last executing test programs:

5.550724042s ago: executing program 1 (id=104):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x6a040000)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
sendmsg$inet(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="b301916c88b830ac1d513d80506c351315b67509c34a558231904eb8a11147fe7558f28ca0899c1a5890b62ee3aa9a0422ba2a2f4ec31322fc8591ad4e877a21182a3c4bab1850e1dcbaacae38d6d322a52d56af07a854ff9f844a84f126cb9c29a9a0978ce84f464911cc7c97d7", 0x6e}, {&(0x7f00000007c0)="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", 0x605}], 0x2, &(0x7f00000018c0)=ANY=[], 0xf0}, 0x4081)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x9}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x25, 0xc, @void}, 0x10)
r1 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x7, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073117300000000008510000002000000850000002c00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
unshare(0x42000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0xbcff, 0x0, 0x0)
writev(r4, &(0x7f0000001300), 0x0)
socket(0xa, 0x5, 0x7)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)

3.519286288s ago: executing program 4 (id=123):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
unshare(0x62040200)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10)
r6 = socket$inet6(0xa, 0x80003, 0xff)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000400)={0xa, &(0x7f0000000d40)=[{@none}, {}, {}, {@fixed}, {@none}, {}, {@fixed}, {@none}, {}, {@none}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffd, 0x4)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @rand_addr=0x64010102}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="9a238ff0d31d"], 0x57)

3.517050596s ago: executing program 1 (id=124):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff81}, {0x0, 0x3, 0x78, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r7, r8}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x7, 0x5, 0xf, 0x2, 0x9, 0x0, 0x98, 0x4, 0xf, 0x2, 0xf42, 0x8, 0x7, 0x0, 0x0, [0x8002, 0xffff]}})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="18e57547118703d8982533fd6e57da1c52217217d88381ff63bda49fd79ed5aa861470583041be36efa454c834d6548c73aa84702a65926b975b926e85163d332b0f50f2bd3b2ed776affd2a8868e1c201f88b0a02f914d4f76f9e867a1d2c018ce176960ab8a22ab218a8c7a213896de5854831fe9da80a5a294cee", 0x7c}], 0x1}, 0x4)

3.215104166s ago: executing program 2 (id=125):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x34}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000140)="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", 0x116)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d40460000001400000011"], 0x6c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085000000b4"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xcbfc0f2606956c3f, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.756283338s ago: executing program 2 (id=129):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket(0x400000000010, 0x3, 0x0) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a40)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffe0, 0x1}, {0xf, 0xfff2}}}, 0x24}}, 0x0)
getsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000000), &(0x7f0000000540)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}], 0x1, 0x4000880) (async)
sendmmsg$inet(r3, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}], 0x1, 0x4000880)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000002c0)={r5, 0x1ff, 0x30}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001800)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20090}, 0x0)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x240, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x240, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x800006, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x5, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x2, 0x5, 0x4023}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x3, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3f0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0) (async)
socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0005d94b16a3ab00000000000200000000000000000062000900000005003d0003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) (async)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0005d94b16a3ab00000000000200000000000000000062000900000005003d0003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
accept4(r10, 0x0, 0x0, 0x800) (async)
r11 = accept4(r10, 0x0, 0x0, 0x800)
recvmmsg$unix(r11, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000100)=0x20, 0x4)

2.523569697s ago: executing program 1 (id=131):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f000000f840), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r6 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r7 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', <r9=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f000000f980)={0x0, 0x0, &(0x7f000000f940)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05042bbd7000fbdbdf25210000001c002d8008000200110000f30400010004000000050004060000000008000300", @ANYRES32=r11], 0x38}}, 0x54)
r12 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r12, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004)

2.448174861s ago: executing program 2 (id=132):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f0000000a00))
socket(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100008000000000043163bda935673100100000c000000"], 0x10}, 0x20004000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r1, &(0x7f0000000140)={0x2, 0xffff, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000180)=0x3ff, 0x4)
recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000fa1000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800a0014000180c200000100000800090000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000884)

1.986753628s ago: executing program 2 (id=136):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000000c0)="ee783a", 0x3}], 0x1, 0x4)
unshare(0x4020180)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0))
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
accept4$inet6(r0, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000300), 0x0) (fail_nth: 4)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0xfffd, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x82, 0x2}, @generic={0x7, 0x6, "bb8e1297"}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)

1.96107693s ago: executing program 0 (id=137):
r0 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x4040000)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000100)={0x2002})
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x8, @loopback, 0x3000000}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1)

1.898242636s ago: executing program 1 (id=138):
socket(0x1d, 0x2, 0x6)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32], 0x10)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
readv(r2, &(0x7f0000000200), 0x10000000000000ba)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r4, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a)

1.865304289s ago: executing program 4 (id=139):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x34}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000140)="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", 0x116)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d40460000001400000011"], 0x6c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085000000b4"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xcbfc0f2606956c3f, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.593174068s ago: executing program 0 (id=140):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async)
unshare(0x62040200) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2c, r2, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050)
shutdown(0xffffffffffffffff, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="180000e22a005600010600000000000000000700000000000000e5abcf46ae8fd6c74cdbbe3acfbd3d846afb7e153614ab5da1672a67906cf92ab6499d8fdbeb3057006a798265957ba17d507c8b8fd2820b7c082bfa3fd9c4d22d0813bd5c23828ca54688517a3af03e4e37182afe71b66c98d5f627cd8225defb8db47a085730af1f71d87529e78f4f3ce17de6d9fe7702277f792bdb9047a5d4f8ce7cc9e7d22765f4598e779741d816765347bd24b87314baa7896182574c690ef90d9f3d0b31b98642761cf4a5ef984f4d"], 0x18}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES8=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000017c0)=@delchain={0xd1c, 0x65, 0x800, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x2, 0xffe3}, {0x2, 0xfff1}, {0x4, 0xfff2}}, [@f_rsvp6={{0xa}, {0x48, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @local}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x8, 0xc57c}, {0x77, 0xda45, 0x1}, 0x99, 0x0, 0x2}}, @TCA_RSVP_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}]}}, @f_rsvp6={{0xa}, {0x9c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x400, 0x800, 0x2}, {0x5d5b, 0x4, 0x1}, 0xeb, 0x40}}, @TCA_RSVP_POLICE={0x18, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_RSVP_POLICE={0x4c, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe6d, 0x20000000, 0xfffff3c8, 0x4, 0x106dd3e0, {0x8, 0x1, 0x6, 0x5, 0x6, 0x6}, {0xc, 0x0, 0x9, 0x5, 0x10, 0x9}, 0x222a, 0x0, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_RSVP_DST={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x11}}]}}, @f_tcindex={{0xc}, {0x624, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x4}, @TCA_TCINDEX_POLICE={0x41c, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x5, 0xa, 0x9, 0x6, 0x8, 0x7, 0x9dc2, 0xe0000000, 0x5, 0x80, 0x5, 0x2, 0x56f, 0x3, 0xfffffe37, 0x80, 0x1ff, 0x10, 0xfffffffa, 0x3, 0x7, 0xb823, 0x8, 0x0, 0x9, 0x401, 0x8, 0x80000000, 0x3, 0x6, 0x6a, 0x4, 0x1, 0x6, 0x0, 0xff, 0x1ff, 0xd, 0x4, 0x401, 0xa, 0xe, 0x0, 0x7fff, 0x1, 0x7, 0x8, 0x8, 0xffffffff, 0x3, 0x0, 0x7f8b, 0x7, 0x9, 0x2, 0x7fff, 0x10001, 0x120000, 0x5, 0x8, 0x5, 0x8, 0xd5, 0x8, 0x6, 0xb9, 0x6, 0x0, 0xff, 0xffff, 0x1, 0x4, 0xf82, 0xc768, 0x9, 0x8, 0xfffffeff, 0xbf4, 0x8, 0x1, 0x8, 0x800, 0x1ff, 0x7fffffff, 0x0, 0x4, 0xd93ebe7, 0x99, 0x6, 0x8, 0xb1, 0x69e, 0x10000, 0x6, 0xffffffff, 0x3, 0x70, 0x0, 0x80000001, 0xea3, 0x0, 0x28a4, 0x78a, 0x6, 0xf0, 0x8, 0xb5b, 0x4, 0x3e, 0x5, 0x1ff, 0x6, 0x2, 0x400, 0xffffff97, 0xc51f, 0x1b0b, 0x5, 0x400, 0x400, 0x3ff, 0xfff, 0xa3, 0xff, 0x4, 0xb8, 0x400, 0x1, 0x5, 0x6, 0xfff, 0x1, 0x0, 0x9, 0x0, 0x4, 0x8, 0x200, 0x800, 0x6, 0x9, 0x7, 0x4, 0xd6e, 0x1, 0x3800000, 0x1c, 0xffffffff, 0x0, 0x8, 0x6, 0x3, 0x0, 0xffffb751, 0x1, 0x4, 0x101, 0x7, 0xf, 0x0, 0x8, 0x2, 0x1, 0x5, 0x1, 0x100, 0x80000000, 0x3ff, 0x1, 0xa, 0xfffffff3, 0x1, 0x3, 0xf34, 0x4, 0xd32, 0xa38, 0x8000, 0x6, 0x7fffffff, 0x2, 0xbd3, 0x13800, 0x7, 0x321, 0x7, 0x0, 0x6, 0x7, 0x40e96ac7, 0x1, 0x8, 0x8, 0xe33, 0xe, 0x5, 0x6, 0x13, 0x101, 0x2, 0x9, 0xa, 0x29, 0x0, 0x3, 0x5c, 0x10, 0x6, 0x6, 0x10001, 0x2, 0x3, 0x81, 0x80, 0x10001, 0x3, 0xb9, 0x4, 0x4, 0xd, 0x400, 0x1, 0x9, 0x6, 0x800, 0xfffffff8, 0x80, 0x3, 0x28, 0x5, 0x7, 0x2, 0x0, 0xf0, 0x10000, 0x8, 0xe85a, 0x7, 0x8, 0x6, 0x5, 0x38, 0x6, 0xc26, 0x9, 0xffff7fff, 0x8, 0xfffffff6, 0x9, 0x0, 0x9, 0x64, 0x4, 0x0, 0x100]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}, @TCA_TCINDEX_ACT={0xd4, 0x7, [@m_ife={0xd0, 0x9, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfff, 0x8, 0x2, 0x0, 0x81}, 0x1}}, @TCA_IFE_SMAC={0xa}]}, {0x7e, 0x6, "47eda553ffcdb6e36fdc4d3b6a9b64efeff70b50f80a76baef0ab38373930f4021b36892b6537b06881af6a41ffb2892ee0ab8e5faa00fccd8b7ef26173c317c09e919a9bf3561236a7cd7f695a5bd86e6bb4edb674606b72cf592008c275b10d44a44dc8ca61252ee5ebf87e3a53afe5f29bfd143c437a0f116"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x7}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_ACT={0x110, 0x7, [@m_skbmod={0x10c, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0xbe, 0x6, "182543113ef2dc623fd8a8d872577708a6864ae0194d71a573432cc7e99e2561713b6001a430d88fc4d89f8b2bec8e67c492396b481775de25f419f5186de41c65d84c0b1d367c514f7a6fa86e19f0bde3568a0bf8b551076162095de329f146fa27eaa40aaca63441d5d4ee0f530a2215c6e1268875ddcc41d09c5aa7d3e0454ed7756867682e386d8e6a07294447bd6d42ff9f3bb99f59eff9dd681e196284bb6862591c7fc856e55c15bc4c57bcb0532d4e7cc57ee5704826"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x8}]}}, @f_rsvp6={{0xa}, {0x578, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @loopback}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7fe4, 0xd}}, @TCA_RSVP_DST={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_RSVP_ACT={0x524, 0x6, [@m_ct={0x108, 0x4, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0xcd, 0x6, "01c439526797417012d940965d1680d1f42b6f12904ea2d65de49b7d64ecf851f9340f8bb75deba0458db02ad0157f812ec44b475649b18664b8e2e6b68a1bd1c0eec00a718f433aebdc696b928e467285539008a941d609899bf899df63069972151bbd3927c92eb246f8ebd46280ccc1d88e2d1f805c1f4271e85c5d0340d8c53fe9da9f308db35845c0e14b04c1b2c07a4755170507dadec5e7aa94e7ec2871ae666026e531856520d6a82d04de5703ae880ba6a81dfcbcbe4322f4a58f97b11f47836d8a86e009"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x38, 0x12, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_ct={0xf8, 0x7, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}]}, {0x90, 0x6, "093bda47ea09cd8d32eb4379271e7349404d0e9274e9d4f360a26e1ae751c4c632784654aaf003e3774b209b45601c05a41aa2b958b07331678b96472740c714b0420ecec423ad7da2e1d8926e536dacea4f9f2a17dc7233eb02bdbd0b7319888e42da796c8ab2615be8fbafd7002359131d23792908cbe79b9edfdda9f14f3ea79b343a1aa89803c30ea6a8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x110, 0x12, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x401, 0x7, 0x10, 0x88}, {0x3, 0x40, 0xa2, 0x1}, {0xfb, 0x3f, 0xf, 0x8}, {0x1, 0x0, 0xd, 0x2}, {0x7, 0x5, 0xa2, 0x2}, {0x4de0, 0xd, 0x2, 0xb}, {0x4, 0x3, 0x7f, 0x400}, {0x101, 0x60, 0xf8, 0x60}, {0x2, 0x1, 0xf5, 0x5}]}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0xf000, 0x1, 0x5, 0x295cd476}, {0x100, 0x1, 0xff, 0x2}, {0x8, 0x0, 0x4, 0x101}, {0x73d3, 0x1, 0x2e, 0x2}, {0x5, 0x3, 0x4, 0x1cc}, {0x8, 0x4, 0x40, 0x4}, {0x9, 0x4, 0x10, 0x9}]}]}, {0x48, 0x6, "848a45530b934f3f1017e0bf517191f19b398f605467025f3e048ae34cb82dc570d7a6ff483ba58ffe691eceb14b11ca20add524673ea1ac2b8693ad08886a4233588a7d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x128, 0x5, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x100, 0x5, 0x1, 0xf083, 0x100}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x81, 0x8, 0x4, 0xffffff7f}, 0x3ff}}]}, {0xbe, 0x6, "8890a2b45cede08c068fa6a93de63e6d80111dba2de623504685950ffe26da7c05f5e6ab756a6c096991359621bfac98c3b34dd179d448d417436076d5010582d5c608f505234bdad2088394c08030d92222d02f4b6ecb3b85f7ce5962e24bc8c696f361a44a4e3e41ec7e11bb8a7192a291239a7e54884d37a32a8f0bb85c3b7fb569decf96b42271af78723de49a11b8f5dae4724824e558654ee2186849b3a582cc1249f8d3bdc69b3aae0848349f0d94b2bf554a0b119fd1"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0xb0, 0x10, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x80000001, 0x6, 0x1}}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x52, 0x6, "e20e58d0c3a063f81295b1bdcec769718aaf20ea45a36c6ac68b482250a25247e5c95c27cb48cb89076b4e8cc7877ee1f5394389f99503be616ed833ee2e49629f81661fb4e21875a4d7cdd28434"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x4, 0x7ff}, {0x2, 0x4, 0x7}, 0x84, 0x42}}]}}, @f_rsvp={{0x9}, {0x4}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0xfff9}]}}, @f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0xe759}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xe3d2}]}}]}, 0xd1c}, 0x1, 0x0, 0x0, 0x80}, 0x24000001) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="64000000020603000000000000000000000000060900020073797a3100000000050001000700000014000780080013005607497400050004000000000016000300686173683a6e65742c706f72742c6e657400"/100], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
socket$kcm(0x29, 0xf, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

1.198604502s ago: executing program 4 (id=142):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x16, 0xfc0, 0x66, 0x0, 0xb, 0x73, 0x0, @private=0xa010100, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00001d2c6afd0100000000ffdbdf25017c0000080c7d018000"/36], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc010)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r2)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', <r4=>0x0, 0x4, 0xe5, 0x2, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, @private0, 0x80, 0x700, 0x9, 0x6}})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x29, 0x1, 0x3)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x220, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x845)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1003000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x24}}, 0x10000081)
socketpair(0x2b, 0x80000, 0x9, &(0x7f0000000280)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$AUDIT_TTY_SET(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x3f9, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004040}, 0x20000801)

1.082360021s ago: executing program 1 (id=143):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8d43, 0x0)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff02000000000000000000000000000100004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESDEC=r1], 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x62040200)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xff, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0xa}, 0x94)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r7, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x8746c4b304b3a641)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01001c0001800600010002000000080003000a0101020800060003000000000000000000"], 0x30}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.054712932s ago: executing program 3 (id=144):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="720ac4ff00000000711090000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07000000000000000000050000001c000380080004000000000b0800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

888.416106ms ago: executing program 3 (id=145):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000002000)=ANY=[@ANYBLOB="b40000000000000079104800000000001500000000000000950000000000000064a4713c632dee78dcdedc2dd03a79b25e129cf901332998131817427671b18e5a21536b8067c9b908d8d923e45efeab0ed09e42a8f0698163fcf16ed614f7b6d78bdf23ceb6026ff46bba78ad988171b6750d64c99ec5668fd520eaa9acbf8f796935a87d33c41257380de521185cda62b36ced8a65b7b3afc9e59f730953dacc2da2cc2233d91576ed3dc9b36a7f951fe75d3dec0d3da4544cc7d823569ecdf7cb152990c9b6b08d8e913ca0f56dbf66f446c2108f01c845baa1954d9586791f2d42d4c8ff12d0652991"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94)

804.402871ms ago: executing program 0 (id=146):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, @loopback, @loopback={0x0, 0xffff888101827518}, 0x7, 0x7, 0xffffffff}})
syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000000d]}, @cipso={0x86, 0x6}]}}}}}}, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
listen(r1, 0x5)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x4004010)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x3, 'ip6erspan0\x00', {}, 0x2000})

796.20074ms ago: executing program 3 (id=147):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
write(r0, &(0x7f00000005c0)="5a8eb46253ca9c85c566bb6c0c4acf1eb3d968360491349eb73465f1d1ff8905e7f93dc806234b80ac4bdef70f47aa408fb390e0573546b8dc358e4eef6df82698c1cc731000b7a186e88168d248b790f2a5e6f39e25ee67f9272733429f868c033e3b5887f780734e30af9033f25b94dbd90c2c265078b2baf1e3cd9e8bf76b0f8bbc039d1956aadf677cda269e853a5f3740c430823cd6259281649f99d3fbc42fbe24abfce2571ef26a21f4beefd2f15f78b3219cf479f188d17b209311002c32d5635fe75fbc52f7", 0xca)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4040810)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x15, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x7c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)

723.547081ms ago: executing program 0 (id=148):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xdc, 0x5, 0x8})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
epoll_create1(0x80000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={<r3=>0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x7, 0x800, 0xfffffff7, 0xfffffffd, 0xbcc}, &(0x7f00000000c0)=0x98)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r3, 0xf1}, 0x8)

652.229023ms ago: executing program 4 (id=149):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r0, r0, 0x1ff, 0x7c, &(0x7f0000000080)="04995ca5053431e4bf90a868d3b692aae6f6b3aa5536239cdbef2b06ca43f33c846c84e3a4c1b405e1a459f8fb0a62de9698f3185a5147ba0e7509ea64ff8a94e5b5ff8a2c08208d0c7c864b825003755619fbfe50acdb5484246e5adb7603745ce6aca2e03da683784360dfcf4e943e5190de969fd8eccd9254efcc", 0x3, 0x2, 0x401, 0x8, 0x9, 0x1, 0x48, 'syz1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x88002, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000001040)={0x5, &(0x7f0000000cc0)=[{@fixed}, {@fixed}, {@none}, {@fixed}, {}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0xe}]}}}]}, 0x44}}, 0x0)

595.198291ms ago: executing program 3 (id=150):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000140), 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x0, 0x0, 0x8000}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000620000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r7 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r7, &(0x7f0000000040), 0x10)
listen(r7, 0x0)
r8 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r8, &(0x7f0000000080), 0x10)
sendmsg$nl_route_sched(r8, 0x0, 0x4004014)
setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8)
ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f0000000680)="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")
close(r8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc40400d2532e764975f03f1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200a011ea665c45a3449abe802f5ab3e89cf40b858e217ce740068720000074e468eea3fcfcf498278ad15f5f87e1c26433a8acdc0e65888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c00000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d01000000520655a8056085f4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891e7d87a79d6fce424c2200af6cb784a1975fa657de38a3a32a4fd67ce446adb431d07db79240aca1dd9ba02450500000000000000e645f091231b986e77d05d988d6edc6f9b4eb883ec8f878300cabf2b5543ffc1bdb92618242852e6e8b3e56fefbfff81669557b3809d8c396d2c0361629d1822f722ec23812770d72cd0010000007889b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b0a0ae6feb6737c275dc2740f742b5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fe7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff251845d0fff45bdbaeba4d4e3c6f7f623579435b2c505fb711300000000040000000000000000000000004c00e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7611589906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6cfa4966e5937562a5649a1a0000a042a7097ddefe0671a5767014b09b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7be49833f3c435f9700bc84680549f9eb16682ecb72277ffaca907a3eac4bfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c5a87013b98649805216631e20d07dff3ae567ca0d38a828542625fc6096aedc0ac5c144f0965071274bea051007e398cf9090c53d4b8b7dc784e3d83b78b007a43d744aa99d6a7c576e20b4281eff511122ccb399bcef0a0471639c81aab7445cebfc9b00b31fcbaf63086b3c16f51b593acee0b3a4830dd6af1accb15cc6163cabc01442527aa10000000000000000a4ba25997affe74ec552bf9deafbd63e"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r9, 0xe0, &(0x7f00000007c0)={0x0, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r10}, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map, r6, 0x2f, 0x34, r6, @void, @void, @void, @value=r10}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x29, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffbd, 0x0, 0x0, 0x0}, 0x94)
unshare(0x28000600)
r11 = syz_init_net_socket$ax25(0x3, 0x5, 0x6)
connect$ax25(r11, &(0x7f00000001c0)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x48)

589.131802ms ago: executing program 2 (id=151):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4048800)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x9c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x56}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}}, 0x24000840)

564.865837ms ago: executing program 0 (id=152):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x34}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000140)="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", 0x116)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d40460000001400000011"], 0x6c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085000000b4"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xcbfc0f2606956c3f, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

509.329226ms ago: executing program 1 (id=153):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000340)=""/199, 0xc7}], 0x2}, 0x2)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, &(0x7f0000000500))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000300)=<r3=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000680)={{}, r3, 0x10, @inherit={0x50, &(0x7f0000000200)=ANY=[@ANYBLOB]}, @devid})
shutdown(r2, 0x1)
recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1}, 0x5}], 0x1, 0x20, 0x0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket$inet6(0xa, 0x80002, 0x0)
r4 = socket(0x11, 0x2, 0x100001)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'wg2\x00', <r5=>0x0})
bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14)

360.556459ms ago: executing program 3 (id=154):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x11, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@cb_func={0x18, 0xd}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)

314.131362ms ago: executing program 4 (id=155):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
recvmmsg(r0, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000020", @ANYRESHEX, @ANYRES16=r0], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000065c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c000080090003400000000020000b801c0001800a0001"], 0xe0}}, 0x0)
r3 = socket(0x848000000015, 0x805, 0x0)
r4 = accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e30, 0x200000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}, 0x69)
close(0x3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040)
mmap(&(0x7f0000a62000/0x2000)=nil, 0x2000, 0x200000a, 0x13, r1, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000180))
socket$nl_crypto(0x10, 0x3, 0x15)
connect$802154_dgram(r3, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14)

252.029463ms ago: executing program 0 (id=156):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000)
r2 = accept4(r0, 0x0, 0x0, 0x80000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054)
setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r7, 0x25, 0x4, @val=@netfilter={0x0, 0x0, 0x2, 0x71e10095c446dfea}}, 0x20)
syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[], 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
r8 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r9 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r9, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1e", 0x1e}, {&(0x7f0000000080)}, {0x0}, {&(0x7f0000000540)}], 0x4, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x80}, 0x4004080)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000001040108000000000000000200000001080005400000000105000100010000000800034000002fdb08000440000000030a00020000000fff"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000)

224.273588ms ago: executing program 3 (id=157):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x5, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000002000000000000000a0000808500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r4 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300021c000000000003a715cd0c001200080008040000d7884a389e967b9e894705b077c135fd1c4a37d5988b140936aefd5769368f40653727f7526af11d10fafc11b91ced9d4ae3916383fb98fc275e11f5bed4ec3469dd878bea99164e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d6200000000000000030006000000000002000000ac141400000000000000000002000100000000000000060000000000030005000000000002"], 0xe0}, 0x1, 0x7}, 0x8800)
bpf$PROG_LOAD(0x13, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

102.629551ms ago: executing program 2 (id=158):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x5, 0x7, 0xf, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x2f00, 0xfffffffe, 0xb}})

0s ago: executing program 4 (id=159):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000140)=0x4bc, 0x4)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async, rerun: 64)
getsockopt$inet_buf(r1, 0x118, 0x1, 0x0, &(0x7f00000003c0)) (async, rerun: 64)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote, 0x4}, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) (async, rerun: 32)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8) (async, rerun: 32)
getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) (rerun: 32)
setsockopt$inet_tcp_buf(r4, 0x6, 0x1c, &(0x7f0000000600)="466ef09e65c0dfee8a652d60eb4743f0c503f12b28c8541b138bfe0deae6ac691f45766a79b142a0aab3be7ce29fc4e5c2e6a1d14d5ca396ca03718b0c18ce884769b6240df7376b2a0eca8a8bbef1bddce29c321cc0b81b111785069e4f9b00ff98a79eabb565a61c9e630022ec72a4c5072b4623cca66145ec5d425d594cc873a17d5b10142726b557a372f42171d2f8ee812f5373122381d7b2618588a56a31", 0xa1) (async)
r5 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_int(r5, 0x0, 0x7, 0x0, &(0x7f0000000500)) (async)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts.
[   81.914148][ T5815] cgroup: Unknown subsys name 'net'
[   82.123889][ T5815] cgroup: Unknown subsys name 'cpuset'
[   82.133965][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.829031][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.616634][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.626663][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.635207][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   86.643551][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.651345][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.658982][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.666704][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   86.674573][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   86.685182][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.693491][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.693888][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.701132][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.712312][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.724195][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.725347][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.734435][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.740423][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.745905][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.760510][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.765247][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   86.775869][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.783574][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.791191][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.827872][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.840954][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.422007][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   87.585500][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   87.745005][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   87.762192][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   87.786233][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   87.814347][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.822203][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.829859][ T5834] bridge_slave_0: entered allmulticast mode
[   87.837394][ T5834] bridge_slave_0: entered promiscuous mode
[   87.916503][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.924093][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.931485][ T5834] bridge_slave_1: entered allmulticast mode
[   87.938938][ T5834] bridge_slave_1: entered promiscuous mode
[   87.979403][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.986668][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.994435][ T5828] bridge_slave_0: entered allmulticast mode
[   88.002205][ T5828] bridge_slave_0: entered promiscuous mode
[   88.045852][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.053318][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.060883][ T5828] bridge_slave_1: entered allmulticast mode
[   88.068136][ T5828] bridge_slave_1: entered promiscuous mode
[   88.129897][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.173184][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.215025][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.279242][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.314019][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.321777][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.329235][ T5826] bridge_slave_0: entered allmulticast mode
[   88.337168][ T5826] bridge_slave_0: entered promiscuous mode
[   88.345638][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.353681][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.361032][ T5825] bridge_slave_0: entered allmulticast mode
[   88.368587][ T5825] bridge_slave_0: entered promiscuous mode
[   88.390531][ T5834] team0: Port device team_slave_0 added
[   88.396487][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.404115][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.411977][ T5830] bridge_slave_0: entered allmulticast mode
[   88.419394][ T5830] bridge_slave_0: entered promiscuous mode
[   88.431158][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.438353][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.445943][ T5826] bridge_slave_1: entered allmulticast mode
[   88.453269][ T5826] bridge_slave_1: entered promiscuous mode
[   88.460966][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.468228][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.475915][ T5825] bridge_slave_1: entered allmulticast mode
[   88.484200][ T5825] bridge_slave_1: entered promiscuous mode
[   88.505045][ T5834] team0: Port device team_slave_1 added
[   88.524416][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.531704][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.538959][ T5830] bridge_slave_1: entered allmulticast mode
[   88.546747][ T5830] bridge_slave_1: entered promiscuous mode
[   88.581187][ T5828] team0: Port device team_slave_0 added
[   88.638638][ T5828] team0: Port device team_slave_1 added
[   88.645456][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.652672][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.683972][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.710285][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.723216][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.746179][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.753328][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.779616][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.793884][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.805869][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.817678][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.827736][ T5840] Bluetooth: hci0: command tx timeout
[   88.834091][   T52] Bluetooth: hci3: command tx timeout
[   88.834213][   T52] Bluetooth: hci2: command tx timeout
[   88.876326][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.899895][ T5846] Bluetooth: hci4: command tx timeout
[   88.905710][ T5840] Bluetooth: hci1: command tx timeout
[   88.923527][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.931203][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.957921][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.998202][ T5825] team0: Port device team_slave_0 added
[   89.005219][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.012407][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.038656][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.064429][ T5826] team0: Port device team_slave_0 added
[   89.072763][ T5825] team0: Port device team_slave_1 added
[   89.099029][ T5830] team0: Port device team_slave_0 added
[   89.106920][ T5826] team0: Port device team_slave_1 added
[   89.139626][ T5830] team0: Port device team_slave_1 added
[   89.178496][ T5834] hsr_slave_0: entered promiscuous mode
[   89.185692][ T5834] hsr_slave_1: entered promiscuous mode
[   89.218851][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.226317][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.252874][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.289453][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.296888][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.323978][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.336337][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.343650][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.370502][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.395279][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.402574][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.429160][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.441146][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.448134][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.475021][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.511503][ T5828] hsr_slave_0: entered promiscuous mode
[   89.518058][ T5828] hsr_slave_1: entered promiscuous mode
[   89.524606][ T5828] debugfs: 'hsr0' already exists in 'hsr'
[   89.530699][ T5828] Cannot create hsr debugfs directory
[   89.537091][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.544499][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.570717][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.735610][ T5825] hsr_slave_0: entered promiscuous mode
[   89.742403][ T5825] hsr_slave_1: entered promiscuous mode
[   89.748843][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[   89.755373][ T5825] Cannot create hsr debugfs directory
[   89.765249][ T5826] hsr_slave_0: entered promiscuous mode
[   89.772231][ T5826] hsr_slave_1: entered promiscuous mode
[   89.778443][ T5826] debugfs: 'hsr0' already exists in 'hsr'
[   89.785504][ T5826] Cannot create hsr debugfs directory
[   89.847793][ T5830] hsr_slave_0: entered promiscuous mode
[   89.854352][ T5830] hsr_slave_1: entered promiscuous mode
[   89.861720][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   89.867574][ T5830] Cannot create hsr debugfs directory
[   90.342269][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   90.382670][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   90.394823][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   90.415607][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.478276][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   90.495796][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   90.517433][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   90.530271][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   90.612113][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   90.626822][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   90.639558][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   90.666630][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   90.759110][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   90.784447][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   90.804177][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   90.831668][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   90.900957][ T5846] Bluetooth: hci0: command tx timeout
[   90.903084][   T52] Bluetooth: hci3: command tx timeout
[   90.906965][ T5840] Bluetooth: hci2: command tx timeout
[   90.949095][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.961410][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.979829][ T5840] Bluetooth: hci1: command tx timeout
[   90.980257][   T52] Bluetooth: hci4: command tx timeout
[   90.991315][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.004499][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.022523][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   91.067824][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.113501][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   91.149276][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   91.160258][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.167574][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.187939][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.212463][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.219617][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.234828][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.242140][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.284093][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.291311][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.307805][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   91.341818][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.348974][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.378946][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.386161][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.463520][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.517675][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.565911][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.588562][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   91.632227][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   91.664391][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.671635][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.713675][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.720939][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.744776][  T970] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.752034][  T970] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.805644][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.812919][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.115738][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.255622][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.287925][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.492987][ T5825] veth0_vlan: entered promiscuous mode
[   92.557294][ T5834] veth0_vlan: entered promiscuous mode
[   92.572661][ T5825] veth1_vlan: entered promiscuous mode
[   92.631320][ T5834] veth1_vlan: entered promiscuous mode
[   92.642910][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.673503][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.766937][ T5828] veth0_vlan: entered promiscuous mode
[   92.812407][ T5825] veth0_macvtap: entered promiscuous mode
[   92.834628][ T5828] veth1_vlan: entered promiscuous mode
[   92.849700][ T5825] veth1_macvtap: entered promiscuous mode
[   92.892685][ T5826] veth0_vlan: entered promiscuous mode
[   92.904600][ T5834] veth0_macvtap: entered promiscuous mode
[   92.940621][ T5834] veth1_macvtap: entered promiscuous mode
[   92.970751][ T5826] veth1_vlan: entered promiscuous mode
[   92.981761][   T52] Bluetooth: hci3: command tx timeout
[   92.987397][   T52] Bluetooth: hci2: command tx timeout
[   92.987915][ T5840] Bluetooth: hci0: command tx timeout
[   93.005264][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.050245][ T5828] veth0_macvtap: entered promiscuous mode
[   93.066769][   T52] Bluetooth: hci1: command tx timeout
[   93.068736][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.072556][ T5840] Bluetooth: hci4: command tx timeout
[   93.104374][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.128939][ T5828] veth1_macvtap: entered promiscuous mode
[   93.150676][   T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.160438][   T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.174570][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.186182][   T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.195732][   T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.243716][   T80] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.271343][   T80] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.288771][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.297730][   T80] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.307294][   T80] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.325785][ T5826] veth0_macvtap: entered promiscuous mode
[   93.354848][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.388489][ T5826] veth1_macvtap: entered promiscuous mode
[   93.422957][   T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.435466][   T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.463202][   T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.486128][   T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.515876][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.530975][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.547239][ T3438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.560932][ T3438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.568868][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.605753][ T5830] veth0_vlan: entered promiscuous mode
[   93.631293][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.643951][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.655248][ T5830] veth1_vlan: entered promiscuous mode
[   93.662557][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.715348][   T80] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.746309][   T80] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.756229][   T80] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.785485][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.795591][   T80] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.806194][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   93.811138][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.891457][ T3438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.899344][ T3438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.071008][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.078890][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.107746][ T5830] veth0_macvtap: entered promiscuous mode
[   94.124393][ T5830] veth1_macvtap: entered promiscuous mode
[   94.196550][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.211419][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.285225][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.296969][ T5957] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   94.329364][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.348264][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.358617][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.363806][ T5956] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3'.
[   94.458948][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.473826][ T1159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.486423][ T5952] netlink: 'syz.0.1': attribute type 12 has an invalid length.
[   94.496339][ T1159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.535352][ T1159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.774563][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   95.028427][  T970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.065838][ T5840] Bluetooth: hci0: command tx timeout
[   95.073789][   T52] Bluetooth: hci2: command tx timeout
[   95.079368][   T52] Bluetooth: hci3: command tx timeout
[   95.101083][  T970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.170086][ T5972] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET)
[   95.178679][   T52] Bluetooth: hci1: command tx timeout
[   95.185165][ T5846] Bluetooth: hci4: command tx timeout
[   95.235890][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.264778][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.935711][ T5982] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.085405][ T5984] Zero length message leads to an empty skb
[   96.289331][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'.
[   96.394575][ T5982] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.428668][ T6001] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.616625][ T5982] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.106844][ T6006] netlink: 10856 bytes leftover after parsing attributes in process `syz.3.12'.
[   97.121958][ T5982] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.178974][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'.
[   97.251901][   T57] cfg80211: failed to load regulatory.db
[   97.393758][ T6015] netlink: 'syz.0.16': attribute type 4 has an invalid length.
[   97.561393][ T6018] netlink: 'syz.1.17': attribute type 23 has an invalid length.
[   97.579600][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'.
[   97.584989][ T6016] netlink: 'syz.0.16': attribute type 4 has an invalid length.
[   97.893778][ T6030] geneve2: entered promiscuous mode
[   97.899160][ T6030] geneve2: entered allmulticast mode
[   97.949234][ T3539] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   97.970423][ T3539] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   97.980602][ T6032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'.
[   98.002805][ T6032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.084846][ T3539] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   98.113240][ T6040] netlink: 'syz.0.22': attribute type 11 has an invalid length.
[   98.295729][ T3539] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   99.095111][ T6065] netlink: 204 bytes leftover after parsing attributes in process `syz.3.28'.
[   99.492499][ T6078] syzkaller0: entered promiscuous mode
[   99.498047][ T6078] syzkaller0: entered allmulticast mode
[   99.881031][ T6094] netlink: 'syz.0.34': attribute type 10 has an invalid length.
[   99.951555][ T6096] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.37'.
[   99.976221][ T6096] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   99.987814][ T6097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.37'.
[  100.013773][ T6094] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  100.042208][ T6105] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.36'.
[  100.540276][ T6127] netlink: 240 bytes leftover after parsing attributes in process `syz.3.41'.
[  100.577743][   T80] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.625650][ T6127] netlink: 'syz.3.41': attribute type 46 has an invalid length.
[  100.733374][ T3454] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.748856][ T6123] netlink: 'syz.3.41': attribute type 2 has an invalid length.
[  100.853534][ T6123] : entered promiscuous mode
[  100.898022][ T5982] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.007203][ T5982] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.297917][ T6141] netlink: 48 bytes leftover after parsing attributes in process `syz.1.45'.
[  101.939334][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.49'.
[  103.425601][ T6202] syzkaller1: entered promiscuous mode
[  103.444959][ T6202] syzkaller1: entered allmulticast mode
[  103.589324][ T6206] openvswitch: netlink: Message has -2 unknown bytes.
[  103.808002][ T6214] netlink: 'syz.3.61': attribute type 3 has an invalid length.
[  104.251407][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'.
[  104.683694][ T6259] netlink: 32 bytes leftover after parsing attributes in process `syz.2.71'.
[  104.753447][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.69'.
[  104.962446][ T6250] veth1_macvtap: left promiscuous mode
[  105.380266][ T6280] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  105.461537][ T6292] FAULT_INJECTION: forcing a failure.
[  105.461537][ T6292] name failslab, interval 1, probability 0, space 0, times 1
[  105.526332][ T6292] CPU: 0 UID: 0 PID: 6292 Comm: syz.0.81 Not tainted syzkaller #0 PREEMPT(full) 
[  105.526365][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  105.526386][ T6292] Call Trace:
[  105.526395][ T6292]  <TASK>
[  105.526413][ T6292]  dump_stack_lvl+0xe8/0x150
[  105.526455][ T6292]  should_fail_ex+0x414/0x560
[  105.526495][ T6292]  should_failslab+0xa8/0x100
[  105.526524][ T6292]  kmem_cache_alloc_noprof+0x88/0x710
[  105.526558][ T6292]  ? dst_alloc+0x105/0x170
[  105.526586][ T6292]  ? __local_bh_enable_ip+0xd0/0x130
[  105.526612][ T6292]  dst_alloc+0x105/0x170
[  105.526641][ T6292]  ? ip_check_mc_rcu+0x632/0x680
[  105.526667][ T6292]  ip_route_output_key_hash_rcu+0x1560/0x23e0
[  105.526700][ T6292]  ? ip_route_output_key_hash+0xc1/0x280
[  105.526725][ T6292]  ip_route_output_key_hash+0x174/0x280
[  105.526753][ T6292]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  105.526794][ T6292]  ip_route_output_flow+0x2a/0x150
[  105.526814][ T6292]  ? security_sk_classify_flow+0x70/0x180
[  105.526852][ T6292]  udp_sendmsg+0x155a/0x2350
[  105.526892][ T6292]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  105.526920][ T6292]  ? __pfx_udp_sendmsg+0x10/0x10
[  105.526955][ T6292]  ? __pfx_process_measurement+0x10/0x10
[  105.526996][ T6292]  ? __lock_acquire+0x6b6/0x2cf0
[  105.527025][ T6292]  ? __lock_acquire+0x6b6/0x2cf0
[  105.527049][ T6292]  ? __lock_acquire+0x6b6/0x2cf0
[  105.527089][ T6292]  udpv6_sendmsg+0xc1c/0x2510
[  105.527123][ T6292]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  105.527158][ T6292]  ? __lock_acquire+0x6b6/0x2cf0
[  105.527178][ T6292]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  105.527210][ T6292]  ? aa_file_perm+0x139/0x1530
[  105.527259][ T6292]  ? aa_sk_perm+0x7ee/0x920
[  105.527287][ T6292]  ? _parse_integer_limit+0x1ae/0x1f0
[  105.527330][ T6292]  ? inet_send_prepare+0x5c/0x270
[  105.527363][ T6292]  ? inet6_sendmsg+0xe4/0x120
[  105.527386][ T6292]  __sock_sendmsg+0xe5/0x270
[  105.527432][ T6292]  sock_write_iter+0x279/0x360
[  105.527466][ T6292]  ? __pfx_sock_write_iter+0x10/0x10
[  105.527509][ T6292]  ? bpf_lsm_file_permission+0x9/0x20
[  105.527531][ T6292]  ? security_file_permission+0x75/0x290
[  105.527562][ T6292]  vfs_write+0x5c9/0xb30
[  105.527588][ T6292]  ? __pfx_sock_write_iter+0x10/0x10
[  105.527619][ T6292]  ? __pfx_vfs_write+0x10/0x10
[  105.527651][ T6292]  ? __fget_files+0x2a/0x420
[  105.527688][ T6292]  ksys_write+0x145/0x250
[  105.527712][ T6292]  ? __pfx_ksys_write+0x10/0x10
[  105.527745][ T6292]  do_syscall_64+0xec/0xf80
[  105.527768][ T6292]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.527789][ T6292]  ? trace_irq_disable+0x37/0x100
[  105.527817][ T6292]  ? clear_bhb_loop+0x60/0xb0
[  105.527843][ T6292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.527864][ T6292] RIP: 0033:0x7fe3a238f749
[  105.527893][ T6292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.527911][ T6292] RSP: 002b:00007fe3a32ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  105.527934][ T6292] RAX: ffffffffffffffda RBX: 00007fe3a25e6090 RCX: 00007fe3a238f749
[  105.527950][ T6292] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005
[  105.527963][ T6292] RBP: 00007fe3a32ce090 R08: 0000000000000000 R09: 0000000000000000
[  105.527977][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.527989][ T6292] R13: 00007fe3a25e6128 R14: 00007fe3a25e6090 R15: 00007ffe45eac6a8
[  105.528024][ T6292]  </TASK>
[  106.033289][ T6302] netlink: 'syz.1.83': attribute type 1 has an invalid length.
[  106.081631][ T6302] netlink: 'syz.1.83': attribute type 4 has an invalid length.
[  106.101075][ T6289] netlink: 'syz.2.76': attribute type 6 has an invalid length.
[  106.110500][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'.
[  106.120498][ T6302] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.83'.
[  106.134681][ T6304] netlink: 'syz.1.83': attribute type 1 has an invalid length.
[  106.147420][ T6304] netlink: 'syz.1.83': attribute type 4 has an invalid length.
[  106.157163][ T6304] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.83'.
[  106.188063][ T6305] netlink: 80 bytes leftover after parsing attributes in process `syz.4.82'.
[  106.519171][ T6316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.86'.
[  106.639280][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.86'.
[  106.653528][ T6318] netlink: 'syz.4.86': attribute type 33 has an invalid length.
[  106.670587][ T6318] netlink: 152 bytes leftover after parsing attributes in process `syz.4.86'.
[  106.673112][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'.
[  106.703909][ T6317] veth1_macvtap: left promiscuous mode
[  106.715170][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'.
[  106.952319][ T6325] netlink: 'syz.3.89': attribute type 1 has an invalid length.
[  106.962170][ T6325] netlink: 'syz.3.89': attribute type 2 has an invalid length.
[  106.990797][ T6325] netlink: 'syz.3.89': attribute type 1 has an invalid length.
[  107.010600][ T6325] netlink: 16 bytes leftover after parsing attributes in process `syz.3.89'.
[  107.095458][ T6329] sock: sock_timestamping_bind_phc: sock not bind to device
[  108.135191][ T6377] netlink: 'syz.0.102': attribute type 1 has an invalid length.
[  108.831459][ T6398] block nbd0: shutting down sockets
[  108.842220][ T6404] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  108.865401][ T6404] team0: Device ipvlan2 is already an upper device of the team interface
[  108.991423][ T6399] block nbd1: shutting down sockets
[  109.200452][ T6426] veth1_macvtap: left promiscuous mode
[  109.552612][ T6439] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  110.256025][ T6474] mac80211_hwsim hwsim4 wlan1: Device is already in use.
[  110.421823][ T6479] syzkaller0: entered promiscuous mode
[  110.437921][ T6479] syzkaller0: entered allmulticast mode
[  110.543578][ T6479] bridge_slave_0: left allmulticast mode
[  110.600279][ T6479] bridge_slave_0: left promiscuous mode
[  110.626500][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.661867][ T6479] bridge_slave_1: left allmulticast mode
[  110.667597][ T6479] bridge_slave_1: left promiscuous mode
[  110.690799][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.716896][ T6479] bond0: (slave bond_slave_0): Releasing backup interface
[  110.764029][ T6479] bond0: (slave bond_slave_1): Releasing backup interface
[  110.784911][ T6479] team0: Port device team_slave_0 removed
[  110.806937][ T6479] team0: Port device team_slave_1 removed
[  110.813945][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.822448][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.833742][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.842275][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.853062][ T6479] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  110.900988][ T6493] caif0: Master is either lo or non-ether device
[  111.067796][ T6495] validate_nla: 10 callbacks suppressed
[  111.067818][ T6495] netlink: 'syz.3.128': attribute type 12 has an invalid length.
[  111.113042][ T6495] netlink: 'syz.3.128': attribute type 28 has an invalid length.
[  111.121258][ T6495] __nla_validate_parse: 8 callbacks suppressed
[  111.121277][ T6495] netlink: 148 bytes leftover after parsing attributes in process `syz.3.128'.
[  111.340961][ T6504] netlink: 'syz.1.131': attribute type 1 has an invalid length.
[  111.425551][ T6504] bond1: entered promiscuous mode
[  111.441565][ T6504] 8021q: adding VLAN 0 to HW filter on device bond1
[  111.555404][ T6511] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  111.612777][ T6511] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  111.623549][ T6511] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  111.810721][ T6518] netlink: 'syz.3.135': attribute type 16 has an invalid length.
[  111.818539][ T6518] netlink: 'syz.3.135': attribute type 17 has an invalid length.
[  111.935934][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.943608][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.194472][ T6518] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.219037][ T6518] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.402602][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'.
[  112.440199][ T6425] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.460115][ T6425] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  112.531653][ T6425] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.548980][ T6425] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  112.558515][ T6425] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.568946][ T6425] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  112.631974][ T6425] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.646160][ T6425] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  112.839449][ T6544] syzkaller1: entered promiscuous mode
[  112.862114][ T6544] syzkaller1: entered allmulticast mode
[  113.017293][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'.
[  113.033841][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'.
[  113.540867][ T6580] netlink: 'syz.4.155': attribute type 3 has an invalid length.
[  113.548647][ T6580] netlink: 'syz.4.155': attribute type 3 has an invalid length.
[  113.560579][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'.
[  113.567082][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.155'.
[  113.730169][ T6582] BUG: Bad page state in process syz.0.156  pfn:6b2a5
[  113.737036][ T6582] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x700000000 pfn:0x6b2a5
[  113.746694][ T6582] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  113.754095][ T6582] raw: 00fff00000000000 dead000000000040 ffff8880206c0000 0000000000000000
[  113.762878][ T6582] raw: 0000000700000000 3fffffffffffffff 00000000ffffffff 0000000000000000
[  113.771561][ T6582] page dumped because: page_pool leak
[  113.777036][ T6582] page_owner tracks the page as allocated
[  113.783044][ T6582] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6582, tgid 6581 (syz.0.156), ts 113730018844, free_ts 113679851030
[  113.800184][ T6582]  post_alloc_hook+0x234/0x290
[  113.805005][ T6582]  get_page_from_freelist+0x24e0/0x2580
[  113.810829][ T6582]  __alloc_frozen_pages_noprof+0x181/0x370
[  113.816786][ T6582]  alloc_pages_bulk_noprof+0x560/0x710
[  113.822349][ T6582]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  113.828485][ T6582]  page_pool_alloc_frag_netmem+0x421/0x9b0
[  113.834390][ T6582]  skb_pp_cow_data+0xb69/0x13e0
[  113.839295][ T6582]  do_xdp_generic+0x699/0x1190
[  113.844209][ T6582]  tun_get_user+0x2465/0x3dc0
[  113.848944][ T6582]  tun_chr_write_iter+0x113/0x200
[  113.854057][ T6582]  vfs_write+0x5c9/0xb30
[  113.858350][ T6582]  ksys_write+0x145/0x250
[  113.862777][ T6582]  do_syscall_64+0xec/0xf80
[  113.867345][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.873339][ T6582] page last free pid 6580 tgid 6579 stack trace:
[  113.879737][ T6582]  __free_frozen_pages+0xbc8/0xd30
[  113.884902][ T6582]  tlb_finish_mmu+0x112/0x1d0
[  113.889690][ T6582]  exit_mmap+0x439/0xb10
[  113.893996][ T6582]  __mmput+0x118/0x430
[  113.898289][ T6582]  exit_mm+0x169/0x230
[  113.902560][ T6582]  do_exit+0x627/0x22f0
[  113.906860][ T6582]  do_group_exit+0x21c/0x2d0
[  113.911562][ T6582]  get_signal+0x1285/0x1340
[  113.916113][ T6582]  arch_do_signal_or_restart+0x9a/0x7a0
[  113.921768][ T6582]  exit_to_user_mode_loop+0x87/0x4e0
[  113.927104][ T6582]  do_syscall_64+0x2c1/0xf80
[  113.931788][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.937722][ T6582] Modules linked in:
[  113.941813][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.0.156 Not tainted syzkaller #0 PREEMPT(full) 
[  113.941857][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  113.941871][ T6582] Call Trace:
[  113.941893][ T6582]  <TASK>
[  113.941903][ T6582]  dump_stack_lvl+0xe8/0x150
[  113.941939][ T6582]  bad_page+0x180/0x1c0
[  113.941972][ T6582]  __free_frozen_pages+0xce6/0xd30
[  113.942006][ T6582]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  113.942053][ T6582]  ? lockdep_hardirqs_on+0x7b/0x110
[  113.942084][ T6582]  bpf_xdp_adjust_tail+0x1d6/0x220
[  113.942119][ T6582]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  113.942139][ T6582]  bpf_prog_run_generic_xdp+0x665/0x14c0
[  113.942201][ T6582]  do_xdp_generic+0x9f7/0x1190
[  113.942247][ T6582]  ? __pfx_do_xdp_generic+0x10/0x10
[  113.942291][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  113.942334][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  113.942366][ T6582]  tun_get_user+0x2465/0x3dc0
[  113.942414][ T6582]  ? aa_file_perm+0x44c/0x1530
[  113.942446][ T6582]  ? __pfx_tun_get_user+0x10/0x10
[  113.942478][ T6582]  ? __lock_acquire+0x6b6/0x2cf0
[  113.942506][ T6582]  ? __pfx___futex_wait+0x10/0x10
[  113.942544][ T6582]  ? ref_tracker_alloc+0x318/0x460
[  113.942572][ T6582]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  113.942597][ T6582]  ? tun_get+0x1c/0x2f0
[  113.942625][ T6582]  ? tun_get+0x1c/0x2f0
[  113.942654][ T6582]  ? tun_get+0x1c/0x2f0
[  113.942677][ T6582]  ? tun_get+0x1c/0x2f0
[  113.942709][ T6582]  tun_chr_write_iter+0x113/0x200
[  113.942740][ T6582]  vfs_write+0x5c9/0xb30
[  113.942767][ T6582]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  113.942795][ T6582]  ? __pfx_vfs_write+0x10/0x10
[  113.942827][ T6582]  ? __fget_files+0x2a/0x420
[  113.942865][ T6582]  ksys_write+0x145/0x250
[  113.942930][ T6582]  ? __pfx_ksys_write+0x10/0x10
[  113.942962][ T6582]  do_syscall_64+0xec/0xf80
[  113.942986][ T6582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.943007][ T6582]  ? trace_irq_disable+0x37/0x100
[  113.943037][ T6582]  ? clear_bhb_loop+0x60/0xb0
[  113.943064][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.943085][ T6582] RIP: 0033:0x7fe3a238e1ff
[  113.943106][ T6582] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  113.943125][ T6582] RSP: 002b:00007fe3a32ef000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  113.943148][ T6582] RAX: ffffffffffffffda RBX: 00007fe3a25e5fa0 RCX: 00007fe3a238e1ff
[  113.943164][ T6582] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  113.943179][ T6582] RBP: 00007fe3a2413f91 R08: 0000000000000000 R09: 0000000000000000
[  113.943192][ T6582] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000
[  113.943205][ T6582] R13: 00007fe3a25e6038 R14: 00007fe3a25e5fa0 R15: 00007ffe45eac6a8
[  113.943238][ T6582]  </TASK>
[  113.943247][ T6582] Disabling lock debugging due to kernel taint
[  114.225159][ T6582] BUG: Bad page state in process syz.0.156  pfn:2ffe5
[  114.232088][ T6582] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ffe5
[  114.240931][ T6582] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  114.248098][ T6582] raw: 00fff00000000000 dead000000000040 ffff8880206c0000 0000000000000000
[  114.256775][ T6582] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  114.265422][ T6582] page dumped because: page_pool leak
[  114.270857][ T6582] page_owner tracks the page as allocated
[  114.276600][ T6582] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6582, tgid 6581 (syz.0.156), ts 113730000352, free_ts 113679867140
[  114.293795][ T6582]  post_alloc_hook+0x234/0x290
[  114.298783][ T6582]  get_page_from_freelist+0x24e0/0x2580
[  114.304434][ T6582]  __alloc_frozen_pages_noprof+0x181/0x370
[  114.310443][ T6582]  alloc_pages_bulk_noprof+0x560/0x710
[  114.316207][ T6582]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  114.322419][ T6582]  skb_pp_cow_data+0xb47/0x13e0
[  114.327415][ T6582]  do_xdp_generic+0x699/0x1190
[  114.332282][ T6582]  tun_get_user+0x2465/0x3dc0
[  114.337454][ T6582]  tun_chr_write_iter+0x113/0x200
[  114.342840][ T6582]  vfs_write+0x5c9/0xb30
[  114.347502][ T6582]  ksys_write+0x145/0x250
[  114.351911][ T6582]  do_syscall_64+0xec/0xf80
[  114.356507][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.362498][ T6582] page last free pid 6580 tgid 6579 stack trace:
[  114.368869][ T6582]  __free_frozen_pages+0xbc8/0xd30
[  114.374078][ T6582]  tlb_finish_mmu+0x112/0x1d0
[  114.378820][ T6582]  exit_mmap+0x439/0xb10
[  114.383157][ T6582]  __mmput+0x118/0x430
[  114.387264][ T6582]  exit_mm+0x169/0x230
[  114.391419][ T6582]  do_exit+0x627/0x22f0
[  114.395648][ T6582]  do_group_exit+0x21c/0x2d0
[  114.400331][ T6582]  get_signal+0x1285/0x1340
[  114.404881][ T6582]  arch_do_signal_or_restart+0x9a/0x7a0
[  114.410606][ T6582]  exit_to_user_mode_loop+0x87/0x4e0
[  114.416015][ T6582]  do_syscall_64+0x2c1/0xf80
[  114.420700][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.426647][ T6582] Modules linked in:
[  114.430729][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.0.156 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  114.430764][ T6582] Tainted: [B]=BAD_PAGE
[  114.430772][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  114.430786][ T6582] Call Trace:
[  114.430794][ T6582]  <TASK>
[  114.430804][ T6582]  dump_stack_lvl+0xe8/0x150
[  114.430836][ T6582]  bad_page+0x180/0x1c0
[  114.430867][ T6582]  __free_frozen_pages+0xce6/0xd30
[  114.430895][ T6582]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  114.430936][ T6582]  ? lockdep_hardirqs_on+0x7b/0x110
[  114.430964][ T6582]  bpf_xdp_adjust_tail+0x1d6/0x220
[  114.430994][ T6582]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  114.431013][ T6582]  bpf_prog_run_generic_xdp+0x665/0x14c0
[  114.431062][ T6582]  do_xdp_generic+0x9f7/0x1190
[  114.431102][ T6582]  ? __pfx_do_xdp_generic+0x10/0x10
[  114.431140][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  114.431176][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  114.431204][ T6582]  tun_get_user+0x2465/0x3dc0
[  114.431242][ T6582]  ? aa_file_perm+0x44c/0x1530
[  114.431273][ T6582]  ? __pfx_tun_get_user+0x10/0x10
[  114.431301][ T6582]  ? __lock_acquire+0x6b6/0x2cf0
[  114.431325][ T6582]  ? __pfx___futex_wait+0x10/0x10
[  114.431358][ T6582]  ? ref_tracker_alloc+0x318/0x460
[  114.431382][ T6582]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  114.431405][ T6582]  ? tun_get+0x1c/0x2f0
[  114.431431][ T6582]  ? tun_get+0x1c/0x2f0
[  114.431460][ T6582]  ? tun_get+0x1c/0x2f0
[  114.431486][ T6582]  ? tun_get+0x1c/0x2f0
[  114.431515][ T6582]  tun_chr_write_iter+0x113/0x200
[  114.431543][ T6582]  vfs_write+0x5c9/0xb30
[  114.431567][ T6582]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  114.431594][ T6582]  ? __pfx_vfs_write+0x10/0x10
[  114.431620][ T6582]  ? __fget_files+0x2a/0x420
[  114.431660][ T6582]  ksys_write+0x145/0x250
[  114.431682][ T6582]  ? __pfx_ksys_write+0x10/0x10
[  114.431709][ T6582]  do_syscall_64+0xec/0xf80
[  114.431732][ T6582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.431753][ T6582]  ? trace_irq_disable+0x37/0x100
[  114.431782][ T6582]  ? clear_bhb_loop+0x60/0xb0
[  114.431807][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.431828][ T6582] RIP: 0033:0x7fe3a238e1ff
[  114.431847][ T6582] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  114.431866][ T6582] RSP: 002b:00007fe3a32ef000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  114.431890][ T6582] RAX: ffffffffffffffda RBX: 00007fe3a25e5fa0 RCX: 00007fe3a238e1ff
[  114.431906][ T6582] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  114.431921][ T6582] RBP: 00007fe3a2413f91 R08: 0000000000000000 R09: 0000000000000000
[  114.431934][ T6582] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000
[  114.431947][ T6582] R13: 00007fe3a25e6038 R14: 00007fe3a25e5fa0 R15: 00007ffe45eac6a8
[  114.431974][ T6582]  </TASK>
[  114.431987][ T6582] BUG: Bad page state in process syz.0.156  pfn:29d84
[  114.719693][ T6582] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29d84
[  114.728607][ T6582] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  114.735797][ T6582] raw: 00fff00000000000 dead000000000040 ffff8880206c0000 0000000000000000
[  114.744462][ T6582] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  114.753144][ T6582] page dumped because: page_pool leak
[  114.758580][ T6582] page_owner tracks the page as allocated
[  114.764361][ T6582] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6582, tgid 6581 (syz.0.156), ts 113729981699, free_ts 113679883575
[  114.781379][ T6582]  post_alloc_hook+0x234/0x290
[  114.786197][ T6582]  get_page_from_freelist+0x24e0/0x2580
[  114.791903][ T6582]  __alloc_frozen_pages_noprof+0x181/0x370
[  114.797766][ T6582]  alloc_pages_bulk_noprof+0x560/0x710
[  114.803311][ T6582]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  114.810135][ T6582]  skb_pp_cow_data+0xb47/0x13e0
[  114.815088][ T6582]  do_xdp_generic+0x699/0x1190
[  114.819941][ T6582]  tun_get_user+0x2465/0x3dc0
[  114.824666][ T6582]  tun_chr_write_iter+0x113/0x200
[  114.829861][ T6582]  vfs_write+0x5c9/0xb30
[  114.834235][ T6582]  ksys_write+0x145/0x250
[  114.838613][ T6582]  do_syscall_64+0xec/0xf80
[  114.843204][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.849142][ T6582] page last free pid 6580 tgid 6579 stack trace:
[  114.855545][ T6582]  __free_frozen_pages+0xbc8/0xd30
[  114.860797][ T6582]  tlb_finish_mmu+0x112/0x1d0
[  114.865526][ T6582]  exit_mmap+0x439/0xb10
[  114.869895][ T6582]  __mmput+0x118/0x430
[  114.874003][ T6582]  exit_mm+0x169/0x230
[  114.878202][ T6582]  do_exit+0x627/0x22f0
[  114.882645][ T6582]  do_group_exit+0x21c/0x2d0
[  114.887551][ T6582]  get_signal+0x1285/0x1340
[  114.892180][ T6582]  arch_do_signal_or_restart+0x9a/0x7a0
[  114.897867][ T6582]  exit_to_user_mode_loop+0x87/0x4e0
[  114.903238][ T6582]  do_syscall_64+0x2c1/0xf80
[  114.907868][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.913845][ T6582] Modules linked in:
[  114.917793][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.0.156 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  114.917829][ T6582] Tainted: [B]=BAD_PAGE
[  114.917837][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  114.917850][ T6582] Call Trace:
[  114.917858][ T6582]  <TASK>
[  114.917867][ T6582]  dump_stack_lvl+0xe8/0x150
[  114.917899][ T6582]  bad_page+0x180/0x1c0
[  114.917930][ T6582]  __free_frozen_pages+0xce6/0xd30
[  114.917957][ T6582]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  114.917999][ T6582]  ? lockdep_hardirqs_on+0x7b/0x110
[  114.918027][ T6582]  bpf_xdp_adjust_tail+0x1d6/0x220
[  114.918057][ T6582]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  114.918077][ T6582]  bpf_prog_run_generic_xdp+0x665/0x14c0
[  114.918127][ T6582]  do_xdp_generic+0x9f7/0x1190
[  114.918165][ T6582]  ? __pfx_do_xdp_generic+0x10/0x10
[  114.918203][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  114.918238][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  114.918266][ T6582]  tun_get_user+0x2465/0x3dc0
[  114.918305][ T6582]  ? aa_file_perm+0x44c/0x1530
[  114.918336][ T6582]  ? __pfx_tun_get_user+0x10/0x10
[  114.918365][ T6582]  ? __lock_acquire+0x6b6/0x2cf0
[  114.918389][ T6582]  ? __pfx___futex_wait+0x10/0x10
[  114.918422][ T6582]  ? ref_tracker_alloc+0x318/0x460
[  114.918446][ T6582]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  114.918468][ T6582]  ? tun_get+0x1c/0x2f0
[  114.918495][ T6582]  ? tun_get+0x1c/0x2f0
[  114.918524][ T6582]  ? tun_get+0x1c/0x2f0
[  114.918550][ T6582]  ? tun_get+0x1c/0x2f0
[  114.918584][ T6582]  tun_chr_write_iter+0x113/0x200
[  114.918613][ T6582]  vfs_write+0x5c9/0xb30
[  114.918636][ T6582]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  114.918663][ T6582]  ? __pfx_vfs_write+0x10/0x10
[  114.918689][ T6582]  ? __fget_files+0x2a/0x420
[  114.918721][ T6582]  ksys_write+0x145/0x250
[  114.918742][ T6582]  ? __pfx_ksys_write+0x10/0x10
[  114.918768][ T6582]  do_syscall_64+0xec/0xf80
[  114.918791][ T6582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.918819][ T6582]  ? trace_irq_disable+0x37/0x100
[  114.918849][ T6582]  ? clear_bhb_loop+0x60/0xb0
[  114.918874][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.918896][ T6582] RIP: 0033:0x7fe3a238e1ff
[  114.918915][ T6582] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  114.918933][ T6582] RSP: 002b:00007fe3a32ef000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  114.918957][ T6582] RAX: ffffffffffffffda RBX: 00007fe3a25e5fa0 RCX: 00007fe3a238e1ff
[  114.918973][ T6582] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  114.918988][ T6582] RBP: 00007fe3a2413f91 R08: 0000000000000000 R09: 0000000000000000
[  114.919002][ T6582] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000
[  114.919016][ T6582] R13: 00007fe3a25e6038 R14: 00007fe3a25e5fa0 R15: 00007ffe45eac6a8
[  114.919042][ T6582]  </TASK>
[  114.919054][ T6582] BUG: Bad page state in process syz.0.156  pfn:566e9
[  115.206879][ T6582] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x566e9
[  115.217030][ T6582] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  115.224230][ T6582] raw: 00fff00000000000 dead000000000040 ffff8880206c0000 0000000000000000
[  115.232904][ T6582] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[  115.241677][ T6582] page dumped because: page_pool leak
[  115.247103][ T6582] page_owner tracks the page as allocated
[  115.252891][ T6582] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6582, tgid 6581 (syz.0.156), ts 113729963576, free_ts 113679899554
[  115.269907][ T6582]  post_alloc_hook+0x234/0x290
[  115.274715][ T6582]  get_page_from_freelist+0x24e0/0x2580
[  115.280341][ T6582]  __alloc_frozen_pages_noprof+0x181/0x370
[  115.286376][ T6582]  alloc_pages_bulk_noprof+0x560/0x710
[  115.291936][ T6582]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  115.298149][ T6582]  skb_pp_cow_data+0xb47/0x13e0
[  115.303090][ T6582]  do_xdp_generic+0x699/0x1190
[  115.307917][ T6582]  tun_get_user+0x2465/0x3dc0
[  115.312683][ T6582]  tun_chr_write_iter+0x113/0x200
[  115.317909][ T6582]  vfs_write+0x5c9/0xb30
[  115.322236][ T6582]  ksys_write+0x145/0x250
[  115.326636][ T6582]  do_syscall_64+0xec/0xf80
[  115.331217][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.337154][ T6582] page last free pid 6580 tgid 6579 stack trace:
[  115.343572][ T6582]  __free_frozen_pages+0xbc8/0xd30
[  115.348820][ T6582]  tlb_finish_mmu+0x112/0x1d0
[  115.353585][ T6582]  exit_mmap+0x439/0xb10
[  115.357892][ T6582]  __mmput+0x118/0x430
[  115.362059][ T6582]  exit_mm+0x169/0x230
[  115.366181][ T6582]  do_exit+0x627/0x22f0
[  115.370417][ T6582]  do_group_exit+0x21c/0x2d0
[  115.375327][ T6582]  get_signal+0x1285/0x1340
[  115.379993][ T6582]  arch_do_signal_or_restart+0x9a/0x7a0
[  115.385590][ T6582]  exit_to_user_mode_loop+0x87/0x4e0
[  115.390960][ T6582]  do_syscall_64+0x2c1/0xf80
[  115.395593][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.401567][ T6582] Modules linked in:
[  115.405596][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.0.156 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  115.405630][ T6582] Tainted: [B]=BAD_PAGE
[  115.405638][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  115.405651][ T6582] Call Trace:
[  115.405660][ T6582]  <TASK>
[  115.405670][ T6582]  dump_stack_lvl+0xe8/0x150
[  115.405702][ T6582]  bad_page+0x180/0x1c0
[  115.405733][ T6582]  __free_frozen_pages+0xce6/0xd30
[  115.405760][ T6582]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  115.405802][ T6582]  ? lockdep_hardirqs_on+0x7b/0x110
[  115.405828][ T6582]  bpf_xdp_adjust_tail+0x1d6/0x220
[  115.405859][ T6582]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  115.405878][ T6582]  bpf_prog_run_generic_xdp+0x665/0x14c0
[  115.405926][ T6582]  do_xdp_generic+0x9f7/0x1190
[  115.405965][ T6582]  ? __pfx_do_xdp_generic+0x10/0x10
[  115.406004][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  115.406039][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  115.406066][ T6582]  tun_get_user+0x2465/0x3dc0
[  115.406104][ T6582]  ? aa_file_perm+0x44c/0x1530
[  115.406134][ T6582]  ? __pfx_tun_get_user+0x10/0x10
[  115.406162][ T6582]  ? __lock_acquire+0x6b6/0x2cf0
[  115.406187][ T6582]  ? __pfx___futex_wait+0x10/0x10
[  115.406220][ T6582]  ? ref_tracker_alloc+0x318/0x460
[  115.406244][ T6582]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  115.406267][ T6582]  ? tun_get+0x1c/0x2f0
[  115.406293][ T6582]  ? tun_get+0x1c/0x2f0
[  115.406322][ T6582]  ? tun_get+0x1c/0x2f0
[  115.406347][ T6582]  ? tun_get+0x1c/0x2f0
[  115.406376][ T6582]  tun_chr_write_iter+0x113/0x200
[  115.406405][ T6582]  vfs_write+0x5c9/0xb30
[  115.406428][ T6582]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  115.406456][ T6582]  ? __pfx_vfs_write+0x10/0x10
[  115.406490][ T6582]  ? __fget_files+0x2a/0x420
[  115.406523][ T6582]  ksys_write+0x145/0x250
[  115.406545][ T6582]  ? __pfx_ksys_write+0x10/0x10
[  115.406572][ T6582]  do_syscall_64+0xec/0xf80
[  115.406595][ T6582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.406617][ T6582]  ? trace_irq_disable+0x37/0x100
[  115.406647][ T6582]  ? clear_bhb_loop+0x60/0xb0
[  115.406672][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.406694][ T6582] RIP: 0033:0x7fe3a238e1ff
[  115.406712][ T6582] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  115.406731][ T6582] RSP: 002b:00007fe3a32ef000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  115.406754][ T6582] RAX: ffffffffffffffda RBX: 00007fe3a25e5fa0 RCX: 00007fe3a238e1ff
[  115.406771][ T6582] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  115.406785][ T6582] RBP: 00007fe3a2413f91 R08: 0000000000000000 R09: 0000000000000000
[  115.406799][ T6582] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000
[  115.406813][ T6582] R13: 00007fe3a25e6038 R14: 00007fe3a25e5fa0 R15: 00007ffe45eac6a8
[  115.406839][ T6582]  </TASK>
[  115.406851][ T6582] BUG: Bad page state in process syz.0.156  pfn:52d0b
[  115.696028][ T6582] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888052d0b640 pfn:0x52d0b
[  115.706182][ T6582] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  115.713389][ T6582] raw: 00fff00000000000 dead000000000040 ffff8880206c0000 0000000000000000
[  115.722048][ T6582] raw: ffff888052d0b640 0000000000000001 00000000ffffffff 0000000000000000
[  115.730710][ T6582] page dumped because: page_pool leak
[  115.736117][ T6582] page_owner tracks the page as allocated
[  115.741904][ T6582] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6582, tgid 6581 (syz.0.156), ts 113729934739, free_ts 113679915810
[  115.758925][ T6582]  post_alloc_hook+0x234/0x290
[  115.763775][ T6582]  get_page_from_freelist+0x24e0/0x2580
[  115.769373][ T6582]  __alloc_frozen_pages_noprof+0x181/0x370
[  115.775263][ T6582]  alloc_pages_bulk_noprof+0x560/0x710
[  115.780812][ T6582]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  115.787035][ T6582]  skb_pp_cow_data+0xb47/0x13e0
[  115.791978][ T6582]  do_xdp_generic+0x699/0x1190
[  115.796896][ T6582]  tun_get_user+0x2465/0x3dc0
[  115.801673][ T6582]  tun_chr_write_iter+0x113/0x200
[  115.806759][ T6582]  vfs_write+0x5c9/0xb30
[  115.811083][ T6582]  ksys_write+0x145/0x250
[  115.815448][ T6582]  do_syscall_64+0xec/0xf80
[  115.820026][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.826001][ T6582] page last free pid 6580 tgid 6579 stack trace:
[  115.832398][ T6582]  __free_frozen_pages+0xbc8/0xd30
[  115.837553][ T6582]  tlb_finish_mmu+0x112/0x1d0
[  115.842417][ T6582]  exit_mmap+0x439/0xb10
[  115.846716][ T6582]  __mmput+0x118/0x430
[  115.850862][ T6582]  exit_mm+0x169/0x230
[  115.854980][ T6582]  do_exit+0x627/0x22f0
[  115.859190][ T6582]  do_group_exit+0x21c/0x2d0
[  115.863886][ T6582]  get_signal+0x1285/0x1340
[  115.868432][ T6582]  arch_do_signal_or_restart+0x9a/0x7a0
[  115.874072][ T6582]  exit_to_user_mode_loop+0x87/0x4e0
[  115.879429][ T6582]  do_syscall_64+0x2c1/0xf80
[  115.884108][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.890176][ T6582] Modules linked in:
[  115.894118][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.0.156 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  115.894151][ T6582] Tainted: [B]=BAD_PAGE
[  115.894159][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  115.894173][ T6582] Call Trace:
[  115.894181][ T6582]  <TASK>
[  115.894189][ T6582]  dump_stack_lvl+0xe8/0x150
[  115.894221][ T6582]  bad_page+0x180/0x1c0
[  115.894252][ T6582]  __free_frozen_pages+0xce6/0xd30
[  115.894278][ T6582]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  115.894318][ T6582]  ? lockdep_hardirqs_on+0x7b/0x110
[  115.894345][ T6582]  bpf_xdp_adjust_tail+0x1d6/0x220
[  115.894375][ T6582]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  115.894394][ T6582]  bpf_prog_run_generic_xdp+0x665/0x14c0
[  115.894448][ T6582]  do_xdp_generic+0x9f7/0x1190
[  115.894488][ T6582]  ? __pfx_do_xdp_generic+0x10/0x10
[  115.894526][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  115.894561][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  115.894589][ T6582]  tun_get_user+0x2465/0x3dc0
[  115.894628][ T6582]  ? aa_file_perm+0x44c/0x1530
[  115.894660][ T6582]  ? __pfx_tun_get_user+0x10/0x10
[  115.894688][ T6582]  ? __lock_acquire+0x6b6/0x2cf0
[  115.894712][ T6582]  ? __pfx___futex_wait+0x10/0x10
[  115.894751][ T6582]  ? ref_tracker_alloc+0x318/0x460
[  115.894775][ T6582]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  115.894798][ T6582]  ? tun_get+0x1c/0x2f0
[  115.894824][ T6582]  ? tun_get+0x1c/0x2f0
[  115.894854][ T6582]  ? tun_get+0x1c/0x2f0
[  115.894880][ T6582]  ? tun_get+0x1c/0x2f0
[  115.894909][ T6582]  tun_chr_write_iter+0x113/0x200
[  115.894937][ T6582]  vfs_write+0x5c9/0xb30
[  115.894960][ T6582]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  115.894988][ T6582]  ? __pfx_vfs_write+0x10/0x10
[  115.895013][ T6582]  ? __fget_files+0x2a/0x420
[  115.895047][ T6582]  ksys_write+0x145/0x250
[  115.895068][ T6582]  ? __pfx_ksys_write+0x10/0x10
[  115.895095][ T6582]  do_syscall_64+0xec/0xf80
[  115.895118][ T6582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.895139][ T6582]  ? trace_irq_disable+0x37/0x100
[  115.895169][ T6582]  ? clear_bhb_loop+0x60/0xb0
[  115.895193][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.895215][ T6582] RIP: 0033:0x7fe3a238e1ff
[  115.895233][ T6582] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  115.895252][ T6582] RSP: 002b:00007fe3a32ef000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  115.895276][ T6582] RAX: ffffffffffffffda RBX: 00007fe3a25e5fa0 RCX: 00007fe3a238e1ff
[  115.895293][ T6582] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  115.895307][ T6582] RBP: 00007fe3a2413f91 R08: 0000000000000000 R09: 0000000000000000
[  115.895321][ T6582] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000
[  115.895334][ T6582] R13: 00007fe3a25e6038 R14: 00007fe3a25e5fa0 R15: 00007ffe45eac6a8
[  115.895360][ T6582]  </TASK>
[  115.895371][ T6582] BUG: Bad page state in process syz.0.156  pfn:76b73
[  116.184225][ T6582] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x76b73
[  116.194453][ T6582] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  116.201649][ T6582] raw: 00fff00000000000 dead000000000040 ffff8880206c0000 0000000000000000
[  116.210310][ T6582] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[  116.218920][ T6582] page dumped because: page_pool leak
[  116.224355][ T6582] page_owner tracks the page as allocated
[  116.230143][ T6582] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6582, tgid 6581 (syz.0.156), ts 113729916528, free_ts 113700141818
[  116.247341][ T6582]  post_alloc_hook+0x234/0x290
[  116.252172][ T6582]  get_page_from_freelist+0x24e0/0x2580
[  116.258143][ T6582]  __alloc_frozen_pages_noprof+0x181/0x370
[  116.264040][ T6582]  alloc_pages_bulk_noprof+0x560/0x710
[  116.269561][ T6582]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  116.275741][ T6582]  skb_pp_cow_data+0xb47/0x13e0
[  116.280706][ T6582]  do_xdp_generic+0x699/0x1190
[  116.285537][ T6582]  tun_get_user+0x2465/0x3dc0
[  116.290419][ T6582]  tun_chr_write_iter+0x113/0x200
[  116.295514][ T6582]  vfs_write+0x5c9/0xb30
[  116.299833][ T6582]  ksys_write+0x145/0x250
[  116.304197][ T6582]  do_syscall_64+0xec/0xf80
[  116.308750][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.314763][ T6582] page last free pid 6576 tgid 6572 stack trace:
[  116.321150][ T6582]  __free_frozen_pages+0xbc8/0xd30
[  116.326314][ T6582]  tlb_remove_table_rcu+0x85/0x100
[  116.331604][ T6582]  rcu_core+0xc8e/0x1720
[  116.335912][ T6582]  handle_softirqs+0x22b/0x7c0
[  116.340762][ T6582]  __irq_exit_rcu+0x60/0x150
[  116.345394][ T6582]  irq_exit_rcu+0x9/0x30
[  116.349715][ T6582]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  116.355394][ T6582]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  116.361680][ T6582] Modules linked in:
[  116.365653][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.0.156 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  116.365688][ T6582] Tainted: [B]=BAD_PAGE
[  116.365696][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  116.365710][ T6582] Call Trace:
[  116.365719][ T6582]  <TASK>
[  116.365729][ T6582]  dump_stack_lvl+0xe8/0x150
[  116.365761][ T6582]  bad_page+0x180/0x1c0
[  116.365792][ T6582]  __free_frozen_pages+0xce6/0xd30
[  116.365818][ T6582]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  116.365860][ T6582]  ? lockdep_hardirqs_on+0x7b/0x110
[  116.365887][ T6582]  bpf_xdp_adjust_tail+0x1d6/0x220
[  116.365917][ T6582]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  116.365937][ T6582]  bpf_prog_run_generic_xdp+0x665/0x14c0
[  116.365984][ T6582]  do_xdp_generic+0x9f7/0x1190
[  116.366023][ T6582]  ? __pfx_do_xdp_generic+0x10/0x10
[  116.366072][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  116.366108][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  116.366136][ T6582]  tun_get_user+0x2465/0x3dc0
[  116.366174][ T6582]  ? aa_file_perm+0x44c/0x1530
[  116.366205][ T6582]  ? __pfx_tun_get_user+0x10/0x10
[  116.366233][ T6582]  ? __lock_acquire+0x6b6/0x2cf0
[  116.366267][ T6582]  ? __pfx___futex_wait+0x10/0x10
[  116.366301][ T6582]  ? ref_tracker_alloc+0x318/0x460
[  116.366325][ T6582]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  116.366346][ T6582]  ? tun_get+0x1c/0x2f0
[  116.366370][ T6582]  ? tun_get+0x1c/0x2f0
[  116.366397][ T6582]  ? tun_get+0x1c/0x2f0
[  116.366423][ T6582]  ? tun_get+0x1c/0x2f0
[  116.366452][ T6582]  tun_chr_write_iter+0x113/0x200
[  116.366480][ T6582]  vfs_write+0x5c9/0xb30
[  116.366503][ T6582]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  116.366530][ T6582]  ? __pfx_vfs_write+0x10/0x10
[  116.366556][ T6582]  ? __fget_files+0x2a/0x420
[  116.366609][ T6582]  ksys_write+0x145/0x250
[  116.366645][ T6582]  ? __pfx_ksys_write+0x10/0x10
[  116.366672][ T6582]  do_syscall_64+0xec/0xf80
[  116.366696][ T6582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.366717][ T6582]  ? trace_irq_disable+0x37/0x100
[  116.366746][ T6582]  ? clear_bhb_loop+0x60/0xb0
[  116.366770][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.366792][ T6582] RIP: 0033:0x7fe3a238e1ff
[  116.366811][ T6582] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  116.366829][ T6582] RSP: 002b:00007fe3a32ef000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  116.366852][ T6582] RAX: ffffffffffffffda RBX: 00007fe3a25e5fa0 RCX: 00007fe3a238e1ff
[  116.366868][ T6582] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  116.366883][ T6582] RBP: 00007fe3a2413f91 R08: 0000000000000000 R09: 0000000000000000
[  116.366897][ T6582] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000
[  116.366910][ T6582] R13: 00007fe3a25e6038 R14: 00007fe3a25e5fa0 R15: 00007ffe45eac6a8
[  116.366935][ T6582]  </TASK>
[  116.366947][ T6582] BUG: Bad page state in process syz.0.156  pfn:76b3a
[  116.654733][ T6582] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x76b3a
[  116.664917][ T6582] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  116.672137][ T6582] raw: 00fff00000000000 dead000000000040 ffff8880206c0000 0000000000000000
[  116.680890][ T6582] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[  116.689550][ T6582] page dumped because: page_pool leak
[  116.695005][ T6582] page_owner tracks the page as allocated
[  116.700791][ T6582] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6582, tgid 6581 (syz.0.156), ts 113729898900, free_ts 113700176873
[  116.717913][ T6582]  post_alloc_hook+0x234/0x290
[  116.722766][ T6582]  get_page_from_freelist+0x24e0/0x2580
[  116.728455][ T6582]  __alloc_frozen_pages_noprof+0x181/0x370
[  116.734365][ T6582]  alloc_pages_bulk_noprof+0x560/0x710
[  116.739900][ T6582]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  116.746031][ T6582]  skb_pp_cow_data+0xb47/0x13e0
[  116.751028][ T6582]  do_xdp_generic+0x699/0x1190
[  116.755845][ T6582]  tun_get_user+0x2465/0x3dc0
[  116.760660][ T6582]  tun_chr_write_iter+0x113/0x200
[  116.765756][ T6582]  vfs_write+0x5c9/0xb30
[  116.770082][ T6582]  ksys_write+0x145/0x250
[  116.774457][ T6582]  do_syscall_64+0xec/0xf80
[  116.779041][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.785059][ T6582] page last free pid 6576 tgid 6572 stack trace:
[  116.791535][ T6582]  __free_frozen_pages+0xbc8/0xd30
[  116.796688][ T6582]  tlb_remove_table_rcu+0x85/0x100
[  116.801884][ T6582]  rcu_core+0xc8e/0x1720
[  116.806184][ T6582]  handle_softirqs+0x22b/0x7c0
[  116.811028][ T6582]  __irq_exit_rcu+0x60/0x150
[  116.815703][ T6582]  irq_exit_rcu+0x9/0x30
[  116.820018][ T6582]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  116.825693][ T6582]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  116.831759][ T6582] Modules linked in:
[  116.835698][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.0.156 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  116.835731][ T6582] Tainted: [B]=BAD_PAGE
[  116.835739][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  116.835752][ T6582] Call Trace:
[  116.835760][ T6582]  <TASK>
[  116.835770][ T6582]  dump_stack_lvl+0xe8/0x150
[  116.835801][ T6582]  bad_page+0x180/0x1c0
[  116.835831][ T6582]  __free_frozen_pages+0xce6/0xd30
[  116.835859][ T6582]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  116.835899][ T6582]  ? lockdep_hardirqs_on+0x7b/0x110
[  116.835925][ T6582]  bpf_xdp_adjust_tail+0x1d6/0x220
[  116.835956][ T6582]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  116.835975][ T6582]  bpf_prog_run_generic_xdp+0x665/0x14c0
[  116.836020][ T6582]  do_xdp_generic+0x9f7/0x1190
[  116.836062][ T6582]  ? __pfx_do_xdp_generic+0x10/0x10
[  116.836098][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  116.836131][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  116.836158][ T6582]  tun_get_user+0x2465/0x3dc0
[  116.836195][ T6582]  ? aa_file_perm+0x44c/0x1530
[  116.836225][ T6582]  ? __pfx_tun_get_user+0x10/0x10
[  116.836251][ T6582]  ? __lock_acquire+0x6b6/0x2cf0
[  116.836275][ T6582]  ? __pfx___futex_wait+0x10/0x10
[  116.836306][ T6582]  ? ref_tracker_alloc+0x318/0x460
[  116.836327][ T6582]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  116.836362][ T6582]  ? tun_get+0x1c/0x2f0
[  116.836388][ T6582]  ? tun_get+0x1c/0x2f0
[  116.836415][ T6582]  ? tun_get+0x1c/0x2f0
[  116.836440][ T6582]  ? tun_get+0x1c/0x2f0
[  116.836467][ T6582]  tun_chr_write_iter+0x113/0x200
[  116.836494][ T6582]  vfs_write+0x5c9/0xb30
[  116.836516][ T6582]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  116.836542][ T6582]  ? __pfx_vfs_write+0x10/0x10
[  116.836566][ T6582]  ? __fget_files+0x2a/0x420
[  116.836597][ T6582]  ksys_write+0x145/0x250
[  116.836617][ T6582]  ? __pfx_ksys_write+0x10/0x10
[  116.836642][ T6582]  do_syscall_64+0xec/0xf80
[  116.836663][ T6582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.836684][ T6582]  ? trace_irq_disable+0x37/0x100
[  116.836713][ T6582]  ? clear_bhb_loop+0x60/0xb0
[  116.836737][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.836758][ T6582] RIP: 0033:0x7fe3a238e1ff
[  116.836776][ T6582] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  116.836794][ T6582] RSP: 002b:00007fe3a32ef000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  116.836818][ T6582] RAX: ffffffffffffffda RBX: 00007fe3a25e5fa0 RCX: 00007fe3a238e1ff
[  116.836834][ T6582] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  116.836849][ T6582] RBP: 00007fe3a2413f91 R08: 0000000000000000 R09: 0000000000000000
[  116.836862][ T6582] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000
[  116.836876][ T6582] R13: 00007fe3a25e6038 R14: 00007fe3a25e5fa0 R15: 00007ffe45eac6a8
[  116.836902][ T6582]  </TASK>
[  116.836913][ T6582] BUG: Bad page state in process syz.0.156  pfn:566d9
[  117.125427][ T6582] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x566d9
[  117.134261][ T6582] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  117.141461][ T6582] raw: 00fff00000000000 dead000000000040 ffff8880206c0000 0000000000000000
[  117.150132][ T6582] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  117.158837][ T6582] page dumped because: page_pool leak
[  117.164285][ T6582] page_owner tracks the page as allocated
[  117.170065][ T6582] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6582, tgid 6581 (syz.0.156), ts 113729881012, free_ts 113700209982
[  117.187080][ T6582]  post_alloc_hook+0x234/0x290
[  117.191915][ T6582]  get_page_from_freelist+0x24e0/0x2580
[  117.197517][ T6582]  __alloc_frozen_pages_noprof+0x181/0x370
[  117.203508][ T6582]  alloc_pages_bulk_noprof+0x560/0x710
[  117.209012][ T6582]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  117.215216][ T6582]  skb_pp_cow_data+0xb47/0x13e0
[  117.220154][ T6582]  do_xdp_generic+0x699/0x1190
[  117.224985][ T6582]  tun_get_user+0x2465/0x3dc0
[  117.229845][ T6582]  tun_chr_write_iter+0x113/0x200
[  117.234924][ T6582]  vfs_write+0x5c9/0xb30
[  117.239205][ T6582]  ksys_write+0x145/0x250
[  117.243655][ T6582]  do_syscall_64+0xec/0xf80
[  117.248196][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.254162][ T6582] page last free pid 6576 tgid 6572 stack trace:
[  117.260565][ T6582]  __free_frozen_pages+0xbc8/0xd30
[  117.265734][ T6582]  tlb_remove_table_rcu+0x85/0x100
[  117.270929][ T6582]  rcu_core+0xc8e/0x1720
[  117.275294][ T6582]  handle_softirqs+0x22b/0x7c0
[  117.280642][ T6582]  __irq_exit_rcu+0x60/0x150
[  117.285384][ T6582]  irq_exit_rcu+0x9/0x30
[  117.289698][ T6582]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  117.295489][ T6582]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  117.301589][ T6582] Modules linked in:
[  117.305541][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.0.156 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  117.305582][ T6582] Tainted: [B]=BAD_PAGE
[  117.305590][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  117.305604][ T6582] Call Trace:
[  117.305612][ T6582]  <TASK>
[  117.305622][ T6582]  dump_stack_lvl+0xe8/0x150
[  117.305653][ T6582]  bad_page+0x180/0x1c0
[  117.305684][ T6582]  __free_frozen_pages+0xce6/0xd30
[  117.305711][ T6582]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  117.305753][ T6582]  ? lockdep_hardirqs_on+0x7b/0x110
[  117.305780][ T6582]  bpf_xdp_adjust_tail+0x1d6/0x220
[  117.305811][ T6582]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  117.305830][ T6582]  bpf_prog_run_generic_xdp+0x665/0x14c0
[  117.305878][ T6582]  do_xdp_generic+0x9f7/0x1190
[  117.305917][ T6582]  ? __pfx_do_xdp_generic+0x10/0x10
[  117.305954][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  117.305991][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  117.306019][ T6582]  tun_get_user+0x2465/0x3dc0
[  117.306058][ T6582]  ? aa_file_perm+0x44c/0x1530
[  117.306090][ T6582]  ? __pfx_tun_get_user+0x10/0x10
[  117.306119][ T6582]  ? __lock_acquire+0x6b6/0x2cf0
[  117.306143][ T6582]  ? __pfx___futex_wait+0x10/0x10
[  117.306176][ T6582]  ? ref_tracker_alloc+0x318/0x460
[  117.306200][ T6582]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  117.306223][ T6582]  ? tun_get+0x1c/0x2f0
[  117.306249][ T6582]  ? tun_get+0x1c/0x2f0
[  117.306279][ T6582]  ? tun_get+0x1c/0x2f0
[  117.306305][ T6582]  ? tun_get+0x1c/0x2f0
[  117.306333][ T6582]  tun_chr_write_iter+0x113/0x200
[  117.306362][ T6582]  vfs_write+0x5c9/0xb30
[  117.306385][ T6582]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  117.306412][ T6582]  ? __pfx_vfs_write+0x10/0x10
[  117.306437][ T6582]  ? __fget_files+0x2a/0x420
[  117.306470][ T6582]  ksys_write+0x145/0x250
[  117.306492][ T6582]  ? __pfx_ksys_write+0x10/0x10
[  117.306518][ T6582]  do_syscall_64+0xec/0xf80
[  117.306542][ T6582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.306571][ T6582]  ? trace_irq_disable+0x37/0x100
[  117.306601][ T6582]  ? clear_bhb_loop+0x60/0xb0
[  117.306626][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.306648][ T6582] RIP: 0033:0x7fe3a238e1ff
[  117.306667][ T6582] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  117.306685][ T6582] RSP: 002b:00007fe3a32ef000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  117.306708][ T6582] RAX: ffffffffffffffda RBX: 00007fe3a25e5fa0 RCX: 00007fe3a238e1ff
[  117.306724][ T6582] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  117.306738][ T6582] RBP: 00007fe3a2413f91 R08: 0000000000000000 R09: 0000000000000000
[  117.306752][ T6582] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000
[  117.306765][ T6582] R13: 00007fe3a25e6038 R14: 00007fe3a25e5fa0 R15: 00007ffe45eac6a8
[  117.306791][ T6582]  </TASK>
[  117.306802][ T6582] BUG: Bad page state in process syz.0.156  pfn:566d8
[  117.595305][ T6582] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x566d8
[  117.604592][ T6582] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  117.611872][ T6582] raw: 00fff00000000000 dead000000000040 ffff8880206c0000 0000000000000000
[  117.620532][ T6582] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  117.629167][ T6582] page dumped because: page_pool leak
[  117.634618][ T6582] page_owner tracks the page as allocated
[  117.640395][ T6582] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6582, tgid 6581 (syz.0.156), ts 113729863833, free_ts 113700242624
[  117.657453][ T6582]  post_alloc_hook+0x234/0x290
[  117.662298][ T6582]  get_page_from_freelist+0x24e0/0x2580
[  117.667888][ T6582]  __alloc_frozen_pages_noprof+0x181/0x370
[  117.673942][ T6582]  alloc_pages_bulk_noprof+0x560/0x710
[  117.679539][ T6582]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  117.685794][ T6582]  skb_pp_cow_data+0xb47/0x13e0
[  117.690737][ T6582]  do_xdp_generic+0x699/0x1190
[  117.695567][ T6582]  tun_get_user+0x2465/0x3dc0
[  117.700338][ T6582]  tun_chr_write_iter+0x113/0x200
[  117.705490][ T6582]  vfs_write+0x5c9/0xb30
[  117.709898][ T6582]  ksys_write+0x145/0x250
[  117.714374][ T6582]  do_syscall_64+0xec/0xf80
[  117.718917][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.725317][ T6582] page last free pid 6576 tgid 6572 stack trace:
[  117.731725][ T6582]  __free_frozen_pages+0xbc8/0xd30
[  117.737065][ T6582]  tlb_remove_table_rcu+0x85/0x100
[  117.742271][ T6582]  rcu_core+0xc8e/0x1720
[  117.746569][ T6582]  handle_softirqs+0x22b/0x7c0
[  117.751419][ T6582]  __irq_exit_rcu+0x60/0x150
[  117.756046][ T6582]  irq_exit_rcu+0x9/0x30
[  117.760481][ T6582]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  117.766159][ T6582]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  117.772205][ T6582] Modules linked in:
[  117.776149][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.0.156 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  117.776181][ T6582] Tainted: [B]=BAD_PAGE
[  117.776188][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  117.776201][ T6582] Call Trace:
[  117.776209][ T6582]  <TASK>
[  117.776218][ T6582]  dump_stack_lvl+0xe8/0x150
[  117.776249][ T6582]  bad_page+0x180/0x1c0
[  117.776280][ T6582]  __free_frozen_pages+0xce6/0xd30
[  117.776308][ T6582]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  117.776350][ T6582]  ? lockdep_hardirqs_on+0x7b/0x110
[  117.776377][ T6582]  bpf_xdp_adjust_tail+0x1d6/0x220
[  117.776407][ T6582]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  117.776426][ T6582]  bpf_prog_run_generic_xdp+0x665/0x14c0
[  117.776475][ T6582]  do_xdp_generic+0x9f7/0x1190
[  117.776515][ T6582]  ? __pfx_do_xdp_generic+0x10/0x10
[  117.776559][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  117.776594][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  117.776623][ T6582]  tun_get_user+0x2465/0x3dc0
[  117.776661][ T6582]  ? aa_file_perm+0x44c/0x1530
[  117.776690][ T6582]  ? __pfx_tun_get_user+0x10/0x10
[  117.776717][ T6582]  ? __lock_acquire+0x6b6/0x2cf0
[  117.776741][ T6582]  ? __pfx___futex_wait+0x10/0x10
[  117.776775][ T6582]  ? ref_tracker_alloc+0x318/0x460
[  117.776798][ T6582]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  117.776821][ T6582]  ? tun_get+0x1c/0x2f0
[  117.776847][ T6582]  ? tun_get+0x1c/0x2f0
[  117.776875][ T6582]  ? tun_get+0x1c/0x2f0
[  117.776900][ T6582]  ? tun_get+0x1c/0x2f0
[  117.776929][ T6582]  tun_chr_write_iter+0x113/0x200
[  117.776957][ T6582]  vfs_write+0x5c9/0xb30
[  117.776981][ T6582]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  117.777008][ T6582]  ? __pfx_vfs_write+0x10/0x10
[  117.777033][ T6582]  ? __fget_files+0x2a/0x420
[  117.777066][ T6582]  ksys_write+0x145/0x250
[  117.777110][ T6582]  ? __pfx_ksys_write+0x10/0x10
[  117.777137][ T6582]  do_syscall_64+0xec/0xf80
[  117.777160][ T6582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.777181][ T6582]  ? trace_irq_disable+0x37/0x100
[  117.777212][ T6582]  ? clear_bhb_loop+0x60/0xb0
[  117.777237][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.777259][ T6582] RIP: 0033:0x7fe3a238e1ff
[  117.777277][ T6582] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  117.777296][ T6582] RSP: 002b:00007fe3a32ef000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  117.777320][ T6582] RAX: ffffffffffffffda RBX: 00007fe3a25e5fa0 RCX: 00007fe3a238e1ff
[  117.777336][ T6582] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  117.777351][ T6582] RBP: 00007fe3a2413f91 R08: 0000000000000000 R09: 0000000000000000
[  117.777365][ T6582] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000
[  117.777377][ T6582] R13: 00007fe3a25e6038 R14: 00007fe3a25e5fa0 R15: 00007ffe45eac6a8
[  117.777403][ T6582]  </TASK>
[  117.777415][ T6582] BUG: Bad page state in process syz.0.156  pfn:276ed
[  118.064981][ T6582] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x276ed
[  118.073820][ T6582] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  118.081011][ T6582] raw: 00fff00000000000 dead000000000040 ffff8880206c0000 0000000000000000
[  118.089667][ T6582] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  118.098291][ T6582] page dumped because: page_pool leak
[  118.103764][ T6582] page_owner tracks the page as allocated
[  118.109549][ T6582] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6582, tgid 6581 (syz.0.156), ts 113729846420, free_ts 113700274850
[  118.126655][ T6582]  post_alloc_hook+0x234/0x290
[  118.131503][ T6582]  get_page_from_freelist+0x24e0/0x2580
[  118.137184][ T6582]  __alloc_frozen_pages_noprof+0x181/0x370
[  118.143155][ T6582]  alloc_pages_bulk_noprof+0x560/0x710
[  118.148767][ T6582]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  118.155418][ T6582]  skb_pp_cow_data+0xb47/0x13e0
[  118.160369][ T6582]  do_xdp_generic+0x699/0x1190
[  118.165179][ T6582]  tun_get_user+0x2465/0x3dc0
[  118.170367][ T6582]  tun_chr_write_iter+0x113/0x200
[  118.175594][ T6582]  vfs_write+0x5c9/0xb30
[  118.179916][ T6582]  ksys_write+0x145/0x250
[  118.184308][ T6582]  do_syscall_64+0xec/0xf80
[  118.188855][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.195007][ T6582] page last free pid 6576 tgid 6572 stack trace:
[  118.201403][ T6582]  __free_frozen_pages+0xbc8/0xd30
[  118.206566][ T6582]  tlb_remove_table_rcu+0x85/0x100
[  118.211759][ T6582]  rcu_core+0xc8e/0x1720
[  118.216043][ T6582]  handle_softirqs+0x22b/0x7c0
[  118.220977][ T6582]  __irq_exit_rcu+0x60/0x150
[  118.225645][ T6582]  irq_exit_rcu+0x9/0x30
[  118.229996][ T6582]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  118.235845][ T6582]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  118.242012][ T6582] Modules linked in:
[  118.245997][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.0.156 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  118.246031][ T6582] Tainted: [B]=BAD_PAGE
[  118.246039][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  118.246060][ T6582] Call Trace:
[  118.246068][ T6582]  <TASK>
[  118.246077][ T6582]  dump_stack_lvl+0xe8/0x150
[  118.246114][ T6582]  bad_page+0x180/0x1c0
[  118.246146][ T6582]  __free_frozen_pages+0xce6/0xd30
[  118.246173][ T6582]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  118.246215][ T6582]  ? lockdep_hardirqs_on+0x7b/0x110
[  118.246241][ T6582]  bpf_xdp_adjust_tail+0x1d6/0x220
[  118.246279][ T6582]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  118.246302][ T6582]  bpf_prog_run_generic_xdp+0x665/0x14c0
[  118.246350][ T6582]  do_xdp_generic+0x9f7/0x1190
[  118.246387][ T6582]  ? __pfx_do_xdp_generic+0x10/0x10
[  118.246424][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  118.246459][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  118.246486][ T6582]  tun_get_user+0x2465/0x3dc0
[  118.246524][ T6582]  ? aa_file_perm+0x44c/0x1530
[  118.246555][ T6582]  ? __pfx_tun_get_user+0x10/0x10
[  118.246583][ T6582]  ? __lock_acquire+0x6b6/0x2cf0
[  118.246606][ T6582]  ? __pfx___futex_wait+0x10/0x10
[  118.246640][ T6582]  ? ref_tracker_alloc+0x318/0x460
[  118.246663][ T6582]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  118.246685][ T6582]  ? tun_get+0x1c/0x2f0
[  118.246711][ T6582]  ? tun_get+0x1c/0x2f0
[  118.246740][ T6582]  ? tun_get+0x1c/0x2f0
[  118.246766][ T6582]  ? tun_get+0x1c/0x2f0
[  118.246794][ T6582]  tun_chr_write_iter+0x113/0x200
[  118.246823][ T6582]  vfs_write+0x5c9/0xb30
[  118.246847][ T6582]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  118.246874][ T6582]  ? __pfx_vfs_write+0x10/0x10
[  118.246899][ T6582]  ? __fget_files+0x2a/0x420
[  118.246931][ T6582]  ksys_write+0x145/0x250
[  118.246953][ T6582]  ? __pfx_ksys_write+0x10/0x10
[  118.246980][ T6582]  do_syscall_64+0xec/0xf80
[  118.247003][ T6582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.247024][ T6582]  ? trace_irq_disable+0x37/0x100
[  118.247053][ T6582]  ? clear_bhb_loop+0x60/0xb0
[  118.247077][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.247099][ T6582] RIP: 0033:0x7fe3a238e1ff
[  118.247117][ T6582] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  118.247136][ T6582] RSP: 002b:00007fe3a32ef000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  118.247160][ T6582] RAX: ffffffffffffffda RBX: 00007fe3a25e5fa0 RCX: 00007fe3a238e1ff
[  118.247175][ T6582] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  118.247189][ T6582] RBP: 00007fe3a2413f91 R08: 0000000000000000 R09: 0000000000000000
[  118.247203][ T6582] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000
[  118.247216][ T6582] R13: 00007fe3a25e6038 R14: 00007fe3a25e5fa0 R15: 00007ffe45eac6a8
[  118.247242][ T6582]  </TASK>
[  118.247254][ T6582] BUG: Bad page state in process syz.0.156  pfn:566d3
[  118.536509][ T6582] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x566d3
[  118.545365][ T6582] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  118.552748][ T6582] raw: 00fff00000000000 dead000000000040 ffff8880206c0000 0000000000000000
[  118.561436][ T6582] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000
[  118.570274][ T6582] page dumped because: page_pool leak
[  118.575860][ T6582] page_owner tracks the page as allocated
[  118.581748][ T6582] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6582, tgid 6581 (syz.0.156), ts 113729828672, free_ts 113700308406
[  118.598859][ T6582]  post_alloc_hook+0x234/0x290
[  118.603702][ T6582]  get_page_from_freelist+0x24e0/0x2580
[  118.609301][ T6582]  __alloc_frozen_pages_noprof+0x181/0x370
[  118.615313][ T6582]  alloc_pages_bulk_noprof+0x560/0x710
[  118.620866][ T6582]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  118.627086][ T6582]  skb_pp_cow_data+0xb47/0x13e0
[  118.632030][ T6582]  do_xdp_generic+0x699/0x1190
[  118.636845][ T6582]  tun_get_user+0x2465/0x3dc0
[  118.641684][ T6582]  tun_chr_write_iter+0x113/0x200
[  118.646758][ T6582]  vfs_write+0x5c9/0xb30
[  118.651089][ T6582]  ksys_write+0x145/0x250
[  118.655542][ T6582]  do_syscall_64+0xec/0xf80
[  118.660768][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.666705][ T6582] page last free pid 6576 tgid 6572 stack trace:
[  118.673131][ T6582]  __free_frozen_pages+0xbc8/0xd30
[  118.678285][ T6582]  tlb_remove_table_rcu+0x85/0x100
[  118.683496][ T6582]  rcu_core+0xc8e/0x1720
[  118.687792][ T6582]  handle_softirqs+0x22b/0x7c0
[  118.692723][ T6582]  __irq_exit_rcu+0x60/0x150
[  118.697365][ T6582]  irq_exit_rcu+0x9/0x30
[  118.701716][ T6582]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  118.707482][ T6582]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  118.713729][ T6582] Modules linked in:
[  118.717780][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.0.156 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  118.717813][ T6582] Tainted: [B]=BAD_PAGE
[  118.717821][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  118.717835][ T6582] Call Trace:
[  118.717843][ T6582]  <TASK>
[  118.717853][ T6582]  dump_stack_lvl+0xe8/0x150
[  118.717886][ T6582]  bad_page+0x180/0x1c0
[  118.717916][ T6582]  __free_frozen_pages+0xce6/0xd30
[  118.717943][ T6582]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  118.717984][ T6582]  ? lockdep_hardirqs_on+0x7b/0x110
[  118.718010][ T6582]  bpf_xdp_adjust_tail+0x1d6/0x220
[  118.718040][ T6582]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  118.718060][ T6582]  bpf_prog_run_generic_xdp+0x665/0x14c0
[  118.718108][ T6582]  do_xdp_generic+0x9f7/0x1190
[  118.718147][ T6582]  ? __pfx_do_xdp_generic+0x10/0x10
[  118.718186][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  118.718227][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  118.718256][ T6582]  tun_get_user+0x2465/0x3dc0
[  118.718293][ T6582]  ? aa_file_perm+0x44c/0x1530
[  118.718323][ T6582]  ? __pfx_tun_get_user+0x10/0x10
[  118.718352][ T6582]  ? __lock_acquire+0x6b6/0x2cf0
[  118.718376][ T6582]  ? __pfx___futex_wait+0x10/0x10
[  118.718409][ T6582]  ? ref_tracker_alloc+0x318/0x460
[  118.718432][ T6582]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  118.718455][ T6582]  ? tun_get+0x1c/0x2f0
[  118.718481][ T6582]  ? tun_get+0x1c/0x2f0
[  118.718509][ T6582]  ? tun_get+0x1c/0x2f0
[  118.718535][ T6582]  ? tun_get+0x1c/0x2f0
[  118.718564][ T6582]  tun_chr_write_iter+0x113/0x200
[  118.718592][ T6582]  vfs_write+0x5c9/0xb30
[  118.718615][ T6582]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  118.718642][ T6582]  ? __pfx_vfs_write+0x10/0x10
[  118.718667][ T6582]  ? __fget_files+0x2a/0x420
[  118.718700][ T6582]  ksys_write+0x145/0x250
[  118.718721][ T6582]  ? __pfx_ksys_write+0x10/0x10
[  118.718747][ T6582]  do_syscall_64+0xec/0xf80
[  118.718771][ T6582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.718792][ T6582]  ? trace_irq_disable+0x37/0x100
[  118.718827][ T6582]  ? clear_bhb_loop+0x60/0xb0
[  118.718851][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.718872][ T6582] RIP: 0033:0x7fe3a238e1ff
[  118.718891][ T6582] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  118.718909][ T6582] RSP: 002b:00007fe3a32ef000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  118.718932][ T6582] RAX: ffffffffffffffda RBX: 00007fe3a25e5fa0 RCX: 00007fe3a238e1ff
[  118.718949][ T6582] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  118.718963][ T6582] RBP: 00007fe3a2413f91 R08: 0000000000000000 R09: 0000000000000000
[  118.718977][ T6582] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000
[  118.718990][ T6582] R13: 00007fe3a25e6038 R14: 00007fe3a25e5fa0 R15: 00007ffe45eac6a8
[  118.719015][ T6582]  </TASK>
[  118.719027][ T6582] BUG: Bad page state in process syz.0.156  pfn:76a91
[  119.007906][ T6582] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x76a91
[  119.018151][ T6582] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  119.025541][ T6582] raw: 00fff00000000000 dead000000000040 ffff8880206c0000 0000000000000000
[  119.034337][ T6582] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000
[  119.043080][ T6582] page dumped because: page_pool leak
[  119.048491][ T6582] page_owner tracks the page as allocated
[  119.054370][ T6582] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6582, tgid 6581 (syz.0.156), ts 113729811626, free_ts 113700324396
[  119.071396][ T6582]  post_alloc_hook+0x234/0x290
[  119.076206][ T6582]  get_page_from_freelist+0x24e0/0x2580
[  119.081804][ T6582]  __alloc_frozen_pages_noprof+0x181/0x370
[  119.087622][ T6582]  alloc_pages_bulk_noprof+0x560/0x710
[  119.093249][ T6582]  __page_pool_alloc_netmems_slow+0x14c/0x710
[  119.099338][ T6582]  skb_pp_cow_data+0xb47/0x13e0
[  119.104259][ T6582]  do_xdp_generic+0x699/0x1190
[  119.109153][ T6582]  tun_get_user+0x2465/0x3dc0
[  119.113919][ T6582]  tun_chr_write_iter+0x113/0x200
[  119.118961][ T6582]  vfs_write+0x5c9/0xb30
[  119.123440][ T6582]  ksys_write+0x145/0x250
[  119.127815][ T6582]  do_syscall_64+0xec/0xf80
[  119.132457][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.138395][ T6582] page last free pid 6576 tgid 6572 stack trace:
[  119.144782][ T6582]  __free_frozen_pages+0xbc8/0xd30
[  119.149938][ T6582]  tlb_remove_table_rcu+0x85/0x100
[  119.155189][ T6582]  rcu_core+0xc8e/0x1720
[  119.159477][ T6582]  handle_softirqs+0x22b/0x7c0
[  119.164297][ T6582]  __irq_exit_rcu+0x60/0x150
[  119.168898][ T6582]  irq_exit_rcu+0x9/0x30
[  119.173191][ T6582]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  119.178922][ T6582]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  119.185046][ T6582] Modules linked in:
[  119.188957][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.0.156 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  119.188981][ T6582] Tainted: [B]=BAD_PAGE
[  119.188986][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  119.188996][ T6582] Call Trace:
[  119.189004][ T6582]  <TASK>
[  119.189012][ T6582]  dump_stack_lvl+0xe8/0x150
[  119.189036][ T6582]  bad_page+0x180/0x1c0
[  119.189058][ T6582]  __free_frozen_pages+0xce6/0xd30
[  119.189077][ T6582]  bpf_xdp_frags_shrink_tail+0x4f7/0x7f0
[  119.189107][ T6582]  ? lockdep_hardirqs_on+0x7b/0x110
[  119.189126][ T6582]  bpf_xdp_adjust_tail+0x1d6/0x220
[  119.189154][ T6582]  bpf_prog_5d7dc57dfd7f985a+0x1e/0x24
[  119.189168][ T6582]  bpf_prog_run_generic_xdp+0x665/0x14c0
[  119.189202][ T6582]  do_xdp_generic+0x9f7/0x1190
[  119.189230][ T6582]  ? __pfx_do_xdp_generic+0x10/0x10
[  119.189257][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  119.189282][ T6582]  ? tun_get_user+0x2331/0x3dc0
[  119.189302][ T6582]  tun_get_user+0x2465/0x3dc0
[  119.189328][ T6582]  ? aa_file_perm+0x44c/0x1530
[  119.189351][ T6582]  ? __pfx_tun_get_user+0x10/0x10
[  119.189371][ T6582]  ? __lock_acquire+0x6b6/0x2cf0
[  119.189388][ T6582]  ? __pfx___futex_wait+0x10/0x10
[  119.189412][ T6582]  ? ref_tracker_alloc+0x318/0x460
[  119.189429][ T6582]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  119.189445][ T6582]  ? tun_get+0x1c/0x2f0
[  119.189463][ T6582]  ? tun_get+0x1c/0x2f0
[  119.189483][ T6582]  ? tun_get+0x1c/0x2f0
[  119.189501][ T6582]  ? tun_get+0x1c/0x2f0
[  119.189521][ T6582]  tun_chr_write_iter+0x113/0x200
[  119.189541][ T6582]  vfs_write+0x5c9/0xb30
[  119.189558][ T6582]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  119.189577][ T6582]  ? __pfx_vfs_write+0x10/0x10
[  119.189594][ T6582]  ? __fget_files+0x2a/0x420
[  119.189655][ T6582]  ksys_write+0x145/0x250
[  119.189675][ T6582]  ? __pfx_ksys_write+0x10/0x10
[  119.189700][ T6582]  do_syscall_64+0xec/0xf80
[  119.189722][ T6582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.189747][ T6582]  ? trace_irq_disable+0x37/0x100
[  119.189768][ T6582]  ? clear_bhb_loop+0x60/0xb0
[  119.189785][ T6582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.189801][ T6582] RIP: 0033:0x7fe3a238e1ff
[  119.189815][ T6582] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  119.189828][ T6582] RSP: 002b:00007fe3a32ef000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  119.189844][ T6582] RAX: ffffffffffffffda RBX: 00007fe3a25e5fa0 RCX: 00007fe3a238e1ff
[  119.189856][ T6582] RDX: 000000000000fed7 RSI: 00002000000002c0 RDI: 00000000000000c8
[  119.189866][ T6582] RBP: 00007fe3a2413f91 R08: 0000000000000000 R09: 0000000000000000
[  119.189876][ T6582] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000000
[  119.189885][ T6582] R13: 00007fe3a25e6038 R14: 00007fe3a25e5fa0 R15: 00007ffe45eac6a8
[  119.189904][ T6582]  </TASK>
[  119.479515][ T6582] syz.0.156 (6582) used greatest stack depth: 17688 bytes left
[  119.490126][ T6608] bond0: (slave erspan0): Opening slave failed