last executing test programs: 1m34.334880255s ago: executing program 0 (id=4302): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)=@report={0x29c, 0x20, 0x200, 0x70bd27, 0x25dfdbfc, {0x2b, {@in=@rand_addr=0x64010100, @in=@remote, 0x4e22, 0x1, 0x4e21, 0x0, 0x8, 0x0, 0x20, 0x4, r4, r5}}, [@algo_auth={0x11b, 0x1, {{'blake2s-128-x86\x00'}, 0x698, "ae8fc6f87966ea7facad9ebe0854e6a1e3b4eb631aab0d3a704ab805ef2e39e391097476410453a61e19a2ec52275cbcb6c37a4bc917b80283921aecf46d7752a534acf095daf59c2c19d427c45f539cc3d7c66129eb36ce39faa9b8d896206282d82541cfdfc3c78917144e20d5eaa38eff53e634cc0dc198b4116b22dafee4e26a20c0d2140a4e328d9175c7a2c055597f13112488fe60feae92a81880ba9e44b7f61874ce0e15ba83dc4d628aafe45984236e6a33ce576209a0a4107b442092c762bad9a56f168594134a676f5c516a7e05"}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in6=@dev={0xfe, 0x80, '\x00', 0x19}}}, @algo_auth={0x117, 0x1, {{'blake2s-256-x86\x00'}, 0x678, "9f15307f7d989ecd3ee9165384c9f1f47dbc3507a6ea0d6a290b43c17b805da6084b47ba8cb4e326914a87f3e1893ec0ebef7e0f277a0516afeaf259eb7bdd1cc98298e974ce6fa8a1f9677304d8b47366429f6e9986ebafd540e519754aa2a384ac9e50fc1786ea6569895a8e07259ff035dfd2613ecd3c9f3936004883aed1ffb40a0827a7d7a2eb732a994af05fd2ca3d051540d323270a250fe98997f7fd5c5959206dc83f037cb7abe2a8f8af6c2cc45312644795683e150b3ec688f67498bf11dcba628b792cb352c7867fb2"}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)={0x11f0, 0x5, 0xa, 0x401, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x4}, [@typed={0x8, 0x104, 0x0, 0x0, @u32=0xc2}, @generic="bd4f90d5780f2d74dd21e9b3c0f1aadccc6dbafa087f299943fa8f30024bc220a6262b5214db2e30ec48a17083513dda37cb7d2e393aa1a5538470e7547f0f0e40de2b8de1a7a28637ad6bee713e7bfe03ab0dcebe9e3967bad4d62c025d8ac43f06efedfe17d17d6376ed4454e8550d854bea520251ceaed49d5aa7db6dd7001b71fc98d64ecd8590cfde4422d3094943f7698063b1f3f5a383949e58", @generic="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", @nested={0xd9, 0x113, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x120}, @generic="fcb376aaec9482998bd62d69ec52d6fbd15c5c6af3139aec1777a56ee4f24ddfcfd9992e8512e0e25cbc715843a2e373f2dd6fcd42cad248147b24786608d73939aef8edff3adb021a1a643e9c1c4eaa264e56982a98fe39cea5aee5602af9498d23b8e81a4459fa14511c5a8b46ac14658c59047d6db19bf91dae4c11d01f688fd587bf0c8678401efccb998970053ac1eeabd05837e2b247a1517c7ef4c429d8fed049dce04d1bd54597071ba0c4e7f8ab4355dc811d75cd9769822b553ce5c4", @typed={0x8, 0xc5, 0x0, 0x0, @fd=r6}]}, @generic="9dce6e9f7409b02246c1ee83aecac7264eb671ad9fac787db13ee0665459", @nested={0x29, 0x1e, 0x0, 0x1, [@generic="794cc00c7ce2025d648aa0529fcff78e917da29ab521a7367f51df567ad100500116d27ae2"]}, @generic="e099e37f33", @typed={0x9, 0x152, 0x0, 0x0, @str='(.{,\x00'}]}, 0x11f0}, 0x1, 0x0, 0x0, 0x2040810}, 0x404c014) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB="0a8cb3afc1937bf10a3835beb8b4691a793d920f449f35e11e663f99de741dc82de5d6df98eeb8b16d9a83920a64e7f942775ca68aa036945209b56a602136059a16c9673ae0c53d33827fc202bbafcfcc9b513c9769ba9a3766acb5e048f36bab70f6537c12cf2e0b7725ae639a1c77d7026a1052abee4cb23db2abed38", @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf25070000002200070073797374656d5f753a6f626a6563745f723a6c6f63616c655f743a733000000014000600767863616e310000000000000000000014000300fc0000000000000000000000000000010500010001000000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r11, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000290000003b0000000000000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bbfcffffff0000000029000000040000007300000000000000"], 0x58}, 0x0) r12 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x60, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x60}}, 0x4004050) sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x6c, r12, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x12}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5c}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040044}, 0x8081) sendmsg$netlink(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 1m33.869063914s ago: executing program 0 (id=4308): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab", 0x72}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)="cbaaae", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e00)="538e", 0x2}], 0x1}}], 0x3, 0x14042082) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m33.729079902s ago: executing program 0 (id=4310): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000340)={0x9, 0x0, 0x7ff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001500), r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000001540), &(0x7f0000001580)=0x10, 0x80800) pwritev(r5, &(0x7f00000018c0)=[{&(0x7f00000015c0)="10473a721421c8b37bfc118f706018fc282493d07f4fe0a223fec3fe232ccd7fc6d06096a76855a18829a254bbac811e017d02b4c6cf5b57ee12d7a090286e032b77a794a06f0ef9bdc452f8abd7474e4415cbefcd50b844bf79943d83a7ee2af593ad5e3199860f1c555d377bebc83317db577a7616d8df594b5cf692153cd138f25b4e2cc58f5346fed54a835e7d98a9ce5c6c3ea7676737542e4325dae1f738d1436eb130185207809956664f6d06605b7f302f441c74564dbb5437cb6e1def3b6254479e04bdfc88b5c6", 0xcc}, {&(0x7f00000016c0)="9849bb5fb302fe66b937bc9236926a4219fb6d1914b36dceaf2b6cd6557d9262c01f51b754fd3f0ce6fdd8fa645321", 0x2f}, {&(0x7f0000001700)="f5fa566b3a99bac917c75ac21cf8becf0ba83ecb2a6ed5c9830d7bdcbcd639d41d2a493d4ff945cc2a7d4e1c7daf9d7e9c190cffaa556f3729c91c67f9288522d01a1ffdf4b07f7741a9bda251914d4698e7dd90248aed2f360b7a3d25efd93ace316f5ff0ec829af7484632fe29971b09cd190434342ffe479e15a113a991ef29c3ef163b4eaac0a53422a2880fcb01f497792301c6e68dfaa6e8cda4551c2a1ef567c9dbdfc2d865b928f06933a372920ba63060018e79daf8f2d4e338eb0403cf76d5bd55fb29d284ae41694105f0113e934247", 0xd5}, {&(0x7f0000001800)="6be863759523e46167073d643eed1c34c24e256dcb22bbee61161fa837e2742557845974dd95a9b932117c68972aa51ad9017e7808b6d747f56c45c0337467f2bedb2c0624111ce38bce94f2a622f28ccc75809a9b8b932c98d248c09e7497dc1477fb781d333a2d12dfd2edbf7b3efcef7af81a17cfe72828221b863aff4b8fa00011a6591ea194800bfcff58d706ea40c57cda552218fdcd9fb1be40920f815df66b73007df0687b", 0xa9}], 0x4, 0x8, 0x6) sendmsg$802154_dgram(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0x83e66ac9b0b93c82}}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001d40)=ANY=[@ANYBLOB="05000000c077450000080000e296a100", @ANYRES16=r5, @ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX=r1, @ANYRES64=0x2710], 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000240)) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) connect$bt_l2cap(r6, &(0x7f00000003c0)={0x1f, 0x3, @none, 0xf, 0x2}, 0xe) ioctl$XFS_IOC_FSGROWFSRT(r6, 0x40105870, &(0x7f0000001440)={0xfff, 0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="14000000000000000008000000000c000000000046789a08e762f8a34b3e40733f93c4e836a38ceff5e748b513a0a1662269e70b6260e3c2dcaa519d9fdb6976039d2c528423ac0ec53c5ed5d701421d329bcfb19db901590d009f9961f37c0c77fbf75d29a66bc91fb19442a873ffd46f9b09fae8071d28112ad6934f3451379274"], 0x14}}, 0x440088c4) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001480)={r0}) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000019c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000010000a00700000035cf52530599b474"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x51) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) bind(r7, &(0x7f00000002c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000580)={{r4, &(0x7f0000000000)=' ', 0x111140, &(0x7f0000000040)={@_ha_fsid={[0x10000, 0x800]}, {0xa, 0x8ff, 0x2, 0x9}}, 0x80000000, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000280)=0x101}, {[0x80, 0x9, 0x2, 0x8]}, 0x0, 0xd4, &(0x7f0000000480)=""/212}) openat$cgroup_procs(r8, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) 1m33.284942608s ago: executing program 0 (id=4318): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)=@report={0x29c, 0x20, 0x200, 0x70bd27, 0x25dfdbfc, {0x2b, {@in=@rand_addr=0x64010100, @in=@remote, 0x4e22, 0x1, 0x4e21, 0x0, 0x8, 0x0, 0x20, 0x4, r4, r5}}, [@algo_auth={0x11b, 0x1, {{'blake2s-128-x86\x00'}, 0x698, "ae8fc6f87966ea7facad9ebe0854e6a1e3b4eb631aab0d3a704ab805ef2e39e391097476410453a61e19a2ec52275cbcb6c37a4bc917b80283921aecf46d7752a534acf095daf59c2c19d427c45f539cc3d7c66129eb36ce39faa9b8d896206282d82541cfdfc3c78917144e20d5eaa38eff53e634cc0dc198b4116b22dafee4e26a20c0d2140a4e328d9175c7a2c055597f13112488fe60feae92a81880ba9e44b7f61874ce0e15ba83dc4d628aafe45984236e6a33ce576209a0a4107b442092c762bad9a56f168594134a676f5c516a7e05"}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in6=@dev={0xfe, 0x80, '\x00', 0x19}}}, @algo_auth={0x117, 0x1, {{'blake2s-256-x86\x00'}, 0x678, "9f15307f7d989ecd3ee9165384c9f1f47dbc3507a6ea0d6a290b43c17b805da6084b47ba8cb4e326914a87f3e1893ec0ebef7e0f277a0516afeaf259eb7bdd1cc98298e974ce6fa8a1f9677304d8b47366429f6e9986ebafd540e519754aa2a384ac9e50fc1786ea6569895a8e07259ff035dfd2613ecd3c9f3936004883aed1ffb40a0827a7d7a2eb732a994af05fd2ca3d051540d323270a250fe98997f7fd5c5959206dc83f037cb7abe2a8f8af6c2cc45312644795683e150b3ec688f67498bf11dcba628b792cb352c7867fb2"}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)={0x11f0, 0x5, 0xa, 0x401, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x4}, [@typed={0x8, 0x104, 0x0, 0x0, @u32=0xc2}, @generic="bd4f90d5780f2d74dd21e9b3c0f1aadccc6dbafa087f299943fa8f30024bc220a6262b5214db2e30ec48a17083513dda37cb7d2e393aa1a5538470e7547f0f0e40de2b8de1a7a28637ad6bee713e7bfe03ab0dcebe9e3967bad4d62c025d8ac43f06efedfe17d17d6376ed4454e8550d854bea520251ceaed49d5aa7db6dd7001b71fc98d64ecd8590cfde4422d3094943f7698063b1f3f5a383949e58", @generic="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", @nested={0xd9, 0x113, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x120}, @generic="fcb376aaec9482998bd62d69ec52d6fbd15c5c6af3139aec1777a56ee4f24ddfcfd9992e8512e0e25cbc715843a2e373f2dd6fcd42cad248147b24786608d73939aef8edff3adb021a1a643e9c1c4eaa264e56982a98fe39cea5aee5602af9498d23b8e81a4459fa14511c5a8b46ac14658c59047d6db19bf91dae4c11d01f688fd587bf0c8678401efccb998970053ac1eeabd05837e2b247a1517c7ef4c429d8fed049dce04d1bd54597071ba0c4e7f8ab4355dc811d75cd9769822b553ce5c4", @typed={0x8, 0xc5, 0x0, 0x0, @fd=r6}]}, @generic="9dce6e9f7409b02246c1ee83aecac7264eb671ad9fac787db13ee0665459", @nested={0x29, 0x1e, 0x0, 0x1, [@generic="794cc00c7ce2025d648aa0529fcff78e917da29ab521a7367f51df567ad100500116d27ae2"]}, @generic="e099e37f33", @typed={0x9, 0x152, 0x0, 0x0, @str='(.{,\x00'}]}, 0x11f0}, 0x1, 0x0, 0x0, 0x2040810}, 0x404c014) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB="0a8cb3afc1937bf10a3835beb8b4691a793d920f449f35e11e663f99de741dc82de5d6df98eeb8b16d9a83920a64e7f942775ca68aa036945209b56a602136059a16c9673ae0c53d33827fc202bbafcfcc9b513c9769ba9a3766acb5e048f36bab70f6537c12cf2e0b7725ae639a1c77d7026a1052abee4cb23db2abed38", @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf25070000002200070073797374656d5f753a6f626a6563745f723a6c6f63616c655f743a733000000014000600767863616e310000000000000000000014000300fc0000000000000000000000000000010500010001000000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r11, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000290000003b0000000000000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bbfcffffff0000000029000000040000007300000000000000"], 0x58}, 0x0) r12 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x60, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x60}}, 0x4004050) sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x6c, r12, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x12}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5c}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040044}, 0x8081) sendmsg$netlink(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 1m32.846131986s ago: executing program 0 (id=4327): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000001000)=0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$inet_sctp(r1, &(0x7f0000001280)={&(0x7f0000001040)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001240)=[{&(0x7f00000010c0)="e832e2998f23c930af90fec5cc581f75971ef7ae91178ad070e561903e9526d7a44efab8add57b71", 0x28}, {&(0x7f0000001100)="a1ccb533c5e37912586628dd97c2fdbdb1028bcf1a81128b6e4adbe5ad87d2b5fc634658e97ad43c288216b5e1c21e8c0b28dbbe89b220c0cd89a7f26554198f5e60ad5cfd233658b78846344e0af619b0def319c6583b756a62af2d52cb714c69e59d31748df4b8830c02ba747a665a6cfa2732e6430f98c8b9da3c156406ad495e882fe9cb24a5ada59d6536b708f73855f1e86edbfb3d86af4717cb5a8f5c7f559f5013b155168bd7a71102383ecbe548fbf0b9afe6e6a6f0140a4b8a7c8945afcb62c4d488b0316f5e8253e55780e5e735057b5b6dd08c38c17ebcef0128e4fc0fa33cbe9e90b6fa2bdbe1f6", 0xee}, {&(0x7f0000001200)="002aabbe64cf44de71f3fce1fe29b442e5292ff555329a4427c45bb97ee6da324543a504946169611fdffde2c98c9839d1af3d753fa26ab0ecd7", 0x3a}], 0x3, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240"], 0xa4}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1m32.775870789s ago: executing program 4 (id=4328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000005c00)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="5800000001020101000000000000000002000000440001801400018008000100ac14143a08000200ffffffff2c0001"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 1m32.708565565s ago: executing program 0 (id=4330): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0xe8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000240)=0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f0000000640)=[{&(0x7f0000000080)="89e7ee2c67062f080700000088ca54c2a116121c1e7e9ae9ae", 0x19}, {&(0x7f0000000440)="e87ade1321d1d2102e7ea47ce7", 0xd}], 0x2) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r10, 0xff}, 0x8) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000000c0)={0x3, 0x6}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={0x0, 0x8, 0xa}, &(0x7f0000000540)=0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000006c0)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x2, @local, 0x7}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e20, 0x9, @remote, 0xaf4c}, @in6={0xa, 0x4e20, 0xffffffff, @local, 0xc48}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in={0x2, 0x4e23, @multicast2}], 0xcc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0xc) getpeername$llc(0xffffffffffffffff, &(0x7f0000000480)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000500)=0x10) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r3, &(0x7f0000003e00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0xffffff72, &(0x7f0000003f40)=""/244, 0xfd}}, {{&(0x7f0000002840)=@tipc=@name, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002740)=""/246, 0xf6}, {&(0x7f0000002900)=""/119, 0x77}, {&(0x7f0000003d40)=""/22, 0x16}], 0x3, &(0x7f0000002980)=""/193, 0xc1}}, {{0x0, 0x0, &(0x7f00000028c0), 0x0, &(0x7f0000003ec0)=""/91, 0x5b}}], 0x3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000000) 1m32.684314724s ago: executing program 4 (id=4331): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5411, 0x0) 1m32.243798022s ago: executing program 2 (id=4333): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x98}}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m31.902375342s ago: executing program 2 (id=4335): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) 1m31.657711344s ago: executing program 4 (id=4336): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m31.582799896s ago: executing program 2 (id=4337): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a40)=@report={0x29c, 0x20, 0x200, 0x70bd27, 0x25dfdbfc, {0x2b, {@in=@rand_addr=0x64010100, @in=@remote, 0x4e22, 0x1, 0x4e21, 0x0, 0x8, 0x0, 0x20, 0x4, r4, r5}}, [@algo_auth={0x11b, 0x1, {{'blake2s-128-x86\x00'}, 0x698, "ae8fc6f87966ea7facad9ebe0854e6a1e3b4eb631aab0d3a704ab805ef2e39e391097476410453a61e19a2ec52275cbcb6c37a4bc917b80283921aecf46d7752a534acf095daf59c2c19d427c45f539cc3d7c66129eb36ce39faa9b8d896206282d82541cfdfc3c78917144e20d5eaa38eff53e634cc0dc198b4116b22dafee4e26a20c0d2140a4e328d9175c7a2c055597f13112488fe60feae92a81880ba9e44b7f61874ce0e15ba83dc4d628aafe45984236e6a33ce576209a0a4107b442092c762bad9a56f168594134a676f5c516a7e05"}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in6=@dev={0xfe, 0x80, '\x00', 0x19}}}, @algo_auth={0x117, 0x1, {{'blake2s-256-x86\x00'}, 0x678, "9f15307f7d989ecd3ee9165384c9f1f47dbc3507a6ea0d6a290b43c17b805da6084b47ba8cb4e326914a87f3e1893ec0ebef7e0f277a0516afeaf259eb7bdd1cc98298e974ce6fa8a1f9677304d8b47366429f6e9986ebafd540e519754aa2a384ac9e50fc1786ea6569895a8e07259ff035dfd2613ecd3c9f3936004883aed1ffb40a0827a7d7a2eb732a994af05fd2ca3d051540d323270a250fe98997f7fd5c5959206dc83f037cb7abe2a8f8af6c2cc45312644795683e150b3ec688f67498bf11dcba628b792cb352c7867fb2"}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)={0x11f0, 0x5, 0xa, 0x401, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x4}, [@typed={0x8, 0x104, 0x0, 0x0, @u32=0xc2}, @generic="bd4f90d5780f2d74dd21e9b3c0f1aadccc6dbafa087f299943fa8f30024bc220a6262b5214db2e30ec48a17083513dda37cb7d2e393aa1a5538470e7547f0f0e40de2b8de1a7a28637ad6bee713e7bfe03ab0dcebe9e3967bad4d62c025d8ac43f06efedfe17d17d6376ed4454e8550d854bea520251ceaed49d5aa7db6dd7001b71fc98d64ecd8590cfde4422d3094943f7698063b1f3f5a383949e58", @generic="b156a8fc9cf1ceda616bff7bedf099cceb4647e290a6137d9f009701afa23203c5a1d329df58df03f7e29626b52b2e435012eaa452f7755e30cf5aab6460fddfcbb2c6c622fd4dcc2a95cf1a113b227b5205a31aee0635d3ac6e619cb49aada53a2b4b5ada971adea1e1343fe759dece47a452fb05ecbae084bbcde0f855e7d42e4100619426d79a60f0d83f5c4b1af7e196d8989ea8ca6ed9337e803cbdee878e40eb06b6ba614fa15ea5041e148762a8aa3ec429555c35bc57c988fe231d1fb7b7f74eb111cc6e08f6bd383bcf4eaed1b38d7a4e9c40c37c59ec9b14604a32a987b2d22c9b5ebb5a86955a816efb97c22c20a00bea56766c6d8bd6e5d49dad5c88416cf00a6a23ae571381975e4c39727eb00a3ca09a5a452056ca2fd5f275c0f31506a97ec04fb466076b2ea740033bf6a202de4cb39a5146a419628e70bf792edb7c4ca5fcdadb76fb22727c6b4e4dce00a5b63fe8449d72e79f65a3c1ff4b30fdbba3a4a5f47152a3becb34383d2ad564963c226e0ad57554262f694880bfda42fc4c8d68c0e44126371756e65d127a59207d4090956cf666958065d4afd32e9c011612abe70797a4ddbac09ad6c51e05bfcc73bd0756ad47484b75b244b2397fb7d357ca3a56a50a8a7aa9ffe98c72b200cedbaa10689727c083fdf0f5d5fc06a2557dcc2d0b1dca70ec513a82fe26b5eb0cce40b13fcb6de9da917d3b76edb90148ae718e24d75bfd1561d3a1586957000a2a7225f8858416de22228c3f616baf210d1efdd13264abb385e277c1aa451858782c94ed0e0ee2d806a85c75388f7951abd24369308bc6ed6cd7b4b7e2ae3f2e3f9a9f5e70155313b8df1da4f5ca9c96851949af9deed590fe70ad4592128e61b72244f408545360fe37fedefdfe44ef1c2665ec6c9c0a525dac9992aa7f95f3c1eb988f3fed8b981436b210d9407b1eca0dba2b3b1177d0a3e027b576498a074be65755683458786865d5021079df56e7515fe98aed2ea12a44f9e8053485a38e374ef6248502df627d2d2b8dd44727a5750a0140d6830c9ef5d18bad95a44b20eba6618a9d062ddbd9c9c2e92d6ca56d1de110e4cf8cfe62f426e6b5b1e257a5e32ee5ed605a2032808a5950b80811d7987a1cb5bdbfe52cd1f43fcddbba4b62d09a57bdce780bfeb78bfe737d71b3b634871a82698f51d39e6a8895d89b63a8223fb1f507709b8a1a333cf84e9f4a996349f772f2acb260f2519b5500063c31df5f6a05681daa827431a05b98bc0d2106d6abfb7382faa10272f48100dd90a3b677ab9185ff98c31d26c76e26cb3bf09cc70f8a615f0703638381107ef7ba060fab2c12db771b92a32b57b232ec2fac3f57a9f827ff8cb1a590aa66a7b502c4f127d43eb11c98eaaa03d42b0180120c4e1c8f1d5c9d59c6bf8fa884ae5187b73be20168d657e8e04dc8ff27aeabb6f607f23d056758c6c8b29fe7c8a8fae06375738f582d1b01b0a6a760666c853921e03ad3ef78db03201c0cfd0c5086e4bce80011437641bcd621a6f0457030381890dbb8212ebaca4580b6b2b35e8940f4687353886c4321ce0f145842972149d53646170df21cd26e2c729c94f959c9bdbe5bcf7c88d0cfd5ec32b3070522135b2eb191cfb01ba28df935dce574f1353ab5f3e4b9de4c89a2fe77aa84fa518963e61fa83658736b6f78d40876ad550bd690fa3824de7518e72008784cac157cd450be481ae86b758b40e9be6a4193a451f1345ffe4c88fec3af838da9aa96d12829de937048047945833dad53c1f542fda4dd5b7ca8f4b29078cf68e800cc1c9572661e12dfa7fac908023f49b2b6f69c4e5d5b715de0c02c9db4b060a8fee131c25efe7d86ce4545aa8fac94eb0f14716fd65f59f2573d814e4799d153782c59c7e941e8c682dfb2a7ad5386eabb5123bef16555285c96a40f439fe02004f75dd6785822146aa515f5f6c90a24efc72d031b347867134e52f986c3549c0b316237db118c3b6efda0c92c008fc15084e4f5856e6047bc1a5a19f7a9595727a769c2d0764d482f20280d860d831f5ef9aba39714afa7f3fe85a3b4cd5715f8ee6e20886c2ad190d60a38bb5d7853e9465c34bac4b03893edeabce14456274eb4aa279c30d381472a0036a4058d863b3987a0d570196fe1c7976b4aabd41ffde6dfc5b468bddcb0f71513fadfe7e0bbd32c409f78f989fb3a9ef55fb57135e16236f3f8558371ea9165bc471a5715aac3d359979daf991fb8f0497ebbae15fe1c628dfff4bbf64c1efc10f6cc4723db30673bc851183faf622d7aa7d40231a0b15816fcf7cdaeee244843f60b47da00676cd166d0853d161b4cbc555c35905e11a768d60bac536b336b5ef69214db80c71962491e87cdf8441e46ba7270c0fa6815bfada79d1a12029b10ccab08e2971c10dd1558e29169fe2f3c65c8a5a569332ff2baa507cc79622af84048c7b1dfb5adc9ef04f5faa166c33decc2629a6744750dc68975ccda21e72098c6b9485c886a9e0c550e200aea2878e028ffdf0f9f20a7480cc88cdb51406c74c059292bd376d9fdd94633f497181d8c468cfc5d9023ea89b96165ff877a87b3caf605da32546a53f6a20b70ad40e94af1c5eee7d3ecb2ed07e5b413643c2df6d27da458fbc140e97c9cafa8dc97cc79dfcc144070a2cd5adb31bf3a786b30baf087b9273dffb5726e55ae6e1bc2fcf356b446bb322acbcfe35753835bc6dc69ea4845a4d0807ec730fd0490ed81b2f8c7e58c07da8f03a432e509adaaeccc9a405c2b111e26062503cff9b1b611deafaccc0cd9f5f28935376d4d377ff3260670ed956c96374a27320d1a1bcc5bb1bb94e5d2e241ed88da7c4064f8412ff03d7b84b31f4b3afb7c26d131e7343adec9f21ee0efc64a3b14599e3e4032f7af8664475dd8bb42b8bcf8b4bb8a61f4f439cbd6521899f3ff4627abd709ffd0d47b04997643b9c4deaf3af1f453ea445bcc0af145b9845af09b2777e93670e3e4eed77700286f73c2220677c67caad086d9cbf27a8a37c175a8a6584ca7bdef91ac60c088e76cb1414653652df9d86ecae52c26681b5e31f70bf5e03f3fd3d70a174b6c5f098e8bc1687f7c770c73a5449718ff4662065d807283264a238dfd787f40eac0bc6e165855bc71946cda2593a09d71fddd693423fef3b2be1ef9f907eaf786cc7446c6585aba758369833c48823c004ca613ff0e55d485794d862b5243d06f669afca436a7624a38a81787ea62ad3b7f1b340be8a21941e4338245078ad2d4b6fc00a35f94f7eb083c706f5d782c09b09008aefc5dc3c52e1db55a343d017db507c663e2033c224c3dcd3cbc97de9f00bab9c78a672406cc153a0add2285524ecd24236645aa4881d35ee9c40cedb787a04917bcceea935317bc16444733f51d4d0111be4eefd94ce4c0db7cd8385d1d180b563bfba7b965b4735f2195dc31009b6fc885eead0050ed80bd21fbdd3a5432f64078c94e338fdc48a19b1714bc5842234647fc0e32cf27ba5977574b552a315e3c7034877cac0dd70be0832856993add1ea79153a120d9e1f6ed5e9e3d41ff9e11953bb10ef9df2f5fa532cb82a41c2791c73e53d81666cf382419295c7741290049688c6bf7e395e3222abfd94c9d423b30ec7213f29a4560f4b356dfaeabef89d897014422872f9675cd65c17547c753d52f6adee0fa796716c923d35ff7f44f3e5e43a01a8d6dbd79381c91bf4bf5b443b03956ee015019d4cf41654214186038c0e4e888b4ca0d6f29544a9043e201d3b482a61eb50cb1500f1e850eb6410058e6fac6e34cb494568071aea1d7dde90575ed9b0c4ff8cf2b2c8621eb85f66064ad659636c0d164abf972de63c3a5b8637f4014af3aaccf7b67098e46900398efed545bda8c174c05d817d43d97e3a082c499b475847ba2f00ca99072f76cd5299c7193e1f4b1eb0e39cbfd46d08b607a14b8291a6d8473f7bd3211e4aa7aa7034a649efca36447b76404ea19e657815506da20d8d2082884bf9cbcb6b5d2653a249e3032eb944d4aeb3a2353f47147e3930c84ada6c37719b2cdb2678946d5a9a9b4e32c6625cbaae6398a6d5c9b2bf6a0a87c493115581f27739badf456de575df11d8a704657a3a7a3f76242b777f42facec24f92427859b3204db98f1df5f977ab1c4d41040ef518dd48dd41a230494084604b088702c342072695a9e67512a7cb9b1465ad5f2b07ed4ef10a85ca60ef5e76995a9967198b1fa7eacdb61874d13942c6c50f017ae5c26dc48a2c1e7dec7a13f9a6893243e3634ec48ed1e9b2a7dfe69e9e49d37cd3eaa2ce1c0f1c3d69dc18161b1d2e6eb731f2f3d110329c8484805630e208b0b7a8a5307f1c1a3127c33c5b6fddb9e03ba2f1b7822c8b5dd82862db0dde8acac1635f793d479f78ec6bf0a13e281abe9297c22f206078395a20564dc0569a9e43471cf8e1a0d14fc82ca4afb9f49e5d443b0cb975ce494820ca05fde153782de00c038ef2f87cbc971e4b8cfd03b0bfa8651a351cc900ef573ce73548f9af5eb5ca84ca3ecc70fca755aab3d3b260a1224eccb82245882483523d3726d01a848c5e0be5f0fe2188a806abb01602fa43316c1e80770e01d8af77e9b34a319bfc5e3413d61aeae160af43149391da10035346add1d49fba8e1a4abedf42fbe1496ecd70cc931f39489c68a4e61b910c9beef2a2f2242249f286dd48253c55ccc59c9d6e3d5f674836addf882b1328987949ac01b57a0e1aff86e57c0dc0302b3b6d8f7c6ff18a58c4f91f70ba952cef5563d882d6369fe156821a7b3bbfff0bb77e76f4cad52801c3bbebc72e850fc26dcf6181c49361e58789a7f6eae4357aeeabe5c962319b2ea6fa3e472680699f71f9bb6760a5569ac69faa4d04c1c1b27461dd9461599af241b7a207437cba94cc29ec43193799571c4aea1c0d009e60d439d924967ae1af82bc57e55e9ca8d281ce372d4143d67400aa70ada015904d6482b7903a07e6410c9761c77c05c29b4f1cabeda2f400e4590bbb80559790cf28d0ac23ef7414d90b127a95c75645bf234085632ab31821e104377d1a837abc04892de3bd87fe833940fd6692ce937f57d534783be367dc296fe0a64d3a14a38e3ba7609be1987bf7799aef2286f2841eaebc43fb41db4cf0a4efbe1f0468a9b3400696aee552cd4b32aa308658ee5db2e9717ad5eb17b496483c3208108db08a1674a200e0bda31d4ac60356b89e15b6819dad4b9ebcf8f6df6d1945051b2450d55924a4a844df7722904b7b2cec80550c240cc4c1c1c44c620defd7aa0758d80346d534ca08d91f48ff89d601aeeba50f3682aa64c439d04cc245c6a214c6c29dc1c62049c0831b2ee60d9ab3d65fe5c9acecacf318d5a8397ea70075a5114119a1662c6f650d8bbea67f64080831f177ad5456250c496c5d4fb1bca770da4b815c6b5428d490c9e7afe7931d8dcded7097be5abb99c722a13ab0a0d45a8fdd8bf91a9316d4d88b6c848438274a1806d4d979452b9c169642287a221e783be2ec2f78e70a8b13d96959c5c9a000f488a5f2f8cac12f4554287acf6cec15b3fa5057aeca3d234e6265d0575530b8f6fa26182a1c0efbad29f2c6d3c396e3d98335fe0d9ed5e781e2164017ae71e4708829582f6b34899b51919dcc0b6a3893fecc00fee1fcd3957038393c64d76c751839851b6896af8062c73fda7e0b7c8d979ac8a8b435837b240e93f8d6303196c07df5327b86d48722b56beacf6c764ab1c36e0e3637f55a8d4a40c223bb1a614b2", @nested={0xd9, 0x113, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x120}, @generic="fcb376aaec9482998bd62d69ec52d6fbd15c5c6af3139aec1777a56ee4f24ddfcfd9992e8512e0e25cbc715843a2e373f2dd6fcd42cad248147b24786608d73939aef8edff3adb021a1a643e9c1c4eaa264e56982a98fe39cea5aee5602af9498d23b8e81a4459fa14511c5a8b46ac14658c59047d6db19bf91dae4c11d01f688fd587bf0c8678401efccb998970053ac1eeabd05837e2b247a1517c7ef4c429d8fed049dce04d1bd54597071ba0c4e7f8ab4355dc811d75cd9769822b553ce5c4", @typed={0x8, 0xc5, 0x0, 0x0, @fd=r6}]}, @generic="9dce6e9f7409b02246c1ee83aecac7264eb671ad9fac787db13ee0665459", @nested={0x29, 0x1e, 0x0, 0x1, [@generic="794cc00c7ce2025d648aa0529fcff78e917da29ab521a7367f51df567ad100500116d27ae2"]}, @generic="e099e37f33", @typed={0x9, 0x152, 0x0, 0x0, @str='(.{,\x00'}]}, 0x11f0}, 0x1, 0x0, 0x0, 0x2040810}, 0x404c014) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB="0a8cb3afc1937bf10a3835beb8b4691a793d920f449f35e11e663f99de741dc82de5d6df98eeb8b16d9a83920a64e7f942775ca68aa036945209b56a602136059a16c9673ae0c53d33827fc202bbafcfcc9b513c9769ba9a3766acb5e048f36bab70f6537c12cf2e0b7725ae639a1c77d7026a1052abee4cb23db2abed38", @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf25070000002200070073797374656d5f753a6f626a6563745f723a6c6f63616c655f743a733000000014000600767863616e310000000000000000000014000300fc0000000000000000000000000000010500010001000000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r11, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000290000003b0000000000000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bbfcffffff0000000029000000040000007300000000000000"], 0x58}, 0x0) r12 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x60, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x60}}, 0x4004050) sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x6c, r12, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x12}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5c}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040044}, 0x8081) sendmsg$netlink(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 1m30.92464325s ago: executing program 4 (id=4341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa0e00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(0x3) 1m30.731562769s ago: executing program 1 (id=4342): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2", 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)="cbaaae7e3512775ec98988761a8c409482d7a1909aa8af218f11eb59c9400be63689458c7645a2600091411e2223ce61cb6e7b915d6de9389a6462b4922c64b3242f0000000000000000", 0x4a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000001c0)="2d567cdd7fa7d456500e9526b3c1cdd1f7b1bd4d7404511c9bc6d388e1173e1aa373501215613b33da7d5cb7ee1c5aae9673d7ddabd8cbd0b8ae530949bfb8", 0x3f}, {&(0x7f0000000cc0)="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", 0x11d}, {&(0x7f0000000680)="813a2657556ec857427e14c67021029ce1285e35241f055c5efa44fe2381dc1df094c040aaead3892f1399b88ed118ec1e2793b730f1b10a5d5b7e0bcee29dd068f9f14cd6ead027982d9164a09e41f5bff04e077794fab21947ecc33f6a98b4ba323f20e169031c388ef9ac6d77f255d4c202a61b92f5d9e2143e44c1aebb6e8f4456675dc614a0e300011ed0d4", 0x8e}, {&(0x7f0000000780)="4e4bac2826337669a8e0c6ee7cf7e2d74d9309104b671b0a651b2ca5d627736e27de118acad6bafa4ed622f9daf191499f05e227b3c85e67b48142e79520a0a0f7e0983adb1aded778f1f1cefe1a1d5159b9f624e3aaac6851289e8f459674", 0x5f}, {&(0x7f0000000e00)="538e43f9cd7ef4ba9925987b5d8042a0ff1b1113ab17cd7ca5d9f33719d6d4379fb3d0287906345d7a668b1a3a257757d11af7f39cb0f7f162b16e0aa125a32b4a449e8ee222abc8d26e85eb638f0d4fca35449fee05810f0748c26ec3519d73a45dda174e1526a830c68fceeeb1839842121990972dac3c8182b7586686c3df0b6f99ed0be85be9a45aecac05cc338c8b2f91ac821a779716e65149641db0d488f415d700faad410d05075dc9c1d694ed0c29b77595dc35ae27baea727334ba7c51f8a88175bea1c665403b8a28015443c5aef9e98357dd4942626cc3532b609ebc71f2085684c3c1703e12fd20", 0xee}, {&(0x7f0000000f00)="c2e980bb679256abd692ebb6328d808f43420396a989d40b28", 0x19}], 0x6}}], 0x4, 0x14042082) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m29.756153986s ago: executing program 1 (id=4343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0d5}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m29.676016167s ago: executing program 1 (id=4344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x12, &(0x7f00000004c0)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7ff}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678ac", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000c001a800800028004000180"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdff00000080000000000200", @ANYRES32=0x0, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r6, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a31000000000800"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0x0, 0x2000008b, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_genetlink_get_family_id$fou(&(0x7f0000000900), r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 1m25.117190959s ago: executing program 3 (id=4345): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x6, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) (fail_nth: 3) 1m25.115492264s ago: executing program 2 (id=4346): socket$kcm(0x21, 0x2, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d", 0xd2}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d202c", 0x94}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdcb3227e7e06079dc9725423d66f47694787ec855a7fa2310330b220642ee8afcbd20fd692957d850174c2a1e64e225bad95c1c5ca477757bb1d8b4785dd0cba2804aaeecb9bcd3802d2", 0x6d}, {&(0x7f0000000880)="6697624319e115b3b12c54b477244af3979b03fafbcbe555a59252423d41131d33d81eefbc306e247aeb9a5e6891b7ff731babe242dbc2169c193466", 0x3c}], 0x4}}], 0x1, 0x4000000) sendmsg$nl_route_sched_retired(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001200)=@deltclass={0x574, 0x29, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x13, 0x6}, {0x7, 0xffec}, {0x6, 0x8}}, [@c_cbq={{0x8}, {0x54, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x11, 0x1, 0x1a, 0x5, 0xcc6, 0x10001, 0x8, 0x2}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x5, 0x2}, 0x845, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x2, 0x7, 0x1, 0x3, 0x871}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3c, 0x3, 0xf, 0x7, 0x3, 0x4, 0xff, 0x4}}]}}, @c_cbq={{0x8}, {0x8c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x30, 0x0, 0x3, 0x6, 0x1ff, 0x5, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1d, 0x0, 0x1, 0x80, 0x1, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x1, 0x3bb7, 0x5, 0xef4, 0x30ab}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf, 0x3, 0x6, 0xfc, 0x8, 0x80000001}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xa, 0x5, 0x5, 0x4, 0x4237, 0x400}}, @TCA_CBQ_RATE={0x10, 0x5, {0x16, 0x0, 0x9, 0x2, 0x90e5, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x10, 0x8}, 0xff, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5e, 0x0, 0x2, 0xfc01, 0x4, 0xfff}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x1}}}, @c_cbq={{0x8}, {0x428, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x4, 0xd}, 0x2, 0x1}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x5768, 0x4, 0x6, 0xf8, 0x40, 0x8, 0x40, 0x80000001, 0x5222, 0x1, 0x4, 0x5, 0x100, 0x2, 0xa6, 0x2, 0xcab5, 0x6, 0x0, 0x8, 0x5, 0x7, 0x40, 0x1, 0x7, 0x5, 0xf, 0x2, 0x0, 0x3d, 0xaf4f, 0x3, 0xe, 0x0, 0x5, 0x8, 0x3, 0x399, 0xc, 0x1ff, 0xc, 0x7, 0x6, 0x6, 0x4, 0x7ff, 0x2c, 0x401, 0x0, 0x4, 0x8, 0x8, 0x356, 0x7fffffff, 0xfc65, 0x6, 0x1, 0x4, 0x7, 0x1, 0x3, 0x7, 0x9, 0x8, 0x1, 0x5, 0xfffffff9, 0x7, 0x262, 0x6, 0x60b, 0x204, 0x6, 0x2, 0xd, 0x6a71, 0x5, 0x0, 0x5, 0x400, 0x6, 0xb, 0x8001, 0x561, 0x6, 0x2, 0xe, 0xc, 0x0, 0x0, 0x1155, 0x1, 0x7, 0xde1, 0x5, 0x8, 0x0, 0x4, 0x89, 0x7, 0xfffffffc, 0x9, 0x2, 0x1, 0x4, 0x4, 0xfff, 0x9, 0x401, 0x4, 0x4d, 0xffffffdc, 0x6, 0x9, 0x9, 0x10000000, 0xc, 0x1000, 0x1, 0x9, 0x1, 0x80000001, 0x0, 0x7, 0x1, 0x8, 0x1d, 0x9f, 0x5, 0x88, 0x8, 0x5, 0x8001, 0x6962, 0x800, 0x1000, 0x3, 0x325, 0x8, 0x1, 0xc, 0x8, 0x4, 0x4, 0x5, 0x4, 0x68f1, 0x4de, 0x4, 0xe4, 0x3, 0x7, 0x3, 0x8, 0x69484c88, 0xfffffff8, 0x9, 0x1, 0x1000, 0x9, 0x6, 0x6, 0x5, 0x5abc, 0x275, 0x10001, 0xc787, 0x9, 0xa, 0xd659, 0xfff, 0x10001, 0x7fff, 0x6, 0xfffffffe, 0x7, 0x581, 0x7, 0x4, 0x789, 0xe95d, 0x8, 0x8, 0x8, 0x41d5806b, 0x9, 0xe, 0x10, 0x7ff, 0x4af9, 0x6bf070d4, 0x80000000, 0xcf4, 0xc796, 0x1, 0x2, 0x4, 0x1c4, 0x5, 0x7, 0x8, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x87, 0x0, 0x2, 0x1000, 0x0, 0x297e419b, 0x80000001, 0xffffff39, 0x7, 0x200, 0xb21c, 0x80, 0x4, 0xb, 0x6703, 0xc7b, 0xf48, 0x6, 0x8, 0x1, 0x2, 0x3, 0x101, 0xe0b, 0x1, 0x502f, 0x1, 0x4, 0x9, 0xfffffff7, 0x3, 0x9, 0x3, 0xdfc7, 0x0, 0x9, 0x8, 0x2, 0x7fff, 0x10001, 0x4, 0x73f, 0xcfca, 0xd, 0xd3a, 0x9, 0xc2f3, 0x8, 0x3]}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x0, 0x1000, 0x4, 0x2, 0x3}}]}}]}, 0x574}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m24.494557118s ago: executing program 3 (id=4347): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) 1m24.488943254s ago: executing program 3 (id=4348): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r0, &(0x7f0000002c00)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5411, 0x0) 1m24.429390018s ago: executing program 3 (id=4349): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xd, &(0x7f0000000b80)=ANY=[@ANYRES32, @ANYBLOB="3d0491e862cd46e50b6ab2838aacacd469bd0115aac62019db7a29165147485285c243af09e78432ee70db6cd79aa250e2c87e62510db80be151f76c72975707040f5a72a8ed3ed10fdd25a15bd88334c13e43ae7927e0fb862c1aa8fa2fc2feba572be6a67dcd21e082c6f573527e5375f1ee2012aaebd69e905ddb85140f0da50d4699223f024de20d52cf4c9052627abf72a6498a533d7609e1dc3de3e9f159cacb3fc2c915b0373ca7bce340d2df52f11d9ec3113f03098a84e3678ccf324f1bc7", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f00)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r3, @ANYBLOB="110125bd7000fedbdf250500000008000300"], 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) 1m24.007321167s ago: executing program 2 (id=4350): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x450, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x424, 0x2, [@TCA_BPF_ACT={0x420, 0x1, [@m_bpf={0xf8, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9c, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d9102"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x16c, 0x13, 0x0, 0x0, {{0x7}, {0x144, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xbd, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648bffc21f0a74a340b278cc3949b549385a407cd95c5697ed222bd3d4e4c2a0bf56c7937d87120b4f89a05bbde47670503d8a27ee2823502a90679b7fb497e236ea19c82fa844f28657c37f81f5"}}, @TCA_IPT_TARG={0x59, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd2"}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m19.351323649s ago: executing program 2 (id=4351): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010020641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200", @ANYRES32], 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000507b72275ca0756aebf99a7ddf50ee79f7d5ea8d61306b21417e4617d23b1952aca754cf5b53fa6483b0fe457a762ba787ebe732601abc0ab73647a58aec16ad1df4902319ed52469c08c67a0cf1bf0c2a82adc8cde7fb8fec745638f52a731318dab284a9bb1c4f5807c8f4eae3883e3677c14a68eb43ac54525f743c4a7042e740650286cf0c706d5b85833bf56a2a77ab7427c5410b20060017ff5fe8c0d503146dfb78199100"/184, @ANYRES16=r1, @ANYBLOB="1000000000000000000003000000440005800c0002800800030007000000080001006574680024000280080001000d0000000800010006000000080002000200000008000300010000000800010075647000"], 0x58}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r2) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x1c, r3, 0x3, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x200080c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x8004) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={0x64, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @local, 0x6ca}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xc}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0xa1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000001c0)={0x18db9, 0x10000000, 0x9, 0xfffffffc}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)=0x4) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000100)=0x2000004) unshare(0x20000400) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000f40)={r8, 0x0, 0x0}, 0x20) pwritev(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="00214717a70700000000030600710a5e31163ceb9d0471200000000500000000000000ffff03425d4d50e7182ce0ab6d0000", 0x32}], 0x1, 0x5, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f00000008c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x22c, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff80}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xac9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfedf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60f5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010100}}}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5b68}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}]}]}, 0x22c}}, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_READ_VERITY_METADATA(r9, 0xc0286687, &(0x7f0000000500)={0x2, 0x8000000000000001, 0x99, &(0x7f0000000440)=""/153}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000280)={'wlan0\x00', @multicast}) 1m19.310622326s ago: executing program 1 (id=4352): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"/374], 0xa4}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) 1m18.989319205s ago: executing program 3 (id=4353): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c2795"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m18.896502216s ago: executing program 1 (id=4354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0d5}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m18.785077608s ago: executing program 1 (id=4355): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x98}}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0) 1m18.775435372s ago: executing program 3 (id=4356): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000001640)="e494e7770b377da4c129a1", 0xb}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1m17.328563716s ago: executing program 32 (id=4330): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0xe8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000240)=0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f0000000640)=[{&(0x7f0000000080)="89e7ee2c67062f080700000088ca54c2a116121c1e7e9ae9ae", 0x19}, {&(0x7f0000000440)="e87ade1321d1d2102e7ea47ce7", 0xd}], 0x2) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r10, 0xff}, 0x8) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000000c0)={0x3, 0x6}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={0x0, 0x8, 0xa}, &(0x7f0000000540)=0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000006c0)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x2, @local, 0x7}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e20, 0x9, @remote, 0xaf4c}, @in6={0xa, 0x4e20, 0xffffffff, @local, 0xc48}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in={0x2, 0x4e23, @multicast2}], 0xcc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0xc) getpeername$llc(0xffffffffffffffff, &(0x7f0000000480)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000500)=0x10) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r3, &(0x7f0000003e00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0xffffff72, &(0x7f0000003f40)=""/244, 0xfd}}, {{&(0x7f0000002840)=@tipc=@name, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002740)=""/246, 0xf6}, {&(0x7f0000002900)=""/119, 0x77}, {&(0x7f0000003d40)=""/22, 0x16}], 0x3, &(0x7f0000002980)=""/193, 0xc1}}, {{0x0, 0x0, &(0x7f00000028c0), 0x0, &(0x7f0000003ec0)=""/91, 0x5b}}], 0x3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000000) 1m17.309421894s ago: executing program 4 (id=4358): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) 1m17.162615382s ago: executing program 4 (id=4359): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r0, &(0x7f0000002c00)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5411, 0x0) 0s ago: executing program 33 (id=4355): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x98}}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): MTU (-320) [ 332.661641][ T57] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 332.673878][ T57] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 332.686072][ T57] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 332.698450][ T57] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 332.729764][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.743602][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.784733][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.793163][ T57] batman_adv: batadv0: Interface deactivated: dummy0 [ 332.800243][ T57] batman_adv: batadv0: Removing interface: dummy0 [ 332.819217][ T57] veth1_macvtap: left promiscuous mode [ 332.826450][ T57] veth0_macvtap: left promiscuous mode [ 332.834729][ T57] veth1_vlan: left promiscuous mode [ 332.844046][ T57] veth0_vlan: left promiscuous mode [ 333.369268][ T4936] Bluetooth: hci2: command tx timeout [ 333.641437][ T57] team0 (unregistering): Port device team_slave_1 removed [ 333.731621][ T57] team0 (unregistering): Port device team_slave_0 removed [ 334.218193][T14757] netlink: 'syz.0.3165': attribute type 1 has an invalid length. [ 334.292496][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3164'. [ 334.385401][T14766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3166'. [ 334.454374][T14760] veth7: entered allmulticast mode [ 334.476185][T14757] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3165'. [ 334.521097][T14760] bond4: (slave veth7): Enslaving as an active interface with a down link [ 334.551936][T14754] bridge_slave_0: left allmulticast mode [ 334.560697][T14754] bridge_slave_0: left promiscuous mode [ 334.567436][T14754] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.648585][T14754] bridge_slave_1: left allmulticast mode [ 334.657536][T14754] bridge_slave_1: left promiscuous mode [ 334.663371][T14754] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.700152][T14754] bond0: (slave bond_slave_0): Releasing backup interface [ 334.712738][T14754] bond0: (slave bond_slave_1): Releasing backup interface [ 334.733485][T14754] team0: Port device team_slave_0 removed [ 334.746287][T14754] team0: Port device team_slave_1 removed [ 334.764717][T14754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.777576][T14754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.789570][T14754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.808113][T14754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.854809][T14767] bond3: (slave veth0_to_bond): Releasing active interface [ 334.900297][T14767] bond4: (slave veth0_to_bond): making interface the new active one [ 334.911539][T14767] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 334.941535][T14757] 8021q: adding VLAN 0 to HW filter on device bond4 [ 335.038347][ T57] IPVS: stop unused estimator thread 0... [ 335.187486][T14557] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 335.235846][T14557] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.268346][T14557] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 335.349718][T14557] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.400027][T14557] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 335.435609][T14557] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.449790][ T4936] Bluetooth: hci2: command tx timeout [ 335.521246][T14557] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 335.553403][T14557] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.908412][T14557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.017467][T14557] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.064970][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.072162][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.145901][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.154422][ T5765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.181308][T14819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3177'. [ 336.357794][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3169'. [ 336.742714][T14785] team0: Port device team_slave_0 removed [ 337.070060][T14857] xt_socket: unknown flags 0x4c [ 337.208518][T14857] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3186'. [ 337.589442][T14557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.612018][T14875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3189'. [ 338.161631][T14557] veth0_vlan: entered promiscuous mode [ 338.187556][T14557] veth1_vlan: entered promiscuous mode [ 338.342544][T14557] veth0_macvtap: entered promiscuous mode [ 338.353077][T14557] veth1_macvtap: entered promiscuous mode [ 338.424712][T14557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.508049][T14557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.557935][T14915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3202'. [ 339.089758][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.124825][T14518] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.173060][T14518] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.242252][T14518] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.338240][T14518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.373577][T14518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.425994][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.440563][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.757058][T14942] netlink: 'syz.2.3212': attribute type 4 has an invalid length. [ 339.845112][T14948] tipc: Failed to remove unknown binding: 66,0,0/0:357476535/357476537 [ 339.863614][T14948] tipc: Failed to remove unknown binding: 66,0,0/0:357476535/357476536 [ 339.893396][T14948] tipc: Failed to remove unknown binding: 66,0,0/0:357476535/357476537 [ 339.905343][T14948] tipc: Failed to remove unknown binding: 66,0,0/0:357476535/357476536 [ 340.941093][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.959561][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.020579][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.033004][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.046592][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.167149][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3222'. [ 341.178766][T14981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3222'. [ 341.261974][ T5624] bond0: (slave syz_tun): Releasing backup interface [ 341.405983][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 341.771991][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3225'. [ 342.277058][T14973] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.284357][T14973] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.291561][T14973] bridge_slave_0: entered allmulticast mode [ 342.335852][T14973] bridge_slave_0: entered promiscuous mode [ 342.345187][T14973] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.352920][T14973] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.360786][T14973] bridge_slave_1: entered allmulticast mode [ 342.368504][T14973] bridge_slave_1: entered promiscuous mode [ 342.405904][T14973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.475302][T15037] netlink: 'syz.1.3236': attribute type 4 has an invalid length. [ 342.476515][T14973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.602026][T14973] team0: Port device team_slave_0 added [ 342.610612][T14973] team0: Port device team_slave_1 added [ 342.664821][T14973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.672432][T14973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.699278][T14973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.738311][T14973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.745832][T14973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.818771][T14973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.959041][T14973] hsr_slave_0: entered promiscuous mode [ 342.966090][T14973] hsr_slave_1: entered promiscuous mode [ 342.973072][T14973] debugfs: 'hsr0' already exists in 'hsr' [ 342.979020][T14973] Cannot create hsr debugfs directory [ 343.029752][T15051] netlink: 'syz.2.3241': attribute type 21 has an invalid length. [ 343.062077][T15051] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3241'. [ 343.109029][T15051] netlink: 'syz.2.3241': attribute type 4 has an invalid length. [ 343.117680][T15051] netlink: 'syz.2.3241': attribute type 5 has an invalid length. [ 343.136137][T15051] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3241'. [ 343.174335][ T5632] Bluetooth: hci0: command tx timeout [ 343.493358][T14973] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.818294][T14973] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.187242][T14973] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.354641][T14973] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.386108][T15089] netlink: 'syz.1.3254': attribute type 4 has an invalid length. [ 344.575899][T14973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.627503][T14973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.636315][T14973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.669382][T14973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.678262][T14973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.691781][T14973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 344.735070][T14973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.747996][T14973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.788007][T15103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3259'. [ 344.888442][T14973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.916224][T14973] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.959888][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.967206][ T5765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.982890][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.990210][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.222766][ T5632] Bluetooth: hci0: command tx timeout [ 345.545037][T15139] net_ratelimit: 31 callbacks suppressed [ 345.545060][T15139] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 345.557510][T15139] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 345.569749][T15139] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 345.576287][T15139] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 345.584300][T15139] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 345.590821][T15139] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 345.624271][T15141] netlink: 'syz.1.3269': attribute type 4 has an invalid length. [ 345.672437][T15139] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 345.679120][T15139] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 345.686687][T15139] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 345.695199][T15139] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 345.923167][T14973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.934004][T15151] FAULT_INJECTION: forcing a failure. [ 345.934004][T15151] name failslab, interval 1, probability 0, space 0, times 0 [ 345.982652][T14973] veth0_vlan: entered promiscuous mode [ 345.996137][T14973] veth1_vlan: entered promiscuous mode [ 346.059485][T15151] CPU: 1 UID: 0 PID: 15151 Comm: syz.2.3271 Not tainted syzkaller #0 PREEMPT(full) [ 346.059513][T15151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.059526][T15151] Call Trace: [ 346.059534][T15151] [ 346.059552][T15151] dump_stack_lvl+0xe8/0x150 [ 346.059586][T15151] should_fail_ex+0x40c/0x560 [ 346.059616][T15151] should_failslab+0xa8/0x100 [ 346.059647][T15151] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 346.059671][T15151] ? local_lock_release+0x9c/0x160 [ 346.059694][T15151] ? __alloc_skb+0x1d7/0x7a0 [ 346.059713][T15151] ? __alloc_skb+0x1d7/0x7a0 [ 346.059740][T15151] __alloc_skb+0x1d7/0x7a0 [ 346.059766][T15151] netlink_ack+0x136/0xb30 [ 346.059797][T15151] ? __kmalloc_cache_noprof+0x150/0x660 [ 346.059822][T15151] ? nfnetlink_rcv+0x1021/0x28c0 [ 346.059851][T15151] nfnetlink_rcv+0x260c/0x28c0 [ 346.059906][T15151] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 346.059945][T15151] ? ref_tracker_free+0x689/0x830 [ 346.059993][T15151] ? skb_clone+0x246/0x3a0 [ 346.060021][T15151] ? __netlink_deliver_tap+0x811/0x860 [ 346.060053][T15151] ? netlink_deliver_tap+0x2e/0x1b0 [ 346.060077][T15151] ? netlink_deliver_tap+0x2e/0x1b0 [ 346.060105][T15151] netlink_unicast+0x7bb/0x940 [ 346.060138][T15151] netlink_sendmsg+0x813/0xb40 [ 346.060172][T15151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.060199][T15151] ? aa_sock_msg_perm+0xf1/0x1b0 [ 346.060226][T15151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.060248][T15151] sock_sendmsg_nosec+0x13a/0x180 [ 346.060279][T15151] ____sys_sendmsg+0x54e/0x850 [ 346.060308][T15151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.060341][T15151] ? import_iovec+0x73/0xa0 [ 346.060362][T15151] ___sys_sendmsg+0x2a5/0x360 [ 346.060386][T15151] ? __lock_acquire+0x683/0x2cf0 [ 346.060417][T15151] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.060475][T15151] ? __fget_files+0x2a/0x420 [ 346.060500][T15151] ? __fget_files+0x3a2/0x420 [ 346.060542][T15151] __x64_sys_sendmsg+0x1b1/0x290 [ 346.060569][T15151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.060611][T15151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.060632][T15151] do_syscall_64+0x174/0x580 [ 346.060657][T15151] ? trace_irq_disable+0x3b/0x140 [ 346.060681][T15151] ? clear_bhb_loop+0x40/0x90 [ 346.060705][T15151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.060724][T15151] RIP: 0033:0x7ff353d9e019 [ 346.060743][T15151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.060760][T15151] RSP: 002b:00007ff354c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.060781][T15151] RAX: ffffffffffffffda RBX: 00007ff354025fa0 RCX: 00007ff353d9e019 [ 346.060795][T15151] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 346.060807][T15151] RBP: 00007ff354c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 346.060819][T15151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 346.060831][T15151] R13: 00007ff354026038 R14: 00007ff354025fa0 R15: 00007ffc83c720c8 [ 346.060862][T15151] [ 346.615505][T14973] veth0_macvtap: entered promiscuous mode [ 346.628251][T14973] veth1_macvtap: entered promiscuous mode [ 346.683057][T14973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.717414][T14973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.820996][ T1014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.861917][ T1014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.879152][ T1353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.974796][T14518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.982708][T14518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.005473][T14518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.013373][T14518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.057356][ T1014] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.319229][ T5632] Bluetooth: hci0: command tx timeout [ 348.350803][T15204] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3289'. [ 348.494865][T15212] FAULT_INJECTION: forcing a failure. [ 348.494865][T15212] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 348.518470][T15212] CPU: 0 UID: 0 PID: 15212 Comm: syz.2.3292 Not tainted syzkaller #0 PREEMPT(full) [ 348.518497][T15212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.518509][T15212] Call Trace: [ 348.518517][T15212] [ 348.518525][T15212] dump_stack_lvl+0xe8/0x150 [ 348.518559][T15212] should_fail_ex+0x40c/0x560 [ 348.518587][T15212] prepare_alloc_pages+0x230/0x650 [ 348.518623][T15212] __alloc_frozen_pages_noprof+0x12f/0x380 [ 348.518655][T15212] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 348.518696][T15212] ? __pfx_policy_nodemask+0x10/0x10 [ 348.518722][T15212] ? __folio_batch_add_and_move+0x11a/0xc50 [ 348.518744][T15212] ? lock_acquire+0x106/0x350 [ 348.518778][T15212] alloc_pages_mpol+0x212/0x380 [ 348.518809][T15212] folio_alloc_mpol_noprof+0x39/0x160 [ 348.518842][T15212] vma_alloc_folio_noprof+0xe1/0x1e0 [ 348.518871][T15212] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 348.518909][T15212] do_wp_page+0x1163/0x4c70 [ 348.518949][T15212] ? __pfx_do_wp_page+0x10/0x10 [ 348.518966][T15212] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.518991][T15212] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 348.519025][T15212] handle_mm_fault+0x1490/0x3080 [ 348.519060][T15212] ? handle_mm_fault+0xec/0x3080 [ 348.519089][T15212] ? __pfx_handle_mm_fault+0x10/0x10 [ 348.519113][T15212] ? follow_page_pte+0xbd0/0xe70 [ 348.519144][T15212] ? __pfx_follow_page_pte+0x10/0x10 [ 348.519174][T15212] __get_user_pages+0x1678/0x2720 [ 348.519226][T15212] __gup_longterm_locked+0xd52/0x15c0 [ 348.519261][T15212] ? sanity_check_pinned_pages+0x817/0x8d0 [ 348.519286][T15212] gup_fast_fallback+0x1d8c/0x20e0 [ 348.519339][T15212] ? __pfx_gup_fast_fallback+0x10/0x10 [ 348.519357][T15212] ? __x64_sys_recvmsg+0x1ae/0x290 [ 348.519381][T15212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.519402][T15212] ? is_valid_gup_args+0x11f/0x200 [ 348.519424][T15212] ? pin_user_pages_fast+0x4d/0xb0 [ 348.519448][T15212] iov_iter_extract_pages+0x3a1/0x690 [ 348.519477][T15212] extract_iter_to_sg+0xeda/0x2610 [ 348.519516][T15212] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 348.519544][T15212] ? __kmalloc_noprof+0x396/0x720 [ 348.519568][T15212] ? __kmalloc_noprof+0x1ad/0x720 [ 348.519590][T15212] ? sock_kmalloc+0xd6/0x160 [ 348.519613][T15212] ? sock_kmalloc+0xd6/0x160 [ 348.519643][T15212] ? __asan_memset+0x22/0x50 [ 348.519669][T15212] af_alg_get_rsgl+0x493/0x8d0 [ 348.519719][T15212] skcipher_recvmsg+0x39d/0xe10 [ 348.519765][T15212] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 348.519790][T15212] ? __lock_acquire+0x683/0x2cf0 [ 348.519816][T15212] ? aa_sock_msg_perm+0xf1/0x1b0 [ 348.519838][T15212] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 348.519858][T15212] ? security_socket_recvmsg+0x7e/0x2c0 [ 348.519884][T15212] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 348.519912][T15212] sock_recvmsg+0x196/0x1e0 [ 348.519942][T15212] ____sys_recvmsg+0x1e6/0x4a0 [ 348.519977][T15212] ? __pfx_____sys_recvmsg+0x10/0x10 [ 348.520018][T15212] ? import_iovec+0x73/0xa0 [ 348.520040][T15212] ___sys_recvmsg+0x213/0x5a0 [ 348.520070][T15212] ? __pfx____sys_recvmsg+0x10/0x10 [ 348.520100][T15212] ? __fget_files+0x2a/0x420 [ 348.520142][T15212] ? __fget_files+0x3a2/0x420 [ 348.520177][T15212] __x64_sys_recvmsg+0x1ae/0x290 [ 348.520204][T15212] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 348.520247][T15212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.520268][T15212] do_syscall_64+0x174/0x580 [ 348.520291][T15212] ? trace_irq_disable+0x3b/0x140 [ 348.520314][T15212] ? clear_bhb_loop+0x40/0x90 [ 348.520337][T15212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.520356][T15212] RIP: 0033:0x7ff353d9e019 [ 348.520373][T15212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.520388][T15212] RSP: 002b:00007ff354c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 348.520409][T15212] RAX: ffffffffffffffda RBX: 00007ff354025fa0 RCX: 00007ff353d9e019 [ 348.520422][T15212] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 348.520433][T15212] RBP: 00007ff354c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 348.520443][T15212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 348.520453][T15212] R13: 00007ff354026038 R14: 00007ff354025fa0 R15: 00007ffc83c720c8 [ 348.520483][T15212] [ 349.045570][ T4936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 349.055964][ T4936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 349.068890][ T4936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 349.094969][ T4936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 349.105640][ T4936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.233858][ T5630] syz_tun (unregistering): left allmulticast mode [ 349.310735][T15229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3297'. [ 349.390517][T15232] tipc: Failed to remove unknown binding: 66,0,0/0:4141131155/4141131157 [ 349.419602][ T4936] Bluetooth: hci0: command tx timeout [ 349.426600][T15232] tipc: Failed to remove unknown binding: 66,0,0/0:4141131155/4141131156 [ 349.456222][T15232] tipc: Failed to remove unknown binding: 66,0,0/0:4141131155/4141131157 [ 349.512852][T15232] tipc: Failed to remove unknown binding: 66,0,0/0:4141131155/4141131156 [ 349.745309][T15249] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 349.849496][T15254] netlink: 'syz.1.3305': attribute type 1 has an invalid length. [ 349.865686][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3305'. [ 349.940330][T15256] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 350.005916][T15262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3308'. [ 350.344387][T15276] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 350.378726][T15275] syz_tun: entered allmulticast mode [ 350.392255][T15275] dvmrp8: entered allmulticast mode [ 350.413499][T15274] syz_tun: left allmulticast mode [ 350.553320][T15288] FAULT_INJECTION: forcing a failure. [ 350.553320][T15288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.566544][T15288] CPU: 1 UID: 0 PID: 15288 Comm: syz.4.3315 Not tainted syzkaller #0 PREEMPT(full) [ 350.566568][T15288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.566578][T15288] Call Trace: [ 350.566587][T15288] [ 350.566595][T15288] dump_stack_lvl+0xe8/0x150 [ 350.566626][T15288] should_fail_ex+0x40c/0x560 [ 350.566651][T15288] _copy_from_user+0x2d/0xb0 [ 350.566668][T15288] ___sys_sendmsg+0x1c6/0x360 [ 350.566699][T15288] ? __lock_acquire+0x683/0x2cf0 [ 350.566729][T15288] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.566756][T15288] ? kstrtouint+0x6e/0xe0 [ 350.566799][T15288] ? __fget_files+0x2a/0x420 [ 350.566821][T15288] ? __fget_files+0x3a2/0x420 [ 350.566850][T15288] __sys_sendmmsg+0x273/0x4d0 [ 350.566878][T15288] ? __pfx___sys_sendmmsg+0x10/0x10 [ 350.566908][T15288] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 350.566945][T15288] ? ksys_write+0x242/0x270 [ 350.566965][T15288] ? __pfx_ksys_write+0x10/0x10 [ 350.566989][T15288] __x64_sys_sendmmsg+0xa0/0xc0 [ 350.567010][T15288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.567027][T15288] do_syscall_64+0x174/0x580 [ 350.567050][T15288] ? trace_irq_disable+0x3b/0x140 [ 350.567073][T15288] ? clear_bhb_loop+0x40/0x90 [ 350.567095][T15288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.567113][T15288] RIP: 0033:0x7f2bbdf9e019 [ 350.567130][T15288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.567145][T15288] RSP: 002b:00007f2bbee94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 350.567165][T15288] RAX: ffffffffffffffda RBX: 00007f2bbe225fa0 RCX: 00007f2bbdf9e019 [ 350.567177][T15288] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 350.567189][T15288] RBP: 00007f2bbee94090 R08: 0000000000000000 R09: 0000000000000000 [ 350.567199][T15288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.567209][T15288] R13: 00007f2bbe226038 R14: 00007f2bbe225fa0 R15: 00007ffd530bcaa8 [ 350.567239][T15288] [ 350.571706][T15285] tipc: Failed to remove unknown binding: 66,0,0/0:3636280074/3636280076 [ 350.798543][T15209] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.810122][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3317'. [ 350.813027][T15285] tipc: Failed to remove unknown binding: 66,0,0/0:3636280074/3636280075 [ 350.819321][T15209] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.827862][T15285] tipc: Failed to remove unknown binding: 66,0,0/0:3636280074/3636280076 [ 350.840387][T15209] bridge_slave_0: entered allmulticast mode [ 350.843232][T15285] tipc: Failed to remove unknown binding: 66,0,0/0:3636280074/3636280075 [ 350.854071][T15209] bridge_slave_0: entered promiscuous mode [ 350.866776][T15209] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.874077][T15209] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.881695][T15209] bridge_slave_1: entered allmulticast mode [ 350.891552][T15209] bridge_slave_1: entered promiscuous mode [ 350.949626][T15209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.004955][T15209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.034774][T15298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3318'. [ 351.087295][T15209] team0: Port device team_slave_0 added [ 351.128412][T15209] team0: Port device team_slave_1 added [ 351.229305][T15209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.236306][T15209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.269174][ T4936] Bluetooth: hci3: command tx timeout [ 351.299922][T15309] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3322'. [ 351.309000][T15209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.324526][T15209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.334342][T15209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.361655][T15209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.395534][T15310] netlink: 'syz.4.3322': attribute type 1 has an invalid length. [ 351.583778][T15209] hsr_slave_0: entered promiscuous mode [ 351.594852][T15209] hsr_slave_1: entered promiscuous mode [ 351.616702][T15209] debugfs: 'hsr0' already exists in 'hsr' [ 351.623041][T15209] Cannot create hsr debugfs directory [ 351.914651][T15329] tipc: Failed to remove unknown binding: 66,0,0/0:3663945216/3663945218 [ 351.923492][T15329] tipc: Failed to remove unknown binding: 66,0,0/0:3663945216/3663945217 [ 351.935504][T15329] tipc: Failed to remove unknown binding: 66,0,0/0:3663945216/3663945218 [ 351.949748][T15329] tipc: Failed to remove unknown binding: 66,0,0/0:3663945216/3663945217 [ 352.689378][T15352] netlink: 'syz.3.3335': attribute type 4 has an invalid length. [ 352.790311][T15209] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.800825][T15209] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.893280][T15335] syzkaller0: entered promiscuous mode [ 352.898849][T15335] syzkaller0: entered allmulticast mode [ 353.102595][T15209] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.112953][T15209] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.319426][ T4936] Bluetooth: hci3: command tx timeout [ 353.406349][T15367] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3342'. [ 353.426936][T15367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3342'. [ 353.665646][T15209] bond0: (slave netdevsim1): Releasing backup interface [ 353.676736][T15386] netlink: 'syz.2.3346': attribute type 1 has an invalid length. [ 353.723899][T15209] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.734840][T15209] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.990953][T15209] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.001707][T15209] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.211998][T15416] tipc: Failed to remove unknown binding: 66,0,0/0:1628592647/1628592649 [ 354.240389][T15416] tipc: Failed to remove unknown binding: 66,0,0/0:1628592647/1628592648 [ 354.277503][T15420] tipc: Failed to remove unknown binding: 66,0,0/0:1628592647/1628592649 [ 354.286422][T15420] tipc: Failed to remove unknown binding: 66,0,0/0:1628592647/1628592648 [ 354.541782][T15429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3356'. [ 354.646319][T15432] FAULT_INJECTION: forcing a failure. [ 354.646319][T15432] name failslab, interval 1, probability 0, space 0, times 0 [ 354.659012][T15432] CPU: 1 UID: 0 PID: 15432 Comm: syz.2.3357 Not tainted syzkaller #0 PREEMPT(full) [ 354.659038][T15432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.659048][T15432] Call Trace: [ 354.659057][T15432] [ 354.659064][T15432] dump_stack_lvl+0xe8/0x150 [ 354.659098][T15432] should_fail_ex+0x40c/0x560 [ 354.659123][T15432] should_failslab+0xa8/0x100 [ 354.659151][T15432] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 354.659174][T15432] ? local_lock_release+0x9c/0x160 [ 354.659197][T15432] ? __alloc_skb+0x1d7/0x7a0 [ 354.659216][T15432] ? __alloc_skb+0x1d7/0x7a0 [ 354.659243][T15432] __alloc_skb+0x1d7/0x7a0 [ 354.659267][T15432] netlink_sendmsg+0x5d4/0xb40 [ 354.659302][T15432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.659331][T15432] ? aa_sock_msg_perm+0xf1/0x1b0 [ 354.659358][T15432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.659382][T15432] sock_sendmsg_nosec+0x13a/0x180 [ 354.659414][T15432] ____sys_sendmsg+0x54e/0x850 [ 354.659443][T15432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.659476][T15432] ? import_iovec+0x73/0xa0 [ 354.659498][T15432] ___sys_sendmsg+0x2a5/0x360 [ 354.659519][T15432] ? __lock_acquire+0x683/0x2cf0 [ 354.659550][T15432] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.659607][T15432] ? __fget_files+0x2a/0x420 [ 354.659637][T15432] ? __fget_files+0x3a2/0x420 [ 354.659672][T15432] __x64_sys_sendmsg+0x1b1/0x290 [ 354.659699][T15432] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.659740][T15432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.659762][T15432] do_syscall_64+0x174/0x580 [ 354.659793][T15432] ? trace_irq_disable+0x3b/0x140 [ 354.659818][T15432] ? clear_bhb_loop+0x40/0x90 [ 354.659842][T15432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.659861][T15432] RIP: 0033:0x7ff353d9e019 [ 354.659879][T15432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.659894][T15432] RSP: 002b:00007ff354c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.659912][T15432] RAX: ffffffffffffffda RBX: 00007ff354025fa0 RCX: 00007ff353d9e019 [ 354.659924][T15432] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 354.659935][T15432] RBP: 00007ff354c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 354.659947][T15432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.659958][T15432] R13: 00007ff354026038 R14: 00007ff354025fa0 R15: 00007ffc83c720c8 [ 354.659989][T15432] [ 355.000378][T15429] veth1_to_team: entered promiscuous mode [ 355.011790][T15429] veth1_to_team: left promiscuous mode [ 355.375906][T15209] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 355.433949][ T4936] Bluetooth: hci3: command tx timeout [ 355.447157][T15209] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 355.452391][T15455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3362'. [ 355.466095][T15209] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 355.498137][T15209] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.528372][T15209] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 355.540095][T15209] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.553240][T15209] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 355.564408][T15209] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.869650][T15209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.888714][T15474] syzkaller0: entered promiscuous mode [ 355.889775][T15478] net_ratelimit: 4 callbacks suppressed [ 355.889791][T15478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.919021][T15474] syzkaller0: entered allmulticast mode [ 355.981552][T15209] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.016520][T15475] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3366'. [ 356.087624][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.094874][ T5765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.168880][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.176236][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.478231][T15493] syzkaller0: entered promiscuous mode [ 356.483935][T15493] syzkaller0: entered allmulticast mode [ 356.492943][T15498] netlink: 'syz.4.3374': attribute type 4 has an invalid length. [ 357.529365][ T4936] Bluetooth: hci3: command tx timeout [ 357.764385][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3380'. [ 357.785087][T15541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3380'. [ 358.121530][T15546] nbd0: detected capacity change from 0 to 127 [ 358.537778][ T4936] block nbd0: Receive control failed (result -104) [ 360.433116][T15586] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3389'. [ 360.638848][T15209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.783368][T15209] veth0_vlan: entered promiscuous mode [ 360.803862][T15598] netlink: 'syz.2.3393': attribute type 4 has an invalid length. [ 360.806721][T15209] veth1_vlan: entered promiscuous mode [ 360.824257][T15595] Bluetooth: MGMT ver 1.23 [ 360.834549][T15595] netlink: 'syz.3.3391': attribute type 1 has an invalid length. [ 360.873916][T15595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.921084][T15595] bond1: (slave geneve2): making interface the new active one [ 360.933461][T15595] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 361.461800][ T327] block nbd0: Connection timed out, retrying (0/1 alive) [ 361.484570][ T327] block nbd0: Dead connection, failed to find a fallback [ 361.503123][ T327] block nbd0: shutting down sockets [ 361.508768][ T327] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 361.528100][ T327] Buffer I/O error on dev nbd0, logical block 0, async page read [ 361.535922][ T327] Buffer I/O error on dev nbd0, logical block 1, async page read [ 361.543734][ T327] Buffer I/O error on dev nbd0, logical block 2, async page read [ 361.551482][ T327] Buffer I/O error on dev nbd0, logical block 3, async page read [ 361.560570][ T327] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 361.570331][ T327] Buffer I/O error on dev nbd0, logical block 0, async page read [ 361.578172][ T327] Buffer I/O error on dev nbd0, logical block 1, async page read [ 361.587129][ T327] Buffer I/O error on dev nbd0, logical block 2, async page read [ 361.610126][ T327] Buffer I/O error on dev nbd0, logical block 3, async page read [ 361.627914][ T327] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 361.637453][ T327] Buffer I/O error on dev nbd0, logical block 0, async page read [ 361.645192][ T327] Buffer I/O error on dev nbd0, logical block 1, async page read [ 361.653229][ T327] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 361.662918][ T327] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 361.674480][ T327] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.684101][ T327] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.693726][ T327] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.703390][ T327] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.709954][T15611] netlink: 'syz.4.3396': attribute type 1 has an invalid length. [ 361.728581][ T327] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 361.738330][T13774] ldm_validate_partition_table(): Disk read failed. [ 361.746659][T13774] Dev nbd0: unable to read RDB block 0 [ 361.755683][T13774] nbd0: unable to read partition table [ 361.779639][T13774] ldm_validate_partition_table(): Disk read failed. [ 361.787533][T13774] Dev nbd0: unable to read RDB block 0 [ 361.796680][T13774] nbd0: unable to read partition table [ 363.412797][T15209] veth0_macvtap: entered promiscuous mode [ 363.459667][T15603] syzkaller0: entered promiscuous mode [ 363.465187][T15603] syzkaller0: entered allmulticast mode [ 363.483843][T15611] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 363.938611][T15627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3401'. [ 366.028346][T15627] veth1_to_team: entered promiscuous mode [ 366.058112][T15627] veth1_to_team: left promiscuous mode [ 366.114231][T15209] veth1_macvtap: entered promiscuous mode [ 366.270793][T15209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.333561][T15209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.364914][T15636] netlink: 'syz.1.3404': attribute type 4 has an invalid length. [ 366.570406][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.615449][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.708037][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.719631][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.742616][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.750474][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.852533][T15653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.866545][T14518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.879208][T14518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.205356][T15659] syzkaller0: entered promiscuous mode [ 367.210943][T15659] syzkaller0: entered allmulticast mode [ 367.809266][T15681] FAULT_INJECTION: forcing a failure. [ 367.809266][T15681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.837994][T15681] CPU: 0 UID: 0 PID: 15681 Comm: syz.3.3424 Not tainted syzkaller #0 PREEMPT(full) [ 367.838022][T15681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.838052][T15681] Call Trace: [ 367.838060][T15681] [ 367.838069][T15681] dump_stack_lvl+0xe8/0x150 [ 367.838104][T15681] should_fail_ex+0x40c/0x560 [ 367.838133][T15681] _copy_to_user+0x31/0xb0 [ 367.838154][T15681] simple_read_from_buffer+0xe1/0x170 [ 367.838187][T15681] proc_fail_nth_read+0x1bb/0x230 [ 367.838218][T15681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.838248][T15681] ? rw_verify_area+0x24a/0x4c0 [ 367.838269][T15681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.838296][T15681] vfs_read+0x213/0xa80 [ 367.838319][T15681] ? __pfx___mutex_lock+0x10/0x10 [ 367.838347][T15681] ? __pfx_vfs_read+0x10/0x10 [ 367.838367][T15681] ? __fget_files+0x2a/0x420 [ 367.838395][T15681] ? __fget_files+0x3a2/0x420 [ 367.838419][T15681] ? __fget_files+0x2a/0x420 [ 367.838453][T15681] ksys_read+0x150/0x270 [ 367.838474][T15681] ? __pfx_ksys_read+0x10/0x10 [ 367.838502][T15681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.838524][T15681] do_syscall_64+0x174/0x580 [ 367.838547][T15681] ? trace_irq_disable+0x3b/0x140 [ 367.838572][T15681] ? clear_bhb_loop+0x40/0x90 [ 367.838596][T15681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.838614][T15681] RIP: 0033:0x7f942e75e84e [ 367.838633][T15681] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 367.838649][T15681] RSP: 002b:00007f942f6eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 367.838669][T15681] RAX: ffffffffffffffda RBX: 00007f942f6eb6c0 RCX: 00007f942e75e84e [ 367.838682][T15681] RDX: 000000000000000f RSI: 00007f942f6eb0a0 RDI: 0000000000000003 [ 367.838694][T15681] RBP: 00007f942f6eb090 R08: 0000000000000000 R09: 0000000000000000 [ 367.838705][T15681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.838716][T15681] R13: 00007f942ea26038 R14: 00007f942ea25fa0 R15: 00007ffffb610d78 [ 367.838747][T15681] [ 367.908947][T15685] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 368.057966][T15685] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 368.105491][T15685] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 368.112031][T15685] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 368.127060][T15685] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 368.133670][T15685] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 368.134683][ T9291] hid-generic 0005:04F3:5505.0001: collection stack underflow [ 368.146284][T15685] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 368.154192][T15685] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 368.241957][ T9291] hid-generic 0005:04F3:5505.0001: item 0 2 0 12 parsing failed [ 368.251250][ T9291] hid-generic 0005:04F3:5505.0001: probe with driver hid-generic failed with error -22 [ 368.294677][T15685] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 368.301261][T15685] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 368.368252][T15694] FAULT_INJECTION: forcing a failure. [ 368.368252][T15694] name failslab, interval 1, probability 0, space 0, times 0 [ 368.382195][T15694] CPU: 0 UID: 0 PID: 15694 Comm: syz.0.3426 Not tainted syzkaller #0 PREEMPT(full) [ 368.382216][T15694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 368.382225][T15694] Call Trace: [ 368.382231][T15694] [ 368.382237][T15694] dump_stack_lvl+0xe8/0x150 [ 368.382264][T15694] should_fail_ex+0x40c/0x560 [ 368.382289][T15694] should_failslab+0xa8/0x100 [ 368.382312][T15694] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 368.382329][T15694] ? local_lock_release+0x9c/0x160 [ 368.382346][T15694] ? __alloc_skb+0x1d7/0x7a0 [ 368.382359][T15694] ? __alloc_skb+0x1d7/0x7a0 [ 368.382380][T15694] __alloc_skb+0x1d7/0x7a0 [ 368.382398][T15694] netlink_sendmsg+0x5d4/0xb40 [ 368.382424][T15694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.382445][T15694] ? aa_sock_msg_perm+0xf1/0x1b0 [ 368.382465][T15694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.382482][T15694] sock_sendmsg_nosec+0x13a/0x180 [ 368.382505][T15694] ____sys_sendmsg+0x54e/0x850 [ 368.382526][T15694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.382550][T15694] ? import_iovec+0x73/0xa0 [ 368.382567][T15694] ___sys_sendmsg+0x2a5/0x360 [ 368.382583][T15694] ? __lock_acquire+0x683/0x2cf0 [ 368.382606][T15694] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.382627][T15694] ? kstrtouint+0x6e/0xe0 [ 368.382663][T15694] ? __fget_files+0x2a/0x420 [ 368.382682][T15694] ? __fget_files+0x3a2/0x420 [ 368.382708][T15694] __sys_sendmmsg+0x273/0x4d0 [ 368.382730][T15694] ? __pfx___sys_sendmmsg+0x10/0x10 [ 368.382755][T15694] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 368.382785][T15694] ? ksys_write+0x242/0x270 [ 368.382801][T15694] ? __pfx_ksys_write+0x10/0x10 [ 368.382819][T15694] __x64_sys_sendmmsg+0xa0/0xc0 [ 368.382838][T15694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.382853][T15694] do_syscall_64+0x174/0x580 [ 368.382882][T15694] ? trace_irq_disable+0x3b/0x140 [ 368.382900][T15694] ? clear_bhb_loop+0x40/0x90 [ 368.382918][T15694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.382933][T15694] RIP: 0033:0x7f6c4bb9e019 [ 368.382948][T15694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.382961][T15694] RSP: 002b:00007f6c4ca29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 368.382977][T15694] RAX: ffffffffffffffda RBX: 00007f6c4be25fa0 RCX: 00007f6c4bb9e019 [ 368.382988][T15694] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 368.382999][T15694] RBP: 00007f6c4ca29090 R08: 0000000000000000 R09: 0000000000000000 [ 368.383009][T15694] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 368.383018][T15694] R13: 00007f6c4be26038 R14: 00007f6c4be25fa0 R15: 00007ffe135f7e18 [ 368.383043][T15694] [ 371.903172][T15765] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 372.870039][T15799] netlink: 'syz.3.3465': attribute type 4 has an invalid length. [ 372.977785][T15801] netlink: 'syz.4.3466': attribute type 4 has an invalid length. [ 373.074265][T15804] netlink: 'syz.1.3467': attribute type 4 has an invalid length. [ 373.693379][T15818] xt_TCPMSS: Only works on TCP SYN packets [ 373.754958][T15818] bridge1: entered promiscuous mode [ 373.768513][T15818] bridge1: entered allmulticast mode [ 373.785647][T15818] team0: Port device bridge1 added [ 373.793883][T15818] bridge0: port 3(team0) entered blocking state [ 373.800347][T15818] bridge0: port 3(team0) entered disabled state [ 373.812819][T15818] team0: entered allmulticast mode [ 373.838958][T15818] team_slave_0: entered allmulticast mode [ 373.873766][T15818] team_slave_1: entered allmulticast mode [ 373.907594][T15818] team0: entered promiscuous mode [ 373.915760][T15818] team_slave_0: entered promiscuous mode [ 373.916183][T15824] FAULT_INJECTION: forcing a failure. [ 373.916183][T15824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.921934][T15818] team_slave_1: entered promiscuous mode [ 373.943161][T15818] bridge0: port 3(team0) entered blocking state [ 373.949635][T15818] bridge0: port 3(team0) entered forwarding state [ 373.964532][T15824] CPU: 0 UID: 0 PID: 15824 Comm: syz.3.3474 Not tainted syzkaller #0 PREEMPT(full) [ 373.964557][T15824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 373.964568][T15824] Call Trace: [ 373.964575][T15824] [ 373.964583][T15824] dump_stack_lvl+0xe8/0x150 [ 373.964617][T15824] should_fail_ex+0x40c/0x560 [ 373.964645][T15824] _copy_to_iter+0x404/0x1810 [ 373.964684][T15824] ? __pfx__copy_to_iter+0x10/0x10 [ 373.964709][T15824] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 373.964733][T15824] ? lockdep_hardirqs_on+0x7a/0x110 [ 373.964757][T15824] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 373.964784][T15824] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 373.964816][T15824] __skb_datagram_iter+0xf8/0x980 [ 373.964839][T15824] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 373.964856][T15824] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 373.964889][T15824] skb_copy_datagram_iter+0xb5/0x240 [ 373.964918][T15824] ping_recvmsg+0x1cf/0x1010 [ 373.964948][T15824] ? __pfx_aa_sk_perm+0x10/0x10 [ 373.964970][T15824] ? __pfx_ping_recvmsg+0x10/0x10 [ 373.964989][T15824] ? aa_sock_msg_perm+0xf1/0x1b0 [ 373.965007][T15824] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 373.965025][T15824] ? sock_common_recvmsg+0x28/0xa0 [ 373.965043][T15824] ? __pfx_sock_common_recvmsg+0x10/0x10 [ 373.965061][T15824] sock_recvmsg+0x196/0x1e0 [ 373.965090][T15824] ____sys_recvmsg+0x1e6/0x4a0 [ 373.965111][T15824] ? iovec_from_user+0x87/0x250 [ 373.965134][T15824] ? __pfx_____sys_recvmsg+0x10/0x10 [ 373.965174][T15824] ? import_iovec+0x73/0xa0 [ 373.965196][T15824] ___sys_recvmsg+0x213/0x5a0 [ 373.965227][T15824] ? __pfx____sys_recvmsg+0x10/0x10 [ 373.965256][T15824] ? __fget_files+0x2a/0x420 [ 373.965298][T15824] ? __fget_files+0x3a2/0x420 [ 373.965333][T15824] do_recvmmsg+0x31a/0x7f0 [ 373.965366][T15824] ? __pfx_do_recvmmsg+0x10/0x10 [ 373.965398][T15824] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 373.965425][T15824] ? __fget_files+0x3a2/0x420 [ 373.965458][T15824] __x64_sys_recvmmsg+0x198/0x250 [ 373.965492][T15824] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 373.965525][T15824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.965547][T15824] do_syscall_64+0x174/0x580 [ 373.965572][T15824] ? trace_irq_disable+0x3b/0x140 [ 373.965596][T15824] ? clear_bhb_loop+0x40/0x90 [ 373.965619][T15824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.965637][T15824] RIP: 0033:0x7f942e79e019 [ 373.965655][T15824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.965670][T15824] RSP: 002b:00007f942f6eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 373.965687][T15824] RAX: ffffffffffffffda RBX: 00007f942ea25fa0 RCX: 00007f942e79e019 [ 373.965698][T15824] RDX: 0000000000000003 RSI: 0000200000003780 RDI: 0000000000000003 [ 373.965710][T15824] RBP: 00007f942f6eb090 R08: 0000000000000000 R09: 0000000000000000 [ 373.965721][T15824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.965732][T15824] R13: 00007f942ea26038 R14: 00007f942ea25fa0 R15: 00007ffffb610d78 [ 373.965761][T15824] [ 374.776104][T15849] netlink: 'syz.3.3485': attribute type 4 has an invalid length. [ 374.814134][T15852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.791376][T15892] netlink: 'syz.0.3506': attribute type 4 has an invalid length. [ 375.806416][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3509'. [ 375.900002][T15904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3511'. [ 375.915997][T15904] x_tables: duplicate entry at hook 1 [ 376.365136][T15923] syzkaller0: entered promiscuous mode [ 376.378422][T15923] syzkaller0: entered allmulticast mode [ 376.739171][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3522'. [ 376.981476][T15951] netlink: 'syz.3.3532': attribute type 4 has an invalid length. [ 377.177225][T15960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.265326][T15964] syzkaller0: entered promiscuous mode [ 377.295878][T15964] syzkaller0: entered allmulticast mode [ 377.545451][T15970] netlink: 'syz.3.3541': attribute type 23 has an invalid length. [ 378.103377][T15992] netlink: 'syz.3.3551': attribute type 4 has an invalid length. [ 378.234380][T16001] syzkaller0: entered promiscuous mode [ 378.245189][T16001] syzkaller0: entered allmulticast mode [ 378.549909][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.761668][T16030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.965965][T16033] syzkaller0: entered promiscuous mode [ 378.979679][T16033] syzkaller0: entered allmulticast mode [ 379.058458][T16039] netlink: 'syz.3.3573': attribute type 4 has an invalid length. [ 379.311302][T16052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.173163][T16083] syzkaller0: entered promiscuous mode [ 380.178677][T16083] syzkaller0: entered allmulticast mode [ 380.567184][T16095] veth1_macvtap: left promiscuous mode [ 380.572714][T16095] macsec0: entered promiscuous mode [ 380.872881][T16114] net_ratelimit: 2 callbacks suppressed [ 380.872900][T16114] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 380.884932][T16114] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 380.886575][T16118] netlink: 'syz.1.3608': attribute type 1 has an invalid length. [ 380.891701][T16114] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 380.905446][T16114] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 380.926619][T16114] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 380.933097][T16114] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 380.940712][T16114] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 380.947171][T16114] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 380.953991][T16114] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 380.960447][T16114] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 381.233717][T16133] syzkaller0: entered promiscuous mode [ 381.239228][T16133] syzkaller0: entered allmulticast mode [ 382.049780][T16169] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode [ 382.057310][T16169] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode [ 382.483248][T16194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.607354][T16198] syzkaller0: entered promiscuous mode [ 382.612869][T16198] syzkaller0: entered allmulticast mode [ 383.306762][T16229] syzkaller0: entered promiscuous mode [ 383.313216][T16229] syzkaller0: entered allmulticast mode [ 383.637998][T16246] FAULT_INJECTION: forcing a failure. [ 383.637998][T16246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.678028][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3669'. [ 383.715351][T16249] x_tables: unsorted entry at hook 3 [ 383.730241][T16246] CPU: 0 UID: 0 PID: 16246 Comm: syz.2.3667 Not tainted syzkaller #0 PREEMPT(full) [ 383.730270][T16246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.730282][T16246] Call Trace: [ 383.730290][T16246] [ 383.730298][T16246] dump_stack_lvl+0xe8/0x150 [ 383.730331][T16246] should_fail_ex+0x40c/0x560 [ 383.730360][T16246] _copy_from_iter+0x1d3/0x1660 [ 383.730385][T16246] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 383.730418][T16246] ? rcu_is_watching+0x15/0xb0 [ 383.730438][T16246] ? trace_kmem_cache_alloc+0x29/0xe0 [ 383.730463][T16246] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 383.730488][T16246] ? __pfx__copy_from_iter+0x10/0x10 [ 383.730514][T16246] ? __alloc_skb+0x276/0x7a0 [ 383.730533][T16246] ? __alloc_skb+0x276/0x7a0 [ 383.730560][T16246] ? netlink_sendmsg+0x650/0xb40 [ 383.730586][T16246] ? skb_put+0x112/0x210 [ 383.730610][T16246] netlink_sendmsg+0x6c0/0xb40 [ 383.730645][T16246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.730675][T16246] ? aa_sock_msg_perm+0xf1/0x1b0 [ 383.730702][T16246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.730726][T16246] sock_sendmsg_nosec+0x13a/0x180 [ 383.730759][T16246] ____sys_sendmsg+0x54e/0x850 [ 383.730788][T16246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.730822][T16246] ? import_iovec+0x73/0xa0 [ 383.730844][T16246] ___sys_sendmsg+0x2a5/0x360 [ 383.730868][T16246] ? __lock_acquire+0x683/0x2cf0 [ 383.730898][T16246] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.730957][T16246] ? __fget_files+0x2a/0x420 [ 383.730982][T16246] ? __fget_files+0x3a2/0x420 [ 383.731018][T16246] __x64_sys_sendmsg+0x1b1/0x290 [ 383.731046][T16246] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.731088][T16246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.731110][T16246] do_syscall_64+0x174/0x580 [ 383.731136][T16246] ? trace_irq_disable+0x3b/0x140 [ 383.731160][T16246] ? clear_bhb_loop+0x40/0x90 [ 383.731184][T16246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.731204][T16246] RIP: 0033:0x7ff353d9e019 [ 383.731222][T16246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.731238][T16246] RSP: 002b:00007ff354c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.731259][T16246] RAX: ffffffffffffffda RBX: 00007ff354025fa0 RCX: 00007ff353d9e019 [ 383.731274][T16246] RDX: 0000000000008080 RSI: 0000200000000280 RDI: 0000000000000003 [ 383.731287][T16246] RBP: 00007ff354c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 383.731300][T16246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.731312][T16246] R13: 00007ff354026038 R14: 00007ff354025fa0 R15: 00007ffc83c720c8 [ 383.731343][T16246] [ 384.508736][T16285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3684'. [ 384.529962][T16288] FAULT_INJECTION: forcing a failure. [ 384.529962][T16288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.587846][T16288] CPU: 0 UID: 0 PID: 16288 Comm: syz.4.3683 Not tainted syzkaller #0 PREEMPT(full) [ 384.587873][T16288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 384.587885][T16288] Call Trace: [ 384.587893][T16288] [ 384.587901][T16288] dump_stack_lvl+0xe8/0x150 [ 384.587934][T16288] should_fail_ex+0x40c/0x560 [ 384.587962][T16288] _copy_from_iter+0x1d3/0x1660 [ 384.587988][T16288] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 384.588014][T16288] ? rcu_is_watching+0x15/0xb0 [ 384.588033][T16288] ? trace_kmem_cache_alloc+0x29/0xe0 [ 384.588058][T16288] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 384.588081][T16288] ? __pfx__copy_from_iter+0x10/0x10 [ 384.588106][T16288] ? __alloc_skb+0x276/0x7a0 [ 384.588125][T16288] ? __alloc_skb+0x276/0x7a0 [ 384.588147][T16288] ? netlink_sendmsg+0x650/0xb40 [ 384.588169][T16288] ? skb_put+0x112/0x210 [ 384.588190][T16288] netlink_sendmsg+0x6c0/0xb40 [ 384.588224][T16288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.588253][T16288] ? aa_sock_msg_perm+0xf1/0x1b0 [ 384.588278][T16288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.588308][T16288] sock_sendmsg_nosec+0x13a/0x180 [ 384.588338][T16288] ____sys_sendmsg+0x54e/0x850 [ 384.588367][T16288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.588400][T16288] ? import_iovec+0x73/0xa0 [ 384.588421][T16288] ___sys_sendmsg+0x2a5/0x360 [ 384.588444][T16288] ? __lock_acquire+0x683/0x2cf0 [ 384.588475][T16288] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.588523][T16288] ? __fget_files+0x2a/0x420 [ 384.588547][T16288] ? __fget_files+0x3a2/0x420 [ 384.588582][T16288] __x64_sys_sendmsg+0x1b1/0x290 [ 384.588609][T16288] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.588650][T16288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.588671][T16288] do_syscall_64+0x174/0x580 [ 384.588697][T16288] ? trace_irq_disable+0x3b/0x140 [ 384.588720][T16288] ? clear_bhb_loop+0x40/0x90 [ 384.588743][T16288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.588760][T16288] RIP: 0033:0x7f2bbdf9e019 [ 384.588778][T16288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.588794][T16288] RSP: 002b:00007f2bbee94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.588814][T16288] RAX: ffffffffffffffda RBX: 00007f2bbe225fa0 RCX: 00007f2bbdf9e019 [ 384.588828][T16288] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 384.588841][T16288] RBP: 00007f2bbee94090 R08: 0000000000000000 R09: 0000000000000000 [ 384.588852][T16288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.588863][T16288] R13: 00007f2bbe226038 R14: 00007f2bbe225fa0 R15: 00007ffd530bcaa8 [ 384.588893][T16288] [ 385.646867][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3703'. [ 385.708222][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3703'. [ 385.741084][T14518] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.759805][T16337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3700'. [ 385.760424][T14518] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.837839][T14518] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.867008][T14518] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.008306][T16385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3721'. [ 387.772241][ T48] IPVS: starting estimator thread 0... [ 387.784561][T16417] netlink: 'syz.1.3734': attribute type 4 has an invalid length. [ 387.951450][T16418] IPVS: using max 27 ests per chain, 64800 per kthread [ 388.611113][T16454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3747'. [ 388.625078][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3749'. [ 388.722573][T16457] netlink: 'syz.0.3751': attribute type 4 has an invalid length. [ 389.725409][T16501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3771'. [ 389.845149][T16508] net_ratelimit: 224 callbacks suppressed [ 389.845169][T16508] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 389.850513][T16510] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3774'. [ 389.851040][T16508] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 389.873371][T16508] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 389.891388][T16508] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 389.943784][T16508] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 389.950280][T16508] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 389.957174][T16508] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 389.963628][T16508] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 389.970497][T16508] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 389.976960][T16508] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 390.230873][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3778'. [ 390.361315][T16531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3784'. [ 390.470756][T16533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3785'. [ 390.483511][T16537] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3786'. [ 390.713873][T16547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3792'. [ 390.788688][T16547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3792'. [ 390.819770][T16541] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3790'. [ 391.013680][T16556] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.3796'. [ 392.040770][T16614] netlink: 'syz.3.3821': attribute type 4 has an invalid length. [ 393.393330][T16673] syzkaller1: entered promiscuous mode [ 393.433409][T16673] syzkaller1: entered allmulticast mode [ 394.592362][T16727] mac80211_hwsim hwsim18 syzkaller0: left promiscuous mode [ 394.606303][T16727] mac80211_hwsim hwsim18 syzkaller0: left allmulticast mode [ 395.081262][T16760] net_ratelimit: 474 callbacks suppressed [ 395.081282][T16760] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 395.105234][T16760] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 395.144365][T16760] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 395.150822][T16760] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 395.157549][T16760] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 395.164001][T16760] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 395.170952][T16760] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 395.177408][T16760] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 395.184174][T16760] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 395.190615][T16760] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 396.465058][T16843] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode [ 396.472580][T16843] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode [ 396.742449][T16860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.811884][T16862] __nla_validate_parse: 1 callbacks suppressed [ 396.811903][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3927'. [ 396.840044][T16862] x_tables: duplicate underflow at hook 1 [ 397.109761][T16881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3933'. [ 397.144243][T16881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3933'. [ 397.153549][T16881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3933'. [ 397.268641][T16889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3936'. [ 397.636227][T16913] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3948'. [ 397.879479][ T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.892733][ T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.908188][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 397.927224][ T57] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.950956][ T57] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.095205][T16937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.412682][T16947] netlink: 'syz.0.3961': attribute type 4 has an invalid length. [ 398.972306][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 398.987944][T16962] Bluetooth: MGMT ver 1.23 [ 399.500635][T16977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.737478][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3975'. [ 400.043454][T16993] netlink: 'syz.3.3979': attribute type 4 has an invalid length. [ 401.089828][T17021] netlink: 'syz.4.3991': attribute type 4 has an invalid length. [ 401.389715][T17031] netlink: 'syz.3.3995': attribute type 4 has an invalid length. [ 402.696760][T17067] netlink: 'syz.1.4009': attribute type 4 has an invalid length. [ 402.805015][T17072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4010'. [ 403.048594][T17080] FAULT_INJECTION: forcing a failure. [ 403.048594][T17080] name failslab, interval 1, probability 0, space 0, times 0 [ 403.061234][T17080] CPU: 1 UID: 0 PID: 17080 Comm: syz.3.4014 Not tainted syzkaller #0 PREEMPT(full) [ 403.061259][T17080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.061271][T17080] Call Trace: [ 403.061279][T17080] [ 403.061287][T17080] dump_stack_lvl+0xe8/0x150 [ 403.061321][T17080] should_fail_ex+0x40c/0x560 [ 403.061351][T17080] should_failslab+0xa8/0x100 [ 403.061380][T17080] __kmalloc_noprof+0xfe/0x720 [ 403.061406][T17080] ? sock_kmalloc+0xd6/0x160 [ 403.061430][T17080] ? sock_kmalloc+0xd6/0x160 [ 403.061460][T17080] sock_kmalloc+0xd6/0x160 [ 403.061488][T17080] ____sys_sendmsg+0x1be/0x850 [ 403.061517][T17080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.061557][T17080] ? import_iovec+0x73/0xa0 [ 403.061580][T17080] ___sys_sendmsg+0x2a5/0x360 [ 403.061603][T17080] ? __lock_acquire+0x683/0x2cf0 [ 403.061634][T17080] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.061691][T17080] ? __fget_files+0x2a/0x420 [ 403.061717][T17080] ? __fget_files+0x3a2/0x420 [ 403.061752][T17080] __x64_sys_sendmsg+0x1b1/0x290 [ 403.061779][T17080] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.061820][T17080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.061841][T17080] do_syscall_64+0x174/0x580 [ 403.061867][T17080] ? trace_irq_disable+0x3b/0x140 [ 403.061892][T17080] ? clear_bhb_loop+0x40/0x90 [ 403.061915][T17080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.061935][T17080] RIP: 0033:0x7f942e79e019 [ 403.061953][T17080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.061971][T17080] RSP: 002b:00007f942f6eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.061991][T17080] RAX: ffffffffffffffda RBX: 00007f942ea25fa0 RCX: 00007f942e79e019 [ 403.062005][T17080] RDX: 0000000000000001 RSI: 0000200000002180 RDI: 0000000000000003 [ 403.062018][T17080] RBP: 00007f942f6eb090 R08: 0000000000000000 R09: 0000000000000000 [ 403.062030][T17080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.062041][T17080] R13: 00007f942ea26038 R14: 00007f942ea25fa0 R15: 00007ffffb610d78 [ 403.062071][T17080] [ 403.622022][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4023'. [ 403.731596][T17109] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4025'. [ 404.071832][T17123] netlink: 'syz.3.4032': attribute type 4 has an invalid length. [ 404.285084][T17124] x_tables: duplicate underflow at hook 3 [ 404.737588][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4038'. [ 404.801796][T17144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4040'. [ 404.928491][T17155] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4043'. [ 404.938466][T17155] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4043'. [ 404.987586][T17157] FAULT_INJECTION: forcing a failure. [ 404.987586][T17157] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 405.045620][T17157] CPU: 1 UID: 0 PID: 17157 Comm: syz.2.4045 Not tainted syzkaller #0 PREEMPT(full) [ 405.045646][T17157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.045657][T17157] Call Trace: [ 405.045665][T17157] [ 405.045674][T17157] dump_stack_lvl+0xe8/0x150 [ 405.045707][T17157] should_fail_ex+0x40c/0x560 [ 405.045735][T17157] prepare_alloc_pages+0x230/0x650 [ 405.045769][T17157] __alloc_frozen_pages_noprof+0x12f/0x380 [ 405.045801][T17157] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 405.045830][T17157] ? __pfx_policy_nodemask+0x10/0x10 [ 405.045862][T17157] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 405.045887][T17157] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 405.045925][T17157] alloc_pages_mpol+0x212/0x380 [ 405.045958][T17157] alloc_pages_noprof+0xac/0x2a0 [ 405.045978][T17157] alloc_skb_with_frags+0x264/0x760 [ 405.046012][T17157] sock_alloc_send_pskb+0x878/0x990 [ 405.046053][T17157] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 405.046086][T17157] tun_get_user+0x9a6/0x4370 [ 405.046116][T17157] ? aa_file_perm+0x18b/0x15f0 [ 405.046140][T17157] ? aa_file_perm+0x4ed/0x15f0 [ 405.046160][T17157] ? __pfx_tun_get_user+0x10/0x10 [ 405.046178][T17157] ? __lock_acquire+0x683/0x2cf0 [ 405.046206][T17157] ? kstrtoull+0x12f/0x1d0 [ 405.046237][T17157] ? ref_tracker_alloc+0x341/0x4b0 [ 405.046262][T17157] ? get_pid_task+0x20/0x1f0 [ 405.046291][T17157] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 405.046318][T17157] ? tun_get+0x1c/0x2f0 [ 405.046347][T17157] ? tun_get+0x1c/0x2f0 [ 405.046378][T17157] ? tun_get+0x1c/0x2f0 [ 405.046404][T17157] ? tun_get+0x1c/0x2f0 [ 405.046435][T17157] tun_chr_write_iter+0x113/0x200 [ 405.046466][T17157] vfs_write+0x612/0xba0 [ 405.046493][T17157] ? __pfx_vfs_write+0x10/0x10 [ 405.046522][T17157] ? __fget_files+0x2a/0x420 [ 405.046557][T17157] ksys_write+0x150/0x270 [ 405.046577][T17157] ? __pfx_ksys_write+0x10/0x10 [ 405.046604][T17157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.046625][T17157] do_syscall_64+0x174/0x580 [ 405.046650][T17157] ? trace_irq_disable+0x3b/0x140 [ 405.046676][T17157] ? clear_bhb_loop+0x40/0x90 [ 405.046699][T17157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.046719][T17157] RIP: 0033:0x7ff353d5e84e [ 405.046737][T17157] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 405.046754][T17157] RSP: 002b:00007ff354c5dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.046775][T17157] RAX: ffffffffffffffda RBX: 00007ff354c5e6c0 RCX: 00007ff353d5e84e [ 405.046790][T17157] RDX: 0000000000000fc0 RSI: 0000200000000700 RDI: 00000000000000c8 [ 405.046804][T17157] RBP: 00007ff354c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 405.046816][T17157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.046828][T17157] R13: 00007ff354026038 R14: 00007ff354025fa0 R15: 00007ffc83c720c8 [ 405.046860][T17157] [ 405.442453][T17162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4046'. [ 405.513359][T17159] netlink: 'syz.3.4047': attribute type 4 has an invalid length. [ 405.550459][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4052'. [ 406.064288][T17194] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 406.248626][T17212] netlink: 'syz.4.4066': attribute type 4 has an invalid length. [ 406.321871][T17217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4068'. [ 406.574581][T17232] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 406.826663][T17239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.260183][T17270] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 407.493985][T17284] netlink: 'syz.0.4092': attribute type 4 has an invalid length. [ 407.693914][T17300] FAULT_INJECTION: forcing a failure. [ 407.693914][T17300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.783537][T17300] CPU: 0 UID: 0 PID: 17300 Comm: syz.4.4097 Not tainted syzkaller #0 PREEMPT(full) [ 407.783565][T17300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.783576][T17300] Call Trace: [ 407.783584][T17300] [ 407.783593][T17300] dump_stack_lvl+0xe8/0x150 [ 407.783626][T17300] should_fail_ex+0x40c/0x560 [ 407.783656][T17300] _copy_from_iter+0x1d3/0x1660 [ 407.783682][T17300] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 407.783708][T17300] ? rcu_is_watching+0x15/0xb0 [ 407.783727][T17300] ? trace_kmem_cache_alloc+0x29/0xe0 [ 407.783751][T17300] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 407.783776][T17300] ? __pfx__copy_from_iter+0x10/0x10 [ 407.783802][T17300] ? __alloc_skb+0x276/0x7a0 [ 407.783821][T17300] ? __alloc_skb+0x276/0x7a0 [ 407.783847][T17300] ? netlink_sendmsg+0x650/0xb40 [ 407.783872][T17300] ? skb_put+0x112/0x210 [ 407.783896][T17300] netlink_sendmsg+0x6c0/0xb40 [ 407.783931][T17300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.783960][T17300] ? aa_sock_msg_perm+0xf1/0x1b0 [ 407.783988][T17300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.784011][T17300] sock_sendmsg_nosec+0x13a/0x180 [ 407.784043][T17300] ____sys_sendmsg+0x54e/0x850 [ 407.784076][T17300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.784115][T17300] ? import_iovec+0x73/0xa0 [ 407.784137][T17300] ___sys_sendmsg+0x2a5/0x360 [ 407.784160][T17300] ? __lock_acquire+0x683/0x2cf0 [ 407.784191][T17300] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.784221][T17300] ? kstrtouint+0x6e/0xe0 [ 407.784275][T17300] ? __fget_files+0x2a/0x420 [ 407.784300][T17300] ? __fget_files+0x3a2/0x420 [ 407.784336][T17300] __sys_sendmmsg+0x273/0x4d0 [ 407.784366][T17300] ? __pfx___sys_sendmmsg+0x10/0x10 [ 407.784400][T17300] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 407.784440][T17300] ? ksys_write+0x242/0x270 [ 407.784462][T17300] ? __pfx_ksys_write+0x10/0x10 [ 407.784488][T17300] __x64_sys_sendmmsg+0xa0/0xc0 [ 407.784512][T17300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.784532][T17300] do_syscall_64+0x174/0x580 [ 407.784557][T17300] ? trace_irq_disable+0x3b/0x140 [ 407.784582][T17300] ? clear_bhb_loop+0x40/0x90 [ 407.784606][T17300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.784625][T17300] RIP: 0033:0x7f2bbdf9e019 [ 407.784643][T17300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.784660][T17300] RSP: 002b:00007f2bbee73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 407.784681][T17300] RAX: ffffffffffffffda RBX: 00007f2bbe226090 RCX: 00007f2bbdf9e019 [ 407.784695][T17300] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 407.784709][T17300] RBP: 00007f2bbee73090 R08: 0000000000000000 R09: 0000000000000000 [ 407.784721][T17300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.784733][T17300] R13: 00007f2bbe226128 R14: 00007f2bbe226090 R15: 00007ffd530bcaa8 [ 407.784764][T17300] [ 407.847970][T17297] net_ratelimit: 2 callbacks suppressed [ 407.847985][T17297] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 408.388302][T17318] __nla_validate_parse: 3 callbacks suppressed [ 408.388321][T17318] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4103'. [ 408.403615][T17318] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4103'. [ 408.620160][T17335] FAULT_INJECTION: forcing a failure. [ 408.620160][T17335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.639915][T17337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.665199][T17335] CPU: 0 UID: 0 PID: 17335 Comm: syz.1.4110 Not tainted syzkaller #0 PREEMPT(full) [ 408.665225][T17335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.665237][T17335] Call Trace: [ 408.665244][T17335] [ 408.665252][T17335] dump_stack_lvl+0xe8/0x150 [ 408.665285][T17335] should_fail_ex+0x40c/0x560 [ 408.665315][T17335] _copy_from_iter+0x1d3/0x1660 [ 408.665340][T17335] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 408.665366][T17335] ? rcu_is_watching+0x15/0xb0 [ 408.665385][T17335] ? trace_kmem_cache_alloc+0x29/0xe0 [ 408.665410][T17335] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 408.665434][T17335] ? __pfx__copy_from_iter+0x10/0x10 [ 408.665459][T17335] ? __alloc_skb+0x276/0x7a0 [ 408.665478][T17335] ? __alloc_skb+0x276/0x7a0 [ 408.665504][T17335] ? netlink_sendmsg+0x650/0xb40 [ 408.665529][T17335] ? skb_put+0x112/0x210 [ 408.665552][T17335] netlink_sendmsg+0x6c0/0xb40 [ 408.665587][T17335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.665616][T17335] ? aa_sock_msg_perm+0xf1/0x1b0 [ 408.665643][T17335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.665673][T17335] sock_sendmsg_nosec+0x13a/0x180 [ 408.665706][T17335] ____sys_sendmsg+0x54e/0x850 [ 408.665735][T17335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.665768][T17335] ? import_iovec+0x73/0xa0 [ 408.665790][T17335] ___sys_sendmsg+0x2a5/0x360 [ 408.665812][T17335] ? __lock_acquire+0x683/0x2cf0 [ 408.665841][T17335] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.665896][T17335] ? __fget_files+0x2a/0x420 [ 408.665920][T17335] ? __fget_files+0x3a2/0x420 [ 408.665954][T17335] __x64_sys_sendmsg+0x1b1/0x290 [ 408.665980][T17335] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 408.666021][T17335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.666042][T17335] do_syscall_64+0x174/0x580 [ 408.666067][T17335] ? trace_irq_disable+0x3b/0x140 [ 408.666091][T17335] ? clear_bhb_loop+0x40/0x90 [ 408.666115][T17335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.666134][T17335] RIP: 0033:0x7f692139e019 [ 408.666151][T17335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.666167][T17335] RSP: 002b:00007f69222fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.666188][T17335] RAX: ffffffffffffffda RBX: 00007f6921625fa0 RCX: 00007f692139e019 [ 408.666201][T17335] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003 [ 408.666214][T17335] RBP: 00007f69222fd090 R08: 0000000000000000 R09: 0000000000000000 [ 408.666224][T17335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.666235][T17335] R13: 00007f6921626038 R14: 00007f6921625fa0 R15: 00007fff23195998 [ 408.666265][T17335] [ 409.009359][T17343] FAULT_INJECTION: forcing a failure. [ 409.009359][T17343] name failslab, interval 1, probability 0, space 0, times 0 [ 409.026761][T17343] CPU: 0 UID: 0 PID: 17343 Comm: syz.3.4112 Not tainted syzkaller #0 PREEMPT(full) [ 409.026786][T17343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.026798][T17343] Call Trace: [ 409.026805][T17343] [ 409.026813][T17343] dump_stack_lvl+0xe8/0x150 [ 409.026847][T17343] should_fail_ex+0x40c/0x560 [ 409.026876][T17343] should_failslab+0xa8/0x100 [ 409.026908][T17343] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 409.026932][T17343] ? local_lock_release+0x9c/0x160 [ 409.026956][T17343] ? __alloc_skb+0x1d7/0x7a0 [ 409.026981][T17343] ? __alloc_skb+0x1d7/0x7a0 [ 409.027008][T17343] __alloc_skb+0x1d7/0x7a0 [ 409.027034][T17343] netlink_sendmsg+0x5d4/0xb40 [ 409.027069][T17343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.027098][T17343] ? aa_sock_msg_perm+0xf1/0x1b0 [ 409.027126][T17343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.027150][T17343] sock_sendmsg_nosec+0x13a/0x180 [ 409.027182][T17343] ____sys_sendmsg+0x54e/0x850 [ 409.027210][T17343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.027247][T17343] ? import_iovec+0x73/0xa0 [ 409.027271][T17343] ___sys_sendmsg+0x2a5/0x360 [ 409.027294][T17343] ? __lock_acquire+0x683/0x2cf0 [ 409.027325][T17343] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.027383][T17343] ? __fget_files+0x2a/0x420 [ 409.027408][T17343] ? __fget_files+0x3a2/0x420 [ 409.027441][T17343] __x64_sys_sendmsg+0x1b1/0x290 [ 409.027466][T17343] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.027508][T17343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.027529][T17343] do_syscall_64+0x174/0x580 [ 409.027558][T17343] ? trace_irq_disable+0x3b/0x140 [ 409.027582][T17343] ? clear_bhb_loop+0x40/0x90 [ 409.027606][T17343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.027626][T17343] RIP: 0033:0x7f942e79e019 [ 409.027644][T17343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.027661][T17343] RSP: 002b:00007f942f6eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.027681][T17343] RAX: ffffffffffffffda RBX: 00007f942ea25fa0 RCX: 00007f942e79e019 [ 409.027702][T17343] RDX: 0000000000008004 RSI: 0000200000000b80 RDI: 0000000000000004 [ 409.027715][T17343] RBP: 00007f942f6eb090 R08: 0000000000000000 R09: 0000000000000000 [ 409.027726][T17343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.027737][T17343] R13: 00007f942ea26038 R14: 00007f942ea25fa0 R15: 00007ffffb610d78 [ 409.027767][T17343] [ 409.806304][T17374] FAULT_INJECTION: forcing a failure. [ 409.806304][T17374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.832782][T17374] CPU: 1 UID: 0 PID: 17374 Comm: syz.2.4124 Not tainted syzkaller #0 PREEMPT(full) [ 409.832809][T17374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.832821][T17374] Call Trace: [ 409.832829][T17374] [ 409.832837][T17374] dump_stack_lvl+0xe8/0x150 [ 409.832870][T17374] should_fail_ex+0x40c/0x560 [ 409.832901][T17374] _copy_from_iter+0x1d3/0x1660 [ 409.832926][T17374] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 409.832952][T17374] ? rcu_is_watching+0x15/0xb0 [ 409.832970][T17374] ? trace_kmem_cache_alloc+0x29/0xe0 [ 409.832995][T17374] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 409.833016][T17374] ? __pfx__copy_from_iter+0x10/0x10 [ 409.833040][T17374] ? __alloc_skb+0x276/0x7a0 [ 409.833059][T17374] ? __alloc_skb+0x276/0x7a0 [ 409.833082][T17374] ? netlink_sendmsg+0x650/0xb40 [ 409.833112][T17374] ? skb_put+0x112/0x210 [ 409.833134][T17374] netlink_sendmsg+0x6c0/0xb40 [ 409.833163][T17374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.833190][T17374] ? aa_sock_msg_perm+0xf1/0x1b0 [ 409.833215][T17374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.833237][T17374] sock_sendmsg_nosec+0x13a/0x180 [ 409.833266][T17374] ____sys_sendmsg+0x54e/0x850 [ 409.833293][T17374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.833335][T17374] ? import_iovec+0x73/0xa0 [ 409.833356][T17374] ___sys_sendmsg+0x2a5/0x360 [ 409.833379][T17374] ? __lock_acquire+0x683/0x2cf0 [ 409.833409][T17374] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.833466][T17374] ? __fget_files+0x2a/0x420 [ 409.833491][T17374] ? __fget_files+0x3a2/0x420 [ 409.833524][T17374] __x64_sys_sendmsg+0x1b1/0x290 [ 409.833552][T17374] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.833593][T17374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.833612][T17374] do_syscall_64+0x174/0x580 [ 409.833636][T17374] ? trace_irq_disable+0x3b/0x140 [ 409.833660][T17374] ? clear_bhb_loop+0x40/0x90 [ 409.833681][T17374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.833700][T17374] RIP: 0033:0x7ff353d9e019 [ 409.833718][T17374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.833733][T17374] RSP: 002b:00007ff354c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.833753][T17374] RAX: ffffffffffffffda RBX: 00007ff354025fa0 RCX: 00007ff353d9e019 [ 409.833767][T17374] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 409.833779][T17374] RBP: 00007ff354c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 409.833791][T17374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.833803][T17374] R13: 00007ff354026038 R14: 00007ff354025fa0 R15: 00007ffc83c720c8 [ 409.833834][T17374] [ 410.150263][T17379] netlink: 'syz.0.4127': attribute type 9 has an invalid length. [ 410.158039][T17379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4127'. [ 410.172809][T17379] gretap0: entered promiscuous mode [ 410.179201][T17379] macvlan2: entered promiscuous mode [ 410.184700][T17379] macvlan2: entered allmulticast mode [ 410.189695][T17381] FAULT_INJECTION: forcing a failure. [ 410.189695][T17381] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 410.190077][T17379] gretap0: entered allmulticast mode [ 410.194686][T17379] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 410.210126][T17381] CPU: 0 UID: 0 PID: 17381 Comm: syz.3.4129 Not tainted syzkaller #0 PREEMPT(full) [ 410.210150][T17381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.210162][T17381] Call Trace: [ 410.210170][T17381] [ 410.210178][T17381] dump_stack_lvl+0xe8/0x150 [ 410.210209][T17381] should_fail_ex+0x40c/0x560 [ 410.210237][T17381] prepare_alloc_pages+0x230/0x650 [ 410.210271][T17381] __alloc_frozen_pages_noprof+0x12f/0x380 [ 410.210301][T17381] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 410.210331][T17381] ? __pfx_policy_nodemask+0x10/0x10 [ 410.210357][T17381] ? __get_vm_area_node+0x136/0x300 [ 410.210377][T17381] ? __vmalloc_node_range_noprof+0x358/0x1730 [ 410.210399][T17381] ? __vmalloc_noprof+0xd2/0x120 [ 410.210419][T17381] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 410.210443][T17381] ? bpf_prog_alloc+0x3c/0x1a0 [ 410.210466][T17381] ? __sys_bpf+0xd0d/0xd90 [ 410.210487][T17381] ? __x64_sys_bpf+0xba/0xd0 [ 410.210507][T17381] ? do_syscall_64+0x174/0x580 [ 410.210531][T17381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.210554][T17381] alloc_pages_mpol+0x212/0x380 [ 410.210587][T17381] alloc_pages_noprof+0xac/0x2a0 [ 410.210610][T17381] get_free_pages_noprof+0xf/0x80 [ 410.210642][T17381] __kasan_populate_vmalloc+0x38/0x1c0 [ 410.210666][T17381] ? do_raw_spin_unlock+0xf5/0x210 [ 410.210691][T17381] alloc_vmap_area+0xd1a/0x1420 [ 410.210727][T17381] ? __pfx_alloc_vmap_area+0x10/0x10 [ 410.210748][T17381] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 410.210773][T17381] ? __get_vm_area_node+0x136/0x300 [ 410.210793][T17381] ? __get_vm_area_node+0x136/0x300 [ 410.210819][T17381] __get_vm_area_node+0x1f2/0x300 [ 410.210846][T17381] __vmalloc_node_range_noprof+0x358/0x1730 [ 410.210869][T17381] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 410.210897][T17381] ? __lock_acquire+0x683/0x2cf0 [ 410.210943][T17381] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 410.210966][T17381] ? aa_file_perm+0x18b/0x15f0 [ 410.210998][T17381] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 410.211021][T17381] __vmalloc_noprof+0xd2/0x120 [ 410.211044][T17381] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 410.211071][T17381] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 410.211095][T17381] ? bpf_prog_alloc+0x2a/0x1a0 [ 410.211121][T17381] bpf_prog_alloc+0x3c/0x1a0 [ 410.211149][T17381] bpf_prog_load+0x7f8/0x1c00 [ 410.211184][T17381] ? __pfx_bpf_prog_load+0x10/0x10 [ 410.211233][T17381] __sys_bpf+0xd0d/0xd90 [ 410.211265][T17381] ? __pfx___sys_bpf+0x10/0x10 [ 410.211299][T17381] ? __fget_files+0x2a/0x420 [ 410.211341][T17381] ? ksys_write+0x242/0x270 [ 410.211362][T17381] ? __pfx_ksys_write+0x10/0x10 [ 410.211385][T17381] __x64_sys_bpf+0xba/0xd0 [ 410.211407][T17381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.211428][T17381] do_syscall_64+0x174/0x580 [ 410.211452][T17381] ? trace_irq_disable+0x3b/0x140 [ 410.211475][T17381] ? clear_bhb_loop+0x40/0x90 [ 410.211498][T17381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.211517][T17381] RIP: 0033:0x7f942e79e019 [ 410.211534][T17381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.211550][T17381] RSP: 002b:00007f942f6eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 410.211570][T17381] RAX: ffffffffffffffda RBX: 00007f942ea25fa0 RCX: 00007f942e79e019 [ 410.211583][T17381] RDX: 0000000000000039 RSI: 0000200000000080 RDI: 0000000000000005 [ 410.211595][T17381] RBP: 00007f942f6eb090 R08: 0000000000000000 R09: 0000000000000000 [ 410.211607][T17381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.211623][T17381] R13: 00007f942ea26038 R14: 00007f942ea25fa0 R15: 00007ffffb610d78 [ 410.211653][T17381] [ 410.211719][T17381] syz.3.4129: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 410.488861][T17382] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.585054][T17381] ,cpuset=/,mems_allowed=0-1 [ 410.659213][T17381] CPU: 1 UID: 0 PID: 17381 Comm: syz.3.4129 Not tainted syzkaller #0 PREEMPT(full) [ 410.659237][T17381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.659248][T17381] Call Trace: [ 410.659256][T17381] [ 410.659264][T17381] dump_stack_lvl+0xe8/0x150 [ 410.659298][T17381] warn_alloc+0x24c/0x270 [ 410.659324][T17381] ? kasan_quarantine_put+0xbb/0x1f0 [ 410.659352][T17381] ? __pfx_warn_alloc+0x10/0x10 [ 410.659380][T17381] ? __get_vm_area_node+0x20b/0x300 [ 410.659408][T17381] ? __get_vm_area_node+0x20b/0x300 [ 410.659436][T17381] __vmalloc_node_range_noprof+0x37d/0x1730 [ 410.659464][T17381] ? __lock_acquire+0x683/0x2cf0 [ 410.659513][T17381] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 410.659537][T17381] ? aa_file_perm+0x18b/0x15f0 [ 410.659571][T17381] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 410.659596][T17381] __vmalloc_noprof+0xd2/0x120 [ 410.659618][T17381] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 410.659647][T17381] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 410.659672][T17381] ? bpf_prog_alloc+0x2a/0x1a0 [ 410.659700][T17381] bpf_prog_alloc+0x3c/0x1a0 [ 410.659729][T17381] bpf_prog_load+0x7f8/0x1c00 [ 410.659768][T17381] ? __pfx_bpf_prog_load+0x10/0x10 [ 410.659816][T17381] __sys_bpf+0xd0d/0xd90 [ 410.659848][T17381] ? __pfx___sys_bpf+0x10/0x10 [ 410.659884][T17381] ? __fget_files+0x2a/0x420 [ 410.659928][T17381] ? ksys_write+0x242/0x270 [ 410.659951][T17381] ? __pfx_ksys_write+0x10/0x10 [ 410.659976][T17381] __x64_sys_bpf+0xba/0xd0 [ 410.659999][T17381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.660020][T17381] do_syscall_64+0x174/0x580 [ 410.660046][T17381] ? trace_irq_disable+0x3b/0x140 [ 410.660069][T17381] ? clear_bhb_loop+0x40/0x90 [ 410.660101][T17381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.660121][T17381] RIP: 0033:0x7f942e79e019 [ 410.660139][T17381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.660156][T17381] RSP: 002b:00007f942f6eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 410.660176][T17381] RAX: ffffffffffffffda RBX: 00007f942ea25fa0 RCX: 00007f942e79e019 [ 410.660190][T17381] RDX: 0000000000000039 RSI: 0000200000000080 RDI: 0000000000000005 [ 410.660203][T17381] RBP: 00007f942f6eb090 R08: 0000000000000000 R09: 0000000000000000 [ 410.660215][T17381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.660226][T17381] R13: 00007f942ea26038 R14: 00007f942ea25fa0 R15: 00007ffffb610d78 [ 410.660256][T17381] [ 410.660264][T17381] Mem-Info: [ 410.982112][T17381] active_anon:5572 inactive_anon:0 isolated_anon:0 [ 410.982112][T17381] active_file:0 inactive_file:44084 isolated_file:0 [ 410.982112][T17381] unevictable:768 dirty:374 writeback:0 [ 410.982112][T17381] slab_reclaimable:11201 slab_unreclaimable:105920 [ 410.982112][T17381] mapped:30171 shmem:1467 pagetables:1393 [ 410.982112][T17381] sec_pagetables:0 bounce:0 [ 410.982112][T17381] kernel_misc_reclaimable:0 [ 410.982112][T17381] free:1313556 free_pcp:10476 free_cma:0 [ 411.082696][T17381] Node 0 active_anon:23788kB inactive_anon:0kB active_file:0kB inactive_file:176136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122084kB dirty:1496kB writeback:0kB shmem:5632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13572kB pagetables:5512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 411.117021][T17381] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 411.228518][T17410] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.282090][T17381] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 411.311954][T17381] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 411.317729][T17381] Node 0 DMA32 free:1286556kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27388kB inactive_anon:0kB active_file:0kB inactive_file:176136kB unevictable:1536kB writepending:1496kB zspages:0kB present:3129332kB managed:2548504kB mlocked:0kB bounce:0kB free_pcp:37840kB local_pcp:21788kB free_cma:0kB [ 411.350768][T17381] lowmem_reserve[]: 0 0 0 0 0 [ 411.355499][T17381] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 411.456323][T17381] lowmem_reserve[]: 0 0 0 0 0 [ 411.461103][T17381] Node 1 Normal free:3951892kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 411.493669][T17381] lowmem_reserve[]: 0 0 0 0 0 [ 411.528543][T17381] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 411.541225][T17381] Node 0 DMA32: 877*4kB (UM) 861*8kB (UME) 365*16kB (UM) 240*32kB (UME) 49*64kB (UME) 8*128kB (UME) 11*256kB (UM) 4*512kB (ME) 3*1024kB (UM) 7*2048kB (UME) 302*4096kB (UM) = 1287340kB [ 411.561548][T17381] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 411.574448][T17381] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 5*16kB (UM) 5*32kB (UM) 8*64kB (UM) 4*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 963*4096kB (M) = 3951892kB [ 411.591269][T17381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 411.600825][T17381] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 411.645870][T17381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 411.679823][T17381] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 411.689142][T17381] 48397 total pagecache pages [ 411.693820][T17381] 0 pages in swap cache [ 411.697975][T17381] Free swap = 124996kB [ 411.702121][T17381] Total swap = 124996kB [ 411.706276][T17381] 2097051 pages RAM [ 411.710081][T17381] 0 pages HighMem/MovableOnly [ 411.714753][T17381] 428245 pages reserved [ 411.718904][T17381] 0 pages cma reserved [ 412.022189][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4152'. [ 412.255970][T17458] FAULT_INJECTION: forcing a failure. [ 412.255970][T17458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.269043][T17458] CPU: 1 UID: 0 PID: 17458 Comm: syz.2.4159 Not tainted syzkaller #0 PREEMPT(full) [ 412.269067][T17458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.269079][T17458] Call Trace: [ 412.269087][T17458] [ 412.269095][T17458] dump_stack_lvl+0xe8/0x150 [ 412.269128][T17458] should_fail_ex+0x40c/0x560 [ 412.269158][T17458] _copy_to_user+0x31/0xb0 [ 412.269180][T17458] do_sock_getsockopt+0x6ea/0x7e0 [ 412.269210][T17458] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 412.269249][T17458] ? __fget_files+0x3a2/0x420 [ 412.269272][T17458] ? __fget_files+0x2a/0x420 [ 412.269303][T17458] __x64_sys_getsockopt+0x1a4/0x240 [ 412.269331][T17458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.269351][T17458] do_syscall_64+0x174/0x580 [ 412.269377][T17458] ? trace_irq_disable+0x3b/0x140 [ 412.269402][T17458] ? clear_bhb_loop+0x40/0x90 [ 412.269433][T17458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.269452][T17458] RIP: 0033:0x7ff353d9e019 [ 412.269470][T17458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.269487][T17458] RSP: 002b:00007ff354c5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 412.269508][T17458] RAX: ffffffffffffffda RBX: 00007ff354025fa0 RCX: 00007ff353d9e019 [ 412.269523][T17458] RDX: 0000000000000013 RSI: 0000000000000112 RDI: 0000000000000004 [ 412.269536][T17458] RBP: 00007ff354c5e090 R08: 0000200000000000 R09: 0000000000000000 [ 412.269548][T17458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.269559][T17458] R13: 00007ff354026038 R14: 00007ff354025fa0 R15: 00007ffc83c720c8 [ 412.269589][T17458] [ 412.284448][T17448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.986096][T17495] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4172'. [ 413.536777][T17524] bond2: option arp_all_targets: invalid value (3) [ 413.546041][T17531] FAULT_INJECTION: forcing a failure. [ 413.546041][T17531] name failslab, interval 1, probability 0, space 0, times 0 [ 413.548770][T17524] bond2 (unregistering): Released all slaves [ 413.558670][T17531] CPU: 1 UID: 0 PID: 17531 Comm: syz.4.4188 Not tainted syzkaller #0 PREEMPT(full) [ 413.558694][T17531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.558704][T17531] Call Trace: [ 413.558713][T17531] [ 413.558721][T17531] dump_stack_lvl+0xe8/0x150 [ 413.558753][T17531] should_fail_ex+0x40c/0x560 [ 413.558781][T17531] should_failslab+0xa8/0x100 [ 413.558810][T17531] __kmalloc_noprof+0xfe/0x720 [ 413.558835][T17531] ? bpf_test_init+0x9f/0x150 [ 413.558856][T17531] ? bpf_test_init+0x9f/0x150 [ 413.558883][T17531] bpf_test_init+0x9f/0x150 [ 413.558910][T17531] bpf_prog_test_run_skb+0x31e/0x2230 [ 413.558951][T17531] ? __fget_files+0x3a2/0x420 [ 413.558975][T17531] ? __fget_files+0x2a/0x420 [ 413.559005][T17531] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 413.559030][T17531] bpf_prog_test_run+0x2c5/0x340 [ 413.559060][T17531] __sys_bpf+0xa22/0xd90 [ 413.559094][T17531] ? __pfx___sys_bpf+0x10/0x10 [ 413.559130][T17531] ? __fget_files+0x2a/0x420 [ 413.559171][T17531] ? ksys_write+0x242/0x270 [ 413.559192][T17531] ? __pfx_ksys_write+0x10/0x10 [ 413.559215][T17531] __x64_sys_bpf+0xba/0xd0 [ 413.559239][T17531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.559260][T17531] do_syscall_64+0x174/0x580 [ 413.559286][T17531] ? trace_irq_disable+0x3b/0x140 [ 413.559310][T17531] ? clear_bhb_loop+0x40/0x90 [ 413.559331][T17531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.559347][T17531] RIP: 0033:0x7f2bbdf9e019 [ 413.559364][T17531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.559381][T17531] RSP: 002b:00007f2bbee94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 413.559401][T17531] RAX: ffffffffffffffda RBX: 00007f2bbe225fa0 RCX: 00007f2bbdf9e019 [ 413.559416][T17531] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 000000000000000a [ 413.559437][T17531] RBP: 00007f2bbee94090 R08: 0000000000000000 R09: 0000000000000000 [ 413.559448][T17531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.559459][T17531] R13: 00007f2bbe226038 R14: 00007f2bbe225fa0 R15: 00007ffd530bcaa8 [ 413.559488][T17531] [ 414.132711][T17551] netlink: 'syz.4.4196': attribute type 1 has an invalid length. [ 414.154180][T17551] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4196'. [ 414.211663][T17555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4200'. [ 414.545795][T17576] FAULT_INJECTION: forcing a failure. [ 414.545795][T17576] name failslab, interval 1, probability 0, space 0, times 0 [ 414.558447][T17576] CPU: 1 UID: 0 PID: 17576 Comm: syz.3.4206 Not tainted syzkaller #0 PREEMPT(full) [ 414.558473][T17576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.558485][T17576] Call Trace: [ 414.558493][T17576] [ 414.558501][T17576] dump_stack_lvl+0xe8/0x150 [ 414.558534][T17576] should_fail_ex+0x40c/0x560 [ 414.558563][T17576] should_failslab+0xa8/0x100 [ 414.558593][T17576] __kmalloc_noprof+0xfe/0x720 [ 414.558620][T17576] ? bpf_test_init+0x9f/0x150 [ 414.558643][T17576] ? bpf_test_init+0x9f/0x150 [ 414.558671][T17576] bpf_test_init+0x9f/0x150 [ 414.558698][T17576] bpf_prog_test_run_skb+0x31e/0x2230 [ 414.558738][T17576] ? __fget_files+0x3a2/0x420 [ 414.558764][T17576] ? __fget_files+0x2a/0x420 [ 414.558793][T17576] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 414.558825][T17576] bpf_prog_test_run+0x2c5/0x340 [ 414.558856][T17576] __sys_bpf+0xa22/0xd90 [ 414.558890][T17576] ? __pfx___sys_bpf+0x10/0x10 [ 414.558925][T17576] ? __fget_files+0x2a/0x420 [ 414.558968][T17576] ? ksys_write+0x242/0x270 [ 414.558989][T17576] ? __pfx_ksys_write+0x10/0x10 [ 414.559013][T17576] __x64_sys_bpf+0xba/0xd0 [ 414.559036][T17576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.559058][T17576] do_syscall_64+0x174/0x580 [ 414.559083][T17576] ? trace_irq_disable+0x3b/0x140 [ 414.559107][T17576] ? clear_bhb_loop+0x40/0x90 [ 414.559131][T17576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.559150][T17576] RIP: 0033:0x7f942e79e019 [ 414.559168][T17576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.559185][T17576] RSP: 002b:00007f942f6eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 414.559205][T17576] RAX: ffffffffffffffda RBX: 00007f942ea25fa0 RCX: 00007f942e79e019 [ 414.559220][T17576] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 000000000000000a [ 414.559233][T17576] RBP: 00007f942f6eb090 R08: 0000000000000000 R09: 0000000000000000 [ 414.559245][T17576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.559256][T17576] R13: 00007f942ea26038 R14: 00007f942ea25fa0 R15: 00007ffffb610d78 [ 414.559287][T17576] [ 414.648756][T17581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4208'. [ 414.971130][T17581] bond2: option ad_select: invalid value (34) [ 414.983876][T17581] bond2 (unregistering): Released all slaves [ 415.370589][T17603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.496992][T17606] batman_adv: batadv0: Adding interface: gretap1 [ 415.503379][T17606] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.528663][T17606] batman_adv: batadv0: Interface activated: gretap1 [ 415.540089][T17612] FAULT_INJECTION: forcing a failure. [ 415.540089][T17612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.565772][T17612] CPU: 0 UID: 0 PID: 17612 Comm: syz.2.4219 Not tainted syzkaller #0 PREEMPT(full) [ 415.565798][T17612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.565810][T17612] Call Trace: [ 415.565819][T17612] [ 415.565827][T17612] dump_stack_lvl+0xe8/0x150 [ 415.565860][T17612] should_fail_ex+0x40c/0x560 [ 415.565890][T17612] _copy_from_iter+0x1d3/0x1660 [ 415.565916][T17612] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 415.565943][T17612] ? rcu_is_watching+0x15/0xb0 [ 415.565963][T17612] ? trace_kmem_cache_alloc+0x29/0xe0 [ 415.565990][T17612] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 415.566015][T17612] ? __pfx__copy_from_iter+0x10/0x10 [ 415.566041][T17612] ? __alloc_skb+0x276/0x7a0 [ 415.566061][T17612] ? __alloc_skb+0x276/0x7a0 [ 415.566088][T17612] ? netlink_sendmsg+0x650/0xb40 [ 415.566113][T17612] ? skb_put+0x112/0x210 [ 415.566138][T17612] netlink_sendmsg+0x6c0/0xb40 [ 415.566173][T17612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.566211][T17612] ? aa_sock_msg_perm+0xf1/0x1b0 [ 415.566239][T17612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.566264][T17612] sock_sendmsg_nosec+0x13a/0x180 [ 415.566297][T17612] ____sys_sendmsg+0x54e/0x850 [ 415.566327][T17612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.566361][T17612] ? import_iovec+0x73/0xa0 [ 415.566382][T17612] ___sys_sendmsg+0x2a5/0x360 [ 415.566405][T17612] ? __lock_acquire+0x683/0x2cf0 [ 415.566436][T17612] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.566496][T17612] ? __fget_files+0x2a/0x420 [ 415.566521][T17612] ? __fget_files+0x3a2/0x420 [ 415.566559][T17612] __x64_sys_sendmsg+0x1b1/0x290 [ 415.566586][T17612] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.566627][T17612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.566648][T17612] do_syscall_64+0x174/0x580 [ 415.566674][T17612] ? trace_irq_disable+0x3b/0x140 [ 415.566699][T17612] ? clear_bhb_loop+0x40/0x90 [ 415.566722][T17612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.566742][T17612] RIP: 0033:0x7ff353d9e019 [ 415.566760][T17612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.566778][T17612] RSP: 002b:00007ff354c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.566798][T17612] RAX: ffffffffffffffda RBX: 00007ff354025fa0 RCX: 00007ff353d9e019 [ 415.566813][T17612] RDX: 0000000020044010 RSI: 0000200000000280 RDI: 0000000000000004 [ 415.566826][T17612] RBP: 00007ff354c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 415.566839][T17612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.566851][T17612] R13: 00007ff354026038 R14: 00007ff354025fa0 R15: 00007ffc83c720c8 [ 415.566883][T17612] [ 415.891629][T17614] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4220'. [ 415.903510][ T57] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.915119][ T57] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.923847][ T57] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.932555][ T57] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.316501][T17642] sit0: entered promiscuous mode [ 416.326269][T17642] netlink: 'syz.0.4231': attribute type 1 has an invalid length. [ 416.334346][T17642] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4231'. [ 416.783850][T17668] xt_hashlimit: size too large, truncated to 1048576 [ 416.931028][T17676] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4242'. [ 417.376765][T17697] FAULT_INJECTION: forcing a failure. [ 417.376765][T17697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.416851][T17697] CPU: 0 UID: 0 PID: 17697 Comm: syz.1.4254 Not tainted syzkaller #0 PREEMPT(full) [ 417.416878][T17697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.416890][T17697] Call Trace: [ 417.416897][T17697] [ 417.416905][T17697] dump_stack_lvl+0xe8/0x150 [ 417.416938][T17697] should_fail_ex+0x40c/0x560 [ 417.416968][T17697] _copy_from_user+0x2d/0xb0 [ 417.416989][T17697] get_timespec64+0x96/0x1b0 [ 417.417019][T17697] ? __pfx_get_timespec64+0x10/0x10 [ 417.417057][T17697] __x64_sys_recvmmsg+0x14b/0x250 [ 417.417095][T17697] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 417.417129][T17697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.417150][T17697] do_syscall_64+0x174/0x580 [ 417.417175][T17697] ? trace_irq_disable+0x3b/0x140 [ 417.417200][T17697] ? clear_bhb_loop+0x40/0x90 [ 417.417224][T17697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.417243][T17697] RIP: 0033:0x7f692139e019 [ 417.417260][T17697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.417278][T17697] RSP: 002b:00007f69222fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 417.417298][T17697] RAX: ffffffffffffffda RBX: 00007f6921625fa0 RCX: 00007f692139e019 [ 417.417313][T17697] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 417.417326][T17697] RBP: 00007f69222fd090 R08: 0000200000003700 R09: 0000000000000000 [ 417.417339][T17697] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 417.417352][T17697] R13: 00007f6921626038 R14: 00007f6921625fa0 R15: 00007fff23195998 [ 417.417383][T17697] [ 417.654167][T17702] FAULT_INJECTION: forcing a failure. [ 417.654167][T17702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.667453][T17702] CPU: 0 UID: 0 PID: 17702 Comm: syz.4.4257 Not tainted syzkaller #0 PREEMPT(full) [ 417.667477][T17702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.667489][T17702] Call Trace: [ 417.667497][T17702] [ 417.667506][T17702] dump_stack_lvl+0xe8/0x150 [ 417.667538][T17702] should_fail_ex+0x40c/0x560 [ 417.667568][T17702] _copy_from_iter+0x1d3/0x1660 [ 417.667593][T17702] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 417.667619][T17702] ? rcu_is_watching+0x15/0xb0 [ 417.667638][T17702] ? trace_kmem_cache_alloc+0x29/0xe0 [ 417.667664][T17702] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 417.667687][T17702] ? __pfx__copy_from_iter+0x10/0x10 [ 417.667712][T17702] ? __alloc_skb+0x276/0x7a0 [ 417.667732][T17702] ? __alloc_skb+0x276/0x7a0 [ 417.667758][T17702] ? netlink_sendmsg+0x650/0xb40 [ 417.667783][T17702] ? skb_put+0x112/0x210 [ 417.667806][T17702] netlink_sendmsg+0x6c0/0xb40 [ 417.667839][T17702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.667868][T17702] ? aa_sock_msg_perm+0xf1/0x1b0 [ 417.667895][T17702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.667918][T17702] sock_sendmsg_nosec+0x13a/0x180 [ 417.667950][T17702] ____sys_sendmsg+0x54e/0x850 [ 417.667979][T17702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.668012][T17702] ? import_iovec+0x73/0xa0 [ 417.668034][T17702] ___sys_sendmsg+0x2a5/0x360 [ 417.668064][T17702] ? __lock_acquire+0x683/0x2cf0 [ 417.668094][T17702] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.668150][T17702] ? __fget_files+0x2a/0x420 [ 417.668175][T17702] ? __fget_files+0x3a2/0x420 [ 417.668210][T17702] __x64_sys_sendmsg+0x1b1/0x290 [ 417.668237][T17702] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 417.668278][T17702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.668300][T17702] do_syscall_64+0x174/0x580 [ 417.668325][T17702] ? trace_irq_disable+0x3b/0x140 [ 417.668350][T17702] ? clear_bhb_loop+0x40/0x90 [ 417.668374][T17702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.668393][T17702] RIP: 0033:0x7f2bbdf9e019 [ 417.668411][T17702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.668431][T17702] RSP: 002b:00007f2bbee94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.668452][T17702] RAX: ffffffffffffffda RBX: 00007f2bbe225fa0 RCX: 00007f2bbdf9e019 [ 417.668466][T17702] RDX: 00000000000040c0 RSI: 0000200000000240 RDI: 0000000000000003 [ 417.668479][T17702] RBP: 00007f2bbee94090 R08: 0000000000000000 R09: 0000000000000000 [ 417.668491][T17702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.668503][T17702] R13: 00007f2bbe226038 R14: 00007f2bbe225fa0 R15: 00007ffd530bcaa8 [ 417.668535][T17702] [ 418.327277][T17716] netlink: 'syz.2.4266': attribute type 4 has an invalid length. [ 418.704233][T17732] syzkaller0: entered promiscuous mode [ 418.725201][T17732] syzkaller0: entered allmulticast mode [ 419.126558][T17749] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4277'. [ 419.358628][T17762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4285'. [ 419.372043][T17761] netlink: 'syz.0.4283': attribute type 4 has an invalid length. [ 420.254453][T17806] netlink: 'syz.0.4302': attribute type 4 has an invalid length. [ 420.299140][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4303'. [ 420.887150][T17831] tipc: Enabling of bearer rejected, failed to enable media [ 421.073466][T17837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4313'. [ 421.176577][T17841] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 421.321913][T17849] netlink: 'syz.0.4318': attribute type 4 has an invalid length. [ 421.444048][T17858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4320'. [ 421.692070][T17865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4325'. [ 421.764181][T17871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4327'. [ 421.783216][T17873] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4328'. [ 421.823937][T17875] FAULT_INJECTION: forcing a failure. [ 421.823937][T17875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.865445][T17875] CPU: 0 UID: 0 PID: 17875 Comm: syz.2.4329 Not tainted syzkaller #0 PREEMPT(full) [ 421.865471][T17875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 421.865481][T17875] Call Trace: [ 421.865489][T17875] [ 421.865498][T17875] dump_stack_lvl+0xe8/0x150 [ 421.865531][T17875] should_fail_ex+0x40c/0x560 [ 421.865559][T17875] _copy_from_iter+0x1d3/0x1660 [ 421.865584][T17875] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 421.865612][T17875] ? rcu_is_watching+0x15/0xb0 [ 421.865632][T17875] ? trace_kmem_cache_alloc+0x29/0xe0 [ 421.865657][T17875] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 421.865682][T17875] ? __pfx__copy_from_iter+0x10/0x10 [ 421.865707][T17875] ? preempt_schedule_thunk+0x16/0x40 [ 421.865728][T17875] ? __alloc_skb+0x276/0x7a0 [ 421.865748][T17875] ? __alloc_skb+0x276/0x7a0 [ 421.865774][T17875] ? netlink_sendmsg+0x650/0xb40 [ 421.865798][T17875] ? skb_put+0x112/0x210 [ 421.865821][T17875] netlink_sendmsg+0x6c0/0xb40 [ 421.865854][T17875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.865883][T17875] ? aa_sock_msg_perm+0xf1/0x1b0 [ 421.865910][T17875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.865934][T17875] sock_sendmsg_nosec+0x13a/0x180 [ 421.865966][T17875] ____sys_sendmsg+0x54e/0x850 [ 421.865996][T17875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.866028][T17875] ? import_iovec+0x73/0xa0 [ 421.866049][T17875] ___sys_sendmsg+0x2a5/0x360 [ 421.866072][T17875] ? __lock_acquire+0x683/0x2cf0 [ 421.866101][T17875] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.866157][T17875] ? __fget_files+0x2a/0x420 [ 421.866181][T17875] ? __fget_files+0x3a2/0x420 [ 421.866215][T17875] __x64_sys_sendmsg+0x1b1/0x290 [ 421.866241][T17875] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.866282][T17875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.866310][T17875] do_syscall_64+0x174/0x580 [ 421.866335][T17875] ? trace_irq_disable+0x3b/0x140 [ 421.866360][T17875] ? clear_bhb_loop+0x40/0x90 [ 421.866383][T17875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.866402][T17875] RIP: 0033:0x7ff353d9e019 [ 421.866420][T17875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.866437][T17875] RSP: 002b:00007ff354c5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.866457][T17875] RAX: ffffffffffffffda RBX: 00007ff354025fa0 RCX: 00007ff353d9e019 [ 421.866471][T17875] RDX: 0000000000000080 RSI: 0000200000005c00 RDI: 0000000000000003 [ 421.866483][T17875] RBP: 00007ff354c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 421.866495][T17875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.866506][T17875] R13: 00007ff354026038 R14: 00007ff354025fa0 R15: 00007ffc83c720c8 [ 421.866536][T17875] [ 421.884436][T17879] x_tables: duplicate entry at hook 2 [ 421.929540][ T1353] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.362630][ T1353] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.461485][T17879] tipc: Started in network mode [ 422.492673][T17879] tipc: Node identity a23c6133f86f, cluster identity 4711 [ 422.559971][T17879] tipc: Enabled bearer , priority 0 [ 422.731598][T17891] sctp: [Deprecated]: syz.0.4330 (pid 17891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.731598][T17891] Use struct sctp_sack_info instead [ 423.097036][T17889] syzkaller0: entered promiscuous mode [ 423.117573][T17889] syzkaller0: entered allmulticast mode [ 423.130569][T17908] netlink: 'syz.2.4337': attribute type 4 has an invalid length. [ 423.147659][T17889] tipc: Resetting bearer [ 423.174333][T17907] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4339'. [ 423.232104][T17879] bond2: option arp_interval: invalid value (18446744073709551615) [ 423.253191][T17879] bond2: option arp_interval: allowed values 0 - 2147483647 [ 423.287035][T17879] bond2 (unregistering): Released all slaves [ 423.460790][T17878] tipc: Resetting bearer [ 429.278889][T17878] tipc: Disabling bearer [ 429.327202][ T5727] tipc: Node number set to 1515413811 [ 429.336496][ T35] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.464781][T17933] FAULT_INJECTION: forcing a failure. [ 429.464781][T17933] name failslab, interval 1, probability 0, space 0, times 0 [ 429.478976][T17933] CPU: 0 UID: 0 PID: 17933 Comm: syz.3.4345 Not tainted syzkaller #0 PREEMPT(full) [ 429.479001][T17933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.479013][T17933] Call Trace: [ 429.479022][T17933] [ 429.479031][T17933] dump_stack_lvl+0xe8/0x150 [ 429.479064][T17933] should_fail_ex+0x40c/0x560 [ 429.479094][T17933] should_failslab+0xa8/0x100 [ 429.479123][T17933] ? __pfx_ip6_dst_gc+0x10/0x10 [ 429.479149][T17933] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 429.479175][T17933] ? lock_acquire+0x106/0x350 [ 429.479201][T17933] ? dst_alloc+0x105/0x170 [ 429.479226][T17933] ? dst_alloc+0x105/0x170 [ 429.479254][T17933] ? __pfx_ip6_dst_gc+0x10/0x10 [ 429.479280][T17933] dst_alloc+0x105/0x170 [ 429.479311][T17933] ip6_pol_route+0xba1/0x14d0 [ 429.479336][T17933] ? ip6_pol_route+0x163/0x14d0 [ 429.479369][T17933] ? __pfx_ip6_pol_route+0x10/0x10 [ 429.479396][T17933] ? __lock_acquire+0x683/0x2cf0 [ 429.479431][T17933] ? __pfx_ip6_compressed_string+0x10/0x10 [ 429.479463][T17933] fib6_rule_lookup+0x222/0x730 [ 429.479491][T17933] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 429.479519][T17933] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 429.479548][T17933] ? ip6_route_output_flags+0x2e/0x5d0 [ 429.479578][T17933] ? ip6_route_output_flags+0x2e/0x5d0 [ 429.479621][T17933] ip6_route_output_flags+0x364/0x5d0 [ 429.479650][T17933] ? ip6_route_output_flags+0x2e/0x5d0 [ 429.479682][T17933] ip6_dst_lookup_tail+0x1a1/0x1610 [ 429.479712][T17933] ? sk_dst_check+0x25/0x480 [ 429.479734][T17933] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 429.479754][T17933] ? sk_dst_check+0x25/0x480 [ 429.479778][T17933] ? sk_dst_check+0x25/0x480 [ 429.479802][T17933] ? sk_dst_check+0x25/0x480 [ 429.479819][T17933] ? sk_dst_check+0x30e/0x480 [ 429.479849][T17933] ip6_sk_dst_lookup_flow+0x79a/0xa50 [ 429.479870][T17933] ? get_random_u32+0x13a/0x8b0 [ 429.479892][T17933] ? get_random_u32+0x4ce/0x8b0 [ 429.479914][T17933] ? udpv6_sendmsg+0x1898/0x2610 [ 429.479949][T17933] udpv6_sendmsg+0x1a98/0x2610 [ 429.479994][T17933] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 429.480021][T17933] ? udp_lib_get_port+0x177b/0x1c60 [ 429.480044][T17933] ? udp_lib_get_port+0x177b/0x1c60 [ 429.480094][T17933] ? inet_send_prepare+0x1b4/0x260 [ 429.480121][T17933] ? lockdep_hardirqs_on+0x7a/0x110 [ 429.480147][T17933] ? inet_send_prepare+0x1b4/0x260 [ 429.480167][T17933] ? __local_bh_enable_ip+0xd0/0x130 [ 429.480190][T17933] ? inet_send_prepare+0x1b4/0x260 [ 429.480215][T17933] ? inet6_sendmsg+0xe4/0x120 [ 429.480241][T17933] ? __pfx_inet6_sendmsg+0x10/0x10 [ 429.480266][T17933] sock_sendmsg_nosec+0x90/0x180 [ 429.480297][T17933] ____sys_sendmsg+0x54e/0x850 [ 429.480327][T17933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.480362][T17933] ? import_iovec+0x73/0xa0 [ 429.480385][T17933] ___sys_sendmsg+0x2a5/0x360 [ 429.480408][T17933] ? __lock_acquire+0x683/0x2cf0 [ 429.480439][T17933] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.480469][T17933] ? kstrtouint+0x6e/0xe0 [ 429.480521][T17933] ? __fget_files+0x2a/0x420 [ 429.480546][T17933] ? __fget_files+0x3a2/0x420 [ 429.480583][T17933] __sys_sendmmsg+0x273/0x4d0 [ 429.480613][T17933] ? __pfx___sys_sendmmsg+0x10/0x10 [ 429.480648][T17933] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 429.480690][T17933] ? ksys_write+0x242/0x270 [ 429.480712][T17933] ? __pfx_ksys_write+0x10/0x10 [ 429.480739][T17933] __x64_sys_sendmmsg+0xa0/0xc0 [ 429.480763][T17933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.480784][T17933] do_syscall_64+0x174/0x580 [ 429.480809][T17933] ? trace_irq_disable+0x3b/0x140 [ 429.480840][T17933] ? clear_bhb_loop+0x40/0x90 [ 429.480864][T17933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.480884][T17933] RIP: 0033:0x7f942e79e019 [ 429.480902][T17933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.480920][T17933] RSP: 002b:00007f942f6eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 429.480940][T17933] RAX: ffffffffffffffda RBX: 00007f942ea25fa0 RCX: 00007f942e79e019 [ 429.480955][T17933] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 429.480968][T17933] RBP: 00007f942f6eb090 R08: 0000000000000000 R09: 0000000000000000 [ 429.480980][T17933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.480992][T17933] R13: 00007f942ea26038 R14: 00007f942ea25fa0 R15: 00007ffffb610d78 [ 429.481025][T17933] [ 430.518422][ C1] sched: DL replenish lagged too much [ 432.089245][ T4936] Bluetooth: hci5: command 0x0406 tx timeout [ 435.279558][ T35] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.328687][T17953] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4352'. [ 435.342480][T17951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.469339][T17951] mac80211_hwsim hwsim16 »»»»»»z1: renamed from wlan0 (while UP) [ 435.833441][T17962] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4355'. [ 442.524248][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.149485][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 457.367822][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 476.813557][ T5634] Bluetooth: hci0: command 0x0406 tx timeout [ 501.902953][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.584222][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 554.348784][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 554.355774][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17951/1:b..l [ 554.364219][ C0] rcu: (detected by 0, t=10507 jiffies, g=67625, q=948116 ncpus=2) [ 554.372211][ C0] task:syz.2.4351 state:R running task stack:23968 pid:17951 tgid:17950 ppid:14234 task_flags:0x40054c flags:0x00080001 [ 554.386585][ C0] Call Trace: [ 554.389871][ C0] [ 554.392813][ C0] __schedule+0x17d9/0x56c0 [ 554.397339][ C0] ? __lock_acquire+0x683/0x2cf0 [ 554.402295][ C0] ? __pfx___schedule+0x10/0x10 [ 554.407165][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 554.412549][ C0] preempt_schedule_common+0x82/0xd0 [ 554.417846][ C0] ? cfg80211_mlme_unregister_socket+0x2c8/0x650 [ 554.424189][ C0] preempt_schedule_thunk+0x16/0x40 [ 554.429402][ C0] __local_bh_enable_ip+0xe1/0x130 [ 554.434522][ C0] cfg80211_mlme_unregister_socket+0x2c8/0x650 [ 554.440686][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 554.446077][ C0] nl80211_netlink_notify+0x35d/0x860 [ 554.451462][ C0] ? nl80211_netlink_notify+0x75/0x860 [ 554.456933][ C0] notifier_call_chain+0x1a5/0x3d0 [ 554.462064][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 554.467799][ C0] netlink_release+0x11f8/0x1a80 [ 554.472755][ C0] ? netlink_release+0x106/0x1a80 [ 554.477791][ C0] ? __pfx_netlink_release+0x10/0x10 [ 554.483083][ C0] ? down_write+0x16d/0x200 [ 554.487586][ C0] ? __pfx_down_write+0x10/0x10 [ 554.492462][ C0] sock_close+0xad/0x220 [ 554.496719][ C0] ? __pfx_sock_close+0x10/0x10 [ 554.501585][ C0] __fput+0x418/0xa50 [ 554.505589][ C0] task_work_run+0x1d9/0x270 [ 554.510183][ C0] ? __pfx_task_work_run+0x10/0x10 [ 554.515294][ C0] ? do_exit+0x735/0x2360 [ 554.519636][ C0] ? kmem_cache_free+0x182/0x650 [ 554.524587][ C0] ? put_net+0x191/0x260 [ 554.528843][ C0] do_exit+0x73a/0x2360 [ 554.533029][ C0] ? __pfx_do_exit+0x10/0x10 [ 554.537634][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 554.542674][ C0] do_group_exit+0x22d/0x2f0 [ 554.547268][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 554.552478][ C0] get_signal+0x121b/0x12c0 [ 554.557006][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 554.562564][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 554.568748][ C0] exit_to_user_mode_loop+0x104/0x730 [ 554.574133][ C0] ? rcu_is_watching+0x15/0xb0 [ 554.578912][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.584985][ C0] do_syscall_64+0x353/0x580 [ 554.589584][ C0] ? trace_irq_disable+0x3b/0x140 [ 554.594618][ C0] ? clear_bhb_loop+0x40/0x90 [ 554.599303][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.605197][ C0] RIP: 0033:0x7ff353d9e019 [ 554.609617][ C0] RSP: 002b:00007ff354c5e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 554.618041][ C0] RAX: fffffffffffffe00 RBX: 00007ff354025fa8 RCX: 00007ff353d9e019 [ 554.626013][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff354025fa8 [ 554.633983][ C0] RBP: 00007ff354025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 554.641953][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.649929][ C0] R13: 00007ff354026038 R14: 00007ffc83c71fe0 R15: 00007ffc83c720c8 [ 554.657930][ C0] [ 554.660949][ C0] rcu: rcu_preempt kthread starved for 9620 jiffies! g67625 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 554.672056][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 554.682021][ C0] rcu: RCU grace-period kthread stack dump: [ 554.687907][ C0] task:rcu_preempt state:R running task stack:27752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 554.701407][ C0] Call Trace: [ 554.704687][ C0] [ 554.707624][ C0] __schedule+0x17d9/0x56c0 [ 554.712140][ C0] ? __lock_acquire+0x683/0x2cf0 [ 554.717112][ C0] ? __pfx___schedule+0x10/0x10 [ 554.721983][ C0] ? schedule+0x90/0x2b0 [ 554.726237][ C0] schedule+0x164/0x2b0 [ 554.730406][ C0] schedule_timeout+0x152/0x2c0 [ 554.735264][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 554.740640][ C0] ? __pfx_process_timeout+0x10/0x10 [ 554.745936][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 554.751755][ C0] ? prepare_to_swait_event+0x322/0x350 [ 554.757313][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 554.762196][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 554.768364][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 554.773665][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 554.778894][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 554.783501][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 554.788713][ C0] ? __kthread_parkme+0x71/0x1f0 [ 554.793662][ C0] ? __kthread_parkme+0x196/0x1f0 [ 554.798697][ C0] kthread+0x388/0x470 [ 554.802782][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 554.807990][ C0] ? __pfx_kthread+0x10/0x10 [ 554.812594][ C0] ret_from_fork+0x514/0xb70 [ 554.817197][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 554.822320][ C0] ? __switch_to+0xc89/0x1420 [ 554.827009][ C0] ? __pfx_kthread+0x10/0x10 [ 554.831615][ C0] ret_from_fork_asm+0x1a/0x30 [ 554.836398][ C0] [ 554.839414][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 554.845743][ C0] Sending NMI from CPU 0 to CPUs 1: [ 554.850954][ C1] NMI backtrace for cpu 1 [ 554.850977][ C1] CPU: 1 UID: 0 PID: 48 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 554.851016][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.851040][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 554.851064][ C1] RIP: 0010:kasan_check_range+0x1d/0x2c0 [ 554.851093][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 41 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ae 01 00 00 4c 8d 04 37 <49> 39 f8 0f 82 36 02 00 00 49 b9 00 00 00 00 00 80 ff ff eb 0d cc [ 554.851108][ C1] RSP: 0018:ffffc90000a07a18 EFLAGS: 00000002 [ 554.851122][ C1] RAX: 0000000000000001 RBX: ffff88802cc902a8 RCX: ffffffff81a36a4d [ 554.851135][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88802cc902a8 [ 554.851146][ C1] RBP: dffffc0000000000 R08: ffff88802cc902ac R09: 0000000000000004 [ 554.851159][ C1] R10: dffffc0000000000 R11: fffff52000140f44 R12: dffffc0000000000 [ 554.851172][ C1] R13: ffff88802cc90000 R14: ffff88802cc902ac R15: ffff88802cc90300 [ 554.851185][ C1] FS: 0000000000000000(0000) GS:ffff88812504f000(0000) knlGS:0000000000000000 [ 554.851199][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.851211][ C1] CR2: 000055557fa494e8 CR3: 000000007fc26000 CR4: 00000000003526f0 [ 554.851227][ C1] Call Trace: [ 554.851234][ C1] [ 554.851244][ C1] do_raw_spin_unlock+0x4d/0x210 [ 554.851267][ C1] _raw_spin_unlock+0x1e/0x50 [ 554.851288][ C1] advance_sched+0x99a/0xc80 [ 554.851317][ C1] ? __pfx_advance_sched+0x10/0x10 [ 554.851341][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 554.851362][ C1] ? __pfx_advance_sched+0x10/0x10 [ 554.851391][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 554.851421][ C1] hrtimer_interrupt+0x448/0x910 [ 554.851453][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 554.851474][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 554.851498][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 554.851517][ C1] RIP: 0010:lock_acquire+0x50/0x350 [ 554.851540][ C1] Code: ac 24 98 00 00 00 65 48 8b 05 2c 4c ca 11 48 89 44 24 58 0f 1f 44 00 00 65 8b 05 2f 4c ca 11 83 f8 08 0f 83 83 01 00 00 89 c0 <48> 0f a3 05 18 e3 b4 0e 73 0d e8 f1 29 09 00 84 c0 0f 84 ca 01 00 [ 554.851555][ C1] RSP: 0018:ffffc90000a07e40 EFLAGS: 00000297 [ 554.851568][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 554.851578][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb59c60 [ 554.851589][ C1] RBP: ffffffff8177927f R08: 0000000000000000 R09: 0000000000000000 [ 554.851601][ C1] R10: ffffc90000a07fd8 R11: ffffffff81b20a10 R12: 0000000000000002 [ 554.851613][ C1] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000000 [ 554.851626][ C1] ? unwind_next_frame+0x8f/0x2550 [ 554.851644][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 554.851676][ C1] ? unwind_next_frame+0x8f/0x2550 [ 554.851694][ C1] ? ret_from_fork+0x514/0xb70 [ 554.851719][ C1] ? unwind_next_frame+0x8f/0x2550 [ 554.851737][ C1] unwind_next_frame+0xac/0x2550 [ 554.851754][ C1] ? unwind_next_frame+0x8f/0x2550 [ 554.851774][ C1] ? kthread+0x388/0x470 [ 554.851798][ C1] ? unwind_next_frame+0x8f/0x2550 [ 554.851817][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 554.851839][ C1] arch_stack_walk+0x11b/0x150 [ 554.851860][ C1] ? ret_from_fork+0x514/0xb70 [ 554.851886][ C1] stack_trace_save+0xa9/0x100 [ 554.851907][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 554.851930][ C1] ? __lock_acquire+0x683/0x2cf0 [ 554.851956][ C1] kasan_save_track+0x3e/0x80 [ 554.851978][ C1] ? kasan_save_track+0x3e/0x80 [ 554.851999][ C1] ? kasan_save_free_info+0x40/0x50 [ 554.852017][ C1] ? __kasan_slab_free+0x5c/0x80 [ 554.852039][ C1] ? kfree+0x1c5/0x640 [ 554.852057][ C1] ? skb_release_data+0x85e/0xab0 [ 554.852078][ C1] ? __kfree_skb+0x5d/0x210 [ 554.852096][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 554.852114][ C1] ? nft_synproxy_do_eval+0x335/0x550 [ 554.852131][ C1] ? nft_do_chain+0x48d/0x1b10 [ 554.852149][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 554.852166][ C1] ? nf_hook_slow+0xc5/0x220 [ 554.852190][ C1] ? NF_HOOK+0x21f/0x3c0 [ 554.852214][ C1] ? NF_HOOK+0x336/0x3c0 [ 554.852236][ C1] ? process_backlog+0xa34/0x1860 [ 554.852253][ C1] ? __napi_poll+0xaa/0x330 [ 554.852268][ C1] ? net_rx_action+0x61d/0xf50 [ 554.852284][ C1] ? handle_softirqs+0x225/0x840 [ 554.852304][ C1] ? do_softirq+0x76/0xd0 [ 554.852323][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 554.852342][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40 [ 554.852369][ C1] ? ieee80211_iface_work+0x78a/0x1010 [ 554.852390][ C1] ? cfg80211_wiphy_work+0x29e/0x420 [ 554.852409][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 554.852429][ C1] ? worker_thread+0xa47/0xfb0 [ 554.852448][ C1] ? kthread+0x388/0x470 [ 554.852471][ C1] ? ret_from_fork+0x514/0xb70 [ 554.852512][ C1] kasan_save_free_info+0x40/0x50 [ 554.852531][ C1] __kasan_slab_free+0x5c/0x80 [ 554.852555][ C1] kfree+0x1c5/0x640 [ 554.852573][ C1] ? skb_release_data+0x85e/0xab0 [ 554.852597][ C1] skb_release_data+0x85e/0xab0 [ 554.852623][ C1] __kfree_skb+0x5d/0x210 [ 554.852644][ C1] nft_synproxy_eval_v4+0x36a/0x4e0 [ 554.852666][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 554.852686][ C1] ? nf_ip_checksum+0x13c/0x510 [ 554.852707][ C1] nft_synproxy_do_eval+0x335/0x550 [ 554.852726][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 554.852744][ C1] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 554.852765][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 554.852789][ C1] nft_do_chain+0x48d/0x1b10 [ 554.852816][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 554.852837][ C1] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 554.852877][ C1] nft_do_chain_inet+0x360/0x4b0 [ 554.852897][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 554.852920][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 554.852946][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 554.852965][ C1] nf_hook_slow+0xc5/0x220 [ 554.852992][ C1] NF_HOOK+0x21f/0x3c0 [ 554.853017][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 554.853042][ C1] ? NF_HOOK+0x9e/0x3c0 [ 554.853065][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 554.853090][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 554.853118][ C1] ? ip_local_deliver+0x113/0x190 [ 554.853144][ C1] NF_HOOK+0x336/0x3c0 [ 554.853169][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 554.853193][ C1] ? NF_HOOK+0x9e/0x3c0 [ 554.853216][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 554.853241][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 554.853265][ C1] ? ip_rcv_core+0x88d/0xd50 [ 554.853292][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 554.853316][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 554.853340][ C1] process_backlog+0xa34/0x1860 [ 554.853360][ C1] ? process_backlog+0x3c3/0x1860 [ 554.853391][ C1] __napi_poll+0xaa/0x330 [ 554.853409][ C1] net_rx_action+0x61d/0xf50 [ 554.853433][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 554.853465][ C1] handle_softirqs+0x225/0x840 [ 554.853488][ C1] ? do_softirq+0x76/0xd0 [ 554.853509][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40 [ 554.853535][ C1] do_softirq+0x76/0xd0 [ 554.853554][ C1] [ 554.853560][ C1] [ 554.853567][ C1] __local_bh_enable_ip+0xf8/0x130 [ 554.853587][ C1] ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40 [ 554.853619][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 554.853641][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 554.853666][ C1] ? __lock_acquire+0x683/0x2cf0 [ 554.853691][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 554.853729][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 554.853755][ C1] ? kcov_remote_start+0x181/0x790 [ 554.853780][ C1] ieee80211_iface_work+0x78a/0x1010 [ 554.853803][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 554.853825][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 554.853845][ C1] process_scheduled_works+0xa8e/0x14e0 [ 554.853879][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 554.853903][ C1] ? assign_work+0x3cf/0x5d0 [ 554.853925][ C1] worker_thread+0xa47/0xfb0 [ 554.853952][ C1] ? __kthread_parkme+0x71/0x1f0 [ 554.853979][ C1] kthread+0x388/0x470 [ 554.854004][ C1] ? __pfx_worker_thread+0x10/0x10 [ 554.854023][ C1] ? __pfx_kthread+0x10/0x10 [ 554.854047][ C1] ret_from_fork+0x514/0xb70 [ 554.854074][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 554.854098][ C1] ? __switch_to+0xc89/0x1420 [ 554.854121][ C1] ? __pfx_kthread+0x10/0x10 [ 554.854146][ C1] ret_from_fork_asm+0x1a/0x30 [ 554.854170][ C1]