cipso={0x86, 0x1a, 0xfffffffffffffffd, [{0x2, 0x3, "b7"}, {0x2, 0x2}, {0x7, 0x2}, {0x1, 0x5, "43ceda"}, {0x7, 0x4, '(['}, {0x7, 0x4, "e8de"}]}, @timestamp_addr={0x44, 0xc, 0xc2, 0x1, 0x3, [{@empty, 0x7}]}]}}}], 0x60}}, {{&(0x7f0000000b00)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000001b80)="28bc681bf6203323c305d3f01ec52fcaab23e8bd2ee6332403046bcf678e69e8eb6a7b9e3a5606c6fe50179e6cbcb9376f2a3f1924c187b3ee981e6e06091c294383a86bed86368a48c7ffcb7a06782e6af4f1516c84de7bdc6fff2294d1e1e449488f354002307d65ab8a24c651808e632dd86db2e1", 0x76}, {&(0x7f0000001c00)}, {0x0}, {0x0}, {&(0x7f0000001e40)="c928f6e0232903669f95ae793553c98f7fda08204ea93ce54300d8c994696e4afa6e1d8bd3620dd8a2ef36cf6f71ca88fca67edde8676568ae0b324ce7bd918e778ed3b2d575299457e5e769e4b1d6f091407eb10291df623b03d351bdd8f08fa9", 0x61}, {&(0x7f0000001ec0)="25555de8facf1ea0eeb302254712ddc83de6b9f9d2720fc0794fad8a3ea8", 0x1e}], 0x6, &(0x7f0000000400)=[@ip_retopts={{0x98, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x14, 0x22, 0x0, 0x3, [0x4, 0x5, 0x1ffb, 0xec]}, @noop, @cipso={0x86, 0x2c, 0x0, [{0x5, 0xb, "86307fe127a5ecad46"}, {0x7, 0x8, "76592b29bb80"}, {0x0, 0xa, "c50b5540918405cb"}, {0x0, 0x9, '4\bUERfk'}]}, @timestamp_addr={0x44, 0x44, 0x62, 0x1, 0xf, [{@multicast2, 0x5}, {@loopback, 0x2}, {@private=0xa010100, 0x9}, {@multicast2, 0x400}, {@rand_addr=0x64010100, 0xff}, {@loopback, 0xa}, {@local, 0xfffff801}, {@rand_addr=0x64010102, 0x56e7}]}]}}}], 0x98}}, {{&(0x7f0000001fc0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000002340)=[{&(0x7f0000002000)="d5675354875ede8cc3a7079843ac57f6a1448a5241d82383259c6806a6c9313af80b422677b79756a58a00c9340a8e1e9676bb0dae79060a9ff78489e17242662a8660eb07ac3150b09fea46060c66b724e61effd2983190", 0x58}, {&(0x7f0000002100)="f4e14f62af26828b452c05eaa33e68a844ae8cb29d1319989cfc45cdbb4ffab8b8eb8d4dcef3744b801f7787a875a49716bda3da237df3a48937128042266d323186e71cb02464091eee544a111d8fe8af46c986eb7726c0547b4bc8d2d10750d9b28891b0b8b851c8b67fe0f3ea5a9547629e1160782e399e9c82", 0x7b}, {&(0x7f0000000600)="9e050a120c22b0677765a5a9e40c93fd2e14d397d085321f984c1441d283c78ca5cd11f3b9bffe84d0aa26138b197f90c5244d0fd074b6b3a54a3c115ff638ab0783f951c1762ce056e3343373af9e687ccb1a2c5606bd9fd7662e660032134e0348e182b8d94665c6d44b9323ac4de5cb2c64c4a5e7594e2b40b68ce39930708d12314acfbb43e04b1b016c3c31a951b3ea1ca27a9717501190d04738e9cfd94f2bf34f567729845327ed9cdfdc88425c46dbb973513c762dc7506af4f4b5cc43993c927d933e", 0xc7}, {&(0x7f00000022c0)="ed60d1d8e62b2809b7957bfdafeea4409f42310c8e0d02a764fccd48a0a92f03038e74688260443de3c74693ed41f480f6f902d7a3c665770e46041f4266f8", 0x3f}, {0x0}], 0x5, &(0x7f00000023c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x30}}], 0x3, 0xc805)
bind$alg(r6, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58)
getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/291], &(0x7f0000000080)=0x123)
r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r9, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4)

1.297327979s ago: executing program 4 (id=3733):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0xf5ff, &(0x7f0000000000)={&(0x7f0000000240)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x8, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)

1.19124387s ago: executing program 4 (id=3734):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000001140), 0x700, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
unshare(0x2020600)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x6e38e000)
connect$qrtr(0xffffffffffffffff, 0x0, 0x0)
bind$vsock_stream(r1, 0x0, 0x0)

1.081595189s ago: executing program 2 (id=3736):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x78}, 0x1, 0x7}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x3000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r6, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r7, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0xd, 0x28011, r0, 0x4000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0)

1.039350615s ago: executing program 3 (id=3737):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6tnl0\x00', <r1=>0x0, 0x6, 0x6, 0x1, 0x3, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x40, 0x4, 0xfff}})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@deltfilter={0xd0, 0x2d, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x9}, {0xb, 0x7}, {0x8, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x3}}, @filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x800}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0x9}}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x3}, @TCA_FLOW_MASK={0x8, 0x6, 0x3ff}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xff000000, 0xff000000, 0xff, 0xff000000]}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5080}, 0x1)
r2 = accept(r0, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048000}, 0x40)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x48}}}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@challenge={0x10, 0x1, 0x70}, @challenge={0x10, 0x1, 0x6f}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@mesh_chsw={0x76, 0x6, {0x4f, 0xd, 0x1c}}, @chsw_timing={0x68, 0x4, {0x5, 0x6}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async)
sendmmsg(r0, &(0x7f0000002180)=[{{&(0x7f00000005c0)=@can={0x1d, r1}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000640)="804d230d666edac1f0e072f10f92248a2aba523de2501850a0dd9d2e6a23562caba3a8cfe7469636", 0x28}, {&(0x7f0000000680)="37f7b634346a16c232ec5675b1c570350618d64dda26d13681f5834fc962feb229240cb48e75f025d22efb4ec1a931ca654ac9ea04b5b67a1d499907bd8bc24e0246ba6b64f3d682b67dd7a7d56a7421645da3d24c6ccc529902f881d27286052d006b586c74aa8e70487062b5f219c45f303044ee26f173462b0333aae4aa9f3781835b6fed19b14e621f007040bcfaa8796606b5aeb67eb10d61c5acb9ab147069fdf4fe8537e1bac55f6f71d1bd4f4404806685136d7562bb6ca4f8980e77829faee2ae7ea7fbb3f945071107c585d2dc8960e8", 0xd5}, {&(0x7f0000000780)="1051652878a04fd6dbd0b01f11918c608921e73b9c945e32549eaf187cdb5e80bb9f205c8f3b70411a9da972b6aa1b86f02189b79848f9db39dce7bf995e7f9936fcf21733a79259fab45cc0fafd6ec76918d56e6e9a54b3a54604ac288f630feb05f579600e6ad64ab699c8c78f67072620619f6fa1fe16da5afd9b2aa9fb67c6d94b1dd93ecb771b23073c79e824761757f47e1c187c40de2a28b12a", 0x9d}], 0x3, &(0x7f0000000880)=[{0x98, 0x10d, 0x9, "7e5c93c83be954566e610a8d59704838cd6c4f7940d9bee5c2df86590c0e2118baaa56af7f9c7e9c83c9f2f0b0706e8c5de0ececd1a1a039a75074d9c478ea2d52457dde322e6625ae8c50b7a5ed532fab7ab423cbaf76f9e630d4c56178056532d54c79eb61f1400d17e10f85affbe9d286bfebbd968586bfb0d154e81b660c3377ef7229"}, {0x90, 0x115, 0x3, "65c326c1814a54b023930afd6b590872762a5c7410f8eddad366c84fad5ae346844148217c2dd8f3975f4f0d45c2386a8ed6e3e2a1f23b1d45193dab98416d0cc5746a3736ee6cb7983e3676350d908f3205406c2d541c4ffde24974d190f171e1624a1ea66b9ba7bee11bcba665eadeb7261a747f0135a2a41a6359"}, {0x48, 0x84, 0x2, "ee5d2bedccdb5cb603a3316026fcf657968d9849fa7b706cc4eb07172301199f761e553b79f6de71dae4c954977b41e9119b"}, {0x80, 0x111, 0x8, "6e51795a69585871fa56dd6fd78b1b67cdd51a1296fa567090c00af16b6be78402f89d6f5206bad18d23f618f8ded10cf6cc775be4f530828fa42c20e773b98b5de88ca1881fb274a58df75314602ae36a21747a905cc12b588fcf47e2685a9461f984625e155273b59f2a"}, {0x28, 0x10b, 0x9, "13902cbe8262e47251e76935639d401298ac818a7e"}, {0x38, 0x109, 0x7ff, "50e03812af12f550289184daa22a463482a575a36e86ecb26bdfd11287be410a155836"}, {0x98, 0x115, 0x0, "3aa35f3fb837127951687a948dcccdece3b5b7b49ecedb5b8dc3d0a3b366d614719693730164f03b99197094f53b6eb8bad4089a8b0f19026ab595cc81cdeb87eac4a928770508a758a6cfc8cb63e6cb6a9f153d44da95a7a79300d47580b07d9fe122ac16c197049f7639f21bf8aa81fd928275d9cbbede976db10335690a47078f5a72"}, {0x80, 0x1, 0x3, "691993e027ff8e154eaf1a976d60c030868cd0953479b8b4d47fc3ebc46f75f662f9659a145091c242d3632e305dc6e5e514d9e86e17e94059931b7f18faee2fc2f63ee444b150a3e931113c7c089bb75adea36bb7846c7a840595d38f051a9a4bf422fd52cd70f3b4004e405fb1d9"}], 0x368}}, {{0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=[{0x50, 0x10f, 0xe3, "5e1d7b116b042ca249b03fd5312ccc034321f04646e6a40f4789e1e01fa095b04be60188045564af0ee204b41752d756395e1fbee651b12a8d826beb38709c31"}, {0x40, 0x10c, 0x4, "f4b930c12721a2b96ea400919dff298d6dbe7a2bed0ba60db32ee4981d3fed58485771a05f6f6c673f2e623920"}, {0xd0, 0x1b2, 0x92, "f702b8b21af5e323c92d2d67b731c14796c101a0613db7cd1c323ecb29478385ef7d93f3229eb80f4abe12268e48748a41f9d0e1d1749e411fbd0737ac62d450ed92f8a5dc340e0aa58bccd9c9c60feaadeb4d20df00dc7e89f731a5588d50ea1fa008552486c05daaec5572420528e6c86003fa3e61a24dc66b2f344fbc53bf245366f12f74bc947108b7f9810d0415f334e6966e7729e9eab42814a2460b54b96ced3b703535c296a046bf2dab0d24aa4b8855ee983c54ee07619a3b23216b"}, {0x1010, 0x3a, 0xffff7fff, "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"}], 0x1170}}, {{&(0x7f0000001dc0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001e40)="d7b7dca56d7990cd93d914d47b23a74759f2439066676e63e7520b217b76aba781838c3e0fbf1a59ec48c15e936c940a", 0x30}], 0x1}}, {{&(0x7f0000001ec0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @local}, 0x1, 0x3, 0x1, 0x400}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001f40)="acd4b80711893afec8caece00302b940990de7bd94891cd27517ae9e41f001afb715a4820869412b74f94e8862d8e140fa408ec2297c9a8615f8af0f37f10293", 0x40}], 0x1, &(0x7f0000001fc0)=[{0x68, 0x108, 0x6, "76c583fe80a21a1a2a55d43ae063665e233cfe786337b5c19323e1b6b70aa604d581ab3a9de910a9f0c75328a9a8a60b2940289642c66863a329647199042d05ba0027054ed7be4512ba9861ae96bd25f4f8"}, {0x108, 0x107, 0x9, "70d45ed6e3675e0d8f74ebcf61a32f5ad93e880cc80aeb12919e088e2edb9a085b9d94a04295d8d997b9b7892087b22bac6892fa5f3d09baacb43ec5b47e0fd1e6207ad8c3b9c383eaa2685fd4e6ff6b49b93104e234cea0ffc50f3e6a02233d077dd0592d161fc03a63bf2e7742dadfecf8fec81e8b032f5b0175486eb39996ad4505e529df6a953ac8c0e19ef8e4e4121cdfc49b5f67f69e5b37c3dbdc324e623037bf83406913db32df191c8fce496d624a2483359ca5ed12fb796f4bc75a1aea11a85e1b6124f9f8f96af9deb6c402de906c509f61df69628971ba9a4a355406066a574950e88cf476eec82007d46c6bdbabe3"}, {0x38, 0x101, 0x3, "e5239546df3fe6716e1b945c20e141e21d154394d863d9e63f136fcf29d49b43d9"}, {0x18, 0x107, 0x0, "890603c002082c55"}], 0x1c0}}], 0x4, 0x4) (async)
r5 = getpid()
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003680)={0x0, 0x0, <r6=>0x0}, &(0x7f00000036c0)=0xc) (async)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000003700)=<r7=>0x0) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003740)=<r8=>0x0) (async)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003780)={0x0, 0x0, <r9=>0x0}, &(0x7f00000037c0)=0xc) (async)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003800)={<r10=>0x0}, &(0x7f0000003840)=0xc)
r11 = getuid() (async)
r12 = accept4$vsock_stream(r2, &(0x7f0000003880)={0x28, 0x0, 0x2711, @host}, 0x10, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000038c0)=<r13=>0x0) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000003900)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000003a00)=0xe8)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003a40)={0x0, 0x0, <r15=>0x0}, &(0x7f0000003a80)=0xc)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000003ac0)=<r16=>0x0) (async)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000003b00)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000003c00)=0xe8) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003c40)={0x0, 0x0, <r18=>0x0}, &(0x7f0000003c80)=0xc) (async)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003cc0)={<r19=>0x0}, &(0x7f0000003d00)=0xc) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000003d40)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000003e40)=0xe8)
r21 = getgid()
sendmsg$unix(r2, &(0x7f0000003fc0)={&(0x7f0000002280)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000002300)="6c9dcd97ff0e49b0b9c72a8fd2b12795ec3440f01c7670b7bfee8f624cc698294576d87e54a6f8ca314f97c26be5d970ea0da577cb712505cc8cbfc113271314e79da45c247d3cfc", 0x48}, {&(0x7f0000002380)="9d1199b26462cef39294a79b52cce9ac2a48f0c42547c3ec3dcbe34368541b5798364d654dddc3ceaa8daba6859641c1de09b82b02a90dd276c87b0162ab2553af138a40684e909aa16e2c8c060b40af43e5643df76dea219f035415bc33e7f7710590be527166672ecbce948a051dd2014989f4691b3e5fd5a5d155f044c3f89928bb486a590f1484282418bff128c3ec82f90708a799a59d2fbb6c2c3067329b0d5a5ba7938e13759e4d218f36fcc2755fe39908f383035d808e08cf532761ca899e3694afcaaa5d0ceaddab53e82103cd5abdef", 0xd5}, {&(0x7f0000002480)="d18e24049f925af6eaffe066dbbf1e4f6f370b301852e37b442afde038adf4c7512b0937d983dc5ea5e18e00d7cdab218ffe8ddd11e320111f57439e9599316ff357a3e50655f0", 0x47}, {&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000003500)="0f40e385b818fb92c3d4d885d880757e80c83f940be2d44db4cc0bf0261819dd6407e6633b77a7af293ee8a4ecea9bd08c1544fc097eac3972524cb0c451c35d1d0ee6c4d1df018fffaf4361ec8611fd85330b5b177a1cd2ac234c2f57dcc26fce51aea1fc58bbe2216fc02eb01528d8cfcec5fe68326d38ce86038561cc8f898a5c60bf39f5089169e2f24911bbf9ce2a31f05886ce7f3685d8c2a34e8a0cb419dc2b6770e003067b39e3fcf621579948d41e1b519b20358026fb7ee60818333cce3f2fc673375ac5", 0xc9}], 0x5, &(0x7f0000003e80)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, r6}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r2, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r12, r0, r0, r2, r2]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}], 0x130, 0x4000004}, 0x48c0) (async)
r22 = syz_genetlink_get_family_id$devlink(&(0x7f0000004040), r2)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000004200)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000041c0)={&(0x7f0000004080)={0x124, r22, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x48}, {0x6, 0x11, 0xa6b1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x7f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x518}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x1}}]}, 0x124}, 0x1, 0x0, 0x0, 0x41}, 0x8004) (async)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000004240), &(0x7f0000004280)=0x4)

939.474348ms ago: executing program 2 (id=3738):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000060012000a00ff000000035c3b61c1d67f6f94007134cf6e8c0000a007a2904509000000e4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca5096b472bea79116ccf021ffd6ec16c8f835746e9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1ca000000000000000c2a9ecbee5dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c", 0xdb}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

865.790169ms ago: executing program 3 (id=3739):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r0, r1, 0x2f, 0x18, 0x4}, 0x20)

788.61963ms ago: executing program 0 (id=3740):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="04040000100007020000000000000000ac14149a000000000000000000000000e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000faffffffffffffffad000000000000000000000000000000000000000000000000000000000000000000200000000000030000000000000000000000000000000000040004000000e80a000000000000000000000a000200550000000000000008001d000800000008000b00010000000c000f0003000000000000000c0015005a07350000004000440017000a00000028bd700026bd700026bd70002cbd70000400000001000000ffffff7f150f00000d00000007000000060000000004000001feffff0600000046080000910002"], 0x404}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065a00200100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065a00200100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005f40)={0x34, r3, 0x1, 0x70bd2d, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6cb9}]}, 0x34}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0xf887, 0x7800, 0x3, 0x3, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x68, 0x0, 0xd, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)={'syztnl1\x00', <r4=>0x0, 0xf887, 0x7800, 0x3, 0x3, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x68, 0x0, 0xd, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}}}})
r5 = socket$rds(0x15, 0x5, 0x0)
unshare(0x28000600)
setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000007c0), 0x10) (async)
setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000007c0), 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004041}, 0x20000000)

783.060172ms ago: executing program 3 (id=3741):
unshare(0x24060400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x30000)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000080)=r0, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x86, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
unshare(0x10040a00)

729.617611ms ago: executing program 2 (id=3742):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000002060108000000000000000000000004090b020073797a3100000000050004000000000011000300686173683a6e65742c6e65740000000005000500020000000500010006000000"], 0x4c}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r2, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x100000}}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000280)='./file0\x00', r6}, 0x18)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000600)={<r8=>0x0, 0xfffffffffffffffa, 0x24f, 0x1})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@map=r6, 0x11, 0x1, 0x649d9ae0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30, 0x61, 0x1e]}}, 0x0, 0x29, 0x0, 0x1, 0x4}, 0x28)
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, 0x0)
setsockopt$inet6_opts(r3, 0x29, 0x5b, &(0x7f0000000a40)=@srh={0x33, 0xa, 0x4, 0x5, 0x10, 0x40, 0x7, [@remote, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1]}, 0x58)
ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000e00)={0x18, 0x4, {0x6, @struct={0x8, 0x535d9a05}, 0x0, 0x8, 0x4, 0x8, 0xc03, 0x1, 0xb2, @usage=0xe, 0x7f8, 0x2, [0x1, 0xf3b4, 0x8, 0x3ff, 0x636d8f85, 0x5]}, {0x0, @struct={0x4, 0x1ff}, r8, 0xffffffffffffffff, 0xd4, 0x0, 0x6, 0x2, 0x1b, @usage=0xc, 0x9, 0xfff, [0x3, 0x10, 0x100000000, 0x5, 0x9, 0x8000000000000000]}, {0x1ff, @struct={0x1000, 0x4}, 0x0, 0x904, 0x4, 0x800, 0x0, 0x6, 0x80, @struct={0x2, 0x1}, 0x6, 0xc7f, [0x3, 0x6, 0x2, 0xffff, 0x9, 0xe933]}, {0xfffffffffffffffb, 0x8000000000000000, 0x1000}})
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfc}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc006}, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

694.222697ms ago: executing program 0 (id=3743):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="b4003171199c252a8dec0213f6d2b4607b0000101d4fb57f5e4ca3e952b32b4c000009000100000000000500020000000000950000000000180000dc69531ebba7c3bd535f20d45e63ca29826331faacf36bb2a5e66146cc546541f1d44543a9b4ffa1406324eb67172a6cc27f451c9ba5196585dbe80773d3af5fd962f2e3a311782b001d097534e9"], &(0x7f0000000400)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'wg1\x00', 0x4000}) (async, rerun: 32)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xe9, 0x0, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) (rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, @alu={0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async, rerun: 32)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x613f, 0x81, 0x9cdbee1763468153, 0x3, 0x9}, 0x40}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "d09284"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async, rerun: 32)
r9 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32)
vmsplice(r9, &(0x7f0000000480)=[{&(0x7f0000000440)="f35b17c4d48a99", 0x7}, {&(0x7f0000001480)="2bc8e9a453119bd2f0d19bb144ea1908dcfd1b67ac24e4608e63a7fe6d9915c07378714bf77529a71dfbf45dd33050bb8da1b02b3c19c0460bfdf177f21c5142268d0e50d7cfe8ec3971974c9b344fa012680c6f2782e194bc05ebdaa90d4aa47e521315e365c3a7e23f3057b9030e5f5101a00f6231d7e348e94c3c360e4641e38f9fd767dd46267d576d6142c6a2440d24cdf6481f2a875b95a2b9e309230a275e91281fd6b0f9fb7775db1588652fd5beb01e5a0c0b8f411d444831ffbc870cdfbfda6340761988", 0xc9}], 0x2, 0x3) (async)
sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000006b00)=ANY=[@ANYBLOB="18000000fcdbdf251e0304000100"/24], 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

672.959141ms ago: executing program 3 (id=3744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0xfff5, &(0x7f0000000000)={&(0x7f0000000240)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x8, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)

601.607434ms ago: executing program 2 (id=3745):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
sendmmsg$sock(r0, &(0x7f0000001100)=[{{&(0x7f0000000300)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000000200)=[{&(0x7f00000003c0)="72b2c730a8467808df6e5a2fa58ebaf4e7724fcf314e77a1a180182bfff0d915cd690b05b3b28359d44e20f9b091746cf1af7578f3be6d0fc33aaaff1b5f77eecad437ff685f57cb7281859533c284596851c46e3ea5c5113ae8dda23635b3bacebe712ede4e393a8b6250a1531471bda5a798a871816b521d556738c6f015f0595be8cae2eaae027f6a201e0b1f499b20002ea419c9c8d885fe3cf2f8fa23b31ee381665e3043830d84934102b91f866544c64856bfd573d7a336", 0xbb}, {&(0x7f0000000480)="c90afee87b6d709ac09aa08d8c664ceb1974630ca43b327cfa8ccd0c38f8be34b86fe128f313ee8497120a0c2d39f5c836e8c9e176ac4465c58b73ea86ccf231bc58fbffbc44aa996db60d000c606b85e23a4f6cfd9354ab99d1f203a8b09f330687084b2ed77c9fc8c58607e2e69e3e2a710d16de7cd50e96d3d3c2f1a9", 0x7e}, {&(0x7f0000000580)="dbbb2d8bf0a4cc7bc21916982dca0c17d3a4ac817640275924e20d6759672eaf0e2a8f717fba5407cb010f71018a75b06c9db43c7470d4db4d5540cf688f36f084e1573f347eb3d4f3cfa2bd95404c008c274d08b7a62f38c1f8daa223f092e81a1714f1e6eb7481e83e1398c9fe463361dd669512a5a618c88e1817507df89f369f00cb96fa515f7a4d34ff980fa63d7c2bef46cda105dedd592d", 0x9b}, {&(0x7f0000000640)="b2e84936b9c35501e788179ff552f352b4c774196c614473dc9cc8c9f38d0c6f18385a8b692d1662e52105c48662ece363971d7887a2f880a59a4c81ef32e2fee728195f547faba66f67b0ebc478528cd828510c", 0x54}], 0x4}}, {{&(0x7f00000006c0)=@phonet={0x23, 0x1c, 0x0, 0x1a}, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x167}}], 0x18}}, {{&(0x7f0000000c80)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000d00)="f6a4df622b7968c3a86d004ba8bf775f55cbdd08d52ea5486635df50ccc28f334e932b4d4cf12ecbf5f3bfe855813155005680c41934e46d019ddfef6b776028c63619c353b630da5359e4a94c827d15a412c8716813d648c2e16e97ed6aecd111a54881a606c524e37aa0ce69f8200750aff350cc02e3dde843ec191a0f58e27b1cf8ea245b9880ffacc10047496a26930eae10c6c0bc9423f6e4ecf8435ef629d07ec465490abe805de99b12e40b76a2b51297aa876a6763118fc309fd3a9bd1aeb2d7627860e994fd6b9519d140a75281a727036110a49af82fa27fde410cb15ec5be13b7719ea258a9af", 0xec}, {&(0x7f0000000e00)="42c04ea8e7b68d8d3105c5f0291df044cf9e7e818760ec5c0e45f9b61fceb1c2356e7e2e0264cbae498da7a18280a5663b7ebc4175723966c43ac26c8462f0a7190bfe92b0fbe4037a20018706ae01364b4ab7157aed473875ad81c64f68a73f032e7945be9381aa774ba044dc1f3a4a2a331f5217b6a1bac5b41340824a71f2d89179e5afd0fa19e356345efe22064d9faf0f33a41f5927257e531be7f2789271bbf9c08f7c47522d6060bc174778f236a462214e4f726532dbcaf7f665aac6ba9198edd3caa54bb8fdf6d6cfbbe14b1d2c10475c166934620a2a8bec1dc9c9b2ae2ab2372a968a5f332eb735127c00a1a4d9e2a2a5", 0xf6}], 0x2}}, {{&(0x7f0000000f40)=@nfc_llcp={0x27, r4, 0xffffffffffffffff, 0x7, 0x2f, 0x7f, "c0fd5cdc3f27796a7a7b6c4de8c10a63c157edac57959f911066a537d17952ed535d9115f510e8812bab94b57ed83af73022ad4087f9800e3e2b771f7d1620", 0x6}, 0x80, &(0x7f0000001040)=[{&(0x7f0000001200)="07a082897a0e111cb1dbf71d079fc27f862c0bfa33eef9ab09486fbe7b69de12ef56b6bb9eb2fd0472dcf01ec61ee3bc4f61d42e36a4ffb0331ee0e5c6bf6c771280256930176b17df0d50a4d9a5ac88c76184059771a8d5b0efc2e1f33acc5bf3dd41fbf1513e3c01dee3dedc279f0088ac5b42fbc3476421d16ec5fb6dfa3d9ddf88abb70f7abe9dcf65c814e6c699679a3a3fe21b2d7569f07fb6952abdac167fd609eb497d9dde862034bb5104f388152fb04f0cf2927780", 0xba}], 0x1, &(0x7f0000001080)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff9}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}], 0x48}}], 0x4, 0x20002000)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x401, 0x9, 0x8, 0xb0, 0x3]}, &(0x7f0000000080)=0x78)
socket$l2tp6(0xa, 0x2, 0x73)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x10}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x82}, 0x2000400c)
bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
bpf$BPF_LINK_CREATE(0x8, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff, 0x1c, 0x0, @val=@tracing={0x0, 0x8}}, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x18}, 0x2}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r10=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000b40)={r10, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r12 = socket(0x25, 0x80000, 0x4)
sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8011)
sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={0x2c, r11, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040801}, 0x2400c000)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="04fdff91", @ANYRES16=r11, @ANYBLOB="040027bd7000fedbdf257f00000008000300", @ANYRES32=r13, @ANYBLOB="0c0099000000000066000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x13fd5ff5b4810ab1)
r14 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r14, 0x891c, &(0x7f0000000540)={'team0\x00', {0x2, 0xfffe, @broadcast}})
ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0xb, 0x1, 0x8000, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x5, 0x0, 0x0, 0x7e4, 0x1, 0x1, 0x45, [0x2, 0x10000001]}})

581.221049ms ago: executing program 3 (id=3746):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000001940)=[{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000580)="fe093007a036b825dbc02c3f6a3312e7", 0x10}], 0x1, 0x0, 0x0, 0x40010}], 0x1, 0x8001) (async)
recvmmsg(r5, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) (async)
ioctl(r6, 0x8b29, &(0x7f0000000040)) (async)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r9=>0x0}) (async)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10)
bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r9, 0x24, r3}, 0x10)

563.789569ms ago: executing program 0 (id=3747):
r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @rose}, [@default, @default, @default, @rose, @default, @default, @bcast, @rose]}, &(0x7f00000000c0)=0x48)
getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r5, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x2f, &(0x7f0000000380)=ANY=[], 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x1ff, 0x4)

457.758539ms ago: executing program 0 (id=3748):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000f5ff00b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000000000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d858952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a8b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000040)}, 0x50) (async)
r5 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async, rerun: 64)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async, rerun: 32)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000002700))

454.592065ms ago: executing program 1 (id=3749):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000d00)={0x2, &(0x7f0000000cc0)=[{0xac, 0x1, 0xc, 0x1}, {0x6, 0x4, 0x6, 0x3}]}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
unshare(0x22020600) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
recvfrom(r5, 0x0, 0x0, 0x10100, 0x0, 0x0) (async)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)={'team0\x00', <r7=>0x0})
sendmsg$xdp(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x2c, 0x0, r7, 0xd}, 0x10, &(0x7f0000000880)=[{&(0x7f00000003c0)="fbddd317c157c1c8de20b7d6a452b0c3e14c5ed262cac30c0670474de37a26e00487569bc787691903629e080dbec2f738835e94cdea4d10be596ff415b916081a711f36d9fd04133b4cf31b7c1ef6e2cc860d27f64eff84cf90ad2f1b", 0x5d}, {&(0x7f0000000540)="e2e331e0904c7d100add4a28bebbdc59ca98e902441e53d0d6d6cc442c2492c92c29d6dc249645699565e5586e59072fee299abf5673de1aa177bbb196f8cb9cd31c64ab5c35c96945d97ea7e26967a8062f19553199c58c51ece5b808f2122451f2f93c59009f5e17f5b9fc440c253704bb2cafd343659e77eb80fc0f6b9061d895029b5aed185be12544904903f434b0c12ede1806315e020e78667e368b76e59e3748c40a492b538d9e6408f3a23a94e7b994940b9902adb2ec5f7537b870ecae50d83ef85931b4a2ac5c22ad9f0c", 0xd0}, {&(0x7f0000000640)="3eba823c481dcf0aae74e6598411d981eba4f15fca3bd37d837bc2a2dbc522db4bd4d778c484810ba6b0f6575b8008bade13d6b7e3b0911677f37f1e649f080bc7a6ad6ba9f8fd4379c10e312d53989cc00b992efef411910ac842f79f5c4b1691105506988e6563b2c99d6080c14920910f5fd52fc274deafb1ed9b671c841a7c8f75886ffa4fc0f9bcba03c52d532db101", 0x92}, {&(0x7f0000000700)="e64c1a4dbf66b362f79bcef9fbc62055789761e31ccbe6d1ee9c093d984ee4a493c2cc1109ad8315a7161ec3be49a3d0afe2dd394ec9b19315b415f6c85d3a7b30978c4d070a9081f942b774c4bd06672a32f87ddf0502594fce481cc34c451a2f19745393f59670647e08f0bd62f05df650ea6379569b2f6d5a0f15e0febe33d35e0b82ccacca3dfdaeeca9dd7c591e3380364376571f9db899399da2959f57e53b57aff861ba38a8dfda1ca8d7e3bd54f7defaf1195f23ecf5a3d34e0fc76f0c97065137830669b0", 0xc9}, {&(0x7f0000000800)="ab59aaed576405a7c4de4a11117b81f08e146942e58180e0d0bf7f2c06cf7016df0fe3a4c070a3fa3a3fbe7e4b4d64abc90c86924d44787eb59813cd5e175672cf55fe86a0b2914771522fe08ccd78f3904130b5ba5ef0d03c23fbd4fa885b5fb07668861b4e73630a", 0x69}], 0x5, 0x0, 0x0, 0x20000815}, 0x20000080) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup, 0xffffffffffffffff, 0x11, 0x2018}, 0x20) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9800000040000701fcffffff00000100017c0000bf28cc03796c968e6da79c3b15d5c925e61c610ae81ebbb4de03cba80f6bd89bc219a1fe8c1024747d2a14231387ace8c5bd076a2c9efd7ac07045beb2957938659d3b34d0ece068e32cc185c9c36304000000000000001f2ce7f2662f984f7550facd03d6080c00018006000600800a0000100002800c00098008001700000000000000"], 0x98}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
bind$inet(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) (async)
ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000300)) (async)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x90) (async)
socket$unix(0x1, 0x2, 0x0)

352.613055ms ago: executing program 3 (id=3750):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) (async)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000004c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x15}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4000) (async)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c000000f26fef1cc7b1d827a1972291de67e4da95fc13be73652e9c561f5dab9694fd16bfbc516003a761775e92776bcbb67180ac6edc09d914c759d30f63ea395740ba6024f506373cb913e8a08c005590f9e867977572624c9780f6355866d63207d557485413412e20709022e8de2ec96ff034b1533d", @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf250300000014000300000000000000000000000000000000001400060076657468315f6d61637674617000000014000200fe88000000000000000000000000010108000500ffffffff14000200ff020000000000000000000000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004d00)={0x5c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x48040) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x24dfdbfe, {{@in=@rand_addr=0x64010101, @in6=@private1, 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x20, 0x1d}, {@in6=@private1, 0xfe, 0x2b}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x5, 0x542}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x91}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})

350.632304ms ago: executing program 1 (id=3751):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r0, r1, 0x2f, 0x18, 0x4}, 0x20)

311.642624ms ago: executing program 0 (id=3752):
socket(0x10, 0x80002, 0x0) (async)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES16=r0], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00')
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

181.159645ms ago: executing program 0 (id=3753):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000001850000000000000000000000000000018400000f8ffffff400000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x118)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3}]})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, 0xffffffffffffffff, 0x26}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xd6, &(0x7f0000000380)=""/214}, 0x90)
close(r3)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, <r6=>0xffffffffffffffff}, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000540)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0)
close(r12)
socket$pppl2tp(0x18, 0x1, 0x1)

175.494094ms ago: executing program 1 (id=3754):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/50, 0x32, 0x1, &(0x7f0000000240)=""/160, 0xa0}, &(0x7f00000001c0)=0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r4, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000040)={@val={0x6f01, 0xd}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @llc={@llc={0xfe, 0x0, ' ', "f3ac597eebd24499ef08f24d4103ea1750e68db0effd058496d61a203fb53ecb0c0fb824b62cbf0649055e8f6f6a083dfbeb6f016fcb4da67ce7b117449c9e4326d4043b34442e7bd58d3e02e18c92995f6ef162b03bd016c43b0a52883bc7c47136764c9b70e8d750b300cee7a7f75acce184"}}}}, 0x84)

113.760649ms ago: executing program 4 (id=3755):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, <r0=>0xffffffffffffffff}, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={<r1=>r0, 0x0, 0x4, 0xfffffffffffff9e7})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0xe, 0x27, &(0x7f0000000280)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@jmp={0x5, 0x1, 0x0, 0x7, 0xb, 0xffffffffffffffff, 0xfffffffffffffff0}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @generic={0x0, 0x2, 0x8, 0x2, 0xfffffbff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xf}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x240000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

70.929309ms ago: executing program 4 (id=3756):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x9c, 0x0, 0x1, 0x505, 0x3a, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x8, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)

1.638962ms ago: executing program 4 (id=3757):
r0 = socket(0x400000000010, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="9000000004000000040000000200139d753a0000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', <r1=>0x0, 0x4, 0x1, 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @loopback={0x300, 0xffff888101827518}, 0x8000, 0x7, 0xffffffff}})
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = gettid()
syz_open_procfs$namespace(r3, &(0x7f0000000340))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94)
r6 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, <r7=>0xffffffffffffffff}, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x51, 0xfd, 0x2, 0x1000, r7, 0x7, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x14, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x20}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r10, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x4)
writev(r11, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)
r12 = socket$inet(0x10, 0x3, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000040a0102"], 0x14}}, 0x0)
sendmsg(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc4", 0x26}], 0x1}, 0x0)
recvmmsg(r12, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x5, 0x400, 0x8, 0x0, r8, 0x8, '\x00', r1, r9, 0x3, 0x2, 0x5, 0x5}, 0x50)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r6, r5})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)

0s ago: executing program 1 (id=3758):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x67}, 0x94)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000002000010026bd7000fedbdf250a0000000000000108000000050013000100"], 0x38}}, 0x90)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r6, 0x25, 0x4, @val=@netfilter={0x0, 0x0, 0x2, 0x71e10095c446dfea}}, 0x20)
getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000240)=0x30)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000280), &(0x7f0000000340)=0x4)
syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[], 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x90, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000000), 0x3)

kernel console output (not intermixed with test programs):

entered promiscuous mode
[  466.346409][T15577] syzkaller0: entered allmulticast mode
[  466.420007][T15577] tipc: Resetting bearer <eth:syzkaller0>
[  466.434165][T15576] tipc: Resetting bearer <eth:syzkaller0>
[  466.544694][T15576] tipc: Disabling bearer <eth:syzkaller0>
[  466.981584][T15624] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2577'.
[  467.035481][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2573'.
[  467.045775][T15613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2573'.
[  467.091906][T15635] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2580'.
[  467.294019][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2582'.
[  467.331669][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2582'.
[  467.375675][T15640] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2582'.
[  467.665419][T15669] netlink: 'syz.2.2590': attribute type 29 has an invalid length.
[  467.896865][T15678] nbd3: detected capacity change from 0 to 91
[  467.907288][T15680] netlink: 'syz.4.2595': attribute type 1 has an invalid length.
[  468.532735][ T5841] block nbd3: Receive control failed (result -104)
[  468.661892][T15717] netlink: 'syz.3.2607': attribute type 3 has an invalid length.
[  468.736261][T15717] lo speed is unknown, defaulting to 1000
[  468.750676][T15717] wg1 speed is unknown, defaulting to 1000
[  468.783924][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  468.791971][    C1] lec:lec_tx_timeout: lec0
[  468.812763][T15717] wg1 speed is unknown, defaulting to 1000
[  468.818821][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  468.875978][T15725] netlink: 'syz.4.2610': attribute type 39 has an invalid length.
[  469.097330][T15742] IPv6: NLM_F_REPLACE set, but no existing node found!
[  469.346554][T15761] netlink: 'syz.3.2620': attribute type 1 has an invalid length.
[  469.387736][   T48] wg1 speed is unknown, defaulting to 1000
[  469.907076][T15782] vlan0: entered promiscuous mode
[  469.912248][T15782] team0: entered promiscuous mode
[  470.463798][T15825] syzkaller0: entered promiscuous mode
[  470.484047][T15825] syzkaller0: entered allmulticast mode
[  470.538459][T15833] nbd: illegal input index 65508
[  470.550866][T15833] netlink: 'syz.1.2640': attribute type 1 has an invalid length.
[  470.587381][T15839] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  470.600521][T15833] 8021q: adding VLAN 0 to HW filter on device bond10
[  470.674044][T15833] bond10: (slave dummy0): making interface the new active one
[  470.682898][T15833] bond10: (slave dummy0): Enslaving as an active interface with an up link
[  470.830334][T15855] __nla_validate_parse: 13 callbacks suppressed
[  470.830352][T15855] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2646'.
[  470.902569][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2646'.
[  470.918595][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2646'.
[  470.928088][T15855] netlink: 'syz.3.2646': attribute type 12 has an invalid length.
[  470.937095][T15855] netlink: 'syz.3.2646': attribute type 11 has an invalid length.
[  470.974056][T15845] bond10 (unregistering): (slave dummy0): Releasing active interface
[  470.992596][T15845] bond10 (unregistering): Released all slaves
[  471.145698][T15860] netlink: 'syz.3.2647': attribute type 1 has an invalid length.
[  471.168889][T15860] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2647'.
[  471.312228][T15868] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  471.527830][T15886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2653'.
[  471.544764][T15886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2653'.
[  471.774770][T15897] ip6tnl1: entered promiscuous mode
[  471.780952][T15897] ip6tnl1: entered allmulticast mode
[  471.981159][T15909] batadv1: entered promiscuous mode
[  472.109546][T15916] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.2663'.
[  472.169946][T15922] lo speed is unknown, defaulting to 1000
[  472.191416][T15922] wg1 speed is unknown, defaulting to 1000
[  472.202242][T15922] wg1 speed is unknown, defaulting to 1000
[  472.752525][T15947] lo speed is unknown, defaulting to 1000
[  472.801586][T15947] wg1 speed is unknown, defaulting to 1000
[  472.813990][T15958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2675'.
[  472.816068][T15959] netlink: 'syz.1.2674': attribute type 1 has an invalid length.
[  472.831982][T15959] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2674'.
[  472.842426][T15947] wg1 speed is unknown, defaulting to 1000
[  472.890750][T15961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2676'.
[  472.927581][T15965] FAULT_INJECTION: forcing a failure.
[  472.927581][T15965] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  472.943810][T15965] CPU: 0 UID: 0 PID: 15965 Comm: syz.3.2677 Not tainted syzkaller #0 PREEMPT(full) 
[  472.943834][T15965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  472.943845][T15965] Call Trace:
[  472.943852][T15965]  <TASK>
[  472.943859][T15965]  dump_stack_lvl+0xe8/0x150
[  472.943886][T15965]  should_fail_ex+0x412/0x560
[  472.943914][T15965]  _copy_from_user+0x2d/0xb0
[  472.943933][T15965]  __sys_bpf+0x229/0x920
[  472.943967][T15965]  ? __pfx___sys_bpf+0x10/0x10
[  472.944004][T15965]  ? ksys_write+0x242/0x270
[  472.944023][T15965]  ? __pfx_ksys_write+0x10/0x10
[  472.944048][T15965]  __x64_sys_bpf+0x7c/0x90
[  472.944069][T15965]  do_syscall_64+0xe2/0xf80
[  472.944086][T15965]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.944106][T15965]  ? trace_irq_disable+0x37/0x100
[  472.944126][T15965]  ? clear_bhb_loop+0x60/0xb0
[  472.944147][T15965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.944164][T15965] RIP: 0033:0x7f773df9acb9
[  472.944179][T15965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.944193][T15965] RSP: 002b:00007f773c1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  472.944211][T15965] RAX: ffffffffffffffda RBX: 00007f773e215fa0 RCX: 00007f773df9acb9
[  472.944224][T15965] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 000000000000000a
[  472.944235][T15965] RBP: 00007f773c1f6090 R08: 0000000000000000 R09: 0000000000000000
[  472.944245][T15965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  472.944255][T15965] R13: 00007f773e216038 R14: 00007f773e215fa0 R15: 00007ffe913ef738
[  472.944284][T15965]  </TASK>
[  473.156492][T15966] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  473.207402][T15971] netlink: 'syz.2.2676': attribute type 1 has an invalid length.
[  473.216691][T15971] netlink: 'syz.2.2676': attribute type 2 has an invalid length.
[  473.226836][   T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  473.235309][   T36] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  473.255599][   T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  473.276740][   T36] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  473.370442][T15979] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.482214][T15979] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  473.514049][T15985] netlink: 'syz.0.2682': attribute type 10 has an invalid length.
[  473.514580][T15979] bond9 (unregistering): Released all slaves
[  473.541419][T15985] dummy0: left allmulticast mode
[  473.547444][T15985] dummy0: left promiscuous mode
[  473.552675][T15985] bridge0: port 3(dummy0) entered disabled state
[  473.586506][T15988] netlink: 'syz.0.2682': attribute type 10 has an invalid length.
[  473.619679][T15985] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  473.647905][T15985] team0: Failed to send options change via netlink (err -105)
[  473.690320][T15985] team0: Port device dummy0 added
[  473.708414][T15993] netlink: 'syz.3.2683': attribute type 1 has an invalid length.
[  473.748616][T15988] team0: Failed to send options change via netlink (err -105)
[  473.814515][T15988] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  473.823918][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  473.831913][    C1] lec:lec_tx_timeout: lec0
[  473.838150][T15988] team0: Port device dummy0 removed
[  473.850102][T15988] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  473.858820][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  473.957269][T15992] 8021q: adding VLAN 0 to HW filter on device bond7
[  474.097028][T16003] bond9: (slave bridge5): making interface the new active one
[  474.105128][T16003] bond9: (slave bridge5): Enslaving as an active interface with an up link
[  474.115217][T16001] 8021q: adding VLAN 0 to HW filter on device bond0
[  474.135125][T16001] bond7: (slave bond0): Enslaving as an active interface with an up link
[  474.314882][T16028] FAULT_INJECTION: forcing a failure.
[  474.314882][T16028] name failslab, interval 1, probability 0, space 0, times 0
[  474.332872][T16028] CPU: 0 UID: 0 PID: 16028 Comm: syz.3.2688 Not tainted syzkaller #0 PREEMPT(full) 
[  474.332895][T16028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  474.332906][T16028] Call Trace:
[  474.332913][T16028]  <TASK>
[  474.332921][T16028]  dump_stack_lvl+0xe8/0x150
[  474.332948][T16028]  should_fail_ex+0x412/0x560
[  474.332976][T16028]  should_failslab+0xa8/0x100
[  474.332997][T16028]  __kmalloc_noprof+0xde/0x7e0
[  474.333014][T16028]  ? bpf_test_init+0x9f/0x150
[  474.333038][T16028]  bpf_test_init+0x9f/0x150
[  474.333067][T16028]  bpf_prog_test_run_xdp+0x529/0x1160
[  474.333100][T16028]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  474.333124][T16028]  ? __fget_files+0x2a/0x420
[  474.333149][T16028]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  474.333169][T16028]  bpf_prog_test_run+0x2c7/0x340
[  474.333196][T16028]  __sys_bpf+0x5cb/0x920
[  474.333220][T16028]  ? __pfx___sys_bpf+0x10/0x10
[  474.333256][T16028]  ? ksys_write+0x242/0x270
[  474.333278][T16028]  ? __pfx_ksys_write+0x10/0x10
[  474.333299][T16028]  __x64_sys_bpf+0x7c/0x90
[  474.333334][T16028]  do_syscall_64+0xe2/0xf80
[  474.333349][T16028]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.333365][T16028]  ? trace_irq_disable+0x37/0x100
[  474.333385][T16028]  ? clear_bhb_loop+0x60/0xb0
[  474.333406][T16028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.333422][T16028] RIP: 0033:0x7f773df9acb9
[  474.333438][T16028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.333453][T16028] RSP: 002b:00007f773c1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  474.333470][T16028] RAX: ffffffffffffffda RBX: 00007f773e215fa0 RCX: 00007f773df9acb9
[  474.333482][T16028] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 000000000000000a
[  474.333492][T16028] RBP: 00007f773c1f6090 R08: 0000000000000000 R09: 0000000000000000
[  474.333502][T16028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  474.333512][T16028] R13: 00007f773e216038 R14: 00007f773e215fa0 R15: 00007ffe913ef738
[  474.333540][T16028]  </TASK>
[  474.624625][T16008] bond7 (unregistering): (slave bond0): Releasing backup interface
[  474.637756][T16008] bond7 (unregistering): Released all slaves
[  474.657870][T16018] syzkaller0: entered promiscuous mode
[  474.667499][T16011] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  474.693997][T16018] syzkaller0: entered allmulticast mode
[  474.711002][T16011] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  474.721079][T16011] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  474.959716][T16041] lo speed is unknown, defaulting to 1000
[  474.969535][T16041] wg1 speed is unknown, defaulting to 1000
[  474.977908][T16041] wg1 speed is unknown, defaulting to 1000
[  475.213396][T16067] FAULT_INJECTION: forcing a failure.
[  475.213396][T16067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  475.228820][T16067] CPU: 0 UID: 0 PID: 16067 Comm: syz.4.2699 Not tainted syzkaller #0 PREEMPT(full) 
[  475.228840][T16067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  475.228849][T16067] Call Trace:
[  475.228854][T16067]  <TASK>
[  475.228861][T16067]  dump_stack_lvl+0xe8/0x150
[  475.228886][T16067]  should_fail_ex+0x412/0x560
[  475.228913][T16067]  _copy_from_user+0x2d/0xb0
[  475.228933][T16067]  bpf_test_init+0xd8/0x150
[  475.228955][T16067]  bpf_prog_test_run_xdp+0x529/0x1160
[  475.228987][T16067]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  475.229011][T16067]  ? __fget_files+0x2a/0x420
[  475.229036][T16067]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  475.229051][T16067]  bpf_prog_test_run+0x2c7/0x340
[  475.229067][T16067]  __sys_bpf+0x5cb/0x920
[  475.229080][T16067]  ? __pfx___sys_bpf+0x10/0x10
[  475.229100][T16067]  ? ksys_write+0x242/0x270
[  475.229111][T16067]  ? __pfx_ksys_write+0x10/0x10
[  475.229124][T16067]  __x64_sys_bpf+0x7c/0x90
[  475.229135][T16067]  do_syscall_64+0xe2/0xf80
[  475.229145][T16067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.229154][T16067]  ? trace_irq_disable+0x37/0x100
[  475.229167][T16067]  ? clear_bhb_loop+0x60/0xb0
[  475.229178][T16067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.229187][T16067] RIP: 0033:0x7f263939acb9
[  475.229197][T16067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.229205][T16067] RSP: 002b:00007f263a32c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  475.229216][T16067] RAX: ffffffffffffffda RBX: 00007f2639615fa0 RCX: 00007f263939acb9
[  475.229223][T16067] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 000000000000000a
[  475.229229][T16067] RBP: 00007f263a32c090 R08: 0000000000000000 R09: 0000000000000000
[  475.229235][T16067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  475.229241][T16067] R13: 00007f2639616038 R14: 00007f2639615fa0 R15: 00007fff75e1ead8
[  475.229257][T16067]  </TASK>
[  475.897074][T16087] __nla_validate_parse: 5 callbacks suppressed
[  475.897091][T16087] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2704'.
[  475.914167][T16087] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2704'.
[  475.923156][T16087] validate_nla: 2 callbacks suppressed
[  475.923169][T16087] netlink: 'syz.1.2704': attribute type 6 has an invalid length.
[  475.937083][T16087] netlink: 'syz.1.2704': attribute type 5 has an invalid length.
[  475.945058][T16087] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2704'.
[  476.179251][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'.
[  476.436637][T16125] syzkaller0: entered promiscuous mode
[  476.442515][T16125] syzkaller0: entered allmulticast mode
[  476.506193][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'.
[  476.535561][T16137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2718'.
[  476.562482][T16132] netlink: 'syz.4.2719': attribute type 4 has an invalid length.
[  476.667840][T16147] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2721'.
[  476.842979][T16159] netlink: 'syz.0.2725': attribute type 2 has an invalid length.
[  476.905974][T16164] netlink: 'syz.0.2725': attribute type 2 has an invalid length.
[  476.908865][T16159] !��9: entered promiscuous mode
[  476.921001][T16164] !��9: left promiscuous mode
[  476.969718][T16166] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2726'.
[  476.992574][T16167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2722'.
[  477.062176][T16171] netlink: 'syz.4.2728': attribute type 89 has an invalid length.
[  477.191381][T16182] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.2732'.
[  477.227231][T16180] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.318280][T16180] bond0: (slave rose0): Enslaving as an active interface with an up link
[  477.447978][T16199] netlink: 'syz.2.2735': attribute type 7 has an invalid length.
[  477.456474][T16199] netlink: 'syz.2.2735': attribute type 8 has an invalid length.
[  478.305818][T16256] netlink: 'syz.4.2748': attribute type 1 has an invalid length.
[  478.423084][T16256] team0: Mode "" not found
[  478.654333][T16273] syzkaller1: tun_chr_ioctl cmd 1074025677
[  478.675982][T16273] syzkaller1: Refused to change device type
[  478.746749][T16278] netlink: 'syz.4.2754': attribute type 39 has an invalid length.
[  478.831495][T16281] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  478.863896][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  478.871919][    C1] lec:lec_tx_timeout: lec0
[  478.893501][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  479.030563][T16290] FAULT_INJECTION: forcing a failure.
[  479.030563][T16290] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  479.081676][T16290] CPU: 0 UID: 0 PID: 16290 Comm: syz.1.2757 Not tainted syzkaller #0 PREEMPT(full) 
[  479.081701][T16290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  479.081712][T16290] Call Trace:
[  479.081719][T16290]  <TASK>
[  479.081727][T16290]  dump_stack_lvl+0xe8/0x150
[  479.081753][T16290]  should_fail_ex+0x412/0x560
[  479.081782][T16290]  _copy_to_user+0x31/0xb0
[  479.081803][T16290]  bpf_test_finish+0x53c/0x6b0
[  479.081833][T16290]  ? __pfx_bpf_test_finish+0x10/0x10
[  479.081858][T16290]  ? _copy_from_user+0x94/0xb0
[  479.081876][T16290]  ? bpf_test_init+0x113/0x150
[  479.081897][T16290]  bpf_prog_test_run_xdp+0x8fa/0x1160
[  479.081934][T16290]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  479.081959][T16290]  ? __fget_files+0x2a/0x420
[  479.081985][T16290]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  479.082007][T16290]  bpf_prog_test_run+0x2c7/0x340
[  479.082034][T16290]  __sys_bpf+0x5cb/0x920
[  479.082059][T16290]  ? __pfx___sys_bpf+0x10/0x10
[  479.082095][T16290]  ? ksys_write+0x242/0x270
[  479.082114][T16290]  ? __pfx_ksys_write+0x10/0x10
[  479.082139][T16290]  __x64_sys_bpf+0x7c/0x90
[  479.082160][T16290]  do_syscall_64+0xe2/0xf80
[  479.082177][T16290]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.082194][T16290]  ? trace_irq_disable+0x37/0x100
[  479.082214][T16290]  ? clear_bhb_loop+0x60/0xb0
[  479.082235][T16290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.082252][T16290] RIP: 0033:0x7f5e8c19acb9
[  479.082268][T16290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  479.082282][T16290] RSP: 002b:00007f5e8cfba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  479.082302][T16290] RAX: ffffffffffffffda RBX: 00007f5e8c415fa0 RCX: 00007f5e8c19acb9
[  479.082315][T16290] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 000000000000000a
[  479.082325][T16290] RBP: 00007f5e8cfba090 R08: 0000000000000000 R09: 0000000000000000
[  479.082336][T16290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  479.082346][T16290] R13: 00007f5e8c416038 R14: 00007f5e8c415fa0 R15: 00007ffe3f87db68
[  479.082374][T16290]  </TASK>
[  480.070696][T16335] syzkaller0: entered promiscuous mode
[  480.085627][T16335] syzkaller0: entered allmulticast mode
[  480.095051][T16335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  480.179434][T16335] tipc: Resetting bearer <eth:syzkaller0>
[  480.216005][T16335] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  480.275313][T16334] tipc: Resetting bearer <eth:syzkaller0>
[  480.360993][T16334] tipc: Disabling bearer <eth:syzkaller0>
[  480.396251][T16361] x_tables: duplicate underflow at hook 1
[  480.437899][T16364] FAULT_INJECTION: forcing a failure.
[  480.437899][T16364] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  480.453939][T16364] CPU: 1 UID: 0 PID: 16364 Comm: syz.2.2771 Not tainted syzkaller #0 PREEMPT(full) 
[  480.453962][T16364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  480.453972][T16364] Call Trace:
[  480.453979][T16364]  <TASK>
[  480.453985][T16364]  dump_stack_lvl+0xe8/0x150
[  480.454012][T16364]  should_fail_ex+0x412/0x560
[  480.454040][T16364]  _copy_to_user+0x31/0xb0
[  480.454061][T16364]  simple_read_from_buffer+0xe1/0x170
[  480.454086][T16364]  proc_fail_nth_read+0x1bb/0x230
[  480.454108][T16364]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  480.454129][T16364]  ? rw_verify_area+0x2a6/0x4d0
[  480.454152][T16364]  ? __fget_files+0x2a/0x420
[  480.454171][T16364]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  480.454190][T16364]  vfs_read+0x20c/0xa70
[  480.454205][T16364]  ? fdget_pos+0x246/0x320
[  480.454229][T16364]  ? __pfx___mutex_lock+0x10/0x10
[  480.454247][T16364]  ? __pfx_vfs_read+0x10/0x10
[  480.454262][T16364]  ? __fget_files+0x2a/0x420
[  480.454286][T16364]  ? __fget_files+0x3a0/0x420
[  480.454305][T16364]  ? __fget_files+0x2a/0x420
[  480.454333][T16364]  ksys_read+0x150/0x270
[  480.454352][T16364]  ? __pfx_ksys_read+0x10/0x10
[  480.454381][T16364]  do_syscall_64+0xe2/0xf80
[  480.454397][T16364]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.454411][T16364]  ? trace_irq_disable+0x37/0x100
[  480.454432][T16364]  ? clear_bhb_loop+0x60/0xb0
[  480.454453][T16364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.454469][T16364] RIP: 0033:0x7ff4dc95b58e
[  480.454484][T16364] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  480.454505][T16364] RSP: 002b:00007ff4dd824fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  480.454523][T16364] RAX: ffffffffffffffda RBX: 00007ff4dd8256c0 RCX: 00007ff4dc95b58e
[  480.454536][T16364] RDX: 000000000000000f RSI: 00007ff4dd8250a0 RDI: 0000000000000004
[  480.454546][T16364] RBP: 00007ff4dd825090 R08: 0000000000000000 R09: 0000000000000000
[  480.454556][T16364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  480.454566][T16364] R13: 00007ff4dcc16038 R14: 00007ff4dcc15fa0 R15: 00007fff7ad2a958
[  480.454596][T16364]  </TASK>
[  480.697062][T16369] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  480.744495][T16369] syzkaller0: entered promiscuous mode
[  480.749999][T16369] syzkaller0: entered allmulticast mode
[  480.757643][T16369] tipc: Resetting bearer <eth:syzkaller0>
[  480.780109][T16366] tipc: Resetting bearer <eth:syzkaller0>
[  481.901152][T16397] __nla_validate_parse: 12 callbacks suppressed
[  481.901173][T16397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2777'.
[  482.481017][T16366] tipc: Disabling bearer <eth:syzkaller0>
[  482.498621][T16382] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  482.518802][T16397] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  482.520370][T16381] tipc: Disabling bearer <eth:syzkaller0>
[  482.561788][T16376] lo speed is unknown, defaulting to 1000
[  482.575113][T16376] wg1 speed is unknown, defaulting to 1000
[  482.590664][T16376] wg1 speed is unknown, defaulting to 1000
[  482.759791][T16407] bridge9: entered promiscuous mode
[  482.784365][T16413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2781'.
[  482.823508][T16414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2781'.
[  482.917863][T16419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2784'.
[  482.974543][T16423] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2784'.
[  483.025032][T16425] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  483.327411][T16438] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2789'.
[  483.632938][T16465] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2797'.
[  483.836083][T16486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  483.864918][T16485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2803'.
[  484.019845][T16501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2806'.
[  484.110644][T16504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2808'.
[  484.233212][T16514] validate_nla: 1 callbacks suppressed
[  484.233228][T16514] netlink: 'syz.4.2810': attribute type 1 has an invalid length.
[  484.332804][T16514] bond9: entered promiscuous mode
[  484.351476][T16514] 8021q: adding VLAN 0 to HW filter on device bond9
[  484.419226][T16525] bond9: (slave bridge9): making interface the new active one
[  484.427740][T16525] bridge9: entered promiscuous mode
[  484.436516][T16525] bridge9: left promiscuous mode
[  484.510837][T16530] syzkaller0: tun_chr_ioctl cmd 2148553947
[  484.524585][T16527] lo speed is unknown, defaulting to 1000
[  484.532503][T16527] wg1 speed is unknown, defaulting to 1000
[  484.544127][T16527] wg1 speed is unknown, defaulting to 1000
[  484.598246][T16530] lo speed is unknown, defaulting to 1000
[  484.617326][T16530] wg1 speed is unknown, defaulting to 1000
[  484.645141][T16530] wg1 speed is unknown, defaulting to 1000
[  484.653368][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms
[  484.661414][    C1] lec:lec_tx_timeout: lec0
[  484.666616][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  485.278106][T16568] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  485.656582][T16584] lo speed is unknown, defaulting to 1000
[  485.708099][T16584] wg1 speed is unknown, defaulting to 1000
[  485.741804][T16584] wg1 speed is unknown, defaulting to 1000
[  485.856332][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  485.867491][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  485.876171][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  485.889313][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  485.897003][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  485.915012][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  485.922301][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  485.929965][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  485.940272][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  485.947861][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  486.006458][T16593] lo speed is unknown, defaulting to 1000
[  486.014918][T16593] wg1 speed is unknown, defaulting to 1000
[  486.025472][T16593] wg1 speed is unknown, defaulting to 1000
[  486.384833][   T30] audit: type=1800 audit(1769212367.400:8): pid=16613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2835" name="3" dev="tmpfs" ino=2773 res=0 errno=0
[  486.815609][T16593] chnl_net:caif_netlink_parms(): no params data found
[  487.072052][T16593] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.094202][T16593] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.101476][T16593] bridge_slave_0: entered allmulticast mode
[  487.110253][T16593] bridge_slave_0: entered promiscuous mode
[  487.119541][T16593] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.128581][T16593] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.136176][T16593] bridge_slave_1: entered allmulticast mode
[  487.143125][T16593] bridge_slave_1: entered promiscuous mode
[  487.186610][T16593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.199605][T16593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.249270][T16593] team0: Port device team_slave_0 added
[  487.268625][T16593] team0: Port device team_slave_1 added
[  487.329337][T16593] batman_adv: batadv0: Adding interface: batadv_slave_0
[  487.336454][T16593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  487.366220][T16593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  487.386246][T16593] batman_adv: batadv0: Adding interface: batadv_slave_1
[  487.394008][T16593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  487.426112][T16593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  487.429032][T16659] __nla_validate_parse: 8 callbacks suppressed
[  487.429046][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2847'.
[  487.542412][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2849'.
[  487.545221][T16593] hsr_slave_0: entered promiscuous mode
[  487.558852][T16593] hsr_slave_1: entered promiscuous mode
[  487.566495][T16593] debugfs: 'hsr0' already exists in 'hsr'
[  487.572321][T16593] Cannot create hsr debugfs directory
[  487.855221][T16682] pimreg: entered allmulticast mode
[  487.997120][T16593] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.017289][ T5833] Bluetooth: hci5: command tx timeout
[  488.072794][T16593] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.165863][T16593] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.244458][T16593] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.260893][T16705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2860'.
[  488.279683][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'.
[  488.431189][T16711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2862'.
[  488.451025][T16711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2862'.
[  488.465354][T16593] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  488.517911][T16711] 8021q: adding VLAN 0 to HW filter on device bond10
[  488.525506][T16593] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  488.539009][T16593] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  488.567756][T16593] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  488.672800][T16593] 8021q: adding VLAN 0 to HW filter on device bond0
[  488.718496][T16593] 8021q: adding VLAN 0 to HW filter on device team0
[  488.747286][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.754448][ T5076] bridge0: port 1(bridge_slave_0) entered forwarding state
[  488.793320][ T6680] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.800513][ T6680] bridge0: port 2(bridge_slave_1) entered forwarding state
[  488.965627][T16750] FAULT_INJECTION: forcing a failure.
[  488.965627][T16750] name failslab, interval 1, probability 0, space 0, times 0
[  489.010494][T16750] CPU: 0 UID: 0 PID: 16750 Comm: syz.0.2870 Not tainted syzkaller #0 PREEMPT(full) 
[  489.010518][T16750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  489.010528][T16750] Call Trace:
[  489.010534][T16750]  <TASK>
[  489.010542][T16750]  dump_stack_lvl+0xe8/0x150
[  489.010566][T16750]  should_fail_ex+0x412/0x560
[  489.010594][T16750]  should_failslab+0xa8/0x100
[  489.010617][T16750]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  489.010640][T16750]  ? __alloc_skb+0x186/0x7d0
[  489.010660][T16750]  ? __alloc_skb+0x1d0/0x7d0
[  489.010679][T16750]  ? __local_bh_enable_ip+0xd0/0x130
[  489.010701][T16750]  __alloc_skb+0x1d0/0x7d0
[  489.010727][T16750]  alloc_skb_with_frags+0xca/0x890
[  489.010749][T16750]  ? process_measurement+0x7d4/0x1cb0
[  489.010773][T16750]  sock_alloc_send_pskb+0x878/0x990
[  489.010811][T16750]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  489.010831][T16750]  ? __pfx_process_measurement+0x10/0x10
[  489.010857][T16750]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  489.010878][T16750]  unix_dgram_sendmsg+0x44e/0x17b0
[  489.010913][T16750]  ? unwind_next_frame+0xa5/0x23c0
[  489.010936][T16750]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  489.010952][T16750]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  489.010979][T16750]  ? __lock_acquire+0x6b5/0x2cf0
[  489.011002][T16750]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  489.011020][T16750]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  489.011038][T16750]  __sock_sendmsg+0x21c/0x270
[  489.011062][T16750]  ____sys_sendmsg+0x500/0x810
[  489.011080][T16750]  ? __might_fault+0xaf/0x130
[  489.011113][T16750]  ? __pfx_____sys_sendmsg+0x10/0x10
[  489.011139][T16750]  ? import_iovec+0x73/0xa0
[  489.011161][T16750]  ___sys_sendmsg+0x2a5/0x360
[  489.011177][T16750]  ? __lock_acquire+0x6b5/0x2cf0
[  489.011198][T16750]  ? __pfx____sys_sendmsg+0x10/0x10
[  489.011222][T16750]  ? kstrtouint+0x6e/0xe0
[  489.011288][T16750]  ? __fget_files+0x2a/0x420
[  489.011308][T16750]  ? __fget_files+0x3a0/0x420
[  489.011336][T16750]  __sys_sendmmsg+0x27c/0x4e0
[  489.011360][T16750]  ? __pfx___sys_sendmmsg+0x10/0x10
[  489.011375][T16750]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  489.011424][T16750]  ? ksys_write+0x242/0x270
[  489.011444][T16750]  ? __pfx_ksys_write+0x10/0x10
[  489.011468][T16750]  __x64_sys_sendmmsg+0xa0/0xc0
[  489.011486][T16750]  do_syscall_64+0xe2/0xf80
[  489.011502][T16750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.011517][T16750]  ? trace_irq_disable+0x37/0x100
[  489.011537][T16750]  ? clear_bhb_loop+0x60/0xb0
[  489.011556][T16750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.011573][T16750] RIP: 0033:0x7f058039acb9
[  489.011589][T16750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  489.011603][T16750] RSP: 002b:00007f0581273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  489.011621][T16750] RAX: ffffffffffffffda RBX: 00007f0580615fa0 RCX: 00007f058039acb9
[  489.011633][T16750] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  489.011644][T16750] RBP: 00007f0581273090 R08: 0000000000000000 R09: 0000000000000000
[  489.011653][T16750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  489.011663][T16750] R13: 00007f0580616038 R14: 00007f0580615fa0 R15: 00007ffd43551068
[  489.011691][T16750]  </TASK>
[  489.434203][T16593] 8021q: adding VLAN 0 to HW filter on device batadv0
[  489.564605][T16765] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2873'.
[  489.677138][T16772] lo speed is unknown, defaulting to 1000
[  489.693478][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  489.701519][    C1] lec:lec_tx_timeout: lec0
[  489.717734][ T6680] tipc: Resetting bearer <eth:syzkaller0>
[  489.739754][T16772] wg1 speed is unknown, defaulting to 1000
[  489.782880][T16772] wg1 speed is unknown, defaulting to 1000
[  489.870198][T16593] veth0_vlan: entered promiscuous mode
[  489.930572][T16593] veth1_vlan: entered promiscuous mode
[  490.032813][T16593] veth0_macvtap: entered promiscuous mode
[  490.093827][ T5833] Bluetooth: hci5: command tx timeout
[  490.147931][T16593] veth1_macvtap: entered promiscuous mode
[  490.163003][T16789] lo speed is unknown, defaulting to 1000
[  490.167099][T16801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2882'.
[  490.181647][T16593] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.202919][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2881'.
[  490.230764][T16789] wg1 speed is unknown, defaulting to 1000
[  490.233227][T16593] batman_adv: batadv0: Interface activated: batadv_slave_1
[  490.259099][   T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.279874][T16789] wg1 speed is unknown, defaulting to 1000
[  490.324696][ T3989] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.346151][ T3989] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.406855][ T3989] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  490.505657][ T6680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.531130][ T6680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.619200][ T6680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.621860][T16812] syzkaller0: entered promiscuous mode
[  490.634991][T16812] syzkaller0: entered allmulticast mode
[  490.640593][ T6680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.712201][T16818] openvswitch: netlink: Flow key attr not present in new flow.
[  490.831017][T16822] lo speed is unknown, defaulting to 1000
[  490.844406][T16822] wg1 speed is unknown, defaulting to 1000
[  490.865269][T16822] wg1 speed is unknown, defaulting to 1000
[  491.108429][T16838] bond0: entered promiscuous mode
[  491.114192][T16838] bond_slave_0: entered promiscuous mode
[  491.120128][T16838] bond_slave_1: entered promiscuous mode
[  491.126562][T16838] team0: entered promiscuous mode
[  491.131986][T16838] team_slave_0: entered promiscuous mode
[  491.151591][T16838] team_slave_1: entered promiscuous mode
[  491.174579][T16838] dummy0: entered promiscuous mode
[  491.186864][T16838] bond0: left promiscuous mode
[  491.192057][T16838] bond_slave_0: left promiscuous mode
[  491.199025][T16838] bond_slave_1: left promiscuous mode
[  491.207163][T16838] team0: left promiscuous mode
[  491.212152][T16838] team_slave_0: left promiscuous mode
[  491.225446][T16838] team_slave_1: left promiscuous mode
[  491.231095][T16838] dummy0: left promiscuous mode
[  491.358458][T16853] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2895'.
[  491.375172][T16841] lo speed is unknown, defaulting to 1000
[  491.406281][T16841] wg1 speed is unknown, defaulting to 1000
[  491.479261][T16841] wg1 speed is unknown, defaulting to 1000
[  491.655986][T16871] netlink: 'syz.2.2900': attribute type 4 has an invalid length.
[  491.746648][T16866] lo speed is unknown, defaulting to 1000
[  491.819748][T16866] wg1 speed is unknown, defaulting to 1000
[  491.860480][T16866] wg1 speed is unknown, defaulting to 1000
[  491.868810][T16877] lo speed is unknown, defaulting to 1000
[  492.117777][T16877] wg1 speed is unknown, defaulting to 1000
[  492.156484][T16877] wg1 speed is unknown, defaulting to 1000
[  492.174058][ T5841] Bluetooth: hci5: command tx timeout
[  492.401657][T16913] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  492.539259][T16927] __nla_validate_parse: 3 callbacks suppressed
[  492.539276][T16927] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2911'.
[  492.822114][T16942] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  493.032235][T16949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2915'.
[  493.216145][T16949] team0 (unregistering): Port device team_slave_0 removed
[  493.240195][T16957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2919'.
[  493.251254][T16957] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2919'.
[  493.261860][T16949] team0 (unregistering): Port device team_slave_1 removed
[  493.286046][T16949] team0 (unregistering): Port device bond4 removed
[  493.417210][T16969] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  493.465811][T16971] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2924'.
[  493.764379][T16986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2928'.
[  493.839628][T16986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2928'.
[  494.007881][T16994] lo speed is unknown, defaulting to 1000
[  494.013803][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  494.071982][T16994] wg1 speed is unknown, defaulting to 1000
[  494.087247][T17005] netlink: 'syz.3.2933': attribute type 1 has an invalid length.
[  494.098783][T16994] wg1 speed is unknown, defaulting to 1000
[  494.114576][T17005] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2933'.
[  494.135452][T17005] NCSI netlink: No device for ifindex 0
[  494.253846][ T5841] Bluetooth: hci5: command 0x0419 tx timeout
[  494.795066][T17024] : entered promiscuous mode
[  494.799481][T17027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2938'.
[  494.835522][T17026] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2939'.
[  494.863061][T17024] xt_SECMARK: invalid mode: 0
[  494.932034][T17029] lo speed is unknown, defaulting to 1000
[  495.066433][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  495.076539][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  495.084985][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  495.092850][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  495.100776][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  495.371403][T17044] netlink: 'syz.4.2942': attribute type 43 has an invalid length.
[  495.381308][T17029] wg1 speed is unknown, defaulting to 1000
[  495.438377][T17040] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  495.451903][T17040] bond7 (unregistering): Released all slaves
[  495.528509][T17039] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  495.545565][T17039] bond7 (unregistering): Released all slaves
[  495.564008][T17042] netlink: 'syz.4.2942': attribute type 6 has an invalid length.
[  495.573147][T17047] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  495.579727][T17029] wg1 speed is unknown, defaulting to 1000
[  495.697382][ T3429] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  495.788761][T17031] lo speed is unknown, defaulting to 1000
[  495.820330][T17031] wg1 speed is unknown, defaulting to 1000
[  495.831666][ T3429] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  495.859267][T17031] wg1 speed is unknown, defaulting to 1000
[  495.961598][ T3429] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  495.982936][T17059] lo speed is unknown, defaulting to 1000
[  496.001117][T17059] wg1 speed is unknown, defaulting to 1000
[  496.032084][ T3429] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  496.058055][T17059] wg1 speed is unknown, defaulting to 1000
[  496.105088][   T48] wg1 speed is unknown, defaulting to 1000
[  496.110990][   T48] syz0: Port: 1 Link DOWN
[  496.338395][ T5841] Bluetooth: hci5: command 0x0419 tx timeout
[  497.143926][ T5841] Bluetooth: hci4: command tx timeout
[  497.608621][ T3429] dvmrp6 (unregistering): left allmulticast mode
[  497.821841][ T3429] team0: Port device bridge3 removed
[  497.862493][ T3429] bond3 (unregistering): (slave bridge4): Releasing active interface
[  498.104786][   T25] block nbd3: Possible stuck request ffff8880255a0000: control (read@0,1024B). Runtime 30 seconds
[  498.121974][   T25] block nbd3: Possible stuck request ffff8880255a0200: control (read@1024,1024B). Runtime 30 seconds
[  498.134122][   T25] block nbd3: Possible stuck request ffff8880255a0400: control (read@2048,1024B). Runtime 30 seconds
[  498.134563][ T3429] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  498.145159][   T25] block nbd3: Possible stuck request ffff8880255a0600: control (read@3072,1024B). Runtime 30 seconds
[  498.164563][ T3429] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  498.171871][ T3429] bond0 (unregistering): Released all slaves
[  498.182288][ T3429] bond1 (unregistering): Released all slaves
[  498.267837][ T3429] bond2 (unregistering): Released all slaves
[  498.280380][ T3429] bond3 (unregistering): Released all slaves
[  498.366477][ T3429] bond4 (unregistering): Released all slaves
[  498.449290][ T3429] bond5 (unregistering): Released all slaves
[  498.530226][ T3429] bond6 (unregistering): Released all slaves
[  498.609966][ T3429] bond7 (unregistering): Released all slaves
[  498.691799][ T3429] bond8 (unregistering): (slave batadv0): Releasing active interface
[  498.701439][ T3429] bond8 (unregistering): Released all slaves
[  498.714242][ T3429] bond9 (unregistering): (slave vxcan3): Releasing backup interface
[  498.723106][ T3429] bond9 (unregistering): Released all slaves
[  498.781025][T17031] chnl_net:caif_netlink_parms(): no params data found
[  498.987981][ T3429] : left promiscuous mode
[  499.214443][ T5841] Bluetooth: hci4: command tx timeout
[  499.289536][T17139] __nla_validate_parse: 12 callbacks suppressed
[  499.289553][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2962'.
[  499.345540][ T3429] tipc: Disabling bearer <udp:syz2>
[  499.377395][ T3429] tipc: Left network mode
[  499.397150][T17116] lo speed is unknown, defaulting to 1000
[  499.407325][T17127] syzkaller0: entered promiscuous mode
[  499.413440][T17127] syzkaller0: entered allmulticast mode
[  499.474871][T17031] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.482100][T17031] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.499960][T17031] bridge_slave_0: entered allmulticast mode
[  499.518867][T17031] bridge_slave_0: entered promiscuous mode
[  499.555842][T17116] wg1 speed is unknown, defaulting to 1000
[  499.704717][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5690 ms
[  499.712772][    C1] lec:lec_tx_timeout: lec0
[  499.718011][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  499.771901][ T3429] IPVS: stopping backup sync thread 6624 ...
[  499.855111][T17031] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.876208][T17031] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.890360][T17031] bridge_slave_1: entered allmulticast mode
[  499.907622][T17031] bridge_slave_1: entered promiscuous mode
[  499.927822][T17116] wg1 speed is unknown, defaulting to 1000
[  499.994050][T17154] team0 (unregistering): Port device team_slave_0 removed
[  500.005593][T17154] team0 (unregistering): Port device team_slave_1 removed
[  500.181845][T17031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  500.198971][T17179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2969'.
[  500.206700][T17031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  500.340891][T17031] team0: Port device team_slave_0 added
[  500.368223][T17179] netlink: 212048 bytes leftover after parsing attributes in process `syz.4.2969'.
[  500.380705][T17031] team0: Port device team_slave_1 added
[  500.399033][T17182] lo speed is unknown, defaulting to 1000
[  500.428733][T17182] wg1 speed is unknown, defaulting to 1000
[  500.452656][T17186] lo speed is unknown, defaulting to 1000
[  500.465359][T17182] wg1 speed is unknown, defaulting to 1000
[  500.469051][T17031] batman_adv: batadv0: Adding interface: batadv_slave_0
[  500.478991][T17031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  500.505496][T17031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  500.517070][T17186] wg1 speed is unknown, defaulting to 1000
[  500.530925][T17031] batman_adv: batadv0: Adding interface: batadv_slave_1
[  500.538277][T17031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  500.564535][T17031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.581069][T17186] wg1 speed is unknown, defaulting to 1000
[  500.712781][T17031] hsr_slave_0: entered promiscuous mode
[  500.719822][T17031] hsr_slave_1: entered promiscuous mode
[  500.727122][T17031] debugfs: 'hsr0' already exists in 'hsr'
[  500.732917][T17031] Cannot create hsr debugfs directory
[  501.232915][T17201] lo speed is unknown, defaulting to 1000
[  501.249453][ T3429] hsr_slave_0: left promiscuous mode
[  501.301499][ T1300] aoe: packet could not be sent on lec0.  consider increasing tx_queue_len
[  501.310349][ T5841] Bluetooth: hci4: command tx timeout
[  501.351369][ T3429] pimreg (unregistering): left allmulticast mode
[  502.292659][T17201] wg1 speed is unknown, defaulting to 1000
[  502.330052][T17201] wg1 speed is unknown, defaulting to 1000
[  502.458146][T17231] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2976'.
[  502.606755][T17231] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  502.828483][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2980'.
[  502.854297][T17247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2980'.
[  503.028369][ T3429] IPVS: stop unused estimator thread 0...
[  503.034567][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2983'.
[  503.057984][T17261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2983'.
[  503.199540][T17263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2983'.
[  503.257621][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2985'.
[  503.369588][T17277] netlink: 'syz.0.2987': attribute type 1 has an invalid length.
[  503.377490][ T5841] Bluetooth: hci4: command tx timeout
[  503.457161][T17271] batadv2: left allmulticast mode
[  503.462233][T17271] batadv2: left promiscuous mode
[  503.491833][T17271] bridge0: port 1(batadv2) entered disabled state
[  503.639474][T17277] 8021q: adding VLAN 0 to HW filter on device bond7
[  503.659803][T17282] 8021q: adding VLAN 0 to HW filter on device batadv2
[  503.669197][T17282] bond7: (slave batadv2): making interface the new active one
[  503.678638][T17282] bond7: (slave batadv2): Enslaving as an active interface with an up link
[  503.828973][T17290] bond7 (unregistering): (slave batadv2): Releasing active interface
[  503.842617][T17290] bond7 (unregistering): Released all slaves
[  503.917551][T17305] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  504.083628][T17312] netem: change failed
[  504.105946][T17031] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  504.158927][T17031] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  504.244988][T17031] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  504.282752][T17031] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  504.565548][T17031] 8021q: adding VLAN 0 to HW filter on device bond0
[  504.653517][T17031] 8021q: adding VLAN 0 to HW filter on device team0
[  504.696391][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.703566][ T6154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  504.733361][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  504.741376][    C1] lec:lec_tx_timeout: lec0
[  504.977491][T17390] __nla_validate_parse: 3 callbacks suppressed
[  504.977512][T17390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3006'.
[  505.109505][T11541] lec:lec_start_xmit: lec0:No lecd attached
[  505.792862][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.800050][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state
[  506.288138][T17439] lo speed is unknown, defaulting to 1000
[  506.367755][T17439] wg1 speed is unknown, defaulting to 1000
[  506.660367][T17031] 8021q: adding VLAN 0 to HW filter on device batadv0
[  506.723515][T17435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3008'.
[  506.784194][T17470] lo speed is unknown, defaulting to 1000
[  506.834598][T17470] wg1 speed is unknown, defaulting to 1000
[  506.859178][T17031] veth0_vlan: entered promiscuous mode
[  506.889828][T17425] lec:lec_atm_close: lec0: Shut down!
[  507.001233][T17031] veth1_vlan: entered promiscuous mode
[  507.061013][T17481] syzkaller1: entered promiscuous mode
[  507.066931][T17481] syzkaller1: entered allmulticast mode
[  507.074969][T17481] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3020'.
[  507.149026][T17031] veth0_macvtap: entered promiscuous mode
[  507.177763][T17485] lo speed is unknown, defaulting to 1000
[  507.184721][T17031] veth1_macvtap: entered promiscuous mode
[  507.204547][T17485] wg1 speed is unknown, defaulting to 1000
[  507.250395][T17031] batman_adv: batadv0: Interface activated: batadv_slave_0
[  507.278402][T17491] tipc: New replicast peer: 255.255.255.255
[  507.285034][T17491] tipc: Enabled bearer <udp:syz2>, priority 10
[  507.296743][T17492] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  507.308036][T17031] batman_adv: batadv0: Interface activated: batadv_slave_1
[  507.320845][T17491] IPVS: set_ctl: invalid protocol: 58 172.30.1.3:20002
[  507.360714][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  507.370270][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  507.390104][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  507.404738][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  507.528172][T17503] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3024'.
[  507.590648][T17506] netlink: 'syz.0.3025': attribute type 11 has an invalid length.
[  507.623842][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  507.757470][ T6058] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  507.802787][ T6680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  507.822340][ T6680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.862361][ T3429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  507.870769][ T3429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.653324][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms
[  512.661319][    C1] lec:lec_tx_timeout: lec0
[  512.666761][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  517.693350][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  517.701345][    C1] lec:lec_tx_timeout: lec0
[  519.214471][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  524.653395][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5440 ms
[  524.661425][    C1] lec:lec_tx_timeout: lec0
[  524.666518][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  528.183593][   T25] block nbd3: Possible stuck request ffff8880255a0000: control (read@0,1024B). Runtime 60 seconds
[  528.194508][   T25] block nbd3: Possible stuck request ffff8880255a0200: control (read@1024,1024B). Runtime 60 seconds
[  528.205473][   T25] block nbd3: Possible stuck request ffff8880255a0400: control (read@2048,1024B). Runtime 60 seconds
[  528.216757][   T25] block nbd3: Possible stuck request ffff8880255a0600: control (read@3072,1024B). Runtime 60 seconds
[  528.888239][ T5200] udevd[5200]: worker [14724] /devices/virtual/block/nbd3 is taking a long time
[  529.693388][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  529.701421][    C1] lec:lec_tx_timeout: lec0
[  534.333418][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  539.693725][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms
[  539.701726][    C1] lec:lec_tx_timeout: lec0
[  558.254197][   T25] block nbd3: Possible stuck request ffff8880255a0000: control (read@0,1024B). Runtime 90 seconds
[  558.266243][   T25] block nbd3: Possible stuck request ffff8880255a0200: control (read@1024,1024B). Runtime 90 seconds
[  558.277386][   T25] block nbd3: Possible stuck request ffff8880255a0400: control (read@2048,1024B). Runtime 90 seconds
[  558.288333][   T25] block nbd3: Possible stuck request ffff8880255a0600: control (read@3072,1024B). Runtime 90 seconds
[  562.738527][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  567.753577][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  567.761595][    C1] lec:lec_tx_timeout: lec0
[  568.770338][T11541] lec:lec_start_xmit: lec0:No lecd attached
[  569.782825][T17533] netlink: 'syz.3.3033': attribute type 29 has an invalid length.
[  569.852280][T17541] xt_hashlimit: size too large, truncated to 1048576
[  569.888648][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  569.901236][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  569.916363][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  569.935637][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  569.943245][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  570.028416][T17543] lo speed is unknown, defaulting to 1000
[  570.045318][T17543] wg1 speed is unknown, defaulting to 1000
[  570.167602][T17558] Cannot find del_set index 1 as target
[  570.647212][T17543] chnl_net:caif_netlink_parms(): no params data found
[  570.743691][T17583] sctp: [Deprecated]: syz.0.3039 (pid 17583) Use of int in max_burst socket option.
[  570.743691][T17583] Use struct sctp_assoc_value instead
[  570.756747][T17581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3041'.
[  570.768126][T17581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3041'.
[  570.804254][T17543] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.811462][T17543] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.829191][T17543] bridge_slave_0: entered allmulticast mode
[  570.837065][T17543] bridge_slave_0: entered promiscuous mode
[  570.846648][T17543] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.856276][T17543] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.863554][T17543] bridge_slave_1: entered allmulticast mode
[  570.871081][T17543] bridge_slave_1: entered promiscuous mode
[  570.908032][T17543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  570.920796][T17543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  571.004226][T17543] team0: Port device team_slave_0 added
[  571.015943][T17543] team0: Port device team_slave_1 added
[  571.021863][T17594] tap0: tun_chr_ioctl cmd 1074025677
[  571.027550][T17594] tap0: linktype set to 1
[  571.089177][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  571.090734][T17543] batman_adv: batadv0: Adding interface: batadv_slave_0
[  571.103383][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  571.107619][T17543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  571.138276][T17600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  571.153948][T17543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  571.179999][T17543] batman_adv: batadv0: Adding interface: batadv_slave_1
[  571.204065][T17543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  571.285709][T17543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  571.489805][T17543] hsr_slave_0: entered promiscuous mode
[  571.496948][T17543] hsr_slave_1: entered promiscuous mode
[  571.503395][T17543] debugfs: 'hsr0' already exists in 'hsr'
[  571.509225][T17543] Cannot create hsr debugfs directory
[  571.587630][T17626] netlink: 87 bytes leftover after parsing attributes in process `syz.3.3051'.
[  571.656800][T17626] bridge8: entered promiscuous mode
[  571.662097][T17626] bridge8: entered allmulticast mode
[  571.667317][T17628] IPVS: set_ctl: invalid protocol: 22 10.1.1.0:259
[  571.670720][T17626] team0: Port device bridge8 added
[  571.684907][T17629] bridge0: port 1(team0) entered blocking state
[  571.692715][T17629] bridge0: port 1(team0) entered disabled state
[  571.701118][T17629] team0: entered allmulticast mode
[  571.707988][T17629] team0: entered promiscuous mode
[  571.802397][T17543] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.813659][T17543] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  571.883861][T17543] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.894256][T17543] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  571.949371][T17543] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.973724][T17543] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  572.013398][ T5833] Bluetooth: hci1: command tx timeout
[  572.056383][T17543] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.072061][T17543] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  572.292937][T17543] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  572.317390][T17543] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  572.331074][T17543] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  572.334676][T17654] netlink: 'syz.3.3061': attribute type 1 has an invalid length.
[  572.338544][T17655] netlink: 'syz.3.3061': attribute type 1 has an invalid length.
[  572.360233][T17543] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  572.361344][T17656] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3060'.
[  572.432233][T17653] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address
[  572.448616][T17653] bond11: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  572.465562][T17653] bond11: (slave vxcan1): making interface the new active one
[  572.474519][T17653] bond11: (slave vxcan1): Enslaving as an active interface with an up link
[  572.675604][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3062'.
[  572.839378][T17543] 8021q: adding VLAN 0 to HW filter on device bond0
[  572.907349][T17543] 8021q: adding VLAN 0 to HW filter on device team0
[  572.933186][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.940380][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state
[  572.988228][ T6680] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.995421][ T6680] bridge0: port 2(bridge_slave_1) entered forwarding state
[  573.043140][T17685] xfrm0: entered promiscuous mode
[  573.083585][T17685] xfrm0: entered allmulticast mode
[  573.095411][T17688] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20002
[  573.196124][T17543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  573.370951][T17700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3072'.
[  573.783719][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  573.791783][    C1] lec:lec_tx_timeout: lec0
[  573.829217][T17543] 8021q: adding VLAN 0 to HW filter on device batadv0
[  573.908816][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3082'.
[  573.939820][T17543] veth0_vlan: entered promiscuous mode
[  573.956579][T17543] veth1_vlan: entered promiscuous mode
[  574.062679][T17727] dvmrp0: entered allmulticast mode
[  574.093494][ T5833] Bluetooth: hci1: command 0x041b tx timeout
[  574.136778][T17543] veth0_macvtap: entered promiscuous mode
[  574.172622][T17543] veth1_macvtap: entered promiscuous mode
[  574.217690][T17740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3088'.
[  574.276424][T17543] batman_adv: batadv0: Interface activated: batadv_slave_0
[  574.318906][T17543] batman_adv: batadv0: Interface activated: batadv_slave_1
[  574.356217][ T6680] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  574.374620][ T3989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  574.389278][T17751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3090'.
[  574.391251][ T3989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  574.411414][ T3989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  574.498010][ T6680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  574.512622][ T6680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  574.549685][ T6154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  574.563738][ T6154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  574.628146][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3093'.
[  574.920883][T17769] netlink: 'syz.2.3095': attribute type 4 has an invalid length.
[  575.005953][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  575.018259][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  575.028598][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  575.045171][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  575.052912][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  575.083706][T17765] lo speed is unknown, defaulting to 1000
[  575.097449][T17765] wg1 speed is unknown, defaulting to 1000
[  575.205324][T17770] lo speed is unknown, defaulting to 1000
[  575.269350][T17770] wg1 speed is unknown, defaulting to 1000
[  575.410710][  T936] IPVS: starting estimator thread 0...
[  575.513456][T17788] IPVS: using max 33 ests per chain, 79200 per kthread
[  575.565340][T17796] netlink: 'syz.1.3103': attribute type 1 has an invalid length.
[  575.872280][T17813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  576.127025][T17829] __nla_validate_parse: 3 callbacks suppressed
[  576.127043][T17829] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3111'.
[  576.144014][T17829] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3111'.
[  576.154746][T17770] chnl_net:caif_netlink_parms(): no params data found
[  576.176175][ T5833] Bluetooth: hci1: command 0x041b tx timeout
[  576.194566][T17829] sctp: [Deprecated]: syz.4.3111 (pid 17829) Use of int in max_burst socket option.
[  576.194566][T17829] Use struct sctp_assoc_value instead
[  576.381982][ T3989] bridge_slave_1: left allmulticast mode
[  576.418170][ T3989] bridge_slave_1: left promiscuous mode
[  576.457460][ T3989] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.502569][ T3989] bridge_slave_0: left allmulticast mode
[  576.517560][ T3989] bridge_slave_0: left promiscuous mode
[  576.553535][ T3989] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.611813][T17864] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3119'.
[  576.795157][T17882] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3118'.
[  577.133680][ T5833] Bluetooth: hci3: command tx timeout
[  577.360860][T17903] netlink: 'syz.3.3124': attribute type 1 has an invalid length.
[  577.471554][T17907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3126'.
[  577.484694][T17907] block nbd4: Unsupported socket: should be TCP or UNIX.
[  577.536725][ T3989] dvmrp0 (unregistering): left allmulticast mode
[  577.881794][ T3989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  577.892476][ T3989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  577.902378][ T3989] bond0 (unregistering): (slave team0): Releasing backup interface
[  577.911727][ T3989] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  577.926240][ T3989] bond0 (unregistering): Released all slaves
[  578.009638][ T3989] bond1 (unregistering): Released all slaves
[  578.099171][ T3989] bond2 (unregistering): Released all slaves
[  578.179918][ T3989] bond3 (unregistering): Released all slaves
[  578.255909][ T5833] Bluetooth: hci1: command 0x041b tx timeout
[  578.267600][ T3989] bond4 (unregistering): Released all slaves
[  578.349650][ T3989] bond5 (unregistering): (slave veth5): Releasing active interface
[  578.358216][ T3989] bond5 (unregistering): Released all slaves
[  578.370207][ T3989] bond6 (unregistering): Released all slaves
[  578.393739][T17871] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3118'.
[  578.603021][ T3989] tipc: Left network mode
[  578.607680][T17770] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.633637][T17770] bridge0: port 1(bridge_slave_0) entered disabled state
[  578.647613][T17770] bridge_slave_0: entered allmulticast mode
[  578.672659][T17770] bridge_slave_0: entered promiscuous mode
[  578.685775][ T3989] IPVS: stopping backup sync thread 6085 ...
[  578.705696][T17770] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.726704][T17770] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.743924][T17770] bridge_slave_1: entered allmulticast mode
[  578.751668][T17770] bridge_slave_1: entered promiscuous mode
[  578.828775][T17926] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  578.973119][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3134'.
[  578.985391][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'.
[  579.021867][T17770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  579.082317][T17770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  579.213754][ T5833] Bluetooth: hci3: command tx timeout
[  579.355625][T17770] team0: Port device team_slave_0 added
[  579.487202][T17770] team0: Port device team_slave_1 added
[  579.909127][ T3989] hsr_slave_0: left promiscuous mode
[  579.945158][ T3989] hsr_slave_1: left promiscuous mode
[  579.957831][ T3989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  579.994299][ T3989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  580.160181][T18008] xt_TPROXY: Can be used only with -p tcp or -p udp
[  580.169013][T18008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3150'.
[  580.345771][ T5833] Bluetooth: hci1: command 0x041b tx timeout
[  580.618970][T18031] netlink: 'syz.1.3157': attribute type 32 has an invalid length.
[  580.637361][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3157'.
[  580.661048][ T3989] team0 (unregistering): Port device team_slave_1 removed
[  580.698215][ T3989] team0 (unregistering): Port device team_slave_0 removed
[  581.008007][T17770] batman_adv: batadv0: Adding interface: batadv_slave_0
[  581.018202][T17770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  581.044862][T17770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  581.058067][T17770] batman_adv: batadv0: Adding interface: batadv_slave_1
[  581.103478][T17770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  581.130026][T17770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  581.140813][T18033] x_tables: duplicate underflow at hook 3
[  581.195910][T17770] hsr_slave_0: entered promiscuous mode
[  581.202840][T17770] hsr_slave_1: entered promiscuous mode
[  581.209586][T17770] debugfs: 'hsr0' already exists in 'hsr'
[  581.216515][T17770] Cannot create hsr debugfs directory
[  581.263579][T18031] bond1: Setting coupled_control to off (0)
[  581.293731][ T5833] Bluetooth: hci3: command tx timeout
[  581.430933][T18043] lo speed is unknown, defaulting to 1000
[  581.883797][ T3989] IPVS: stop unused estimator thread 0...
[  582.067387][T18081] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  582.584396][T18108] netlink: 'syz.1.3174': attribute type 1 has an invalid length.
[  582.614169][T18108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  582.624681][T18110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3175'.
[  582.819592][T18119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3178'.
[  582.838911][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3178'.
[  582.848996][T18122] FAULT_INJECTION: forcing a failure.
[  582.848996][T18122] name failslab, interval 1, probability 0, space 0, times 0
[  582.872244][T18122] CPU: 0 UID: 0 PID: 18122 Comm: syz.2.3179 Not tainted syzkaller #0 PREEMPT(full) 
[  582.872267][T18122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  582.872278][T18122] Call Trace:
[  582.872295][T18122]  <TASK>
[  582.872303][T18122]  dump_stack_lvl+0xe8/0x150
[  582.872331][T18122]  should_fail_ex+0x412/0x560
[  582.872358][T18122]  should_failslab+0xa8/0x100
[  582.872380][T18122]  __kvmalloc_node_noprof+0x166/0x8d0
[  582.872395][T18122]  ? page_pool_create_percpu+0x2dd/0xb80
[  582.872411][T18122]  ? page_pool_create_percpu+0xaf/0xb80
[  582.872430][T18122]  page_pool_create_percpu+0x2dd/0xb80
[  582.872452][T18122]  bpf_test_run_xdp_live+0x23d/0x1cf0
[  582.872472][T18122]  ? bpf_dispatcher_change_prog+0xae0/0xd70
[  582.872496][T18122]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  582.872515][T18122]  ? __pfx_autoremove_wake_function+0x10/0x10
[  582.872536][T18122]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  582.872568][T18122]  ? 0xffffffffa02019c8
[  582.872599][T18122]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  582.872622][T18122]  ? _copy_from_user+0x94/0xb0
[  582.872636][T18122]  ? bpf_test_init+0x113/0x150
[  582.872651][T18122]  ? xdp_convert_md_to_buff+0x5b/0x330
[  582.872669][T18122]  bpf_prog_test_run_xdp+0x81c/0x1160
[  582.872698][T18122]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  582.872719][T18122]  ? __fget_files+0x2a/0x420
[  582.872741][T18122]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  582.872758][T18122]  bpf_prog_test_run+0x2c7/0x340
[  582.872780][T18122]  __sys_bpf+0x5cb/0x920
[  582.872799][T18122]  ? __pfx___sys_bpf+0x10/0x10
[  582.872829][T18122]  ? ksys_write+0x242/0x270
[  582.872846][T18122]  ? __pfx_ksys_write+0x10/0x10
[  582.872866][T18122]  __x64_sys_bpf+0x7c/0x90
[  582.872885][T18122]  do_syscall_64+0xe2/0xf80
[  582.872900][T18122]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.872915][T18122]  ? trace_irq_disable+0x37/0x100
[  582.872933][T18122]  ? clear_bhb_loop+0x60/0xb0
[  582.872954][T18122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.872970][T18122] RIP: 0033:0x7f313df9acb9
[  582.872986][T18122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  582.873001][T18122] RSP: 002b:00007f313eebe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  582.873019][T18122] RAX: ffffffffffffffda RBX: 00007f313e215fa0 RCX: 00007f313df9acb9
[  582.873030][T18122] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  582.873039][T18122] RBP: 00007f313eebe090 R08: 0000000000000000 R09: 0000000000000000
[  582.873047][T18122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  582.873054][T18122] R13: 00007f313e216038 R14: 00007f313e215fa0 R15: 00007fff3354c918
[  582.873082][T18122]  </TASK>
[  582.873090][T18122] page_pool_create_percpu() gave up with errno -12
[  583.165689][T17770] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  583.205629][T17770] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  583.250587][T17770] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  583.301932][T18133] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3180'.
[  583.307008][T18138] netlink: 'syz.2.3182': attribute type 1 has an invalid length.
[  583.328964][T18133] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3180'.
[  583.361935][T18133] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3180'.
[  583.374035][ T5833] Bluetooth: hci3: command tx timeout
[  583.395916][T17770] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  583.528563][T18154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3182'.
[  583.568739][T18148] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.778703][T18148] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  583.815227][T18142] macvlan2: entered promiscuous mode
[  583.821533][T18142] macvlan2: entered allmulticast mode
[  584.144297][T18188] netlink: 'syz.2.3189': attribute type 1 has an invalid length.
[  584.405198][T17770] 8021q: adding VLAN 0 to HW filter on device bond0
[  584.536934][T18213] netlink: 'syz.4.3194': attribute type 29 has an invalid length.
[  584.579769][T18215] netlink: 'syz.4.3194': attribute type 29 has an invalid length.
[  584.603088][T17770] 8021q: adding VLAN 0 to HW filter on device team0
[  584.640412][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.647609][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  584.737175][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.744367][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  585.197104][T18254] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  585.313751][T18266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3203'.
[  585.560330][T18279] netlink: 'syz.3.3205': attribute type 2 has an invalid length.
[  585.566452][T18263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3203'.
[  585.598960][T18279] !: entered promiscuous mode
[  585.686349][T17770] 8021q: adding VLAN 0 to HW filter on device batadv0
[  585.700765][T18286] xt_connbytes: Forcing CT accounting to be enabled
[  585.850578][T17770] veth0_vlan: entered promiscuous mode
[  585.870723][T17770] veth1_vlan: entered promiscuous mode
[  585.878623][T18294] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3209'.
[  585.911411][T17770] veth0_macvtap: entered promiscuous mode
[  585.925560][T17770] veth1_macvtap: entered promiscuous mode
[  585.967048][T17770] batman_adv: batadv0: Interface activated: batadv_slave_0
[  586.005940][T17770] batman_adv: batadv0: Interface activated: batadv_slave_1
[  586.040293][ T6680] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  586.080701][ T6680] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  586.129358][ T6680] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  586.158913][ T6680] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  586.167827][T18301] lo speed is unknown, defaulting to 1000
[  586.406049][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  586.424323][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  586.488631][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  586.524601][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  587.146960][T18358] netlink: 'syz.2.3220': attribute type 12 has an invalid length.
[  587.173180][ T6680] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  587.182212][T18358] netlink: 'syz.2.3220': attribute type 12 has an invalid length.
[  587.218929][ T6680] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  587.321870][ T6680] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  587.353733][ T6680] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  587.426652][T18360] lo speed is unknown, defaulting to 1000
[  587.838753][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  587.847692][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  587.858061][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  587.875963][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  587.893981][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  588.207514][T18392] __nla_validate_parse: 4 callbacks suppressed
[  588.207532][T18392] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3227'.
[  588.237556][T18385] lo speed is unknown, defaulting to 1000
[  588.283677][T18382] lo speed is unknown, defaulting to 1000
[  588.364664][   T25] block nbd3: Possible stuck request ffff8880255a0000: control (read@0,1024B). Runtime 120 seconds
[  588.376366][   T25] block nbd3: Possible stuck request ffff8880255a0200: control (read@1024,1024B). Runtime 120 seconds
[  588.387698][   T25] block nbd3: Possible stuck request ffff8880255a0400: control (read@2048,1024B). Runtime 120 seconds
[  588.399826][   T25] block nbd3: Possible stuck request ffff8880255a0600: control (read@3072,1024B). Runtime 120 seconds
[  588.482266][T18397] netlink: set zone limit has 4 unknown bytes
[  588.732963][T18411] netlink: 'syz.4.3233': attribute type 4 has an invalid length.
[  588.785826][T18382] chnl_net:caif_netlink_parms(): no params data found
[  588.803656][T18409] syzkaller0: entered promiscuous mode
[  588.809212][T18409] syzkaller0: entered allmulticast mode
[  588.982872][T18382] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.015604][T18382] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.022824][T18382] bridge_slave_0: entered allmulticast mode
[  589.040082][T18382] bridge_slave_0: entered promiscuous mode
[  589.058438][T18382] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.076215][T18382] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.091504][T18382] bridge_slave_1: entered allmulticast mode
[  589.104702][T18382] bridge_slave_1: entered promiscuous mode
[  589.145737][T18428] xt_time: unknown flags 0xf4
[  589.151930][T18429] syzkaller1: tun_chr_ioctl cmd 1074025677
[  589.209187][T18429] syzkaller1: linktype set to 773
[  589.220378][T18382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  589.254588][T18382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  589.335907][T18382] team0: Port device team_slave_0 added
[  589.355254][T18382] team0: Port device team_slave_1 added
[  589.418332][T18437] lo: entered promiscuous mode
[  589.424081][T18437] tunl0: entered promiscuous mode
[  589.429980][T18437] gre0: entered promiscuous mode
[  589.443669][T18437] gretap0: entered promiscuous mode
[  589.449289][T18437] erspan0: entered promiscuous mode
[  589.458895][T18437] ip_vti0: entered promiscuous mode
[  589.464845][T18437] ip6_vti0: entered promiscuous mode
[  589.470935][T18437] sit0: entered promiscuous mode
[  589.478376][T18437] ip6tnl0: entered promiscuous mode
[  589.485686][T18437] ip6gre0: entered promiscuous mode
[  589.491406][T18437] syz_tun: entered promiscuous mode
[  589.497938][T18437] ip6gretap0: entered promiscuous mode
[  589.505428][T18437] bridge0: entered promiscuous mode
[  589.515175][T18437] vcan0: entered promiscuous mode
[  589.523746][T18437] bond0: entered promiscuous mode
[  589.528932][T18437] bond_slave_0: entered promiscuous mode
[  589.535181][T18437] bond_slave_1: entered promiscuous mode
[  589.542074][T18437] team0: entered promiscuous mode
[  589.547840][T18437] team_slave_0: entered promiscuous mode
[  589.555069][T18437] team_slave_1: entered promiscuous mode
[  589.562620][T18437] dummy0: entered promiscuous mode
[  589.569016][T18437] nlmon0: entered promiscuous mode
[  589.575308][T18437] caif0: entered promiscuous mode
[  589.580682][T18437] batadv0: entered promiscuous mode
[  589.586822][T18437] vxcan0: entered promiscuous mode
[  589.592887][T18437] vxcan1: entered promiscuous mode
[  589.598630][T18437] veth0: entered promiscuous mode
[  589.604396][T18437] veth1: entered promiscuous mode
[  589.609866][T18437] wg0: entered promiscuous mode
[  589.618040][T18437] wg1: entered promiscuous mode
[  589.624740][T18437] wg2: entered promiscuous mode
[  589.630322][T18437] veth0_to_bridge: entered promiscuous mode
[  589.637312][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3245'.
[  589.647955][T18437] veth1_to_bridge: entered promiscuous mode
[  589.657145][T18437] veth0_to_bond: entered promiscuous mode
[  589.664533][T18437] veth1_to_bond: entered promiscuous mode
[  589.677473][T18437] veth0_to_team: entered promiscuous mode
[  589.684777][T18437] veth1_to_team: entered promiscuous mode
[  589.693984][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3245'.
[  589.706610][T18437] veth0_to_batadv: entered promiscuous mode
[  589.713131][T18437] batadv_slave_0: entered promiscuous mode
[  589.720084][T18437] veth1_to_batadv: entered promiscuous mode
[  589.727540][T18437] batadv_slave_1: entered promiscuous mode
[  589.735091][T18437] xfrm0: entered promiscuous mode
[  589.740685][T18437] veth0_to_hsr: entered promiscuous mode
[  589.747454][T18437] veth1_to_hsr: entered promiscuous mode
[  589.754178][T18437] hsr0: entered promiscuous mode
[  589.760408][T18437] veth1_virt_wifi: entered promiscuous mode
[  589.767743][T18437] veth0_virt_wifi: entered promiscuous mode
[  589.775113][T18437] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  589.784985][T18437] vlan0: entered promiscuous mode
[  589.790595][T18437] vlan1: entered promiscuous mode
[  589.797104][T18437] macvlan0: entered promiscuous mode
[  589.803193][T18437] macvlan1: entered promiscuous mode
[  589.809924][T18437] ipvlan0: entered promiscuous mode
[  589.816363][T18437] ipvlan1: entered promiscuous mode
[  589.822981][T18437] macvtap0: entered promiscuous mode
[  589.829865][T18437] macsec0: entered promiscuous mode
[  589.836527][T18437] geneve0: entered promiscuous mode
[  589.842369][T18437] geneve1: entered promiscuous mode
[  589.849055][T18437] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  589.861817][T18437] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  589.870804][T18437] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[  589.881515][T18437] netdevsim netdevsim0 netdevsim3: entered promiscuous mode
[  589.889580][T18437] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode
[  589.897463][T18437] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode
[  589.906635][T18437] ppp2: entered promiscuous mode
[  589.913866][T18382] batman_adv: batadv0: Adding interface: batadv_slave_0
[  589.923364][T18382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  589.950526][ T5841] Bluetooth: hci2: command tx timeout
[  589.959028][T18382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  590.059710][T18462] syzkaller0: entered promiscuous mode
[  590.086020][T18462] syzkaller0: entered allmulticast mode
[  590.094235][T18382] batman_adv: batadv0: Adding interface: batadv_slave_1
[  590.101259][T18382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  590.135362][T18382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  591.447161][T18488] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3251'.
[  591.463837][T18484] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  591.550450][T18484] tipc: Started in network mode
[  591.565387][T18484] tipc: Node identity 462c810aa8e1, cluster identity 4711
[  591.566943][T18490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3252'.
[  591.581655][T18490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3252'.
[  591.591100][T18484] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  591.631883][T18382] hsr_slave_0: entered promiscuous mode
[  591.646710][T18382] hsr_slave_1: entered promiscuous mode
[  591.658620][T18382] debugfs: 'hsr0' already exists in 'hsr'
[  591.673602][T18382] Cannot create hsr debugfs directory
[  591.685730][T18485] syzkaller0: entered promiscuous mode
[  591.694107][T18485] syzkaller0: entered allmulticast mode
[  591.768113][T18500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3255'.
[  591.800481][T18484] lo speed is unknown, defaulting to 1000
[  591.866978][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3258'.
[  591.878264][T18504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3257'.
[  591.916696][T18506] team0 (unregistering): Port device team_slave_0 removed
[  591.931506][T18506] team0 (unregistering): Port device team_slave_1 removed
[  592.014305][ T5841] Bluetooth: hci2: command tx timeout
[  592.024279][T18483] tipc: Resetting bearer <eth:syzkaller0>
[  592.069383][T18483] tipc: Disabling bearer <eth:syzkaller0>
[  592.084209][T18517] x_tables: duplicate underflow at hook 1
[  592.705607][T18535] lo speed is unknown, defaulting to 1000
[  592.898928][T18382] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  592.937236][T18382] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  593.000068][T18382] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  593.059285][T18382] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  593.155883][T18553] syzkaller0: entered promiscuous mode
[  593.160728][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3266'.
[  593.161381][T18553] syzkaller0: entered allmulticast mode
[  593.275091][T18572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'.
[  593.300063][T18572] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  593.337049][T18577] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3268'.
[  593.408608][T18572] batman_adv: batadv0: Removing interface: batadv_slave_1
[  593.458014][T18586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  593.475178][T18565] lo speed is unknown, defaulting to 1000
[  593.527916][T18580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3270'.
[  593.559114][T18580] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  593.601466][T18589] netlink: 'syz.1.3272': attribute type 10 has an invalid length.
[  593.618923][T18580] batman_adv: batadv0: Removing interface: batadv_slave_1
[  593.651704][T18589] bridge0: port 3(macsec0) entered blocking state
[  593.658591][T18589] bridge0: port 3(macsec0) entered disabled state
[  593.668191][T18589] macsec0: entered allmulticast mode
[  593.676066][T18589] veth1_macvtap: entered allmulticast mode
[  593.694876][T18589] macsec0: entered promiscuous mode
[  593.700654][T18589] bridge0: port 3(macsec0) entered blocking state
[  593.707201][T18589] bridge0: port 3(macsec0) entered forwarding state
[  593.834546][T18382] 8021q: adding VLAN 0 to HW filter on device bond0
[  593.915222][T18382] 8021q: adding VLAN 0 to HW filter on device team0
[  593.924061][T18604] netlink: 'syz.1.3276': attribute type 39 has an invalid length.
[  593.985417][T18611] sctp: [Deprecated]: syz.4.3280 (pid 18611) Use of struct sctp_assoc_value in delayed_ack socket option.
[  593.985417][T18611] Use struct sctp_sack_info instead
[  594.096482][ T5841] Bluetooth: hci2: command tx timeout
[  594.120785][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state
[  594.127976][ T6159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  594.152208][T18612] syzkaller0: entered promiscuous mode
[  594.180969][T18612] syzkaller0: entered allmulticast mode
[  594.200609][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state
[  594.207814][ T6159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  594.302854][T18629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3285'.
[  594.312293][T18629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  594.319552][T18629] IPv6: NLM_F_CREATE should be set when creating new route
[  594.326824][T18629] IPv6: NLM_F_CREATE should be set when creating new route
[  594.334046][T18629] IPv6: NLM_F_CREATE should be set when creating new route
[  594.347896][T18629] netlink: 'syz.4.3285': attribute type 21 has an invalid length.
[  594.357427][T18629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3285'.
[  594.460825][T18382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  594.518382][T18630] syzkaller0: tun_chr_ioctl cmd 35108
[  594.660302][T18644] IPVS: length: 24 != 6840
[  594.791783][T18647] lo speed is unknown, defaulting to 1000
[  594.913769][T18382] 8021q: adding VLAN 0 to HW filter on device batadv0
[  595.121475][T18382] veth0_vlan: entered promiscuous mode
[  595.189966][T18382] veth1_vlan: entered promiscuous mode
[  595.239612][T18673] syzkaller0: entered promiscuous mode
[  595.247655][T18673] syzkaller0: entered allmulticast mode
[  595.282312][T18671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3297'.
[  595.352294][T18382] veth0_macvtap: entered promiscuous mode
[  595.407986][T18382] veth1_macvtap: entered promiscuous mode
[  595.469078][T18382] batman_adv: batadv0: Interface activated: batadv_slave_0
[  595.496848][T18382] batman_adv: batadv0: Interface activated: batadv_slave_1
[  595.529773][ T1330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  595.578087][ T1330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  595.605781][ T1330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  595.636237][ T1330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  595.779330][T18688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3302'.
[  595.796979][T18688] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3302'.
[  595.941280][ T5076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.957839][ T5076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.019718][T18622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.029976][T18622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.174261][ T5841] Bluetooth: hci2: command tx timeout
[  596.492959][T18738] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.3314'.
[  596.533463][T18738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3314'.
[  596.578413][T18735] syzkaller0: entered promiscuous mode
[  596.599715][T18735] syzkaller0: entered allmulticast mode
[  596.784887][T18752] openvswitch: netlink: Flow key attr not present in new flow.
[  597.163625][T18774] xt_cgroup: path and classid specified
[  597.265956][T18776] bond1 (unregistering): Released all slaves
[  597.483302][T18789] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.498232][T18789] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.679948][T18805] syzkaller0: entered promiscuous mode
[  597.685712][T18805] syzkaller0: entered allmulticast mode
[  597.822169][T18808] syzkaller0: entered promiscuous mode
[  597.834896][T18808] syzkaller0: entered allmulticast mode
[  597.941665][T18816] xt_time: unknown flags 0xf4
[  599.573173][T18850] netlink: 'syz.2.3337': attribute type 1 has an invalid length.
[  600.883668][T18830] tun0: tun_chr_ioctl cmd 1074025672
[  600.888993][T18830] tun0: ignored: set checksum disabled
[  601.081048][T18881] __nla_validate_parse: 7 callbacks suppressed
[  601.081066][T18881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3344'.
[  601.148305][T18881] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  601.271095][T18893] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3350'.
[  601.272401][T18892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3351'.
[  601.286116][T18893] syzkaller0: entered promiscuous mode
[  601.300215][T18893] syzkaller0: entered allmulticast mode
[  601.365913][T18896] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3352'.
[  601.503700][T18903] syzkaller0: entered promiscuous mode
[  601.509246][T18903] syzkaller0: entered allmulticast mode
[  601.556249][T18909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'.
[  601.595006][T18909] gtp0: entered promiscuous mode
[  601.601917][T18909] gtp0: entered allmulticast mode
[  601.724457][T18917] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3357'.
[  601.734391][T18917] netlink: Conntrack attr has 3 unknown bytes
[  601.744450][T18917] netlink: 'syz.2.3357': attribute type 2 has an invalid length.
[  601.752183][T18917] netlink: 'syz.2.3357': attribute type 11 has an invalid length.
[  601.794430][T18917] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3357'.
[  601.890304][T18919] lo speed is unknown, defaulting to 1000
[  601.951197][T18921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3360'.
[  602.013516][T18921] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode
[  602.037428][T18921] macvtap1: entered promiscuous mode
[  602.259012][T18933] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.266671][T18933] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.404442][T18933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  602.516148][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3361'.
[  602.546897][   T50] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  602.574118][   T50] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  602.586491][T18927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3361'.
[  602.634466][   T50] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  602.651611][   T50] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  602.674204][   T50] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  602.691288][   T50] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  602.723715][   T50] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  602.740106][   T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  602.757099][T18949] syzkaller0: entered promiscuous mode
[  602.773663][T18949] syzkaller0: entered allmulticast mode
[  602.902113][T18960] Cannot find add_set index 0 as target
[  603.099838][T18976] tipc: Started in network mode
[  603.110788][T18976] tipc: Node identity a61651508b1a, cluster identity 4711
[  603.118381][T18976] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  603.126660][T18976] syzkaller0: entered promiscuous mode
[  603.132231][T18976] syzkaller0: entered allmulticast mode
[  603.201792][T18979] lo speed is unknown, defaulting to 1000
[  603.217172][T18976] tipc: Resetting bearer <eth:syzkaller0>
[  603.256363][T18986] nbd: socks must be embedded in a SOCK_ITEM attr
[  603.294260][T18974] tipc: Resetting bearer <eth:syzkaller0>
[  603.354918][T18974] tipc: Disabling bearer <eth:syzkaller0>
[  603.575591][T19000] macsec1: entered promiscuous mode
[  603.579322][T16606] udevd[16606]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  603.580835][T19000] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode
[  603.695754][   T12] wlan1: Trigger new scan to find an IBSS to join
[  603.759884][T19013] syzkaller0: entered promiscuous mode
[  603.777996][T19013] syzkaller0: entered allmulticast mode
[  604.060823][T19020] lo speed is unknown, defaulting to 1000
[  604.066798][T19026] netlink: 'syz.2.3391': attribute type 1 has an invalid length.
[  604.094147][T19026] netlink: 'syz.2.3391': attribute type 3 has an invalid length.
[  604.618189][T19050] openvswitch: netlink: IP tunnel TTL not specified.
[  605.558921][T19099] netlink: 'syz.0.3411': attribute type 10 has an invalid length.
[  605.731374][T19109] syzkaller0: entered promiscuous mode
[  605.741969][T19109] syzkaller0: entered allmulticast mode
[  605.763058][T19109] tipc: Started in network mode
[  605.770474][T19109] tipc: Node identity 9a5a8d2862ba, cluster identity 4711
[  605.778782][T19109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  605.797677][T19107] tipc: Resetting bearer <eth:syzkaller0>
[  605.819185][T19107] tipc: Disabling bearer <eth:syzkaller0>
[  606.061585][T19140] veth2: entered allmulticast mode
[  606.244323][T19158] __nla_validate_parse: 12 callbacks suppressed
[  606.244341][T19158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3426'.
[  606.303365][T19158] netlink: 'syz.2.3426': attribute type 11 has an invalid length.
[  606.311408][T19158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3426'.
[  606.334723][T19158] netlink: 'syz.2.3426': attribute type 11 has an invalid length.
[  606.593019][T19145] netlink: 'syz.0.3422': attribute type 28 has an invalid length.
[  606.733704][ T6680] wlan1: Trigger new scan to find an IBSS to join
[  606.864459][T19188] block nbd4: server does not support multiple connections per device.
[  606.890873][T19188] block nbd4: shutting down sockets
[  607.148461][T19217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3443'.
[  607.186871][T19221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3444'.
[  607.680204][T19250] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3452'.
[  608.104560][T19274] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3461'.
[  608.569468][T19306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3467'.
[  608.660928][T19306] geneve2: entered promiscuous mode
[  608.815583][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  608.841232][T19324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3471'.
[  608.857729][T19324] bond0: entered promiscuous mode
[  608.862881][T19324] bond_slave_0: entered promiscuous mode
[  608.871264][T19324] bond_slave_1: entered promiscuous mode
[  608.924241][T19324] gretap0: entered promiscuous mode
[  608.930510][T19324] debugfs: 'hsr1' already exists in 'hsr'
[  608.953333][T19324] Cannot create hsr debugfs directory
[  608.965899][T19324] hsr1: entered promiscuous mode
[  608.971567][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3474'.
[  608.992719][T19335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3475'.
[  609.159683][T19335] bridge1: port 1(veth3) entered blocking state
[  609.176298][T19335] bridge1: port 1(veth3) entered disabled state
[  609.195256][T19335] veth3: entered allmulticast mode
[  609.202605][T19335] veth3: entered promiscuous mode
[  609.248523][T19342] bridge1: port 2(veth0_to_bond) entered blocking state
[  609.265886][T19342] bridge1: port 2(veth0_to_bond) entered disabled state
[  609.273059][T19342] veth0_to_bond: entered allmulticast mode
[  609.287957][T19342] veth0_to_bond: entered promiscuous mode
[  609.414634][T19359] syzkaller0: entered promiscuous mode
[  609.420577][T19359] syzkaller0: entered allmulticast mode
[  609.693567][T18622] wlan1: Trigger new scan to find an IBSS to join
[  610.595301][   T12] wlan1: Creating new IBSS network, BSSID 3a:a1:25:90:1c:32
[  610.895655][ T5841] Bluetooth: hci5: command 0x0419 tx timeout
[  618.414160][   T25] block nbd3: Possible stuck request ffff8880255a0000: control (read@0,1024B). Runtime 150 seconds
[  618.425153][   T25] block nbd3: Possible stuck request ffff8880255a0200: control (read@1024,1024B). Runtime 150 seconds
[  618.437346][   T25] block nbd3: Possible stuck request ffff8880255a0400: control (read@2048,1024B). Runtime 150 seconds
[  618.448465][   T25] block nbd3: Possible stuck request ffff8880255a0600: control (read@3072,1024B). Runtime 150 seconds
[  621.133476][ T5833] Bluetooth: hci4: command 0x0406 tx timeout
[  624.189746][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  629.693582][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms
[  629.701628][    C1] lec:lec_tx_timeout: lec0
[  632.469259][T11541] lec:lec_start_xmit: lec0:No lecd attached
[  637.693494][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5220 ms
[  637.701525][    C1] lec:lec_tx_timeout: lec0
[  640.651254][ T6680] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  648.180855][ T5200] udevd[5200]: worker [14724] /devices/virtual/block/nbd3 timeout; kill it
[  648.189663][ T5200] udevd[5200]: seq 21488 '/devices/virtual/block/nbd3' killed
[  648.343640][ T5896] page_pool_release_retry() stalled pool shutdown: id 157, 1 inflight 60 sec
[  648.505218][   T25] block nbd3: Possible stuck request ffff8880255a0000: control (read@0,1024B). Runtime 180 seconds
[  648.516096][   T25] block nbd3: Possible stuck request ffff8880255a0200: control (read@1024,1024B). Runtime 180 seconds
[  648.527096][   T25] block nbd3: Possible stuck request ffff8880255a0400: control (read@2048,1024B). Runtime 180 seconds
[  648.539054][   T25] block nbd3: Possible stuck request ffff8880255a0600: control (read@3072,1024B). Runtime 180 seconds
[  667.435086][T19389] netlink: 'syz.3.3491': attribute type 8 has an invalid length.
[  667.460195][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3491'.
[  667.476717][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3490'.
[  667.489725][T19389] bond0: entered promiscuous mode
[  667.502713][T19389] bond_slave_0: entered promiscuous mode
[  667.518097][T19389] bond_slave_1: entered promiscuous mode
[  667.529314][T19389] gretap0: entered promiscuous mode
[  667.537501][T19389] bond0: left promiscuous mode
[  667.542574][T19389] bond_slave_0: left promiscuous mode
[  667.548533][T19389] bond_slave_1: left promiscuous mode
[  667.555690][T19389] gretap0: left promiscuous mode
[  667.569427][T19391] vlan0: entered allmulticast mode
[  668.409883][T19441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3509'.
[  668.468319][T19441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3509'.
[  668.493713][T19441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3509'.
[  668.518821][T19441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3509'.
[  668.531224][T19441] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3509'.
[  668.836370][T19470] lo speed is unknown, defaulting to 1000
[  668.931271][T19481] pimreg: entered allmulticast mode
[  669.176750][T19486] bridge0: port 3(macsec0) entered disabled state
[  669.183426][T19486] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.190989][T19486] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.194108][T19475] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3515'.
[  669.248498][T19486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  669.260180][T19486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  669.271325][T19486] xfrm0: left promiscuous mode
[  669.276962][T19486] xfrm0: left allmulticast mode
[  669.343940][T19486] veth1_macvtap: left allmulticast mode
[  669.395858][T19488] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3520'.
[  669.454821][T19492] bond1: entered allmulticast mode
[  669.460483][T19492] 8021q: adding VLAN 0 to HW filter on device bond1
[  669.469004][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.494607][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.614424][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.646514][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.754621][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3525'.
[  669.852714][T19515] syzkaller0: entered promiscuous mode
[  669.859367][T19515] syzkaller0: entered allmulticast mode
[  669.921463][T19514] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  670.232649][T18704] IPVS: starting estimator thread 0...
[  670.343399][T19534] IPVS: using max 32 ests per chain, 76800 per kthread
[  670.366095][T19536] syzkaller0: entered allmulticast mode
[  670.832938][T19531] syzkaller0: left allmulticast mode
[  670.842886][T19552] nbd: must specify at least one socket
[  670.999695][T18704] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa
[  671.158371][T19573] netlink: 'syz.0.3542': attribute type 2 has an invalid length.
[  671.198493][T19573] !��9: entered promiscuous mode
[  671.199071][T19569] fido_id[19569]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory
[  671.242522][T19573] netlink: 'syz.0.3542': attribute type 2 has an invalid length.
[  671.259251][T19573] !��9: left promiscuous mode
[  671.427299][T19582] tipc: Enabled bearer <eth:vlan0>, priority 0
[  671.547341][T19596] netlink: 'syz.2.3547': attribute type 7 has an invalid length.
[  671.575685][ T6154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  671.762979][T19607] netlink: 'syz.2.3553': attribute type 10 has an invalid length.
[  671.765191][T19601] lo speed is unknown, defaulting to 1000
[  671.774560][T19607] 8021q: adding VLAN 0 to HW filter on device team0
[  671.795738][T19607] team0: entered promiscuous mode
[  671.803434][T19607] team_slave_0: entered promiscuous mode
[  671.812369][T19607] team_slave_1: entered promiscuous mode
[  671.820668][T19607] bond0: (slave team0): Enslaving as an active interface with an up link
[  672.035306][T19615] syzkaller0: entered promiscuous mode
[  672.042345][T19615] syzkaller0: entered allmulticast mode
[  672.725530][T19638] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  672.831848][T19642] netlink: 'syz.4.3559': attribute type 30 has an invalid length.
[  672.849567][T19642] netlink: 'syz.4.3559': attribute type 1 has an invalid length.
[  672.857748][T19642] __nla_validate_parse: 8 callbacks suppressed
[  672.857763][T19642] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3559'.
[  672.873049][T19642] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3559'.
[  672.882207][T19642] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3559'.
[  673.784680][T19622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3555'.
[  673.794724][ T5896] tipc: Node number set to 4175465768
[  673.992098][T19651] netlink: 'syz.0.3564': attribute type 10 has an invalid length.
[  674.002902][T19651] bond0: left promiscuous mode
[  674.012823][T19651] 8021q: adding VLAN 0 to HW filter on device bond0
[  674.024599][T19651] bond0: entered promiscuous mode
[  674.031631][T19651] team0: Port device bond0 added
[  674.228049][T19675] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3572'.
[  674.300533][T19679] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  674.344205][T19680] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3574'.
[  674.534440][T19697] lo speed is unknown, defaulting to 1000
[  674.591711][T19702] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  674.612780][T19702] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  674.624946][T19702] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  674.967449][T19730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3588'.
[  675.194630][T19744] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3592'.
[  675.240985][T19748] bond2: entered promiscuous mode
[  675.246762][T19748] bond2: entered allmulticast mode
[  675.252424][T19748] 8021q: adding VLAN 0 to HW filter on device bond2
[  675.537337][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3596'.
[  675.981151][T19799] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3607'.
[  675.988661][T19800] vlan0: entered allmulticast mode
[  676.075740][T19805] netlink: 'syz.0.3608': attribute type 29 has an invalid length.
[  676.211827][T19807] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.331520][T19807] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.487866][T19807] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.539389][T19825] vlan0: entered promiscuous mode
[  676.617514][T19807] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.774846][T19839] lo speed is unknown, defaulting to 1000
[  676.822542][T18840] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  676.938537][ T6159] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  677.173452][ T6159] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  677.237656][ T6159] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  677.446819][T19859] bond2: entered promiscuous mode
[  677.462074][T19859] bond2: entered allmulticast mode
[  677.484578][T19859] 8021q: adding VLAN 0 to HW filter on device bond2
[  677.768665][T19884] bridge_slave_1: left allmulticast mode
[  677.788802][T19884] bridge_slave_1: left promiscuous mode
[  677.794922][T19884] bridge0: port 2(bridge_slave_1) entered disabled state
[  677.809332][T19884] bridge_slave_0: left allmulticast mode
[  677.815703][T19884] bridge_slave_0: left promiscuous mode
[  677.822374][T19884] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.321374][T19901] __nla_validate_parse: 11 callbacks suppressed
[  678.321394][T19901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3633'.
[  678.372238][T19917] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  678.584998][   T25] block nbd3: Possible stuck request ffff8880255a0000: control (read@0,1024B). Runtime 210 seconds
[  678.596215][   T25] block nbd3: Possible stuck request ffff8880255a0200: control (read@1024,1024B). Runtime 210 seconds
[  678.607487][   T25] block nbd3: Possible stuck request ffff8880255a0400: control (read@2048,1024B). Runtime 210 seconds
[  678.620835][   T25] block nbd3: Possible stuck request ffff8880255a0600: control (read@3072,1024B). Runtime 210 seconds
[  678.660543][T19936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3640'.
[  678.676822][T19936] netlink: zone id is out of range
[  678.700979][T19931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3639'.
[  678.745275][T19932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3639'.
[  678.757043][T19940] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3641'.
[  678.926810][T19940] bond0: option all_slaves_active: invalid value (60)
[  678.975644][T19949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3643'.
[  679.018013][T19949] nbd: illegal input index -1113835520
[  679.084106][T19957] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3645'.
[  679.139295][T19957] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  679.154938][T19957] netlink: 'syz.3.3645': attribute type 4 has an invalid length.
[  679.196919][T19963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3648'.
[  679.226298][T19963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3648'.
[  679.227984][T19958] xt_TCPMSS: Only works on TCP SYN packets
[  679.261641][T19958] netlink: 'syz.1.3647': attribute type 1 has an invalid length.
[  679.271786][T19968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3650'.
[  679.294043][T19958] netlink: 'syz.1.3647': attribute type 1 has an invalid length.
[  679.305795][T19968] netlink: 'syz.4.3650': attribute type 1 has an invalid length.
[  679.384261][T19968] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  680.253222][T20006] sctp: [Deprecated]: syz.1.3663 (pid 20006) Use of int in maxseg socket option.
[  680.253222][T20006] Use struct sctp_assoc_value instead
[  680.275732][T20005] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  680.304198][T20011] 8021q: adding VLAN 0 to HW filter on device bond1
[  680.337266][T20006] IPVS: length: 192 != 8
[  680.347596][T20011] 8021q: adding VLAN 0 to HW filter on device bond1
[  680.355996][T20011] bond1: (slave sit1): The slave device specified does not support setting the MAC address
[  680.367282][T20011] bond1: (slave sit1): Error -95 calling set_mac_address
[  680.552578][T20025] lo speed is unknown, defaulting to 1000
[  680.838833][T20049] Bluetooth: MGMT ver 1.23
[  680.868547][T20049] lo speed is unknown, defaulting to 1000
[  680.971319][T20049] netlink: 'syz.3.3676': attribute type 10 has an invalid length.
[  681.005960][T20049] netlink: 'syz.3.3676': attribute type 10 has an invalid length.
[  681.123544][T20025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  681.411294][T20060] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  681.432704][T20051] netlink: 'syz.3.3676': attribute type 2 has an invalid length.
[  681.470564][T20062] bond3: option updelay: invalid value (18446744072924056005)
[  681.479217][T20062] bond3: option updelay: allowed values 0 - 2147483647
[  681.488988][T20062] bond3 (unregistering): Released all slaves
[  681.527343][T20051] !: entered promiscuous mode
[  681.866529][T20073] lo: left promiscuous mode
[  681.881361][T20073] tunl0: left promiscuous mode
[  681.911885][T20073] gre0: left promiscuous mode
[  681.958171][T20073] gretap0: left promiscuous mode
[  682.111514][T20073] erspan0: left promiscuous mode
[  682.138422][T20073] ip_vti0: left promiscuous mode
[  682.147922][T20073] ip6_vti0: left promiscuous mode
[  682.179170][T20073] sit0: left promiscuous mode
[  682.198723][T20086] sctp: [Deprecated]: syz.4.3683 (pid 20086) Use of struct sctp_assoc_value in delayed_ack socket option.
[  682.198723][T20086] Use struct sctp_sack_info instead
[  682.245829][T20073] ip6tnl0: left promiscuous mode
[  682.283150][T20073] ip6gre0: left promiscuous mode
[  682.386013][T20073] bridge0: left promiscuous mode
[  682.408309][T20073] vcan0: left promiscuous mode
[  682.435873][T20073] team0: left promiscuous mode
[  682.440877][T20073] bond0: left promiscuous mode
[  682.455265][T20073] dummy0: left promiscuous mode
[  682.466125][T20073] nlmon0: left promiscuous mode
[  682.475045][T20073] caif0: left promiscuous mode
[  682.481253][T20073] batadv0: left promiscuous mode
[  682.491403][T20073] vxcan0: left promiscuous mode
[  682.508867][T20073] vxcan1: left promiscuous mode
[  682.520631][T20073] veth0: left promiscuous mode
[  682.534750][T20073] veth1: left promiscuous mode
[  682.550527][T20073] wg0: left promiscuous mode
[  682.563638][T20073] wg1: left promiscuous mode
[  682.577035][T20073] wg2: left promiscuous mode
[  682.586282][T20073] veth0_to_bridge: left promiscuous mode
[  682.602441][T20073] veth1_to_bridge: left promiscuous mode
[  682.615887][T20073] veth0_to_bond: left promiscuous mode
[  682.625261][T20073] bond_slave_0: left promiscuous mode
[  682.634420][T20073] veth1_to_bond: left promiscuous mode
[  682.644144][T20073] bond_slave_1: left promiscuous mode
[  682.651746][T20073] veth0_to_team: left promiscuous mode
[  682.673943][T20073] team_slave_0: left promiscuous mode
[  682.683904][T20073] veth1_to_team: left promiscuous mode
[  682.692717][T20073] team_slave_1: left promiscuous mode
[  682.704570][T20073] veth0_to_batadv: left promiscuous mode
[  682.715603][T20073] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  682.725633][T20073] batadv_slave_0: left promiscuous mode
[  682.739015][T20073] xfrm0: left promiscuous mode
[  682.751767][T20073] veth0_to_hsr: left promiscuous mode
[  682.810605][T20073] veth1_to_hsr: left promiscuous mode
[  682.828919][T20073] hsr0: left promiscuous mode
[  682.842109][T20073] veth1_virt_wifi: left promiscuous mode
[  682.859927][T20073] veth0_virt_wifi: left promiscuous mode
[  682.871497][T20073] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  682.906445][T20073] vlan1: left promiscuous mode
[  682.912543][T20073] macvlan0: left promiscuous mode
[  682.924408][T20073] macvlan1: left promiscuous mode
[  682.933827][T20073] ipvlan0: left promiscuous mode
[  682.939086][T20073] ipvlan1: left promiscuous mode
[  682.959231][T20073] macvtap0: left promiscuous mode
[  682.969398][T20073] macsec0: left promiscuous mode
[  682.994146][T20073] geneve0: left promiscuous mode
[  683.004788][T20073] geneve1: left promiscuous mode
[  683.014190][T20073] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  683.027692][T20073] netdevsim netdevsim0 netdevsim1: left promiscuous mode
[  683.039797][T20073] netdevsim netdevsim0 netdevsim2: left promiscuous mode
[  683.051955][T20073] netdevsim netdevsim0 netdevsim3: left promiscuous mode
[  683.061469][T20073] mac80211_hwsim hwsim41 wlan0: left promiscuous mode
[  683.076630][T20073] mac80211_hwsim hwsim42 wlan1: left promiscuous mode
[  683.098079][T20073] gtp0: left promiscuous mode
[  683.103764][T20073] gtp0: left allmulticast mode
[  683.113871][T20073] geneve2: left promiscuous mode
[  683.122618][T20073] vlan0: left allmulticast mode
[  683.134908][T20073] bond1: left allmulticast mode
[  683.141478][T20073] bond2: left promiscuous mode
[  683.147329][T20073] bond2: left allmulticast mode
[  683.219260][ T3429] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  683.268423][ T3429] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  683.289155][ T3429] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  683.302961][T20079] lo speed is unknown, defaulting to 1000
[  683.315010][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  683.480977][T20112] __nla_validate_parse: 7 callbacks suppressed
[  683.480996][T20112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3691'.
[  683.518047][T20112] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.3691'.
[  683.645177][T20122] syzkaller0: entered promiscuous mode
[  683.650677][T20122] syzkaller0: entered allmulticast mode
[  683.725033][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3696'.
[  683.947293][ T5833] Bluetooth: hci2: command 0x0405 tx timeout
[  685.272446][T20157] lo speed is unknown, defaulting to 1000
[  685.288509][T20165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3708'.
[  685.290383][T20160] netlink: 'syz.0.3707': attribute type 2 has an invalid length.
[  685.339305][T20167] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  685.375723][T20160] !: entered promiscuous mode
[  685.626461][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  685.944419][   T30] audit: type=1107 audit(1769212566.950:9): pid=20216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  686.198979][T20240] delete_channel: no stack
[  686.405433][T20246] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .���	���΁����*���]���������
[  686.515135][T20246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3731'.
[  686.527994][T20246] bridge_slave_0: entered promiscuous mode
[  686.710503][T20242] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3728'.
[  686.876314][T20268] netlink: 'syz.2.3738': attribute type 7 has an invalid length.
[  686.901666][T20268] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3738'.
[  686.988102][T20273] netlink: 532 bytes leftover after parsing attributes in process `syz.0.3740'.
[  686.999063][T20273] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  687.014512][T20276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  687.031689][T20278] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3742'.
[  687.488310][T18840] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  687.512206][T18840] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  687.522545][T18840] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  687.531622][T18840] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  687.588681][T20323] syzkaller1: entered promiscuous mode
[  687.595084][T20323] syzkaller1: entered allmulticast mode
[  687.601827][T20323] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  687.638331][T20325] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 118
[  687.752143][T20335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3758'.
[  687.825401][T20337] BUG: Bad page state in process syz.1.3758  pfn:7975e
[  687.832342][T20337] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x20000025e pfn:0x7975e
[  687.841878][T20337] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  687.849014][T20337] raw: 00fff00000000000 dead000000000040 ffff888021280000 0000000000000000
[  687.857622][T20337] raw: 000000020000025e 3fffffffffffffff 00000000ffffffff 0000000000000000
[  687.866239][T20337] page dumped because: page_pool leak
[  687.871618][T20337] page_owner tracks the page as allocated
[  687.877371][T20337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20337, tgid 20334 (syz.1.3758), ts 687825248877, free_ts 687429136537
[  687.894592][T20337]  post_alloc_hook+0x228/0x280
[  687.899368][T20337]  get_page_from_freelist+0x24dc/0x2580
[  687.904939][T20337]  __alloc_frozen_pages_noprof+0x18d/0x380
[  687.910750][T20337]  alloc_pages_bulk_noprof+0x558/0x700
[  687.916223][T20337]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  687.922302][T20337]  page_pool_alloc_frag_netmem+0x421/0x9b0
[  687.928136][T20337]  skb_pp_cow_data+0xb7b/0x1410
[  687.932989][T20337]  do_xdp_generic+0x715/0x1280
[  687.937771][T20337]  tun_get_user+0x247d/0x3dd0
[  687.942456][T20337]  tun_chr_write_iter+0x113/0x200
[  687.947501][T20337]  vfs_write+0x61d/0xb90
[  687.951752][T20337]  ksys_write+0x150/0x270
[  687.956103][T20337]  do_syscall_64+0xe2/0xf80
[  687.960609][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.966517][T20337] page last free pid 5903 tgid 5903 stack trace:
[  687.972839][T20337]  __free_frozen_pages+0xbb0/0xd10
[  687.977972][T20337]  __folio_put+0x227/0x2c0
[  687.982394][T20337]  unpin_user_pages_dirty_lock+0x391/0x500
[  687.988226][T20337]  xdp_umem_release+0xdc/0x220
[  687.992996][T20337]  process_scheduled_works+0xaec/0x17a0
[  687.998581][T20337]  worker_thread+0x89f/0xd90
[  688.003180][T20337]  kthread+0x726/0x8b0
[  688.007266][T20337]  ret_from_fork+0x51b/0xa40
[  688.011865][T20337]  ret_from_fork_asm+0x1a/0x30
[  688.016697][T20337] Modules linked in:
[  688.020609][T20337] CPU: 0 UID: 0 PID: 20337 Comm: syz.1.3758 Not tainted syzkaller #0 PREEMPT(full) 
[  688.020635][T20337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  688.020648][T20337] Call Trace:
[  688.020656][T20337]  <TASK>
[  688.020664][T20337]  dump_stack_lvl+0xe8/0x150
[  688.020693][T20337]  bad_page+0x17f/0x1c0
[  688.020720][T20337]  __free_frozen_pages+0xcc2/0xd10
[  688.020750][T20337]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  688.020798][T20337]  bpf_xdp_adjust_tail+0x1d6/0x220
[  688.020826][T20337]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  688.020846][T20337]  bpf_prog_run_generic_xdp+0x623/0x13f0
[  688.020899][T20337]  do_xdp_generic+0xa6f/0x1280
[  688.020923][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  688.020955][T20337]  ? __pfx_do_xdp_generic+0x10/0x10
[  688.020992][T20337]  ? tun_get_user+0x2354/0x3dd0
[  688.021032][T20337]  ? tun_get_user+0x2354/0x3dd0
[  688.021060][T20337]  tun_get_user+0x247d/0x3dd0
[  688.021097][T20337]  ? aa_file_perm+0x12d/0x1630
[  688.021131][T20337]  ? aa_file_perm+0x440/0x1630
[  688.021158][T20337]  ? __pfx_tun_get_user+0x10/0x10
[  688.021184][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  688.021209][T20337]  ? __pfx___futex_wait+0x10/0x10
[  688.021243][T20337]  ? ref_tracker_alloc+0x363/0x4d0
[  688.021275][T20337]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  688.021305][T20337]  ? tun_get+0x1c/0x2f0
[  688.021329][T20337]  ? tun_get+0x1c/0x2f0
[  688.021357][T20337]  ? tun_get+0x1c/0x2f0
[  688.021379][T20337]  ? tun_get+0x1c/0x2f0
[  688.021407][T20337]  tun_chr_write_iter+0x113/0x200
[  688.021431][T20337]  vfs_write+0x61d/0xb90
[  688.021455][T20337]  ? __pfx_vfs_write+0x10/0x10
[  688.021482][T20337]  ? __fget_files+0x2a/0x420
[  688.021514][T20337]  ksys_write+0x150/0x270
[  688.021535][T20337]  ? __pfx_ksys_write+0x10/0x10
[  688.021563][T20337]  do_syscall_64+0xe2/0xf80
[  688.021580][T20337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.021596][T20337]  ? trace_irq_disable+0x37/0x100
[  688.021620][T20337]  ? clear_bhb_loop+0x60/0xb0
[  688.021643][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.021660][T20337] RIP: 0033:0x7f8c6f55b58e
[  688.021676][T20337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  688.021693][T20337] RSP: 002b:00007f8c6d7f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  688.021712][T20337] RAX: ffffffffffffffda RBX: 00007f8c6d7f66c0 RCX: 00007f8c6f55b58e
[  688.021725][T20337] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  688.021737][T20337] RBP: 00007f8c6f608bf7 R08: 0000000000000000 R09: 0000000000000000
[  688.021749][T20337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  688.021758][T20337] R13: 00007f8c6f816128 R14: 00007f8c6f816090 R15: 00007fffe5fed188
[  688.021790][T20337]  </TASK>
[  688.021797][T20337] Disabling lock debugging due to kernel taint
[  688.298774][T20337] BUG: Bad page state in process syz.1.3758  pfn:527bd
[  688.305630][T20337] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x20000025f pfn:0x527bd
[  688.315198][T20337] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  688.322315][T20337] raw: 00fff00000000000 dead000000000040 ffff888021280000 0000000000000000
[  688.330906][T20337] raw: 000000020000025f 0000000000000001 00000000ffffffff 0000000000000000
[  688.339502][T20337] page dumped because: page_pool leak
[  688.344883][T20337] page_owner tracks the page as allocated
[  688.350596][T20337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20337, tgid 20334 (syz.1.3758), ts 687825222576, free_ts 687429152838
[  688.367814][T20337]  post_alloc_hook+0x228/0x280
[  688.372577][T20337]  get_page_from_freelist+0x24dc/0x2580
[  688.378143][T20337]  __alloc_frozen_pages_noprof+0x18d/0x380
[  688.383967][T20337]  alloc_pages_bulk_noprof+0x558/0x700
[  688.389406][T20337]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  688.395478][T20337]  skb_pp_cow_data+0xb59/0x1410
[  688.400352][T20337]  do_xdp_generic+0x715/0x1280
[  688.405143][T20337]  tun_get_user+0x247d/0x3dd0
[  688.409821][T20337]  tun_chr_write_iter+0x113/0x200
[  688.414852][T20337]  vfs_write+0x61d/0xb90
[  688.419092][T20337]  ksys_write+0x150/0x270
[  688.423435][T20337]  do_syscall_64+0xe2/0xf80
[  688.427936][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.433833][T20337] page last free pid 5903 tgid 5903 stack trace:
[  688.440159][T20337]  __free_frozen_pages+0xbb0/0xd10
[  688.445286][T20337]  __folio_put+0x227/0x2c0
[  688.449706][T20337]  unpin_user_pages_dirty_lock+0x391/0x500
[  688.455537][T20337]  xdp_umem_release+0xdc/0x220
[  688.460314][T20337]  process_scheduled_works+0xaec/0x17a0
[  688.465882][T20337]  worker_thread+0x89f/0xd90
[  688.470475][T20337]  kthread+0x726/0x8b0
[  688.474583][T20337]  ret_from_fork+0x51b/0xa40
[  688.479175][T20337]  ret_from_fork_asm+0x1a/0x30
[  688.483959][T20337] Modules linked in:
[  688.487864][T20337] CPU: 0 UID: 0 PID: 20337 Comm: syz.1.3758 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  688.487880][T20337] Tainted: [B]=BAD_PAGE
[  688.487884][T20337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  688.487891][T20337] Call Trace:
[  688.487896][T20337]  <TASK>
[  688.487900][T20337]  dump_stack_lvl+0xe8/0x150
[  688.487916][T20337]  bad_page+0x17f/0x1c0
[  688.487929][T20337]  __free_frozen_pages+0xcc2/0xd10
[  688.487941][T20337]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  688.487960][T20337]  bpf_xdp_adjust_tail+0x1d6/0x220
[  688.487972][T20337]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  688.487987][T20337]  bpf_prog_run_generic_xdp+0x623/0x13f0
[  688.488020][T20337]  do_xdp_generic+0xa6f/0x1280
[  688.488042][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  688.488063][T20337]  ? __pfx_do_xdp_generic+0x10/0x10
[  688.488077][T20337]  ? tun_get_user+0x2354/0x3dd0
[  688.488093][T20337]  ? tun_get_user+0x2354/0x3dd0
[  688.488104][T20337]  tun_get_user+0x247d/0x3dd0
[  688.488119][T20337]  ? aa_file_perm+0x12d/0x1630
[  688.488135][T20337]  ? aa_file_perm+0x440/0x1630
[  688.488148][T20337]  ? __pfx_tun_get_user+0x10/0x10
[  688.488160][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  688.488171][T20337]  ? __pfx___futex_wait+0x10/0x10
[  688.488186][T20337]  ? ref_tracker_alloc+0x363/0x4d0
[  688.488202][T20337]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  688.488217][T20337]  ? tun_get+0x1c/0x2f0
[  688.488229][T20337]  ? tun_get+0x1c/0x2f0
[  688.488250][T20337]  ? tun_get+0x1c/0x2f0
[  688.488269][T20337]  ? tun_get+0x1c/0x2f0
[  688.488290][T20337]  tun_chr_write_iter+0x113/0x200
[  688.488314][T20337]  vfs_write+0x61d/0xb90
[  688.488328][T20337]  ? __pfx_vfs_write+0x10/0x10
[  688.488339][T20337]  ? __fget_files+0x2a/0x420
[  688.488353][T20337]  ksys_write+0x150/0x270
[  688.488363][T20337]  ? __pfx_ksys_write+0x10/0x10
[  688.488374][T20337]  do_syscall_64+0xe2/0xf80
[  688.488384][T20337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.488393][T20337]  ? trace_irq_disable+0x37/0x100
[  688.488406][T20337]  ? clear_bhb_loop+0x60/0xb0
[  688.488418][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.488428][T20337] RIP: 0033:0x7f8c6f55b58e
[  688.488437][T20337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  688.488446][T20337] RSP: 002b:00007f8c6d7f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  688.488457][T20337] RAX: ffffffffffffffda RBX: 00007f8c6d7f66c0 RCX: 00007f8c6f55b58e
[  688.488465][T20337] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  688.488472][T20337] RBP: 00007f8c6f608bf7 R08: 0000000000000000 R09: 0000000000000000
[  688.488479][T20337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  688.488485][T20337] R13: 00007f8c6f816128 R14: 00007f8c6f816090 R15: 00007fffe5fed188
[  688.488496][T20337]  </TASK>
[  688.488503][T20337] BUG: Bad page state in process syz.1.3758  pfn:61990
[  688.771838][T20337] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000260 pfn:0x61990
[  688.781317][T20337] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  688.788443][T20337] raw: 00fff00000000000 dead000000000040 ffff888021280000 0000000000000000
[  688.797035][T20337] raw: 0000000200000260 0000000000000001 00000000ffffffff 0000000000000000
[  688.805628][T20337] page dumped because: page_pool leak
[  688.810977][T20337] page_owner tracks the page as allocated
[  688.816695][T20337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20337, tgid 20334 (syz.1.3758), ts 687825205440, free_ts 687429168585
[  688.833899][T20337]  post_alloc_hook+0x228/0x280
[  688.838644][T20337]  get_page_from_freelist+0x24dc/0x2580
[  688.844224][T20337]  __alloc_frozen_pages_noprof+0x18d/0x380
[  688.850029][T20337]  alloc_pages_bulk_noprof+0x558/0x700
[  688.855500][T20337]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  688.861570][T20337]  skb_pp_cow_data+0xb59/0x1410
[  688.866435][T20337]  do_xdp_generic+0x715/0x1280
[  688.871198][T20337]  tun_get_user+0x247d/0x3dd0
[  688.875898][T20337]  tun_chr_write_iter+0x113/0x200
[  688.880948][T20337]  vfs_write+0x61d/0xb90
[  688.885211][T20337]  ksys_write+0x150/0x270
[  688.889540][T20337]  do_syscall_64+0xe2/0xf80
[  688.894064][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.899957][T20337] page last free pid 5903 tgid 5903 stack trace:
[  688.906287][T20337]  __free_frozen_pages+0xbb0/0xd10
[  688.911397][T20337]  __folio_put+0x227/0x2c0
[  688.915820][T20337]  unpin_user_pages_dirty_lock+0x391/0x500
[  688.921629][T20337]  xdp_umem_release+0xdc/0x220
[  688.926403][T20337]  process_scheduled_works+0xaec/0x17a0
[  688.931949][T20337]  worker_thread+0x89f/0xd90
[  688.936545][T20337]  kthread+0x726/0x8b0
[  688.940615][T20337]  ret_from_fork+0x51b/0xa40
[  688.945211][T20337]  ret_from_fork_asm+0x1a/0x30
[  688.949980][T20337] Modules linked in:
[  688.953887][T20337] CPU: 0 UID: 0 PID: 20337 Comm: syz.1.3758 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  688.953914][T20337] Tainted: [B]=BAD_PAGE
[  688.953920][T20337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  688.953940][T20337] Call Trace:
[  688.953946][T20337]  <TASK>
[  688.953953][T20337]  dump_stack_lvl+0xe8/0x150
[  688.953978][T20337]  bad_page+0x17f/0x1c0
[  688.954002][T20337]  __free_frozen_pages+0xcc2/0xd10
[  688.954025][T20337]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  688.954062][T20337]  bpf_xdp_adjust_tail+0x1d6/0x220
[  688.954085][T20337]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  688.954101][T20337]  bpf_prog_run_generic_xdp+0x623/0x13f0
[  688.954136][T20337]  do_xdp_generic+0xa6f/0x1280
[  688.954157][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  688.954180][T20337]  ? __pfx_do_xdp_generic+0x10/0x10
[  688.954206][T20337]  ? tun_get_user+0x2354/0x3dd0
[  688.954234][T20337]  ? tun_get_user+0x2354/0x3dd0
[  688.954254][T20337]  tun_get_user+0x247d/0x3dd0
[  688.954281][T20337]  ? aa_file_perm+0x12d/0x1630
[  688.954308][T20337]  ? aa_file_perm+0x440/0x1630
[  688.954334][T20337]  ? __pfx_tun_get_user+0x10/0x10
[  688.954356][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  688.954375][T20337]  ? __pfx___futex_wait+0x10/0x10
[  688.954401][T20337]  ? ref_tracker_alloc+0x363/0x4d0
[  688.954429][T20337]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  688.954456][T20337]  ? tun_get+0x1c/0x2f0
[  688.954475][T20337]  ? tun_get+0x1c/0x2f0
[  688.954496][T20337]  ? tun_get+0x1c/0x2f0
[  688.954515][T20337]  ? tun_get+0x1c/0x2f0
[  688.954537][T20337]  tun_chr_write_iter+0x113/0x200
[  688.954558][T20337]  vfs_write+0x61d/0xb90
[  688.954579][T20337]  ? __pfx_vfs_write+0x10/0x10
[  688.954599][T20337]  ? __fget_files+0x2a/0x420
[  688.954625][T20337]  ksys_write+0x150/0x270
[  688.954643][T20337]  ? __pfx_ksys_write+0x10/0x10
[  688.954663][T20337]  do_syscall_64+0xe2/0xf80
[  688.954680][T20337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.954697][T20337]  ? trace_irq_disable+0x37/0x100
[  688.954720][T20337]  ? clear_bhb_loop+0x60/0xb0
[  688.954741][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.954758][T20337] RIP: 0033:0x7f8c6f55b58e
[  688.954774][T20337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  688.954792][T20337] RSP: 002b:00007f8c6d7f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  688.954813][T20337] RAX: ffffffffffffffda RBX: 00007f8c6d7f66c0 RCX: 00007f8c6f55b58e
[  688.954828][T20337] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  688.954842][T20337] RBP: 00007f8c6f608bf7 R08: 0000000000000000 R09: 0000000000000000
[  688.954855][T20337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  688.954867][T20337] R13: 00007f8c6f816128 R14: 00007f8c6f816090 R15: 00007fffe5fed188
[  688.954890][T20337]  </TASK>
[  688.954900][T20337] BUG: Bad page state in process syz.1.3758  pfn:3df4e
[  689.238094][T20337] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000261 pfn:0x3df4e
[  689.247560][T20337] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  689.254683][T20337] raw: 00fff00000000000 dead000000000040 ffff888021280000 0000000000000000
[  689.263279][T20337] raw: 0000000200000261 0000000000000001 00000000ffffffff 0000000000000000
[  689.271852][T20337] page dumped because: page_pool leak
[  689.277226][T20337] page_owner tracks the page as allocated
[  689.282962][T20337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20337, tgid 20334 (syz.1.3758), ts 687825188491, free_ts 687429184850
[  689.300170][T20337]  post_alloc_hook+0x228/0x280
[  689.304958][T20337]  get_page_from_freelist+0x24dc/0x2580
[  689.310487][T20337]  __alloc_frozen_pages_noprof+0x18d/0x380
[  689.316296][T20337]  alloc_pages_bulk_noprof+0x558/0x700
[  689.321754][T20337]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  689.327853][T20337]  skb_pp_cow_data+0xb59/0x1410
[  689.332709][T20337]  do_xdp_generic+0x715/0x1280
[  689.337502][T20337]  tun_get_user+0x247d/0x3dd0
[  689.342186][T20337]  tun_chr_write_iter+0x113/0x200
[  689.347229][T20337]  vfs_write+0x61d/0xb90
[  689.351471][T20337]  ksys_write+0x150/0x270
[  689.355852][T20337]  do_syscall_64+0xe2/0xf80
[  689.360366][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.366284][T20337] page last free pid 5903 tgid 5903 stack trace:
[  689.372602][T20337]  __free_frozen_pages+0xbb0/0xd10
[  689.377721][T20337]  __folio_put+0x227/0x2c0
[  689.382136][T20337]  unpin_user_pages_dirty_lock+0x391/0x500
[  689.387951][T20337]  xdp_umem_release+0xdc/0x220
[  689.392725][T20337]  process_scheduled_works+0xaec/0x17a0
[  689.398296][T20337]  worker_thread+0x89f/0xd90
[  689.402894][T20337]  kthread+0x726/0x8b0
[  689.406978][T20337]  ret_from_fork+0x51b/0xa40
[  689.411563][T20337]  ret_from_fork_asm+0x1a/0x30
[  689.416339][T20337] Modules linked in:
[  689.420235][T20337] CPU: 0 UID: 0 PID: 20337 Comm: syz.1.3758 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  689.420251][T20337] Tainted: [B]=BAD_PAGE
[  689.420254][T20337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  689.420261][T20337] Call Trace:
[  689.420266][T20337]  <TASK>
[  689.420270][T20337]  dump_stack_lvl+0xe8/0x150
[  689.420285][T20337]  bad_page+0x17f/0x1c0
[  689.420300][T20337]  __free_frozen_pages+0xcc2/0xd10
[  689.420312][T20337]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  689.420330][T20337]  bpf_xdp_adjust_tail+0x1d6/0x220
[  689.420342][T20337]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  689.420352][T20337]  bpf_prog_run_generic_xdp+0x623/0x13f0
[  689.420371][T20337]  do_xdp_generic+0xa6f/0x1280
[  689.420383][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  689.420396][T20337]  ? __pfx_do_xdp_generic+0x10/0x10
[  689.420410][T20337]  ? tun_get_user+0x2354/0x3dd0
[  689.420425][T20337]  ? tun_get_user+0x2354/0x3dd0
[  689.420436][T20337]  tun_get_user+0x247d/0x3dd0
[  689.420451][T20337]  ? aa_file_perm+0x12d/0x1630
[  689.420466][T20337]  ? aa_file_perm+0x440/0x1630
[  689.420480][T20337]  ? __pfx_tun_get_user+0x10/0x10
[  689.420491][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  689.420502][T20337]  ? __pfx___futex_wait+0x10/0x10
[  689.420519][T20337]  ? ref_tracker_alloc+0x363/0x4d0
[  689.420546][T20337]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  689.420572][T20337]  ? tun_get+0x1c/0x2f0
[  689.420589][T20337]  ? tun_get+0x1c/0x2f0
[  689.420601][T20337]  ? tun_get+0x1c/0x2f0
[  689.420611][T20337]  ? tun_get+0x1c/0x2f0
[  689.420623][T20337]  tun_chr_write_iter+0x113/0x200
[  689.420635][T20337]  vfs_write+0x61d/0xb90
[  689.420646][T20337]  ? __pfx_vfs_write+0x10/0x10
[  689.420657][T20337]  ? __fget_files+0x2a/0x420
[  689.420671][T20337]  ksys_write+0x150/0x270
[  689.420680][T20337]  ? __pfx_ksys_write+0x10/0x10
[  689.420691][T20337]  do_syscall_64+0xe2/0xf80
[  689.420701][T20337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.420711][T20337]  ? trace_irq_disable+0x37/0x100
[  689.420723][T20337]  ? clear_bhb_loop+0x60/0xb0
[  689.420734][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.420744][T20337] RIP: 0033:0x7f8c6f55b58e
[  689.420754][T20337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  689.420762][T20337] RSP: 002b:00007f8c6d7f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  689.420773][T20337] RAX: ffffffffffffffda RBX: 00007f8c6d7f66c0 RCX: 00007f8c6f55b58e
[  689.420781][T20337] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  689.420788][T20337] RBP: 00007f8c6f608bf7 R08: 0000000000000000 R09: 0000000000000000
[  689.420794][T20337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  689.420800][T20337] R13: 00007f8c6f816128 R14: 00007f8c6f816090 R15: 00007fffe5fed188
[  689.420811][T20337]  </TASK>
[  689.420818][T20337] BUG: Bad page state in process syz.1.3758  pfn:6bfc2
[  689.704026][T20337] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000262 pfn:0x6bfc2
[  689.713488][T20337] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  689.720599][T20337] raw: 00fff00000000000 dead000000000040 ffff888021280000 0000000000000000
[  689.729199][T20337] raw: 0000000200000262 0000000000000001 00000000ffffffff 0000000000000000
[  689.737788][T20337] page dumped because: page_pool leak
[  689.743138][T20337] page_owner tracks the page as allocated
[  689.748878][T20337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20337, tgid 20334 (syz.1.3758), ts 687825171689, free_ts 687429201250
[  689.766100][T20337]  post_alloc_hook+0x228/0x280
[  689.770872][T20337]  get_page_from_freelist+0x24dc/0x2580
[  689.776427][T20337]  __alloc_frozen_pages_noprof+0x18d/0x380
[  689.782235][T20337]  alloc_pages_bulk_noprof+0x558/0x700
[  689.787714][T20337]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  689.793815][T20337]  skb_pp_cow_data+0xb59/0x1410
[  689.798665][T20337]  do_xdp_generic+0x715/0x1280
[  689.803445][T20337]  tun_get_user+0x247d/0x3dd0
[  689.808125][T20337]  tun_chr_write_iter+0x113/0x200
[  689.813129][T20337]  vfs_write+0x61d/0xb90
[  689.817378][T20337]  ksys_write+0x150/0x270
[  689.821705][T20337]  do_syscall_64+0xe2/0xf80
[  689.826215][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.832107][T20337] page last free pid 5903 tgid 5903 stack trace:
[  689.838440][T20337]  __free_frozen_pages+0xbb0/0xd10
[  689.843569][T20337]  __folio_put+0x227/0x2c0
[  689.847981][T20337]  unpin_user_pages_dirty_lock+0x391/0x500
[  689.853801][T20337]  xdp_umem_release+0xdc/0x220
[  689.858572][T20337]  process_scheduled_works+0xaec/0x17a0
[  689.864124][T20337]  worker_thread+0x89f/0xd90
[  689.868713][T20337]  kthread+0x726/0x8b0
[  689.872765][T20337]  ret_from_fork+0x51b/0xa40
[  689.877356][T20337]  ret_from_fork_asm+0x1a/0x30
[  689.882129][T20337] Modules linked in:
[  689.886042][T20337] CPU: 0 UID: 0 PID: 20337 Comm: syz.1.3758 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  689.886068][T20337] Tainted: [B]=BAD_PAGE
[  689.886074][T20337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  689.886086][T20337] Call Trace:
[  689.886092][T20337]  <TASK>
[  689.886099][T20337]  dump_stack_lvl+0xe8/0x150
[  689.886123][T20337]  bad_page+0x17f/0x1c0
[  689.886147][T20337]  __free_frozen_pages+0xcc2/0xd10
[  689.886174][T20337]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  689.886210][T20337]  bpf_xdp_adjust_tail+0x1d6/0x220
[  689.886233][T20337]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  689.886250][T20337]  bpf_prog_run_generic_xdp+0x623/0x13f0
[  689.886284][T20337]  do_xdp_generic+0xa6f/0x1280
[  689.886306][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  689.886328][T20337]  ? __pfx_do_xdp_generic+0x10/0x10
[  689.886352][T20337]  ? tun_get_user+0x2354/0x3dd0
[  689.886381][T20337]  ? tun_get_user+0x2354/0x3dd0
[  689.886402][T20337]  tun_get_user+0x247d/0x3dd0
[  689.886428][T20337]  ? aa_file_perm+0x12d/0x1630
[  689.886457][T20337]  ? aa_file_perm+0x440/0x1630
[  689.886482][T20337]  ? __pfx_tun_get_user+0x10/0x10
[  689.886504][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  689.886524][T20337]  ? __pfx___futex_wait+0x10/0x10
[  689.886551][T20337]  ? ref_tracker_alloc+0x363/0x4d0
[  689.886578][T20337]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  689.886605][T20337]  ? tun_get+0x1c/0x2f0
[  689.886625][T20337]  ? tun_get+0x1c/0x2f0
[  689.886647][T20337]  ? tun_get+0x1c/0x2f0
[  689.886666][T20337]  ? tun_get+0x1c/0x2f0
[  689.886688][T20337]  tun_chr_write_iter+0x113/0x200
[  689.886710][T20337]  vfs_write+0x61d/0xb90
[  689.886730][T20337]  ? __pfx_vfs_write+0x10/0x10
[  689.886751][T20337]  ? __fget_files+0x2a/0x420
[  689.886776][T20337]  ksys_write+0x150/0x270
[  689.886794][T20337]  ? __pfx_ksys_write+0x10/0x10
[  689.886814][T20337]  do_syscall_64+0xe2/0xf80
[  689.886832][T20337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.886859][T20337]  ? trace_irq_disable+0x37/0x100
[  689.886882][T20337]  ? clear_bhb_loop+0x60/0xb0
[  689.886902][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.886920][T20337] RIP: 0033:0x7f8c6f55b58e
[  689.886937][T20337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  689.886953][T20337] RSP: 002b:00007f8c6d7f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  689.886973][T20337] RAX: ffffffffffffffda RBX: 00007f8c6d7f66c0 RCX: 00007f8c6f55b58e
[  689.886987][T20337] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  689.886999][T20337] RBP: 00007f8c6f608bf7 R08: 0000000000000000 R09: 0000000000000000
[  689.887012][T20337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  689.887023][T20337] R13: 00007f8c6f816128 R14: 00007f8c6f816090 R15: 00007fffe5fed188
[  689.887043][T20337]  </TASK>
[  689.887054][T20337] BUG: Bad page state in process syz.1.3758  pfn:3e68d
[  690.170224][T20337] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000263 pfn:0x3e68d
[  690.179707][T20337] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  690.186865][T20337] raw: 00fff00000000000 dead000000000040 ffff888021280000 0000000000000000
[  690.195475][T20337] raw: 0000000200000263 0000000000000001 00000000ffffffff 0000000000000000
[  690.204087][T20337] page dumped because: page_pool leak
[  690.209447][T20337] page_owner tracks the page as allocated
[  690.215179][T20337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20337, tgid 20334 (syz.1.3758), ts 687825154481, free_ts 687429217948
[  690.232387][T20337]  post_alloc_hook+0x228/0x280
[  690.237164][T20337]  get_page_from_freelist+0x24dc/0x2580
[  690.242718][T20337]  __alloc_frozen_pages_noprof+0x18d/0x380
[  690.248535][T20337]  alloc_pages_bulk_noprof+0x558/0x700
[  690.254017][T20337]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  690.260092][T20337]  skb_pp_cow_data+0xb59/0x1410
[  690.264951][T20337]  do_xdp_generic+0x715/0x1280
[  690.269718][T20337]  tun_get_user+0x247d/0x3dd0
[  690.274398][T20337]  tun_chr_write_iter+0x113/0x200
[  690.279418][T20337]  vfs_write+0x61d/0xb90
[  690.283670][T20337]  ksys_write+0x150/0x270
[  690.287994][T20337]  do_syscall_64+0xe2/0xf80
[  690.292475][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.298367][T20337] page last free pid 5903 tgid 5903 stack trace:
[  690.304699][T20337]  __free_frozen_pages+0xbb0/0xd10
[  690.309791][T20337]  __folio_put+0x227/0x2c0
[  690.314221][T20337]  unpin_user_pages_dirty_lock+0x391/0x500
[  690.320032][T20337]  xdp_umem_release+0xdc/0x220
[  690.324833][T20337]  process_scheduled_works+0xaec/0x17a0
[  690.330381][T20337]  worker_thread+0x89f/0xd90
[  690.335003][T20337]  kthread+0x726/0x8b0
[  690.339077][T20337]  ret_from_fork+0x51b/0xa40
[  690.343691][T20337]  ret_from_fork_asm+0x1a/0x30
[  690.348459][T20337] Modules linked in:
[  690.352335][T20337] CPU: 0 UID: 0 PID: 20337 Comm: syz.1.3758 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  690.352360][T20337] Tainted: [B]=BAD_PAGE
[  690.352366][T20337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  690.352378][T20337] Call Trace:
[  690.352385][T20337]  <TASK>
[  690.352393][T20337]  dump_stack_lvl+0xe8/0x150
[  690.352409][T20337]  bad_page+0x17f/0x1c0
[  690.352423][T20337]  __free_frozen_pages+0xcc2/0xd10
[  690.352435][T20337]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  690.352453][T20337]  bpf_xdp_adjust_tail+0x1d6/0x220
[  690.352465][T20337]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  690.352475][T20337]  bpf_prog_run_generic_xdp+0x623/0x13f0
[  690.352494][T20337]  do_xdp_generic+0xa6f/0x1280
[  690.352506][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  690.352518][T20337]  ? __pfx_do_xdp_generic+0x10/0x10
[  690.352533][T20337]  ? tun_get_user+0x2354/0x3dd0
[  690.352549][T20337]  ? tun_get_user+0x2354/0x3dd0
[  690.352560][T20337]  tun_get_user+0x247d/0x3dd0
[  690.352575][T20337]  ? aa_file_perm+0x12d/0x1630
[  690.352591][T20337]  ? aa_file_perm+0x440/0x1630
[  690.352604][T20337]  ? __pfx_tun_get_user+0x10/0x10
[  690.352616][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  690.352627][T20337]  ? __pfx___futex_wait+0x10/0x10
[  690.352642][T20337]  ? ref_tracker_alloc+0x363/0x4d0
[  690.352657][T20337]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  690.352672][T20337]  ? tun_get+0x1c/0x2f0
[  690.352683][T20337]  ? tun_get+0x1c/0x2f0
[  690.352695][T20337]  ? tun_get+0x1c/0x2f0
[  690.352705][T20337]  ? tun_get+0x1c/0x2f0
[  690.352717][T20337]  tun_chr_write_iter+0x113/0x200
[  690.352729][T20337]  vfs_write+0x61d/0xb90
[  690.352740][T20337]  ? __pfx_vfs_write+0x10/0x10
[  690.352751][T20337]  ? __fget_files+0x2a/0x420
[  690.352765][T20337]  ksys_write+0x150/0x270
[  690.352774][T20337]  ? __pfx_ksys_write+0x10/0x10
[  690.352786][T20337]  do_syscall_64+0xe2/0xf80
[  690.352795][T20337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.352806][T20337]  ? trace_irq_disable+0x37/0x100
[  690.352819][T20337]  ? clear_bhb_loop+0x60/0xb0
[  690.352830][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.352845][T20337] RIP: 0033:0x7f8c6f55b58e
[  690.352855][T20337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  690.352864][T20337] RSP: 002b:00007f8c6d7f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  690.352875][T20337] RAX: ffffffffffffffda RBX: 00007f8c6d7f66c0 RCX: 00007f8c6f55b58e
[  690.352883][T20337] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  690.352889][T20337] RBP: 00007f8c6f608bf7 R08: 0000000000000000 R09: 0000000000000000
[  690.352896][T20337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  690.352902][T20337] R13: 00007f8c6f816128 R14: 00007f8c6f816090 R15: 00007fffe5fed188
[  690.352913][T20337]  </TASK>
[  690.352920][T20337] BUG: Bad page state in process syz.1.3758  pfn:795e5
[  690.635989][T20337] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000264 pfn:0x795e5
[  690.645448][T20337] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  690.652556][T20337] raw: 00fff00000000000 dead000000000040 ffff888021280000 0000000000000000
[  690.653308][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  690.661143][T20337] raw: 0000000200000264 0000000000000001 00000000ffffffff 0000000000000000
[  690.669114][    C1] lec:lec_tx_timeout: lec0
[  690.677680][T20337] page dumped because: page_pool leak
[  690.687437][T20337] page_owner tracks the page as allocated
[  690.693130][T20337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20337, tgid 20334 (syz.1.3758), ts 687825137369, free_ts 687429236247
[  690.710321][T20337]  post_alloc_hook+0x228/0x280
[  690.715100][T20337]  get_page_from_freelist+0x24dc/0x2580
[  690.720629][T20337]  __alloc_frozen_pages_noprof+0x18d/0x380
[  690.726441][T20337]  alloc_pages_bulk_noprof+0x558/0x700
[  690.731901][T20337]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  690.737996][T20337]  skb_pp_cow_data+0xb59/0x1410
[  690.742851][T20337]  do_xdp_generic+0x715/0x1280
[  690.747631][T20337]  tun_get_user+0x247d/0x3dd0
[  690.752313][T20337]  tun_chr_write_iter+0x113/0x200
[  690.757364][T20337]  vfs_write+0x61d/0xb90
[  690.761603][T20337]  ksys_write+0x150/0x270
[  690.765936][T20337]  do_syscall_64+0xe2/0xf80
[  690.770450][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.776359][T20337] page last free pid 5903 tgid 5903 stack trace:
[  690.782673][T20337]  __free_frozen_pages+0xbb0/0xd10
[  690.787805][T20337]  __folio_put+0x227/0x2c0
[  690.792220][T20337]  unpin_user_pages_dirty_lock+0x391/0x500
[  690.798061][T20337]  xdp_umem_release+0xdc/0x220
[  690.802823][T20337]  process_scheduled_works+0xaec/0x17a0
[  690.808373][T20337]  worker_thread+0x89f/0xd90
[  690.812958][T20337]  kthread+0x726/0x8b0
[  690.817038][T20337]  ret_from_fork+0x51b/0xa40
[  690.821625][T20337]  ret_from_fork_asm+0x1a/0x30
[  690.826409][T20337] Modules linked in:
[  690.830301][T20337] CPU: 0 UID: 0 PID: 20337 Comm: syz.1.3758 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  690.830317][T20337] Tainted: [B]=BAD_PAGE
[  690.830321][T20337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  690.830328][T20337] Call Trace:
[  690.830333][T20337]  <TASK>
[  690.830338][T20337]  dump_stack_lvl+0xe8/0x150
[  690.830353][T20337]  bad_page+0x17f/0x1c0
[  690.830367][T20337]  __free_frozen_pages+0xcc2/0xd10
[  690.830379][T20337]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  690.830398][T20337]  bpf_xdp_adjust_tail+0x1d6/0x220
[  690.830410][T20337]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  690.830419][T20337]  bpf_prog_run_generic_xdp+0x623/0x13f0
[  690.830438][T20337]  do_xdp_generic+0xa6f/0x1280
[  690.830450][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  690.830463][T20337]  ? __pfx_do_xdp_generic+0x10/0x10
[  690.830477][T20337]  ? tun_get_user+0x2354/0x3dd0
[  690.830492][T20337]  ? tun_get_user+0x2354/0x3dd0
[  690.830503][T20337]  tun_get_user+0x247d/0x3dd0
[  690.830518][T20337]  ? aa_file_perm+0x12d/0x1630
[  690.830533][T20337]  ? aa_file_perm+0x440/0x1630
[  690.830547][T20337]  ? __pfx_tun_get_user+0x10/0x10
[  690.830559][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  690.830569][T20337]  ? __pfx___futex_wait+0x10/0x10
[  690.830584][T20337]  ? ref_tracker_alloc+0x363/0x4d0
[  690.830599][T20337]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  690.830614][T20337]  ? tun_get+0x1c/0x2f0
[  690.830625][T20337]  ? tun_get+0x1c/0x2f0
[  690.830637][T20337]  ? tun_get+0x1c/0x2f0
[  690.830647][T20337]  ? tun_get+0x1c/0x2f0
[  690.830659][T20337]  tun_chr_write_iter+0x113/0x200
[  690.830671][T20337]  vfs_write+0x61d/0xb90
[  690.830683][T20337]  ? __pfx_vfs_write+0x10/0x10
[  690.830694][T20337]  ? __fget_files+0x2a/0x420
[  690.830708][T20337]  ksys_write+0x150/0x270
[  690.830717][T20337]  ? __pfx_ksys_write+0x10/0x10
[  690.830729][T20337]  do_syscall_64+0xe2/0xf80
[  690.830738][T20337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.830748][T20337]  ? trace_irq_disable+0x37/0x100
[  690.830761][T20337]  ? clear_bhb_loop+0x60/0xb0
[  690.830777][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.830787][T20337] RIP: 0033:0x7f8c6f55b58e
[  690.830796][T20337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  690.830805][T20337] RSP: 002b:00007f8c6d7f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  690.830816][T20337] RAX: ffffffffffffffda RBX: 00007f8c6d7f66c0 RCX: 00007f8c6f55b58e
[  690.830824][T20337] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  690.830831][T20337] RBP: 00007f8c6f608bf7 R08: 0000000000000000 R09: 0000000000000000
[  690.830838][T20337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  690.830844][T20337] R13: 00007f8c6f816128 R14: 00007f8c6f816090 R15: 00007fffe5fed188
[  690.830855][T20337]  </TASK>
[  690.830861][T20337] BUG: Bad page state in process syz.1.3758  pfn:3aa5f
[  691.113842][T20337] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000265 pfn:0x3aa5f
[  691.123301][T20337] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  691.130408][T20337] raw: 00fff00000000000 dead000000000040 ffff888021280000 0000000000000000
[  691.139020][T20337] raw: 0000000200000265 0000000000000001 00000000ffffffff 0000000000000000
[  691.147606][T20337] page dumped because: page_pool leak
[  691.152952][T20337] page_owner tracks the page as allocated
[  691.158665][T20337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20337, tgid 20334 (syz.1.3758), ts 687825120210, free_ts 687429252401
[  691.175878][T20337]  post_alloc_hook+0x228/0x280
[  691.180647][T20337]  get_page_from_freelist+0x24dc/0x2580
[  691.186235][T20337]  __alloc_frozen_pages_noprof+0x18d/0x380
[  691.192047][T20337]  alloc_pages_bulk_noprof+0x558/0x700
[  691.197552][T20337]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  691.203635][T20337]  skb_pp_cow_data+0xb59/0x1410
[  691.208465][T20337]  do_xdp_generic+0x715/0x1280
[  691.213210][T20337]  tun_get_user+0x247d/0x3dd0
[  691.217898][T20337]  tun_chr_write_iter+0x113/0x200
[  691.222932][T20337]  vfs_write+0x61d/0xb90
[  691.227186][T20337]  ksys_write+0x150/0x270
[  691.231510][T20337]  do_syscall_64+0xe2/0xf80
[  691.236026][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.241919][T20337] page last free pid 5903 tgid 5903 stack trace:
[  691.248245][T20337]  __free_frozen_pages+0xbb0/0xd10
[  691.253375][T20337]  __folio_put+0x227/0x2c0
[  691.257788][T20337]  unpin_user_pages_dirty_lock+0x391/0x500
[  691.263597][T20337]  xdp_umem_release+0xdc/0x220
[  691.268365][T20337]  process_scheduled_works+0xaec/0x17a0
[  691.273926][T20337]  worker_thread+0x89f/0xd90
[  691.278514][T20337]  kthread+0x726/0x8b0
[  691.282562][T20337]  ret_from_fork+0x51b/0xa40
[  691.287152][T20337]  ret_from_fork_asm+0x1a/0x30
[  691.291921][T20337] Modules linked in:
[  691.295825][T20337] CPU: 0 UID: 0 PID: 20337 Comm: syz.1.3758 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  691.295851][T20337] Tainted: [B]=BAD_PAGE
[  691.295857][T20337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  691.295869][T20337] Call Trace:
[  691.295875][T20337]  <TASK>
[  691.295883][T20337]  dump_stack_lvl+0xe8/0x150
[  691.295907][T20337]  bad_page+0x17f/0x1c0
[  691.295931][T20337]  __free_frozen_pages+0xcc2/0xd10
[  691.295954][T20337]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  691.295990][T20337]  bpf_xdp_adjust_tail+0x1d6/0x220
[  691.296012][T20337]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  691.296030][T20337]  bpf_prog_run_generic_xdp+0x623/0x13f0
[  691.296065][T20337]  do_xdp_generic+0xa6f/0x1280
[  691.296087][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  691.296110][T20337]  ? __pfx_do_xdp_generic+0x10/0x10
[  691.296138][T20337]  ? tun_get_user+0x2354/0x3dd0
[  691.296166][T20337]  ? tun_get_user+0x2354/0x3dd0
[  691.296187][T20337]  tun_get_user+0x247d/0x3dd0
[  691.296213][T20337]  ? aa_file_perm+0x12d/0x1630
[  691.296242][T20337]  ? aa_file_perm+0x440/0x1630
[  691.296267][T20337]  ? __pfx_tun_get_user+0x10/0x10
[  691.296287][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  691.296306][T20337]  ? __pfx___futex_wait+0x10/0x10
[  691.296333][T20337]  ? ref_tracker_alloc+0x363/0x4d0
[  691.296361][T20337]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  691.296388][T20337]  ? tun_get+0x1c/0x2f0
[  691.296408][T20337]  ? tun_get+0x1c/0x2f0
[  691.296430][T20337]  ? tun_get+0x1c/0x2f0
[  691.296450][T20337]  ? tun_get+0x1c/0x2f0
[  691.296472][T20337]  tun_chr_write_iter+0x113/0x200
[  691.296495][T20337]  vfs_write+0x61d/0xb90
[  691.296515][T20337]  ? __pfx_vfs_write+0x10/0x10
[  691.296536][T20337]  ? __fget_files+0x2a/0x420
[  691.296562][T20337]  ksys_write+0x150/0x270
[  691.296580][T20337]  ? __pfx_ksys_write+0x10/0x10
[  691.296602][T20337]  do_syscall_64+0xe2/0xf80
[  691.296619][T20337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.296637][T20337]  ? trace_irq_disable+0x37/0x100
[  691.296661][T20337]  ? clear_bhb_loop+0x60/0xb0
[  691.296682][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.296700][T20337] RIP: 0033:0x7f8c6f55b58e
[  691.296715][T20337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  691.296741][T20337] RSP: 002b:00007f8c6d7f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  691.296759][T20337] RAX: ffffffffffffffda RBX: 00007f8c6d7f66c0 RCX: 00007f8c6f55b58e
[  691.296774][T20337] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  691.296787][T20337] RBP: 00007f8c6f608bf7 R08: 0000000000000000 R09: 0000000000000000
[  691.296802][T20337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  691.296814][T20337] R13: 00007f8c6f816128 R14: 00007f8c6f816090 R15: 00007fffe5fed188
[  691.296838][T20337]  </TASK>
[  691.296849][T20337] BUG: Bad page state in process syz.1.3758  pfn:8c567
[  691.579992][T20337] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000266 pfn:0x8c567
[  691.589474][T20337] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  691.596604][T20337] raw: 00fff00000000000 dead000000000040 ffff888021280000 0000000000000000
[  691.605205][T20337] raw: 0000000200000266 0000000000000001 00000000ffffffff 0000000000000000
[  691.613803][T20337] page dumped because: page_pool leak
[  691.619161][T20337] page_owner tracks the page as allocated
[  691.624877][T20337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20337, tgid 20334 (syz.1.3758), ts 687825103203, free_ts 687429268363
[  691.642079][T20337]  post_alloc_hook+0x228/0x280
[  691.646850][T20337]  get_page_from_freelist+0x24dc/0x2580
[  691.652397][T20337]  __alloc_frozen_pages_noprof+0x18d/0x380
[  691.658207][T20337]  alloc_pages_bulk_noprof+0x558/0x700
[  691.663678][T20337]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  691.669737][T20337]  skb_pp_cow_data+0xb59/0x1410
[  691.674590][T20337]  do_xdp_generic+0x715/0x1280
[  691.679356][T20337]  tun_get_user+0x247d/0x3dd0
[  691.684038][T20337]  tun_chr_write_iter+0x113/0x200
[  691.689060][T20337]  vfs_write+0x61d/0xb90
[  691.693311][T20337]  ksys_write+0x150/0x270
[  691.697638][T20337]  do_syscall_64+0xe2/0xf80
[  691.702121][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.708015][T20337] page last free pid 5903 tgid 5903 stack trace:
[  691.714345][T20337]  __free_frozen_pages+0xbb0/0xd10
[  691.719436][T20337]  __folio_put+0x227/0x2c0
[  691.723861][T20337]  unpin_user_pages_dirty_lock+0x391/0x500
[  691.729673][T20337]  xdp_umem_release+0xdc/0x220
[  691.734476][T20337]  process_scheduled_works+0xaec/0x17a0
[  691.740021][T20337]  worker_thread+0x89f/0xd90
[  691.744645][T20337]  kthread+0x726/0x8b0
[  691.748717][T20337]  ret_from_fork+0x51b/0xa40
[  691.753313][T20337]  ret_from_fork_asm+0x1a/0x30
[  691.758080][T20337] Modules linked in:
[  691.761959][T20337] CPU: 0 UID: 0 PID: 20337 Comm: syz.1.3758 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  691.761975][T20337] Tainted: [B]=BAD_PAGE
[  691.761978][T20337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  691.761985][T20337] Call Trace:
[  691.761990][T20337]  <TASK>
[  691.761994][T20337]  dump_stack_lvl+0xe8/0x150
[  691.762009][T20337]  bad_page+0x17f/0x1c0
[  691.762023][T20337]  __free_frozen_pages+0xcc2/0xd10
[  691.762035][T20337]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  691.762054][T20337]  bpf_xdp_adjust_tail+0x1d6/0x220
[  691.762066][T20337]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  691.762076][T20337]  bpf_prog_run_generic_xdp+0x623/0x13f0
[  691.762095][T20337]  do_xdp_generic+0xa6f/0x1280
[  691.762107][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  691.762120][T20337]  ? __pfx_do_xdp_generic+0x10/0x10
[  691.762135][T20337]  ? tun_get_user+0x2354/0x3dd0
[  691.762151][T20337]  ? tun_get_user+0x2354/0x3dd0
[  691.762162][T20337]  tun_get_user+0x247d/0x3dd0
[  691.762176][T20337]  ? aa_file_perm+0x12d/0x1630
[  691.762191][T20337]  ? aa_file_perm+0x440/0x1630
[  691.762205][T20337]  ? __pfx_tun_get_user+0x10/0x10
[  691.762217][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  691.762228][T20337]  ? __pfx___futex_wait+0x10/0x10
[  691.762243][T20337]  ? ref_tracker_alloc+0x363/0x4d0
[  691.762258][T20337]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  691.762273][T20337]  ? tun_get+0x1c/0x2f0
[  691.762285][T20337]  ? tun_get+0x1c/0x2f0
[  691.762296][T20337]  ? tun_get+0x1c/0x2f0
[  691.762307][T20337]  ? tun_get+0x1c/0x2f0
[  691.762319][T20337]  tun_chr_write_iter+0x113/0x200
[  691.762332][T20337]  vfs_write+0x61d/0xb90
[  691.762343][T20337]  ? __pfx_vfs_write+0x10/0x10
[  691.762354][T20337]  ? __fget_files+0x2a/0x420
[  691.762368][T20337]  ksys_write+0x150/0x270
[  691.762378][T20337]  ? __pfx_ksys_write+0x10/0x10
[  691.762389][T20337]  do_syscall_64+0xe2/0xf80
[  691.762398][T20337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.762408][T20337]  ? trace_irq_disable+0x37/0x100
[  691.762421][T20337]  ? clear_bhb_loop+0x60/0xb0
[  691.762433][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.762443][T20337] RIP: 0033:0x7f8c6f55b58e
[  691.762452][T20337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  691.762461][T20337] RSP: 002b:00007f8c6d7f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  691.762473][T20337] RAX: ffffffffffffffda RBX: 00007f8c6d7f66c0 RCX: 00007f8c6f55b58e
[  691.762487][T20337] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  691.762498][T20337] RBP: 00007f8c6f608bf7 R08: 0000000000000000 R09: 0000000000000000
[  691.762510][T20337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  691.762521][T20337] R13: 00007f8c6f816128 R14: 00007f8c6f816090 R15: 00007fffe5fed188
[  691.762541][T20337]  </TASK>
[  691.762549][T20337] BUG: Bad page state in process syz.1.3758  pfn:78d5f
[  692.045547][T20337] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000267 pfn:0x78d5f
[  692.055041][T20337] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  692.062154][T20337] raw: 00fff00000000000 dead000000000040 ffff888021280000 0000000000000000
[  692.070768][T20337] raw: 0000000200000267 0000000000000001 00000000ffffffff 0000000000000000
[  692.079358][T20337] page dumped because: page_pool leak
[  692.084726][T20337] page_owner tracks the page as allocated
[  692.090434][T20337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20337, tgid 20334 (syz.1.3758), ts 687825086165, free_ts 687429285845
[  692.107628][T20337]  post_alloc_hook+0x228/0x280
[  692.112393][T20337]  get_page_from_freelist+0x24dc/0x2580
[  692.117946][T20337]  __alloc_frozen_pages_noprof+0x18d/0x380
[  692.123765][T20337]  alloc_pages_bulk_noprof+0x558/0x700
[  692.129206][T20337]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  692.135278][T20337]  skb_pp_cow_data+0xb59/0x1410
[  692.140124][T20337]  do_xdp_generic+0x715/0x1280
[  692.144892][T20337]  tun_get_user+0x247d/0x3dd0
[  692.149569][T20337]  tun_chr_write_iter+0x113/0x200
[  692.154619][T20337]  vfs_write+0x61d/0xb90
[  692.158869][T20337]  ksys_write+0x150/0x270
[  692.163181][T20337]  do_syscall_64+0xe2/0xf80
[  692.167726][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.173638][T20337] page last free pid 5903 tgid 5903 stack trace:
[  692.179965][T20337]  __free_frozen_pages+0xbb0/0xd10
[  692.185108][T20337]  __folio_put+0x227/0x2c0
[  692.189553][T20337]  unpin_user_pages_dirty_lock+0x391/0x500
[  692.195394][T20337]  xdp_umem_release+0xdc/0x220
[  692.200161][T20337]  process_scheduled_works+0xaec/0x17a0
[  692.205727][T20337]  worker_thread+0x89f/0xd90
[  692.210315][T20337]  kthread+0x726/0x8b0
[  692.214393][T20337]  ret_from_fork+0x51b/0xa40
[  692.218979][T20337]  ret_from_fork_asm+0x1a/0x30
[  692.223755][T20337] Modules linked in:
[  692.227653][T20337] CPU: 0 UID: 0 PID: 20337 Comm: syz.1.3758 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  692.227669][T20337] Tainted: [B]=BAD_PAGE
[  692.227673][T20337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  692.227680][T20337] Call Trace:
[  692.227684][T20337]  <TASK>
[  692.227689][T20337]  dump_stack_lvl+0xe8/0x150
[  692.227704][T20337]  bad_page+0x17f/0x1c0
[  692.227718][T20337]  __free_frozen_pages+0xcc2/0xd10
[  692.227730][T20337]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  692.227748][T20337]  bpf_xdp_adjust_tail+0x1d6/0x220
[  692.227760][T20337]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  692.227770][T20337]  bpf_prog_run_generic_xdp+0x623/0x13f0
[  692.227804][T20337]  do_xdp_generic+0xa6f/0x1280
[  692.227827][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  692.227842][T20337]  ? __pfx_do_xdp_generic+0x10/0x10
[  692.227857][T20337]  ? tun_get_user+0x2354/0x3dd0
[  692.227873][T20337]  ? tun_get_user+0x2354/0x3dd0
[  692.227883][T20337]  tun_get_user+0x247d/0x3dd0
[  692.227898][T20337]  ? aa_file_perm+0x12d/0x1630
[  692.227915][T20337]  ? aa_file_perm+0x440/0x1630
[  692.227929][T20337]  ? __pfx_tun_get_user+0x10/0x10
[  692.227941][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  692.227952][T20337]  ? __pfx___futex_wait+0x10/0x10
[  692.227966][T20337]  ? ref_tracker_alloc+0x363/0x4d0
[  692.227981][T20337]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  692.227996][T20337]  ? tun_get+0x1c/0x2f0
[  692.228007][T20337]  ? tun_get+0x1c/0x2f0
[  692.228018][T20337]  ? tun_get+0x1c/0x2f0
[  692.228029][T20337]  ? tun_get+0x1c/0x2f0
[  692.228040][T20337]  tun_chr_write_iter+0x113/0x200
[  692.228052][T20337]  vfs_write+0x61d/0xb90
[  692.228063][T20337]  ? __pfx_vfs_write+0x10/0x10
[  692.228074][T20337]  ? __fget_files+0x2a/0x420
[  692.228088][T20337]  ksys_write+0x150/0x270
[  692.228098][T20337]  ? __pfx_ksys_write+0x10/0x10
[  692.228109][T20337]  do_syscall_64+0xe2/0xf80
[  692.228119][T20337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.228129][T20337]  ? trace_irq_disable+0x37/0x100
[  692.228142][T20337]  ? clear_bhb_loop+0x60/0xb0
[  692.228153][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.228163][T20337] RIP: 0033:0x7f8c6f55b58e
[  692.228173][T20337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  692.228181][T20337] RSP: 002b:00007f8c6d7f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  692.228193][T20337] RAX: ffffffffffffffda RBX: 00007f8c6d7f66c0 RCX: 00007f8c6f55b58e
[  692.228200][T20337] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  692.228207][T20337] RBP: 00007f8c6f608bf7 R08: 0000000000000000 R09: 0000000000000000
[  692.228213][T20337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  692.228219][T20337] R13: 00007f8c6f816128 R14: 00007f8c6f816090 R15: 00007fffe5fed188
[  692.228230][T20337]  </TASK>
[  692.228238][T20337] BUG: Bad page state in process syz.1.3758  pfn:3e71d
[  692.511397][T20337] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000268 pfn:0x3e71d
[  692.520873][T20337] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  692.527996][T20337] raw: 00fff00000000000 dead000000000040 ffff888021280000 0000000000000000
[  692.536586][T20337] raw: 0000000200000268 0000000000000001 00000000ffffffff 0000000000000000
[  692.545171][T20337] page dumped because: page_pool leak
[  692.550518][T20337] page_owner tracks the page as allocated
[  692.556236][T20337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20337, tgid 20334 (syz.1.3758), ts 687825069366, free_ts 687429302223
[  692.573445][T20337]  post_alloc_hook+0x228/0x280
[  692.578209][T20337]  get_page_from_freelist+0x24dc/0x2580
[  692.583762][T20337]  __alloc_frozen_pages_noprof+0x18d/0x380
[  692.589567][T20337]  alloc_pages_bulk_noprof+0x558/0x700
[  692.595026][T20337]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  692.601094][T20337]  skb_pp_cow_data+0xb59/0x1410
[  692.605949][T20337]  do_xdp_generic+0x715/0x1280
[  692.610712][T20337]  tun_get_user+0x247d/0x3dd0
[  692.615412][T20337]  tun_chr_write_iter+0x113/0x200
[  692.620443][T20337]  vfs_write+0x61d/0xb90
[  692.624698][T20337]  ksys_write+0x150/0x270
[  692.629020][T20337]  do_syscall_64+0xe2/0xf80
[  692.633528][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.639416][T20337] page last free pid 5903 tgid 5903 stack trace:
[  692.645749][T20337]  __free_frozen_pages+0xbb0/0xd10
[  692.650853][T20337]  __folio_put+0x227/0x2c0
[  692.655272][T20337]  unpin_user_pages_dirty_lock+0x391/0x500
[  692.661082][T20337]  xdp_umem_release+0xdc/0x220
[  692.665859][T20337]  process_scheduled_works+0xaec/0x17a0
[  692.671403][T20337]  worker_thread+0x89f/0xd90
[  692.675996][T20337]  kthread+0x726/0x8b0
[  692.680067][T20337]  ret_from_fork+0x51b/0xa40
[  692.684662][T20337]  ret_from_fork_asm+0x1a/0x30
[  692.689430][T20337] Modules linked in:
[  692.693336][T20337] CPU: 0 UID: 0 PID: 20337 Comm: syz.1.3758 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  692.693363][T20337] Tainted: [B]=BAD_PAGE
[  692.693370][T20337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  692.693382][T20337] Call Trace:
[  692.693390][T20337]  <TASK>
[  692.693398][T20337]  dump_stack_lvl+0xe8/0x150
[  692.693424][T20337]  bad_page+0x17f/0x1c0
[  692.693450][T20337]  __free_frozen_pages+0xcc2/0xd10
[  692.693473][T20337]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  692.693509][T20337]  bpf_xdp_adjust_tail+0x1d6/0x220
[  692.693531][T20337]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  692.693545][T20337]  bpf_prog_run_generic_xdp+0x623/0x13f0
[  692.693579][T20337]  do_xdp_generic+0xa6f/0x1280
[  692.693602][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  692.693635][T20337]  ? __pfx_do_xdp_generic+0x10/0x10
[  692.693661][T20337]  ? tun_get_user+0x2354/0x3dd0
[  692.693690][T20337]  ? tun_get_user+0x2354/0x3dd0
[  692.693713][T20337]  tun_get_user+0x247d/0x3dd0
[  692.693741][T20337]  ? aa_file_perm+0x12d/0x1630
[  692.693768][T20337]  ? aa_file_perm+0x440/0x1630
[  692.693793][T20337]  ? __pfx_tun_get_user+0x10/0x10
[  692.693815][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  692.693834][T20337]  ? __pfx___futex_wait+0x10/0x10
[  692.693861][T20337]  ? ref_tracker_alloc+0x363/0x4d0
[  692.693889][T20337]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  692.693916][T20337]  ? tun_get+0x1c/0x2f0
[  692.693936][T20337]  ? tun_get+0x1c/0x2f0
[  692.693959][T20337]  ? tun_get+0x1c/0x2f0
[  692.693978][T20337]  ? tun_get+0x1c/0x2f0
[  692.694000][T20337]  tun_chr_write_iter+0x113/0x200
[  692.694023][T20337]  vfs_write+0x61d/0xb90
[  692.694043][T20337]  ? __pfx_vfs_write+0x10/0x10
[  692.694064][T20337]  ? __fget_files+0x2a/0x420
[  692.694091][T20337]  ksys_write+0x150/0x270
[  692.694108][T20337]  ? __pfx_ksys_write+0x10/0x10
[  692.694130][T20337]  do_syscall_64+0xe2/0xf80
[  692.694147][T20337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.694164][T20337]  ? trace_irq_disable+0x37/0x100
[  692.694189][T20337]  ? clear_bhb_loop+0x60/0xb0
[  692.694209][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.694227][T20337] RIP: 0033:0x7f8c6f55b58e
[  692.694243][T20337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  692.694260][T20337] RSP: 002b:00007f8c6d7f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  692.694279][T20337] RAX: ffffffffffffffda RBX: 00007f8c6d7f66c0 RCX: 00007f8c6f55b58e
[  692.694294][T20337] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  692.694307][T20337] RBP: 00007f8c6f608bf7 R08: 0000000000000000 R09: 0000000000000000
[  692.694318][T20337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  692.694330][T20337] R13: 00007f8c6f816128 R14: 00007f8c6f816090 R15: 00007fffe5fed188
[  692.694352][T20337]  </TASK>
[  692.694364][T20337] BUG: Bad page state in process syz.1.3758  pfn:348ae
[  692.814366][ T5833] Bluetooth: hci1: command 0x041b tx timeout
[  692.814694][T20337] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000269 pfn:0x348ae
[  692.992817][T20337] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  692.999940][T20337] raw: 00fff00000000000 dead000000000040 ffff888021280000 0000000000000000
[  693.008528][T20337] raw: 0000000200000269 0000000000000001 00000000ffffffff 0000000000000000
[  693.017115][T20337] page dumped because: page_pool leak
[  693.022475][T20337] page_owner tracks the page as allocated
[  693.028190][T20337] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20337, tgid 20334 (syz.1.3758), ts 687825053379, free_ts 687429319445
[  693.045389][T20337]  post_alloc_hook+0x228/0x280
[  693.050136][T20337]  get_page_from_freelist+0x24dc/0x2580
[  693.055696][T20337]  __alloc_frozen_pages_noprof+0x18d/0x380
[  693.061503][T20337]  alloc_pages_bulk_noprof+0x558/0x700
[  693.066980][T20337]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  693.073051][T20337]  skb_pp_cow_data+0xb59/0x1410
[  693.077930][T20337]  do_xdp_generic+0x715/0x1280
[  693.082689][T20337]  tun_get_user+0x247d/0x3dd0
[  693.087370][T20337]  tun_chr_write_iter+0x113/0x200
[  693.092394][T20337]  vfs_write+0x61d/0xb90
[  693.096639][T20337]  ksys_write+0x150/0x270
[  693.100962][T20337]  do_syscall_64+0xe2/0xf80
[  693.105468][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.111356][T20337] page last free pid 5903 tgid 5903 stack trace:
[  693.117688][T20337]  __free_frozen_pages+0xbb0/0xd10
[  693.122794][T20337]  __folio_put+0x227/0x2c0
[  693.127211][T20337]  unpin_user_pages_dirty_lock+0x391/0x500
[  693.133018][T20337]  xdp_umem_release+0xdc/0x220
[  693.137789][T20337]  process_scheduled_works+0xaec/0x17a0
[  693.143353][T20337]  worker_thread+0x89f/0xd90
[  693.147938][T20337]  kthread+0x726/0x8b0
[  693.151987][T20337]  ret_from_fork+0x51b/0xa40
[  693.156587][T20337]  ret_from_fork_asm+0x1a/0x30
[  693.161357][T20337] Modules linked in:
[  693.165259][T20337] CPU: 0 UID: 0 PID: 20337 Comm: syz.1.3758 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  693.165287][T20337] Tainted: [B]=BAD_PAGE
[  693.165294][T20337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  693.165306][T20337] Call Trace:
[  693.165312][T20337]  <TASK>
[  693.165319][T20337]  dump_stack_lvl+0xe8/0x150
[  693.165344][T20337]  bad_page+0x17f/0x1c0
[  693.165368][T20337]  __free_frozen_pages+0xcc2/0xd10
[  693.165392][T20337]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  693.165428][T20337]  bpf_xdp_adjust_tail+0x1d6/0x220
[  693.165450][T20337]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  693.165466][T20337]  bpf_prog_run_generic_xdp+0x623/0x13f0
[  693.165501][T20337]  do_xdp_generic+0xa6f/0x1280
[  693.165524][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  693.165548][T20337]  ? __pfx_do_xdp_generic+0x10/0x10
[  693.165575][T20337]  ? tun_get_user+0x2354/0x3dd0
[  693.165612][T20337]  ? tun_get_user+0x2354/0x3dd0
[  693.165630][T20337]  tun_get_user+0x247d/0x3dd0
[  693.165652][T20337]  ? aa_file_perm+0x12d/0x1630
[  693.165678][T20337]  ? aa_file_perm+0x440/0x1630
[  693.165701][T20337]  ? __pfx_tun_get_user+0x10/0x10
[  693.165721][T20337]  ? __lock_acquire+0x6b5/0x2cf0
[  693.165741][T20337]  ? __pfx___futex_wait+0x10/0x10
[  693.165765][T20337]  ? ref_tracker_alloc+0x363/0x4d0
[  693.165790][T20337]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  693.165815][T20337]  ? tun_get+0x1c/0x2f0
[  693.165836][T20337]  ? tun_get+0x1c/0x2f0
[  693.165857][T20337]  ? tun_get+0x1c/0x2f0
[  693.165874][T20337]  ? tun_get+0x1c/0x2f0
[  693.165892][T20337]  tun_chr_write_iter+0x113/0x200
[  693.165912][T20337]  vfs_write+0x61d/0xb90
[  693.165930][T20337]  ? __pfx_vfs_write+0x10/0x10
[  693.165949][T20337]  ? __fget_files+0x2a/0x420
[  693.165974][T20337]  ksys_write+0x150/0x270
[  693.165991][T20337]  ? __pfx_ksys_write+0x10/0x10
[  693.166010][T20337]  do_syscall_64+0xe2/0xf80
[  693.166026][T20337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.166043][T20337]  ? trace_irq_disable+0x37/0x100
[  693.166066][T20337]  ? clear_bhb_loop+0x60/0xb0
[  693.166087][T20337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.166105][T20337] RIP: 0033:0x7f8c6f55b58e
[  693.166120][T20337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  693.166136][T20337] RSP: 002b:00007f8c6d7f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  693.166156][T20337] RAX: ffffffffffffffda RBX: 00007f8c6d7f66c0 RCX: 00007f8c6f55b58e
[  693.166169][T20337] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  693.166181][T20337] RBP: 00007f8c6f608bf7 R08: 0000000000000000 R09: 0000000000000000
[  693.166192][T20337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  693.166202][T20337] R13: 00007f8c6f816128 R14: 00007f8c6f816090 R15: 00007fffe5fed188
[  693.166221][T20337]  </TASK>
[  695.835379][T11541] lec:lec_start_xmit: lec0:No lecd attached