last executing test programs: 6.637190371s ago: executing program 1 (id=4550): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0xdb2, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) ioctl$PPPIOCSMRU1(r1, 0x40047452, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, 0x0, &(0x7f0000000180)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r6, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000002380)={{r7}, 0x0, 0xa, @unused=[0x9, 0x8, 0x0, 0x5], @devid}) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x44841}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x80000, 0x100000000, 0xca8}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x0, 0x0, 0x81}]}]}, 0x1bc}}, 0x0) 5.616252689s ago: executing program 1 (id=4560): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x3, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000001c0)={'veth1_to_bond\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) socket$packet(0x11, 0x2, 0x300) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x40, r6, 0x821, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="67f8b54229e0", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, @loopback, @private=0xa810102}, "00186371ae9b1c03"}}}}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) unshare(0x2a060400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="8109020000000000000003000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) 4.653494865s ago: executing program 1 (id=4565): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x87) (async) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x40, r2}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@getstats={0x1c, 0x5e, 0xc, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x5}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 4.518587798s ago: executing program 1 (id=4567): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}]}]}, 0x60}}, 0x44000) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000000)={{0x20, @broadcast, 0x4e20, 0x1, 'ovf\x00', 0x0, 0x8, 0x3b}, {@local, 0x4e23, 0x2, 0x4, 0x2, 0x71}}, 0x44) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x27, &(0x7f0000000000)={@multicast, @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x3}}, {@generic={0x88ca, "c82bfb8f5713876856022cd264abbe4b98"}}}, 0x0) sendmmsg$unix(r2, &(0x7f0000000240), 0x0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000200)={0x2, @long}, 0x8) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000034b0d716d5ca84d985000000"], &(0x7f0000000680)='GPL\x00'}, 0x94) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) listen(0xffffffffffffffff, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r7, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001500)="99df", 0x2}], 0x1}}], 0x1, 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.377266554s ago: executing program 4 (id=4568): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x46}, {0x0, 0xa00}], 0x2, 0xa, 0x6c8) 4.184800605s ago: executing program 4 (id=4570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x2, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r1) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) 3.92393674s ago: executing program 2 (id=4572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x18, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x5}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008801}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.706875906s ago: executing program 4 (id=4574): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000000)={r0, &(0x7f0000000400)='[[)\x8a]()\x00n\x91f\x92:\x98\xfc\x1a\xe7h\x06\xc0\xc1\xfd\xc3\x06_\xe2\xc2W\n\x94\xbc\x86\xd3\x03B\xba\xb0^Q\xdb\x0f\x8d\x81f\xd7d\xfd\x15\xa1y\xa9\xea\x85\x99\xe9\x913\x0f\xba7\xfe\x03\x12\f\xed\xca', 0x230400, &(0x7f0000000040)={@align=0xfffffffffffffffc, {0x2, 0x0, 0xea, 0x7fffffffffffffff}}, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x2}) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc884}, 0x40040) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1004a002}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4c041) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r6, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430442b25b36f0000000054c7be", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$rds(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000000c0), 0xfffffdc3}, {&(0x7f00000001c0)=""/85, 0x55}], 0x2, 0x0, 0x0, 0x4041814}, 0x24048044) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', r5, 0x29, 0x80, 0x7, 0x1, 0x43, @dev={0xfe, 0x80, '\x00', 0x17}, @private1, 0x8, 0x7800, 0x7, 0x9}}) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000100015002cbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="1203"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3.533449293s ago: executing program 1 (id=4575): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x3, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000001c0)={'veth1_to_bond\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) socket$packet(0x11, 0x2, 0x300) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x40, r6, 0x821, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="67f8b54229e0", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, @loopback, @private=0xa810102}, "00186371ae9b1c03"}}}}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) unshare(0x2a060400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="8109020000000000000003000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) 3.443816869s ago: executing program 2 (id=4577): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000600)=0x5bb, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) sendmsg$IPSET_CMD_LIST(r6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}]}, 0x40}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.4311505s ago: executing program 1 (id=4582): unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000004c0), 0xce, r0}, 0x38) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1, r0}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000440)="0000000000000060145b4ebeada5", 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.289213165s ago: executing program 4 (id=4583): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xf, 0x0, 0x0, 0x1}, {0x8, 0x1c, 0x0, 0x0, 0x2}]}}]}]}, 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00000000000000000000000000000000000000412394f0a77b5ccc648d000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d13c0000000a00000000000000000000000000000000000001053500000200ac0000010000010000000900000020010000000000000000000000000001000004d4320000000a000000ac1414190000000000000000000000000635000000020100090000000101000008000000"], 0x1ac}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x22, 0x200, 0x70bd2c, 0x25dfdbfb, {0x15}, [@typed={0x8, 0x12c, 0x0, 0x0, @uid=r5}, @generic="45ee26deda2511", @nested={0x4, 0x24, 0x0, 0x1, [@generic]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x3ca, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000ec0)={{0x14}, [@NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0xd4, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7614de63}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}]}, @NFTA_CHAIN_USERDATA={0x6a, 0xc, "d442f88f2ce0050e07986da4a3f89295b4c12f6342159ce1778dbbcdfb8010707a4ea382e46cd8a10441fa249ac8b83bec093cdddc375036fbc1e2a8b87879cb255de76ae9274be4bc2e77685de370c745ccfdb3893137a28e6cacfcec1c3751dea3d5e7ea49"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x1dc, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x174, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x80000000000}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x50, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x14}]}}}, {0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xff3}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x67f9398d061ae30a}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x150, 0x8, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x108, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x58, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x8, 0x2, 0x1, 0x0, 'nat\x00'}, @NFTA_LOG_PREFIX={0x8, 0x2, 0x1, 0x0, 'bpf\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_PREFIX={0xb, 0x2, 0x1, 0x0, '.\'({\x8c:\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7f}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xfffe}, @NFTA_LOG_PREFIX={0xb, 0x2, 0x1, 0x0, 'tproxy\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x498}, 0x1, 0x0, 0x0, 0x4008840}, 0x20000040) 2.187079527s ago: executing program 2 (id=4584): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, &(0x7f0000000580)="f26940bee0c399e37df5b6ff66ae4149b65eac3df039f72c2944879be4eecdf9b9caf0ff7a2463", 0x0, 0x1}, 0x50) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 32) r2 = socket$inet(0x2, 0x5, 0x8fb2) (rerun: 32) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) (async, rerun: 32) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e23, @empty}, 0x10) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x8400) (async) recvmsg(0xffffffffffffffff, 0x0, 0x40010040) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x4}, 0x10) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x3a, 0x2, [{}, {}]}}) (async, rerun: 64) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (rerun: 64) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) (async) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) (async) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000240)=0x5) write$ppp(r5, &(0x7f0000000300)="5af9", 0x2) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x4040810) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x200440c0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r6 = socket(0x29, 0x6, 0xe78) sendto$inet(r6, 0x0, 0x0, 0x404a004, &(0x7f0000000000)={0x2, 0x4e24}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 2.120042914s ago: executing program 4 (id=4585): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6(0xa, 0x2, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="e05a5de397ee362f573ea834553caa1d10689e25a2cbda2dbb0b", 0x1a}], 0x1, 0x0, 0x0, 0x4048015}], 0x1, 0x4000000) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x8dff) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff0200000000000000000000000000014f194e20006490"], 0x9e) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x364}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.095595279s ago: executing program 3 (id=4586): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x40000) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r3, r2, 0x25, 0x4, @void}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.012192846s ago: executing program 2 (id=4587): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv4_getnetconf={0x1c, 0x52, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}]}, 0x1c}}, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) bind$tipc(r1, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) 1.764838934s ago: executing program 2 (id=4588): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1b172191d359645fae2d074ea5724ab77ea04fe507938b1213cdd4a92860e59808689382734d24b3123dd40c6d612c8a19948cd257748b1e7324adddbe61d51013f7d6b313c6df7b7b29678d70fc94dcc3e99e2472e78968ed94e7a54988656e8fff6b1d9b9993c71edd5cc10a2bea8d94d751b77fa7c48c712af35a9ffe670e8fa451942f48741119496bc30137e1202aed6bb5cd5c2d0256d049e4a335e2ea5545e5624be2391c37c0a2ae3bbb5b58778b85424bcdb84358359b2cb2782fc0e82f17b12d641ce6a72ab0ac794f878140897703bebe4420115d26675f27598841965fa91088252"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x64a0}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fd}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}, {0x85, 0x0, 0x0, 0x2d}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000440)={@val={0x0, 0x8808}, @val={0x0, 0x1, 0x6, 0x1, 0x12, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x66, 0x0, 0x40, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, {0x4e2a, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7fffffff, 0xfffffffffffffffc}}}}, 0x3a) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) socket(0x1, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) (async) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) (async) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) (async) ppoll(&(0x7f0000000180)=[{r0, 0x64a0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fd}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}, {0x85, 0x0, 0x0, 0x2d}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) write$tun(r4, &(0x7f0000000440)={@val={0x0, 0x8808}, @val={0x0, 0x1, 0x6, 0x1, 0x12, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x66, 0x0, 0x40, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, {0x4e2a, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7fffffff, 0xfffffffffffffffc}}}}, 0x3a) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) (async) 1.633215277s ago: executing program 3 (id=4589): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00", 0x2}], 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0xe4}}, 0x4008840) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0xe4}}, 0x4008840) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r3, &(0x7f0000000240)="14000000140005b7ffccca38b90000", 0xf) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}, 0x800}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}, 0x800}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x0, 0xfffffffffffffc41, 0x0, 0x0, 0x72987988, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffffe) (async) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffffe) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000440)={0x0, 0xfffffffffffffffa, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40c0040}, 0x20000000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r10 = socket(0x400000000010, 0x1, 0xffffffef) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008850}, 0x20084084) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xafefe9d77eac07ae}, 0xc1) connect$bt_sco(r2, &(0x7f0000000540), 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 1.331680136s ago: executing program 3 (id=4590): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) 1.142574741s ago: executing program 0 (id=4591): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) r0 = socket$inet(0x2, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000002c0)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000300), 0x0}, 0x20) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) (async) r3 = socket$inet(0x2, 0x3, 0x1) sendmsg$sock(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001240)="81e7545db469b192bba561ac6c2725bdbacd11266c1036a73b2ef87c20e03a43c07bef6d1685b3229544eaebfc36546c6bcb7e91cb072228044551e6426cbeb083dd558bc600c9f5b830840d9cbe8591816968ae3be3432a7422d6ccad9c1f0bdf3686ed5c2797d9c040347a9c44e5834a0ccc5aa6d509b2a6567134f679175c8c7553fb79a6aa02f046290a4bb4a9d70b1ea92bfbe8d52bdcbe06fdd14d9694b69d02e3dd8b0bbf96d8d94634915504cc5ec159eed3386effe807fc3318954a02b0ffaa9e60eedbc444f175cc8d4368702d5bcf99ee4e277c2f9dd0a8fba6fbbd05172a8720220422023fa8f0e53e51dad23c71ff4a9a20695414e4376a841c7c8da5f4d18e0b1b6c85d48361fbdad0aae4616209059114a769a559b1ceecd535f39b5ecfbafdf0f18b357e1d041455bd3a57624e1b4208f7a12d56e47b207bc9a4189a8adfa8971a318b98c2aec597f1bf8ed96c4455dbbd232203c8adc621410134aab5e53e938ef6b89fa0a6e97d9721f5a6288c84acefa911cd157b54609b50a020902ff543d035de11ed1cbdfbb4f4b7e8dc3cb4c2ec15ae49f1cdad808bc61e9a24448b3ee98f0d4de825f4dbc280d8cc3f51e90cc16186aa2c1477c1daeca203548ba199bb3ee57734bd8153576a398ded67e2ca1e245b770a2d4315113b4923b4efa15d034a5bbb31f903ec50a13433e2ed51916e0292ac8dc0cc98700f218b28e1d7eb71fd376de8ceb77ff516e52ee639e537281a5a825f0bd4e55923332ab322f2d99a36e24a3872caf70f900b91e9152df1b71dd3de6baec303e935402ba3a51406701ae9b055319d2d17c6527aaee66d73c4f7fc64e67cee467e461c43421dd610811fd08f2bee6b80ef5228a1bbec8d79c28672d980dbeaaaf8878e0b2bdbae19f0d9950d0369e7c02b1ae16c27b258fa89211c217dabcd41d80a807ee8a6316cf371224b07775e2feaf374597d686e0060c05bbbea0831d312496d35f3d62baa4cf5db22ef1297c1cea64748d85e3d47f02c72dcf04c190ec9aa65b3339869d210482fa72bb3044e33ba67440b8a1b7d1b0a482d08c88dba8a538412beeeade86a4849c63de2c599f63169105e6050d7d479f96a867d18ba30f4c0838fd515aa7b1a8f2610a2734413b5f2cc18024a6e0837068a46de6e88fc27bb93b10b194ff3f7c6c4c4a9009dd625a740753dc67d5a84fe211bda4d1ababcba2408b902d9f9987a5d5fc04d982be0a92649d4317d7a2678815e18c3a1748ab1f75cb9dd7e05f80590de9430a7e450eadc266ee4a6ba1e2f7a8824e4b06444b46b4cd04a732c14badecf4342be0067e3ecc23e81ef901575ebf9cd99a0301f9e293fbcfbfcf7195ffb62d386c8f507ef96c177831a545dc2f19e447333116fc7d777cea10d7dcf3d5ff9ae48ce02809241efe75a56e7bf922174d8348f1552548b8997c8050c29573153fca3503a631fc463a8fa6e49f1f376dbb4a49f869935bd9b00f90b15baf02e2708d06f246982aeea719f34cfd6919a5354b784805cd8a7bcb95f4db964f2378349cbbf29315a9d80029d885186a35384914270adf8b1cf214d29387a91f2e6efd25943319feaa15eeef02af4531bda6834a6a6bc5e0a5c493baeccb35c71b0f4280fd331801b9a0c89aa949cd9d6703ea29819dd257c8d823b7454c0a4cf85ab2651fb77b7bf6352b9430f6a2878a05abe89c1041dab260a994f030e60a5a0d9644e88f259c05916cc36bd836af3e0d74c7d7e4f83131b71709074f3e96bc65a85049f4df2dbee8ad0c82a2f99f0bb0ac6ef20d983ff7be821544dc70a0a9998d3071e8389abd1f4f89829c568e4423a84d0b699a898129a8f5246642514e28873767246cde10e1bd847ea378897e17b411699198a1cb5475443b07cfe7dbc4e58a3eb3fe7a1e432d7377a570292fbff11035612ae44188b2eea08d19b4de1354a2b39a21608102f7124feb174fb7964078d8938f222797673996c4583792b7cdc79b95caf2b225f93aab703bae6b78f62b00cfaec14cda626d89e8b629d9b193e406e3f8465f1ca48b8cfd9bfc5ea5ff9410bb831dcc81c54933da8e586d860a856b4a1ae44f4fb3c17c92986e203b89d06c312a3511d13f34b3bb588fad27407f462cf39603a8956164b922364f4ea3f3669e3025e27bed443f43ee977c0fe4d85f088bc70c1b96911e5633cf604673273383e21b3eb8deff48f4325644716c04cc5be893e5a8a1ea9a6a42716b226fca687e10da459dcbde5c5b975e79090c30f191aaccc0c9da1aa2b700f1ff29582e7b83d93732a7bfadd44a4af33e5f8a3623eb93272a8c0869c34fac4112996dae9b1d2d7d4a410297d3ab8a1a323813477b2f3baa00deb16a76843d61dcd803361f9153456e8dcbee0631bf6f26a015b21da3d548a94d044af2a252eb5222d5bafed66f154863ff4803360cba6b4bcb93c72aba3d33bb70d7f8790c3bfef0c064e1313ac0a8d30a908cb269a37d62cc87138442e3e5da6bd87e7148cf838740c21d2874bc6e275feaad7f061a80f1a3c3bad21a365b0e102e3ae1db789d27e880e8a0e33e37b5b096d1f4509ddd069b6ba6692ff7bc9b7c3ad78f936053b94933f9c49d2a4b0ca1b929d900fed71382b9bf479bdfb2f29a5e7155faa31f25780e4e89c1927b42ef2ee72357aa9b8c59da16b42e96567221324a2ac89f16d6ac85afbe652450d3713cc005a0ea69a9c0c4c2f7fb3e5ef7c5813b5c250821e6498ce913c1070e7612ec72467c1936c25231fa0e1b61888c014393865aef2f27c05b13489826d16c2ba4d80c6720feb6c589551046e0183f863f232a85c450abc4a437564ce1c4aae507ac40b0aef3ccb85c0abc23fce6a20da600c850d52c639ddd46b2558fbe5847f5c1249b2281277b47b6157ec3d912b2ecd8397b54b08095c47f3dffe6b8204753f8b93a48fea7ad53caf385228deb772d396a6280c966d6f7acd0ae31c8fbd02ff6300f308794388f60ed6a90c2e06e16624c0f403d8b16f947ff7d7e4ba036c9a26fed66a303fdd716ca50ddbe11e3fd752ae2b7f10ea39d6df8df5d4f35617a367c811d0072eb68e188524accf2be0b9702771c1cd9643932d3c240cc2ac621dcc2aaae113e274b1e93d081d0d890c59373387b328ee0ddb5c3354e194839d58dde79994ea96de436b66fb2a2e9c5fef4744d79ca5c5550a6729d81312ad759eabd34b7fc73f34fc372f05db086156b9bd9a29d76f6f2d7fd5df1827ab28013e7c03777753215bb712c0afedcb2933aa8140fed4556e26a2e152ab737c85ac612e4f3e6a08c146cef396b339239083fdd04f53949cf1c9e8505b43df5988c03df930ddff395edea7befb4841c34c44e914eff92c7d86645b7d5a9d8c822db1b9578669041e14ec1db5225d88c6bce61bb8dd88a9e9b84d677fa0888836ea8b5f1d5b8cfbe8c7a5a068de08bf8bb7048f9c9ecd4c649b6e53d7eb29d577eabe7d498015e3faf831380dea3853366894777c765c9c3993c65d4e0364bc4bff787e8fb2dd4079c68f781d4599bb03a8a8400567d807feb3f0da2abeac09614269604a56eb7238b11185891a0fc78f6ac02a60fb566ae45f0ec53847a0ed3d36287b217e2e95fd938ecd608cf7a1e8c06239a42bf569f359d38f41942ec6af8676b370f450ea41ae0378a650542f6be078de0a8a9548275205bb32c1b3fde8730a4809db3e8f6022b174aa8f2aad0034e9ccc20683a33816334acd16f72dc542a95633c6170ba33101c6b26a972fb7b0fa34500dd1710d7a5cdffcb38edf8c3cfc72ae5d6d7223bff5fda0d2c8673fa9be210545682369584172aa4bfb977c8eb7679090a6478fed917d2980f757db5951e23e3e84ed94698db12fe5cff256a303ba7653e18cdc160433025bdf46db8bd6ca2cbb31ee2ab39c6f0513198c121b4b0f081737e035b541095f4f6b7b3542fbd987bb17b8087b453fc1ae27d174f2888d550add694c5911f7024164ad7649905fafa83256840a6eeb01b56e8c25851840203dbfdfffd19d3ef63dbe5d620f76bdf84890f6af97b86aa17e6366dce17e23b2550a5c885b4e3ceb389dbb5f3f2dc7e232b3aeff8da18754c3b7d6d6017265cf3a7ed6c494ce450a7c03c357f8ec2a97319b6d7acad4e3195ddd14b4641229848e77d93353494f76b0edb16f103acdc102f10963eda84559e4b221f000e6b852e244a1814800ff6df38cbee4c178cb5689bc23cdf4490fd7c70d79848c12a868a842a202808643d48c6d96af3dbebb98fefdcb442a7e83d38be4163166eaf425b9b71ab5cf53044e0ed3a54416aae8add6639c7ba30918f48824e266f3c0455a9d9e11b13ab4522afa015e3a086a0404b1a716fc12b660fb67feb0adeec720118ce9ac1d13828c309a707134cdc61ea7f945be92f0acc7fca346209fcb6fc014e3bac8a8c11c4285b046f3d19d0cde1f08bfefbb972087838b25daf287ba4e4611c8b0418e5a01134c659f96393a1791c5a3723098240fda3942b34acdac5d1fe81bdd1b7d427a336d8d49f42d421cb419d79f2c380f7c112aaed525795843a80092512b156253d58491b255d9cca9bfd5867db8b592cd16652152008d18ab926e956055cfbafb796ff6c52a7fc163b63a19501d5e6083f6626cfad2acb06d180570208b39271f569cf324bfef88ef398edc2172f742fd5049a64f33fb7e3b78541df38a0d203399ece0003bb8d6fe83de8a337b3eece337faed57013dc3e058e63e832c0146b9bbdaadd93b84b9f4db437a135fb98388a04927838d7fdcce35dfda7a74d3f90b16681f7c629aa5f77c2b9bc344ed01def0ad82bbe5592b62e9fc720c48cd8e23c8e8399b2483e66af778684cbbb0795bb681d88a25af795b5451a4a344cdd61b4d9896a5c2c08ba5a5afdecb74d4e8e3f997d46a2a7250f472be7560fa7a74fbb4aee60d1453413b765cae92decd9cb6178d5a68b4c83e9ce33eac4b1186fa9d491929784bedb8b0dd2edc0f2a29b2d4595683ab293ca946f12d144da367aed733e414dc0a0c7a716f0a0fd40e337f810308bde324a6a7dad27e2f5e6972f6b0f1dc078b10acc7d4c43578ebe8d31cf8faa666658d4e613fa6c6818cb30181c070a5909d95bff85bde55b282aeab851944a0f0de3f2678dfad925d30e3b2bdd19673ef6b9a38688aa4997b561e7decee933b4a856f22e0ff941b3d4dfef9402bd8f10bbcc44f5e301490126f1ffe2d898bc699e78aeba3f8f6e02485603e3caaf627f30c57ebce21559a0f3794f095d3be94b9357031819f885f78868d90176e94408aa50837516ffd31ad31f71b02f886d989d994cea2874c3e0cf02039cfb0027c2cf1a1eedfd06187b0dde33596d4d78ccd7346f74ad898f90bf88d6ca4e641e79f78d86c595d60c9cd4086b3e3bf01e1b93a5663502372025b3ae97086550594bb13bcf14f67b058fbe713fc3f0d15122f0819285759435a96cebba2cf9567f06b90e44eb11779c0169feb14857822dd9f6349452c11614f763dbcd5cadbb537c4afcec816b26d8ab4cf2725b00e1b3dc322671873e1dfc28c06633fb085da733b863d462164de1f4eb98ceadc7726c5490dfa8730b61652143f7065b7e96439a0d56b43e07e3b71f4843ee3c6dcf41daa818c34b903012f14830b8efbab3bdd101cd01528fdcb2423bd748e6e071b17fc70fe33993a6b6f3df6ff863ecae1c075ae5c7b399900b48bc7a09a948632da0652a01b4a3421062bf5aaba50e46d6d328f34d29def8777c47fcc75509e7d", 0x1000}, {&(0x7f0000002240)="ea2961cb1bd62ac7bbfbae976ee8efcd8d989ec67f20943a0886269de260fc6fdcfb8d32a55da30d6e0e9a89273f8b7af5d1d935881f69c0f76d7729eceb9c94cd8d95a2458e0eba0699ebb95d37b9aa70c4b79c1b702484713c57cde4731be85576a3e8309ce81d411ed6a2ea22c8d3cf2eec371657ad74d98038aa2b41d8c8d49f85c82a5fac02bb0daa4d1db662dfccf2e30e0cc9d5c2eaf57efc895417dffbe4228d1198a1d837fcb55d50e38945b9f4bf5e9c7c853301f87c8fe686627f3eb115bd18097121b6b4", 0xca}, {&(0x7f0000002340)="27d4c0c05c64aecb7edf5cf42c10c9917aa7ff99ff732f7a253aeb05dd448aad26e75e3d6e3d9fce303ebfe53f8d0f7827a3a2c1b572254f00fe5210e3e3e5df07bb59023b985efdc90821e2bdf33571f8c1839c301feb048c11b573d736281a0f519e5ebbcbefba553a874205e37116f4b2d17240aa712e9317f62d9c53b9108b63740026eaf56c12ce946de958ed9b1672100dc0e7299e77ab0ef5f7915c629f87d7daa5dd53412b84fc1a802bebb4192be1fc27873091ad256817a915a09b97d1bd1785b6ff8941fe97164086cd2bbc1aac24f904445e82069198b4d134344e03e6a811968f18c668c8fee80ad09a1306f05d2cd59e2029", 0xf9}, {&(0x7f0000002440)="b17d5703220da0c56015f4dc66c2fd0c932ce00c4334ce47f0137b00e0bd4fc2ac157402314f1343797eafa16faa78cfccba38a858a77392f7723ecee3b44a4de1ebc9ec884374b8eab23d4a73be73e07febfffcdb77ba8d9b7604ce3bbf07a82188d4f5e6a61dfed6c920a09054b250075d68", 0x73}, {&(0x7f00000024c0)="f2b9a8f0ecf6e54be44193e951df4884e6a40f3032e9f313e46c7d3bd0cf61564e9d61f106cc97d98a8f1c81c7d58ae400a8ac86664a33b1b3941b9573bc5e0e63d367d883b1e538f30ab40a522a3f9421b3d55c1050fb6d1dd68ed2018b372c9f", 0x61}, {&(0x7f0000002540)="fb8d97fc053002f9e305e5678a70dc9520b4820778cdef81b5a74f37595c4bfac62c01e3a9e6d48a", 0x28}, {&(0x7f0000002580)="e7d51f4a64ecf6ce9e5d69ab5ba998dceae13f4b29405388697d0bb6e149976f2201c12aff1f44d5a3a74540a89fc81a114af7650790484347e17485290a1c319d606852550fbb5417b542ca71d2504f088225cea7cb47bc9474279ac6e426d09b37", 0x62}, {&(0x7f0000002600)="4282ad98b433b8eb194e9ce5401c72064446da7c5a8f94920b8eea7f9f61f647bf1d34a53024cfa2617882eb469c16358032e74524c84f631bd88bba588936c0efd0d4b9bc488351f2bf", 0x4a}], 0x8, &(0x7f0000002700)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x7000000000000}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x24}}], 0xa8}, 0x400d0) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x6, 0x1, @vifc_lcl_addr=@local, @private=0xa010102}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) (async) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000b2d6a8d8000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) (async) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000020000000400000000000000b11c47fac56e5da14b673c5c1674dcedcc01b95c8df52056b00b275b9ee3282a6c4a2240fd5a45c97e55c31e2222fb8c3ef176393e3d8a67bf2174", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x6c, &(0x7f0000002840)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x36, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x3, {[@nop]}}, {"d05746d865b30d57fae8381c070d382be85a47d0e405173bf68b4d7824d0"}}}}}}}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000002800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0x5e, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) (async) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 958.960559ms ago: executing program 0 (id=4592): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001dc0)={'sit0\x00', &(0x7f0000001d80)={'syztnl1\x00', 0x0, 0x1, 0x8, 0x400, 0x400, {{0x7, 0x4, 0x1, 0x26, 0x1c, 0x66, 0x0, 0x8, 0x4, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4}, @noop]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001e80)={0x1, 0x58, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002140)=[{{&(0x7f0000000040)={0x2, 0x2, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="9fafff5dab1c9e5fca2df0baaff717f9df9bd7e003f2f24f61227b7c7bd40df7b9cb2006eb72b6e64b769dc661fc5b4433e63aaa7188783929", 0x39}, {&(0x7f0000000080)="2a7b98eff85631a6bc095ed4e4353faf88cd7e5d547cfc6271f6ede9112bb11f49f2d8b8934da2e8f5257b7a9bbc79b3463d8f6fee7bf43830c36ddc61933fad3ee859ccd45aa3dfddd60d601590fab5151effada8a321c518912bf6dc0c51b19bf3df1b2095e35d07b19e179adf1447966e6376aa1afe66603a10a3923fe3da6c9613d6394193efa9c3517c936f21153481dc43da7ed2", 0x97}, {&(0x7f0000000140)="0ae3abde6be686c98746facddc18d54cfdaa6fc518648c07278fab80fb95c9016375be34e2a25b64640cc736210a5bda4072c088dcc4051676c10989eeec78d731d88226b851fe755d7a170aa3f91143e113441aa6f3524d6ebb40c571ae3c7cb3455cb9d733e8791308ece1e24501fba74120048a155c90bfe3a5c1755c40f13cd2b36e0956fb683447c76f046eff7a85df125afabb23f703c5bcc8d646b009afcd2b89833cc9cf3b0efa58790610012fabcc5f5b", 0xb5}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x80, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x5c, [@private=0xa010100, @remote, @multicast2, @broadcast]}, @noop, @timestamp_prespec={0x44, 0x54, 0x80, 0x3, 0xc, [{@empty}, {@multicast2, 0xa}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@remote, 0x1}, {@loopback, 0x1a}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x3}, {@rand_addr=0x64010100, 0xdb88}]}, @end, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0xc8}}, {{&(0x7f0000000340)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000000380)="a76f57c45ee10e9d141e4bfa3f7f7004825aa3acd87c2331dbca5f92a51f2178df510700a428b94e136213e39e4f0761f2c9e7028ed6768f31efbc91dccec2b966f0fa44c950e43825136ff53403ea8e883b58b9b6f686884e924c005fb74c6a91fef0eaf781c6628d0af68f3124a12549b7387d66c103d342ba45bfaff49dea4fca68ef83e417b168bca7c1a19e70a05b162a596ab6ea979b6011d4170ab9e69a9c0d8b150104dee4eda59fe84de6a3c24ea01df0ade87820b4e16ce8da1a50c4128cb650424ef8559b38a0af24b6f34c78c5956716dd63166893ac", 0xdc}, {&(0x7f0000000480)="5fd060725f5ff07894b096", 0xb}, {&(0x7f00000004c0)="0fd0765b0535fba3df96fef2795e7379d489b3fe4cdc", 0x16}, {&(0x7f0000000500)="33cbc3086299bea49044401c2d8ba7003c730220e6821c4ada4b44f41b2b88", 0x1f}, {&(0x7f0000000540)="a79dd4e8809198f8aab7d42db8f5272eab8d791e8798604b42050e01a98228c4fdec2f82028b0a3e6cac4cb41bfc385e4b2dff50d77a04e636c9", 0x3a}, {&(0x7f0000000580)="cc52164731380e76bbf83ea764b15ef34e7d2f97d5d165939f231cab29ca927721e4fad608770d96f5a4a7991cf5f172bfade6ed77b6003aa8af71cf07e28ab5776b8dec", 0x44}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="054f2a7fb86f742bdac63fa447e74c77c5677444dba01bc9a1745f68612be1b1e59e5f9f35732a5aabc81678252fabfdaea38c7e1bf4b1a63a75f8c682646844e48dc814ab448d63", 0x48}], 0x8, &(0x7f0000001ec0)=[@ip_retopts={{0xcc, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0x1d, 0x1, 0x1, [{@empty, 0x1}, {@multicast1, 0x29}, {@multicast1}, {@empty, 0x1}, {@multicast2, 0x200}, {@multicast2, 0xab}, {@broadcast, 0x1}, {@empty, 0x4}, {@local, 0x401}]}, @ssrr={0x89, 0x23, 0x2c, [@multicast2, @loopback, @broadcast, @broadcast, @multicast2, @broadcast, @private=0xa010102, @broadcast]}, @timestamp_addr={0x44, 0x14, 0x99, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x4}, {@remote, 0x1}]}, @generic={0x86, 0x9, "32905fba68dfa7"}, @ssrr={0x89, 0x3, 0x3f}, @timestamp_prespec={0x44, 0x2c, 0x93, 0x3, 0x9, [{@rand_addr=0x64010100, 0x25d}, {@multicast1, 0x800}, {@broadcast, 0x3}, {@broadcast, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd433}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xc4, 0x3, 0xc, [{@private=0xa010102, 0x9}, {@loopback, 0x3}, {@local, 0x40000000}, {@local, 0x15400000}, {@rand_addr=0x64010101, 0x7}, {@multicast1, 0x8}]}, @lsrr={0x83, 0xb, 0x4e, [@empty, @loopback]}, @noop, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x68, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @multicast2, @remote]}, @ssrr={0x89, 0x17, 0xe5, [@broadcast, @multicast1, @broadcast, @multicast1, @private=0xa010102]}, @timestamp_prespec={0x44, 0xc, 0x9a, 0x3, 0x1, [{@empty, 0xe7c}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0x7, [{@empty}]}, @lsrr={0x83, 0xb, 0x8c, [@rand_addr=0x64010100, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1b, 0x81, [@multicast1, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010101, @empty, @remote, @private=0xa010101]}, @noop, @generic={0x82, 0xe, "39e93b27244e04ce757db9b3"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff9}}], 0x278}}], 0x3, 0x8014) getpeername$llc(r0, 0x0, 0x0) 876.233716ms ago: executing program 2 (id=4593): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001800)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x48) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) recvfrom(r4, 0x0, 0x0, 0x40000020, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) socket$unix(0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000003f0010002cbd7000fddbdf2507000000550066800400e6803fabab44b71eae96497bcb2f04474b6e4cc00030646feda424cc2d2e813ec3a98ef361812bf729d21a31723461900117c23dfa8c6b43a3f19adc4116b41b3e1342e312dc6211a55e0c4333068f00000008004100", @ANYRES32=r0, @ANYBLOB="0800750008000000027ed53de201988969280148159eb5f9550a91e54aee610c00677f426bc6cf78201c3fcb36afcd753f1e9d21297f6a17377c"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x22000004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000380)=ANY=[@ANYBLOB="fc0000f318"], 0xfc}}, 0x804) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x10, 0x0, 0x1300) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @loopback}, 0x80, 0x0}, 0x4004851) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x57, 0x0}}], 0x1, 0x4004) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0x4c83a) 821.178242ms ago: executing program 4 (id=4594): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x53, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x401, 0x5, 0x8}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x65c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc03}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x129a}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008015}, 0x884) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$key(0xf, 0x3, 0x2) unshare(0x400) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000005000000fd09000084008ac8000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="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"], 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000b40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@deltclass={0x38, 0x29, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xd, 0x1}, {0x9}, {0x8, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x24040005) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) sendmsg$key(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x2, 0x16, 0x5, 0x5, 0xa, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x7, 0xf9, 0x0, 0x6, 0x0, @in6=@remote, @in=@private=0xa010102}}]}, 0x50}}, 0x4c040) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c28008010180040110801400080000000000000000000000000000000001ec000b"], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r6, &(0x7f0000000400)="fb5d246596d5bb8ec0901452c610773f5830f720f286d7f4331b12ef4d", &(0x7f00000004c0)=@tcp=r3, 0x1}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000080)=0x1, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004f00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000007b00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0xa, &(0x7f0000000340)=0x80000000, &(0x7f0000000380)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRESOCT], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe04, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f0000000280)={0x7, 0x1, 0x8, 0x0, 0x8, 0x9, 0x0, &(0x7f00000001c0)=[{0x5, 0x1ff, 0xc}, {0x18, 0x1ff, 0xa5c9}, {0x0, 0x101}, {0x7, 0xfe, 0xb7e8}, {0x11, 0xfe, 0x8}, {0x1, 0xfe, 0x5}, {0x15, 0x101, 0x3ec0}, {0x17, 0x101, 0x1}, {0x13, 0x1ff, 0x2}]}) 782.155587ms ago: executing program 0 (id=4595): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001200192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000b700000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000125bd70ffffffff25000100"/22], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800dd8d000000000000aef628f0ffd5e612ad2d00000200"], 0x24}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010027bd7000fedbdf122e700000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20004000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000425bd7000fb6d5f753a6f626a6563745f723a736f756e645f6465766963655f743a733000"/54], 0x3c}, 0x1, 0x0, 0x0, 0x24004004}, 0x10000001) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000005c0)="4e579cd6ccde58a8b6af3f6868205fc6ae9e522c6c22d1998d7392a857da335549209cbcd08d1de095be33", 0x2b}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000080)={r9, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r8, &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r3], 0x20, 0x4c004}], 0x1, 0x10) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000004dddf0a36822ce0aefae95ac1247da8b7de7b11d6af622649819ca200c", @ANYRES16=r7, @ANYBLOB="010028bd7000fddbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x2006) r10 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000091873b99c90000008510000003000000180000000000000000000000020000009500000000000000bfa000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x3, 0x100, &(0x7f00000007c0)=""/256, 0xb6df4c32c1d5c814}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="5ce99c001000fff300"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xd, r12, 0x1, 0x2, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010800100010000000000001420fff646", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) 663.601715ms ago: executing program 3 (id=4596): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xf, 0x0, 0x0, 0x1}, {0x8, 0x1c, 0x0, 0x0, 0x2}]}}]}]}, 0x44}}, 0x0) 568.490281ms ago: executing program 3 (id=4597): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r3, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 496.342567ms ago: executing program 0 (id=4598): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) 331.969166ms ago: executing program 0 (id=4599): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002fff300851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000166000200f3ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x1f, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x9, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x1}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xbb, &(0x7f0000000500)=""/187, 0x40f00, 0x3, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r4], &(0x7f00000006c0), 0x10, 0x2}, 0x94) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x14, 0x20, 0xe, 0x2, 0x0, 0x0, 0x2, 0x9}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4042804}, 0x4010) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@ipv6_getroute={0x0, 0x1a, 0x20, 0x70bd28, 0x25dfdbff, {0xa, 0x80, 0x80, 0x2, 0xfd, 0x0, 0xfd, 0x0, 0x1300}, [@RTA_GATEWAY={0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x40}}, @RTA_ENCAP_TYPE={0x0, 0x15, 0x5}, @RTA_METRICS={0x0, 0x8, 0x0, 0x1, "e77ad36429e545e769654e71c6422bb2f6750883f31099b698adb0ccc49245765a6ef5225c75953497549356b8bdbee64b530661c959f98223f26727d6"}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x20040885) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @multicast1}, 0x2, 0x1, 0x1, 0x4}}, 0x26) socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 199.77923ms ago: executing program 3 (id=4600): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, &(0x7f0000000280)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x30, 0x14001}], 0x1, 0x4044040) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r3, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x30, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x2d, 0x400, 0x64, 0x8000, 0x2, 0x6, 0x0, @local, @rand_addr=0x64010101}}}}}}, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x10000) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x134, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x104, 0x2, {{0xfffffffe, 0x2, 0x10000, 0xa, 0xe7, 0xcc36}, [@TCA_NETEM_LOSS={0xb8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x69, 0x1, {0x40, 0xf, 0xa, 0x4006559, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0xd82c, 0x8, 0x6, 0x0, 0xc5e0}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1000, 0x2, 0x0, 0x8, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x4, 0x9de, 0x9, 0xb502}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5b, 0x20000, 0x3, 0xa}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x40003, 0x0, 0x6}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x40009, 0xae}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x100020}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r10, r9, 0x25, 0x0, @val=@iter={0x0}}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r12) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r13, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) ioctl$XFS_IOC_PATH_TO_HANDLE(r12, 0xc0385869, &(0x7f0000000440)={r11, &(0x7f0000000100)='cgroup.max.depth\x00', 0xac0a1, &(0x7f0000000240)={@align=0x81, {0x401, 0x88bc, 0x1, 0x15}}, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4}) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r15 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r15, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x5, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0x800}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0xfe}, 0x4}]}]}}}}}}}, 0x0) r16 = openat$cgroup_int(r14, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081130000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104900000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) write$cgroup_int(r16, &(0x7f0000000200)=0x808, 0x12) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @remote, @void, {@llc={0x8864, {@snap={0x0, 0x0, '~', "3fab95", 0x892f}}}}}, 0x0) 0s ago: executing program 0 (id=4601): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x1}, 0xe) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000080)=0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x400) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000200)={{[0x8, 0x10000, 0x2, 0x62400000]}, 0x0, 0x1, 0xee8, 0x0, &(0x7f00000001c0)=[{{@align=0x400, {0x2, 0x6d44, 0xcda, 0xfffffffffffffffa}}, 0x8, 0x0, 'ns/time_for_children\x00'}]}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r4, &(0x7f00000004c0)={&(0x7f0000000240)=@isdn={0x22, 0xf8, 0x4, 0x40, 0x3}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)="d1e09be4f0bbe076eead1bb23d9cb0533f4d7c14fad35e6102498d933cb53488dca992c2cc2ae2d23ed56ce67267c2e0ab125857e2e38c", 0x37}, {&(0x7f0000000300)="efcbc1a13870e4eee0ef658c2e61374a4ec068dc5ba4e51690e368fc2689e1d8c34ca56abf83d7c0933c5ea5f0ce9bf68e71dd31780fc079122358bdabc5f5dbc5918f163fa665875aa7132554a560b1a75b6d708bc59c4ed0774183a4f95400dc4fcde7642e96a4c7c539b4532061afb6944f34bd1bf0d8a40d9175a8e0bfb8d50ac407b2b1b65ba4a2489d5f28b05352f4bcd770bb72f846a3df29ec6c052ed0da69913c722973c642829001a9f5af269123b5f21e99e07e7c0b9fbc39aeb421f570cbb215a47bb2d899797eb8ad49b0ff9aee80b932e6", 0xd8}], 0x2, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xfff}}], 0x48}, 0x0) writev(r1, &(0x7f0000001780)=[{&(0x7f0000000500)="b6009b149ece6f7bb375b5c351ad2d812dc8c1e7ab534ceca9a009a3400555f505e5d0a1bcb100b6735774b01c0e8e5278237cfbc27304ec54d4514da65330c7fbf4bc182b0b0a267ea2c2d9ad4479e39bb933606ebeb0cd5a0390d7f45f0248727dfac139fa8e9f1f6b9815da34df476ead116fa34ce085b0a49396bdc189894795192a05c2554987b1831bb952af6d25042a24458b85b4f952af4c57ac151e9cf9d7c7656bac99d658fc7eaa560550cbf24a084464fe2e19dc072a5459e3f9ed9f48dbf3e5dcbf3a779a5e596992d4acf3da9135fd679b606c674cebefadfc786a25b43b626a5d3ce9f048275f2529", 0xf0}, {&(0x7f0000000600)="dd6be9fe5e8e61c69adf7a3a882d63e1e57cbf4fa09d6252b423984bb05a7b1864100e96b5f6104dce415971011def597da6441236065ef3407420a139e5c0c547906accb2f41008c7ef6a8ba24d4c81ddfd0c0198280909d92950e5f39426d68f560177f199e665a385bf9dd1c67f46234146ad7c8ffb3b00bce240f1adffac5b", 0x81}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="3b6c212cb294bc75d66c5ca7fe1614c703f09037f056913591ac0446cddd9d84af6f821f16b4d7b823aea9cdef6dc330d9b34d6f5b04b11fb9068728e3fa31de621fde5c761f26123992a4552096cf4f28dbaea510d80b9c923c891e4a420fd29434e4112e73e90ce2b5f1c90d70652adf76a81f2db3a09a0a", 0x79}, {&(0x7f0000001740)="192af7b710a7712d7e6a3d0f655a3e3e57e37925bfc55d57245f0c0c66e43484dad14e8abd5aca8f771fc51f5206047e61866f1980", 0x35}], 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x28, r6, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xfab, 0x2e}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x20040093) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000019c0), r5) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x34, r8, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x14008000}, 0x24000800) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000001ac0)={0x0, 0x1}, 0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x8004) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r10, 0x84, 0x21, &(0x7f0000001c00)=0x1c628193, 0x4) ioctl$XFS_IOC_FSGEOMETRY_V4(r10, 0x8070587c, &(0x7f0000001c40)) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d40)=@o_path={&(0x7f0000001d00)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001d80)=@o_path={&(0x7f0000001cc0)='./file0\x00', r11, 0x4000, r4}, 0x18) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e00), r5) getsockname$packet(r3, &(0x7f0000001e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001e80)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001ec0)={@local, @multicast2, 0x0}, &(0x7f0000001f00)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001fc0)={'gre0\x00', &(0x7f0000001f40)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x5, 0x9, {{0xd, 0x4, 0x0, 0x4, 0x34, 0x65, 0x0, 0x7, 0x29, 0x0, @empty, @remote, {[@timestamp_addr={0x44, 0xc, 0x1c, 0x1, 0x0, [{@rand_addr=0x64010101, 0xf17c}]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0xb, 0x90, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}]}, @end, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002080)={'erspan0\x00', &(0x7f0000002000)={'gre0\x00', 0x0, 0x8000, 0x8, 0x0, 0x51d5, {{0xb, 0x4, 0x1, 0x32, 0x2c, 0x67, 0x0, 0xd6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x40}, {[@ssrr={0x89, 0x17, 0x79, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @rand_addr=0x64010101, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000002440)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002400)={&(0x7f0000002280)={0x144, r12, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x44001}, 0x8040) kernel console output (not intermixed with test programs): ut [ 490.745257][T19257] Bluetooth: MGMT ver 1.23 [ 490.830173][T19260] sctp: [Deprecated]: syz.4.3253 (pid 19260) Use of int in max_burst socket option. [ 490.830173][T19260] Use struct sctp_assoc_value instead [ 491.384919][T19274] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3255'. [ 494.295723][T19309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3256'. [ 494.346246][T18910] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 494.377848][T18910] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 494.391455][T18910] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.683827][T19323] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3261'. [ 494.761966][T19326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3262'. [ 494.782056][T19326] netlink: 'syz.4.3262': attribute type 1 has an invalid length. [ 494.944847][T19330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3263'. [ 494.969591][T19331] veth1_macvtap: left promiscuous mode [ 495.274011][T18910] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 495.307149][T18910] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 495.322605][T18910] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 495.350166][T18910] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 495.370358][T18910] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 495.395231][T18910] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 495.415660][T18910] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 495.453978][T18910] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 495.467975][T19349] net_ratelimit: 42 callbacks suppressed [ 495.467996][T19349] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 495.646229][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3267'. [ 495.841272][T18910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.899183][T18910] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.941557][T19371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3270'. [ 495.954908][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.962145][ T5983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.015601][T19371] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 496.037711][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.044997][ T5983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.577954][T19396] geneve2: entered promiscuous mode [ 496.741871][ T5283] veth1_macvtap: entered promiscuous mode [ 497.045619][T19414] tipc: Started in network mode [ 497.059248][T19414] tipc: Node identity , cluster identity 4711 [ 497.086577][T19414] tipc: Failed to obtain node identity [ 497.092840][T19414] tipc: Enabling of bearer rejected, failed to enable media [ 497.288040][T19431] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3281'. [ 497.490060][T18910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.714979][T18910] veth0_vlan: entered promiscuous mode [ 497.778335][T18910] veth1_vlan: entered promiscuous mode [ 497.873025][T19448] bridge_slave_0: left allmulticast mode [ 497.910562][T19448] bridge_slave_0: left promiscuous mode [ 497.931763][T19448] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.965051][T19448] bridge_slave_1: left allmulticast mode [ 497.977299][T19448] bridge_slave_1: left promiscuous mode [ 497.990607][T19448] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.017778][T19448] bond0: (slave bond_slave_0): Releasing backup interface [ 498.062478][T19448] bond0: (slave bond_slave_1): Releasing backup interface [ 498.130307][T19448] team0: Port device team_slave_1 removed [ 498.148947][T19448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.167908][T19448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.184921][T19448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.194072][T19448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.206018][T19448] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 498.272111][T19457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3287'. [ 498.532270][T18910] veth0_macvtap: entered promiscuous mode [ 498.576197][T18910] veth1_macvtap: entered promiscuous mode [ 498.616715][T18910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.627869][T19468] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 498.674948][T10347] batadv1: left promiscuous mode [ 498.700834][T18910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.758465][T10347] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.773261][T19476] IPv6: Can't replace route, no match found [ 498.783120][T10347] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.806190][T10347] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.843809][T10347] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.994180][T19483] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3293'. [ 499.031626][T19482] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3294'. [ 499.062062][T19486] openvswitch: netlink: EtherType 0 is less than min 600 [ 499.179195][T10338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.200221][T10338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.254900][T19491] lo speed is unknown, defaulting to 1000 [ 499.874435][ T5993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.945338][ T5993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.006025][T19491] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 500.096798][T19503] netlink: 'syz.4.3299': attribute type 3 has an invalid length. [ 500.115769][T19503] netlink: 'syz.4.3299': attribute type 3 has an invalid length. [ 500.160557][T19503] __nla_validate_parse: 3 callbacks suppressed [ 500.160577][T19503] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3299'. [ 500.214911][T19505] bridge_slave_0: entered promiscuous mode [ 500.235791][T19505] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 500.305569][T19510] tipc: Enabling of bearer rejected, failed to enable media [ 500.319900][T19507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3300'. [ 500.379688][T19507] hsr_slave_0: left promiscuous mode [ 500.407896][T19507] hsr_slave_1: left promiscuous mode [ 500.844662][T19531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3306'. [ 501.110069][ T4938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 501.137769][ T4938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 501.157602][ T4938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 501.171558][ T4938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 501.179701][ T4938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 501.550289][ T1314] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.565313][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.566826][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3310'. [ 502.011976][ T6002] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.035925][ T6002] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.543519][T19536] lo speed is unknown, defaulting to 1000 [ 502.721220][ T6002] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.733867][ T6002] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.864149][T19570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3315'. [ 502.892497][T19570] block nbd5: Unsupported socket: should be TCP or UNIX. [ 502.922151][ T6002] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.971433][ T6002] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.014397][T19577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3317'. [ 503.057024][T19577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3317'. [ 503.136076][ T6002] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.176528][ T6002] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.203349][T19584] netlink: 'syz.1.3320': attribute type 1 has an invalid length. [ 503.228318][ T4938] Bluetooth: hci2: command tx timeout [ 503.284939][T19589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3321'. [ 503.380756][T19590] hsr0: entered promiscuous mode [ 503.416227][T19536] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 503.592824][T19603] netlink: 'syz.2.3326': attribute type 49 has an invalid length. [ 503.764036][T19614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3327'. [ 503.786233][T19603] ip6gretap0: entered promiscuous mode [ 503.808104][T19603] ip6gretap0: entered allmulticast mode [ 504.278828][ T6002] batadv1: left allmulticast mode [ 504.287251][ T6002] batadv1: left promiscuous mode [ 504.300186][ T6002] bridge0: port 1(batadv1) entered disabled state [ 504.341263][ T6002] vlan3: left allmulticast mode [ 504.352763][ T6002] geneve0: left allmulticast mode [ 504.364384][ T6002] vlan3: left promiscuous mode [ 504.370485][ T6002] geneve0: left promiscuous mode [ 504.376222][ T6002] bridge0: port 3(vlan3) entered disabled state [ 504.464212][ T6002] dvmrp0: left allmulticast mode [ 505.018642][ T6002] bond1 (unregistering): (slave gre1): Releasing backup interface [ 505.126858][ T6002] batman_adv: batadv0: Interface deactivated: vlan2 [ 505.148659][ T6002] batman_adv: batadv0: Removing interface: vlan2 [ 505.278275][ T6002] bond0 (unregistering): Released all slaves [ 505.299080][ T6002] bond1 (unregistering): Released all slaves [ 505.307903][ T4938] Bluetooth: hci2: command tx timeout [ 505.324948][ T6002] bond2 (unregistering): Released all slaves [ 505.351230][ T6002] bond3 (unregistering): Released all slaves [ 505.372031][ T6002] bond4 (unregistering): Released all slaves [ 505.410101][ T6002] bond5 (unregistering): Released all slaves [ 505.432115][ T6002] bond6 (unregistering): Released all slaves [ 505.446779][T19653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3335'. [ 505.768306][T19643] lo speed is unknown, defaulting to 1000 [ 505.894955][T19669] netlink: 'syz.4.3336': attribute type 13 has an invalid length. [ 505.917941][T19669] netlink: 'syz.4.3336': attribute type 17 has an invalid length. [ 506.121767][T19675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3336'. [ 506.147153][T19657] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.160361][T19657] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 37459 - 0 [ 506.289768][ T6002] tipc: Left network mode [ 506.503749][ T6002] IPVS: stopping backup sync thread 10444 ... [ 506.524838][T19669] bridge_slave_0: left promiscuous mode [ 506.575619][T19669] vlan0: left promiscuous mode [ 506.665496][T19669] ip6tnl1: left allmulticast mode [ 506.683826][T19669] geneve2: left promiscuous mode [ 506.981504][T19700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3338'. [ 507.009456][T19643] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 507.091080][T19657] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.102315][T19657] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 37459 - 0 [ 507.204200][T10347] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 507.391790][ T4938] Bluetooth: hci2: command tx timeout [ 507.447096][T19657] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.460370][T19657] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 37459 - 0 [ 507.460641][T19708] nbd: couldn't find a device at index 0 [ 507.497110][T19536] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.511774][T19536] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.521064][T19536] bridge_slave_0: entered allmulticast mode [ 507.529685][T19536] bridge_slave_0: entered promiscuous mode [ 507.576153][T19714] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 3, id = 0 [ 507.620317][T19710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3340'. [ 507.716396][T19657] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.737523][T19657] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 37459 - 0 [ 507.764007][T19536] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.772833][T19536] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.780743][T19536] bridge_slave_1: entered allmulticast mode [ 507.799787][T19536] bridge_slave_1: entered promiscuous mode [ 507.842904][T19711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3340'. [ 507.902485][T19716] syzkaller0: entered allmulticast mode [ 508.093785][T19720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3341'. [ 508.120104][T19720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3341'. [ 508.182867][T19536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.236461][T19536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.379958][T19720] vxlan0: entered allmulticast mode [ 508.570555][T10338] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.591477][T10338] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.720388][T19536] team0: Port device team_slave_0 added [ 508.728791][T10338] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.754101][T10338] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.794077][T10338] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 37459 - 0 [ 508.831156][T10338] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 508.868037][T19536] team0: Port device team_slave_1 added [ 509.154158][T19754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3347'. [ 509.164016][T19754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3347'. [ 509.221247][T19536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.237799][T19536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.316995][T19536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.329109][T10338] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 37459 - 0 [ 509.358359][T10338] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 509.393124][T19749] 8021q: VLANs not supported on ip6gre0 [ 509.484554][ T4938] Bluetooth: hci2: command tx timeout [ 509.501426][ T6002] veth1_to_batadv: left promiscuous mode [ 509.507287][ T6002] veth0_macvtap: left promiscuous mode [ 509.515782][ T6002] veth1_vlan: left promiscuous mode [ 509.521588][ T6002] veth0_vlan: left promiscuous mode [ 509.854298][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3352'. [ 510.297137][T19536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.314905][T19536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.342623][T19536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.355996][T19765] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 510.378053][T19765] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 510.391811][T10338] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 37459 - 0 [ 510.400977][T19765] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 510.414648][T10338] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 510.438275][ T5983] smbdirect: ib_dev[syú2] removed [ 510.705887][T19536] hsr_slave_0: entered promiscuous mode [ 510.742732][T19536] hsr_slave_1: entered promiscuous mode [ 510.799074][ T5983] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 37459 - 0 [ 510.853181][ T5983] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 511.076377][T19801] syzkaller0: entered promiscuous mode [ 511.092811][T19801] syzkaller0: entered allmulticast mode [ 511.272322][ T6002] IPVS: stop unused estimator thread 0... [ 511.613021][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 513.657258][T19787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 513.719892][T19536] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 513.779380][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.818476][T19536] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 513.912815][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 513.944090][T19536] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 513.971334][T19865] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3362'. [ 514.071076][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.082669][T19871] syzkaller1: entered promiscuous mode [ 514.089711][T19871] syzkaller1: entered allmulticast mode [ 514.112343][T19536] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 514.131438][T19881] netlink: 'syz.1.3364': attribute type 32 has an invalid length. [ 514.178188][T19536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.182099][T19881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3364'. [ 514.271492][T19881] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 514.526450][ T5740] IPVS: starting estimator thread 0... [ 514.553206][T19909] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 514.570628][T19902] bond1: entered promiscuous mode [ 514.583904][T19902] bond1: entered allmulticast mode [ 514.617166][T19902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.657682][T19914] IPVS: using max 25 ests per chain, 60000 per kthread [ 514.774848][T19906] syzkaller0: entered promiscuous mode [ 514.785106][T19906] syzkaller0: entered allmulticast mode [ 515.191771][T19943] pimreg: entered allmulticast mode [ 515.244751][T19536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.445412][T19536] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.491136][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.498437][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.539937][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.547276][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.103936][T19971] netlink: 'syz.2.3379': attribute type 11 has an invalid length. [ 516.670897][T19536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.712233][T19990] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3383'. [ 516.788443][T19536] veth0_vlan: entered promiscuous mode [ 516.823464][T19536] veth1_vlan: entered promiscuous mode [ 516.918963][T19536] veth0_macvtap: entered promiscuous mode [ 516.951116][T19536] veth1_macvtap: entered promiscuous mode [ 517.013356][T19536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.047768][T19536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.083610][T10338] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.120596][T10338] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.139967][T10338] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.161909][T10338] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.415461][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.450923][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.540980][ T5993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.582172][ T5993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.017055][T20015] ip6t_rpfilter: unknown options [ 518.608369][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3391'. [ 519.052776][T20057] netlink: 'syz.2.3394': attribute type 4 has an invalid length. [ 519.212010][T20070] netlink: zone id is out of range [ 519.219960][T20070] netlink: zone id is out of range [ 519.226686][T20070] netlink: zone id is out of range [ 519.238653][T20070] netlink: zone id is out of range [ 519.243995][T20070] netlink: zone id is out of range [ 519.250088][T20070] netlink: zone id is out of range [ 519.256687][T20070] netlink: zone id is out of range [ 519.268562][T20070] netlink: get zone limit has 8 unknown bytes [ 519.532651][T20080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3398'. [ 519.560634][T20080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3398'. [ 519.859161][T20089] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3401'. [ 520.068998][T20093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3404'. [ 520.257569][T20100] netlink: 'syz.0.3408': attribute type 1 has an invalid length. [ 520.286481][T20100] vlan2: entered allmulticast mode [ 520.299432][T20100] bond0: entered allmulticast mode [ 520.310210][T20100] bond_slave_0: entered allmulticast mode [ 520.329004][T20100] bond_slave_1: entered allmulticast mode [ 520.365154][T20105] geneve2: entered allmulticast mode [ 520.383553][T20105] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 520.536176][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3412'. [ 520.572868][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3412'. [ 520.627544][T20111] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3412'. [ 520.706340][T20116] tipc: Started in network mode [ 520.718987][T20116] tipc: Node identity d2ebf1fbf6d1, cluster identity 4711 [ 520.737750][T20116] tipc: Enabled bearer , priority 0 [ 520.779462][T20115] tipc: Disabling bearer [ 520.816197][T20132] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3415'. [ 521.235336][T20157] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3423'. [ 521.251864][T20157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.349766][T20161] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3426'. [ 521.362134][T20161] netlink: 'syz.1.3426': attribute type 12 has an invalid length. [ 521.445074][T20165] syzkaller0: entered promiscuous mode [ 521.455993][T20165] syzkaller0: entered allmulticast mode [ 521.760664][T20171] syzkaller0: entered promiscuous mode [ 521.777165][T20171] syzkaller0: entered allmulticast mode [ 522.090516][T20190] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 522.283944][T20181] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 522.394195][T20198] lo speed is unknown, defaulting to 1000 [ 522.657104][T20213] netlink: 'syz.3.3440': attribute type 1 has an invalid length. [ 522.821480][T20222] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 522.825913][T20213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.936829][T20215] veth3: entered allmulticast mode [ 522.964221][T20215] bond1: (slave veth3): Enslaving as an active interface with an up link [ 523.012864][T20232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.023024][T20220] bond1 (unregistering): (slave veth3): Releasing backup interface [ 523.040422][T20220] bond1 (unregistering): Released all slaves [ 523.141507][T20219] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 523.160653][T20229] syzkaller0: entered promiscuous mode [ 523.188704][T20229] syzkaller0: entered allmulticast mode [ 523.713042][T20257] geneve3: entered promiscuous mode [ 523.890838][T20263] netlink: 'syz.4.3453': attribute type 11 has an invalid length. [ 523.913079][T20263] netlink: 'syz.4.3453': attribute type 13 has an invalid length. [ 524.306013][T20277] block nbd5: Unsupported socket: should be TCP or UNIX. [ 524.547070][T20285] syzkaller0: entered promiscuous mode [ 524.564630][T20285] syzkaller0: entered allmulticast mode [ 524.579200][T20296] __nla_validate_parse: 43 callbacks suppressed [ 524.579221][T20296] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3459'. [ 524.599731][T20296] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3459'. [ 525.087593][T20316] netlink: 'syz.4.3465': attribute type 1 has an invalid length. [ 525.143214][T20318] netlink: 'syz.4.3465': attribute type 5 has an invalid length. [ 525.239486][T20298] ipvlan2: entered promiscuous mode [ 525.295404][T20316] bond4: entered promiscuous mode [ 525.301269][T20316] 8021q: adding VLAN 0 to HW filter on device bond4 [ 525.334319][T20318] macvtap1: entered allmulticast mode [ 525.569267][T20329] xt_l2tp: v2 tid > 0xffff: 37482740 [ 528.967627][T20323] netlink: 'syz.1.3466': attribute type 15 has an invalid length. [ 528.998468][T20318] bond4: (slave bridge1): making interface the new active one [ 529.006063][T20318] bridge1: entered promiscuous mode [ 529.029620][T20318] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 529.153200][T20348] netlink: 'syz.2.3469': attribute type 12 has an invalid length. [ 529.161709][T20348] netlink: 'syz.2.3469': attribute type 29 has an invalid length. [ 529.171618][T20348] netlink: 'syz.2.3469': attribute type 2 has an invalid length. [ 529.181749][T20348] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3469'. [ 529.360632][T20356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.385814][T20356] netlink: 'syz.2.3474': attribute type 1 has an invalid length. [ 529.610034][T20372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3475'. [ 529.795154][T20379] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3477'. [ 530.329277][T20401] netlink: 'syz.3.3480': attribute type 2 has an invalid length. [ 530.346737][T20402] bridge2: entered promiscuous mode [ 530.386299][T20402] bridge2: entered allmulticast mode [ 530.416436][T20402] team0: Port device bridge2 added [ 531.541535][T20438] netlink: 'syz.1.3487': attribute type 1 has an invalid length. [ 531.964462][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056533c00: rx timeout, send abort [ 532.464633][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056530400: rx timeout, send abort [ 532.474152][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056533c00: abort rx timeout. Force session deactivation [ 532.585270][T20438] bond2: entered promiscuous mode [ 532.606887][T20438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 532.804051][T20452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3488'. [ 532.974003][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056530400: abort rx timeout. Force session deactivation [ 533.371884][T20480] netlink: 'syz.1.3495': attribute type 2 has an invalid length. [ 533.411425][T20480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3495'. [ 533.787216][T20486] ieee802154 phy0 wpan0: encryption failed: -90 [ 533.981974][T20493] netlink: 'syz.2.3500': attribute type 1 has an invalid length. [ 533.997662][T20493] netlink: 'syz.2.3500': attribute type 4 has an invalid length. [ 534.017873][T20493] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3500'. [ 534.096762][T20495] netlink: 'syz.2.3502': attribute type 1 has an invalid length. [ 534.239680][T20495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 534.256014][T20496] vlan2: entered allmulticast mode [ 534.261395][T20496] bond1: entered allmulticast mode [ 534.294858][T20502] netlink: 'syz.3.3501': attribute type 1 has an invalid length. [ 534.487711][T20508] 8021q: adding VLAN 0 to HW filter on device bond2 [ 534.518113][T20508] bond1: (slave bond2): making interface the new active one [ 534.539459][T20508] bond1: (slave bond2): Enslaving as an active interface with an up link [ 534.636586][T20508] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3501'. [ 534.917777][T20476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.394422][T20550] syzkaller1: entered promiscuous mode [ 535.421924][T20550] syzkaller1: entered allmulticast mode [ 535.535945][T20570] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3516'. [ 535.772746][T20582] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3520'. [ 535.820324][T20582] netlink: 'syz.0.3520': attribute type 1 has an invalid length. [ 535.898694][T20588] netlink: 'syz.2.3521': attribute type 12 has an invalid length. [ 535.924602][T20586] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3521'. [ 536.039776][T20586] syzkaller1: entered promiscuous mode [ 536.056190][T20586] syzkaller1: entered allmulticast mode [ 536.143805][T20593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3523'. [ 536.155349][T20593] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 536.346480][T10343] tipc: Subscription rejected, illegal request [ 536.395897][T20605] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3527'. [ 536.444528][T20609] netlink: 'syz.4.3528': attribute type 12 has an invalid length. [ 536.666021][T20615] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3530'. [ 536.682829][T20620] openvswitch: netlink: Duplicate or invalid key (type 0). [ 536.695325][T20620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.705857][T20617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3533'. [ 536.723468][T20617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3533'. [ 537.129076][T20636] IPv6: Can't replace route, no match found [ 537.721005][T20661] lo speed is unknown, defaulting to 1000 [ 538.011790][T20672] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.019568][T20672] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.054341][T20672] bridge0: entered allmulticast mode [ 538.303584][T20676] syzkaller0: entered promiscuous mode [ 538.312470][T20676] syzkaller0: entered allmulticast mode [ 538.336190][T20676] tipc: Started in network mode [ 538.345792][T20676] tipc: Node identity aa9bc955fc1f, cluster identity 4711 [ 538.366583][T20676] tipc: Enabled bearer , priority 0 [ 538.391977][T20676] tipc: Resetting bearer [ 538.446348][T20675] tipc: Resetting bearer [ 538.503924][T20675] tipc: Disabling bearer [ 538.693043][T20684] netlink: 'syz.0.3555': attribute type 1 has an invalid length. [ 538.944170][T20695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3553'. [ 539.096471][ T4938] block nbd5: Receive control failed (result -107) [ 539.592339][T20706] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.600299][T20706] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.010476][T20706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.033613][T20706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.320139][T20724] tipc: Enabled bearer , priority 0 [ 540.340242][T20726] hsr_slave_0: left promiscuous mode [ 540.341231][T20759] xt_hashlimit: size too large, truncated to 1048576 [ 540.359357][T20726] hsr_slave_1: left promiscuous mode [ 540.390578][T20730] syzkaller0: entered promiscuous mode [ 540.397573][T20730] syzkaller0: entered allmulticast mode [ 540.417996][T20732] __nla_validate_parse: 5 callbacks suppressed [ 540.418017][T20732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3560'. [ 540.492477][T10343] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.515938][T10343] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.549084][T10343] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.575981][T10343] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.624073][T20765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3564'. [ 540.752837][T20732] tipc: Resetting bearer [ 540.806344][T20732] tipc: Disabling bearer [ 540.825257][T20770] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.3565'. [ 541.054999][T20785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3571'. [ 541.065048][T20775] x_tables: duplicate entry at hook 3 [ 541.101618][T20785] xt_hashlimit: size too large, truncated to 1048576 [ 541.354838][T20797] veth3: entered allmulticast mode [ 541.408730][T20796] syzkaller1: entered promiscuous mode [ 541.414506][T20796] syzkaller1: entered allmulticast mode [ 541.765360][T20813] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3578'. [ 541.774552][T20813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3578'. [ 541.784201][T20813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3578'. [ 541.793887][T20813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3578'. [ 541.804217][T20813] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3578'. [ 541.817310][T20813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3578'. [ 542.432420][T20824] geneve3: left promiscuous mode [ 542.439666][T20824] bond4: left promiscuous mode [ 542.444740][T20824] bridge1: left promiscuous mode [ 542.456961][T20824] bridge2: left promiscuous mode [ 542.581627][ T5983] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.621751][ T5983] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.659123][ T5983] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.679375][T20844] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 542.711244][ T5983] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.756415][ T5983] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.798323][ T5983] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.931785][ T5983] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.986076][ T5983] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.136169][T20847] syzkaller0: entered promiscuous mode [ 543.142277][T20847] syzkaller0: entered allmulticast mode [ 547.411970][T20886] netlink: 'syz.1.3595': attribute type 1 has an invalid length. [ 547.664072][T20912] netlink: 'syz.0.3598': attribute type 11 has an invalid length. [ 547.752030][T20910] __nla_validate_parse: 3 callbacks suppressed [ 547.752051][T20910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3600'. [ 547.792756][T20910] syzkaller0: entered promiscuous mode [ 547.803395][T20910] syzkaller0: entered allmulticast mode [ 547.812642][T20910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.221965][T20939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3608'. [ 548.693148][T20952] syzkaller0: entered promiscuous mode [ 548.700822][T20952] syzkaller0: entered allmulticast mode [ 548.720430][T20947] syzkaller0: entered promiscuous mode [ 548.728560][T20947] syzkaller0: entered allmulticast mode [ 549.174371][T20969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3614'. [ 552.604038][T20981] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 552.889602][T20959] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.897441][T20959] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.555026][T20959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.572504][T20959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.736993][T20967] 8021q: adding VLAN 0 to HW filter on device eth0 [ 553.753330][T20967] 8021q: adding VLAN 0 to HW filter on device eth1 [ 553.768059][T20967] 8021q: adding VLAN 0 to HW filter on device eth2 [ 553.781001][T20967] 8021q: adding VLAN 0 to HW filter on device eth3 [ 553.805555][T20986] batadv0: entered promiscuous mode [ 553.822487][T20986] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 553.874589][ T3322] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.887204][ T3322] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.925562][ T3322] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.946491][ T3322] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.968728][T20984] lo speed is unknown, defaulting to 1000 [ 554.103500][T21019] bridge_slave_0: left allmulticast mode [ 554.120927][T21019] bridge_slave_0: left promiscuous mode [ 554.139665][T21019] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.177204][T21019] bridge_slave_1: left allmulticast mode [ 554.197186][T21019] bridge_slave_1: left promiscuous mode [ 554.230929][T21019] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.289867][T21029] netlink: 'syz.1.3626': attribute type 1 has an invalid length. [ 554.348986][T21019] bond0: (slave bond_slave_0): Releasing backup interface [ 554.388112][T21019] bond_slave_0: left allmulticast mode [ 554.409116][T21019] bond0: (slave bond_slave_1): Releasing backup interface [ 554.421023][T21038] netlink: 'syz.2.3631': attribute type 13 has an invalid length. [ 554.441727][T21019] bond_slave_1: left allmulticast mode [ 554.456064][T21038] netlink: 'syz.2.3631': attribute type 17 has an invalid length. [ 554.480210][T21044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3631'. [ 554.502133][T21019] team0: Port device team_slave_0 removed [ 554.525354][T21019] team0: Port device team_slave_1 removed [ 554.552580][T21019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.577089][T21019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.589171][T21019] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 554.607168][T21030] syzkaller1: entered promiscuous mode [ 554.613631][T21030] syzkaller1: entered allmulticast mode [ 554.640662][T21029] 8021q: adding VLAN 0 to HW filter on device bond3 [ 554.651799][T21034] tipc: Started in network mode [ 554.656742][T21034] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 554.664545][T21034] tipc: Enabled bearer , priority 0 [ 554.924546][T21038] geneve2: left promiscuous mode [ 554.941954][T21038] geneve2: left allmulticast mode [ 555.006074][T21061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3633'. [ 555.059717][T21038] vlan2: left allmulticast mode [ 555.065519][T21038] bond1: left allmulticast mode [ 555.272982][T21069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3636'. [ 555.285209][T21069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3636'. [ 555.378254][T21068] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3635'. [ 555.596503][T21079] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3639'. [ 555.630989][T21083] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3640'. [ 555.777938][ T5624] tipc: Node number set to 11578026 [ 555.845721][T21079] lo speed is unknown, defaulting to 1000 [ 556.091950][T21097] netlink: 'syz.2.3642': attribute type 6 has an invalid length. [ 556.331810][T21104] netlink: 'syz.1.3645': attribute type 21 has an invalid length. [ 556.341056][T21104] netlink: 'syz.1.3645': attribute type 6 has an invalid length. [ 556.349481][T21104] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3645'. [ 556.758969][T21125] tipc: Enabled bearer , priority 0 [ 556.767179][T21125] syzkaller0: entered promiscuous mode [ 556.773281][T21125] syzkaller0: entered allmulticast mode [ 556.785314][T21125] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 557.489147][T21130] tipc: Resetting bearer [ 557.557232][T21144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3656'. [ 557.755310][T21124] tipc: Resetting bearer [ 557.839387][T21124] tipc: Disabling bearer [ 559.080215][T21179] ip6tnl1: entered allmulticast mode [ 559.088695][T21182] syzkaller0: entered promiscuous mode [ 559.094678][T21182] syzkaller0: entered allmulticast mode [ 559.117728][T21184] tipc: Started in network mode [ 559.123918][T21184] tipc: Node identity , cluster identity 4711 [ 559.138355][T21184] tipc: Failed to obtain node identity [ 559.159100][T21184] tipc: Enabling of bearer rejected, failed to enable media [ 559.429532][T21207] netlink: 'syz.3.3671': attribute type 21 has an invalid length. [ 559.452352][T21207] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3671'. [ 559.564927][T21211] netlink: 'syz.1.3673': attribute type 3 has an invalid length. [ 559.589331][T21211] __nla_validate_parse: 1 callbacks suppressed [ 559.589349][T21211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3673'. [ 559.862775][T21227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3677'. [ 561.162069][T21275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3683'. [ 562.713101][ T6002] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 562.722017][ T6002] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 562.737796][ T5740] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 562.778686][T21253] tap0: tun_chr_ioctl cmd 1074025677 [ 562.784336][T21253] tap0: linktype set to 804 [ 562.991235][ T1314] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 563.008027][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.184508][T21295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3691'. [ 563.244415][T21298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3692'. [ 563.295084][T21301] netlink: 'syz.3.3689': attribute type 7 has an invalid length. [ 563.445511][T21286] nbd1: detected capacity change from 0 to 63 [ 563.465891][ T1678] block nbd1: Send control failed (result -32) [ 563.478021][ T1678] block nbd1: Request send failed, requeueing [ 563.486103][ T4938] block nbd1: Receive control failed (result -104) [ 563.504511][ T1678] block nbd1: Dead connection, failed to find a fallback [ 563.514689][ T1678] block nbd1: shutting down sockets [ 563.527214][ T1678] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 563.541955][ T1678] Buffer I/O error on dev nbd1, logical block 1, async page read [ 563.559565][ T1678] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 563.570000][ T1678] Buffer I/O error on dev nbd1, logical block 2, async page read [ 563.582550][ T1678] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 563.591880][ T1678] Buffer I/O error on dev nbd1, logical block 3, async page read [ 563.628151][ T5740] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 563.706517][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3694'. [ 563.719944][ T5740] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 563.801729][T21323] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3695'. [ 563.945281][T21324] netlink: 'syz.0.3696': attribute type 16 has an invalid length. [ 563.955990][T21324] netlink: 'syz.0.3696': attribute type 17 has an invalid length. [ 563.968077][ T5740] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 564.056038][T21330] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3699'. [ 564.071585][T21330] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 564.147763][ T5624] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 564.173487][T21324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.207215][T21324] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.230328][T21324] tipc: Resetting bearer [ 564.245363][T21324] tipc: Resetting bearer [ 564.274154][T21324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.747650][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 566.927184][T21324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 566.944715][T21324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 566.962756][T21370] netlink: 'syz.2.3703': attribute type 12 has an invalid length. [ 566.974176][T21324] veth1_vlan: left promiscuous mode [ 566.980954][T21324] veth0_vlan: left promiscuous mode [ 566.998330][T21324] veth0_vlan: entered promiscuous mode [ 567.006555][T21324] veth1_vlan: entered promiscuous mode [ 567.025044][T21324] veth1_macvtap: left promiscuous mode [ 567.032373][T21324] veth0_macvtap: left promiscuous mode [ 567.040986][T21324] veth0_macvtap: entered promiscuous mode [ 567.049470][T21324] veth1_macvtap: entered promiscuous mode [ 567.064440][T21324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 567.073288][T21324] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 567.082452][T21324] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 567.091634][T21324] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 567.102678][T21324] vlan2: left allmulticast mode [ 567.108160][T21324] bond0: left allmulticast mode [ 567.113173][T21324] geneve2: left allmulticast mode [ 567.124456][T21324] ip6tnl1: left allmulticast mode [ 567.157651][ T5624] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 567.211219][ T5741] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 567.255859][T21379] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3706'. [ 567.296278][T21348] syzkaller0: entered promiscuous mode [ 567.307558][T21348] syzkaller0: entered allmulticast mode [ 567.367846][ T5983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.377530][ T5983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.386935][ T5983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.471248][T21418] SET target dimension over the limit! [ 571.471726][ T5983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.573758][T21413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3714'. [ 571.612603][T21420] tipc: Resetting bearer [ 571.701607][T21420] tipc: Resetting bearer [ 571.719026][ T5624] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 571.808060][ T5741] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 572.236628][T21452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3722'. [ 572.345362][T21457] nbd: couldn't find a device at index 0 [ 572.400417][T21460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3725'. [ 572.747710][ T808] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 574.507596][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 575.023996][T21458] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 575.135326][T21484] sctp: [Deprecated]: syz.1.3726 (pid 21484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 575.135326][T21484] Use struct sctp_sack_info instead [ 575.188248][T21484] sctp: [Deprecated]: syz.1.3726 (pid 21484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 575.188248][T21484] Use struct sctp_sack_info instead [ 575.229397][T21484] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3726'. [ 575.253877][T21487] netlink: 'syz.2.3727': attribute type 1 has an invalid length. [ 575.385071][T21496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3730'. [ 575.401692][T21496] xt_TCPMSS: Only works on TCP SYN packets [ 575.412055][T21487] bond2: entered promiscuous mode [ 575.443517][T21487] 8021q: adding VLAN 0 to HW filter on device bond2 [ 575.582117][T21493] bond2: (slave veth3): making interface the new active one [ 575.600613][T21493] veth3: entered promiscuous mode [ 575.610427][T21493] bond2: (slave veth3): Enslaving as an active interface with an up link [ 575.891777][T21517] netlink: 'syz.4.3737': attribute type 6 has an invalid length. [ 575.915315][T21517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3737'. [ 575.951955][T21519] lo speed is unknown, defaulting to 1000 [ 576.252100][T21530] tipc: Enabled bearer , priority 0 [ 576.294686][T21539] syzkaller0: entered promiscuous mode [ 576.322771][T21539] syzkaller0: entered allmulticast mode [ 576.390239][T21530] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 579.300667][T21547] tipc: Resetting bearer [ 579.324044][T21529] tipc: Resetting bearer [ 579.354436][T21529] tipc: Disabling bearer [ 579.366719][ T808] tipc: Node number set to 607842811 [ 579.524002][T21580] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 580.235967][T21606] netlink: 'syz.2.3753': attribute type 1 has an invalid length. [ 580.530793][T21631] tipc: Enabled bearer , priority 0 [ 580.609292][T21624] syzkaller0: entered promiscuous mode [ 580.629566][T21624] syzkaller0: entered allmulticast mode [ 580.676558][T21624] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 580.837336][T21648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3762'. [ 583.630396][T21641] tipc: Resetting bearer [ 583.650282][T21622] tipc: Resetting bearer [ 583.675060][T21622] tipc: Disabling bearer [ 583.903020][T21693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3767'. [ 583.937282][T21694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3766'. [ 584.283657][T21709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3772'. [ 584.305592][T21709] netlink: 'syz.1.3772': attribute type 10 has an invalid length. [ 584.323527][T21709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3772'. [ 584.335554][T21710] syzkaller0: entered promiscuous mode [ 584.343562][T21710] syzkaller0: entered allmulticast mode [ 584.473487][T21713] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 584.781630][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3776'. [ 584.819551][T21723] tipc: Started in network mode [ 584.834965][T21723] tipc: Node identity 964e4d67d55d, cluster identity 4711 [ 584.879512][T21723] tipc: Enabled bearer , priority 0 [ 584.917853][T21726] syzkaller0: entered promiscuous mode [ 584.939520][T21726] syzkaller0: entered allmulticast mode [ 585.011449][T21723] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 588.043357][T21735] tipc: Resetting bearer [ 588.056843][T21720] tipc: Resetting bearer [ 588.113798][T21720] tipc: Disabling bearer [ 588.139158][ T5624] tipc: Node number set to 1125338471 [ 588.265411][T21778] netlink: 'syz.2.3784': attribute type 1 has an invalid length. [ 588.287931][T21778] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3784'. [ 588.377030][T21783] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 588.477323][T21788] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3785'. [ 588.586192][T21785] lo speed is unknown, defaulting to 1000 [ 588.858268][T21804] sctp: [Deprecated]: syz.1.3790 (pid 21804) Use of int in max_burst socket option deprecated. [ 588.858268][T21804] Use struct sctp_assoc_value instead [ 589.227699][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 589.593855][T21820] netlink: 'syz.2.3794': attribute type 1 has an invalid length. [ 589.719637][T21820] bond3: entered promiscuous mode [ 589.733916][T21820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 589.794177][T21823] vlan3: entered allmulticast mode [ 589.807492][T21823] bond3: entered allmulticast mode [ 589.877796][T21826] bond3: (slave bridge2): making interface the new active one [ 589.893006][T21826] bridge2: entered promiscuous mode [ 589.906812][T21826] bridge2: entered allmulticast mode [ 589.934941][T21826] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 590.483411][T21844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3800'. [ 590.494605][T21844] openvswitch: netlink: Flow key attr not present in new flow. [ 590.669176][ T4938] Bluetooth: hci5: command 0x0406 tx timeout [ 590.850849][T21847] syzkaller0: entered promiscuous mode [ 590.869721][T21849] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3802'. [ 590.880908][T21847] syzkaller0: entered allmulticast mode [ 590.916216][T21849] xt_hashlimit: size too large, truncated to 1048576 [ 591.059201][T21853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3802'. [ 591.179459][T21857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3804'. [ 591.251788][T21857] netlink: 'syz.1.3804': attribute type 1 has an invalid length. [ 591.330666][T21865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3807'. [ 591.496800][ T5741] IPVS: starting estimator thread 0... [ 591.513550][T21873] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 591.521537][T21865] 8021q: adding VLAN 0 to HW filter on device bond3 [ 591.617605][T21884] IPVS: using max 29 ests per chain, 69600 per kthread [ 591.651090][T21875] veth0: entered promiscuous mode [ 591.682458][T21887] veth0: left promiscuous mode [ 591.794649][T21894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3813'. [ 591.928779][T21899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3813'. [ 592.075623][ T9] dummy0: entered promiscuous mode [ 592.177549][T21906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.240977][T21906] syzkaller0: entered promiscuous mode [ 592.257593][T21906] syzkaller0: entered allmulticast mode [ 592.280249][T21913] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3817'. [ 592.579362][T21908] lo speed is unknown, defaulting to 1000 [ 593.063536][T21952] netlink: 'syz.3.3829': attribute type 4 has an invalid length. [ 593.098557][T21952] netlink: 'syz.3.3829': attribute type 4 has an invalid length. [ 593.161115][T21952] netlink: 'syz.3.3829': attribute type 4 has an invalid length. [ 593.187125][T21953] netlink: 'syz.3.3829': attribute type 4 has an invalid length. [ 593.377844][T21972] __nla_validate_parse: 1 callbacks suppressed [ 593.377861][T21972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3833'. [ 593.731705][ T1678] block nbd1: Possible stuck request ffff888020f8e000: control (read@0,1024B). Runtime 30 seconds [ 593.918697][T21957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 594.222306][T21991] netlink: 'syz.2.3838': attribute type 2 has an invalid length. [ 594.282930][T21991] : entered promiscuous mode [ 594.571572][T22006] bond4: entered promiscuous mode [ 594.578721][T22006] bond4: entered allmulticast mode [ 594.603059][T22006] 8021q: adding VLAN 0 to HW filter on device bond4 [ 594.637094][T22016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3844'. [ 594.655022][ T5741] IPVS: starting estimator thread 0... [ 594.661241][T22011] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 594.767726][T22017] IPVS: using max 27 ests per chain, 64800 per kthread [ 594.889931][T22024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3844'. [ 594.917666][T22024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3844'. [ 594.938782][T22024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3844'. [ 594.960672][T22024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3844'. [ 594.993752][T22024] netlink: 'syz.0.3844': attribute type 1 has an invalid length. [ 595.093276][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.116526][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.138114][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.309997][T22035] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3845'. [ 595.551572][ T5983] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.636841][T22032] lo speed is unknown, defaulting to 1000 [ 595.788428][ T4938] Bluetooth: hci3: command 0x0406 tx timeout [ 595.959084][ T5719] dummy0: entered promiscuous mode [ 596.257628][T22060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3854'. [ 596.544815][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3857'. [ 596.564714][T22071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3857'. [ 596.778541][T22073] macsec1: entered promiscuous mode [ 596.788018][T22073] bridge0: entered promiscuous mode [ 597.092439][T22080] nbd: couldn't find a device at index 0 [ 597.982700][T22100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.481727][T22112] nbd: couldn't find a device at index 0 [ 598.747134][T22118] netlink: 'syz.3.3872': attribute type 3 has an invalid length. [ 598.764291][T22126] __nla_validate_parse: 3 callbacks suppressed [ 598.764291][T22125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3874'. [ 598.764309][T22126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3874'. [ 598.880968][T22120] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma? [ 599.051680][T22122] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.206054][T22135] lo speed is unknown, defaulting to 1000 [ 599.365044][T22122] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.411584][ T9] IPVS: starting estimator thread 0... [ 599.494849][T22122] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.520485][T22142] IPVS: using max 27 ests per chain, 64800 per kthread [ 599.524020][T22144] netlink: 'syz.1.3879': attribute type 21 has an invalid length. [ 599.741429][T22122] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.777052][T22136] dvmrp0: entered allmulticast mode [ 599.850049][T22158] nbd: couldn't find a device at index 0 [ 600.004202][T10338] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.031769][T22151] lo speed is unknown, defaulting to 1000 [ 600.146951][ T3322] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.194868][ T5983] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.229998][ T5983] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.368176][T22161] syzkaller0: entered promiscuous mode [ 600.374081][T22161] syzkaller0: entered allmulticast mode [ 601.010280][T22183] netlink: 'syz.2.3890': attribute type 4 has an invalid length. [ 601.027630][T22183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3890'. [ 602.249757][T22219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3898'. [ 602.298372][T22221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3899'. [ 603.642951][T22266] ip6tnl1: entered allmulticast mode [ 603.780612][T22271] FAULT_INJECTION: forcing a failure. [ 603.780612][T22271] name failslab, interval 1, probability 0, space 0, times 0 [ 603.818621][T22271] CPU: 1 UID: 0 PID: 22271 Comm: syz.0.3911 Not tainted syzkaller #0 PREEMPT(full) [ 603.818668][T22271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 603.818685][T22271] Call Trace: [ 603.818694][T22271] [ 603.818703][T22271] dump_stack_lvl+0xe8/0x150 [ 603.818743][T22271] should_fail_ex+0x40c/0x560 [ 603.818770][T22271] ? alloc_netdev_mqs+0xa9/0x12b0 [ 603.818863][T22271] should_failslab+0xa8/0x100 [ 603.818897][T22271] __kvmalloc_node_noprof+0x176/0x860 [ 603.818935][T22271] ? alloc_netdev_mqs+0xa9/0x12b0 [ 603.818965][T22271] alloc_netdev_mqs+0xa9/0x12b0 [ 603.818986][T22271] ? __pfx_snprintf+0x10/0x10 [ 603.819009][T22271] ? __pfx_macsec_setup+0x10/0x10 [ 603.819102][T22271] rtnl_create_link+0x321/0xd70 [ 603.819157][T22271] rtnl_newlink_create+0x25f/0xb00 [ 603.819222][T22271] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 603.819259][T22271] ? __pfx___mutex_lock+0x10/0x10 [ 603.819300][T22271] ? ns_capable+0x89/0xe0 [ 603.819330][T22271] rtnl_newlink+0x167f/0x1bd0 [ 603.819377][T22271] ? __pfx_rtnl_newlink+0x10/0x10 [ 603.819404][T22271] ? do_syscall_64+0x174/0x580 [ 603.819444][T22271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.819508][T22271] ? kasan_quarantine_put+0xbb/0x1f0 [ 603.819534][T22271] ? lockdep_hardirqs_on+0x7a/0x110 [ 603.819566][T22271] ? nlmon_xmit+0xb0/0x100 [ 603.819618][T22271] ? kmem_cache_free+0x182/0x650 [ 603.819660][T22271] ? __lock_acquire+0x683/0x2cf0 [ 603.819694][T22271] ? __dev_queue_xmit+0x29b/0x37f0 [ 603.819719][T22271] ? __local_bh_enable_ip+0xd0/0x130 [ 603.819745][T22271] ? lockdep_hardirqs_on+0x7a/0x110 [ 603.819772][T22271] ? __dev_queue_xmit+0x29b/0x37f0 [ 603.819791][T22271] ? __local_bh_enable_ip+0xd0/0x130 [ 603.819814][T22271] ? __dev_queue_xmit+0x29b/0x37f0 [ 603.819843][T22271] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 603.819890][T22271] ? __pfx_rtnl_newlink+0x10/0x10 [ 603.819918][T22271] rtnetlink_rcv_msg+0x802/0xc00 [ 603.819951][T22271] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 603.819980][T22271] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 603.820007][T22271] ? ref_tracker_free+0x689/0x830 [ 603.820038][T22271] ? __pfx_ref_tracker_free+0x10/0x10 [ 603.820077][T22271] netlink_rcv_skb+0x226/0x4a0 [ 603.820112][T22271] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 603.820143][T22271] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 603.820189][T22271] ? netlink_deliver_tap+0x2e/0x1b0 [ 603.820222][T22271] ? netlink_deliver_tap+0x2e/0x1b0 [ 603.820263][T22271] netlink_unicast+0x7bb/0x940 [ 603.820307][T22271] netlink_sendmsg+0x813/0xb40 [ 603.820352][T22271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.820391][T22271] ? aa_sock_msg_perm+0xf1/0x1b0 [ 603.820420][T22271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.820460][T22271] sock_sendmsg_nosec+0x13a/0x180 [ 603.820489][T22271] ____sys_sendmsg+0x54e/0x850 [ 603.820529][T22271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.820572][T22271] ? import_iovec+0x73/0xa0 [ 603.820608][T22271] ___sys_sendmsg+0x2a5/0x360 [ 603.820639][T22271] ? __lock_acquire+0x683/0x2cf0 [ 603.820674][T22271] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.820748][T22271] ? __fget_files+0x2a/0x420 [ 603.820776][T22271] ? __fget_files+0x3a2/0x420 [ 603.820817][T22271] __x64_sys_sendmsg+0x1b1/0x290 [ 603.820853][T22271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 603.820907][T22271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.820932][T22271] do_syscall_64+0x174/0x580 [ 603.820960][T22271] ? trace_irq_disable+0x3b/0x140 [ 603.820988][T22271] ? clear_bhb_loop+0x40/0x90 [ 603.821016][T22271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.821038][T22271] RIP: 0033:0x7fe7b199de59 [ 603.821060][T22271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.821079][T22271] RSP: 002b:00007fe7b27a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.821103][T22271] RAX: ffffffffffffffda RBX: 00007fe7b1c25fa0 RCX: 00007fe7b199de59 [ 603.821119][T22271] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 603.821132][T22271] RBP: 00007fe7b27a8090 R08: 0000000000000000 R09: 0000000000000000 [ 603.821146][T22271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.821159][T22271] R13: 00007fe7b1c26038 R14: 00007fe7b1c25fa0 R15: 00007ffea46d7b78 [ 603.821200][T22271] [ 604.984919][T22308] netlink: 'syz.0.3920': attribute type 11 has an invalid length. [ 605.175992][T22313] netlink: 'syz.3.3922': attribute type 5 has an invalid length. [ 605.232294][T22319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3922'. [ 605.469786][T22331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3924'. [ 605.762190][T22336] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3928'. [ 605.886684][T22344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3931'. [ 605.899576][T22341] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3930'. [ 606.000377][T22341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3930'. [ 606.020682][T22341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.071882][T22341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.360323][ T4938] Bluetooth: hci1: command 0x0406 tx timeout [ 606.990635][T22393] tipc: Enabled bearer , priority 0 [ 607.009804][T22393] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 607.038936][T22393] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 607.079530][T22393] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 607.170686][T22393] tipc: Resetting bearer [ 607.204354][T22392] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3938'. [ 607.215728][T22406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3941'. [ 607.718232][T22431] nbd: couldn't find a device at index 0 [ 607.815022][T22434] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 607.914661][T22440] tipc: Enabling of bearer rejected, already enabled [ 607.926851][T22440] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 608.007502][T17537] tipc: Node number set to 1451542869 [ 608.166438][T22444] xt_CT: You must specify a L4 protocol and not use inversions on it [ 608.642690][T22471] IPVS: length: 35 != 43032 [ 608.753996][T22479] netlink: 'syz.4.3965': attribute type 2 has an invalid length. [ 608.786384][T22476] tipc: Enabled bearer , priority 0 [ 608.796094][T22476] syzkaller0: entered promiscuous mode [ 608.802245][T22476] syzkaller0: entered allmulticast mode [ 608.811567][T22476] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 608.866158][T22476] tipc: Resetting bearer [ 608.883786][T22475] tipc: Resetting bearer [ 608.961757][T22475] tipc: Disabling bearer [ 609.155421][T22498] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3970'. [ 609.552533][T22520] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 610.367316][T22550] syzkaller1: entered promiscuous mode [ 610.373113][T22550] syzkaller1: entered allmulticast mode [ 611.044976][T22555] syzkaller0: entered promiscuous mode [ 611.050825][T22555] syzkaller0: entered allmulticast mode [ 611.113192][T22556] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 612.008622][T22488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.334304][T22571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3985'. [ 612.475053][T22581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3986'. [ 612.510963][T22582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3986'. [ 612.573544][T22582] team0: entered promiscuous mode [ 612.592430][T22582] team_slave_0: entered promiscuous mode [ 612.611136][T22582] team_slave_1: entered promiscuous mode [ 612.628662][T22582] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.660271][T22582] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 612.755734][T22596] FAULT_INJECTION: forcing a failure. [ 612.755734][T22596] name failslab, interval 1, probability 0, space 0, times 0 [ 612.809683][T22596] CPU: 1 UID: 0 PID: 22596 Comm: syz.1.3991 Not tainted syzkaller #0 PREEMPT(full) [ 612.809713][T22596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 612.809727][T22596] Call Trace: [ 612.809735][T22596] [ 612.809744][T22596] dump_stack_lvl+0xe8/0x150 [ 612.809782][T22596] should_fail_ex+0x40c/0x560 [ 612.809810][T22596] ? alloc_netdev_mqs+0x8f3/0x12b0 [ 612.809834][T22596] should_failslab+0xa8/0x100 [ 612.809867][T22596] __kvmalloc_node_noprof+0x176/0x860 [ 612.809896][T22596] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 612.809993][T22596] ? alloc_netdev_mqs+0x8f3/0x12b0 [ 612.810024][T22596] alloc_netdev_mqs+0x8f3/0x12b0 [ 612.810047][T22596] ? __pfx_macsec_setup+0x10/0x10 [ 612.810084][T22596] rtnl_create_link+0x321/0xd70 [ 612.810115][T22596] rtnl_newlink_create+0x25f/0xb00 [ 612.810277][T22596] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 612.810329][T22596] ? __pfx___mutex_lock+0x10/0x10 [ 612.810376][T22596] ? ns_capable+0x89/0xe0 [ 612.810411][T22596] rtnl_newlink+0x167f/0x1bd0 [ 612.810464][T22596] ? __pfx_rtnl_newlink+0x10/0x10 [ 612.810494][T22596] ? do_syscall_64+0x174/0x580 [ 612.810524][T22596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.810597][T22596] ? kasan_quarantine_put+0xbb/0x1f0 [ 612.810629][T22596] ? lockdep_hardirqs_on+0x7a/0x110 [ 612.810666][T22596] ? nlmon_xmit+0xb0/0x100 [ 612.810696][T22596] ? kmem_cache_free+0x182/0x650 [ 612.810780][T22596] ? __lock_acquire+0x683/0x2cf0 [ 612.810819][T22596] ? __dev_queue_xmit+0x29b/0x37f0 [ 612.810847][T22596] ? __local_bh_enable_ip+0xd0/0x130 [ 612.810876][T22596] ? lockdep_hardirqs_on+0x7a/0x110 [ 612.810909][T22596] ? __dev_queue_xmit+0x29b/0x37f0 [ 612.810932][T22596] ? __local_bh_enable_ip+0xd0/0x130 [ 612.810958][T22596] ? __dev_queue_xmit+0x29b/0x37f0 [ 612.810992][T22596] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 612.811047][T22596] ? __pfx_rtnl_newlink+0x10/0x10 [ 612.811079][T22596] rtnetlink_rcv_msg+0x802/0xc00 [ 612.811117][T22596] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 612.811150][T22596] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 612.811181][T22596] ? ref_tracker_free+0x689/0x830 [ 612.811216][T22596] ? __pfx_ref_tracker_free+0x10/0x10 [ 612.811262][T22596] netlink_rcv_skb+0x226/0x4a0 [ 612.811302][T22596] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 612.811339][T22596] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 612.811396][T22596] ? netlink_deliver_tap+0x2e/0x1b0 [ 612.811433][T22596] ? netlink_deliver_tap+0x2e/0x1b0 [ 612.811480][T22596] netlink_unicast+0x7bb/0x940 [ 612.811530][T22596] netlink_sendmsg+0x813/0xb40 [ 612.811581][T22596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.811626][T22596] ? aa_sock_msg_perm+0xf1/0x1b0 [ 612.811669][T22596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.811707][T22596] sock_sendmsg_nosec+0x13a/0x180 [ 612.811749][T22596] ____sys_sendmsg+0x54e/0x850 [ 612.811794][T22596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 612.811844][T22596] ? import_iovec+0x73/0xa0 [ 612.811884][T22596] ___sys_sendmsg+0x2a5/0x360 [ 612.811920][T22596] ? __lock_acquire+0x683/0x2cf0 [ 612.811960][T22596] ? __pfx____sys_sendmsg+0x10/0x10 [ 612.812044][T22596] ? __fget_files+0x2a/0x420 [ 612.812075][T22596] ? __fget_files+0x3a2/0x420 [ 612.812117][T22596] __x64_sys_sendmsg+0x1b1/0x290 [ 612.812158][T22596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 612.812218][T22596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.812247][T22596] do_syscall_64+0x174/0x580 [ 612.812278][T22596] ? trace_irq_disable+0x3b/0x140 [ 612.812309][T22596] ? clear_bhb_loop+0x40/0x90 [ 612.812340][T22596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.812366][T22596] RIP: 0033:0x7f612e99de59 [ 612.812389][T22596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.812410][T22596] RSP: 002b:00007f612f819028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.812435][T22596] RAX: ffffffffffffffda RBX: 00007f612ec25fa0 RCX: 00007f612e99de59 [ 612.812453][T22596] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 612.812468][T22596] RBP: 00007f612f819090 R08: 0000000000000000 R09: 0000000000000000 [ 612.812482][T22596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 612.812496][T22596] R13: 00007f612ec26038 R14: 00007f612ec25fa0 R15: 00007ffd69bf60a8 [ 612.812538][T22596] [ 613.894402][T22631] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4000'. [ 614.035354][T22649] netlink: 'syz.3.4005': attribute type 4 has an invalid length. [ 614.075431][T22649] netlink: 'syz.3.4005': attribute type 4 has an invalid length. [ 614.095000][T22647] lo speed is unknown, defaulting to 1000 [ 614.115393][T22649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4005'. [ 614.137223][T22649] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4005'. [ 614.167502][T22656] ieee802154 phy0 wpan0: encryption failed: -22 [ 614.329819][T22656] : option downdelay: invalid value (18446744073709547007) [ 614.337477][T22656] : option downdelay: allowed values 0 - 2147483647 [ 614.387309][T22656]  (unregistering): Released all slaves [ 614.632836][T22676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4009'. [ 614.648419][T22649] syzkaller1: entered promiscuous mode [ 614.664466][T22649] syzkaller1: entered allmulticast mode [ 615.176395][T22695] netlink: 'syz.4.4014': attribute type 7 has an invalid length. [ 615.362843][T22705] : renamed from dummy0 [ 615.541343][T22709] syzkaller0: entered promiscuous mode [ 615.546894][T22709] syzkaller0: entered allmulticast mode [ 615.716519][T22714] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 615.791346][T22716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4016'. [ 615.817966][T22716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4016'. [ 615.849899][T22716] netlink: 'syz.1.4016': attribute type 1 has an invalid length. [ 616.427203][T22724] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 616.604104][T22728] ip6tnl2: entered allmulticast mode [ 618.027663][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 618.036181][T22685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 618.375999][T22745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4024'. [ 618.413957][T22754] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4022'. [ 618.432130][T22742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4022'. [ 618.749545][T22769] tipc: Enabled bearer , priority 0 [ 618.808038][T22769] syzkaller0: entered promiscuous mode [ 618.813592][T22769] syzkaller0: entered allmulticast mode [ 618.859464][T22778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4033'. [ 618.892946][T22769] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 618.967851][T22782] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 618.993657][T22769] tipc: Resetting bearer [ 619.017881][T22763] tipc: Resetting bearer [ 619.083705][T22788] netlink: 'syz.2.4034': attribute type 2 has an invalid length. [ 619.105356][T22790] netlink: 'syz.2.4034': attribute type 2 has an invalid length. [ 619.202241][T22763] tipc: Disabling bearer [ 620.994485][T22828] lo speed is unknown, defaulting to 1000 [ 621.394852][T22835] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 621.846430][T22778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 621.862643][T22828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4045'. [ 622.477705][T22878] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4057'. [ 622.867995][T22886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4059'. [ 622.887830][T22886] netlink: 'syz.1.4059': attribute type 1 has an invalid length. [ 623.381045][T22900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4063'. [ 623.861698][ T1678] block nbd1: Possible stuck request ffff888020f8e000: control (read@0,1024B). Runtime 60 seconds [ 624.470908][T22923] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4069'. [ 624.500803][ T1314] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.511881][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.893604][T22887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 626.112282][T22940] netlink: 'syz.1.4074': attribute type 12 has an invalid length. [ 626.244974][T22948] team_slave_0: mtu less than device minimum [ 626.284433][T22955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4076'. [ 626.293368][T22955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4076'. [ 626.320804][T22954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4077'. [ 626.501295][T22961] ip6t_rpfilter: unknown options [ 626.778512][T22967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4079'. [ 626.790928][T22967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4079'. [ 627.343681][T22998] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4087'. [ 627.461935][T23003] FAULT_INJECTION: forcing a failure. [ 627.461935][T23003] name failslab, interval 1, probability 0, space 0, times 0 [ 627.499496][T23003] CPU: 1 UID: 0 PID: 23003 Comm: syz.4.4089 Not tainted syzkaller #0 PREEMPT(full) [ 627.499526][T23003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 627.499540][T23003] Call Trace: [ 627.499549][T23003] [ 627.499559][T23003] dump_stack_lvl+0xe8/0x150 [ 627.499598][T23003] should_fail_ex+0x40c/0x560 [ 627.499629][T23003] should_failslab+0xa8/0x100 [ 627.499662][T23003] __kmalloc_noprof+0xfe/0x720 [ 627.499689][T23003] ? is_bpf_text_address+0x26/0x2b0 [ 627.499724][T23003] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 627.499751][T23003] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 627.499787][T23003] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 627.499824][T23003] genl_family_rcv_msg_doit+0xda/0x340 [ 627.499858][T23003] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 627.499890][T23003] ? __pfx_genl_get_cmd+0x10/0x10 [ 627.499912][T23003] ? stack_trace_save+0xa9/0x100 [ 627.499935][T23003] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 627.499974][T23003] ? __lock_acquire+0x683/0x2cf0 [ 627.500015][T23003] genl_rcv_msg+0x614/0x7a0 [ 627.500048][T23003] ? __pfx_genl_rcv_msg+0x10/0x10 [ 627.500074][T23003] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 627.500135][T23003] netlink_rcv_skb+0x226/0x4a0 [ 627.500169][T23003] ? __pfx_genl_rcv_msg+0x10/0x10 [ 627.500196][T23003] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 627.500245][T23003] ? down_read+0x2be/0x330 [ 627.500282][T23003] genl_rcv+0x28/0x40 [ 627.500305][T23003] netlink_unicast+0x7bb/0x940 [ 627.500348][T23003] netlink_sendmsg+0x813/0xb40 [ 627.500393][T23003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.500431][T23003] ? aa_sock_msg_perm+0xf1/0x1b0 [ 627.500460][T23003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.500492][T23003] sock_sendmsg_nosec+0x13a/0x180 [ 627.500521][T23003] ____sys_sendmsg+0x54e/0x850 [ 627.500561][T23003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.500603][T23003] ? import_iovec+0x73/0xa0 [ 627.500639][T23003] ___sys_sendmsg+0x2a5/0x360 [ 627.500670][T23003] ? __lock_acquire+0x683/0x2cf0 [ 627.500705][T23003] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.500778][T23003] ? __fget_files+0x2a/0x420 [ 627.500806][T23003] ? __fget_files+0x3a2/0x420 [ 627.500846][T23003] __x64_sys_sendmsg+0x1b1/0x290 [ 627.500882][T23003] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.500936][T23003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.500961][T23003] do_syscall_64+0x174/0x580 [ 627.500990][T23003] ? trace_irq_disable+0x3b/0x140 [ 627.501017][T23003] ? clear_bhb_loop+0x40/0x90 [ 627.501044][T23003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.501067][T23003] RIP: 0033:0x7f3e5819de59 [ 627.501088][T23003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.501107][T23003] RSP: 002b:00007f3e563f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.501139][T23003] RAX: ffffffffffffffda RBX: 00007f3e58425fa0 RCX: 00007f3e5819de59 [ 627.501154][T23003] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 627.501168][T23003] RBP: 00007f3e563f6090 R08: 0000000000000000 R09: 0000000000000000 [ 627.501182][T23003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.501194][T23003] R13: 00007f3e58426038 R14: 00007f3e58425fa0 R15: 00007ffe43519548 [ 627.501229][T23003] [ 627.722971][T22994] xfrm1: entered allmulticast mode [ 627.748514][T23005] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4090'. [ 628.323072][T23035] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4098'. [ 628.368255][T23029] netlink: 'syz.1.4097': attribute type 1 has an invalid length. [ 628.503256][T23043] tipc: Enabling of bearer rejected, already enabled [ 628.678509][T23058] x_tables: duplicate entry at hook 1 [ 628.752951][T23064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4104'. [ 628.848714][T23068] netlink: 'syz.1.4106': attribute type 4 has an invalid length. [ 628.863432][T23068] netlink: 'syz.1.4106': attribute type 4 has an invalid length. [ 628.921485][T23069] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4106'. [ 629.140159][T23089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4108'. [ 629.160489][T23091] batman_adv: batadv0: Adding interface: vlan2 [ 629.166732][T23091] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.192332][T23091] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 629.227993][T23091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4109'. [ 629.238201][T23091] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4109'. [ 629.250794][T23091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4109'. [ 629.503927][ T808] IPVS: starting estimator thread 0... [ 629.572163][T23099] bond4: option primary_reselect: invalid value (6) [ 629.609405][T23099] bond4 (unregistering): Released all slaves [ 629.622055][T23106] IPVS: using max 32 ests per chain, 76800 per kthread [ 629.697176][T23113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4114'. [ 629.716326][T23113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4114'. [ 629.815224][T23093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.911137][T23123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.925259][T23123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.997183][T23129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.058717][T23093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.241420][T23133] netlink: zone id is out of range [ 630.246618][T23133] netlink: zone id is out of range [ 630.252231][T23133] netlink: zone id is out of range [ 630.258330][T23133] netlink: zone id is out of range [ 630.263537][T23133] netlink: zone id is out of range [ 630.268681][T23133] netlink: zone id is out of range [ 630.273834][T23133] netlink: zone id is out of range [ 630.278988][T23133] netlink: get zone limit has 4 unknown bytes [ 630.328501][T23093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.360809][T23135] syzkaller0: entered promiscuous mode [ 630.366418][T23135] syzkaller0: entered allmulticast mode [ 630.394378][T23135] tipc: Enabled bearer , priority 0 [ 630.402885][T23134] tipc: Resetting bearer [ 630.423359][T23134] tipc: Disabling bearer [ 630.491607][T23093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.597792][T23141] batman_adv: batadv0: Adding interface: vlan2 [ 630.604029][T23141] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 630.620852][T23141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4123'. [ 630.630782][T23141] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4123'. [ 630.705635][T23143] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.855869][T10348] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.880531][T10348] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.942437][T10348] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.141199][T23165] netlink: zone id is out of range [ 631.146566][T23165] netlink: zone id is out of range [ 631.153826][T10348] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.214373][T23161] bridge0: left promiscuous mode [ 631.264617][ T5993] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.273234][ T5993] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.310004][ T5993] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.318444][ T5993] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.541662][T23179] batman_adv: batadv0: Adding interface: vlan4 [ 631.547905][T23179] batman_adv: batadv0: The MTU of interface vlan4 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.621457][T23179] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 631.655698][T23179] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.663434][T23179] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.408737][T23219] lo speed is unknown, defaulting to 1000 [ 633.071051][T23235] syzkaller0: entered promiscuous mode [ 633.091111][T23235] syzkaller0: entered allmulticast mode [ 633.199624][T23236] tipc: Resetting bearer [ 633.283867][T23236] tipc: Resetting bearer [ 633.577907][ T808] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 633.865199][T23252] netlink: 'syz.0.4152': attribute type 10 has an invalid length. [ 633.967828][ T5741] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 636.518317][ T4988] udevd[4988]: worker [21031] /devices/virtual/block/nbd1 is taking a long time [ 637.552939][T23247] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 637.577450][T23247] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 637.600722][T23247] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 637.900681][T23268] netlink: 'syz.3.4154': attribute type 1 has an invalid length. [ 638.789630][T23289] __nla_validate_parse: 9 callbacks suppressed [ 638.789654][T23289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4159'. [ 638.866915][T23297] netlink: 195 bytes leftover after parsing attributes in process `syz.0.4161'. [ 638.965593][T23301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4162'. [ 638.999498][T23300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4162'. [ 639.031196][T23304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4163'. [ 639.064457][T23300] netlink: 'syz.3.4162': attribute type 1 has an invalid length. [ 639.200084][T23312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4166'. [ 639.323599][T23316] tipc: Resetting bearer [ 639.335983][T23320] IPv6: NLM_F_REPLACE set, but no existing node found! [ 639.360047][T23320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4168'. [ 639.369009][T23320] netlink: 'syz.4.4168': attribute type 3 has an invalid length. [ 639.406771][T23321] netlink: 'syz.0.4164': attribute type 16 has an invalid length. [ 639.449775][T23321] netlink: 'syz.0.4164': attribute type 17 has an invalid length. [ 639.508562][T23321] tipc: Resetting bearer [ 639.563143][T23321] net_ratelimit: 6 callbacks suppressed [ 639.563163][T23321] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 639.605545][T23328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4170'. [ 639.643970][T10338] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.643981][T23328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4170'. [ 639.644021][T10338] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.672526][T10338] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.724931][T10338] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.779997][T23332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4172'. [ 639.926444][T23336] netlink: 'syz.4.4174': attribute type 27 has an invalid length. [ 639.934354][T23336] netlink: 'syz.4.4174': attribute type 4 has an invalid length. [ 640.118136][T23339] tipc: Enabled bearer , priority 0 [ 640.158458][T23339] syzkaller0: entered promiscuous mode [ 640.163996][T23339] syzkaller0: entered allmulticast mode [ 640.192075][T23339] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 640.224998][T23344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 640.296702][T23343] gretap1: entered allmulticast mode [ 640.326885][T23339] tipc: Resetting bearer [ 640.347115][T23338] tipc: Resetting bearer [ 640.419481][T23338] tipc: Disabling bearer [ 640.910159][T23374] netlink: 'syz.2.4184': attribute type 1 has an invalid length. [ 641.689481][T23374] bridge_slave_0: left allmulticast mode [ 641.709315][T23374] bridge_slave_0: left promiscuous mode [ 641.715551][T23374] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.764106][T23374] bridge_slave_1: left allmulticast mode [ 641.769823][T23374] bridge_slave_1: left promiscuous mode [ 641.775665][T23374] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.792526][T23374] bond0: (slave bond_slave_0): Releasing backup interface [ 641.825359][T23374] bond0: (slave bond_slave_1): Releasing backup interface [ 641.850472][T23374] team0: Port device team_slave_0 removed [ 641.867826][T23374] team0: Port device team_slave_1 removed [ 641.889730][T23374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.900698][T23374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.039213][T23374] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 642.219812][T23414] netlink: 'syz.1.4190': attribute type 16 has an invalid length. [ 642.483208][T23422] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 642.491033][T23422] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 642.743397][T23443] netlink: 'syz.3.4199': attribute type 1 has an invalid length. [ 642.953225][T23440] tipc: Failed to remove unknown binding: 66,0,0/0:2477909794/2477909796 [ 642.964469][T23440] tipc: Failed to remove unknown binding: 66,0,0/0:2477909794/2477909795 [ 642.975383][T23440] tipc: Failed to remove unknown binding: 66,0,0/0:2477909794/2477909796 [ 642.984207][T23440] tipc: Failed to remove unknown binding: 66,0,0/0:2477909794/2477909795 [ 643.373003][T23454] netlink: 'syz.2.4202': attribute type 13 has an invalid length. [ 643.390786][T23409] hid-generic 0005:04F3:100F.0001: item fetching failed at offset 0/1 [ 643.411847][T23409] hid-generic 0005:04F3:100F.0001: probe with driver hid-generic failed with error -22 [ 644.530911][T23474] __nla_validate_parse: 13 callbacks suppressed [ 644.530932][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4209'. [ 644.863464][T10338] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 37459 - 0 [ 644.880169][T10338] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 644.910142][T10338] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 37459 - 0 [ 644.962699][T10338] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 645.000280][T10338] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 37459 - 0 [ 645.040392][T10338] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 645.082323][T10338] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 37459 - 0 [ 645.117570][T10338] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 645.161106][T23488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4211'. [ 645.211168][T23492] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4212'. [ 645.382397][T23495] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.389739][T23495] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 645.823083][T23526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4221'. [ 645.836877][T23526] openvswitch: netlink: IP tunnel dst address not specified [ 645.854994][T23522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4219'. [ 646.039172][T23536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4224'. [ 646.068399][T23536] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4224'. [ 646.104563][T23536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4224'. [ 646.787698][T23574] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 647.017693][T23583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4233'. [ 647.203637][T23594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4237'. [ 647.705711][T23611] netlink: 'syz.4.4240': attribute type 2 has an invalid length. [ 647.714356][T23611] netlink: 'syz.4.4240': attribute type 1 has an invalid length. [ 647.893578][T23618] bond6 (unregistering): Released all slaves [ 648.041441][T23626] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 648.048757][T23626] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 648.487954][T23639] macvlan0: entered promiscuous mode [ 648.493511][T23639] netlink: 'syz.3.4246': attribute type 1 has an invalid length. [ 648.501274][T23639] netlink: 'syz.3.4246': attribute type 2 has an invalid length. [ 649.012783][T23657] pim6reg1: entered promiscuous mode [ 649.018170][T23657] pim6reg1: entered allmulticast mode [ 649.267705][T23675] nbd: couldn't find a device at index 0 [ 649.728368][T23698] batman_adv: batadv0: Adding interface: vlan2 [ 649.734783][T23698] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.764247][T23698] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 649.785049][T23698] __nla_validate_parse: 42 callbacks suppressed [ 649.785070][T23698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4264'. [ 649.801110][T23698] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4264'. [ 649.840747][T23702] netlink: 'syz.2.4266': attribute type 58 has an invalid length. [ 649.849786][T23702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4266'. [ 649.892072][T23698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4264'. [ 650.151820][T23708] lo speed is unknown, defaulting to 1000 [ 650.597685][T23718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4270'. [ 650.635732][T23718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4270'. [ 650.979560][T23727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4272'. [ 651.720214][T23752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4278'. [ 651.763318][T23755] xt_hashlimit: max too large, truncated to 1048576 [ 651.791017][T23752] 8021q: adding VLAN 0 to HW filter on device bond4 [ 651.800123][T23755] xt_hashlimit: overflow, try lower: 2/0 [ 651.810505][T23760] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 652.062901][T23764] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 652.079699][T23764] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 652.172153][T23768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4281'. [ 652.315938][T23769] syzkaller0: entered promiscuous mode [ 652.321490][T23769] syzkaller0: entered allmulticast mode [ 652.329706][T23766] sctp: [Deprecated]: syz.0.4281 (pid 23766) Use of int in max_burst socket option. [ 652.329706][T23766] Use struct sctp_assoc_value instead [ 652.778087][T23782] syzkaller0: entered promiscuous mode [ 652.783640][T23782] syzkaller0: entered allmulticast mode [ 652.838492][T23784] lo speed is unknown, defaulting to 1000 [ 653.428161][T23785] lo speed is unknown, defaulting to 1000 [ 653.542952][T23805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4293'. [ 653.561942][T23805] tipc: Invalid UDP bearer configuration [ 653.561993][T23805] tipc: Enabling of bearer rejected, failed to enable media [ 653.851659][T23811] ªªªªª!: renamed from virt_wifi0 [ 654.078620][T23820] syzkaller1: entered promiscuous mode [ 654.084153][T23820] syzkaller1: entered allmulticast mode [ 654.168773][T23830] netlink: 'syz.3.4299': attribute type 15 has an invalid length. [ 654.298907][T23830] lo speed is unknown, defaulting to 1000 [ 654.410470][T23837] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 654.605480][ T1678] block nbd1: Possible stuck request ffff888020f8e000: control (read@0,1024B). Runtime 90 seconds [ 654.825792][T23848] netlink: 'syz.0.4303': attribute type 27 has an invalid length. [ 654.843897][T23850] Bluetooth: MGMT ver 1.23 [ 654.851397][T23850] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 655.555957][T23859] __nla_validate_parse: 4 callbacks suppressed [ 655.555972][T23859] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4307'. [ 655.584383][T23859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4307'. [ 655.723292][T23870] xt_connbytes: Forcing CT accounting to be enabled [ 656.134698][T23889] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4314'. [ 656.411258][T23889] nbd6: detected capacity change from 0 to 3 [ 656.419549][T20970] Buffer I/O error on dev nbd6, logical block 1, async page read [ 656.957660][ T5631] block nbd6: Receive control failed (result -104) [ 657.526252][T23942] xt_TPROXY: Can be used only with -p tcp or -p udp [ 659.745648][T23959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4326'. [ 659.897108][T23968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4328'. [ 660.304412][T23971] lo speed is unknown, defaulting to 1000 [ 660.463393][ T5993] batadv2: left allmulticast mode [ 660.478598][ T5993] batadv2: left promiscuous mode [ 660.493258][ T5993] pimreg1: port 2(batadv2) entered disabled state [ 660.598031][T23999] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4335'. [ 660.783702][ T5993] pimreg: left allmulticast mode [ 660.817004][T24006] netlink: 'syz.0.4337': attribute type 2 has an invalid length. [ 660.824906][T24006] netlink: 'syz.0.4337': attribute type 1 has an invalid length. [ 660.912461][T24006] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4337'. [ 661.757767][ T5993] batman_adv: batadv0: Interface deactivated: vlan2 [ 661.769798][ T5993] batman_adv: batadv0: Removing interface: vlan2 [ 661.821788][T24026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4343'. [ 661.834108][ T5993] bond1 (unregistering): (slave bridge1): Releasing active interface [ 661.907902][ T5993] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 661.979306][ T5993] bond0 (unregistering): Released all slaves [ 661.998467][ T5993] bond1 (unregistering): Released all slaves [ 662.022238][ T5993] bond2 (unregistering): (slave veth3): Releasing active interface [ 662.033098][ T5993] bond2 (unregistering): Released all slaves [ 662.061756][ T5993] bond3 (unregistering): Released all slaves [ 662.098640][ T5993] bond4 (unregistering): Released all slaves [ 662.119605][ T5993] bond5 (unregistering): Released all slaves [ 662.142504][ T5993] bond6 (unregistering): Released all slaves [ 662.163841][ T5993] bond7 (unregistering): Released all slaves [ 662.213441][ T5993] bond8 (unregistering): Released all slaves [ 662.250454][ T5993] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 662.261341][ T5993] bond9 (unregistering): Released all slaves [ 662.283685][ T5993] bond10 (unregistering): Released all slaves [ 662.311467][ T5993] bond11 (unregistering): Released all slaves [ 662.331224][ T5993] bond12 (unregistering): Released all slaves [ 662.439745][T24004] team0: left promiscuous mode [ 662.446796][T24004] team_slave_0: left promiscuous mode [ 662.454418][T24004] team_slave_1: left promiscuous mode [ 662.472462][T24004] macvlan0: left promiscuous mode [ 662.597449][T24004] veth3: left allmulticast mode [ 662.602751][T24004] ipvlan2: left promiscuous mode [ 662.609112][T24004] macsec1: left promiscuous mode [ 662.658439][T24004] gretap1: left allmulticast mode [ 662.697786][T24009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4338'. [ 662.900693][T24041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4349'. [ 662.919874][ T5993] tipc: Disabling bearer [ 662.949200][ T5993] tipc: Left network mode [ 663.622034][T24049] lo speed is unknown, defaulting to 1000 [ 663.751265][T24072] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 663.831983][T24074] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4354'. [ 663.849079][T24072] netlink: 'syz.0.4355': attribute type 2 has an invalid length. [ 663.856889][T24072] netlink: 'syz.0.4355': attribute type 8 has an invalid length. [ 663.864835][T24072] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4355'. [ 664.235485][T24089] netlink: 'syz.2.4356': attribute type 1 has an invalid length. [ 664.391442][T24097] netlink: 'syz.3.4359': attribute type 75 has an invalid length. [ 664.423092][T24089] bond8: entered promiscuous mode [ 664.429553][T24089] 8021q: adding VLAN 0 to HW filter on device bond8 [ 664.633732][T24095] tipc: Enabled bearer , priority 0 [ 664.648491][T24104] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 664.689487][T24095] tipc: Resetting bearer [ 664.718306][T24094] tipc: Disabling bearer [ 664.973637][T24117] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4361'. [ 664.985102][T24115] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4361'. [ 667.623882][T24176] GUP no longer grows the stack in syz.2.4372 (24176): 200000003000-20000000a000 (200000001000) [ 667.675125][T24176] CPU: 1 UID: 0 PID: 24176 Comm: syz.2.4372 Not tainted syzkaller #0 PREEMPT(full) [ 667.675158][T24176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 667.675172][T24176] Call Trace: [ 667.675182][T24176] [ 667.675192][T24176] dump_stack_lvl+0xe8/0x150 [ 667.675233][T24176] __get_user_pages+0x238c/0x2720 [ 667.675275][T24176] ? __gup_longterm_locked+0xc3b/0x15c0 [ 667.675333][T24176] __gup_longterm_locked+0xd52/0x15c0 [ 667.675360][T24176] ? lock_acquire+0x106/0x350 [ 667.675410][T24176] gup_fast_fallback+0x1d8c/0x20e0 [ 667.675432][T24176] ? lockdep_hardirqs_on+0x7a/0x110 [ 667.675499][T24176] ? __pfx_gup_fast_fallback+0x10/0x10 [ 667.675542][T24176] ? is_valid_gup_args+0x11f/0x200 [ 667.675569][T24176] ? get_user_pages_fast+0x4d/0xb0 [ 667.675596][T24176] __iov_iter_get_pages_alloc+0x378/0xa40 [ 667.675637][T24176] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 667.675677][T24176] iov_iter_get_pages2+0x5e/0xa0 [ 667.675713][T24176] __se_sys_vmsplice+0x7b5/0x1660 [ 667.675768][T24176] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 667.675806][T24176] ? __pfx_futex_wake+0x10/0x10 [ 667.675906][T24176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.675930][T24176] do_syscall_64+0x174/0x580 [ 667.675959][T24176] ? trace_irq_disable+0x3b/0x140 [ 667.675986][T24176] ? clear_bhb_loop+0x40/0x90 [ 667.676012][T24176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.676034][T24176] RIP: 0033:0x7f09a179de59 [ 667.676055][T24176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.676074][T24176] RSP: 002b:00007f09a25e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 667.676098][T24176] RAX: ffffffffffffffda RBX: 00007f09a1a25fa0 RCX: 00007f09a179de59 [ 667.676115][T24176] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 667.676129][T24176] RBP: 00007f09a1833e6f R08: 0000000000000000 R09: 0000000000000000 [ 667.676147][T24176] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 667.676160][T24176] R13: 00007f09a1a26038 R14: 00007f09a1a25fa0 R15: 00007ffe93515b08 [ 667.676198][T24176] [ 668.143673][ T5993] hsr_slave_0: left promiscuous mode [ 668.164929][ T5993] hsr_slave_1: left promiscuous mode [ 668.245476][ T5993] veth1_macvtap: left promiscuous mode [ 668.273364][ T5993] veth0_macvtap: left promiscuous mode [ 668.298945][ T5993] veth1_vlan: left promiscuous mode [ 668.323839][ T5993] veth0_vlan: left promiscuous mode [ 669.767900][T24193] tipc: Enabling of bearer rejected, failed to enable media [ 669.822573][T24211] netlink: 'syz.2.4377': attribute type 23 has an invalid length. [ 669.859889][T24253] netlink: 'syz.0.4380': attribute type 1 has an invalid length. [ 669.927905][T24253] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 669.956732][T24258] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4381'. [ 670.101232][T24266] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4383'. [ 670.340254][T24275] lo speed is unknown, defaulting to 1000 [ 670.394365][T24271] netlink: 'syz.2.4385': attribute type 3 has an invalid length. [ 670.409432][T24271] netlink: 'syz.2.4385': attribute type 3 has an invalid length. [ 670.532536][T24283] netlink: 'syz.0.4389': attribute type 1 has an invalid length. [ 670.542271][T24283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4389'. [ 670.614383][T24283] netlink: 'syz.0.4389': attribute type 1 has an invalid length. [ 670.622194][T24283] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4389'. [ 670.635620][T24287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4390'. [ 670.686447][T24286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4390'. [ 670.731263][T24283] veth0: entered allmulticast mode [ 670.960316][T24296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4392'. [ 671.333090][T24280] lo speed is unknown, defaulting to 1000 [ 671.434893][T24323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4398'. [ 671.526232][ T29] audit: type=1804 audit(1783367667.358:5): pid=24324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4398" name="/newroot/329/memory.events" dev="tmpfs" ino=1707 res=1 errno=0 [ 671.572712][ T29] audit: type=1800 audit(1783367667.388:6): pid=24324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4398" name="memory.events" dev="tmpfs" ino=1707 res=0 errno=0 [ 671.632518][ T29] audit: type=1804 audit(1783367667.408:7): pid=24323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4398" name="/newroot/329/memory.events" dev="tmpfs" ino=1707 res=1 errno=0 [ 672.153559][ T5993] IPVS: stop unused estimator thread 0... [ 675.139680][T24361] netlink: 'syz.2.4404': attribute type 1 has an invalid length. [ 675.184373][T24365] netlink: 'syz.1.4405': attribute type 1 has an invalid length. [ 675.254026][T24369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4405'. [ 675.354613][T24361] 8021q: adding VLAN 0 to HW filter on device bond9 [ 675.472039][T24365] bond5: entered promiscuous mode [ 675.477604][T24365] 8021q: adding VLAN 0 to HW filter on device bond5 [ 675.505064][T24367] bond9: (slave veth5): Enslaving as a backup interface with a down link [ 675.513802][T24369] bond5: entered allmulticast mode [ 675.627609][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 675.790149][T24388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4406'. [ 675.953960][T24374] bond5: (slave bridge3): making interface the new active one [ 675.961776][T24374] bridge3: entered promiscuous mode [ 675.983182][T24374] bridge3: entered allmulticast mode [ 675.997156][T24374] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 676.092903][T24385] syzkaller0: entered promiscuous mode [ 676.118870][T24385] syzkaller0: entered allmulticast mode [ 676.132812][T24390] lo: entered allmulticast mode [ 676.266784][T24395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4409'. [ 676.298772][T24398] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4410'. [ 676.479640][T24395] bond10: option lacp_rate: invalid value (128) [ 676.487228][T24395] bond10 (unregistering): Released all slaves [ 676.513387][T24398] batman_adv: batadv0: Removing interface: vlan2 [ 680.359925][T24410] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 680.390000][T24412] ip6erspan0: entered allmulticast mode [ 680.594592][T24420] mac80211_hwsim hwsim30 syzkaller0: Caught tx_queue_len zero misconfig [ 680.603717][T24418] netlink: 'syz.0.4415': attribute type 210 has an invalid length. [ 680.794126][T24426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4419'. [ 680.805064][T24428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4420'. [ 680.815432][T24426] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4419'. [ 681.034772][T24448] netlink: 'syz.3.4424': attribute type 1 has an invalid length. [ 681.107302][T24448] bond4: (slave gretap2): making interface the new active one [ 681.115722][T24448] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 681.166434][T24454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4426'. [ 681.213583][T24457] vlan3: entered allmulticast mode [ 681.218793][T24457] bond4: entered allmulticast mode [ 681.223968][T24457] gretap2: entered allmulticast mode [ 681.232372][T24455] xt_TCPMSS: Only works on TCP SYN packets [ 681.235201][T24457] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 681.749252][T24469] syzkaller0: entered promiscuous mode [ 681.755176][T24469] syzkaller0: entered allmulticast mode [ 681.764900][T24469] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 682.132465][T24479] netlink: 'syz.3.4431': attribute type 2 has an invalid length. [ 682.141895][T24479] netlink: 'syz.3.4431': attribute type 2 has an invalid length. [ 682.150412][T24479] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.4431'. [ 682.188215][T24481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4432'. [ 682.233413][T24479] xt_CT: No such helper "netbios-ns" [ 682.248703][T24479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4431'. [ 682.395583][T24493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4434'. [ 682.406165][T24493] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4434'. [ 682.499497][T24498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.557255][T24503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4437'. [ 682.732360][T24508] bond0: entered promiscuous mode [ 682.737496][T24508] bond_slave_0: entered promiscuous mode [ 682.766318][T24508] bond_slave_1: entered promiscuous mode [ 682.789673][T24508] bond0: left promiscuous mode [ 682.794531][T24508] bond_slave_0: left promiscuous mode [ 682.800142][T24508] bond_slave_1: left promiscuous mode [ 682.939800][T24513] bond0: entered promiscuous mode [ 682.944895][T24513] bond_slave_0: entered promiscuous mode [ 682.950834][T24513] bond_slave_1: entered promiscuous mode [ 682.958963][T24513] bond0: left promiscuous mode [ 682.963955][T24513] bond_slave_0: left promiscuous mode [ 682.997685][T24513] bond_slave_1: left promiscuous mode [ 683.979191][ T4938] block nbd7: Receive control failed (result -32) [ 683.979191][ T5631] block nbd7: Receive control failed (result -32) [ 683.987763][ T5631] block nbd7: Receive control failed (result -32) [ 684.299532][T24547] netlink: 'syz.1.4450': attribute type 1 has an invalid length. [ 684.370623][T24547] 8021q: adding VLAN 0 to HW filter on device bond6 [ 684.416698][T24554] team0: Port device geneve2 added [ 685.301211][ T1678] block nbd1: Possible stuck request ffff888020f8e000: control (read@0,1024B). Runtime 120 seconds [ 685.320197][T24576] tipc: Enabled bearer , priority 0 [ 685.351647][T24586] netlink: 'syz.3.4461': attribute type 1 has an invalid length. [ 685.815061][T24586] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 685.884999][T24575] tipc: Disabling bearer [ 685.971132][ T1314] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 685.983860][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.513594][ T1621] block nbd6: Possible stuck request ffff888027ebe000: control (read@0,1024B). Runtime 30 seconds [ 686.633249][T24629] pim6reg: entered allmulticast mode [ 686.640003][T24620] syzkaller1: entered promiscuous mode [ 686.650134][T24620] syzkaller1: entered allmulticast mode [ 686.657239][T24629] pim6reg: left allmulticast mode [ 686.698585][T24627] erspan0: entered promiscuous mode [ 686.703976][T24627] erspan0: entered allmulticast mode [ 687.363762][T24659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 687.923096][T24670] netlink: 'syz.3.4484': attribute type 4 has an invalid length. [ 687.938637][ T29] audit: type=1800 audit(1783367683.778:8): pid=24670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4484" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1338 res=0 errno=0 [ 688.191936][T24679] __nla_validate_parse: 5 callbacks suppressed [ 688.191958][T24679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4487'. [ 688.365453][T24693] openvswitch: netlink: Duplicate or invalid key (type 0). [ 688.372862][T24693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.409261][T24694] netlink: 'syz.4.4492': attribute type 1 has an invalid length. [ 688.417268][T24694] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4492'. [ 688.734996][T24708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4495'. [ 688.934233][T24724] syzkaller0: entered promiscuous mode [ 688.939788][T24724] syzkaller0: entered allmulticast mode [ 689.007089][T24724] tipc: Enabled bearer , priority 0 [ 689.058523][T24725] tipc: Resetting bearer [ 689.064285][T24725] tipc: Resetting bearer [ 689.090499][T24725] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 689.463408][ T5283] veth0_vlan: left promiscuous mode [ 689.495837][T23396] veth0_vlan: entered promiscuous mode [ 689.739900][T24723] tipc: Resetting bearer [ 689.799540][T24723] tipc: Disabling bearer [ 689.949407][ T4938] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 689.983130][T24759] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 690.118154][T24766] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4506'. [ 690.572312][T24777] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 691.764542][T24811] netdevsim netdevsim1 €Â: renamed from netdevsim0 (while UP) [ 692.093946][T24821] syzkaller1: entered promiscuous mode [ 692.127501][T24821] syzkaller1: entered allmulticast mode [ 692.356255][T24839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4523'. [ 692.442935][T24839] vlan3: entered promiscuous mode [ 692.460895][T24839] veth0: entered promiscuous mode [ 692.640874][T24854] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4528'. [ 693.780825][T24884] netlink: 'syz.2.4533': attribute type 1 has an invalid length. [ 693.789612][T24884] netlink: 756 bytes leftover after parsing attributes in process `syz.2.4533'. [ 694.166730][T24899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4538'. [ 694.510420][T24907] gretap2: entered allmulticast mode [ 694.597572][T24908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4539'. [ 694.608044][T24914] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4541'. [ 694.672222][T24918] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4539'. [ 694.683801][T24918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4539'. [ 695.043024][T24927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4544'. [ 695.052874][T24927] nbd: couldn't find a device at index 0 [ 695.300059][T24931] syzkaller0: entered promiscuous mode [ 695.307505][T24931] syzkaller0: entered allmulticast mode [ 695.969672][T24944] tipc: Resetting bearer [ 696.000690][T24944] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 696.409101][T24967] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 696.421366][T24969] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4556'. [ 696.446626][T24969] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4556'. [ 696.469267][T24974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4557'. [ 696.502934][T24974] gretap0: entered promiscuous mode [ 696.518326][T24963] lo speed is unknown, defaulting to 1000 [ 696.864660][T24983] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 696.872153][T24983] team0: Device ipvlan3 failed to register rx_handler [ 697.094245][T24989] FAULT_INJECTION: forcing a failure. [ 697.094245][T24989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.126665][T24989] CPU: 0 UID: 0 PID: 24989 Comm: syz.2.4561 Not tainted syzkaller #0 PREEMPT(full) [ 697.126697][T24989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 697.126712][T24989] Call Trace: [ 697.126721][T24989] [ 697.126731][T24989] dump_stack_lvl+0xe8/0x150 [ 697.126771][T24989] should_fail_ex+0x40c/0x560 [ 697.126803][T24989] _copy_to_user+0x31/0xb0 [ 697.126839][T24989] simple_read_from_buffer+0xe1/0x170 [ 697.126876][T24989] proc_fail_nth_read+0x1bb/0x230 [ 697.126911][T24989] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 697.126945][T24989] ? rw_verify_area+0x24a/0x4c0 [ 697.126980][T24989] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 697.127009][T24989] vfs_read+0x213/0xa80 [ 697.127048][T24989] ? __pfx___mutex_lock+0x10/0x10 [ 697.127080][T24989] ? __pfx_vfs_read+0x10/0x10 [ 697.127114][T24989] ? __fget_files+0x2a/0x420 [ 697.127148][T24989] ? __fget_files+0x3a2/0x420 [ 697.127176][T24989] ? __fget_files+0x2a/0x420 [ 697.127214][T24989] ksys_read+0x150/0x270 [ 697.127250][T24989] ? __pfx_ksys_read+0x10/0x10 [ 697.127292][T24989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.127317][T24989] do_syscall_64+0x174/0x580 [ 697.127344][T24989] ? trace_irq_disable+0x3b/0x140 [ 697.127371][T24989] ? clear_bhb_loop+0x40/0x90 [ 697.127446][T24989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.127469][T24989] RIP: 0033:0x7f09a175e68e [ 697.127490][T24989] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 697.127510][T24989] RSP: 002b:00007f09a25e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 697.127534][T24989] RAX: ffffffffffffffda RBX: 00007f09a25e26c0 RCX: 00007f09a175e68e [ 697.127550][T24989] RDX: 000000000000000f RSI: 00007f09a25e20a0 RDI: 0000000000000004 [ 697.127564][T24989] RBP: 00007f09a25e2090 R08: 0000000000000000 R09: 0000000000000000 [ 697.127578][T24989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.127591][T24989] R13: 00007f09a1a26038 R14: 00007f09a1a25fa0 R15: 00007ffe93515b08 [ 697.127627][T24989] [ 697.132803][T24990] nbd: couldn't find a device at index 0 [ 697.912286][T24995] bond10 (unregistering): Released all slaves [ 697.977975][T25004] netlink: 'syz.0.4566': attribute type 1 has an invalid length. [ 697.985803][T25004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.200019][T25009] tipc: Resetting bearer [ 698.978869][T25029] netlink: 'syz.4.4574': attribute type 1 has an invalid length. [ 699.099736][T25029] 8021q: adding VLAN 0 to HW filter on device bond6 [ 699.116685][T25034] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.128916][T25034] bond6: (slave team0): Enslaving as an active interface with an up link [ 699.155823][T25043] tipc: New replicast peer: 255.255.255.255 [ 699.166628][T25043] tipc: Enabled bearer , priority 26 [ 699.183719][T25043] __nla_validate_parse: 2 callbacks suppressed [ 699.183737][T25043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4577'. [ 699.262267][T25046] netlink: 'syz.2.4577': attribute type 1 has an invalid length. [ 699.773108][T25055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4579'. [ 699.894156][T25044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4575'. [ 699.903512][T25044] nbd: couldn't find a device at index 0 [ 699.907909][T25045] bond6: entered promiscuous mode [ 699.914245][T25045] team0: entered promiscuous mode [ 699.919313][T25045] vlan0: entered promiscuous mode [ 699.924824][T25045] bridge2: entered promiscuous mode [ 699.930562][T25045] bond6: entered allmulticast mode [ 699.935717][T25045] team0: entered allmulticast mode [ 700.015016][T25045] vlan0: entered allmulticast mode [ 700.020213][T25045] veth0_vlan: entered allmulticast mode [ 700.066106][T25046] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 700.180079][T25060] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4581'. [ 700.267538][T25064] lo speed is unknown, defaulting to 1000 [ 700.271124][T25060] netlink: 'syz.3.4581': attribute type 1 has an invalid length. [ 700.295398][T25060] netlink: 512 bytes leftover after parsing attributes in process `syz.3.4581'. [ 700.311208][T25068] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4583'. [ 700.479138][T25077] netlink: 'syz.4.4585': attribute type 1 has an invalid length. [ 700.673686][T25077] 8021q: adding VLAN 0 to HW filter on device bond7 [ 700.910389][T25092] syzkaller1: entered promiscuous mode [ 700.924923][ T4938] Bluetooth: hci2: link tx timeout [ 700.925058][T25092] syzkaller1: entered allmulticast mode [ 700.937963][ T4938] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 702.441586][T25141] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4600'. [ 702.492679][T25141] BUG: Bad page state in process syz.3.4600 pfn:4ed9c [ 702.499637][T25141] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804ed9c280 pfn:0x4ed9c [ 702.509756][T25141] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 702.529511][T25141] raw: 00fff00000000000 dead000000000040 ffff888022e97000 0000000000000000 [ 702.538190][T25141] raw: ffff88804ed9c280 3ffffffffffffffd 00000000ffffffff 0000000000000000 [ 702.546824][T25141] page dumped because: page_pool leak [ 702.552307][T25141] page_owner tracks the page as allocated [ 702.558067][T25141] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14300, tgid 14276 (syz.0.2227), ts 340496085620, free_ts 328869150318 [ 702.575347][T25141] post_alloc_hook+0x1f9/0x250 [ 702.580171][T25141] get_page_from_freelist+0x21fa/0x2270 [ 702.585778][T25141] __alloc_frozen_pages_noprof+0x18d/0x380 [ 702.591646][T25141] __alloc_pages_noprof+0x10/0x100 [ 702.596810][T25141] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 702.602327][T25141] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 702.608578][T25141] skb_pp_cow_data+0xcd0/0x19a0 [ 702.613498][T25141] do_xdp_generic+0x770/0x12d0 [ 702.618313][T25141] __netif_receive_skb_core+0x10e0/0x30b0 [ 702.624080][T25141] process_backlog+0x706/0x1860 [ 702.628986][T25141] __napi_poll+0xaa/0x330 [ 702.647224][T25141] net_rx_action+0x61d/0xf50 [ 702.651908][T25141] handle_softirqs+0x225/0x840 [ 702.656732][T25141] do_softirq+0x76/0xd0 [ 702.660939][T25141] __local_bh_enable_ip+0xf8/0x130 [ 702.666120][T25141] __dev_queue_xmit+0x1ed7/0x37f0 [ 702.671201][T25141] page last free pid 15 tgid 15 stack trace: [ 702.677228][T25141] __free_frozen_pages+0xc1e/0xd10 [ 702.682391][T25141] rcu_core+0x78b/0x10a0 [ 702.686693][T25141] handle_softirqs+0x225/0x840 [ 702.691508][T25141] run_ksoftirqd+0x36/0x60 [ 702.696122][T25141] smpboot_thread_fn+0x57c/0xa80 [ 702.701120][T25141] kthread+0x388/0x470 [ 702.705370][T25141] ret_from_fork+0x514/0xb70 [ 702.710020][T25141] ret_from_fork_asm+0x1a/0x30 [ 702.715210][T25141] Modules linked in: [ 702.719165][T25141] CPU: 0 UID: 0 PID: 25141 Comm: syz.3.4600 Not tainted syzkaller #0 PREEMPT(full) [ 702.719201][T25141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 702.719216][T25141] Call Trace: [ 702.719226][T25141] [ 702.719237][T25141] dump_stack_lvl+0xe8/0x150 [ 702.719278][T25141] bad_page+0x17f/0x1c0 [ 702.719304][T25141] __free_frozen_pages+0xcc2/0xd10 [ 702.719343][T25141] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 702.719464][T25141] bpf_xdp_adjust_tail+0x1ce/0x210 [ 702.719532][T25141] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 702.719556][T25141] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 702.719610][T25141] do_xdp_generic+0xac2/0x12d0 [ 702.719636][T25141] ? __lock_acquire+0x683/0x2cf0 [ 702.719668][T25141] ? do_xdp_generic+0x6ba/0x12d0 [ 702.719701][T25141] ? __pfx_do_xdp_generic+0x10/0x10 [ 702.719738][T25141] ? tun_get_user+0x23cb/0x4370 [ 702.719815][T25141] ? tun_get_user+0x23cb/0x4370 [ 702.719845][T25141] tun_get_user+0x24f8/0x4370 [ 702.719891][T25141] ? aa_file_perm+0x18b/0x15f0 [ 702.719923][T25141] ? aa_file_perm+0x4ed/0x15f0 [ 702.719948][T25141] ? __pfx_tun_get_user+0x10/0x10 [ 702.719980][T25141] ? __lock_acquire+0x683/0x2cf0 [ 702.720015][T25141] ? preempt_schedule_thunk+0x16/0x40 [ 702.720045][T25141] ? preempt_schedule_common+0x82/0xd0 [ 702.720078][T25141] ? ref_tracker_alloc+0x341/0x4b0 [ 702.720110][T25141] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 702.720139][T25141] ? tun_get+0x1c/0x2f0 [ 702.720169][T25141] ? tun_get+0x1c/0x2f0 [ 702.720212][T25141] ? tun_get+0x1c/0x2f0 [ 702.720239][T25141] ? tun_get+0x1c/0x2f0 [ 702.720275][T25141] tun_chr_write_iter+0x113/0x200 [ 702.720307][T25141] vfs_write+0x612/0xba0 [ 702.720352][T25141] ? __pfx_vfs_write+0x10/0x10 [ 702.720398][T25141] ? __fget_files+0x2a/0x420 [ 702.720439][T25141] ksys_write+0x150/0x270 [ 702.720476][T25141] ? __pfx_ksys_write+0x10/0x10 [ 702.720520][T25141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.720546][T25141] do_syscall_64+0x174/0x580 [ 702.720575][T25141] ? trace_irq_disable+0x3b/0x140 [ 702.720603][T25141] ? clear_bhb_loop+0x40/0x90 [ 702.720631][T25141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.720655][T25141] RIP: 0033:0x7f5b0535e68e [ 702.720676][T25141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 702.720697][T25141] RSP: 002b:00007f5b062aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 702.720722][T25141] RAX: ffffffffffffffda RBX: 00007f5b062af6c0 RCX: 00007f5b0535e68e [ 702.720739][T25141] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 702.720754][T25141] RBP: 00007f5b05433e6f R08: 0000000000000000 R09: 0000000000000000 [ 702.720769][T25141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.720783][T25141] R13: 00007f5b05626038 R14: 00007f5b05625fa0 R15: 00007ffed539b668 [ 702.720820][T25141] [ 702.720829][T25141] Disabling lock debugging due to kernel taint [ 703.031982][T25141] BUG: Bad page state in process syz.3.4600 pfn:76f76 [ 703.038869][T25141] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888076f76640 pfn:0x76f76 [ 703.048970][T25141] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 703.056146][T25141] raw: 00fff00000000000 dead000000000040 ffff888022e97000 0000000000000000 [ 703.064775][T25141] raw: ffff888076f76640 0000000000000001 00000000ffffffff 0000000000000000 [ 703.073395][T25141] page dumped because: page_pool leak [ 703.085704][T25141] page_owner tracks the page as allocated [ 703.091511][T25141] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14300, tgid 14276 (syz.0.2227), ts 340495935833, free_ts 328869339640 [ 703.108757][T25141] post_alloc_hook+0x1f9/0x250 [ 703.113576][T25141] get_page_from_freelist+0x21fa/0x2270 [ 703.119181][T25141] __alloc_frozen_pages_noprof+0x18d/0x380 [ 703.125055][T25141] __alloc_pages_noprof+0x10/0x100 [ 703.130225][T25141] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 703.135750][T25141] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 703.141872][T25141] skb_pp_cow_data+0xcd0/0x19a0 [ 703.146770][T25141] do_xdp_generic+0x770/0x12d0 [ 703.151590][T25141] __netif_receive_skb_core+0x10e0/0x30b0 [ 703.157735][T25141] process_backlog+0x706/0x1860 [ 703.162634][T25141] __napi_poll+0xaa/0x330 [ 703.167011][T25141] net_rx_action+0x61d/0xf50 [ 703.171681][T25141] handle_softirqs+0x225/0x840 [ 703.176490][T25141] do_softirq+0x76/0xd0 [ 703.180684][T25141] __local_bh_enable_ip+0xf8/0x130 [ 703.191323][T25141] __dev_queue_xmit+0x1ed7/0x37f0 [ 703.196792][T25141] page last free pid 15 tgid 15 stack trace: [ 703.203305][T25141] __free_frozen_pages+0xc1e/0xd10 [ 703.208887][T25141] rcu_core+0x78b/0x10a0 [ 703.213503][T25141] handle_softirqs+0x225/0x840 [ 703.218686][T25141] run_ksoftirqd+0x36/0x60 [ 703.223495][T25141] smpboot_thread_fn+0x57c/0xa80 [ 703.228872][T25141] kthread+0x388/0x470 [ 703.233324][T25141] ret_from_fork+0x514/0xb70 [ 703.238341][T25141] ret_from_fork_asm+0x1a/0x30 [ 703.243510][T25141] Modules linked in: [ 703.247834][T25141] CPU: 0 UID: 0 PID: 25141 Comm: syz.3.4600 Tainted: G B syzkaller #0 PREEMPT(full) [ 703.247867][T25141] Tainted: [B]=BAD_PAGE [ 703.247874][T25141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 703.247887][T25141] Call Trace: [ 703.247897][T25141] [ 703.247906][T25141] dump_stack_lvl+0xe8/0x150 [ 703.247943][T25141] bad_page+0x17f/0x1c0 [ 703.247966][T25141] __free_frozen_pages+0xcc2/0xd10 [ 703.247998][T25141] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 703.248031][T25141] bpf_xdp_adjust_tail+0x1ce/0x210 [ 703.248067][T25141] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 703.248088][T25141] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 703.248125][T25141] do_xdp_generic+0xac2/0x12d0 [ 703.248148][T25141] ? __lock_acquire+0x683/0x2cf0 [ 703.248179][T25141] ? do_xdp_generic+0x6ba/0x12d0 [ 703.248205][T25141] ? __pfx_do_xdp_generic+0x10/0x10 [ 703.248234][T25141] ? tun_get_user+0x23cb/0x4370 [ 703.248272][T25141] ? tun_get_user+0x23cb/0x4370 [ 703.248299][T25141] tun_get_user+0x24f8/0x4370 [ 703.248336][T25141] ? aa_file_perm+0x18b/0x15f0 [ 703.248363][T25141] ? aa_file_perm+0x4ed/0x15f0 [ 703.248386][T25141] ? __pfx_tun_get_user+0x10/0x10 [ 703.248414][T25141] ? __lock_acquire+0x683/0x2cf0 [ 703.248446][T25141] ? preempt_schedule_thunk+0x16/0x40 [ 703.248474][T25141] ? preempt_schedule_common+0x82/0xd0 [ 703.248515][T25141] ? ref_tracker_alloc+0x341/0x4b0 [ 703.248541][T25141] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 703.248565][T25141] ? tun_get+0x1c/0x2f0 [ 703.248589][T25141] ? tun_get+0x1c/0x2f0 [ 703.248619][T25141] ? tun_get+0x1c/0x2f0 [ 703.248647][T25141] ? tun_get+0x1c/0x2f0 [ 703.248676][T25141] tun_chr_write_iter+0x113/0x200 [ 703.248706][T25141] vfs_write+0x612/0xba0 [ 703.248744][T25141] ? __pfx_vfs_write+0x10/0x10 [ 703.248782][T25141] ? __fget_files+0x2a/0x420 [ 703.248816][T25141] ksys_write+0x150/0x270 [ 703.248850][T25141] ? __pfx_ksys_write+0x10/0x10 [ 703.248888][T25141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.248912][T25141] do_syscall_64+0x174/0x580 [ 703.248942][T25141] ? trace_irq_disable+0x3b/0x140 [ 703.248970][T25141] ? clear_bhb_loop+0x40/0x90 [ 703.248995][T25141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.249019][T25141] RIP: 0033:0x7f5b0535e68e [ 703.249039][T25141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 703.249061][T25141] RSP: 002b:00007f5b062aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 703.249085][T25141] RAX: ffffffffffffffda RBX: 00007f5b062af6c0 RCX: 00007f5b0535e68e [ 703.249103][T25141] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 703.249118][T25141] RBP: 00007f5b05433e6f R08: 0000000000000000 R09: 0000000000000000 [ 703.249133][T25141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.249147][T25141] R13: 00007f5b05626038 R14: 00007f5b05625fa0 R15: 00007ffed539b668 [ 703.249174][T25141] [ 703.249296][T25141] BUG: Bad page state in process syz.3.4600 pfn:78a95 [ 703.565605][T25141] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078a953c0 pfn:0x78a95 [ 703.576481][T25141] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 703.583655][T25141] raw: 00fff00000000000 dead000000000040 ffff888022e97000 0000000000000000 [ 703.592291][T25141] raw: ffff888078a953c0 0000000000000001 00000000ffffffff 0000000000000000 [ 703.600920][T25141] page dumped because: page_pool leak [ 703.606327][T25141] page_owner tracks the page as allocated [ 703.612087][T25141] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14300, tgid 14276 (syz.0.2227), ts 340495917141, free_ts 328869415403 [ 703.629320][T25141] post_alloc_hook+0x1f9/0x250 [ 703.634140][T25141] get_page_from_freelist+0x21fa/0x2270 [ 703.639741][T25141] __alloc_frozen_pages_noprof+0x18d/0x380 [ 703.645598][T25141] __alloc_pages_noprof+0x10/0x100 [ 703.650766][T25141] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 703.656285][T25141] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 703.662401][T25141] skb_pp_cow_data+0xcd0/0x19a0 [ 703.667302][T25141] do_xdp_generic+0x770/0x12d0 [ 703.672100][T25141] __netif_receive_skb_core+0x10e0/0x30b0 [ 703.684761][T25141] process_backlog+0x706/0x1860 [ 703.689688][T25141] __napi_poll+0xaa/0x330 [ 703.694104][T25141] net_rx_action+0x61d/0xf50 [ 703.698735][T25141] handle_softirqs+0x225/0x840 [ 703.703541][T25141] do_softirq+0x76/0xd0 [ 703.707746][T25141] __local_bh_enable_ip+0xf8/0x130 [ 703.712922][T25141] __dev_queue_xmit+0x1ed7/0x37f0 [ 703.717994][T25141] page last free pid 15 tgid 15 stack trace: [ 703.724002][T25141] __free_frozen_pages+0xc1e/0xd10 [ 703.729166][T25141] rcu_core+0x78b/0x10a0 [ 703.733459][T25141] handle_softirqs+0x225/0x840 [ 703.738269][T25141] run_ksoftirqd+0x36/0x60 [ 703.742752][T25141] smpboot_thread_fn+0x57c/0xa80 [ 703.747747][T25141] kthread+0x388/0x470 [ 703.751880][T25141] ret_from_fork+0x514/0xb70 [ 703.756533][T25141] ret_from_fork_asm+0x1a/0x30 [ 703.761343][T25141] Modules linked in: [ 703.765289][T25141] CPU: 0 UID: 0 PID: 25141 Comm: syz.3.4600 Tainted: G B syzkaller #0 PREEMPT(full) [ 703.765325][T25141] Tainted: [B]=BAD_PAGE [ 703.765335][T25141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 703.765350][T25141] Call Trace: [ 703.765359][T25141] [ 703.765368][T25141] dump_stack_lvl+0xe8/0x150 [ 703.765410][T25141] bad_page+0x17f/0x1c0 [ 703.765443][T25141] __free_frozen_pages+0xcc2/0xd10 [ 703.765480][T25141] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 703.765520][T25141] bpf_xdp_adjust_tail+0x1ce/0x210 [ 703.765562][T25141] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 703.765587][T25141] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 703.765629][T25141] do_xdp_generic+0xac2/0x12d0 [ 703.765654][T25141] ? __lock_acquire+0x683/0x2cf0 [ 703.765687][T25141] ? do_xdp_generic+0x6ba/0x12d0 [ 703.765715][T25141] ? __pfx_do_xdp_generic+0x10/0x10 [ 703.765748][T25141] ? tun_get_user+0x23cb/0x4370 [ 703.765791][T25141] ? tun_get_user+0x23cb/0x4370 [ 703.765822][T25141] tun_get_user+0x24f8/0x4370 [ 703.765864][T25141] ? aa_file_perm+0x18b/0x15f0 [ 703.765894][T25141] ? aa_file_perm+0x4ed/0x15f0 [ 703.765920][T25141] ? __pfx_tun_get_user+0x10/0x10 [ 703.765953][T25141] ? __lock_acquire+0x683/0x2cf0 [ 703.765989][T25141] ? preempt_schedule_thunk+0x16/0x40 [ 703.766019][T25141] ? preempt_schedule_common+0x82/0xd0 [ 703.766055][T25141] ? ref_tracker_alloc+0x341/0x4b0 [ 703.766087][T25141] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 703.766118][T25141] ? tun_get+0x1c/0x2f0 [ 703.766149][T25141] ? tun_get+0x1c/0x2f0 [ 703.766183][T25141] ? tun_get+0x1c/0x2f0 [ 703.766214][T25141] ? tun_get+0x1c/0x2f0 [ 703.766248][T25141] tun_chr_write_iter+0x113/0x200 [ 703.766282][T25141] vfs_write+0x612/0xba0 [ 703.766326][T25141] ? __pfx_vfs_write+0x10/0x10 [ 703.766369][T25141] ? __fget_files+0x2a/0x420 [ 703.766407][T25141] ksys_write+0x150/0x270 [ 703.766455][T25141] ? __pfx_ksys_write+0x10/0x10 [ 703.766499][T25141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.766526][T25141] do_syscall_64+0x174/0x580 [ 703.766560][T25141] ? trace_irq_disable+0x3b/0x140 [ 703.766591][T25141] ? clear_bhb_loop+0x40/0x90 [ 703.766620][T25141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.766646][T25141] RIP: 0033:0x7f5b0535e68e [ 703.766668][T25141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 703.766692][T25141] RSP: 002b:00007f5b062aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 703.766719][T25141] RAX: ffffffffffffffda RBX: 00007f5b062af6c0 RCX: 00007f5b0535e68e [ 703.766738][T25141] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 703.766756][T25141] RBP: 00007f5b05433e6f R08: 0000000000000000 R09: 0000000000000000 [ 703.766772][T25141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.766788][T25141] R13: 00007f5b05626038 R14: 00007f5b05625fa0 R15: 00007ffed539b668 [ 703.766818][T25141] [ 703.766832][T25141] BUG: Bad page state in process syz.3.4600 pfn:75d6d [ 704.088411][T25141] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x75d6d [ 704.098535][T25141] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 704.105710][T25141] raw: 00fff00000000000 dead000000000040 ffff888022e97000 0000000000000000 [ 704.114346][T25141] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 704.122980][T25141] page dumped because: page_pool leak [ 704.128393][T25141] page_owner tracks the page as allocated [ 704.142237][T25141] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14300, tgid 14276 (syz.0.2227), ts 340494516504, free_ts 340490818361 [ 704.159563][T25141] post_alloc_hook+0x1f9/0x250 [ 704.164401][T25141] get_page_from_freelist+0x21fa/0x2270 [ 704.170014][T25141] __alloc_frozen_pages_noprof+0x18d/0x380 [ 704.175886][T25141] __alloc_pages_noprof+0x10/0x100 [ 704.181098][T25141] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 704.186632][T25141] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 704.192763][T25141] skb_pp_cow_data+0x260/0x19a0 [ 704.197686][T25141] do_xdp_generic+0x770/0x12d0 [ 704.202505][T25141] __netif_receive_skb_core+0x10e0/0x30b0 [ 704.208328][T25141] process_backlog+0x706/0x1860 [ 704.213250][T25141] __napi_poll+0xaa/0x330 [ 704.218426][T25141] net_rx_action+0x61d/0xf50 [ 704.223074][T25141] handle_softirqs+0x225/0x840 [ 704.227898][T25141] do_softirq+0x76/0xd0 [ 704.232115][T25141] __local_bh_enable_ip+0xf8/0x130 [ 704.237280][T25141] __dev_queue_xmit+0x1ed7/0x37f0 [ 704.249420][T25141] page last free pid 5993 tgid 5993 stack trace: [ 704.255821][T25141] __free_frozen_pages+0xc1e/0xd10 [ 704.260985][T25141] rcu_core+0x78b/0x10a0 [ 704.265289][T25141] handle_softirqs+0x225/0x840 [ 704.270103][T25141] do_softirq+0x76/0xd0 [ 704.274315][T25141] __local_bh_enable_ip+0xf8/0x130 [ 704.279485][T25141] addrconf_dad_work+0x2d1/0x15c0 [ 704.284632][T25141] process_scheduled_works+0xa8e/0x14e0 [ 704.290224][T25141] worker_thread+0xa47/0xfb0 [ 704.294867][T25141] kthread+0x388/0x470 [ 704.299003][T25141] ret_from_fork+0x514/0xb70 [ 704.303652][T25141] ret_from_fork_asm+0x1a/0x30 [ 704.308461][T25141] Modules linked in: [ 704.312402][T25141] CPU: 0 UID: 0 PID: 25141 Comm: syz.3.4600 Tainted: G B syzkaller #0 PREEMPT(full) [ 704.312438][T25141] Tainted: [B]=BAD_PAGE [ 704.312446][T25141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 704.312461][T25141] Call Trace: [ 704.312470][T25141] [ 704.312481][T25141] dump_stack_lvl+0xe8/0x150 [ 704.312519][T25141] bad_page+0x17f/0x1c0 [ 704.312542][T25141] __free_frozen_pages+0xcc2/0xd10 [ 704.312575][T25141] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 704.312613][T25141] bpf_xdp_adjust_tail+0x1ce/0x210 [ 704.312651][T25141] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 704.312672][T25141] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 704.312711][T25141] do_xdp_generic+0xac2/0x12d0 [ 704.312735][T25141] ? __lock_acquire+0x683/0x2cf0 [ 704.312765][T25141] ? do_xdp_generic+0x6ba/0x12d0 [ 704.312792][T25141] ? __pfx_do_xdp_generic+0x10/0x10 [ 704.312820][T25141] ? tun_get_user+0x23cb/0x4370 [ 704.312858][T25141] ? tun_get_user+0x23cb/0x4370 [ 704.312886][T25141] tun_get_user+0x24f8/0x4370 [ 704.312922][T25141] ? aa_file_perm+0x18b/0x15f0 [ 704.312950][T25141] ? aa_file_perm+0x4ed/0x15f0 [ 704.312973][T25141] ? __pfx_tun_get_user+0x10/0x10 [ 704.313004][T25141] ? __lock_acquire+0x683/0x2cf0 [ 704.313045][T25141] ? preempt_schedule_thunk+0x16/0x40 [ 704.313072][T25141] ? preempt_schedule_common+0x82/0xd0 [ 704.313105][T25141] ? ref_tracker_alloc+0x341/0x4b0 [ 704.313134][T25141] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 704.313162][T25141] ? tun_get+0x1c/0x2f0 [ 704.313189][T25141] ? tun_get+0x1c/0x2f0 [ 704.313219][T25141] ? tun_get+0x1c/0x2f0 [ 704.313246][T25141] ? tun_get+0x1c/0x2f0 [ 704.313277][T25141] tun_chr_write_iter+0x113/0x200 [ 704.313307][T25141] vfs_write+0x612/0xba0 [ 704.313346][T25141] ? __pfx_vfs_write+0x10/0x10 [ 704.313383][T25141] ? __fget_files+0x2a/0x420 [ 704.313416][T25141] ksys_write+0x150/0x270 [ 704.313450][T25141] ? __pfx_ksys_write+0x10/0x10 [ 704.313487][T25141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.313511][T25141] do_syscall_64+0x174/0x580 [ 704.313540][T25141] ? trace_irq_disable+0x3b/0x140 [ 704.313568][T25141] ? clear_bhb_loop+0x40/0x90 [ 704.313593][T25141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.313616][T25141] RIP: 0033:0x7f5b0535e68e [ 704.313636][T25141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 704.313656][T25141] RSP: 002b:00007f5b062aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 704.313681][T25141] RAX: ffffffffffffffda RBX: 00007f5b062af6c0 RCX: 00007f5b0535e68e [ 704.313698][T25141] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 704.313713][T25141] RBP: 00007f5b05433e6f R08: 0000000000000000 R09: 0000000000000000 [ 704.313727][T25141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.313740][T25141] R13: 00007f5b05626038 R14: 00007f5b05625fa0 R15: 00007ffed539b668 [ 704.313766][T25141] [ 704.313779][T25141] BUG: Bad page state in process syz.3.4600 pfn:4f9e5 [ 704.631366][T25141] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804f9e53c0 pfn:0x4f9e5 [ 704.641481][T25141] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 704.648648][T25141] raw: 00fff00000000000 dead000000000040 ffff888022e97000 0000000000000000 [ 704.657276][T25141] raw: ffff88804f9e53c0 0000000000000001 00000000ffffffff 0000000000000000 [ 704.665894][T25141] page dumped because: page_pool leak [ 704.671299][T25141] page_owner tracks the page as allocated [ 704.684078][T25141] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14300, tgid 14276 (syz.0.2227), ts 340484425583, free_ts 328869573948 [ 704.701361][T25141] post_alloc_hook+0x1f9/0x250 [ 704.706191][T25141] get_page_from_freelist+0x21fa/0x2270 [ 704.711832][T25141] __alloc_frozen_pages_noprof+0x18d/0x380 [ 704.717692][T25141] __alloc_pages_noprof+0x10/0x100 [ 704.722857][T25141] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 704.728363][T25141] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 704.734484][T25141] page_pool_alloc_frag_netmem+0x563/0x9b0 [ 704.740347][T25141] skb_pp_cow_data+0xcf6/0x19a0 [ 704.745248][T25141] do_xdp_generic+0x770/0x12d0 [ 704.750059][T25141] __netif_receive_skb_core+0x10e0/0x30b0 [ 704.755829][T25141] process_backlog+0x706/0x1860 [ 704.760722][T25141] __napi_poll+0xaa/0x330 [ 704.765063][T25141] net_rx_action+0x61d/0xf50 [ 704.769663][T25141] handle_softirqs+0x225/0x840 [ 704.774436][T25141] do_softirq+0x76/0xd0 [ 704.778598][T25141] __local_bh_enable_ip+0xf8/0x130 [ 704.783717][T25141] page last free pid 15 tgid 15 stack trace: [ 704.794992][T25141] __free_frozen_pages+0xc1e/0xd10 [ 704.800596][T25141] rcu_core+0x78b/0x10a0 [ 704.805104][T25141] handle_softirqs+0x225/0x840 [ 704.810236][T25141] run_ksoftirqd+0x36/0x60 [ 704.814982][T25141] smpboot_thread_fn+0x57c/0xa80 [ 704.820330][T25141] kthread+0x388/0x470 [ 704.824659][T25141] ret_from_fork+0x514/0xb70 [ 704.829629][T25141] ret_from_fork_asm+0x1a/0x30 [ 704.834643][T25141] Modules linked in: [ 704.838881][T25141] CPU: 0 UID: 0 PID: 25141 Comm: syz.3.4600 Tainted: G B syzkaller #0 PREEMPT(full) [ 704.838918][T25141] Tainted: [B]=BAD_PAGE [ 704.838928][T25141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 704.838942][T25141] Call Trace: [ 704.838951][T25141] [ 704.838961][T25141] dump_stack_lvl+0xe8/0x150 [ 704.838998][T25141] bad_page+0x17f/0x1c0 [ 704.839022][T25141] __free_frozen_pages+0xcc2/0xd10 [ 704.839055][T25141] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 704.839091][T25141] bpf_xdp_adjust_tail+0x1ce/0x210 [ 704.839127][T25141] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 704.839147][T25141] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 704.839185][T25141] do_xdp_generic+0xac2/0x12d0 [ 704.839207][T25141] ? __lock_acquire+0x683/0x2cf0 [ 704.839238][T25141] ? do_xdp_generic+0x6ba/0x12d0 [ 704.839265][T25141] ? __pfx_do_xdp_generic+0x10/0x10 [ 704.839294][T25141] ? tun_get_user+0x23cb/0x4370 [ 704.839331][T25141] ? tun_get_user+0x23cb/0x4370 [ 704.839359][T25141] tun_get_user+0x24f8/0x4370 [ 704.839392][T25141] ? aa_file_perm+0x18b/0x15f0 [ 704.839418][T25141] ? aa_file_perm+0x4ed/0x15f0 [ 704.839439][T25141] ? __pfx_tun_get_user+0x10/0x10 [ 704.839469][T25141] ? __lock_acquire+0x683/0x2cf0 [ 704.839501][T25141] ? preempt_schedule_thunk+0x16/0x40 [ 704.839529][T25141] ? preempt_schedule_common+0x82/0xd0 [ 704.839561][T25141] ? ref_tracker_alloc+0x341/0x4b0 [ 704.839591][T25141] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 704.839619][T25141] ? tun_get+0x1c/0x2f0 [ 704.839647][T25141] ? tun_get+0x1c/0x2f0 [ 704.839677][T25141] ? tun_get+0x1c/0x2f0 [ 704.839705][T25141] ? tun_get+0x1c/0x2f0 [ 704.839736][T25141] tun_chr_write_iter+0x113/0x200 [ 704.839766][T25141] vfs_write+0x612/0xba0 [ 704.839802][T25141] ? __pfx_vfs_write+0x10/0x10 [ 704.839851][T25141] ? __fget_files+0x2a/0x420 [ 704.839887][T25141] ksys_write+0x150/0x270 [ 704.839922][T25141] ? __pfx_ksys_write+0x10/0x10 [ 704.839961][T25141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.839987][T25141] do_syscall_64+0x174/0x580 [ 704.840017][T25141] ? trace_irq_disable+0x3b/0x140 [ 704.840046][T25141] ? clear_bhb_loop+0x40/0x90 [ 704.840072][T25141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.840095][T25141] RIP: 0033:0x7f5b0535e68e [ 704.840115][T25141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 704.840136][T25141] RSP: 002b:00007f5b062aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 704.840160][T25141] RAX: ffffffffffffffda RBX: 00007f5b062af6c0 RCX: 00007f5b0535e68e [ 704.840177][T25141] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 704.840193][T25141] RBP: 00007f5b05433e6f R08: 0000000000000000 R09: 0000000000000000 [ 704.840208][T25141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.840222][T25141] R13: 00007f5b05626038 R14: 00007f5b05625fa0 R15: 00007ffed539b668 [ 704.840249][T25141] [ 704.840379][T25141] BUG: Bad page state in process syz.3.4600 pfn:52760 [ 705.151000][T25141] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888052760000 pfn:0x52760 [ 705.161674][T25141] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 705.169377][T25141] raw: 00fff00000000000 dead000000000040 ffff888022e97000 0000000000000000 [ 705.178428][T25141] raw: ffff888052760000 0000000000000001 00000000ffffffff 0000000000000000 [ 705.187571][T25141] page dumped because: page_pool leak [ 705.193237][T25141] page_owner tracks the page as allocated [ 705.199303][T25141] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14300, tgid 14276 (syz.0.2227), ts 340495195839, free_ts 328869443593 [ 705.217598][T25141] post_alloc_hook+0x1f9/0x250 [ 705.222696][T25141] get_page_from_freelist+0x21fa/0x2270 [ 705.228667][T25141] __alloc_frozen_pages_noprof+0x18d/0x380 [ 705.234795][T25141] __alloc_pages_noprof+0x10/0x100 [ 705.240331][T25141] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 705.246121][T25141] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 705.252673][T25141] skb_pp_cow_data+0x260/0x19a0 [ 705.257924][T25141] do_xdp_generic+0x770/0x12d0 [ 705.262980][T25141] __netif_receive_skb_core+0x10e0/0x30b0 [ 705.269127][T25141] process_backlog+0x706/0x1860 [ 705.274336][T25141] __napi_poll+0xaa/0x330 [ 705.279038][T25141] net_rx_action+0x61d/0xf50 [ 705.283905][T25141] handle_softirqs+0x225/0x840 [ 705.289032][T25141] do_softirq+0x76/0xd0 [ 705.293421][T25141] __local_bh_enable_ip+0xf8/0x130 [ 705.298980][T25141] __dev_queue_xmit+0x1ed7/0x37f0 [ 705.304316][T25141] page last free pid 15 tgid 15 stack trace: [ 705.310789][T25141] __free_frozen_pages+0xc1e/0xd10 [ 705.316195][T25141] rcu_core+0x78b/0x10a0 [ 705.320808][T25141] handle_softirqs+0x225/0x840 [ 705.325883][T25141] run_ksoftirqd+0x36/0x60 [ 705.330617][T25141] smpboot_thread_fn+0x57c/0xa80 [ 705.335951][T25141] kthread+0x388/0x470 [ 705.340379][T25141] ret_from_fork+0x514/0xb70 [ 705.345229][T25141] ret_from_fork_asm+0x1a/0x30 [ 705.350370][T25141] Modules linked in: [ 705.354479][T25141] CPU: 0 UID: 0 PID: 25141 Comm: syz.3.4600 Tainted: G B syzkaller #0 PREEMPT(full) [ 705.354502][T25141] Tainted: [B]=BAD_PAGE [ 705.354508][T25141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 705.354518][T25141] Call Trace: [ 705.354526][T25141] [ 705.354532][T25141] dump_stack_lvl+0xe8/0x150 [ 705.354559][T25141] bad_page+0x17f/0x1c0 [ 705.354575][T25141] __free_frozen_pages+0xcc2/0xd10 [ 705.354617][T25141] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 705.354656][T25141] bpf_xdp_adjust_tail+0x1ce/0x210 [ 705.354694][T25141] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 705.354709][T25141] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 705.354736][T25141] do_xdp_generic+0xac2/0x12d0 [ 705.354752][T25141] ? __lock_acquire+0x683/0x2cf0 [ 705.354774][T25141] ? do_xdp_generic+0x6ba/0x12d0 [ 705.354791][T25141] ? __pfx_do_xdp_generic+0x10/0x10 [ 705.354811][T25141] ? tun_get_user+0x23cb/0x4370 [ 705.354838][T25141] ? tun_get_user+0x23cb/0x4370 [ 705.354858][T25141] tun_get_user+0x24f8/0x4370 [ 705.354889][T25141] ? aa_file_perm+0x18b/0x15f0 [ 705.354908][T25141] ? aa_file_perm+0x4ed/0x15f0 [ 705.354924][T25141] ? __pfx_tun_get_user+0x10/0x10 [ 705.354944][T25141] ? __lock_acquire+0x683/0x2cf0 [ 705.354967][T25141] ? preempt_schedule_thunk+0x16/0x40 [ 705.354986][T25141] ? preempt_schedule_common+0x82/0xd0 [ 705.355008][T25141] ? ref_tracker_alloc+0x341/0x4b0 [ 705.355029][T25141] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 705.355048][T25141] ? tun_get+0x1c/0x2f0 [ 705.355068][T25141] ? tun_get+0x1c/0x2f0 [ 705.355089][T25141] ? tun_get+0x1c/0x2f0 [ 705.355107][T25141] ? tun_get+0x1c/0x2f0 [ 705.355128][T25141] tun_chr_write_iter+0x113/0x200 [ 705.355149][T25141] vfs_write+0x612/0xba0 [ 705.355177][T25141] ? __pfx_vfs_write+0x10/0x10 [ 705.355205][T25141] ? __fget_files+0x2a/0x420 [ 705.355229][T25141] ksys_write+0x150/0x270 [ 705.355254][T25141] ? __pfx_ksys_write+0x10/0x10 [ 705.355281][T25141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.355298][T25141] do_syscall_64+0x174/0x580 [ 705.355319][T25141] ? trace_irq_disable+0x3b/0x140 [ 705.355339][T25141] ? clear_bhb_loop+0x40/0x90 [ 705.355356][T25141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.355375][T25141] RIP: 0033:0x7f5b0535e68e [ 705.355388][T25141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 705.355402][T25141] RSP: 002b:00007f5b062aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 705.355419][T25141] RAX: ffffffffffffffda RBX: 00007f5b062af6c0 RCX: 00007f5b0535e68e [ 705.355431][T25141] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 705.355442][T25141] RBP: 00007f5b05433e6f R08: 0000000000000000 R09: 0000000000000000 [ 705.355452][T25141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.355462][T25141] R13: 00007f5b05626038 R14: 00007f5b05625fa0 R15: 00007ffed539b668 [ 705.355480][T25141] [ 705.355544][T25141] BUG: Bad page state in process syz.3.4600 pfn:4f9e2 [ 705.667513][T25141] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804f9e2948 pfn:0x4f9e2 [ 705.678189][T25141] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 705.685685][T25141] raw: 00fff00000000000 dead000000000040 ffff888022e97000 0000000000000000 [ 705.694871][T25141] raw: ffff88804f9e2948 0000000000000001 00000000ffffffff 0000000000000000 [ 705.703999][T25141] page dumped because: page_pool leak [ 705.709746][T25141] page_owner tracks the page as allocated [ 705.715883][T25141] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14300, tgid 14276 (syz.0.2227), ts 340494802843, free_ts 328869457398 [ 705.734063][T25141] post_alloc_hook+0x1f9/0x250 [ 705.739234][T25141] get_page_from_freelist+0x21fa/0x2270 [ 705.745523][T25141] __alloc_frozen_pages_noprof+0x18d/0x380 [ 705.751755][T25141] __alloc_pages_noprof+0x10/0x100 [ 705.757187][T25141] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 705.763093][T25141] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 705.769577][T25141] skb_pp_cow_data+0xcd0/0x19a0 [ 705.774736][T25141] do_xdp_generic+0x770/0x12d0 [ 705.780554][T25141] __netif_receive_skb_core+0x10e0/0x30b0 [ 705.786609][T25141] process_backlog+0x706/0x1860 [ 705.791834][T25141] __napi_poll+0xaa/0x330 [ 705.796407][T25141] net_rx_action+0x61d/0xf50 [ 705.801360][T25141] handle_softirqs+0x225/0x840 [ 705.806408][T25141] do_softirq+0x76/0xd0 [ 705.810901][T25141] __local_bh_enable_ip+0xf8/0x130 [ 705.816397][T25141] __dev_queue_xmit+0x1ed7/0x37f0 [ 705.821808][T25141] page last free pid 15 tgid 15 stack trace: [ 705.828237][T25141] __free_frozen_pages+0xc1e/0xd10 [ 705.833671][T25141] rcu_core+0x78b/0x10a0 [ 705.838198][T25141] handle_softirqs+0x225/0x840 [ 705.843305][T25141] run_ksoftirqd+0x36/0x60 [ 705.848097][T25141] smpboot_thread_fn+0x57c/0xa80 [ 705.853299][T25141] kthread+0x388/0x470 [ 705.857670][T25141] ret_from_fork+0x514/0xb70 [ 705.862583][T25141] ret_from_fork_asm+0x1a/0x30 [ 705.867717][T25141] Modules linked in: [ 705.871854][T25141] CPU: 0 UID: 0 PID: 25141 Comm: syz.3.4600 Tainted: G B syzkaller #0 PREEMPT(full) [ 705.871880][T25141] Tainted: [B]=BAD_PAGE [ 705.871886][T25141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 705.871896][T25141] Call Trace: [ 705.871903][T25141] [ 705.871916][T25141] dump_stack_lvl+0xe8/0x150 [ 705.871944][T25141] bad_page+0x17f/0x1c0 [ 705.871960][T25141] __free_frozen_pages+0xcc2/0xd10 [ 705.871983][T25141] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 705.872010][T25141] bpf_xdp_adjust_tail+0x1ce/0x210 [ 705.872036][T25141] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 705.872050][T25141] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 705.872078][T25141] do_xdp_generic+0xac2/0x12d0 [ 705.872093][T25141] ? __lock_acquire+0x683/0x2cf0 [ 705.872115][T25141] ? do_xdp_generic+0x6ba/0x12d0 [ 705.872133][T25141] ? __pfx_do_xdp_generic+0x10/0x10 [ 705.872153][T25141] ? tun_get_user+0x23cb/0x4370 [ 705.872180][T25141] ? tun_get_user+0x23cb/0x4370 [ 705.872200][T25141] tun_get_user+0x24f8/0x4370 [ 705.872226][T25141] ? aa_file_perm+0x18b/0x15f0 [ 705.872245][T25141] ? aa_file_perm+0x4ed/0x15f0 [ 705.872261][T25141] ? __pfx_tun_get_user+0x10/0x10 [ 705.872281][T25141] ? __lock_acquire+0x683/0x2cf0 [ 705.872304][T25141] ? preempt_schedule_thunk+0x16/0x40 [ 705.872324][T25141] ? preempt_schedule_common+0x82/0xd0 [ 705.872346][T25141] ? ref_tracker_alloc+0x341/0x4b0 [ 705.872367][T25141] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 705.872386][T25141] ? tun_get+0x1c/0x2f0 [ 705.872406][T25141] ? tun_get+0x1c/0x2f0 [ 705.872427][T25141] ? tun_get+0x1c/0x2f0 [ 705.872445][T25141] ? tun_get+0x1c/0x2f0 [ 705.872466][T25141] tun_chr_write_iter+0x113/0x200 [ 705.872488][T25141] vfs_write+0x612/0xba0 [ 705.872516][T25141] ? __pfx_vfs_write+0x10/0x10 [ 705.872543][T25141] ? __fget_files+0x2a/0x420 [ 705.872567][T25141] ksys_write+0x150/0x270 [ 705.872592][T25141] ? __pfx_ksys_write+0x10/0x10 [ 705.872619][T25141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.872636][T25141] do_syscall_64+0x174/0x580 [ 705.872657][T25141] ? trace_irq_disable+0x3b/0x140 [ 705.872677][T25141] ? clear_bhb_loop+0x40/0x90 [ 705.872695][T25141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.872711][T25141] RIP: 0033:0x7f5b0535e68e [ 705.872725][T25141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 705.872739][T25141] RSP: 002b:00007f5b062aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 705.872756][T25141] RAX: ffffffffffffffda RBX: 00007f5b062af6c0 RCX: 00007f5b0535e68e [ 705.872768][T25141] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 705.872779][T25141] RBP: 00007f5b05433e6f R08: 0000000000000000 R09: 0000000000000000 [ 705.872789][T25141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.872799][T25141] R13: 00007f5b05626038 R14: 00007f5b05625fa0 R15: 00007ffed539b668 [ 705.872817][T25141] [ 705.872877][T25141] BUG: Bad page state in process syz.3.4600 pfn:328cf [ 706.184796][T25141] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880328cfdc0 pfn:0x328cf [ 706.195479][T25141] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 706.203053][T25141] raw: 00fff00000000000 dead000000000040 ffff888022e97000 0000000000000000 [ 706.212158][T25141] raw: ffff8880328cfdc0 0000000000000001 00000000ffffffff 0000000000000000 [ 706.221260][T25141] page dumped because: page_pool leak [ 706.226944][T25141] page_owner tracks the page as allocated [ 706.233073][T25141] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14300, tgid 14276 (syz.0.2227), ts 340494787257, free_ts 328869517324 [ 706.251191][T25141] post_alloc_hook+0x1f9/0x250 [ 706.256226][T25141] get_page_from_freelist+0x21fa/0x2270 [ 706.262191][T25141] __alloc_frozen_pages_noprof+0x18d/0x380 [ 706.268456][T25141] __alloc_pages_noprof+0x10/0x100 [ 706.273871][T25141] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 706.279758][T25141] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 706.286223][T25141] skb_pp_cow_data+0xcd0/0x19a0 [ 706.291490][T25141] do_xdp_generic+0x770/0x12d0 [ 706.296501][T25141] __netif_receive_skb_core+0x10e0/0x30b0 [ 706.302633][T25141] process_backlog+0x706/0x1860 [ 706.307836][T25141] __napi_poll+0xaa/0x330 [ 706.312397][T25141] net_rx_action+0x61d/0xf50 [ 706.317218][T25141] handle_softirqs+0x225/0x840 [ 706.322361][T25141] do_softirq+0x76/0xd0 [ 706.326777][T25141] __local_bh_enable_ip+0xf8/0x130 [ 706.332255][T25141] __dev_queue_xmit+0x1ed7/0x37f0 [ 706.337663][T25141] page last free pid 15 tgid 15 stack trace: [ 706.343981][T25141] __free_frozen_pages+0xc1e/0xd10 [ 706.349497][T25141] rcu_core+0x78b/0x10a0 [ 706.354008][T25141] handle_softirqs+0x225/0x840 [ 706.359123][T25141] run_ksoftirqd+0x36/0x60 [ 706.363775][T25141] smpboot_thread_fn+0x57c/0xa80 [ 706.369095][T25141] kthread+0x388/0x470 [ 706.373403][T25141] ret_from_fork+0x514/0xb70 [ 706.378362][T25141] ret_from_fork_asm+0x1a/0x30 [ 706.383409][T25141] Modules linked in: [ 706.387624][T25141] CPU: 0 UID: 0 PID: 25141 Comm: syz.3.4600 Tainted: G B syzkaller #0 PREEMPT(full) [ 706.387656][T25141] Tainted: [B]=BAD_PAGE [ 706.387663][T25141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 706.387675][T25141] Call Trace: [ 706.387683][T25141] [ 706.387691][T25141] dump_stack_lvl+0xe8/0x150 [ 706.387720][T25141] bad_page+0x17f/0x1c0 [ 706.387739][T25141] __free_frozen_pages+0xcc2/0xd10 [ 706.387764][T25141] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 706.387794][T25141] bpf_xdp_adjust_tail+0x1ce/0x210 [ 706.387823][T25141] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 706.387840][T25141] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 706.387870][T25141] do_xdp_generic+0xac2/0x12d0 [ 706.387895][T25141] ? __lock_acquire+0x683/0x2cf0 [ 706.387920][T25141] ? do_xdp_generic+0x6ba/0x12d0 [ 706.387940][T25141] ? __pfx_do_xdp_generic+0x10/0x10 [ 706.387963][T25141] ? tun_get_user+0x23cb/0x4370 [ 706.387993][T25141] ? tun_get_user+0x23cb/0x4370 [ 706.388015][T25141] tun_get_user+0x24f8/0x4370 [ 706.388044][T25141] ? aa_file_perm+0x18b/0x15f0 [ 706.388065][T25141] ? aa_file_perm+0x4ed/0x15f0 [ 706.388083][T25141] ? __pfx_tun_get_user+0x10/0x10 [ 706.388106][T25141] ? __lock_acquire+0x683/0x2cf0 [ 706.388131][T25141] ? preempt_schedule_thunk+0x16/0x40 [ 706.388153][T25141] ? preempt_schedule_common+0x82/0xd0 [ 706.388177][T25141] ? ref_tracker_alloc+0x341/0x4b0 [ 706.388201][T25141] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 706.388223][T25141] ? tun_get+0x1c/0x2f0 [ 706.388244][T25141] ? tun_get+0x1c/0x2f0 [ 706.388268][T25141] ? tun_get+0x1c/0x2f0 [ 706.388289][T25141] ? tun_get+0x1c/0x2f0 [ 706.388312][T25141] tun_chr_write_iter+0x113/0x200 [ 706.388336][T25141] vfs_write+0x612/0xba0 [ 706.388366][T25141] ? __pfx_vfs_write+0x10/0x10 [ 706.388399][T25141] ? __fget_files+0x2a/0x420 [ 706.388426][T25141] ksys_write+0x150/0x270 [ 706.388453][T25141] ? __pfx_ksys_write+0x10/0x10 [ 706.388484][T25141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.388502][T25141] do_syscall_64+0x174/0x580 [ 706.388526][T25141] ? trace_irq_disable+0x3b/0x140 [ 706.388549][T25141] ? clear_bhb_loop+0x40/0x90 [ 706.388569][T25141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.388587][T25141] RIP: 0033:0x7f5b0535e68e [ 706.388603][T25141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 706.388620][T25141] RSP: 002b:00007f5b062aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 706.388639][T25141] RAX: ffffffffffffffda RBX: 00007f5b062af6c0 RCX: 00007f5b0535e68e [ 706.388653][T25141] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 706.388666][T25141] RBP: 00007f5b05433e6f R08: 0000000000000000 R09: 0000000000000000 [ 706.388677][T25141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.388689][T25141] R13: 00007f5b05626038 R14: 00007f5b05625fa0 R15: 00007ffed539b668 [ 706.388710][T25141] [ 706.388809][T25141] BUG: Bad page state in process syz.3.4600 pfn:7c285 [ 706.698407][T25141] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807c285000 pfn:0x7c285 [ 706.709195][T25141] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 706.716840][T25141] raw: 00fff00000000000 dead000000000040 ffff888022e97000 0000000000000000 [ 706.726071][T25141] raw: ffff88807c285000 0000000000000001 00000000ffffffff 0000000000000000 [ 706.735181][T25141] page dumped because: page_pool leak [ 706.740990][T25141] page_owner tracks the page as allocated [ 706.747054][T25141] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14300, tgid 14276 (syz.0.2227), ts 340494771423, free_ts 340490575934 [ 706.765194][T25141] post_alloc_hook+0x1f9/0x250 [ 706.770340][T25141] get_page_from_freelist+0x21fa/0x2270 [ 706.776239][T25141] __alloc_frozen_pages_noprof+0x18d/0x380 [ 706.782595][T25141] __alloc_pages_noprof+0x10/0x100 [ 706.788065][T25141] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 706.793832][T25141] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 706.800326][T25141] skb_pp_cow_data+0xcd0/0x19a0 [ 706.805468][T25141] do_xdp_generic+0x770/0x12d0 [ 706.810610][T25141] __netif_receive_skb_core+0x10e0/0x30b0 [ 706.816640][T25141] process_backlog+0x706/0x1860 [ 706.821890][T25141] __napi_poll+0xaa/0x330 [ 706.826446][T25141] net_rx_action+0x61d/0xf50 [ 706.831396][T25141] handle_softirqs+0x225/0x840 [ 706.836480][T25141] do_softirq+0x76/0xd0 [ 706.840994][T25141] __local_bh_enable_ip+0xf8/0x130 [ 706.846428][T25141] __dev_queue_xmit+0x1ed7/0x37f0 [ 706.851836][T25141] page last free pid 5993 tgid 5993 stack trace: [ 706.858664][T25141] __free_frozen_pages+0xc1e/0xd10 [ 706.864169][T25141] tlb_remove_table_rcu+0x85/0x100 [ 706.869707][T25141] rcu_core+0x78b/0x10a0 [ 706.874344][T25141] handle_softirqs+0x225/0x840 [ 706.879655][T25141] do_softirq+0x76/0xd0 [ 706.884058][T25141] __local_bh_enable_ip+0xf8/0x130 [ 706.889698][T25141] addrconf_dad_work+0x2d1/0x15c0 [ 706.895003][T25141] process_scheduled_works+0xa8e/0x14e0 [ 706.901023][T25141] worker_thread+0xa47/0xfb0 [ 706.905871][T25141] kthread+0x388/0x470 [ 706.910299][T25141] ret_from_fork+0x514/0xb70 [ 706.915181][T25141] ret_from_fork_asm+0x1a/0x30 [ 706.920318][T25141] Modules linked in: [ 706.924428][T25141] CPU: 0 UID: 0 PID: 25141 Comm: syz.3.4600 Tainted: G B syzkaller #0 PREEMPT(full) [ 706.924456][T25141] Tainted: [B]=BAD_PAGE [ 706.924461][T25141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 706.924472][T25141] Call Trace: [ 706.924479][T25141] [ 706.924487][T25141] dump_stack_lvl+0xe8/0x150 [ 706.924514][T25141] bad_page+0x17f/0x1c0 [ 706.924530][T25141] __free_frozen_pages+0xcc2/0xd10 [ 706.924553][T25141] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 706.924579][T25141] bpf_xdp_adjust_tail+0x1ce/0x210 [ 706.924605][T25141] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 706.924620][T25141] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 706.924647][T25141] do_xdp_generic+0xac2/0x12d0 [ 706.924663][T25141] ? __lock_acquire+0x683/0x2cf0 [ 706.924685][T25141] ? do_xdp_generic+0x6ba/0x12d0 [ 706.924703][T25141] ? __pfx_do_xdp_generic+0x10/0x10 [ 706.924724][T25141] ? tun_get_user+0x23cb/0x4370 [ 706.924750][T25141] ? tun_get_user+0x23cb/0x4370 [ 706.924770][T25141] tun_get_user+0x24f8/0x4370 [ 706.924796][T25141] ? aa_file_perm+0x18b/0x15f0 [ 706.924815][T25141] ? aa_file_perm+0x4ed/0x15f0 [ 706.924831][T25141] ? __pfx_tun_get_user+0x10/0x10 [ 706.924852][T25141] ? __lock_acquire+0x683/0x2cf0 [ 706.924881][T25141] ? preempt_schedule_thunk+0x16/0x40 [ 706.924900][T25141] ? preempt_schedule_common+0x82/0xd0 [ 706.924923][T25141] ? ref_tracker_alloc+0x341/0x4b0 [ 706.924943][T25141] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 706.924962][T25141] ? tun_get+0x1c/0x2f0 [ 706.924982][T25141] ? tun_get+0x1c/0x2f0 [ 706.925003][T25141] ? tun_get+0x1c/0x2f0 [ 706.925021][T25141] ? tun_get+0x1c/0x2f0 [ 706.925042][T25141] tun_chr_write_iter+0x113/0x200 [ 706.925063][T25141] vfs_write+0x612/0xba0 [ 706.925091][T25141] ? __pfx_vfs_write+0x10/0x10 [ 706.925118][T25141] ? __fget_files+0x2a/0x420 [ 706.925142][T25141] ksys_write+0x150/0x270 [ 706.925167][T25141] ? __pfx_ksys_write+0x10/0x10 [ 706.925194][T25141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.925211][T25141] do_syscall_64+0x174/0x580 [ 706.925232][T25141] ? trace_irq_disable+0x3b/0x140 [ 706.925252][T25141] ? clear_bhb_loop+0x40/0x90 [ 706.925270][T25141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.925286][T25141] RIP: 0033:0x7f5b0535e68e [ 706.925301][T25141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 706.925315][T25141] RSP: 002b:00007f5b062aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 706.925331][T25141] RAX: ffffffffffffffda RBX: 00007f5b062af6c0 RCX: 00007f5b0535e68e [ 706.925343][T25141] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 706.925354][T25141] RBP: 00007f5b05433e6f R08: 0000000000000000 R09: 0000000000000000 [ 706.925365][T25141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.925375][T25141] R13: 00007f5b05626038 R14: 00007f5b05625fa0 R15: 00007ffed539b668 [ 706.925394][T25141] [ 706.925462][T25141] BUG: Bad page state in process syz.3.4600 pfn:2be14 [ 707.236483][T25141] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802be14dc0 pfn:0x2be14 [ 707.247200][T25141] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 707.254804][T25141] raw: 00fff00000000000 dead000000000040 ffff888022e97000 0000000000000000 [ 707.264071][T25141] raw: ffff88802be14dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 707.273191][T25141] page dumped because: page_pool leak [ 707.278990][T25141] page_owner tracks the page as allocated [ 707.285020][T25141] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14300, tgid 14276 (syz.0.2227), ts 340494755923, free_ts 340490609734 [ 707.303403][T25141] post_alloc_hook+0x1f9/0x250 [ 707.308605][T25141] get_page_from_freelist+0x21fa/0x2270 [ 707.314497][T25141] __alloc_frozen_pages_noprof+0x18d/0x380 [ 707.320737][T25141] __alloc_pages_noprof+0x10/0x100 [ 707.326131][T25141] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 707.332016][T25141] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 707.338529][T25141] skb_pp_cow_data+0xcd0/0x19a0 [ 707.343725][T25141] do_xdp_generic+0x770/0x12d0 [ 707.348873][T25141] __netif_receive_skb_core+0x10e0/0x30b0 [ 707.354935][T25141] process_backlog+0x706/0x1860 [ 707.360192][T25141] __napi_poll+0xaa/0x330 [ 707.364800][T25141] net_rx_action+0x61d/0xf50 [ 707.369781][T25141] handle_softirqs+0x225/0x840 [ 707.374842][T25141] do_softirq+0x76/0xd0 [ 707.379329][T25141] __local_bh_enable_ip+0xf8/0x130 [ 707.384725][T25141] __dev_queue_xmit+0x1ed7/0x37f0 [ 707.390075][T25141] page last free pid 5993 tgid 5993 stack trace: [ 707.396882][T25141] __free_frozen_pages+0xc1e/0xd10 [ 707.402425][T25141] tlb_remove_table_rcu+0x85/0x100 [ 707.407933][T25141] rcu_core+0x78b/0x10a0 [ 707.412414][T25141] handle_softirqs+0x225/0x840 [ 707.417556][T25141] do_softirq+0x76/0xd0 [ 707.422000][T25141] __local_bh_enable_ip+0xf8/0x130 [ 707.427487][T25141] addrconf_dad_work+0x2d1/0x15c0 [ 707.432799][T25141] process_scheduled_works+0xa8e/0x14e0 [ 707.438733][T25141] worker_thread+0xa47/0xfb0 [ 707.443592][T25141] kthread+0x388/0x470 [ 707.448005][T25141] ret_from_fork+0x514/0xb70 [ 707.452895][T25141] ret_from_fork_asm+0x1a/0x30 [ 707.458000][T25141] Modules linked in: [ 707.462138][T25141] CPU: 0 UID: 0 PID: 25141 Comm: syz.3.4600 Tainted: G B syzkaller #0 PREEMPT(full) [ 707.462164][T25141] Tainted: [B]=BAD_PAGE [ 707.462170][T25141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 707.462180][T25141] Call Trace: [ 707.462187][T25141] [ 707.462194][T25141] dump_stack_lvl+0xe8/0x150 [ 707.462220][T25141] bad_page+0x17f/0x1c0 [ 707.462241][T25141] __free_frozen_pages+0xcc2/0xd10 [ 707.462264][T25141] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 707.462290][T25141] bpf_xdp_adjust_tail+0x1ce/0x210 [ 707.462315][T25141] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 707.462330][T25141] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 707.462357][T25141] do_xdp_generic+0xac2/0x12d0 [ 707.462372][T25141] ? __lock_acquire+0x683/0x2cf0 [ 707.462394][T25141] ? do_xdp_generic+0x6ba/0x12d0 [ 707.462412][T25141] ? __pfx_do_xdp_generic+0x10/0x10 [ 707.462432][T25141] ? tun_get_user+0x23cb/0x4370 [ 707.462459][T25141] ? tun_get_user+0x23cb/0x4370 [ 707.462478][T25141] tun_get_user+0x24f8/0x4370 [ 707.462504][T25141] ? aa_file_perm+0x18b/0x15f0 [ 707.462523][T25141] ? aa_file_perm+0x4ed/0x15f0 [ 707.462539][T25141] ? __pfx_tun_get_user+0x10/0x10 [ 707.462559][T25141] ? __lock_acquire+0x683/0x2cf0 [ 707.462582][T25141] ? preempt_schedule_thunk+0x16/0x40 [ 707.462601][T25141] ? preempt_schedule_common+0x82/0xd0 [ 707.462623][T25141] ? ref_tracker_alloc+0x341/0x4b0 [ 707.462643][T25141] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 707.462662][T25141] ? tun_get+0x1c/0x2f0 [ 707.462681][T25141] ? tun_get+0x1c/0x2f0 [ 707.462702][T25141] ? tun_get+0x1c/0x2f0 [ 707.462720][T25141] ? tun_get+0x1c/0x2f0 [ 707.462741][T25141] tun_chr_write_iter+0x113/0x200 [ 707.462762][T25141] vfs_write+0x612/0xba0 [ 707.462789][T25141] ? __pfx_vfs_write+0x10/0x10 [ 707.462832][T25141] ? __fget_files+0x2a/0x420 [ 707.462856][T25141] ksys_write+0x150/0x270 [ 707.462880][T25141] ? __pfx_ksys_write+0x10/0x10 [ 707.462907][T25141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.462924][T25141] do_syscall_64+0x174/0x580 [ 707.462945][T25141] ? trace_irq_disable+0x3b/0x140 [ 707.462965][T25141] ? clear_bhb_loop+0x40/0x90 [ 707.462983][T25141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.462999][T25141] RIP: 0033:0x7f5b0535e68e [ 707.463014][T25141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 707.463028][T25141] RSP: 002b:00007f5b062aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 707.463044][T25141] RAX: ffffffffffffffda RBX: 00007f5b062af6c0 RCX: 00007f5b0535e68e [ 707.463057][T25141] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 707.463068][T25141] RBP: 00007f5b05433e6f R08: 0000000000000000 R09: 0000000000000000 [ 707.463078][T25141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.463087][T25141] R13: 00007f5b05626038 R14: 00007f5b05625fa0 R15: 00007ffed539b668 [ 707.463106][T25141] [ 707.463173][T25141] BUG: Bad page state in process syz.3.4600 pfn:5576c [ 707.773405][T25141] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x5576c [ 707.784076][T25141] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 707.791660][T25141] raw: 00fff00000000000 dead000000000040 ffff888022e97000 0000000000000000 [ 707.800793][T25141] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 707.809906][T25141] page dumped because: page_pool leak [ 707.815578][T25141] page_owner tracks the page as allocated [ 707.821710][T25141] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14300, tgid 14276 (syz.0.2227), ts 340494740703, free_ts 340490632902 [ 707.839889][T25141] post_alloc_hook+0x1f9/0x250 [ 707.845009][T25141] get_page_from_freelist+0x21fa/0x2270 [ 707.850992][T25141] __alloc_frozen_pages_noprof+0x18d/0x380 [ 707.857129][T25141] __alloc_pages_noprof+0x10/0x100 [ 707.862638][T25141] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 707.868425][T25141] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 707.874819][T25141] skb_pp_cow_data+0xcd0/0x19a0 [ 707.880041][T25141] do_xdp_generic+0x770/0x12d0 [ 707.885086][T25141] __netif_receive_skb_core+0x10e0/0x30b0 [ 707.891233][T25141] process_backlog+0x706/0x1860 [ 707.896613][T25141] __napi_poll+0xaa/0x330 [ 707.901304][T25141] net_rx_action+0x61d/0xf50 [ 707.906155][T25141] handle_softirqs+0x225/0x840 [ 707.911296][T25141] do_softirq+0x76/0xd0 [ 707.915690][T25141] __local_bh_enable_ip+0xf8/0x130 [ 707.921192][T25141] __dev_queue_xmit+0x1ed7/0x37f0 [ 707.926475][T25141] page last free pid 5993 tgid 5993 stack trace: [ 707.933287][T25141] __free_frozen_pages+0xc1e/0xd10 [ 707.938752][T25141] tlb_remove_table_rcu+0x85/0x100 [ 707.944139][T25141] rcu_core+0x78b/0x10a0 [ 707.948750][T25141] handle_softirqs+0x225/0x840 [ 707.953796][T25141] do_softirq+0x76/0xd0 [ 707.958249][T25141] __local_bh_enable_ip+0xf8/0x130 [ 707.963761][T25141] addrconf_dad_work+0x2d1/0x15c0 [ 707.969196][T25141] process_scheduled_works+0xa8e/0x14e0 [ 707.975027][T25141] worker_thread+0xa47/0xfb0 [ 707.980022][T25141] kthread+0x388/0x470 [ 707.984359][T25141] ret_from_fork+0x514/0xb70 [ 707.989317][T25141] ret_from_fork_asm+0x1a/0x30 [ 707.994360][T25141] Modules linked in: [ 707.998601][T25141] CPU: 0 UID: 0 PID: 25141 Comm: syz.3.4600 Tainted: G B syzkaller #0 PREEMPT(full) [ 707.998635][T25141] Tainted: [B]=BAD_PAGE [ 707.998643][T25141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 707.998667][T25141] Call Trace: [ 707.998678][T25141] [ 707.998687][T25141] dump_stack_lvl+0xe8/0x150 [ 707.998725][T25141] bad_page+0x17f/0x1c0 [ 707.998758][T25141] __free_frozen_pages+0xcc2/0xd10 [ 707.998792][T25141] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 707.998830][T25141] bpf_xdp_adjust_tail+0x1ce/0x210 [ 707.998868][T25141] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 707.998890][T25141] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 707.998928][T25141] do_xdp_generic+0xac2/0x12d0 [ 707.998952][T25141] ? __lock_acquire+0x683/0x2cf0 [ 707.998983][T25141] ? do_xdp_generic+0x6ba/0x12d0 [ 707.999010][T25141] ? __pfx_do_xdp_generic+0x10/0x10 [ 707.999039][T25141] ? tun_get_user+0x23cb/0x4370 [ 707.999078][T25141] ? tun_get_user+0x23cb/0x4370 [ 707.999107][T25141] tun_get_user+0x24f8/0x4370 [ 707.999145][T25141] ? aa_file_perm+0x18b/0x15f0 [ 707.999169][T25141] ? aa_file_perm+0x4ed/0x15f0 [ 707.999193][T25141] ? __pfx_tun_get_user+0x10/0x10 [ 707.999223][T25141] ? __lock_acquire+0x683/0x2cf0 [ 707.999255][T25141] ? preempt_schedule_thunk+0x16/0x40 [ 707.999283][T25141] ? preempt_schedule_common+0x82/0xd0 [ 707.999313][T25141] ? ref_tracker_alloc+0x341/0x4b0 [ 707.999342][T25141] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 707.999371][T25141] ? tun_get+0x1c/0x2f0 [ 707.999399][T25141] ? tun_get+0x1c/0x2f0 [ 707.999428][T25141] ? tun_get+0x1c/0x2f0 [ 707.999455][T25141] ? tun_get+0x1c/0x2f0 [ 707.999485][T25141] tun_chr_write_iter+0x113/0x200 [ 707.999517][T25141] vfs_write+0x612/0xba0 [ 707.999556][T25141] ? __pfx_vfs_write+0x10/0x10 [ 707.999596][T25141] ? __fget_files+0x2a/0x420 [ 707.999631][T25141] ksys_write+0x150/0x270 [ 707.999676][T25141] ? __pfx_ksys_write+0x10/0x10 [ 707.999716][T25141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.999741][T25141] do_syscall_64+0x174/0x580 [ 707.999772][T25141] ? trace_irq_disable+0x3b/0x140 [ 707.999801][T25141] ? clear_bhb_loop+0x40/0x90 [ 707.999828][T25141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.999852][T25141] RIP: 0033:0x7f5b0535e68e [ 707.999872][T25141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 707.999894][T25141] RSP: 002b:00007f5b062aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 707.999919][T25141] RAX: ffffffffffffffda RBX: 00007f5b062af6c0 RCX: 00007f5b0535e68e [ 707.999936][T25141] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 707.999952][T25141] RBP: 00007f5b05433e6f R08: 0000000000000000 R09: 0000000000000000 [ 707.999967][T25141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.999981][T25141] R13: 00007f5b05626038 R14: 00007f5b05625fa0 R15: 00007ffed539b668 [ 708.000008][T25141] [ 708.000128][T25141] BUG: Bad page state in process syz.3.4600 pfn:7c275 [ 708.306877][T25141] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7c275 [ 708.317206][T25141] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 708.324328][T25141] raw: 00fff00000000000 dead000000000040 ffff888022e97000 0000000000000000 [ 708.332913][T25141] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 708.341492][T25141] page dumped because: page_pool leak [ 708.346860][T25141] page_owner tracks the page as allocated [ 708.357455][T25141] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 14300, tgid 14276 (syz.0.2227), ts 340494722880, free_ts 340490649018 [ 708.374676][T25141] post_alloc_hook+0x1f9/0x250 [ 708.379453][T25141] get_page_from_freelist+0x21fa/0x2270 [ 708.385010][T25141] __alloc_frozen_pages_noprof+0x18d/0x380 [ 708.390930][T25141] __alloc_pages_noprof+0x10/0x100 [ 708.396088][T25141] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 708.401584][T25141] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 708.407672][T25141] skb_pp_cow_data+0xcd0/0x19a0 [ 708.412552][T25141] do_xdp_generic+0x770/0x12d0 [ 708.417344][T25141] __netif_receive_skb_core+0x10e0/0x30b0 [ 708.423138][T25141] process_backlog+0x706/0x1860 [ 708.428040][T25141] __napi_poll+0xaa/0x330 [ 708.432411][T25141] net_rx_action+0x61d/0xf50 [ 708.437029][T25141] handle_softirqs+0x225/0x840 [ 708.441816][T25141] do_softirq+0x76/0xd0 [ 708.445987][T25141] __local_bh_enable_ip+0xf8/0x130 [ 708.451116][T25141] __dev_queue_xmit+0x1ed7/0x37f0 [ 708.456158][T25141] page last free pid 5993 tgid 5993 stack trace: [ 708.467736][T25141] __free_frozen_pages+0xc1e/0xd10 [ 708.473148][T25141] tlb_remove_table_rcu+0x85/0x100 [ 708.478819][T25141] rcu_core+0x78b/0x10a0 [ 708.483341][T25141] handle_softirqs+0x225/0x840 [ 708.488454][T25141] do_softirq+0x76/0xd0 [ 708.492838][T25141] __local_bh_enable_ip+0xf8/0x130 [ 708.498356][T25141] addrconf_dad_work+0x2d1/0x15c0 [ 708.503664][T25141] process_scheduled_works+0xa8e/0x14e0 [ 708.509651][T25141] worker_thread+0xa47/0xfb0 [ 708.514502][T25141] kthread+0x388/0x470 [ 708.519030][T25141] ret_from_fork+0x514/0xb70 [ 708.523912][T25141] ret_from_fork_asm+0x1a/0x30 [ 708.529052][T25141] Modules linked in: [ 708.533185][T25141] CPU: 0 UID: 0 PID: 25141 Comm: syz.3.4600 Tainted: G B syzkaller #0 PREEMPT(full) [ 708.533210][T25141] Tainted: [B]=BAD_PAGE [ 708.533217][T25141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 708.533227][T25141] Call Trace: [ 708.533233][T25141] [ 708.533240][T25141] dump_stack_lvl+0xe8/0x150 [ 708.533268][T25141] bad_page+0x17f/0x1c0 [ 708.533284][T25141] __free_frozen_pages+0xcc2/0xd10 [ 708.533307][T25141] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 708.533334][T25141] bpf_xdp_adjust_tail+0x1ce/0x210 [ 708.533360][T25141] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 708.533375][T25141] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 708.533403][T25141] do_xdp_generic+0xac2/0x12d0 [ 708.533418][T25141] ? __lock_acquire+0x683/0x2cf0 [ 708.533440][T25141] ? do_xdp_generic+0x6ba/0x12d0 [ 708.533458][T25141] ? __pfx_do_xdp_generic+0x10/0x10 [ 708.533478][T25141] ? tun_get_user+0x23cb/0x4370 [ 708.533504][T25141] ? tun_get_user+0x23cb/0x4370 [ 708.533524][T25141] tun_get_user+0x24f8/0x4370 [ 708.533551][T25141] ? aa_file_perm+0x18b/0x15f0 [ 708.533570][T25141] ? aa_file_perm+0x4ed/0x15f0 [ 708.533586][T25141] ? __pfx_tun_get_user+0x10/0x10 [ 708.533607][T25141] ? __lock_acquire+0x683/0x2cf0 [ 708.533629][T25141] ? preempt_schedule_thunk+0x16/0x40 [ 708.533648][T25141] ? preempt_schedule_common+0x82/0xd0 [ 708.533670][T25141] ? ref_tracker_alloc+0x341/0x4b0 [ 708.533691][T25141] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 708.533710][T25141] ? tun_get+0x1c/0x2f0 [ 708.533734][T25141] ? tun_get+0x1c/0x2f0 [ 708.533756][T25141] ? tun_get+0x1c/0x2f0 [ 708.533774][T25141] ? tun_get+0x1c/0x2f0 [ 708.533795][T25141] tun_chr_write_iter+0x113/0x200 [ 708.533817][T25141] vfs_write+0x612/0xba0 [ 708.533845][T25141] ? __pfx_vfs_write+0x10/0x10 [ 708.533872][T25141] ? __fget_files+0x2a/0x420 [ 708.533896][T25141] ksys_write+0x150/0x270 [ 708.533921][T25141] ? __pfx_ksys_write+0x10/0x10 [ 708.533948][T25141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.533966][T25141] do_syscall_64+0x174/0x580 [ 708.533987][T25141] ? trace_irq_disable+0x3b/0x140 [ 708.534007][T25141] ? clear_bhb_loop+0x40/0x90 [ 708.534025][T25141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.534042][T25141] RIP: 0033:0x7f5b0535e68e [ 708.534056][T25141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 708.534070][T25141] RSP: 002b:00007f5b062aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 708.534087][T25141] RAX: ffffffffffffffda RBX: 00007f5b062af6c0 RCX: 00007f5b0535e68e [ 708.534099][T25141] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 708.534110][T25141] RBP: 00007f5b05433e6f R08: 0000000000000000 R09: 0000000000000000 [ 708.534120][T25141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.534129][T25141] R13: 00007f5b05626038 R14: 00007f5b05625fa0 R15: 00007ffed539b668 [ 708.534148][T25141] [ 708.536355][ T5627] Bluetooth: hci2: command 0x0405 tx timeout