last executing test programs: 2.546893129s ago: executing program 1 (id=795): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 2.546600704s ago: executing program 4 (id=796): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="08000500010000001400040074"], 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 2.42762624s ago: executing program 4 (id=798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r5, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x81, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[@timestamping={{0x14, 0x1, 0x25, 0x80000000}}], 0x18}}], 0x1, 0x20004801) (async) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="10000000190800022bbd7000fcdbdf25a83915e9ba369ce8bfc54c3c9abbc93a09d94d0a9e71811104be8e1615a3d823139522f3698ad01b7cab12e600954bcf83c8ad2737fb7f51ebd96beb7b7d619392c3086eb48f91b112326078fdd0a72f4f08f066585988252b7ff86a513ca21cf762fe0f8a333c168d6163f0306232961ade2f981a4a1daa9c1952828f16000075575657ba89469268ed87a571fb4423a73ba59b8027bd0013fa66437bb97eb963283c47ffcaf531639d072b867080d25ed7"], 0x10}], 0x1, 0x0, 0x3c, 0x1}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.204273841s ago: executing program 0 (id=799): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0xa3, 0x6, 0xd, 0x6, 0x0, [{0xfff, 0x10001, 0x6, '\x00', 0xfe05c50c6eb62e98}, {0x6, 0x0, 0x100000001, '\x00', 0x1000}, {0x7, 0x4, 0xfffffffffffffff9, '\x00', 0x2}, {0xe, 0x3, 0x1, '\x00', 0x2000}, {0x200, 0x6, 0x6, '\x00', 0x810}, {0x0, 0x80, 0x979f, '\x00', 0xa00}]}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 2.200903195s ago: executing program 1 (id=800): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="2d9e57f07b68d1"}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000f403000000020000000000000c02000000000000000000000d00"], 0x0, 0x34}, 0x28) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 2.166916684s ago: executing program 4 (id=802): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x41071, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x41071, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) (async) 2.113322336s ago: executing program 0 (id=803): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x3e, @dev={0xfe, 0x80, '\x00', 0x21}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}}, {{&(0x7f00000006c0)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xa4}, 0x1c, 0x0, 0x0, &(0x7f0000000d40)=ANY=[], 0x28}}], 0x2, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x3e, @dev={0xfe, 0x80, '\x00', 0x21}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}}, {{&(0x7f00000006c0)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xa4}, 0x1c, 0x0, 0x0, &(0x7f0000000d40)=ANY=[], 0x28}}], 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000000), 0x4) (async) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x8, &(0x7f0000004bc0)=0x6, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1013b52513a5cb7", 0x19}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r9, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x48000) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x48000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x6, 0x7fe2, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r10, 0x0, 0x0}, 0x20) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 2.112702156s ago: executing program 1 (id=804): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async, rerun: 32) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="59df5badd92f94a37e0422b72c8fb5f749cadc3967869b6ea73c4dbe24e869e99af8438188035738b7bb11b12544c3be0263b956b1c244ba0439ec497c2717"], 0x1c}}, 0x4000815) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffd93, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES16=r2, @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004}, 0x810) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES16, @ANYRESHEX=r3], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) 1.992240555s ago: executing program 4 (id=805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x17, 0x0, 0x9, 0x3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x8b, &(0x7f0000000100)=""/139}, 0x90) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 1.951233937s ago: executing program 4 (id=806): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000540)="ff0f000000000000b47380c988cafb", 0xf}, {&(0x7f0000000580)="448b7cff0300000000008a15df09005a73f0461fddcdc631", 0x18}, {&(0x7f00000001c0)="b5d3162e", 0x4}], 0x3) r8 = socket(0x1, 0x803, 0x0) socket$inet(0x2, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8000000000000000000000080001"], 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) 1.922348218s ago: executing program 3 (id=807): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, r1, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x6, 0x2, @TCA_ETF_PARMS={0x8, 0x1, {0x0, 0x0, 0x2}}}}]}, 0x40}}, 0x0) 1.840139787s ago: executing program 1 (id=809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x1040, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298556e91590238f40dd2c7148d365ab6cdd5f2a7f74bac8d59f731c655a46917f18b28ed05e58b70287d26677601258a5c0ab9f679e2e520228c3a1f1aede04c6ba82cc38cc2ab6b35a24fb20e032dedf6f6caf4bfea5435f746f746fd46ca192e3744eb6908b358c10833bf484237ba654641e6186a45957c6345e61ea620fdc74383ce1df4a24e7044bae596f018736424a5bfa438865044e7026fa37a3540fadd0e89d87aecd3bc127e0cb10274991d6127224a0f2a4ef19e2c4dedbe45f2471abcc38c584ead0e3df3f9211022b2421fb6b327361e8f58f2b73134fc5444b350ede95ecef5bbbf9950e75c9f772a3ff0180d2cfac287228709726a6abbab2971982de7f1a9149d71dcbfd212e89ff17cf284b7f8ad82a469cb1c1e3d9d1d3689271c8dad0ba89dda651d4242062ac0bc5877e397236fa9476ac5fac7c2c896babca09d74720004cd0e634327de4fd87ed72ae069c095d2c70caed52e3335478c1c3719925e24f2fd7755baebd5cde385727a0f0440dd3b662248c43ff5afc4f186ff0051ba8eaa07623b79c4bb6985f14c5ac15041a6ff7584f921982e5414481d4db4c76798d70a59b5aeccb6e7882aefe70993758b55b4dc4039c2b1c98452113aaf23ccdf68cb6eff6e048f9da6f39a2def3caaf80cdcbadb83b029b8738391f02fec90c8a8b6f036aae8ceaff5dca7d3e0098423fedc676c6774ab0e6a72bd246c0b3004d1988f802b846d62ca59e9a63ce12814176ec4380e1cf29d27e7b2f7e7eadcaae8f182498ad32e67323fe6ef9508fec40dd38897652053ef92e44a909060c237890c196f0c26ab10248f999001f6231813a81313971bea77a5470f312d185dce689adc99e430e4010a3a341482c51fb71c23c3cdf92303c7580c73775f9a74685a61ce9849eaca52b97ee7ffe2e672dc1be5267c285a102711b1b5d81d6dbb76494f2892fd4f85244ade3cdd3809fd5fdfce5157fc1658f0bceb379489732583707c170fc6392aa4f5b94843aeb18da58e0156e029c2b722918b1b3dc7c151cb9c248ddd18423629b53cd4b0ab2693b0df29c88c04657f4eccdc41357de8186fdc0ec86f92950734975921a2fde57c3e7176b57c871d76ff8a8f36520b67e64930cf34bcde9ad92d057a359ca022b646df18e2b7202845bd8ac4be5e5ebae436dc4b93dfaaf2778a53e7e4be937e83dac7d1d481bdbd8081ab0ac08af067e62580bbdbf397cbc629db9b023734b6fad7824d1a8b3257c1c18d6ebc928140060f004ec484b183560f830a1eb0c527c8600bb2600d761e847454e677aa29486aa407a9e9a5e9dc9542de038e3e55fdfec13184cdb16716556f972eef5c56230c43d146c86a9147265c309a279db6d138647920410896c5397c5f83634fa5e92b5161f786482d84830864388b91c2c1e3e9f9f038d5fa66f7fe904e14df0a60d46066c6b1f37cec6e13c35832f512be21da21a5921b81cc452b0076c2ec10fc5481cd0e1ca917b40cb3aa839b120ce6eb9773e942b74ececac6bdcd22eb8dd6cd9f148e0ebe5ef3094f42adc39bc5ca2259e1eab5059ccf5e82bb57b97d4d13a90747299b2e6b64f962aabf222e4f287503181de3c3a68fb2b0068583f3b97e40ce06e9805a7121eccac0527b8f1b18a62762efe0a9ce4114b7d1ba942bc93533ee0b1bd7f0a607207b976dfa1fbe3ce0868e7f4e31b41a0aada0ac6b291aefe22ea5338f07e57b981b8e4e4a121f231d2f46989fd5dd09a7c1d198f5886b4f1a222eccdabff096a81fef3c9e497621128562880938fe05a1f1c4da81daba55bf326f1e3a1712d79f01fbef2ee230615d4e454be67f0ad4dc2bfffaecbb683742925738b45854ab713ae548b9709e9ea2e28224ef466bced79e3ec6c163d45db187bc01c75afa85f78003927dcd122086acc8dd1b1224de41d62b83e34083dd39fe68aa5a479ba403f5dbddf9b763ca521b7efca6234be16484f1e0112d963672a6d24cdac15e80bcb82b3b22231670c41fe7e8a0a083b6df768e7fb0d94a004f8372f5cf8b9b45cc679eb67828a94d0ffabfe09d95ad2789cb8657f7ea86a46260416a72e6fc7b44e549a2e39fe015c7647cc0bec15fa63d26894be1cc5326331e7e0b1c505934182accf049bab033b026d48fda51de740afc0666e6c891e0c5192f4b2df21493477ff45319d7d8b816f0b73ccfa12d6846362feb4b85063ca42e950eb577c630300dc52698a38ca19cbbb398404a1e8e27d0be49985e59caef03da096d1ccbeed73bd7c9588325b747ab77f4d7c1c1f18388ce1771882ee680ed737ad197ff92f1052e5e79f6ffa5b85ba3fac5db13e0d0046c9dca0ab4b74b20299ba6bdd758940e088df31e1382cee6901503299028467a864d27affae30fd9aef5a6ff948c052124511a75a46d5a316e28fb6c5bfac787be5833c63c535557235b0e09f9a78a338aa8864613fca77a7e252d1975af2c4a6bcc969d1e20e3cd4dfc1b2fe34b70fd7804dbfde4fa4d950e5fb4eb926dece9e4601b12efe322bb42ac808158fef0a26900000000726654987e7de20d1e41e82c607c33c6bae7bb234744b51dc683d5857afd6ba8246cebc734e393806ef102a6baaf04f3a7c3cb888d5830e1c6ae170c5c920e806b4f518be4416b216cdf9b1658a412d9e4eab6c9b20ce99960f27e77fdf9a2e98b35c63859f9db6bdcbef1001a19e12e41370f9358531987851ab64c250e68a8569ace4418e2118caff7d3d4caf1c87bc50a8ae75770fdae88a8490c041b39d08190d8b7c908caddd66331a508929d53dd6bc2dbc86f97115ff0a364b70f96918e6ed354c97e59ea5e2c7b149cd51d7c85a27ac658e78b99326857858df0ac0ee240cbb6ee9d9ee6c2c2ff7c29dd25fd337dc08bddeb50305ed48b9f5d89c55ffedde29ce0412ea8e2c976f961eb0c4966d2a8be0b657a5e51048a8a10005c488e1f637ce208a35b5aed0c2067465191dc42ebf6e4853cc89998bdf2ef755f38a3cd985b62df36a5ebc3b47df32423ee46857f9db9d756ff69ecd4ef2f307dcaefd4a1f399543952df972269c28200df8ebacad4eed1c00b9ce9841799bea583cafdeaa8d4a371a8ae55d8ffe4846833985975d8b234adff63eace9d2c4d1680c370827ebe1831ef311077607e8c4920506e03528861085dcfdb918f1efe91420c390fbca0a38377e1635c402ec1c34eddae986ffa8756b27f6c340907bae99f4a6b328fca8177b4dfaceea5ad3ceb901dbcefc15ded322bece4e750969e81935764ebe88749464af7e692e3d324c519b456013daae93bd63215540380a7fe08f0e050cdeb25db2a8b9b6f5720ad1e7d2c5b6d609712eccd321d6211fb642a4cdf72504aabd017a9b4827d1e0e0264435a5e1045dbe33834968d2db503972995559b1efe1b9ce475405118346b63f637b1abf8e8374e7100d6b41c9c672d2b244c7a82ffb882522efd9e903fc69db14c469685780005843856c6623591f305d383eae55a1a1d5619dfff0027413f26fa6a793a348ba8b192e1b088745a2175d55517a75d4b63cce41cc0dcaca9002cd37a1ccc6710ba2a099297b0824f976919e8abf3b1510b1305a95241fefbd036afa9d4538affc82f005d29b9f2c0e60d6c20f673b8ca28cb088e1e89efe334f25ffe1a3fb3581e5aa63b9a4a49f269b5538788aacbbc04d49902ae2af1f59d2484ab6ba7a9b477be0d92e221fc48cdbc00bef7125bfe36f9afb1cbd58fef21625ec99ffd2e35fb00767e3f22dba7d36163203cfaf1860a8b1afe0d878ea00fe08f68fd592a6395fb357acbdc2834c8ac85571527dbf1dbaaccede3d583e2b9bf076737716785f44aebc7ba917fb426d5541adff1e75836ab70fb0b43565ab5e24c5902879f31701cc006b4ee2f57be0916cf0b6cd489c4fa9129031a4af75a00048f20eb962f0c6f68cda0d7756a4e83f7d065c4a00b8263d95f6b979507b7ca01735e83a5e5ff0b76f077ef6e4c1150f9202b5311a231b76111d48a387e09075edb2448fb19d2869ae420ada8ee7577fe980ed7e057dc963c0a98db790bb5b7920220f8a55213b6530637b832abdf3c6fefdefb712a2c2c9eba8087ce39335ddabdadb86f493061e593981c6b2d70b4bac3b58885787c46f85c1022f5ff6cec16ba227aa5dac2e0be30522c08369f18d170b9cb454f3ebf86d1e923fdd65245d8e0c476bfedddcb772453f4d0e70d059e79b8811c379c9eff6e45d99f81186930b32b24cdcb906a41fe29c147ed834b37e77800a33c15e65d121ee85a924ef6bbc1c8f4a423fbc5d14645a08178227f4c7f111fa318823a6c075ddf9e131c9bca8d56dec4a68fbab9a0c1a128880d8b4dec59b89ec33c19eb76f09f31ad730cba735b60deba54c399119949e45af4de5c758281945fe6b6a25ac1cd57a81b48f11a6575e79b82e529d4ba1b2a1175cfa03ef6d149b165195fa64736b302e28ee6444368fb395a2d89c8747348b546a07ed0306682971539f0031d88ffa020d0b3d40369e0a3d2238293a75a155eb5c0749f64ed37a9af5be26d5a4322a55a23c33d176280bd0e4c5168f2e66bca925304d0f32074f5e68d7c43f9e2e3f14a6bcf3e77e6b71737131c3e90208072e37c8a6cad1cabd756aa694e85b86256ce13b43541a26438374b6029ee461d223ed34ed1e9a3e580cec7b2b41bc9823b3729e683f079a498636d022799dd94c5e870b6aa7f3d36fb51ffb6c5e317fcde6b5ae45073f8e90ee0fc1fa0641ff6f0b789dcc6df2fe9a3b5e6ed9d2be3403f5af96e7c6019b0a0ce4f8342323638a52c121956de068069fe5c44946b5023e1db7742fec29cb749bcdc09d795b683c553dbae1298540b2cf1bc3e5e52adf252bca47ba2182c80541daf1d11b1c67675171e69c1abe3c0bc3a0f2d1a6e2165ca1647c394970a404a6002621a258cef01e2ca12a138888dace9ad06d2f0c0209f286c11b289626aa557cc201560651054a6042e84c6fc5e345e2f702d61851fed5ffa36ade652f76db815dabb7b8eee016ea0836d0086f2a2f7bd1c4a4ceb1d706817b41347a891c34b45eb06a9ecb19041d5a39f050cb0413662dc4700385fac2e1823e1ce4d08c66692fde0862a057f2aa2425d511735fff53d0e3d88bfb245e7724ba4ba8452e469862d333dad5c63bfa778809c043132db3a57e122d0495441f7a07034a3ac1024b8fc063694d8316c29639cb6605ff362a853f976c763f6d10e4e0972760e60f08acdd8a73607e7311819fe24ad8b670bbf0adede086f91bd0839ce37927f43a263e3e8369932db9ab786ba66e1bba664bfa8aa50d98ed18fc90e560933c2e8da72757a4539756740a73c41180cf97fde47cf3e9e6005302459d831eea7a03157e0c3178776e4d4add3999b9a1efca7c99b8234ff9d33492431dd9bd0814301ee49260e30b8b6afc46ce8a733bc9d7850c789e5e98cdefbfb11131a85bc24e75453a16c6780ab4229b985d1fe7a255f71cfe18398e881d493ded88300b54f6c4a5567fd84a6e1f11835433448a00420ab1b3a49fcc0e9938da52b68f9409c94a0de61f0beb69532c4f7a11fae6a9ffd10db7de01e3272448b517ad795a06f3fef8148b7196cb81a80aed42e395c1ac346dd27f9bce87661e19f957a17d54d59b68e023c1516ae9ba4d75f18d4b8fc7e9fe6f74e38597b0e520000000000"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xf, 0x6, 0x0, 0x40, @empty, @loopback, 0x7800, 0x8, 0x5, 0x5}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', r5, 0x700, 0x10, 0x9, 0x62c, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x67, 0x0, 0x89, 0x2f, 0x0, @broadcast, @multicast1, {[@generic={0x44, 0x7, "b2cadb34cd"}, @lsrr={0x83, 0x13, 0xc4, [@dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010100, @local, @remote]}, @lsrr={0x83, 0x7, 0xc5, [@multicast1]}, @timestamp={0x44, 0x10, 0x9d, 0x0, 0x3, [0x1, 0xffffff2c, 0x9]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x132c, r3, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x46, 0x3, "2d0df4b2690a00ef40d514ff395e101371e7283c2a34981da1ccf8b5727db3aad8fc1805b37d28abd8538e65da98dfeed668842f36682f683ec200b33b88527d8848"}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x11a4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '[&$%@!$:\'.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa19}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '[&$%@!$:\'.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xca67}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']v\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x215}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_WOL_SOPASS={0xd3, 0x3, "7daf2f2e2be7002c2cd5259f27f9694d67e5002371213f4a191a9a710d2f009185c740cf433a2edf5c466fdd27d23b085b5845274a18b1ee678e3413bc354bd552de6227b4acbd57b027b69b643b66d0af64e7d4fc5324fd4ce7082986a05728dadd9b8c4384e13e231836e45e9ca2d11a33cfc1b1001e98e5cc1b63cc3d73985a0e48919abc5916e4b26766010146d7c41c8447d0b0cd4407d9bf497f7bf1a91c191291732ae1d1f23cdf52a5456b48f8ab62c1af10809439385f014e24b6ab5ecd2cd23580c3518848c84d6eb8f5"}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x132c}, 0x1, 0x0, 0x0, 0x5}, 0x804) 1.838056636s ago: executing program 2 (id=810): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040)=0x283a6ce3, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "0cb29dcb52c3de43fdaa4025a8b0b687f424b012d5987429e07550e33b2cfc57", 0x400, 0x7132, 0x3d, 0x10}, 0x3c) 1.82815928s ago: executing program 0 (id=811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x75, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff2e}, 0x94) 1.743301251s ago: executing program 3 (id=812): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000006000a006b983800080001"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x38}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4008044) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) getsockopt$rose(r0, 0x104, 0x4, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000018feffff720aa9fff8ffffff71a4f0ff0000000072030200000000131d400500000000004704000001ed00006b030000000000001d440000000000007a0a00fe00ffffffc303000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7109000000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e50002a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de5c028d6112a0c2d21b2dc98814106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c53218294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb118888876b617398d00a7526103ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e08b7ab6cd9c65ba55f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddc42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293d364b9effa9a9406ac2683e231d4774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479517dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a79e59e1712c8c546768e5722da19fcdb4c2890cda1f96b952511e3a49d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767987d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c32040098e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1be62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070f66b2b388f0f744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028a3a981463f25c068d4410dad0c74e2a9478fa3be18a1a27bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab07001b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe293308b2a146f12a4c205235924cee765d94b1cc06641247c773ab8d1abbeb03ea68"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) 1.635126274s ago: executing program 2 (id=813): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c010800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380100001a000100feffffff0001000000000000000000000000ffffe0000002fc010000000000000000000000004e2300050000000000bf3d0c4bf7f1db0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.634272255s ago: executing program 0 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106770000000000000005000000000001"], 0x1c}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x24, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x3c}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xc9}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c010}, 0xb01c5b63d713bbe3) 1.573110985s ago: executing program 0 (id=815): r0 = socket(0x29, 0xa, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}, 0x6}], 0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x110, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001540)={0x1, 0x1, 0x4, 0x6, 0x0}, &(0x7f0000001580)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000015c0)={r3, 0x82}, 0x8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000001280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x280, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_DESC={0x12c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x21c}, @NFTA_SET_DESC_CONCAT={0xdc, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf7d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xed}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6b29c0de}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x36}]}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DESC={0xe4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xd8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x15de1b40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc91}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x56}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}], {0x14}}, 0x2a8}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000000)=0xffffffe1, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x8001, 0x3}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000e2ff00000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000000f800000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000001600), &(0x7f0000001640)=0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x32, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff2, 0x6}, {0x0, 0xfff1}, {0xfff1, 0x2}}, [{0x8, 0xb, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) getpeername$netlink(r5, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'pim6reg\x00', 0x500}) 1.553259131s ago: executing program 2 (id=816): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x324, 0x2, 0x5, 0x8, 0x9, @broadcast}, 0x10) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000000), 0x80000) (async) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000000), 0x80000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffee, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="afbbb06e3eb2980f12657b2e922a9f12cdc80773d1e473611fc17109b2cf60947232e56989b17e42d0e8be8174582ea09767a207076da5d4f42b9db4"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x400c010) 1.424302422s ago: executing program 1 (id=817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4000}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd07001000000014"], 0xffe) close(r3) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, 0x20000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x87}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1.421928487s ago: executing program 2 (id=818): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x5, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x49, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="4700000001003f", 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f00000003c0)={0x0, @nl=@unspec, @tipc=@name={0x1e, 0x2, 0x2, {{0x42}, 0x3}}, @nfc={0x27, r6, 0x1, 0x5}, 0x5, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xa, 0x2ccb}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc9, &(0x7f0000000140)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @remote}], 0x20) 1.3016039s ago: executing program 2 (id=819): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x48, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = socket(0x2c, 0x5, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x700, 0x80, 0x8, 0x401, {{0x9, 0x4, 0x1, 0x18, 0x24, 0x67, 0x0, 0x8, 0x2f, 0x0, @loopback, @local, {[@ssrr={0x89, 0xf, 0x75, [@empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x3d}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'tunl0\x00', r2, 0x80, 0x10, 0x2, 0x370, {{0x15, 0x4, 0x0, 0x18, 0x54, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @multicast1, {[@ssrr={0x89, 0x17, 0x80, [@empty, @remote, @private=0xa010102, @multicast1, @remote]}, @lsrr={0x83, 0xb, 0x8f, [@rand_addr=0x64010101, @empty]}, @timestamp_addr={0x44, 0xc, 0xa7, 0x1, 0x2, [{@rand_addr=0x64010101, 0x10001}]}, @rr={0x7, 0xf, 0xa3, [@broadcast, @broadcast, @multicast1]}]}}}}}) 794.495838ms ago: executing program 3 (id=820): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004810) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0xd744c41246f3602c, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0x8, 0x9}, {0x10}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0xd744c41246f3602c, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0x8, 0x9}, {0x10}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c0a94bd3", @ANYRES16=r3, @ANYBLOB="010025bd7000000000008900000008000300", @ANYRES32=r5, @ANYBLOB="18001d801400008006000500c000000005000c0001000000"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027c421907f16842cf51e2a73839b7ac5d22a823038ef61e892b40900000000000000000000000072f88c0aa5bde7f81aaee4006325191535d84bcecb769f0e8afd17d9b78da32939f15d4d2251ce76b2bcf7fcd4132f4f1194513ae13d436dcfce03ced904d524d6e29e7e0d534b391368fc326313fd7bd68543ed9726740a85165b63980586af4a4e466f7a8d883d0afb145f24308ed37ef8971cb3bac63da9b9db120589c7c1d3b89cbb84f3ab79e87a487a82d36ab5ad73eeca7736c2dcfc2f249ae11f3e2e106fb33bf21b82e0c2ced2aec20542c9d2f971cdaa07bf7f640773b50aeeb7a17231442bbdd89f48cc8f49c06a429d4f60e44a98f90b4b7135e741afd4c66d0d5150e3b8d2aa63ebf11bed282a799171ca8f9ff979f44cd8a3c3f769ba3d04bfa8fb2049f0a7018d6bdf70bb55279feac28db3110c00e89b1af098607733dffc2439ce0e5c9b947c7c491c97cecaa774ea8e8cf8a97bcdddcb8abefd2ce517fa9b3015af81ea8c576efa0c62b82cde5d65b8fc7b", @ANYRES8=r1, @ANYRES16=r3, @ANYRES64=r4, @ANYRESOCT=r5, @ANYRES8=r3, @ANYRESHEX=r2], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca6dc15}, 0x4000840) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000000700)=0x4d2, 0x4) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f0000000200)="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") socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="2f24074852d9120a54bcd5c44fae8a16f6012d32451643233af673f16bbaf8f3e7a8de902441b4b0af677d062a59226568f77a7d7443e6588d8539befeeaae6596830e55645944433ab45e65a523cbb7340385532c037024656332375d7cad9285836ed75de658e37b00c676ad632056b7c6672a02979c33561d4dc999bfb70d1486ee9d3ffe0247fad6d8a7be3347b07dc496e95f74388a8d802d58ea0638c93272c9f9d13dac3c806d3a", @ANYRES16=0x0, @ANYBLOB="010000000000000000004f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000a3fd03000000000008000b00000000000600110000000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b00070000000600110005000000"], 0x80}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES16=r10], 0x90}}, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) sendmsg$nl_route(r11, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x144050}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=@ipv4_deladdr={0x84, 0x15, 0x200, 0x70bd28, 0x25dfdbff, {0x2, 0x1f, 0x10, 0xfe, r1}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x1}}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x20000000, 0xf90e, 0x5}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_LABEL={0x14, 0x3, 'pimreg\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x41) (async) sendmsg$nl_route(r11, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x144050}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=@ipv4_deladdr={0x84, 0x15, 0x200, 0x70bd28, 0x25dfdbff, {0x2, 0x1f, 0x10, 0xfe, r1}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x1}}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x20000000, 0xf90e, 0x5}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_LABEL={0x14, 0x3, 'pimreg\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x41) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000180)="ad56b6c5820fae9d38a9e572f2c06dcd32", 0x11) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000480)={r11, 0x0, 0x68, 0x0, &(0x7f0000000300)="a0889db8daf36b976b80abda188b0bfede19def6a2131eca674f904f252537acc74440ed5af14e570a2a44b01d7ee1c5f059f6bc7dbd6a01cd11f02d1da466bb81e1caccbcc8b2975e70b1ca1e4de6a7866f8f9bde26c4285661de6d7cdca9443dd564eefae0b929", 0x0, 0xb, 0x0, 0x6f, 0x0, &(0x7f0000000400)="e07578b3a09e47a84a561777325ed29df61c733f91640bb35515c47248d83742adc32cf236830e532407cded35ef353b5d1ea923d86b0297bd8c097f647064092aa06d828c416aa6da051a21c3b8e9e9fd9505664af633723e7dbd896b2b325ee207077ac63aef28c0ab2935fb766c", 0x0, 0x2, 0x0, 0xe56}, 0x50) (async) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000480)={r11, 0x0, 0x68, 0x0, &(0x7f0000000300)="a0889db8daf36b976b80abda188b0bfede19def6a2131eca674f904f252537acc74440ed5af14e570a2a44b01d7ee1c5f059f6bc7dbd6a01cd11f02d1da466bb81e1caccbcc8b2975e70b1ca1e4de6a7866f8f9bde26c4285661de6d7cdca9443dd564eefae0b929", 0x0, 0xb, 0x0, 0x6f, 0x0, &(0x7f0000000400)="e07578b3a09e47a84a561777325ed29df61c733f91640bb35515c47248d83742adc32cf236830e532407cded35ef353b5d1ea923d86b0297bd8c097f647064092aa06d828c416aa6da051a21c3b8e9e9fd9505664af633723e7dbd896b2b325ee207077ac63aef28c0ab2935fb766c", 0x0, 0x2, 0x0, 0xe56}, 0x50) 680.377305ms ago: executing program 3 (id=821): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e0000008060040"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0xff}, {0x6, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x9, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x400, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x5, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) (async) listen(r1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x7) (async) r5 = socket(0xa, 0x1, 0x0) listen(r5, 0x7f) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8880) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x68}}, 0x4040810) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 522.257201ms ago: executing program 3 (id=822): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002680)=ANY=[@ANYBLOB="18000000520001c700001000000000101c"], 0x18}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffe00000000000000000000072013d00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d08023f000000040000a118000200ff020000091d00000000000000000001a80016ea1f00084003eb4bd04554bf2a31cf1f2e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e885913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b34113", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xc0, 0x38, 0x100, 0x70bd2d, 0x25dfdbfb, {0x1}, [@nested={0x50, 0x10f, 0x0, 0x1, [@nested={0x4}, @generic="d903e34561d583a0d7360ad4d373f7878b4b559f2e8b50aa43874448f530d8ca8f4c5272b6e30913b125dd82b4a91f4d305d6cd1f5fe0dafa3096cdd8a1afa7525e132f3ef509901"]}, @typed={0x8, 0xe5, 0x0, 0x0, @str='GPL\x00'}, @typed={0x8, 0x9a, 0x0, 0x0, @u32=0x401}, @typed={0xc, 0x136, 0x0, 0x0, @u64=0xfffffffffffffffc}, @generic="15c7dc7fc03c722d0cccc42a3b300196f0a4715cd5bd3a3946d18845a8", @nested={0x18, 0x138, 0x0, 0x1, [@nested={0x4, 0x148}, @nested={0x4, 0x11d}, @typed={0x8, 0x14b, 0x0, 0x0, @uid=r2}, @nested={0x4, 0x6d}]}, @typed={0x8, 0x9e, 0x0, 0x0, @u32=0x7fff}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x20010000) 117.628664ms ago: executing program 2 (id=823): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x6, [@decl_tag={0x9, 0x0, 0x0, 0x11, 0x3, 0x2}, @restrict={0xc, 0x0, 0x0, 0xb, 0x4}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x2}, @var={0xd, 0x0, 0x0, 0xe, 0x4, 0x2}, @var={0x5, 0x0, 0x0, 0xe, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x7}}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @struct={0x9, 0x8, 0x0, 0x4, 0x0, 0x9, [{0x2, 0x4, 0x3}, {0x6, 0x2, 0xe1}, {0xa, 0x2, 0xb89}, {0x8, 0x5, 0x6}, {0x5, 0x1, 0xd}, {0x5, 0x5, 0x5}, {0x9, 0x0, 0x7ff}, {0x6, 0x5, 0x9}]}]}, {0x0, [0x2e, 0x5f, 0x0, 0x61]}}, &(0x7f0000000040)=""/21, 0x106, 0x15, 0x1, 0x8001, 0x10000, @value=r2}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, 0x0, r3}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r5, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r6, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)={[{0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0xe) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x6, [@decl_tag={0x9, 0x0, 0x0, 0x11, 0x3, 0x2}, @restrict={0xc, 0x0, 0x0, 0xb, 0x4}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x2}, @var={0xd, 0x0, 0x0, 0xe, 0x4, 0x2}, @var={0x5, 0x0, 0x0, 0xe, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x7}}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @struct={0x9, 0x8, 0x0, 0x4, 0x0, 0x9, [{0x2, 0x4, 0x3}, {0x6, 0x2, 0xe1}, {0xa, 0x2, 0xb89}, {0x8, 0x5, 0x6}, {0x5, 0x1, 0xd}, {0x5, 0x5, 0x5}, {0x9, 0x0, 0x7ff}, {0x6, 0x5, 0x9}]}]}, {0x0, [0x2e, 0x5f, 0x0, 0x61]}}, &(0x7f0000000040)=""/21, 0x106, 0x15, 0x1, 0x8001, 0x10000, @value=r2}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, 0x0, r3}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r5, 0x25, 0x4, @void}, 0x10) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$bt_hci(r6, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) write$cgroup_subtree(r7, &(0x7f0000000140)={[{0x2b, 'hugetlb'}, {0x2b, 'cpu'}]}, 0xe) (async) 64.475836ms ago: executing program 3 (id=824): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x2, @broadcast, 0x4e23, 0x1, 'dh\x00', 0x6, 0x5e6, 0x1a}, 0x2c) (async) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYRES32], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x114}], 0x0, 0x0, 0x0, 0x41}, 0x0) 63.270293ms ago: executing program 4 (id=825): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000008000500", @ANYRES32=r3, @ANYBLOB="0a000200aaaaaaaaaa4100005c00128009000100766c616e000000004c00028006000100220000000600050088a8"], 0x90}, 0x1, 0xba01}, 0x810) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1200}, {0xfffffffe, 0x80003}]}}) (async) syz_emit_ethernet(0x82, &(0x7f00000015c0)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x872}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x7}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x80, 0x3}}}}}}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x1000}) 25.126534ms ago: executing program 1 (id=826): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="11000000000000001c0012800b00010067726574e17000000c0002800600020020200000140003006e0500"/56], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/57], 0x120}}, 0x0) recvmmsg(r1, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x10020, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x98}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r9, &(0x7f0000000080)}, 0x20) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000080) 0s ago: executing program 0 (id=827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r0) socket$isdn_base(0x22, 0x3, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000440)={&(0x7f00000003c0)="a8f3b124e8196fdf852dfe900fff1ec108eb3ed69369f92126d909", 0x1b}, 0x1, 0x0, 0x0, 0x8000}, 0x4000042) bind$ax25(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb5500450000a1000400000073737800000000e00000014e20ffff008d9078b4e1fa95765798262e83e352be08f88858937290daa680842f452c30d6040000000000000038848cde35b72a6259f080b611ec951e601467dd381201b1a8402587b51fe0ecbb44d049159db7957b28fbe8c64d72d611"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002100000426b17000fedbdf2502142000050000081400000008000200ffffffff08000d0400000008000200c00000020c000c4000ffff00000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x6, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc11}]}, 0x3c}}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) recvmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000100)={0x66, 0x7, 0x7, 0x4, 0x8}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f0000000080), 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001380)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4030015}, 0x10004800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 64.606036][ T5811] cgroup: Unknown subsys name 'net' [ 64.735442][ T5811] cgroup: Unknown subsys name 'cpuset' [ 64.744226][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.088874][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.071234][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.080011][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.088728][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.099521][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.106870][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.120536][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.130737][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.138629][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.139078][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.146251][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.153773][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.167498][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.173228][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.175521][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.183367][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.188909][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.196190][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.213033][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.222304][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.223150][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.237565][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.240108][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.245835][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.264766][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.271933][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.825617][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 68.868907][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 68.883942][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 68.935634][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 69.169026][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 69.179609][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.187308][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.194848][ T5824] bridge_slave_0: entered allmulticast mode [ 69.201804][ T5824] bridge_slave_0: entered promiscuous mode [ 69.222918][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.230031][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.237228][ T5830] bridge_slave_0: entered allmulticast mode [ 69.244338][ T5830] bridge_slave_0: entered promiscuous mode [ 69.267623][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.274796][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.281884][ T5824] bridge_slave_1: entered allmulticast mode [ 69.289025][ T5824] bridge_slave_1: entered promiscuous mode [ 69.314551][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.321669][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.328989][ T5830] bridge_slave_1: entered allmulticast mode [ 69.335871][ T5830] bridge_slave_1: entered promiscuous mode [ 69.367405][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.374594][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.381742][ T5826] bridge_slave_0: entered allmulticast mode [ 69.388916][ T5826] bridge_slave_0: entered promiscuous mode [ 69.438422][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.446297][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.454111][ T5826] bridge_slave_1: entered allmulticast mode [ 69.460956][ T5826] bridge_slave_1: entered promiscuous mode [ 69.467939][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.475097][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.482189][ T5823] bridge_slave_0: entered allmulticast mode [ 69.489288][ T5823] bridge_slave_0: entered promiscuous mode [ 69.498913][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.515128][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.533984][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.541092][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.548474][ T5823] bridge_slave_1: entered allmulticast mode [ 69.555487][ T5823] bridge_slave_1: entered promiscuous mode [ 69.564593][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.580152][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.636462][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.685761][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.697037][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.708478][ T5830] team0: Port device team_slave_0 added [ 69.714376][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.722055][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.729377][ T5837] bridge_slave_0: entered allmulticast mode [ 69.736471][ T5837] bridge_slave_0: entered promiscuous mode [ 69.745773][ T5824] team0: Port device team_slave_0 added [ 69.761220][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.771819][ T5830] team0: Port device team_slave_1 added [ 69.783522][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.790628][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.797850][ T5837] bridge_slave_1: entered allmulticast mode [ 69.804879][ T5837] bridge_slave_1: entered promiscuous mode [ 69.813346][ T5824] team0: Port device team_slave_1 added [ 69.874443][ T5826] team0: Port device team_slave_0 added [ 69.889819][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.897005][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.922947][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.955011][ T5826] team0: Port device team_slave_1 added [ 69.962158][ T5823] team0: Port device team_slave_0 added [ 69.969133][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.976353][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.002624][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.016237][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.026033][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.033690][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.059933][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.080485][ T5823] team0: Port device team_slave_1 added [ 70.096071][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.105992][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.112985][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.138945][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.185047][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.192007][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.218181][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.239773][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.246829][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.272874][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.293251][ T5831] Bluetooth: hci1: command tx timeout [ 70.293629][ T5834] Bluetooth: hci2: command tx timeout [ 70.299216][ T5149] Bluetooth: hci0: command tx timeout [ 70.314403][ T5837] team0: Port device team_slave_0 added [ 70.320678][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.328655][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.354603][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.365265][ T5149] Bluetooth: hci4: command tx timeout [ 70.373173][ T5149] Bluetooth: hci3: command tx timeout [ 70.379699][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.386757][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.412692][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.425803][ T5837] team0: Port device team_slave_1 added [ 70.479388][ T5830] hsr_slave_0: entered promiscuous mode [ 70.485863][ T5830] hsr_slave_1: entered promiscuous mode [ 70.515180][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.522150][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.548467][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.561387][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.568581][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.594804][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.611648][ T5824] hsr_slave_0: entered promiscuous mode [ 70.618227][ T5824] hsr_slave_1: entered promiscuous mode [ 70.624432][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 70.630204][ T5824] Cannot create hsr debugfs directory [ 70.698036][ T5823] hsr_slave_0: entered promiscuous mode [ 70.704492][ T5823] hsr_slave_1: entered promiscuous mode [ 70.710434][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 70.716506][ T5823] Cannot create hsr debugfs directory [ 70.735142][ T5826] hsr_slave_0: entered promiscuous mode [ 70.741264][ T5826] hsr_slave_1: entered promiscuous mode [ 70.747605][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 70.753378][ T5826] Cannot create hsr debugfs directory [ 70.871432][ T5837] hsr_slave_0: entered promiscuous mode [ 70.877691][ T5837] hsr_slave_1: entered promiscuous mode [ 70.884182][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 70.889909][ T5837] Cannot create hsr debugfs directory [ 71.248304][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.255012][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.306984][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.320939][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.331795][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.350711][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.415293][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.427601][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.448228][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.473031][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.518194][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.535325][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.557664][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.577729][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.636754][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.648555][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.668899][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.681184][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.735829][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.804337][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.823853][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.844606][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.857151][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.872268][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.888226][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.895663][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.935386][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.942553][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.010333][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.081562][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.096707][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.112264][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.132127][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.139331][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.156057][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.163240][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.208788][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.239444][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.274426][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.281573][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.301562][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.308738][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.324419][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.331584][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.356588][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.363795][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.371383][ T5149] Bluetooth: hci2: command tx timeout [ 72.377513][ T5149] Bluetooth: hci0: command tx timeout [ 72.383352][ T5149] Bluetooth: hci1: command tx timeout [ 72.412224][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.448119][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.459053][ T5831] Bluetooth: hci4: command tx timeout [ 72.465820][ T5149] Bluetooth: hci3: command tx timeout [ 72.530766][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.541810][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.580145][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.587333][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.628726][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.635969][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.775708][ T5830] veth0_vlan: entered promiscuous mode [ 72.818954][ T5830] veth1_vlan: entered promiscuous mode [ 72.933680][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.986148][ T5830] veth0_macvtap: entered promiscuous mode [ 73.036039][ T5830] veth1_macvtap: entered promiscuous mode [ 73.103248][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.126043][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.161872][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.186662][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.202178][ T5824] veth0_vlan: entered promiscuous mode [ 73.241015][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.254598][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.269717][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.286832][ T5824] veth1_vlan: entered promiscuous mode [ 73.296055][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.318884][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.451413][ T5824] veth0_macvtap: entered promiscuous mode [ 73.491681][ T5824] veth1_macvtap: entered promiscuous mode [ 73.498479][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.510012][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.519110][ T5823] veth0_vlan: entered promiscuous mode [ 73.567067][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.577322][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.584677][ T5823] veth1_vlan: entered promiscuous mode [ 73.593221][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.610419][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.639996][ T5826] veth0_vlan: entered promiscuous mode [ 73.667088][ T1314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.673127][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.678355][ T5837] veth0_vlan: entered promiscuous mode [ 73.698158][ T1314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.707681][ T1314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.725132][ T1314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.751559][ T5826] veth1_vlan: entered promiscuous mode [ 73.789997][ T5837] veth1_vlan: entered promiscuous mode [ 73.808528][ T5823] veth0_macvtap: entered promiscuous mode [ 73.889094][ T5823] veth1_macvtap: entered promiscuous mode [ 73.980593][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.033698][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.037222][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.049851][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.060830][ T5826] veth0_macvtap: entered promiscuous mode [ 74.082831][ T5837] veth0_macvtap: entered promiscuous mode [ 74.094930][ T143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.113343][ T143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.168241][ T143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.198628][ T5826] veth1_macvtap: entered promiscuous mode [ 74.228205][ T5837] veth1_macvtap: entered promiscuous mode [ 74.239174][ T143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.264109][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.272353][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.336236][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.351290][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.390992][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.411026][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.444777][ T5831] Bluetooth: hci1: command tx timeout [ 74.445887][ T5149] Bluetooth: hci0: command tx timeout [ 74.450183][ T5834] Bluetooth: hci2: command tx timeout [ 74.471201][ T5903] IPVS: starting estimator thread 0... [ 74.478354][ T177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.491034][ T177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.505893][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.517896][ T177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.527426][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.527480][ T5834] Bluetooth: hci4: command tx timeout [ 74.535096][ T5831] Bluetooth: hci3: command tx timeout [ 74.551884][ T177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.560806][ T177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.572887][ T5960] IPVS: using max 29 ests per chain, 69600 per kthread [ 74.585919][ T177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.595695][ T177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.615851][ T177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.645805][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.664997][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.785492][ T5966] Zero length message leads to an empty skb [ 74.815597][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.835139][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.914621][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.917916][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 74.939147][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.945367][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.954154][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.998576][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.022169][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.054741][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.356304][ T5980] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET) [ 75.475245][ T5993] Bluetooth: MGMT ver 1.23 [ 75.905549][ T6014] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18'. [ 75.926481][ T6014] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 76.302092][ T6027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.341411][ T6027] gre0: entered promiscuous mode [ 76.361287][ T6027] gre0: entered allmulticast mode [ 76.533995][ T5831] Bluetooth: hci2: command tx timeout [ 76.534018][ T5834] Bluetooth: hci1: command tx timeout [ 76.534033][ T5149] Bluetooth: hci0: command tx timeout [ 76.603591][ T5831] Bluetooth: hci3: command tx timeout [ 76.609157][ T5149] Bluetooth: hci4: command tx timeout [ 76.737860][ T6051] netem: change failed [ 77.010153][ T6064] netlink: 48 bytes leftover after parsing attributes in process `syz.0.35'. [ 77.053587][ T6064] vcan0: tx address claim with dlc 1 [ 77.079917][ T6064] netlink: 108 bytes leftover after parsing attributes in process `syz.0.35'. [ 77.134708][ T6070] openvswitch: netlink: EtherType 50a is less than min 600 [ 77.187269][ T6075] netlink: 6 bytes leftover after parsing attributes in process `syz.3.39'. [ 77.266092][ T6077] rdma_op ffff8880348161f0 conn xmit_rdma 0000000000000000 [ 77.281629][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 77.515516][ T6087] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.650583][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 77.893802][ T6103] syzkaller0: entered promiscuous mode [ 77.899419][ T6103] syzkaller0: entered allmulticast mode [ 77.927098][ T6103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.50'. [ 77.936191][ T6103] netlink: 'syz.1.50': attribute type 7 has an invalid length. [ 77.948235][ T6103] netlink: 'syz.1.50': attribute type 8 has an invalid length. [ 77.956318][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'. [ 77.976801][ T6103] syz_tun: entered promiscuous mode [ 77.983304][ T6103] batadv_slave_1: entered promiscuous mode [ 77.989244][ T6103] batadv_slave_1: left promiscuous mode [ 77.998075][ T6103] syz_tun: left promiscuous mode [ 78.334391][ T6119] syzkaller0: entered promiscuous mode [ 78.339899][ T6119] syzkaller0: entered allmulticast mode [ 78.520287][ T6131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.730544][ T6143] syzkaller0: entered promiscuous mode [ 78.741508][ T6143] syzkaller0: entered allmulticast mode [ 79.227780][ T6157] pim6reg: entered allmulticast mode [ 79.248866][ T6158] pim6reg: left allmulticast mode [ 80.229744][ T6199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.240987][ T6199] bond0: (slave bond1): Enslaving as an active interface with an up link [ 80.352760][ T6212] __nla_validate_parse: 7 callbacks suppressed [ 80.352777][ T6212] netlink: 36 bytes leftover after parsing attributes in process `syz.3.90'. [ 80.395348][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 80.456221][ T6218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.90'. [ 80.744910][ T6230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.95'. [ 80.804313][ T6232] nftables ruleset with unbound chain [ 80.820135][ T6230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.95'. [ 80.845676][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 80.916140][ T6235] netlink: 'syz.0.98': attribute type 1 has an invalid length. [ 80.951069][ T6245] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.982477][ T6235] netlink: 'syz.0.98': attribute type 2 has an invalid length. [ 81.075582][ T6251] warning: `syz.4.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.238331][ T6267] netlink: 'syz.4.104': attribute type 1 has an invalid length. [ 81.303925][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.104'. [ 81.331881][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.104'. [ 81.376332][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 81.487279][ T55] cfg80211: failed to load regulatory.db [ 81.817821][ T6293] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 81.883706][ T6293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.524587][ T6330] netlink: 48 bytes leftover after parsing attributes in process `syz.4.123'. [ 82.967546][ T6365] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 83.297070][ T6379] netlink: 'syz.3.135': attribute type 13 has an invalid length. [ 83.308608][ T6384] bond1: (slave erspan0): Device is not bonding slave [ 83.315836][ T6384] bond1: option active_slave: invalid value (erspan0) [ 83.326435][ T6384] bond1 (unregistering): Released all slaves [ 83.617524][ T6401] atomic_op ffff888028c62998 conn xmit_atomic 0000000000000000 [ 84.349927][ T6445] netlink: 'syz.4.155': attribute type 30 has an invalid length. [ 84.558786][ T6455] netlink: 'syz.3.158': attribute type 64 has an invalid length. [ 84.609586][ T6458] netem: change failed [ 84.627674][ T6460] ipt_REJECT: ECHOREPLY no longer supported. [ 84.642082][ T6461] ipt_REJECT: ECHOREPLY no longer supported. [ 84.976680][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.984727][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.362649][ T6486] netlink: 'syz.0.167': attribute type 10 has an invalid length. [ 85.380604][ T6486] __nla_validate_parse: 20 callbacks suppressed [ 85.380622][ T6486] netlink: 228 bytes leftover after parsing attributes in process `syz.0.167'. [ 85.975509][ T6483] infiniband !yz!: set active [ 85.980402][ T6483] infiniband !yz!: added team_slave_0 [ 86.057409][ T6483] RDS/IB: !yz!: added [ 86.074238][ T6483] smc: adding ib device !yz! with port count 1 [ 86.090519][ T6483] smc: ib device !yz! port 1 has no pnetid [ 86.151052][ T6520] openvswitch: netlink: Multiple metadata blocks provided [ 86.177220][ T6520] netlink: zone id is out of range [ 86.192619][ T6520] netlink: del zone limit has 4 unknown bytes [ 86.439370][ T6533] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 86.538707][ T6533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.590192][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'. [ 86.646165][ T6537] bond2: (slave geneve2): making interface the new active one [ 86.685932][ T6537] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 86.752484][ T6541] vlan2: entered allmulticast mode [ 86.768025][ T6541] bond2: entered allmulticast mode [ 86.793205][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'. [ 86.793808][ T6541] geneve2: entered allmulticast mode [ 86.858162][ T6541] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 86.960884][ T6557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.184'. [ 87.019057][ T6552] netlink: 80 bytes leftover after parsing attributes in process `syz.4.181'. [ 87.030596][ T6552] netlink: 80 bytes leftover after parsing attributes in process `syz.4.181'. [ 87.293984][ T6570] netlink: 'syz.1.187': attribute type 142 has an invalid length. [ 87.435642][ T6570] veth5: entered allmulticast mode [ 87.743107][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.193'. [ 87.772752][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.193'. [ 87.800510][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 88.071704][ T6607] netlink: 32 bytes leftover after parsing attributes in process `syz.1.195'. [ 89.288438][ T6664] sctp: [Deprecated]: syz.2.211 (pid 6664) Use of int in maxseg socket option. [ 89.288438][ T6664] Use struct sctp_assoc_value instead [ 90.281707][ T6715] syzkaller1: entered promiscuous mode [ 90.290267][ T6715] syzkaller1: entered allmulticast mode [ 90.486195][ T6723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.813879][ T6780] netlink: 'syz.4.244': attribute type 11 has an invalid length. [ 91.824645][ T6784] __nla_validate_parse: 6 callbacks suppressed [ 91.824662][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.246'. [ 91.969144][ T6787] netlink: 232 bytes leftover after parsing attributes in process `syz.1.247'. [ 92.194060][ T6802] netlink: 'syz.2.252': attribute type 5 has an invalid length. [ 92.379406][ T6807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.406403][ T6811] netlink: 36 bytes leftover after parsing attributes in process `syz.2.255'. [ 92.462161][ T6807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.470531][ T6816] netlink: 276 bytes leftover after parsing attributes in process `syz.3.258'. [ 92.527903][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'. [ 92.541748][ T6814] erspan0: entered promiscuous mode [ 92.558737][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 92.567388][ T6823] netlink: 'syz.3.259': attribute type 1 has an invalid length. [ 92.575878][ T6823] netlink: 96 bytes leftover after parsing attributes in process `syz.3.259'. [ 92.588573][ T6823] netlink: 1 bytes leftover after parsing attributes in process `syz.3.259'. [ 92.598406][ T6823] netlink: 'syz.3.259': attribute type 1 has an invalid length. [ 92.606686][ T6823] netlink: 'syz.3.259': attribute type 8 has an invalid length. [ 92.615321][ T6823] netlink: 606 bytes leftover after parsing attributes in process `syz.3.259'. [ 92.939805][ T6843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'. [ 93.402660][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.418676][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.427210][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.443287][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.517078][ T6869] vlan0: entered promiscuous mode [ 93.532327][ T6869] team0: Port device vlan0 added [ 93.676719][ T6879] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 93.866392][ T6888] veth0_to_bond: entered allmulticast mode [ 94.815447][ T6935] netlink: 'syz.4.291': attribute type 11 has an invalid length. [ 95.107747][ T6949] IPv6: sit1: Disabled Multicast RS [ 95.117137][ T6949] sit1: entered allmulticast mode [ 95.290947][ T6962] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 95.385299][ T6962] bond1: entered promiscuous mode [ 95.390903][ T6962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.487671][ T6962] bond1: (slave bridge1): making interface the new active one [ 95.498791][ T6962] bridge1: entered promiscuous mode [ 95.506145][ T6962] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 95.594569][ T6972] syzkaller0: entered promiscuous mode [ 95.600681][ T6972] syzkaller0: entered allmulticast mode [ 96.116250][ T7005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.199966][ T7005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.869537][ T7058] openvswitch: netlink: Key type 31 is not supported [ 96.949261][ T7062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.973440][ T7061] netlink: 'syz.4.330': attribute type 29 has an invalid length. [ 97.012584][ T7061] __nla_validate_parse: 17 callbacks suppressed [ 97.012599][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.330'. [ 97.348686][ T7092] netlink: 108 bytes leftover after parsing attributes in process `syz.4.337'. [ 97.673741][ T7121] netlink: 'syz.4.347': attribute type 33 has an invalid length. [ 97.731274][ T7121] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 97.747405][ T7121] bond2 (unregistering): Released all slaves [ 97.771079][ T7128] netlink: 284 bytes leftover after parsing attributes in process `syz.2.349'. [ 97.823913][ T7127] syzkaller0: entered promiscuous mode [ 97.829420][ T7127] syzkaller0: entered allmulticast mode [ 97.946703][ T7133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.350'. [ 98.121071][ T9] IPVS: starting estimator thread 0... [ 98.212522][ T7144] IPVS: using max 32 ests per chain, 76800 per kthread [ 98.971209][ T7142] netlink: 40 bytes leftover after parsing attributes in process `syz.4.350'. [ 98.994567][ T7158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.356'. [ 99.186535][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 99.216979][ T7173] tipc: Started in network mode [ 99.245837][ T7173] tipc: Node identity 86bd4e81f794, cluster identity 4711 [ 99.268282][ T7173] tipc: Enabled bearer , priority 11 [ 99.340295][ T7182] tipc: Enabling of bearer rejected, already enabled [ 99.988941][ T7221] tipc: Failed to obtain node identity [ 99.996687][ T7221] tipc: Enabling of bearer rejected, failed to enable media [ 100.021913][ T7223] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 100.144609][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 100.155284][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 100.386139][ T5896] tipc: Node number set to 1898532481 [ 100.440924][ T7249] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 100.893785][ T7272] netlink: 168 bytes leftover after parsing attributes in process `syz.4.394'. [ 101.114939][ T7290] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 101.590671][ T7312] x_tables: duplicate entry at hook 2 [ 102.024042][ T7333] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 102.073861][ T7333] __nla_validate_parse: 2 callbacks suppressed [ 102.073878][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 102.095764][ T7333] netlink: 1 bytes leftover after parsing attributes in process `syz.2.409'. [ 102.148772][ T7341] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 102.279110][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 102.344676][ T7355] xfrm1: entered promiscuous mode [ 102.373455][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 102.387672][ T7355] xfrm1: entered allmulticast mode [ 102.431029][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.417'. [ 102.755712][ T1341] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.771156][ T1341] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.791757][ T1341] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.812704][ T1341] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.911493][ T7386] IPv6: Can't replace route, no match found [ 103.923180][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 103.931993][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 104.081807][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 104.120403][ T7447] bridge0: entered promiscuous mode [ 104.129676][ T7447] macsec1: entered promiscuous mode [ 104.135729][ T7447] macsec1: entered allmulticast mode [ 104.141222][ T7447] bridge0: entered allmulticast mode [ 104.157056][ T7447] bridge0: port 3(macsec1) entered blocking state [ 104.170933][ T7447] bridge0: port 3(macsec1) entered disabled state [ 104.194523][ T7447] bridge0: left allmulticast mode [ 104.199676][ T7447] bridge0: left promiscuous mode [ 104.416664][ T7467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.729592][ T7488] batadv0: entered allmulticast mode [ 105.007651][ T7502] trusted_key: syz.4.458 sent an empty control message without MSG_MORE. [ 105.570393][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.463'. [ 105.696480][ T7528] netlink: 'syz.0.468': attribute type 24 has an invalid length. [ 105.916886][ T7543] vlan2: entered promiscuous mode [ 105.922149][ T7543] vlan2: entered allmulticast mode [ 105.937167][ T7545] netlink: 80 bytes leftover after parsing attributes in process `syz.1.471'. [ 105.937228][ T7543] hsr_slave_1: entered allmulticast mode [ 106.031985][ T7543] netlink: 'syz.3.472': attribute type 1 has an invalid length. [ 106.058621][ T7557] netlink: 'syz.4.473': attribute type 10 has an invalid length. [ 106.093272][ T7555] netlink: zone id is out of range [ 106.102202][ T7555] netlink: zone id is out of range [ 106.127092][ T7555] netlink: zone id is out of range [ 106.148069][ T7555] netlink: zone id is out of range [ 106.160550][ T7555] netlink: zone id is out of range [ 106.190755][ T7555] netlink: zone id is out of range [ 106.208274][ T7555] netlink: zone id is out of range [ 106.231357][ T7550] delete_channel: no stack [ 106.242824][ T7555] netlink: set zone limit has 4 unknown bytes [ 106.750511][ T7598] TCP: TCP_TX_DELAY enabled [ 106.887192][ T7601] bond2: ARP target 1.0.0.0 is already present [ 106.909289][ T7601] bond2: option arp_ip_target: invalid value (1) [ 106.936437][ T7601] bond2 (unregistering): Released all slaves [ 107.171415][ T7617] netlink: 'syz.4.494': attribute type 1 has an invalid length. [ 107.277541][ T7617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.357047][ T7633] bond2: (slave veth0_to_bond): making interface the new active one [ 107.391382][ T7638] __nla_validate_parse: 4 callbacks suppressed [ 107.391399][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 107.393763][ T7633] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 107.624241][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.502'. [ 107.682796][ T7665] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 107.754151][ T7664] lo: entered promiscuous mode [ 107.776509][ T7664] tunl0: entered promiscuous mode [ 107.795091][ T7664] gre0: entered promiscuous mode [ 107.820946][ T7664] gretap0: entered promiscuous mode [ 107.867783][ T7664] erspan0: entered promiscuous mode [ 107.890077][ T7664] ip_vti0: entered promiscuous mode [ 107.994065][ T7669] gre0: left promiscuous mode [ 107.998797][ T7669] gre0: left allmulticast mode [ 108.106170][ T7698] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 108.155675][ T7698] netlink: 'syz.3.508': attribute type 1 has an invalid length. [ 108.251190][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 108.271261][ T7704] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.510'. [ 108.278189][ T7669] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.284440][ T7705] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 108.288778][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.296544][ T7705] netlink: 212 bytes leftover after parsing attributes in process `syz.0.510'. [ 108.313326][ T7706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.508'. [ 108.377376][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.509'. [ 108.436534][ T7669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.453523][ T7669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.685560][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 108.722537][ T1146] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.775978][ T1146] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.823460][ T1146] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.865078][ T1146] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.884755][ T7721] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 109.054282][ T7734] netlink: 'syz.1.516': attribute type 2 has an invalid length. [ 109.090048][ T7734] netlink: 'syz.1.516': attribute type 8 has an invalid length. [ 109.124396][ T7734] netlink: 132 bytes leftover after parsing attributes in process `syz.1.516'. [ 109.434924][ T7765] netlink: 32 bytes leftover after parsing attributes in process `syz.2.524'. [ 109.515425][ T7770] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 109.536556][ T7771] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 109.606152][ T7770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.647963][ T7773] bond1: (slave veth7): Enslaving as an active interface with a down link [ 110.317287][ T7802] xt_socket: unknown flags 0x50 [ 110.665573][ T7828] sctp: [Deprecated]: syz.0.541 (pid 7828) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.665573][ T7828] Use struct sctp_sack_info instead [ 110.710541][ T7829] sctp: [Deprecated]: syz.0.541 (pid 7829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.710541][ T7829] Use struct sctp_sack_info instead [ 111.297154][ T7863] ip6gre1: entered promiscuous mode [ 112.053598][ T7901] bond1: Removing last ns target with arp_interval on [ 112.835592][ T7932] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.877655][ T7932] bond0: (slave bond2): Enslaving as an active interface with an up link [ 113.430828][ T7990] __nla_validate_parse: 11 callbacks suppressed [ 113.430841][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'. [ 113.448806][ T36] nci: nci_ntf_packet: unknown ntf opcode 0x125 [ 113.462474][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 113.484262][ T7990] bridge2: port 1(veth3) entered blocking state [ 113.490716][ T7990] bridge2: port 1(veth3) entered disabled state [ 113.498458][ T7990] veth3: entered allmulticast mode [ 113.505590][ T7990] veth3: entered promiscuous mode [ 113.517898][ T7990] bridge2: port 2(veth0_to_bond) entered blocking state [ 113.525179][ T7990] bridge2: port 2(veth0_to_bond) entered disabled state [ 113.532255][ T7990] veth0_to_bond: entered allmulticast mode [ 113.539535][ T7990] veth0_to_bond: entered promiscuous mode [ 113.717388][ T5149] Bluetooth: hci4: link tx timeout [ 113.727292][ T5149] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.736099][ T5831] Bluetooth: hci4: link tx timeout [ 113.741290][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.864784][ T8011] pimreg: entered allmulticast mode [ 114.111828][ T8017] validate_nla: 3 callbacks suppressed [ 114.111845][ T8017] netlink: 'syz.4.600': attribute type 1 has an invalid length. [ 114.124284][ T8018] netlink: 'syz.4.600': attribute type 1 has an invalid length. [ 114.134633][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.600'. [ 114.134633][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.600'. [ 114.371758][ T8029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.601'. [ 114.442150][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 114.564536][ T5831] Bluetooth: hci4: link tx timeout [ 114.570037][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.578320][ T5831] Bluetooth: hci4: link tx timeout [ 114.583730][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.692862][ T8049] netlink: 'syz.2.608': attribute type 1 has an invalid length. [ 114.944139][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.611'. [ 114.973344][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 115.164044][ T8077] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 115.424743][ T5831] Bluetooth: hci4: link tx timeout [ 115.429940][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.443485][ T5831] Bluetooth: hci4: link tx timeout [ 115.448623][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.627750][ T8109] netlink: 'syz.3.623': attribute type 10 has an invalid length. [ 115.645873][ T8109] netlink: 228 bytes leftover after parsing attributes in process `syz.3.623'. [ 115.812797][ T5149] Bluetooth: hci4: command 0x0406 tx timeout [ 115.979125][ T8122] geneve2: entered promiscuous mode [ 116.067123][ T8129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.631'. [ 116.090418][ T8131] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 116.111947][ T8129] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 116.627711][ T8157] netlink: 'syz.4.641': attribute type 2 has an invalid length. [ 116.890181][ T8180] netlink: 'syz.1.646': attribute type 3 has an invalid length. [ 117.035424][ T8188] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.047633][ T8188] tipc: MTU too low for tipc bearer [ 117.219507][ T8199] syzkaller1: entered promiscuous mode [ 117.243235][ T8199] syzkaller1: entered allmulticast mode [ 117.270727][ T8203] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 117.610503][ T8219] netlink: 'syz.0.662': attribute type 32 has an invalid length. [ 117.705945][ T8225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.731779][ T8219] bond2: option coupled_control: invalid value (52) [ 117.761432][ T8230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.787411][ T8219] bond2 (unregistering): Released all slaves [ 117.828179][ T8225] xt_l2tp: wrong L2TP version: 0 [ 118.673732][ T8265] netlink: 'syz.2.676': attribute type 3 has an invalid length. [ 118.699211][ T8265] __nla_validate_parse: 12 callbacks suppressed [ 118.699227][ T8265] netlink: 64 bytes leftover after parsing attributes in process `syz.2.676'. [ 118.724989][ T8265] block nbd0: not configured, cannot reconfigure [ 118.797988][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.808469][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.832070][ T8275] netlink: 'syz.3.677': attribute type 16 has an invalid length. [ 118.840418][ T8275] netlink: 'syz.3.677': attribute type 17 has an invalid length. [ 118.848100][ T8271] tipc: Resetting bearer [ 118.858216][ T8274] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 118.858343][ T8271] tipc: Resetting bearer [ 118.924664][ T8282] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 119.162372][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 119.171653][ T8295] validate_nla: 1 callbacks suppressed [ 119.171668][ T8295] netlink: 'syz.3.683': attribute type 7 has an invalid length. [ 119.208645][ T177] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.208811][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 119.232005][ T177] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.246276][ T177] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.257914][ T177] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.273822][ T8295] netlink: 'syz.3.683': attribute type 7 has an invalid length. [ 119.380436][ T8300] netlink: 'syz.3.686': attribute type 3 has an invalid length. [ 119.479978][ T8299] netlink: set zone limit has 4 unknown bytes [ 119.680949][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 119.682888][ T8317] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 120.089334][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.696'. [ 120.203476][ T8335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 120.205751][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 120.212555][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 120.263254][ T8340] sctp: [Deprecated]: syz.4.699 (pid 8340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.263254][ T8340] Use struct sctp_sack_info instead [ 120.291675][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 120.580325][ T8367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.630774][ T8371] tipc: Enabling of bearer rejected, failed to enable media [ 121.675932][ T8440] netlink: 256 bytes leftover after parsing attributes in process `syz.1.726'. [ 121.754054][ T8448] netlink: 'syz.0.731': attribute type 16 has an invalid length. [ 121.800214][ T8448] netlink: 'syz.0.731': attribute type 3 has an invalid length. [ 121.949407][ T8460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.959498][ T8462] netlink: 'syz.1.735': attribute type 3 has an invalid length. [ 122.316290][ T8477] netlink: 'syz.0.740': attribute type 21 has an invalid length. [ 123.175052][ T8532] netlink: 'syz.4.757': attribute type 2 has an invalid length. [ 123.202146][ T8532] netlink: 'syz.4.757': attribute type 1 has an invalid length. [ 123.233975][ T8532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.505673][ T8551] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 123.789279][ T8570] __nla_validate_parse: 5 callbacks suppressed [ 123.789296][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 124.035400][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.769'. [ 124.095183][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 124.174516][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.771'. [ 124.691169][ T8596] IPv6: sit1: Disabled Multicast RS [ 124.733784][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 124.859084][ T8620] netlink: 44 bytes leftover after parsing attributes in process `syz.3.780'. [ 125.133141][ T8638] netlink: 128 bytes leftover after parsing attributes in process `syz.3.785'. [ 125.150227][ T8639] raw_sendmsg: syz.0.784 forgot to set AF_INET. Fix it! [ 125.296704][ T8647] openvswitch: netlink: Key type 48 is out of range max 32 [ 125.421305][ T8659] netlink: 'syz.0.791': attribute type 4 has an invalid length. [ 125.444304][ T8641] netlink: set zone limit has 4 unknown bytes [ 125.625561][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'. [ 125.753329][ T8680] netlink: 52 bytes leftover after parsing attributes in process `syz.4.798'. [ 126.056145][ T8696] netlink: 'syz.0.803': attribute type 1 has an invalid length. [ 126.064823][ T8697] netlink: 'syz.0.803': attribute type 1 has an invalid length. [ 126.075147][ T8696] netlink: 280 bytes leftover after parsing attributes in process `syz.0.803'. [ 126.114080][ T8706] openvswitch: netlink: nsh attr 16383 is out of range max 3 [ 126.128364][ T8709] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 126.218399][ T8711] netlink: 'syz.4.806': attribute type 1 has an invalid length. [ 126.339955][ T8711] tipc: Started in network mode [ 126.349622][ T8711] tipc: Node identity 82ba0e8abedc, cluster identity 4711 [ 126.357967][ T8711] tipc: Enabled bearer , priority 0 [ 126.412720][ T8711] syzkaller0: entered promiscuous mode [ 126.418342][ T8711] syzkaller0: entered allmulticast mode [ 126.433819][ T8711] tipc: Resetting bearer [ 126.465462][ T8725] netlink: 'syz.3.812': attribute type 10 has an invalid length. [ 126.519152][ T8717] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 126.581989][ T8710] tipc: Resetting bearer [ 126.623504][ T8738] x_tables: unsorted entry at hook 2 [ 126.751348][ T8744] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 126.759989][ T8744] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 127.411613][ T8766] netlink: zone id is out of range [ 127.433369][ T8766] netlink: zone id is out of range [ 127.438679][ T8766] netlink: zone id is out of range [ 127.461445][ T8766] netlink: zone id is out of range [ 127.472551][ T8766] netlink: zone id is out of range [ 127.483690][ T8766] netlink: zone id is out of range [ 127.489016][ T8766] netlink: zone id is out of range [ 127.928522][ T8710] tipc: Disabling bearer [ 127.955898][ T8752] netlink: 'syz.2.819': attribute type 3 has an invalid length. [ 127.966074][ T5942] tipc: Node number set to 1013321354 [ 128.040404][ T8775] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20003 [ 128.085981][ T8778] BUG: Bad page state in process syz.2.823 pfn:48a69 [ 128.092852][ T8778] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888048a69dc0 pfn:0x48a69 [ 128.102983][ T8778] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.110124][ T8778] raw: 00fff00000000000 dead000000000040 ffff8880216e8000 0000000000000000 [ 128.118754][ T8778] raw: ffff888048a69dc0 3ffffffffffffffd 00000000ffffffff 0000000000000000 [ 128.127388][ T8778] page dumped because: page_pool leak [ 128.132796][ T8778] page_owner tracks the page as allocated [ 128.138516][ T8778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 5830, tgid 5830 (syz-executor), ts 103889521549, free_ts 103864531883 [ 128.155773][ T8778] post_alloc_hook+0x228/0x280 [ 128.160550][ T8778] get_page_from_freelist+0x24dc/0x2580 [ 128.166162][ T8778] __alloc_frozen_pages_noprof+0x18d/0x380 [ 128.171982][ T8778] alloc_pages_bulk_noprof+0x558/0x700 [ 128.177515][ T8778] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 128.183639][ T8778] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 128.189471][ T8778] skb_pp_cow_data+0x28b/0x1410 [ 128.191147][ T8782] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.194379][ T8778] do_xdp_generic+0x715/0x1280 [ 128.194411][ T8778] __netif_receive_skb_core+0x10e5/0x30a0 [ 128.211187][ T8778] __netif_receive_skb+0x72/0x370 [ 128.216294][ T8778] netif_receive_skb+0x1bb/0x790 [ 128.221258][ T8778] NF_HOOK+0xa4/0x3a0 [ 128.225289][ T8778] br_handle_frame_finish+0x14b2/0x1b40 [ 128.230847][ T8778] br_nf_hook_thresh+0x3dd/0x4c0 [ 128.235843][ T8778] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 128.241840][ T8778] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 128.247260][ T8778] page last free pid 23 tgid 23 stack trace: [ 128.253267][ T8778] __free_frozen_pages+0xbb0/0xd10 [ 128.258402][ T8778] tlb_remove_table_rcu+0x85/0x100 [ 128.263569][ T8778] rcu_core+0xc9e/0x1750 [ 128.267815][ T8778] handle_softirqs+0x22a/0x7c0 [ 128.272615][ T8778] run_ksoftirqd+0x36/0x60 [ 128.277045][ T8778] smpboot_thread_fn+0x541/0xa50 [ 128.281994][ T8778] kthread+0x726/0x8b0 [ 128.286141][ T8778] ret_from_fork+0x51b/0xa40 [ 128.290743][ T8778] ret_from_fork_asm+0x1a/0x30 [ 128.295577][ T8778] Modules linked in: [ 128.299517][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.2.823 Not tainted syzkaller #0 PREEMPT(full) [ 128.299538][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 128.299558][ T8778] Call Trace: [ 128.299566][ T8778] [ 128.299574][ T8778] dump_stack_lvl+0xe8/0x150 [ 128.299601][ T8778] bad_page+0x17f/0x1c0 [ 128.299626][ T8778] __free_frozen_pages+0xcc2/0xd10 [ 128.299654][ T8778] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 128.299696][ T8778] bpf_xdp_adjust_tail+0x1d6/0x220 [ 128.299728][ T8778] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 128.299749][ T8778] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 128.299797][ T8778] do_xdp_generic+0xa6f/0x1280 [ 128.299817][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 128.299844][ T8778] ? __pfx_do_xdp_generic+0x10/0x10 [ 128.299873][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 128.299910][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 128.299928][ T8778] tun_get_user+0x247d/0x3dd0 [ 128.299960][ T8778] ? aa_file_perm+0x12d/0x1630 [ 128.299988][ T8778] ? aa_file_perm+0x440/0x1630 [ 128.300012][ T8778] ? __pfx_tun_get_user+0x10/0x10 [ 128.300033][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 128.300056][ T8778] ? __pfx___futex_wait+0x10/0x10 [ 128.300086][ T8778] ? ref_tracker_alloc+0x363/0x4d0 [ 128.300113][ T8778] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 128.300139][ T8778] ? tun_get+0x1c/0x2f0 [ 128.300158][ T8778] ? tun_get+0x1c/0x2f0 [ 128.300182][ T8778] ? tun_get+0x1c/0x2f0 [ 128.300200][ T8778] ? tun_get+0x1c/0x2f0 [ 128.300224][ T8778] tun_chr_write_iter+0x113/0x200 [ 128.300246][ T8778] vfs_write+0x61d/0xb90 [ 128.300273][ T8778] ? __pfx_vfs_write+0x10/0x10 [ 128.300312][ T8778] ? __fget_files+0x2a/0x420 [ 128.300343][ T8778] ksys_write+0x150/0x270 [ 128.300364][ T8778] ? __pfx_ksys_write+0x10/0x10 [ 128.300393][ T8778] do_syscall_64+0xe2/0xf80 [ 128.300416][ T8778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.300433][ T8778] ? trace_irq_disable+0x37/0x100 [ 128.300454][ T8778] ? clear_bhb_loop+0x60/0xb0 [ 128.300476][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.300493][ T8778] RIP: 0033:0x7fe2d395b58e [ 128.300514][ T8778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.300529][ T8778] RSP: 002b:00007fe2d4783fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.300548][ T8778] RAX: ffffffffffffffda RBX: 00007fe2d47846c0 RCX: 00007fe2d395b58e [ 128.300561][ T8778] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 128.300573][ T8778] RBP: 00007fe2d3a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 128.300585][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.300595][ T8778] R13: 00007fe2d3c16038 R14: 00007fe2d3c15fa0 R15: 00007fff7faf0788 [ 128.300627][ T8778] [ 128.300634][ T8778] Disabling lock debugging due to kernel taint [ 128.578037][ T8778] BUG: Bad page state in process syz.2.823 pfn:7d11f [ 128.584811][ T8778] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d11f140 pfn:0x7d11f [ 128.594898][ T8778] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.602015][ T8778] raw: 00fff00000000000 dead000000000040 ffff8880216e8000 0000000000000000 [ 128.610627][ T8778] raw: ffff88807d11f140 0000000000000001 00000000ffffffff 0000000000000000 [ 128.619237][ T8778] page dumped because: page_pool leak [ 128.624634][ T8778] page_owner tracks the page as allocated [ 128.630341][ T8778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8778, tgid 8773 (syz.2.823), ts 128085793496, free_ts 128073567069 [ 128.647312][ T8778] post_alloc_hook+0x228/0x280 [ 128.652086][ T8778] get_page_from_freelist+0x24dc/0x2580 [ 128.657683][ T8778] __alloc_frozen_pages_noprof+0x18d/0x380 [ 128.663513][ T8778] alloc_pages_bulk_noprof+0x558/0x700 [ 128.668960][ T8778] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 128.675061][ T8778] skb_pp_cow_data+0xb59/0x1410 [ 128.679914][ T8778] do_xdp_generic+0x715/0x1280 [ 128.684699][ T8778] tun_get_user+0x247d/0x3dd0 [ 128.689380][ T8778] tun_chr_write_iter+0x113/0x200 [ 128.694445][ T8778] vfs_write+0x61d/0xb90 [ 128.698690][ T8778] ksys_write+0x150/0x270 [ 128.703045][ T8778] do_syscall_64+0xe2/0xf80 [ 128.707550][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.713469][ T8778] page last free pid 23 tgid 23 stack trace: [ 128.719451][ T8778] __free_frozen_pages+0xbb0/0xd10 [ 128.724581][ T8778] tlb_remove_table_rcu+0x85/0x100 [ 128.729694][ T8778] rcu_core+0xc9e/0x1750 [ 128.733959][ T8778] handle_softirqs+0x22a/0x7c0 [ 128.738736][ T8778] run_ksoftirqd+0x36/0x60 [ 128.743176][ T8778] smpboot_thread_fn+0x541/0xa50 [ 128.748112][ T8778] kthread+0x726/0x8b0 [ 128.752174][ T8778] ret_from_fork+0x51b/0xa40 [ 128.756800][ T8778] ret_from_fork_asm+0x1a/0x30 [ 128.761574][ T8778] Modules linked in: [ 128.765493][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.2.823 Tainted: G B syzkaller #0 PREEMPT(full) [ 128.765517][ T8778] Tainted: [B]=BAD_PAGE [ 128.765522][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 128.765532][ T8778] Call Trace: [ 128.765538][ T8778] [ 128.765545][ T8778] dump_stack_lvl+0xe8/0x150 [ 128.765568][ T8778] bad_page+0x17f/0x1c0 [ 128.765589][ T8778] __free_frozen_pages+0xcc2/0xd10 [ 128.765608][ T8778] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 128.765632][ T8778] bpf_xdp_adjust_tail+0x1d6/0x220 [ 128.765656][ T8778] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 128.765671][ T8778] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 128.765700][ T8778] do_xdp_generic+0xa6f/0x1280 [ 128.765717][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 128.765738][ T8778] ? __pfx_do_xdp_generic+0x10/0x10 [ 128.765761][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 128.765783][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 128.765799][ T8778] tun_get_user+0x247d/0x3dd0 [ 128.765821][ T8778] ? aa_file_perm+0x12d/0x1630 [ 128.765846][ T8778] ? aa_file_perm+0x440/0x1630 [ 128.765867][ T8778] ? __pfx_tun_get_user+0x10/0x10 [ 128.765885][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 128.765904][ T8778] ? __pfx___futex_wait+0x10/0x10 [ 128.765928][ T8778] ? ref_tracker_alloc+0x363/0x4d0 [ 128.765953][ T8778] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 128.765975][ T8778] ? tun_get+0x1c/0x2f0 [ 128.765992][ T8778] ? tun_get+0x1c/0x2f0 [ 128.766011][ T8778] ? tun_get+0x1c/0x2f0 [ 128.766027][ T8778] ? tun_get+0x1c/0x2f0 [ 128.766046][ T8778] tun_chr_write_iter+0x113/0x200 [ 128.766065][ T8778] vfs_write+0x61d/0xb90 [ 128.766084][ T8778] ? __pfx_vfs_write+0x10/0x10 [ 128.766104][ T8778] ? __fget_files+0x2a/0x420 [ 128.766127][ T8778] ksys_write+0x150/0x270 [ 128.766144][ T8778] ? __pfx_ksys_write+0x10/0x10 [ 128.766163][ T8778] do_syscall_64+0xe2/0xf80 [ 128.766185][ T8778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.766202][ T8778] ? trace_irq_disable+0x37/0x100 [ 128.766224][ T8778] ? clear_bhb_loop+0x60/0xb0 [ 128.766242][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.766259][ T8778] RIP: 0033:0x7fe2d395b58e [ 128.766275][ T8778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.766289][ T8778] RSP: 002b:00007fe2d4783fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.766308][ T8778] RAX: ffffffffffffffda RBX: 00007fe2d47846c0 RCX: 00007fe2d395b58e [ 128.766321][ T8778] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 128.766333][ T8778] RBP: 00007fe2d3a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 128.766344][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.766354][ T8778] R13: 00007fe2d3c16038 R14: 00007fe2d3c15fa0 R15: 00007fff7faf0788 [ 128.766374][ T8778] [ 128.766384][ T8778] BUG: Bad page state in process syz.2.823 pfn:7b0f8 [ 129.050231][ T8778] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807b0f9100 pfn:0x7b0f8 [ 129.060338][ T8778] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 129.067480][ T8778] raw: 00fff00000000000 dead000000000040 ffff8880216e8000 0000000000000000 [ 129.076086][ T8778] raw: ffff88807b0f9100 0000000000000001 00000000ffffffff 0000000000000000 [ 129.084682][ T8778] page dumped because: page_pool leak [ 129.090038][ T8778] page_owner tracks the page as allocated [ 129.095775][ T8778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8778, tgid 8773 (syz.2.823), ts 128085776571, free_ts 128073591512 [ 129.112753][ T8778] post_alloc_hook+0x228/0x280 [ 129.117514][ T8778] get_page_from_freelist+0x24dc/0x2580 [ 129.123081][ T8778] __alloc_frozen_pages_noprof+0x18d/0x380 [ 129.128896][ T8778] alloc_pages_bulk_noprof+0x558/0x700 [ 129.134372][ T8778] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 129.140445][ T8778] skb_pp_cow_data+0xb59/0x1410 [ 129.145336][ T8778] do_xdp_generic+0x715/0x1280 [ 129.150099][ T8778] tun_get_user+0x247d/0x3dd0 [ 129.154820][ T8778] tun_chr_write_iter+0x113/0x200 [ 129.159851][ T8778] vfs_write+0x61d/0xb90 [ 129.164128][ T8778] ksys_write+0x150/0x270 [ 129.168455][ T8778] do_syscall_64+0xe2/0xf80 [ 129.172982][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.178880][ T8778] page last free pid 23 tgid 23 stack trace: [ 129.184886][ T8778] __free_frozen_pages+0xbb0/0xd10 [ 129.190000][ T8778] tlb_remove_table_rcu+0x85/0x100 [ 129.195148][ T8778] rcu_core+0xc9e/0x1750 [ 129.199395][ T8778] handle_softirqs+0x22a/0x7c0 [ 129.204180][ T8778] run_ksoftirqd+0x36/0x60 [ 129.208598][ T8778] smpboot_thread_fn+0x541/0xa50 [ 129.213561][ T8778] kthread+0x726/0x8b0 [ 129.217627][ T8778] ret_from_fork+0x51b/0xa40 [ 129.222195][ T8778] ret_from_fork_asm+0x1a/0x30 [ 129.226973][ T8778] Modules linked in: [ 129.230869][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.2.823 Tainted: G B syzkaller #0 PREEMPT(full) [ 129.230885][ T8778] Tainted: [B]=BAD_PAGE [ 129.230888][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 129.230894][ T8778] Call Trace: [ 129.230898][ T8778] [ 129.230903][ T8778] dump_stack_lvl+0xe8/0x150 [ 129.230918][ T8778] bad_page+0x17f/0x1c0 [ 129.230932][ T8778] __free_frozen_pages+0xcc2/0xd10 [ 129.230944][ T8778] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 129.230960][ T8778] bpf_xdp_adjust_tail+0x1d6/0x220 [ 129.230977][ T8778] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 129.230987][ T8778] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 129.231004][ T8778] do_xdp_generic+0xa6f/0x1280 [ 129.231014][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 129.231026][ T8778] ? __pfx_do_xdp_generic+0x10/0x10 [ 129.231039][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 129.231054][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 129.231063][ T8778] tun_get_user+0x247d/0x3dd0 [ 129.231076][ T8778] ? aa_file_perm+0x12d/0x1630 [ 129.231112][ T8778] ? aa_file_perm+0x440/0x1630 [ 129.231126][ T8778] ? __pfx_tun_get_user+0x10/0x10 [ 129.231136][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 129.231146][ T8778] ? __pfx___futex_wait+0x10/0x10 [ 129.231161][ T8778] ? ref_tracker_alloc+0x363/0x4d0 [ 129.231176][ T8778] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 129.231190][ T8778] ? tun_get+0x1c/0x2f0 [ 129.231200][ T8778] ? tun_get+0x1c/0x2f0 [ 129.231210][ T8778] ? tun_get+0x1c/0x2f0 [ 129.231219][ T8778] ? tun_get+0x1c/0x2f0 [ 129.231229][ T8778] tun_chr_write_iter+0x113/0x200 [ 129.231240][ T8778] vfs_write+0x61d/0xb90 [ 129.231250][ T8778] ? __pfx_vfs_write+0x10/0x10 [ 129.231261][ T8778] ? __fget_files+0x2a/0x420 [ 129.231274][ T8778] ksys_write+0x150/0x270 [ 129.231283][ T8778] ? __pfx_ksys_write+0x10/0x10 [ 129.231294][ T8778] do_syscall_64+0xe2/0xf80 [ 129.231308][ T8778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.231317][ T8778] ? trace_irq_disable+0x37/0x100 [ 129.231331][ T8778] ? clear_bhb_loop+0x60/0xb0 [ 129.231341][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.231351][ T8778] RIP: 0033:0x7fe2d395b58e [ 129.231363][ T8778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 129.231372][ T8778] RSP: 002b:00007fe2d4783fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.231383][ T8778] RAX: ffffffffffffffda RBX: 00007fe2d47846c0 RCX: 00007fe2d395b58e [ 129.231390][ T8778] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 129.231396][ T8778] RBP: 00007fe2d3a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 129.231402][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.231408][ T8778] R13: 00007fe2d3c16038 R14: 00007fe2d3c15fa0 R15: 00007fff7faf0788 [ 129.231418][ T8778] [ 129.231426][ T8778] BUG: Bad page state in process syz.2.823 pfn:54830 [ 129.514536][ T8778] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x54830 [ 129.524613][ T8778] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 129.531746][ T8778] raw: 00fff00000000000 dead000000000040 ffff8880216e8000 0000000000000000 [ 129.540358][ T8778] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 129.548955][ T8778] page dumped because: page_pool leak [ 129.554336][ T8778] page_owner tracks the page as allocated [ 129.560045][ T8778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8778, tgid 8773 (syz.2.823), ts 128085759203, free_ts 128073615764 [ 129.576987][ T8778] post_alloc_hook+0x228/0x280 [ 129.581747][ T8778] get_page_from_freelist+0x24dc/0x2580 [ 129.587320][ T8778] __alloc_frozen_pages_noprof+0x18d/0x380 [ 129.593156][ T8778] alloc_pages_bulk_noprof+0x558/0x700 [ 129.598615][ T8778] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 129.604719][ T8778] skb_pp_cow_data+0xb59/0x1410 [ 129.609571][ T8778] do_xdp_generic+0x715/0x1280 [ 129.614368][ T8778] tun_get_user+0x247d/0x3dd0 [ 129.619039][ T8778] tun_chr_write_iter+0x113/0x200 [ 129.624074][ T8778] vfs_write+0x61d/0xb90 [ 129.628310][ T8778] ksys_write+0x150/0x270 [ 129.632658][ T8778] do_syscall_64+0xe2/0xf80 [ 129.637160][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.643073][ T8778] page last free pid 23 tgid 23 stack trace: [ 129.649042][ T8778] __free_frozen_pages+0xbb0/0xd10 [ 129.654176][ T8778] tlb_remove_table_rcu+0x85/0x100 [ 129.659288][ T8778] rcu_core+0xc9e/0x1750 [ 129.663635][ T8778] handle_softirqs+0x22a/0x7c0 [ 129.668397][ T8778] run_ksoftirqd+0x36/0x60 [ 129.672830][ T8778] smpboot_thread_fn+0x541/0xa50 [ 129.677773][ T8778] kthread+0x726/0x8b0 [ 129.681835][ T8778] ret_from_fork+0x51b/0xa40 [ 129.686442][ T8778] ret_from_fork_asm+0x1a/0x30 [ 129.691212][ T8778] Modules linked in: [ 129.695127][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.2.823 Tainted: G B syzkaller #0 PREEMPT(full) [ 129.695151][ T8778] Tainted: [B]=BAD_PAGE [ 129.695156][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 129.695164][ T8778] Call Trace: [ 129.695170][ T8778] [ 129.695176][ T8778] dump_stack_lvl+0xe8/0x150 [ 129.695198][ T8778] bad_page+0x17f/0x1c0 [ 129.695219][ T8778] __free_frozen_pages+0xcc2/0xd10 [ 129.695239][ T8778] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 129.695265][ T8778] bpf_xdp_adjust_tail+0x1d6/0x220 [ 129.695289][ T8778] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 129.695304][ T8778] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 129.695333][ T8778] do_xdp_generic+0xa6f/0x1280 [ 129.695352][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 129.695375][ T8778] ? __pfx_do_xdp_generic+0x10/0x10 [ 129.695399][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 129.695425][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 129.695442][ T8778] tun_get_user+0x247d/0x3dd0 [ 129.695465][ T8778] ? aa_file_perm+0x12d/0x1630 [ 129.695488][ T8778] ? aa_file_perm+0x440/0x1630 [ 129.695510][ T8778] ? __pfx_tun_get_user+0x10/0x10 [ 129.695528][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 129.695546][ T8778] ? __pfx___futex_wait+0x10/0x10 [ 129.695570][ T8778] ? ref_tracker_alloc+0x363/0x4d0 [ 129.695594][ T8778] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 129.695617][ T8778] ? tun_get+0x1c/0x2f0 [ 129.695634][ T8778] ? tun_get+0x1c/0x2f0 [ 129.695652][ T8778] ? tun_get+0x1c/0x2f0 [ 129.695668][ T8778] ? tun_get+0x1c/0x2f0 [ 129.695686][ T8778] tun_chr_write_iter+0x113/0x200 [ 129.695705][ T8778] vfs_write+0x61d/0xb90 [ 129.695724][ T8778] ? __pfx_vfs_write+0x10/0x10 [ 129.695744][ T8778] ? __fget_files+0x2a/0x420 [ 129.695767][ T8778] ksys_write+0x150/0x270 [ 129.695783][ T8778] ? __pfx_ksys_write+0x10/0x10 [ 129.695804][ T8778] do_syscall_64+0xe2/0xf80 [ 129.695825][ T8778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.695841][ T8778] ? trace_irq_disable+0x37/0x100 [ 129.695862][ T8778] ? clear_bhb_loop+0x60/0xb0 [ 129.695880][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.695897][ T8778] RIP: 0033:0x7fe2d395b58e [ 129.695912][ T8778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 129.695926][ T8778] RSP: 002b:00007fe2d4783fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.695944][ T8778] RAX: ffffffffffffffda RBX: 00007fe2d47846c0 RCX: 00007fe2d395b58e [ 129.695957][ T8778] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 129.695968][ T8778] RBP: 00007fe2d3a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 129.695978][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.695988][ T8778] R13: 00007fe2d3c16038 R14: 00007fe2d3c15fa0 R15: 00007fff7faf0788 [ 129.696005][ T8778] [ 129.696016][ T8778] BUG: Bad page state in process syz.2.823 pfn:7bb5a [ 129.979285][ T8778] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807bb5a200 pfn:0x7bb5a [ 129.989378][ T8778] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 129.996527][ T8778] raw: 00fff00000000000 dead000000000040 ffff8880216e8000 0000000000000000 [ 130.005144][ T8778] raw: ffff88807bb5a200 0000000000000001 00000000ffffffff 0000000000000000 [ 130.013747][ T8778] page dumped because: page_pool leak [ 130.019117][ T8778] page_owner tracks the page as allocated [ 130.024860][ T8778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8778, tgid 8773 (syz.2.823), ts 128085742400, free_ts 128073639895 [ 130.041808][ T8778] post_alloc_hook+0x228/0x280 [ 130.046596][ T8778] get_page_from_freelist+0x24dc/0x2580 [ 130.052179][ T8778] __alloc_frozen_pages_noprof+0x18d/0x380 [ 130.058016][ T8778] alloc_pages_bulk_noprof+0x558/0x700 [ 130.063500][ T8778] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 130.069556][ T8778] skb_pp_cow_data+0xb59/0x1410 [ 130.074430][ T8778] do_xdp_generic+0x715/0x1280 [ 130.079197][ T8778] tun_get_user+0x247d/0x3dd0 [ 130.083898][ T8778] tun_chr_write_iter+0x113/0x200 [ 130.088929][ T8778] vfs_write+0x61d/0xb90 [ 130.093200][ T8778] ksys_write+0x150/0x270 [ 130.097530][ T8778] do_syscall_64+0xe2/0xf80 [ 130.102031][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.107951][ T8778] page last free pid 23 tgid 23 stack trace: [ 130.113970][ T8778] __free_frozen_pages+0xbb0/0xd10 [ 130.119069][ T8778] tlb_remove_table_rcu+0x85/0x100 [ 130.124210][ T8778] rcu_core+0xc9e/0x1750 [ 130.128453][ T8778] handle_softirqs+0x22a/0x7c0 [ 130.133246][ T8778] run_ksoftirqd+0x36/0x60 [ 130.137663][ T8778] smpboot_thread_fn+0x541/0xa50 [ 130.142637][ T8778] kthread+0x726/0x8b0 [ 130.146704][ T8778] ret_from_fork+0x51b/0xa40 [ 130.151291][ T8778] ret_from_fork_asm+0x1a/0x30 [ 130.156086][ T8778] Modules linked in: [ 130.159980][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.2.823 Tainted: G B syzkaller #0 PREEMPT(full) [ 130.159997][ T8778] Tainted: [B]=BAD_PAGE [ 130.160000][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 130.160007][ T8778] Call Trace: [ 130.160012][ T8778] [ 130.160021][ T8778] dump_stack_lvl+0xe8/0x150 [ 130.160037][ T8778] bad_page+0x17f/0x1c0 [ 130.160052][ T8778] __free_frozen_pages+0xcc2/0xd10 [ 130.160063][ T8778] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 130.160080][ T8778] bpf_xdp_adjust_tail+0x1d6/0x220 [ 130.160096][ T8778] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 130.160106][ T8778] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 130.160124][ T8778] do_xdp_generic+0xa6f/0x1280 [ 130.160134][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 130.160147][ T8778] ? __pfx_do_xdp_generic+0x10/0x10 [ 130.160167][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 130.160192][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 130.160209][ T8778] tun_get_user+0x247d/0x3dd0 [ 130.160226][ T8778] ? aa_file_perm+0x12d/0x1630 [ 130.160241][ T8778] ? aa_file_perm+0x440/0x1630 [ 130.160255][ T8778] ? __pfx_tun_get_user+0x10/0x10 [ 130.160266][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 130.160278][ T8778] ? __pfx___futex_wait+0x10/0x10 [ 130.160292][ T8778] ? ref_tracker_alloc+0x363/0x4d0 [ 130.160307][ T8778] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 130.160322][ T8778] ? tun_get+0x1c/0x2f0 [ 130.160331][ T8778] ? tun_get+0x1c/0x2f0 [ 130.160342][ T8778] ? tun_get+0x1c/0x2f0 [ 130.160351][ T8778] ? tun_get+0x1c/0x2f0 [ 130.160361][ T8778] tun_chr_write_iter+0x113/0x200 [ 130.160372][ T8778] vfs_write+0x61d/0xb90 [ 130.160382][ T8778] ? __pfx_vfs_write+0x10/0x10 [ 130.160393][ T8778] ? __fget_files+0x2a/0x420 [ 130.160407][ T8778] ksys_write+0x150/0x270 [ 130.160416][ T8778] ? __pfx_ksys_write+0x10/0x10 [ 130.160427][ T8778] do_syscall_64+0xe2/0xf80 [ 130.160441][ T8778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.160450][ T8778] ? trace_irq_disable+0x37/0x100 [ 130.160464][ T8778] ? clear_bhb_loop+0x60/0xb0 [ 130.160475][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.160484][ T8778] RIP: 0033:0x7fe2d395b58e [ 130.160494][ T8778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.160502][ T8778] RSP: 002b:00007fe2d4783fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.160513][ T8778] RAX: ffffffffffffffda RBX: 00007fe2d47846c0 RCX: 00007fe2d395b58e [ 130.160527][ T8778] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 130.160533][ T8778] RBP: 00007fe2d3a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 130.160539][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.160545][ T8778] R13: 00007fe2d3c16038 R14: 00007fe2d3c15fa0 R15: 00007fff7faf0788 [ 130.160556][ T8778] [ 130.160564][ T8778] BUG: Bad page state in process syz.2.823 pfn:4b339 [ 130.443710][ T8778] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804b339000 pfn:0x4b339 [ 130.453782][ T8778] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 130.460896][ T8778] raw: 00fff00000000000 dead000000000040 ffff8880216e8000 0000000000000000 [ 130.469502][ T8778] raw: ffff88804b339000 0000000000000001 00000000ffffffff 0000000000000000 [ 130.478107][ T8778] page dumped because: page_pool leak [ 130.483496][ T8778] page_owner tracks the page as allocated [ 130.489206][ T8778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8778, tgid 8773 (syz.2.823), ts 128085725676, free_ts 128073664436 [ 130.506153][ T8778] post_alloc_hook+0x228/0x280 [ 130.510922][ T8778] get_page_from_freelist+0x24dc/0x2580 [ 130.516503][ T8778] __alloc_frozen_pages_noprof+0x18d/0x380 [ 130.522310][ T8778] alloc_pages_bulk_noprof+0x558/0x700 [ 130.527791][ T8778] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 130.533888][ T8778] skb_pp_cow_data+0xb59/0x1410 [ 130.538729][ T8778] do_xdp_generic+0x715/0x1280 [ 130.543535][ T8778] tun_get_user+0x247d/0x3dd0 [ 130.548232][ T8778] tun_chr_write_iter+0x113/0x200 [ 130.553299][ T8778] vfs_write+0x61d/0xb90 [ 130.557540][ T8778] ksys_write+0x150/0x270 [ 130.561866][ T8778] do_syscall_64+0xe2/0xf80 [ 130.566404][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.572297][ T8778] page last free pid 23 tgid 23 stack trace: [ 130.578302][ T8778] __free_frozen_pages+0xbb0/0xd10 [ 130.583432][ T8778] tlb_remove_table_rcu+0x85/0x100 [ 130.588555][ T8778] rcu_core+0xc9e/0x1750 [ 130.592811][ T8778] handle_softirqs+0x22a/0x7c0 [ 130.597572][ T8778] run_ksoftirqd+0x36/0x60 [ 130.601977][ T8778] smpboot_thread_fn+0x541/0xa50 [ 130.606936][ T8778] kthread+0x726/0x8b0 [ 130.611009][ T8778] ret_from_fork+0x51b/0xa40 [ 130.615615][ T8778] ret_from_fork_asm+0x1a/0x30 [ 130.620385][ T8778] Modules linked in: [ 130.624299][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.2.823 Tainted: G B syzkaller #0 PREEMPT(full) [ 130.624324][ T8778] Tainted: [B]=BAD_PAGE [ 130.624330][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 130.624340][ T8778] Call Trace: [ 130.624347][ T8778] [ 130.624354][ T8778] dump_stack_lvl+0xe8/0x150 [ 130.624379][ T8778] bad_page+0x17f/0x1c0 [ 130.624402][ T8778] __free_frozen_pages+0xcc2/0xd10 [ 130.624419][ T8778] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 130.624445][ T8778] bpf_xdp_adjust_tail+0x1d6/0x220 [ 130.624469][ T8778] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 130.624484][ T8778] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 130.624512][ T8778] do_xdp_generic+0xa6f/0x1280 [ 130.624530][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 130.624551][ T8778] ? __pfx_do_xdp_generic+0x10/0x10 [ 130.624574][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 130.624597][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 130.624612][ T8778] tun_get_user+0x247d/0x3dd0 [ 130.624633][ T8778] ? aa_file_perm+0x12d/0x1630 [ 130.624657][ T8778] ? aa_file_perm+0x440/0x1630 [ 130.624679][ T8778] ? __pfx_tun_get_user+0x10/0x10 [ 130.624697][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 130.624715][ T8778] ? __pfx___futex_wait+0x10/0x10 [ 130.624739][ T8778] ? ref_tracker_alloc+0x363/0x4d0 [ 130.624763][ T8778] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 130.624787][ T8778] ? tun_get+0x1c/0x2f0 [ 130.624804][ T8778] ? tun_get+0x1c/0x2f0 [ 130.624822][ T8778] ? tun_get+0x1c/0x2f0 [ 130.624839][ T8778] ? tun_get+0x1c/0x2f0 [ 130.624857][ T8778] tun_chr_write_iter+0x113/0x200 [ 130.624876][ T8778] vfs_write+0x61d/0xb90 [ 130.624895][ T8778] ? __pfx_vfs_write+0x10/0x10 [ 130.624915][ T8778] ? __fget_files+0x2a/0x420 [ 130.624937][ T8778] ksys_write+0x150/0x270 [ 130.624954][ T8778] ? __pfx_ksys_write+0x10/0x10 [ 130.624984][ T8778] do_syscall_64+0xe2/0xf80 [ 130.625006][ T8778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.625023][ T8778] ? trace_irq_disable+0x37/0x100 [ 130.625045][ T8778] ? clear_bhb_loop+0x60/0xb0 [ 130.625064][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.625082][ T8778] RIP: 0033:0x7fe2d395b58e [ 130.625097][ T8778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.625110][ T8778] RSP: 002b:00007fe2d4783fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.625129][ T8778] RAX: ffffffffffffffda RBX: 00007fe2d47846c0 RCX: 00007fe2d395b58e [ 130.625147][ T8778] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 130.625158][ T8778] RBP: 00007fe2d3a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 130.625168][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.625178][ T8778] R13: 00007fe2d3c16038 R14: 00007fe2d3c15fa0 R15: 00007fff7faf0788 [ 130.625198][ T8778] [ 130.625209][ T8778] BUG: Bad page state in process syz.2.823 pfn:4977a [ 130.908425][ T8778] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804977adc0 pfn:0x4977a [ 130.918501][ T8778] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 130.925632][ T8778] raw: 00fff00000000000 dead000000000040 ffff8880216e8000 0000000000000000 [ 130.934235][ T8778] raw: ffff88804977adc0 0000000000000001 00000000ffffffff 0000000000000000 [ 130.942821][ T8778] page dumped because: page_pool leak [ 130.948197][ T8778] page_owner tracks the page as allocated [ 130.953946][ T8778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8778, tgid 8773 (syz.2.823), ts 128085708915, free_ts 128073690123 [ 130.970912][ T8778] post_alloc_hook+0x228/0x280 [ 130.975701][ T8778] get_page_from_freelist+0x24dc/0x2580 [ 130.981249][ T8778] __alloc_frozen_pages_noprof+0x18d/0x380 [ 130.987076][ T8778] alloc_pages_bulk_noprof+0x558/0x700 [ 130.992561][ T8778] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 130.998628][ T8778] skb_pp_cow_data+0xb59/0x1410 [ 131.003504][ T8778] do_xdp_generic+0x715/0x1280 [ 131.008262][ T8778] tun_get_user+0x247d/0x3dd0 [ 131.012959][ T8778] tun_chr_write_iter+0x113/0x200 [ 131.017993][ T8778] vfs_write+0x61d/0xb90 [ 131.022236][ T8778] ksys_write+0x150/0x270 [ 131.026589][ T8778] do_syscall_64+0xe2/0xf80 [ 131.031098][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.037003][ T8778] page last free pid 23 tgid 23 stack trace: [ 131.042990][ T8778] __free_frozen_pages+0xbb0/0xd10 [ 131.048103][ T8778] tlb_remove_table_rcu+0x85/0x100 [ 131.053225][ T8778] rcu_core+0xc9e/0x1750 [ 131.057475][ T8778] handle_softirqs+0x22a/0x7c0 [ 131.062221][ T8778] run_ksoftirqd+0x36/0x60 [ 131.066652][ T8778] smpboot_thread_fn+0x541/0xa50 [ 131.071590][ T8778] kthread+0x726/0x8b0 [ 131.075680][ T8778] ret_from_fork+0x51b/0xa40 [ 131.080267][ T8778] ret_from_fork_asm+0x1a/0x30 [ 131.085056][ T8778] Modules linked in: [ 131.088958][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.2.823 Tainted: G B syzkaller #0 PREEMPT(full) [ 131.088974][ T8778] Tainted: [B]=BAD_PAGE [ 131.088977][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 131.088984][ T8778] Call Trace: [ 131.088988][ T8778] [ 131.088992][ T8778] dump_stack_lvl+0xe8/0x150 [ 131.089008][ T8778] bad_page+0x17f/0x1c0 [ 131.089022][ T8778] __free_frozen_pages+0xcc2/0xd10 [ 131.089034][ T8778] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 131.089052][ T8778] bpf_xdp_adjust_tail+0x1d6/0x220 [ 131.089068][ T8778] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 131.089077][ T8778] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 131.089095][ T8778] do_xdp_generic+0xa6f/0x1280 [ 131.089105][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 131.089118][ T8778] ? __pfx_do_xdp_generic+0x10/0x10 [ 131.089131][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 131.089145][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 131.089155][ T8778] tun_get_user+0x247d/0x3dd0 [ 131.089172][ T8778] ? aa_file_perm+0x12d/0x1630 [ 131.089188][ T8778] ? aa_file_perm+0x440/0x1630 [ 131.089201][ T8778] ? __pfx_tun_get_user+0x10/0x10 [ 131.089212][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 131.089222][ T8778] ? __pfx___futex_wait+0x10/0x10 [ 131.089237][ T8778] ? ref_tracker_alloc+0x363/0x4d0 [ 131.089252][ T8778] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 131.089266][ T8778] ? tun_get+0x1c/0x2f0 [ 131.089275][ T8778] ? tun_get+0x1c/0x2f0 [ 131.089286][ T8778] ? tun_get+0x1c/0x2f0 [ 131.089295][ T8778] ? tun_get+0x1c/0x2f0 [ 131.089305][ T8778] tun_chr_write_iter+0x113/0x200 [ 131.089316][ T8778] vfs_write+0x61d/0xb90 [ 131.089327][ T8778] ? __pfx_vfs_write+0x10/0x10 [ 131.089337][ T8778] ? __fget_files+0x2a/0x420 [ 131.089351][ T8778] ksys_write+0x150/0x270 [ 131.089360][ T8778] ? __pfx_ksys_write+0x10/0x10 [ 131.089371][ T8778] do_syscall_64+0xe2/0xf80 [ 131.089385][ T8778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.089395][ T8778] ? trace_irq_disable+0x37/0x100 [ 131.089408][ T8778] ? clear_bhb_loop+0x60/0xb0 [ 131.089419][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.089428][ T8778] RIP: 0033:0x7fe2d395b58e [ 131.089437][ T8778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.089447][ T8778] RSP: 002b:00007fe2d4783fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.089465][ T8778] RAX: ffffffffffffffda RBX: 00007fe2d47846c0 RCX: 00007fe2d395b58e [ 131.089478][ T8778] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 131.089488][ T8778] RBP: 00007fe2d3a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 131.089499][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.089509][ T8778] R13: 00007fe2d3c16038 R14: 00007fe2d3c15fa0 R15: 00007fff7faf0788 [ 131.089521][ T8778] [ 131.089530][ T8778] BUG: Bad page state in process syz.2.823 pfn:79501 [ 131.372850][ T8778] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x79501 [ 131.382932][ T8778] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.390075][ T8778] raw: 00fff00000000000 dead000000000040 ffff8880216e8000 0000000000000000 [ 131.398685][ T8778] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 131.407287][ T8778] page dumped because: page_pool leak [ 131.412676][ T8778] page_owner tracks the page as allocated [ 131.418381][ T8778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8778, tgid 8773 (syz.2.823), ts 128085692438, free_ts 128073714038 [ 131.435343][ T8778] post_alloc_hook+0x228/0x280 [ 131.440117][ T8778] get_page_from_freelist+0x24dc/0x2580 [ 131.445684][ T8778] __alloc_frozen_pages_noprof+0x18d/0x380 [ 131.451489][ T8778] alloc_pages_bulk_noprof+0x558/0x700 [ 131.456979][ T8778] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 131.463057][ T8778] skb_pp_cow_data+0xb59/0x1410 [ 131.467898][ T8778] do_xdp_generic+0x715/0x1280 [ 131.472671][ T8778] tun_get_user+0x247d/0x3dd0 [ 131.477345][ T8778] tun_chr_write_iter+0x113/0x200 [ 131.482355][ T8778] vfs_write+0x61d/0xb90 [ 131.486629][ T8778] ksys_write+0x150/0x270 [ 131.490939][ T8778] do_syscall_64+0xe2/0xf80 [ 131.495464][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.501365][ T8778] page last free pid 23 tgid 23 stack trace: [ 131.507369][ T8778] __free_frozen_pages+0xbb0/0xd10 [ 131.512515][ T8778] tlb_remove_table_rcu+0x85/0x100 [ 131.517631][ T8778] rcu_core+0xc9e/0x1750 [ 131.521859][ T8778] handle_softirqs+0x22a/0x7c0 [ 131.526639][ T8778] run_ksoftirqd+0x36/0x60 [ 131.531055][ T8778] smpboot_thread_fn+0x541/0xa50 [ 131.536116][ T8778] kthread+0x726/0x8b0 [ 131.540187][ T8778] ret_from_fork+0x51b/0xa40 [ 131.544792][ T8778] ret_from_fork_asm+0x1a/0x30 [ 131.549571][ T8778] Modules linked in: [ 131.553494][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.2.823 Tainted: G B syzkaller #0 PREEMPT(full) [ 131.553517][ T8778] Tainted: [B]=BAD_PAGE [ 131.553521][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 131.553529][ T8778] Call Trace: [ 131.553535][ T8778] [ 131.553541][ T8778] dump_stack_lvl+0xe8/0x150 [ 131.553564][ T8778] bad_page+0x17f/0x1c0 [ 131.553584][ T8778] __free_frozen_pages+0xcc2/0xd10 [ 131.553603][ T8778] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 131.553629][ T8778] bpf_xdp_adjust_tail+0x1d6/0x220 [ 131.553657][ T8778] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 131.553673][ T8778] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 131.553705][ T8778] do_xdp_generic+0xa6f/0x1280 [ 131.553724][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 131.553746][ T8778] ? __pfx_do_xdp_generic+0x10/0x10 [ 131.553769][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 131.553794][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 131.553811][ T8778] tun_get_user+0x247d/0x3dd0 [ 131.553833][ T8778] ? aa_file_perm+0x12d/0x1630 [ 131.553866][ T8778] ? aa_file_perm+0x440/0x1630 [ 131.553888][ T8778] ? __pfx_tun_get_user+0x10/0x10 [ 131.553905][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 131.553923][ T8778] ? __pfx___futex_wait+0x10/0x10 [ 131.553947][ T8778] ? ref_tracker_alloc+0x363/0x4d0 [ 131.553971][ T8778] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 131.553994][ T8778] ? tun_get+0x1c/0x2f0 [ 131.554010][ T8778] ? tun_get+0x1c/0x2f0 [ 131.554029][ T8778] ? tun_get+0x1c/0x2f0 [ 131.554045][ T8778] ? tun_get+0x1c/0x2f0 [ 131.554063][ T8778] tun_chr_write_iter+0x113/0x200 [ 131.554079][ T8778] vfs_write+0x61d/0xb90 [ 131.554097][ T8778] ? __pfx_vfs_write+0x10/0x10 [ 131.554115][ T8778] ? __fget_files+0x2a/0x420 [ 131.554139][ T8778] ksys_write+0x150/0x270 [ 131.554155][ T8778] ? __pfx_ksys_write+0x10/0x10 [ 131.554176][ T8778] do_syscall_64+0xe2/0xf80 [ 131.554198][ T8778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.554214][ T8778] ? trace_irq_disable+0x37/0x100 [ 131.554235][ T8778] ? clear_bhb_loop+0x60/0xb0 [ 131.554254][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.554271][ T8778] RIP: 0033:0x7fe2d395b58e [ 131.554287][ T8778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.554301][ T8778] RSP: 002b:00007fe2d4783fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.554319][ T8778] RAX: ffffffffffffffda RBX: 00007fe2d47846c0 RCX: 00007fe2d395b58e [ 131.554332][ T8778] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 131.554343][ T8778] RBP: 00007fe2d3a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 131.554354][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.554363][ T8778] R13: 00007fe2d3c16038 R14: 00007fe2d3c15fa0 R15: 00007fff7faf0788 [ 131.554383][ T8778] [ 131.554394][ T8778] BUG: Bad page state in process syz.2.823 pfn:1ef65 [ 131.837616][ T8778] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801ef65200 pfn:0x1ef65 [ 131.847741][ T8778] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.854887][ T8778] raw: 00fff00000000000 dead000000000040 ffff8880216e8000 0000000000000000 [ 131.863506][ T8778] raw: ffff88801ef65200 0000000000000001 00000000ffffffff 0000000000000000 [ 131.872093][ T8778] page dumped because: page_pool leak [ 131.877499][ T8778] page_owner tracks the page as allocated [ 131.883225][ T8778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8778, tgid 8773 (syz.2.823), ts 128085676366, free_ts 128073738984 [ 131.900182][ T8778] post_alloc_hook+0x228/0x280 [ 131.904971][ T8778] get_page_from_freelist+0x24dc/0x2580 [ 131.910505][ T8778] __alloc_frozen_pages_noprof+0x18d/0x380 [ 131.916335][ T8778] alloc_pages_bulk_noprof+0x558/0x700 [ 131.921793][ T8778] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 131.927884][ T8778] skb_pp_cow_data+0xb59/0x1410 [ 131.932753][ T8778] do_xdp_generic+0x715/0x1280 [ 131.937504][ T8778] tun_get_user+0x247d/0x3dd0 [ 131.942162][ T8778] tun_chr_write_iter+0x113/0x200 [ 131.947200][ T8778] vfs_write+0x61d/0xb90 [ 131.951440][ T8778] ksys_write+0x150/0x270 [ 131.955791][ T8778] do_syscall_64+0xe2/0xf80 [ 131.960305][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.966228][ T8778] page last free pid 23 tgid 23 stack trace: [ 131.972196][ T8778] __free_frozen_pages+0xbb0/0xd10 [ 131.977337][ T8778] tlb_remove_table_rcu+0x85/0x100 [ 131.982476][ T8778] rcu_core+0xc9e/0x1750 [ 131.986721][ T8778] handle_softirqs+0x22a/0x7c0 [ 131.991483][ T8778] run_ksoftirqd+0x36/0x60 [ 131.995932][ T8778] smpboot_thread_fn+0x541/0xa50 [ 132.000868][ T8778] kthread+0x726/0x8b0 [ 132.004985][ T8778] ret_from_fork+0x51b/0xa40 [ 132.009567][ T8778] ret_from_fork_asm+0x1a/0x30 [ 132.014353][ T8778] Modules linked in: [ 132.018247][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.2.823 Tainted: G B syzkaller #0 PREEMPT(full) [ 132.018262][ T8778] Tainted: [B]=BAD_PAGE [ 132.018266][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 132.018273][ T8778] Call Trace: [ 132.018277][ T8778] [ 132.018281][ T8778] dump_stack_lvl+0xe8/0x150 [ 132.018298][ T8778] bad_page+0x17f/0x1c0 [ 132.018313][ T8778] __free_frozen_pages+0xcc2/0xd10 [ 132.018324][ T8778] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 132.018341][ T8778] bpf_xdp_adjust_tail+0x1d6/0x220 [ 132.018357][ T8778] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 132.018367][ T8778] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 132.018384][ T8778] do_xdp_generic+0xa6f/0x1280 [ 132.018395][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 132.018407][ T8778] ? __pfx_do_xdp_generic+0x10/0x10 [ 132.018420][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 132.018434][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 132.018444][ T8778] tun_get_user+0x247d/0x3dd0 [ 132.018457][ T8778] ? aa_file_perm+0x12d/0x1630 [ 132.018472][ T8778] ? aa_file_perm+0x440/0x1630 [ 132.018485][ T8778] ? __pfx_tun_get_user+0x10/0x10 [ 132.018496][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 132.018506][ T8778] ? __pfx___futex_wait+0x10/0x10 [ 132.018521][ T8778] ? ref_tracker_alloc+0x363/0x4d0 [ 132.018536][ T8778] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 132.018554][ T8778] ? tun_get+0x1c/0x2f0 [ 132.018564][ T8778] ? tun_get+0x1c/0x2f0 [ 132.018575][ T8778] ? tun_get+0x1c/0x2f0 [ 132.018584][ T8778] ? tun_get+0x1c/0x2f0 [ 132.018594][ T8778] tun_chr_write_iter+0x113/0x200 [ 132.018605][ T8778] vfs_write+0x61d/0xb90 [ 132.018616][ T8778] ? __pfx_vfs_write+0x10/0x10 [ 132.018626][ T8778] ? __fget_files+0x2a/0x420 [ 132.018640][ T8778] ksys_write+0x150/0x270 [ 132.018650][ T8778] ? __pfx_ksys_write+0x10/0x10 [ 132.018660][ T8778] do_syscall_64+0xe2/0xf80 [ 132.018678][ T8778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.018690][ T8778] ? trace_irq_disable+0x37/0x100 [ 132.018703][ T8778] ? clear_bhb_loop+0x60/0xb0 [ 132.018714][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.018724][ T8778] RIP: 0033:0x7fe2d395b58e [ 132.018733][ T8778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.018741][ T8778] RSP: 002b:00007fe2d4783fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.018753][ T8778] RAX: ffffffffffffffda RBX: 00007fe2d47846c0 RCX: 00007fe2d395b58e [ 132.018760][ T8778] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 132.018766][ T8778] RBP: 00007fe2d3a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 132.018772][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.018778][ T8778] R13: 00007fe2d3c16038 R14: 00007fe2d3c15fa0 R15: 00007fff7faf0788 [ 132.018788][ T8778] [ 132.018796][ T8778] BUG: Bad page state in process syz.2.823 pfn:54b56 [ 132.301748][ T8778] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54b56 [ 132.310542][ T8778] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.317693][ T8778] raw: 00fff00000000000 dead000000000040 ffff8880216e8000 0000000000000000 [ 132.326305][ T8778] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 132.334900][ T8778] page dumped because: page_pool leak [ 132.340251][ T8778] page_owner tracks the page as allocated [ 132.345975][ T8778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8778, tgid 8773 (syz.2.823), ts 128085660983, free_ts 128073763627 [ 132.362920][ T8778] post_alloc_hook+0x228/0x280 [ 132.367671][ T8778] get_page_from_freelist+0x24dc/0x2580 [ 132.373229][ T8778] __alloc_frozen_pages_noprof+0x18d/0x380 [ 132.379031][ T8778] alloc_pages_bulk_noprof+0x558/0x700 [ 132.384501][ T8778] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 132.390565][ T8778] skb_pp_cow_data+0xb59/0x1410 [ 132.395432][ T8778] do_xdp_generic+0x715/0x1280 [ 132.400192][ T8778] tun_get_user+0x247d/0x3dd0 [ 132.404906][ T8778] tun_chr_write_iter+0x113/0x200 [ 132.409928][ T8778] vfs_write+0x61d/0xb90 [ 132.414188][ T8778] ksys_write+0x150/0x270 [ 132.418516][ T8778] do_syscall_64+0xe2/0xf80 [ 132.423059][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.428946][ T8778] page last free pid 23 tgid 23 stack trace: [ 132.434931][ T8778] __free_frozen_pages+0xbb0/0xd10 [ 132.440045][ T8778] tlb_remove_table_rcu+0x85/0x100 [ 132.445173][ T8778] rcu_core+0xc9e/0x1750 [ 132.449472][ T8778] handle_softirqs+0x22a/0x7c0 [ 132.454250][ T8778] run_ksoftirqd+0x36/0x60 [ 132.458663][ T8778] smpboot_thread_fn+0x541/0xa50 [ 132.463638][ T8778] kthread+0x726/0x8b0 [ 132.467756][ T8778] ret_from_fork+0x51b/0xa40 [ 132.472330][ T8778] ret_from_fork_asm+0x1a/0x30 [ 132.477116][ T8778] Modules linked in: [ 132.481020][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.2.823 Tainted: G B syzkaller #0 PREEMPT(full) [ 132.481037][ T8778] Tainted: [B]=BAD_PAGE [ 132.481040][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 132.481047][ T8778] Call Trace: [ 132.481052][ T8778] [ 132.481056][ T8778] dump_stack_lvl+0xe8/0x150 [ 132.481073][ T8778] bad_page+0x17f/0x1c0 [ 132.481087][ T8778] __free_frozen_pages+0xcc2/0xd10 [ 132.481099][ T8778] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 132.481115][ T8778] bpf_xdp_adjust_tail+0x1d6/0x220 [ 132.481132][ T8778] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 132.481141][ T8778] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 132.481159][ T8778] do_xdp_generic+0xa6f/0x1280 [ 132.481169][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 132.481181][ T8778] ? __pfx_do_xdp_generic+0x10/0x10 [ 132.481195][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 132.481209][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 132.481218][ T8778] tun_get_user+0x247d/0x3dd0 [ 132.481231][ T8778] ? aa_file_perm+0x12d/0x1630 [ 132.481246][ T8778] ? aa_file_perm+0x440/0x1630 [ 132.481260][ T8778] ? __pfx_tun_get_user+0x10/0x10 [ 132.481270][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 132.481281][ T8778] ? __pfx___futex_wait+0x10/0x10 [ 132.481295][ T8778] ? ref_tracker_alloc+0x363/0x4d0 [ 132.481310][ T8778] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 132.481324][ T8778] ? tun_get+0x1c/0x2f0 [ 132.481333][ T8778] ? tun_get+0x1c/0x2f0 [ 132.481344][ T8778] ? tun_get+0x1c/0x2f0 [ 132.481353][ T8778] ? tun_get+0x1c/0x2f0 [ 132.481363][ T8778] tun_chr_write_iter+0x113/0x200 [ 132.481374][ T8778] vfs_write+0x61d/0xb90 [ 132.481385][ T8778] ? __pfx_vfs_write+0x10/0x10 [ 132.481396][ T8778] ? __fget_files+0x2a/0x420 [ 132.481409][ T8778] ksys_write+0x150/0x270 [ 132.481419][ T8778] ? __pfx_ksys_write+0x10/0x10 [ 132.481430][ T8778] do_syscall_64+0xe2/0xf80 [ 132.481444][ T8778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.481453][ T8778] ? trace_irq_disable+0x37/0x100 [ 132.481467][ T8778] ? clear_bhb_loop+0x60/0xb0 [ 132.481477][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.481487][ T8778] RIP: 0033:0x7fe2d395b58e [ 132.481496][ T8778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.481504][ T8778] RSP: 002b:00007fe2d4783fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.481515][ T8778] RAX: ffffffffffffffda RBX: 00007fe2d47846c0 RCX: 00007fe2d395b58e [ 132.481523][ T8778] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 132.481529][ T8778] RBP: 00007fe2d3a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 132.481535][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.481540][ T8778] R13: 00007fe2d3c16038 R14: 00007fe2d3c15fa0 R15: 00007fff7faf0788 [ 132.481551][ T8778] [ 132.481559][ T8778] BUG: Bad page state in process syz.2.823 pfn:24dfa [ 132.764749][ T8778] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024dfa100 pfn:0x24dfa [ 132.774821][ T8778] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.781936][ T8778] raw: 00fff00000000000 dead000000000040 ffff8880216e8000 0000000000000000 [ 132.790540][ T8778] raw: ffff888024dfa100 0000000000000001 00000000ffffffff 0000000000000000 [ 132.799145][ T8778] page dumped because: page_pool leak [ 132.804522][ T8778] page_owner tracks the page as allocated [ 132.810229][ T8778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8778, tgid 8773 (syz.2.823), ts 128085644039, free_ts 128073778218 [ 132.827172][ T8778] post_alloc_hook+0x228/0x280 [ 132.831943][ T8778] get_page_from_freelist+0x24dc/0x2580 [ 132.837507][ T8778] __alloc_frozen_pages_noprof+0x18d/0x380 [ 132.843335][ T8778] alloc_pages_bulk_noprof+0x558/0x700 [ 132.848809][ T8778] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 132.854889][ T8778] skb_pp_cow_data+0xb59/0x1410 [ 132.859746][ T8778] do_xdp_generic+0x715/0x1280 [ 132.864523][ T8778] tun_get_user+0x247d/0x3dd0 [ 132.869199][ T8778] tun_chr_write_iter+0x113/0x200 [ 132.874244][ T8778] vfs_write+0x61d/0xb90 [ 132.878480][ T8778] ksys_write+0x150/0x270 [ 132.882827][ T8778] do_syscall_64+0xe2/0xf80 [ 132.887327][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.893240][ T8778] page last free pid 23 tgid 23 stack trace: [ 132.899207][ T8778] __free_frozen_pages+0xbb0/0xd10 [ 132.904334][ T8778] tlb_remove_table_rcu+0x85/0x100 [ 132.909445][ T8778] rcu_core+0xc9e/0x1750 [ 132.913715][ T8778] handle_softirqs+0x22a/0x7c0 [ 132.918470][ T8778] run_ksoftirqd+0x36/0x60 [ 132.922907][ T8778] smpboot_thread_fn+0x541/0xa50 [ 132.927845][ T8778] kthread+0x726/0x8b0 [ 132.931990][ T8778] ret_from_fork+0x51b/0xa40 [ 132.936627][ T8778] ret_from_fork_asm+0x1a/0x30 [ 132.941396][ T8778] Modules linked in: [ 132.945306][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.2.823 Tainted: G B syzkaller #0 PREEMPT(full) [ 132.945329][ T8778] Tainted: [B]=BAD_PAGE [ 132.945333][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 132.945342][ T8778] Call Trace: [ 132.945347][ T8778] [ 132.945354][ T8778] dump_stack_lvl+0xe8/0x150 [ 132.945376][ T8778] bad_page+0x17f/0x1c0 [ 132.945396][ T8778] __free_frozen_pages+0xcc2/0xd10 [ 132.945416][ T8778] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 132.945443][ T8778] bpf_xdp_adjust_tail+0x1d6/0x220 [ 132.945470][ T8778] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 132.945486][ T8778] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 132.945518][ T8778] do_xdp_generic+0xa6f/0x1280 [ 132.945537][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 132.945558][ T8778] ? __pfx_do_xdp_generic+0x10/0x10 [ 132.945579][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 132.945603][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 132.945620][ T8778] tun_get_user+0x247d/0x3dd0 [ 132.945642][ T8778] ? aa_file_perm+0x12d/0x1630 [ 132.945667][ T8778] ? aa_file_perm+0x440/0x1630 [ 132.945687][ T8778] ? __pfx_tun_get_user+0x10/0x10 [ 132.945705][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 132.945723][ T8778] ? __pfx___futex_wait+0x10/0x10 [ 132.945748][ T8778] ? ref_tracker_alloc+0x363/0x4d0 [ 132.945772][ T8778] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 132.945795][ T8778] ? tun_get+0x1c/0x2f0 [ 132.945813][ T8778] ? tun_get+0x1c/0x2f0 [ 132.945831][ T8778] ? tun_get+0x1c/0x2f0 [ 132.945847][ T8778] ? tun_get+0x1c/0x2f0 [ 132.945865][ T8778] tun_chr_write_iter+0x113/0x200 [ 132.945884][ T8778] vfs_write+0x61d/0xb90 [ 132.945904][ T8778] ? __pfx_vfs_write+0x10/0x10 [ 132.945923][ T8778] ? __fget_files+0x2a/0x420 [ 132.945947][ T8778] ksys_write+0x150/0x270 [ 132.945963][ T8778] ? __pfx_ksys_write+0x10/0x10 [ 132.945984][ T8778] do_syscall_64+0xe2/0xf80 [ 132.946005][ T8778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.946022][ T8778] ? trace_irq_disable+0x37/0x100 [ 132.946052][ T8778] ? clear_bhb_loop+0x60/0xb0 [ 132.946071][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.946088][ T8778] RIP: 0033:0x7fe2d395b58e [ 132.946103][ T8778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.946117][ T8778] RSP: 002b:00007fe2d4783fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.946135][ T8778] RAX: ffffffffffffffda RBX: 00007fe2d47846c0 RCX: 00007fe2d395b58e [ 132.946149][ T8778] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 132.946160][ T8778] RBP: 00007fe2d3a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 132.946171][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.946181][ T8778] R13: 00007fe2d3c16038 R14: 00007fe2d3c15fa0 R15: 00007fff7faf0788 [ 132.946201][ T8778] [ 132.946212][ T8778] BUG: Bad page state in process syz.2.823 pfn:21b17 [ 133.229262][ T8778] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21b17 [ 133.238035][ T8778] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.245170][ T8778] raw: 00fff00000000000 dead000000000040 ffff8880216e8000 0000000000000000 [ 133.253767][ T8778] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 133.262341][ T8778] page dumped because: page_pool leak [ 133.267725][ T8778] page_owner tracks the page as allocated [ 133.273459][ T8778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8778, tgid 8773 (syz.2.823), ts 128085627565, free_ts 128073790903 [ 133.290397][ T8778] post_alloc_hook+0x228/0x280 [ 133.295177][ T8778] get_page_from_freelist+0x24dc/0x2580 [ 133.300714][ T8778] __alloc_frozen_pages_noprof+0x18d/0x380 [ 133.306531][ T8778] alloc_pages_bulk_noprof+0x558/0x700 [ 133.311989][ T8778] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 133.318091][ T8778] skb_pp_cow_data+0xb59/0x1410 [ 133.322972][ T8778] do_xdp_generic+0x715/0x1280 [ 133.327734][ T8778] tun_get_user+0x247d/0x3dd0 [ 133.332449][ T8778] tun_chr_write_iter+0x113/0x200 [ 133.337467][ T8778] vfs_write+0x61d/0xb90 [ 133.341695][ T8778] ksys_write+0x150/0x270 [ 133.346047][ T8778] do_syscall_64+0xe2/0xf80 [ 133.350549][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.356452][ T8778] page last free pid 23 tgid 23 stack trace: [ 133.362449][ T8778] __free_frozen_pages+0xbb0/0xd10 [ 133.367557][ T8778] rcu_core+0xc9e/0x1750 [ 133.371780][ T8778] handle_softirqs+0x22a/0x7c0 [ 133.376560][ T8778] run_ksoftirqd+0x36/0x60 [ 133.381256][ T8778] smpboot_thread_fn+0x541/0xa50 [ 133.386218][ T8778] kthread+0x726/0x8b0 [ 133.390294][ T8778] ret_from_fork+0x51b/0xa40 [ 133.394899][ T8778] ret_from_fork_asm+0x1a/0x30 [ 133.399673][ T8778] Modules linked in: [ 133.403595][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.2.823 Tainted: G B syzkaller #0 PREEMPT(full) [ 133.403620][ T8778] Tainted: [B]=BAD_PAGE [ 133.403626][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 133.403636][ T8778] Call Trace: [ 133.403642][ T8778] [ 133.403649][ T8778] dump_stack_lvl+0xe8/0x150 [ 133.403674][ T8778] bad_page+0x17f/0x1c0 [ 133.403697][ T8778] __free_frozen_pages+0xcc2/0xd10 [ 133.403719][ T8778] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 133.403744][ T8778] bpf_xdp_adjust_tail+0x1d6/0x220 [ 133.403769][ T8778] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 133.403784][ T8778] bpf_prog_run_generic_xdp+0x623/0x13f0 [ 133.403811][ T8778] do_xdp_generic+0xa6f/0x1280 [ 133.403828][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 133.403848][ T8778] ? __pfx_do_xdp_generic+0x10/0x10 [ 133.403870][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 133.403894][ T8778] ? tun_get_user+0x2354/0x3dd0 [ 133.403919][ T8778] tun_get_user+0x247d/0x3dd0 [ 133.403942][ T8778] ? aa_file_perm+0x12d/0x1630 [ 133.403966][ T8778] ? aa_file_perm+0x440/0x1630 [ 133.403988][ T8778] ? __pfx_tun_get_user+0x10/0x10 [ 133.404006][ T8778] ? __lock_acquire+0x6b5/0x2cf0 [ 133.404025][ T8778] ? __pfx___futex_wait+0x10/0x10 [ 133.404049][ T8778] ? ref_tracker_alloc+0x363/0x4d0 [ 133.404074][ T8778] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 133.404097][ T8778] ? tun_get+0x1c/0x2f0 [ 133.404114][ T8778] ? tun_get+0x1c/0x2f0 [ 133.404133][ T8778] ? tun_get+0x1c/0x2f0 [ 133.404149][ T8778] ? tun_get+0x1c/0x2f0 [ 133.404167][ T8778] tun_chr_write_iter+0x113/0x200 [ 133.404186][ T8778] vfs_write+0x61d/0xb90 [ 133.404206][ T8778] ? __pfx_vfs_write+0x10/0x10 [ 133.404226][ T8778] ? __fget_files+0x2a/0x420 [ 133.404249][ T8778] ksys_write+0x150/0x270 [ 133.404266][ T8778] ? __pfx_ksys_write+0x10/0x10 [ 133.404287][ T8778] do_syscall_64+0xe2/0xf80 [ 133.404309][ T8778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.404325][ T8778] ? trace_irq_disable+0x37/0x100 [ 133.404347][ T8778] ? clear_bhb_loop+0x60/0xb0 [ 133.404365][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.404381][ T8778] RIP: 0033:0x7fe2d395b58e [ 133.404397][ T8778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 133.404412][ T8778] RSP: 002b:00007fe2d4783fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 133.404431][ T8778] RAX: ffffffffffffffda RBX: 00007fe2d47846c0 RCX: 00007fe2d395b58e [ 133.404444][ T8778] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 133.404456][ T8778] RBP: 00007fe2d3a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 133.404468][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.404479][ T8778] R13: 00007fe2d3c16038 R14: 00007fe2d3c15fa0 R15: 00007fff7faf0788 [ 133.404499][ T8778] [ 133.692641][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.699196][ T1303] ieee802154 phy1 wpan1: encryption failed: -22