last executing test programs: 1m20.114491722s ago: executing program 1 (id=781): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\r\x00\x00\x00 \x00\x00\x00', @ANYRES32, @ANYBLOB="eafc8bb852fa2f7a0888f4a3dc94d1552d82c40c35ec9b14946174475b2607c144d8d050aa0ff264bb20a5", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) socket$nl_route(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=ANY=[@ANYBLOB="020300021702000000000000000000000200080008000000fd0000000000000003000600000000000200000064010101000000000000000002000100000000000000000000000020030005000000000002000000000000000000000000000000010014009900000002001000000004d5000004d60000000001021800ff020010b2f3c39a26c4ec636b8107c83f091ecb1ef9aba5fc2f5766039e739b64315484122ba55dfbd21278aaa873e7c73164a8d89b172131ad9a53ad327afb942126a7455c68e23cc462bd05211c62ebb56ac8e01d00dbf01c4e56a22e115900a34b33752897c5e785545ddf617c789d54f3b01e8ae77178ea9c1a87341302d3667e4d025fa0130581c15acc05176e0c44b42a2ea00f610161f0e5453aa66cce77b1534a0b386e530c5eff70626f7c604595c04429a062bd50f7137b755ab7bd18bb1e284b84926f46c59ed9fcfdfc8bf7cccc93c7d375fce048841820941afe92bbe47a870c5faf40f190e44ddea2facf19522bcdc11fc44231296c1f411e39546b9868e2f94863b58775ee562a07ee6932cb3a2229711b2d06ef66acc8d91870ddda2673bf467d9780612a44cdcedc2fe646247b4bb703b3fa87918bd27c93ad9dd3f999d3762029342867b91801025b8fe48119f0e1bed02b5f8e9e7ada346cdff552301ac467ff8634c16e1fe28949e732fbd04629b866ee7d99c16fd5f7b77f7b156fdd4e3f514c2fa599b9aa7fa9b100575f620dc6e8e8c86b54857c9fc4e745373bbf7b79a03634c15d557b5b2909aa7f1760d70ee2eaefbfed959d29be9ed83e79e9752a55f79150e79ef596b56f260db4f21ecc42e2303ce678af998ab7216e16ea6a3c4a3fbb9f24ad4b3da36c6cd0030b1c935d86644e79e5813828a925158d91a3eec7fe327abe1ea5c3c3e3db666be187888fc0761b7261908893e97ae22768c745b01ff8c3a058fd95ba3c528057b89a10ae060ce716e8ed4b62f11f05a87b2237d2f3099b978ebd5bc351eae418d4ed587cdb3617bc1673d59d5741d745b317a6aa3496e19667b9e35338fdeefdd516f4bf668ad3350a8413ddcef95ea12e41fccadf99250ca936075b6057162d900ffbdaa5fa6120954ecca551f75cbf429ed128a6eee987b771310a8cc7623716b098c8f6d963d2b7561fa65d7ed316dd475c6240c9513b6532f21d6ebc6325eb6260c76f7fc664e9725b15037186aec8f8a08d9caf36535484f44eb4e5c17e78ebcc2d2f84f645917bc2eef6b67709725e29f25cf7c6bef646c6cee9ed4eb5ef4ff3e6da7aa8d475dbbd7fe20b26ebfe50ce4e2d9973186fed88555f7c42b59c65a88e35381958ba5690519fb7d98db768da023eea59c6b9e2bc64b51cecc7c83f6468fc5f28ddb5c812c75bb9cddd6037a2dff2ca8c41c405dd0768926301b6cf44ad9a9a42aa6f7f29c12d5f71ae4453ae742191cfa004e6b3fa23f275a95932f4f6517124f7883de4a52f59f1e9a4b13830020db37a2297a95b8ad2114ca1016ffc88358d6361ebde10ffdff77cfc7eaf1ffcb84882b541a006d9584f194095ae4be0d98bc0115cea7198842c41742bb4acf61518800e681c0d155bd1e8bb8ee089560703bccff348dc93ec2081faf28c0261f0e24bc0eca5cc9975cdd7e0804113e11be45c5b200464a62767382b1aa4eb782b6146c90b902ca6f0bf190aca92b07e697febc808783f76ce932c20d8afe74ad45cc6a4f7f9fcbd6fbae5aa4ac560668d643f47f10b658acbaa7e6ab607639a761d4782798bf5a2c225ae65e9c662560d3ceed24d98c7814ab9ccc9fc7f64a65e3b9ba7053a6613adb62a485401b48008a7b78d4f49a51a299bf0cb9005e800ed08b2b4e40035901372c5d6fc2d136719cacaedf735019d6117c46448aba49369cbf41c453e160eeeddcd93f03e16aacfed5207c81e6eff37fa7e5b3c608de405e635f619b84ac9afb1bd506f0559a65735aecedb0e6d04711a13878db68677408fbb2d00fed5a3f523363192ba82dbc4c39aa2e093024a6c8cab1f3de382dc3357498f4d3d73210a4d539a8be1146a3e8f4bb92520949e2c9e8811aa582f5fb5bdd370bd562c24384d0b18ec05de6c401aee4267e6f0b334792d44d33d21582d4b5a850dbff553d98099cd5e9ce1dd424b93223ff86d00c9ad23ff3337f4fbc926abdc5aa2f844c3005531728ab49dbfb7f5f13856d91ded3b6e922256409fdace609a49b4ffc207f0633030f8014729cbbd7bc7ac5cef5df1d3fd79dc20def35b8ecfcbff9d930163ce94a9f5463ed5143a7446066b76809c212042655fa77970f239bbc3426074e153b05033b2fe09fd6f72dbbee8a3ba98566e88a008675ad157457836983f07000000f68a3fbb05a4f1a70c11fdb59b7220b5e1b1b63a234778db42e66d5b9a85cc40cd89c35b68f369a679bfd5f74d4bc17e4e37d72983bf9eb3d53236ef6f155a16f133af3663728cc7b999ea1944ba47fea4ef67ce4f8cdadae7337f65810b5aad86e71e3d3c89a77a8a72661cba11abb47249140d3e89159fb36c9f5dc0e2b7ee92e4b65e7ab4eeb4549a19c6d7f0212de05ad489fa855bedeb341349d8d2e6b85783bdcd03191551a6af3fca6c855b193793937764704d3606bc4f1e150c57bcc4db322d1be22edc689281e84dcd2dca130d9ba47970bc40aeac1a192daae57622f7e6684e31fd428260dd6bfc65ace4b538349f07bcb25373104efb16806f539b9c07223124bf4e7a7ad3fa57da2204c09a1da986fac136e62220ec92680610f3f75b8628764f40f9b0e5a55618e009a05b6dc9429dea825fc38884a90a9c3184a8de2f5e318e79c24237a70a839ce8cd78abefc61f9f8dc68e3ddf3c7bebd9b827ca2c91e92eba6eea7debf22c2b989008c452958618f5b7fd9370690dac379586b4539d89423ac0470acbfc48f46247c1446c1b4e24ac0b81be5113e3090d33bfc614a3e8c7c2d3dbe748c30516baf579dbea195e9f23119b02184a0653bab61971d5c3f8928d2f74bc18cc390b8bf3b8d6fc53c7be897e60d645e9a2ff9f54c8ab5b5b6f62f49688ca08559b3c08cd6296c037aecb47f68122e45c5f95dddcb67f5d6bc53779ffcfffacede97de82fbc7afb7dc0f48a4d180ed45e266eccfa07d9f3bdc16f073d5198a088b4894875539ed5f61aaf0a043c115a86a9c9303d535a76c7b110c5414767431dff7824d18c103800b57706b05b824d65c69892720c34b193b7c6ab9fc344d8525d31cc8b6f61ee740ac570a1db461871be6df82154642c45fe2d91b48df4e1bb2a8cfb6e6cb037123b3d176df63679e0575fe595f7f8a8dea816de45f59a030b5be1adfc9b8d15a07ec3aff5534169541db39ca114b71874c0d82a9577b8bc2af6bac603ca26af5fd89746faced27dfb83289e6faa1751b0427b13239826ae350ad0e0f92852a5e0b75c4d28aad2a3da3b53948c8a2f99da4d0072f6364c8e6ab779cd706f2ee4cdb8fb3d354fee14b844a542c462e995ddac9c5c1dcf015ba28bf182da96ab536379011eb4576bc64b6e2aac405cbcec06f45c316ae2a70dc0328d7e6871f36132790483d690437dc38d5314c1d8af415dc004f1808455d92788cb582d90b6bbab54edaccec0afd641596d25c4e7f58a65c34bbf2187809c3051c80e548f1ea6ca30818c543c129eeb575b11a44d9c0e68a0b50059a49d41fd7c3f2c5e41e6bec77e36dc6c82d5d77ff7359ad4c7c81fffce39319a733e33957fb544a566664c9f8cb5902729e721cad62d4f4db71ec339a113578d049acfc5efe66f60b416339fd5ee8794e2ea3a923e17049fbf3df58da879302910f295a8f1f5490d677549f77a70110ef84e9795be712fe6e145f2dc60462bb2f267ba4ec4cf99fb9a5e3d5c9c351abdf414eafda12a464b85f107c2c66d98a67e5fc0618776f70ed61df39bd23b53b38dc7046d56106a35e8ce5e2669f30453d63c3066417682d03bd32d01524b520a8e59b3009655c65f0683737c1a5c2bfe6761388acba2e37962bdeca414cd4ffb32e10646f9820561ae05e557daf6c3d3bc80309e647c2d9eb4869cc4dfa7655bdcf10307950fb23992f27a768e29d6a0b05b2834b0c4c00936b63c2ac43fda0de18bb0f20278d7980992ac4acc1e691e1c0aa34c57d19cbcfdef30ff77b9804dc47e7a2624d57c67595cf4dbb6b3347c2fe5f69574ec14a02dd5dd7450586e836b7946b35c8e975ec580e909d0a40688c6b5788e4f8575fa0c91a4cb73a740f9846f633e76633f4312ec0f7fd8af59b3e4a34af4cd81236f9d2ad2be1f14964278213afcb51c02823e70f8409b443189001c32bce62380da64cc9c1622a7295342ebf5740c833ae5bad1b1d99eaf68210be9fb3ff1192f5c0b59e7ed7e3910826a2daca7b577e23f354fc3e001463831a340a239d478eb765410385f5c5ecd53163944bdf1783d054df6e35dc8d127eab0b5198cd3ee3c42ef4d9ecf643af89650879c81a2d588a8ffc01b00758360618e7dbc02ba10cc66b7b05dddcc5872a630baf6fba86876ea580b57d1b5771325eb057bf7665133bd4d182472129220b7510764edca0ec1dc684dd5acad81f3e2c29f0fc669a034fdc5111f76be61cc2f70e77f4fbb9fd22d18d0cb46deca35449453355324e5c3f359458ce56e5f443b9d1e35890cd221e3ac93b77b384f3da7350dca2cf1fe2a6af7876872b1ad5229d897b1f02e1609621f56a8fd5d4d5a1bbbfc39b943a57fd544f72e4d0fb96c5c35f6e79d693864b44e131cad5a16df8fe22b8e331eac86b85d29ea961c55fac5f8a7adf8493eaed344b237a25361b2a39047a08533744979d97af836a81adbb64364b6b0e1994d43c663cab92c8f385ff789126723854feb65eb6530cec47f924395c4b684c0727a6c9c0737d48f2c2f2660585a78d5072a70f5cf37791bd2ef17ee0d1107188ac6b0c88eb29ce832d112793b15b28b18f893a5779aeb888fd46e7291113e40393d8f715cec94287fe83a1434d721585bcf1c49cf42005f18f9c30e7a5928a14c1c504e214299a3dc732193b4aa7521724eb98a0707d3a7d2a9217cc027bb885cefebe1913817b73518df51250076a31116f4c4211ca49d47de8b1f3baf1c82e991c1537707fc686c50ff7febb51f8da702de20d23bc1f15858b11d274350202fc529556a86db4ddffae12a63941bca1812a0e1c9594a7cb5f48e85bbad096e59034b8b5396e5113be7a03fa3a8c910f6599dad5048f23c12a38da330c7df05c5853a29cc677606f622d2e5cf982f7036c68b2cd16495a1e243686a1e4ad3b6da542054529808a00583a5307be1ff445b79144e98f2ec947f8359aefbdeeb3a3417b9afa5ec1e4bea1d522a744c220aa6f0edec4f284507cfb0a3300fdc409742b4db741b84ba138403ff3f06e0ab5c5e9a3574c033d5ba5a2e7a86807fb837feda9b8e36b589c689944830422ac7ef8622000a57509ae3e7a6005fa0e19f48d129e7c00b00e7d9e2db32c0726095e07643d74e38e56741a4096f3508f78740705396959b0a8bff998e667c4919427a8b264d91c71c342d77b791921b91aa252d386949de26a7a49870f1c83eff5288439dfa7ad8634f526e71dd87dc0de02ec4446dba5bab5ed2ccf4ce1bd74e7465be22ae25c0e8bc71ccefc980de18d6dd437b79c2474fc54744738a09f052be1c2fb4ce188afbb2e45748e75be15c7b4d8721ddde08c48125f4760c6b161e643a259a021edf73b19dde2db216e1f90d9485128df52423b87136f611fc8b88b147c1b3a9abac949f8c039bf10d500df935230f63c3275d1c088c6ca7b69b320ad130917f1228223d189bf707da41806a002d15935cf6eb781acc22ba3436c23afb17ee73b7020b5fffd3a5eaac1a9b01e2fdc691f890d28843b4c69c23df7e19f98e29dd9e9d6fb15ea9ba0a27a304a19f697608decaded46a465609b79391020013000600000025bd70000635000005001a"], 0x10b8}, 0x1, 0x7}, 0x0) r4 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600007009921daa2f63432e75d5ef55491761788e72f44e5eb4436492ccfba6e40beb7de8b3b55c6cfe2341cad63aa2dde9afac21d97933933bec9e3d705e7ccdfbc837088ae74718cd247644c9f8b4f62914f19a0ea1f462550a98c583e33b14c368cc66fe9f6cf4ddfd1d46fc25b29467db82c46059238067bdc94688c6201b98b11917d4944647fea3740d82ecfd382344ddd6e703732936504183994afdfbab2b424dd51b726ca55ec229066", @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000076000d0b004000000000000003000000000000001497f33e0137552a1b1fe5eb140f6b7aa0e533139fb6e9dc5a8be2d14e63157835d787204c28e1b24b620a30c7fc8f9159f2523656b81fafdd62b534f7c93a1a05d05c0abde34a7315e887ffb0fee316eee59f9d8cfee994ff1a821519d668bd49bf1c17c4c5baff4809dea719"], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYRES32=r8], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac1414"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r9, 0x0, 0x0, 0x0) 1m18.798358816s ago: executing program 1 (id=789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'sit0\x00'}) socket$kcm(0x2, 0x3, 0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r2, 0x0, &(0x7f00000001c0)) socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="4c000000150097f07059ae08060c040002ff0f0300000000000001870182fa73a69d35a2cca8a308f7abca1b4e7d06a6bd7c493872f7d0375ed08a56041f000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x14008044) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xfffc, @local}]}, &(0x7f0000000440)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r9, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={r6, 0x1}, &(0x7f0000000100)=0x8) 1m18.685601876s ago: executing program 3 (id=791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000010000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000000408000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 1m18.558448743s ago: executing program 1 (id=792): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001040)=ANY=[@ANYBLOB], 0x90}}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x1, 0x7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x65, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @remote}}}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46", 0x5c}], 0x1}, 0xff0f000020000080) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1m18.494085713s ago: executing program 1 (id=796): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffee) write$tun(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x100) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/76}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000100)=0xfffffe01) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000005050a0101000000000000000002000f000000000000007a30000000000900030073797a320000000004000480140000001100010000000000000000000000000a"], 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) unshare(0x6a040000) socket(0x8, 0x3, 0x0) 1m18.438482506s ago: executing program 3 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001580)={@cgroup, 0xffffffffffffffff, 0x1a, 0x3}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$bt_rfcomm(r2, &(0x7f000000d400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xad}, 0xfffffffffffffe3f) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xff22}, 0x50) socket$inet6(0xa, 0x3, 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r5, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r6 = epoll_create1(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000"], 0x7c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000200)={0xa0000004}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030425bd700000000000000000009be1a5ffa5c982ba8859ce4820afc389a10ac69884bd2869c711ba439095a7100bddd4d400cc6b3abbd6e6a26ab4a0d016142afef4ae71d51a31bfa4dab411a3b2b1564ceaa4cb6be7b7685075b1762710562ca38e5e083cc9f603a01885cb561366f92693aacb644920f316fce41b08ccfe109ba1b66586937292b37855418322f5da472fc1a605b56455e84d80c82091220bf30c225f530f61341afd0cb0dcc73da1df3f65d6213cd5e58c423f2cbe91c03409047285ef9af7da1337a3dfde30686ee3278c9d22070f1599f6cea27b2d35b5a37dd63b438ce374", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0xba01}, 0x810) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000200)={0x1, 0xc, 0x82, &(0x7f0000000340)=""/130}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x400}) 1m18.372318008s ago: executing program 0 (id=799): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m18.218298935s ago: executing program 0 (id=802): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec003f0000000000d5cecc3958e33b778d0407ccfdc628be37dcb40a633fdc30e73d9789917949572cce605812cd2e4025b09db2e37c0cf2d00d2972f783e4265a37f27a8a75afb6e30a3c28c5ef68a6a76e93aa6d7d51e9f32d6946d4"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r0) 1m18.183594425s ago: executing program 3 (id=803): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000000000f0400000000005f00"], 0x0, 0x28}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', r1, 0x4000, r0}, 0x18) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, 0x0, &(0x7f0000000100)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000021000000000800000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r8 = socket$inet(0x2, 0x3, 0x5) setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000340)="4700000001003f", 0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 1m18.031226985s ago: executing program 0 (id=805): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0xa, 0x0) socket(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000003000000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r0, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1m17.877083248s ago: executing program 0 (id=808): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000400)=0xfffffffffffffff7) socket$inet_smc(0x2b, 0x1, 0x0) 1m17.754564747s ago: executing program 3 (id=810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000001f00000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1m17.550420799s ago: executing program 3 (id=814): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',', @ANYRES16=0x0], 0x1c}}, 0x20040050) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x80, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {0x0, 0x2000000}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x1, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2000) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000140)={'netdevsim0\x00', {0x2, 0x0, @loopback}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000480), 0x0, 0x9001, 0x7f) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)="50dd5c7e7cf2c9073a") socket(0x10, 0x3, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000400)=0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x8, 0x0}, 0x60000121) recvfrom(r3, &(0x7f0000000780)=""/4096, 0x1000, 0x1040, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r1, 0x7, 0x100, 0x10000}) bind(r5, &(0x7f0000000300)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) 1m17.516328603s ago: executing program 0 (id=815): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808b0ffffff10c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1m17.514488566s ago: executing program 1 (id=816): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000600000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 1m16.986847187s ago: executing program 3 (id=819): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r4, &(0x7f0000000500)=""/4096, 0x1000) splice(r2, 0x0, r5, 0x0, 0x400000008000f28, 0x0) splice(r4, 0x0, r3, 0x0, 0x114, 0xe) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r6, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) socket$kcm(0x29, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r7, 0x2000) 1m16.63826522s ago: executing program 32 (id=819): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r4, &(0x7f0000000500)=""/4096, 0x1000) splice(r2, 0x0, r5, 0x0, 0x400000008000f28, 0x0) splice(r4, 0x0, r3, 0x0, 0x114, 0xe) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r6, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) socket$kcm(0x29, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r7, 0x2000) 1m16.633130341s ago: executing program 0 (id=821): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000140120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080) 1m16.493759983s ago: executing program 33 (id=821): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000140120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080) 1m16.450361761s ago: executing program 1 (id=822): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$inet6(r0, &(0x7f00000004c0)="d7", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000006c0)={0x16, 0x19, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x80, 0xd700}}, @generic={0x66, 0x6d, "b81db27d486c0b1649317d219e89b37d2c6b7a62c3404de425ab07a84b6d78d0b0533d784064d7212e7b3ba2a6428042b349ebd77a53e899c6df012836211baa2f0679f8451ef7a07a1b30d02f352903954400a91211e099d990f8e048e4caa21f8db8430ea01bb1219f9db1a8"}, @pad1, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0xaf}, @calipso={0x7, 0x40, {0x2, 0xe, 0x0, 0xdd1, [0x0, 0x1, 0x8, 0x6, 0xffffffffffffffc0, 0xb1, 0xc6]}}, @pad1]}, 0xd8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x400}, &(0x7f0000000340)=0x8) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x28) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x3, 0xb}, &(0x7f0000000000)=0x90) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in6=@local}}, {{@in=@private}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x401c801}, 0x0) 1m16.331299551s ago: executing program 34 (id=822): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$inet6(r0, &(0x7f00000004c0)="d7", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000006c0)={0x16, 0x19, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x80, 0xd700}}, @generic={0x66, 0x6d, "b81db27d486c0b1649317d219e89b37d2c6b7a62c3404de425ab07a84b6d78d0b0533d784064d7212e7b3ba2a6428042b349ebd77a53e899c6df012836211baa2f0679f8451ef7a07a1b30d02f352903954400a91211e099d990f8e048e4caa21f8db8430ea01bb1219f9db1a8"}, @pad1, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0xaf}, @calipso={0x7, 0x40, {0x2, 0xe, 0x0, 0xdd1, [0x0, 0x1, 0x8, 0x6, 0xffffffffffffffc0, 0xb1, 0xc6]}}, @pad1]}, 0xd8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x400}, &(0x7f0000000340)=0x8) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x28) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x3, 0xb}, &(0x7f0000000000)=0x90) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in6=@local}}, {{@in=@private}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x401c801}, 0x0) 2.843477928s ago: executing program 4 (id=1719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) 2.617762285s ago: executing program 2 (id=1721): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200004400000000000000000000008500000027000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000540)=0x2, 0x4) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0x8) (rerun: 64) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={r3, 0x9}, 0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.546401105s ago: executing program 4 (id=1722): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4000014) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x1, 0x2, 0xffffff81, 0x1, 0x3, 0xffffffe2, 0x1}}, {0x6, 0x2, [0x3962]}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.491589832s ago: executing program 2 (id=1724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000140)="3e660d43e190d3fead3a989b544133cf890ffed9212a28411f070b7f106eef956b772b49d092b4b18c118c9a86a55de5063938ef26a8510705a3f727c921c3aa105895d01b677eaa7781a524469525199e7e5322f2cc282c4c70e509d050e450b20acecf7032caca3ecdd377c25fad61a06be9c12fdaa19e44f531d1c51950a3b1aef7fb927b1347fea6c8e7ae393da0ea7064b47839a3a1779bd905748362248935f5e73bc29a29814bfd45") sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000042000b001fad7000000000e31e6a99e3c3f748db6c970a5aaecfd46ab46a501d4ed7e36b8f5e159db374db783252fd44000000c0000000000e7d4c96a11e22479c70fc506831edb712deded0e224aa07cd29afdf5d32af115a75ace2997d6963d8b30ac481fcfdd4bf67"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) r2 = socket$inet6(0xa, 0x3, 0x401) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f00000004c0)=0x10) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000080)={r5, 0x2}, &(0x7f0000000100)=0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={0x0, @hci={0x1f, 0x1, 0x4}, @can={0x1d, r8}, @nfc={0x27, 0x0, 0x0, 0x6}, 0xe, 0x0, 0x0, 0x0, 0xb00, &(0x7f0000000080)='ip6erspan0\x00', 0x40, 0xc3, 0x2}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r6) setsockopt$inet6_tcp_int(r2, 0x6, 0x11, &(0x7f0000000040)=0x9a, 0x4) 2.171760201s ago: executing program 4 (id=1730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000000a01080000000000000000070000000900010073797a30000000000c00044000000000000000044c00060098d560227defe8a9e949f23891071949edba7a5b59dc884427bff96fac71f2db1e12bcef82bf040f716d96376fac5d28236b656fa5044c44e4dd9a2b37a2fe55337e1029dd978eb454000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000440ffffff"], 0x17c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a24000180080001"], 0x140}}, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0xa, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) unshare(0x6a040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) unshare(0x600) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f3962d98b2bd98d5c3e50169a4c0c99f29c7a336489c26259957c4bdeae1c8cdf60d817db09336f680bbe954dc05669c9d48cb0a0488ed2385d935a7166b3187189e08d421903d546126289651db812f9c8754c0dc6f24a22ca988a2ac131cc52d724bb086a53a94e515e09fef354e9ca0daacaa347e96b3efd7c5c4063f6eb0cf55f08ff942780e6846d78410057ca2b845e69eeda4066de60a033e2f3c7e47b2f0c0c4c7da98b1d658c620f70dbe6eb8b5dd90216caa82c91db4c0f7ea02df5d5f8d6815d2d7868e6a6053f31a4fbe8732a1310ca7a79814177a981e5ab68dfeba4fe46ed4c51819be1308f73455e311f511ce4360cc7c24836c9b895ee5ce93cc42dd88f02d91b479c1748339024343700cce897087bbaae4fbd8e2ad5da016265ef097043acaf87504dde24216c805b40cf4d6edf2ae6564182acdf06580dde3fb66ab01625ffadc22f1ac7b97b9dec871edd96e86af127be1ef27548917a49476ce87f1719173369caf69d35d25637f0514e3e06069877968eb874a1c1adc92e760670e42b6cccd2fe0a5f9c543a44b382befc422d4486416b6fabe2f11944a3f08cded6fad9e3304a202d1c58841a6ab78b28a4162db2671d9ea74ee6f3b33a282f42abc911e3245531a34f5567cfcaa1cf762677c9f61d3aa2c4d76210edf440bf53e816d008ab2ea29cf42de9b88442d6b2eec4fbf23f7d23eaab316335dfc2dc10f9148df0b83d92c3a94fb0b49365af5ba599a1ea8e6fc7aea8df9208795cbbdf0af04f5f08fc828cb347a6e9daddbe514675b31e5134c7dfbb060dfc632ad82141ddea4e77e6c63c1843ca6fc820558b7355bae86e106c2be9c9b500c5134ab62444a8423d596bfe0e3b2df47dabf5abe271ae947f4878132915332e4fcc5b81ad6f12570de44f0fdd6a96397acebf95421c88ff274365be770edd1bd1f69bc2d2883fa70fa68828bddcb98f90b0b77e28f9c4726e5b0c52fa6f30a8d57321dfd2f2678bbc6511f39019f49d7dde6f19adeac78e4064b8288f5b4ac7d8ca35f7f70dfb376f5f3af98f02e76e57e21a00bac677703c8e2169816f5cf6c4d1bf803e0b2987544eeeffd197bcc10fe1d9a7b826a6693dc8bb32f19f25a88a15c3dcd30e7f48f0cda06ca99152bd1c892735598c32c6098ae12ef493334be720cb0ba3c710954fe0a80c3dec255f194761e5e904262118307bb49901808f9ca1af58648e9d57ffb744fd4f1d01b5ccaeaa5231def3f800cb8341d9109d93e3871c395892f8ffe25d6d9a7faa7073fd9c3b3aac94c554dab9c35667eb49d5f0e47fd6bb41ca4b2f420b1e3915fa653aaf8d842cc4b0fec5011bd0ba372601fb7930ce98402d2e3d64f8422550a621fa23b128e66b6afe1a74dab2b53de22214844e53441ab7998d4ac3557cca9ffe4997c778243c943ca2de0b1deba8468a5fe3c0f1fa93a9a7bb5dbc3ec2058ac7ad4ffa64966bbd90a5f3f53de5c44af6e93f248471ca09cabe6e6c0a87586ff04a5a8cea539d049d82929277cfba7e46fddcdc0f4c2995def4ac27d65bde4bb88dbed3b9cf9eb9501273ca533da1220422f6585bfa77f5df5faaf3250349b514f44bfd55f106792bc7c766eddde2267a12888db542803efcf48357368880fa7771a2d962ae0bb14934a93d28a18da7d39ed6be7d1897e33d3ba0f6db99325a12f64670f22c762a395c9c6ef4e8ef15c0798465b1c9d406ed5731002a0ce72ca4adf125124046d5ac76b6782257587ff6ed55a55f98f8c377e36983b81c4b775cf0d41a9070cd1adeddf2083b635ae671f4e559990164e3a3e32a07c9faa438d73b1662e9eabf061703c7afb7adf2ae5f3acf2fcd57fef779f6b6e68656da61c8d45858d26f3858492e7797fb65d21f47ba805283f74fd473fcbd8b217ab628d62917dd96d5c49ad16d1616a946b8d4108a4d3f11c4f9260d9e01729beaf96231e6fb9d1181a1e032a71adde4c529f14029b728d163714e69f968340f7e2f9f420339bee64275474787d6b14cc9bbcbe1973cad7c29bfa1002adcb67b15c6edc01b00bca7823eb8fb6db7548fdd1ac1f7b3a69ed481c9cd2af0a09abd12e9a4e26e23d69790bdcd07b8da72da3ba97b0f2bc92a7da43845b70ae351f7ccc7cc7d92288f51f45e4d9d31a6bfeaa36621674170aad5d23a194921e81142505ec02020816a855eb162a9a5fefbc10121a534516be5fa2a17ed437cfb09d5085413a883ebf81538c2fd11edd0689bc339fc754d22ac9dec26d1e594f2cd14c605d069df81f876bf8c8b775108db76cac14088b9ea08d72a7f6c552e2954d8afd07f826085b2d67c828acb01943e576035f04c710a7f0edc8b6b9fa11325643d35193c9bb5a17c6e670ed0fc8be003c9fd769c1fe0480b10d7533cf3aeac0d2a157459a06af57d1ae20fb373f430f41c37cb0fb6745bb61f771e18a661dd58d9932eb543b0fb90dafbf495f1568e77a03864b66bfcd91918ceb9c28a1011fa5a3521ecb2042bd98955827a61480cf285739a6b5451a5a7e8d79b883e2782591dfe7817adb263d64bfc7375e68fdcf931661e39a48632335a659eb9daa52907a92dc55225767e2541ffc463faf51d612d874a01fe284b900dfc3ae07a718985e73a96ed4a67b31c6b0605afd89c2d306fac76c44f381bf9dba32f6ea259d1d51b02987b9e1bd3f39730976f1ddee002cb5d30ba518f5209d473fc8182e71a9531c1fec4a5caddef4734d49a16380f8a375c7cd4bced3999cb43da0b8d87ad5ab9f2d39fb4fc761ecfaaa9c0520a57f3c5fe25fea7df7bba7640f0aeb5e5901bee7f69b10a5485dc57ffa9c5328346a282cad3576d6b815e012865edfd25660ca63f7b67f029e31b8e601640983b5cdbb62616b9285f8054982a56ac5618c321b87234b66b10f827e6a1d3094093b75f73dff52cbe4b86e49f19266416804defe3d5488d5d7a1ec2f0276c57944c8064b1243df01c50f3225e87b7cf474becea28f905dd298e793fee5b996b86395c2cec08a1d85df43d855784502797e9de7d8f2fcd", 0x960}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r6, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.122569112s ago: executing program 7 (id=1731): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r0], 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x88, 0x30, 0x51b, 0x0, 0x0, {}, [{0x74, 0x1, [@m_skbmod={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="5a1a10145bee"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6, {0x3}}}}, @m_ct={0x2c, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x88}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001800010000000000ffdbdf25020000040004fd0500000000060015000400000018001680140003"], 0x3c}}, 0x4010) recvfrom$packet(r1, 0x0, 0x0, 0x10122, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.055471807s ago: executing program 7 (id=1733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0xad2b}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x4, 0x1}]}, {0x0, [0x2e, 0x2e, 0x2e]}}, 0x0, 0x31}, 0x28) 1.768469474s ago: executing program 5 (id=1734): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000000)=0x90) getsockname$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @multicast2}, &(0x7f0000000340)=0x10) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.654245825s ago: executing program 7 (id=1735): r0 = socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0, 0x41}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r2 = accept4$rose(r1, 0x0, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e00)={'wg1\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000300)=0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x100010, 0xffffffffffffffff, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x20) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x9}, 0x14) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1.654020085s ago: executing program 5 (id=1736): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/224, 0x11d}, {&(0x7f0000000600)=""/244, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xd}], 0x9, 0x4022, 0x0) 1.541250601s ago: executing program 2 (id=1738): r0 = socket(0x2a, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x6, 0x6, 0x50570}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x9, '\x00', r5, 0xffffffffffffffff, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r4, 0x20}, 0x38) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x100000]}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000009d43e07050002000000000085000000000000005e100000010000000500feff0800000095"], &(0x7f00000003c0)='GPL\x00', 0x5}, 0x94) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd2a, 0x25dfdbfe, {0xa, 0x8, 0x82}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x20}}, 0x4) socket(0x2a, 0x2, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x6, 0x6, 0x50570}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x9, '\x00', r5, 0xffffffffffffffff, 0x4, 0x3}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r4, 0x20}, 0x38) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x100000]}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000009d43e07050002000000000085000000000000005e100000010000000500feff0800000095"], &(0x7f00000003c0)='GPL\x00', 0x5}, 0x94) (async) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, 0x0, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd2a, 0x25dfdbfe, {0xa, 0x8, 0x82}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x20}}, 0x4) (async) 1.398641824s ago: executing program 5 (id=1740): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x20000b, 0x5, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b4020000ffc3000008001b"], 0x28}}, 0x0) 1.274682432s ago: executing program 2 (id=1741): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (fail_nth: 38) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d02dc24c9b900000018000000000000"], 0x38}, 0x200048d0) 1.27424516s ago: executing program 6 (id=1742): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000a000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.124128578s ago: executing program 6 (id=1743): socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r1, 0x25, 0x2, @void}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x80000000000000, 0x0, 0x20000040}, 0x0) 788.759973ms ago: executing program 4 (id=1744): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',', @ANYRES16=0x0], 0x1c}}, 0x20040050) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x80, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {0x0, 0x2000000}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x1, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2000) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000140)={'netdevsim0\x00', {0x2, 0x0, @loopback}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000480)=[{&(0x7f0000000240)="998e24c95c402375b5281f895bdebb9304000000af000000000000000000000000bc814c62585c1f72644789ee247d7ef4d1ff7c84d693dc06ce5d1e412ca7ce03e78f", 0x43}, {&(0x7f0000000780)="752b64e2b164b6a57830f2fda290f754347dbc27ae378276d56399634200401315ba5cb8482f9ced868a4c07763cb560906b5b4f520a5c96f79e49c1fe042280bdaf11021458492951f99e5c50714459bd5332eea7b1ea6ff7f209340cac76f81219254f513152e215c15287175e044e80ba8d5d1bbc2b0a894cc735bb5fbf867ea71e79212f5d3657fd311f04b3e0b629f014a1e762b564bfca99d06821d50be5ebd8ccf56d956950dfee62687f020d84ec33f853fa73a6333fb683c0d797f7fa20a0175fd22b27839a480a9c9f24514535", 0xd2}, {&(0x7f0000001240)="cb84fcdc138fe0888aad400116bc9ecfc9e6c837f5c315903f660bb8fe783ea457fe3f320939922c82c8f09a5c7bf593a70e49536fa4088323a95e545d55523ea06b18f5f048a224227d83c871311300842e4a407c526a0dd9bb389640485226e681c502f333e4005cc505cb0374c234a225b527eb527695100013b109d6fe1248f8b2be205ec2655151ea5a4e2d8a8e5ca3c1703fa9036f2e66ea21d0a6f0eb339edb5972a6d958b9a099f431aef63c9fcb93c86d6ae3f9a670ad578443af0ca57310a22835900b1e408a09f82225959ad6cf9e81e6ec4d795c5f3fdf9f93c1bb421c5061c6d125cb84e5f8262f6a337e88e65a59301c186ff1660c41fd1ab427da824b5e2e1b1fc03a59ae2dc18282e2cb0180b3a76ce656e8cc812dbd8ba2b659a8d6da4e7df04b5c7889ff99eec253df8266b8ae5a545665a16373c04e226b091d2c2f9e824621f698b7b915f96edd7427a03ffb81ece9d0e6f76ac13cb562a748e154e408c9775c5cb6d5a745dd2a0871d1cd8d779acc0612529e789f271653896b5e6ec84bf8aa6355b149ea14cda4b0fbeebd4c49f09e596096038e1bf9b7f2147b9c3ffb0e7728e9257227ae9a44a0f0b1bcd02a5257fdea667507b38fd1b93b7a57d9daecafa5b903fa3bc125cbc361d47b17a5cd71c7a268fc70a5502833eb5aadf1759a40911b9f9e261168dabc3d7fbffc2922fda4e9ac06e69324922acdbd0f95dbe209c2cf2d1608ffa000a777b9f4986cfeaf9cc22e30ce076e15c3547b264ea0260c6c8d59c4b585c2577107a80575008a9466142923ea33f7cd0e0bb7ad5cd8c822bb5862272ba658540fef28dcfa7516e2ffdbbb4625c4f3d9503b3020830c9929d2fdb40990069c2bdf3da46a74473082145a2e134b9cdc6a3a7b0a60b9fa63bda06ecd930c463560a7f81067f1ecf557fec1aa03888a80e59aa04491e16ec67366ca92a904134944f76e66e5a919b7470d693178980d2f5f47942396bc2cef5722015f29aaaad945f8a58df0edeadbff61ae90020d84bad88ae4c097e069f6b7cb15cff38acd48119873945d1c1fdb846261c18f8a59af44332fe45917b5c9bcf1d598a242855fb85b9738a0093c4c90604612dd22ae73b1a3cfad4900b6ac89b994e453c568dd3db3453b6774c7fc854c4b2ded8671c7dfa7d2cd792b41856f8d8c44935768bbdd28673cd3c6ccca2e2ffc557cdc5381dba06e1e44fbbbaf70912c9d3dc80790f45a04e29d06daf465abffbb3fab475f4401b98b215ac0a3a80c13f41cd59f7c5ed0f32965b4105f0520142e1bb6774f528dd69793ad13e28d0eb8d6a37266fea786da9cc57dcb3fad6bd18bce5f66ba91254c536fae217513fde2107656c316a13115219a31893202a9c079fe50c0fd62b15713563ce5943f5512f87a17da296bd378a20de0d1084f1861195e0e84853b25130fd4582b96046d87d4e93e249e5034e5ebb484690dc7a6584ba056d25619f3d5ee117bf5ecf14963404d9e48793713774ac5efcd27742b219155f8159111280df22cdc0e078da0ebea53ffef4b841d2792caa34d3f295939932a277cfbe5abe577d1afa9d58cfe5d135e7c7d5328535963b6b1fa6a4c32bf5c6b45361d5349d52a313d2ce660f305c470c46e9ed14ca9bf0122e5540abd3637df50cd6d8a6a87a1853e7c331a5d823c5ac20fcc5f42b6b29109c4f5e269c9fefb68663f4fe3b6fa20d117f411aa1fda1cd5fb9199cfcab7c8b6dfa48a6d2bf65c12322d511c3b75db949546d370775485458620a45bc1be0542313d93000016800597bfc30b1709847ba6446f1aaa0b1d7157c87da98cf9b9ed0f72a46d9f006cf66d84e6e5587ba7e174c12fc80681f54a2f184fbe81c5dbfb56f44da0da664ed25820031cd40e2b2fe585f289fb141b2241272985bc6b0f4bb8936aef627b74acaf347fb30180a9806c0930fef1dcd6af8734577de386800dfb3935d2103a360cef2ef6f801a3636d5e8323e1171322d42373d199843c9ff83ab233ac20f24be28c4d46a31a23ea43a755e19701ca8e480cab95f2a75b675108ab6217b3ff19ad44ea6dcd61faae4db934860e0607c703f85b9954c65401fac67ca010655e8664354093535bec12885a88b09e6248ccfb8f91fe4445a12aecf49a67e89f920afd95d9ad7af2556c1825be4b4bd6a489e6043f459ea8dd874fbb54b040a6796a842be8eecafdfba8db632270877e1656300d0eb5fb07f3ad3013766af04204d2b64792c9a7d2d702c190954a5f98557d29fbc3f47cbee1eefc37359d54a35922a0a87c4c3d9590c33be2bc01f2c34bb9984bff69649eb604138d34b0894a9133a906a0282c6bf50176f9ed8399135ed87f8627416d42c6923194d2af45726c0c3865349cdf8bb018ad00c8531f9773f23a2e106b6d35e4c63782d1ae1a2b2cf20b43f2567b69780b112794aabf2a117b96016c3ec73118aca8b80567466b714cfd204ca56f7ef7922ee1276fa5d5d623f403068c3d125c0ff8dc6445e6d54198996819fc86e6cadfa7200ff8ea24f95519c9f51b642d845e300e0728154ad20cef265422fc98c8ae9e44ccfed01bc34e6616c5b8b981c5b1877fed909b7dda29895e5e2af171e3884277e7e6e245c84a59d7ebed8b66", 0x754}], 0x3, 0x9001, 0x7f) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)="50dd5c7e7cf2c9073a") socket(0x10, 0x3, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000400)=0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x8, 0x0}, 0x60000121) recvfrom(r3, &(0x7f0000000780)=""/4096, 0x1000, 0x1040, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r1, 0x7, 0x100, 0x10000}) bind(r5, &(0x7f0000000300)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) 686.679585ms ago: executing program 2 (id=1745): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000180)="cf664d91f1d59dd798a58edfc3ad6a518e173627c7abe9ad787f63ab7d23213e7d2ed1519537bd5062715ddc9c41b8620892b53fdad6bca1ffe87a9dc323569afeaa41fdbaba901d00c36d166f8ddc332635506d9d977703f4983880d741e27207ec0b812a12fafbcab83751141a45c250cac70264643f0b13ded880b806a5fe3b400629e54088c54b0de338385848588fcd39216e3f9dfa", 0x98}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000008400789eedf5e508766e14aa0000000020000000012c0000840000000800000020"], 0x38, 0x4855}, 0x24000052) 646.006119ms ago: executing program 4 (id=1746): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1b0000000000000000400000", @ANYRES32, @ANYBLOB="defa48cdcaf8e1c314449e3692465fe1313ceb8eabd2e15e1e8d130e426ff715c1d1afdc756fe4d79aa1102e9e65f1d4053cf89622f1ccb678498422b439e974306e997024c10c102ae16595bfc3ae11e7a53ed3b111bfb539467597d028141939f3073b38", @ANYRES64=0x0], 0x20) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c0c3}, 0x20060000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r6) sendmsg$NFC_CMD_LLC_SDREQ(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x46900204}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x40, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_SDP={0x24, 0x13, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [{0x4}, {0x8, 0x1, 'nfc\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x8, 0x1, 'nfc\x00'}]}]}]}, 0x40}}, 0x800) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x40) 574.662162ms ago: executing program 2 (id=1747): setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x80}, 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00'}) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000000c0)=0x1b0c, 0x4) sendto$inet(r6, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0xab2}], 0x1, 0x40003012, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@newlink={0x44, 0x10, 0x401, 0xfdfffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1243}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x79}, 0x8) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x8, 0xffff}, {0xe, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000002c0)="23000000010006", 0x7) 422.370464ms ago: executing program 7 (id=1748): r0 = socket$netlink(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9d1e67f18766aeced693ebd4d3f46ca781eb2905fe08e945b2805a3f5db99747010000253cd165d5495547edb4cbd0da93148f1761b6e8", @ANYRES32=0x0, @ANYBLOB="049c01000750050008001300", @ANYRES32=0x0, @ANYBLOB="1400030076657468305f766972745f7769666900"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000380), 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0xd0, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4084}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES64=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000076657468100000000400028008000a00"/32, @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r11, 0x107, 0xb, 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRESHEX=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRESDEC=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) 420.192401ms ago: executing program 5 (id=1749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20001f00000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 373.00999ms ago: executing program 6 (id=1750): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000001800000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 306.862659ms ago: executing program 4 (id=1751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0xad2b}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x4, 0x1}]}, {0x0, [0x2e, 0x2e, 0x2e]}}, 0x0, 0x31}, 0x28) 202.576036ms ago: executing program 5 (id=1752): unshare(0x20000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c0700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117400000000008510000002000000850c00000a00000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 202.146157ms ago: executing program 6 (id=1753): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000018000000bca3000000ffffff9003000040feffff720af8ff0000000071a4f0ff000000001f030000000000002e140200000000002604fdffffff000061140400000000001d430000000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767912d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce0900000000000000499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc682928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348de20f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97b4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b4f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb1bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb36e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e8a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 157.807663ms ago: executing program 5 (id=1754): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b000500000008001700"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300), 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x40, 0x0, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc212}]}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa100}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) 139.253902ms ago: executing program 6 (id=1755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a010400f5ff0000000000020000280900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x50}, 0x0) 54.448433ms ago: executing program 7 (id=1756): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',', @ANYRES16=0x0], 0x1c}}, 0x20040050) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x80, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {0x0, 0x2000000}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x1, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2000) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000140)={'netdevsim0\x00', {0x2, 0x0, @loopback}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000480)=[{&(0x7f0000000240)="998e24c95c402375b5281f895bdebb9304000000af000000000000000000000000bc814c62585c1f72644789ee247d7ef4d1ff7c84d693dc06ce5d1e412ca7ce03e78f", 0x43}, {&(0x7f0000000780)="752b64e2b164b6a57830f2fda290f754347dbc27ae378276d56399634200401315ba5cb8482f9ced868a4c07763cb560906b5b4f520a5c96f79e49c1fe042280bdaf11021458492951f99e5c50714459bd5332eea7b1ea6ff7f209340cac76f81219254f513152e215c15287175e044e80ba8d5d1bbc2b0a894cc735bb5fbf867ea71e79212f5d3657fd311f04b3e0b629f014a1e762b564bfca99d06821d50be5ebd8ccf56d956950dfee62687f020d84ec33f853fa73a6333fb683c0d797f7fa20a0175fd22b27839a480a9c9f24514535", 0xd2}, {&(0x7f0000001240)="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", 0x754}], 0x3, 0x9001, 0x7f) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)="50dd5c7e7cf2c9073a") socket(0x10, 0x3, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000400)=0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x8, 0x0}, 0x60000121) recvfrom(r3, &(0x7f0000000780)=""/4096, 0x1000, 0x1040, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r1, 0x7, 0x100, 0x10000}) bind(r5, &(0x7f0000000300)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) 54.105457ms ago: executing program 6 (id=1757): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0xac, 0x1, 0xcc000000, 0x6, 0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000004c0)={r2, @in={{0x2, 0x4e20, @empty}}, 0x2, 0x302}, 0x90) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000098120100240012800b00010062726964676500e01300028005002c000600000005002b0002000000"], 0x44}}, 0x4000) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000580)=@ctrl_frame=@bar={{}, {0x1}, @device_b, @device_b, @compressed={{0x1, 0x0, 0x1, 0x0, 0x5}, {0x2}}}, 0x14) 0s ago: executing program 7 (id=1758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x28004000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x7f, 0x12) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4800, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, 0xffffffffffffffff, 0x8000) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x3e}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8002) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpu.idle\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000380)=0x3, 0x12) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xca24}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xd}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb90}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4004000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000c40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000580)={0x650, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x6b}}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x160, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x88, 0xe, 0x0, 0x1, [{0x66, 0x0, "0086a9bdbcfe6a33425e4d2817097981128d6aa9d9c592eb37dd9c41984b3c93e86eaec8722adfea07366602c075733da478ce0ce76cc1bd437bc3a5e411781e2d878b127502e2a7d9c5b1f36a8b6350299ed33dda13f3dda246ecb875ad3ba42cac"}, {0x19, 0x0, "63b98435c2b90ba27813a457b04f17d0b03ae8f15d"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "54c71bf4df68"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xd2}, @NL80211_NAN_FUNC_SRF={0x84, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x3c, 0xe, 0x0, 0x1, [{0x14, 0x0, "fc1c012a639ec3343403e2c6ffd8eafb"}, {0x23, 0x0, "e77f429a68b370431517858aad40ade0cc7c2d7f32ee5c3476e512a240bb51"}]}]}, @NL80211_ATTR_NAN_FUNC={0x4ac, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x274, 0xe, 0x0, 0x1, [{0x4d, 0x0, "e4e2e89f761448af89a26e883112a6ed685def56c4b6c0cd2de8139e30554b21ead1afae2f943bd027179ef3df38031303064816c0a1fb55dbca91c20d6ecf55b7f6d0f0299ce9a123"}, {0x8f, 0x0, "f08029a2147f7d20aec36f13c74b052afa6643942b89111f6b1937df595d153683ad9e73b7bd33d6148b8f3124f9fa53eef55d3ccf1a376bb0cc4ef47e0ad7087e451944c841c5f825e452e38ad2af15e43ab969cee80a10873883e925e218118200bb8016fba22b6302d05f909533ccf6c955c271a03747446933bf220fb89ae878d888be10a8fdb9e22f"}, {0xe8, 0x0, "893e9caa297d155b2789e52a90c218d24d7aa44f6a6e45979987fcbf460d8ed2fd2a17957388b92e9ffb53b42068a0d4db44c9a491056efc46aa0c83f4ae9f19d67ef9ab42224b363f37c83bafb798b8e1ae8eb6386a112f1be48de31509272296503c1a0fc197d22e66ffb49023ad444b6c9650410d83120b976996b23dd86dc25782e91788bd21997dd0567f880849a5be0c28a6a3a73ea7f62bade13b04eefc34a009ff1b0d5c74e7c8694518d69d9adbadd3ea0bbf63178cf3ef33936d918db407d34f6bbad89c7c95a1fa5b82e9fed698bbc9c8a48284e94b581479aa33056269f4"}, {0xa5, 0x0, "dc48ebadf2fadf4d786506ee0855f8d31748ec2b4698258bc75c68b7e0db7f15023f924dba16abc3b4ee2ca053f2f4d9b7545483460ba6614279ff629c9aa6bd7dfa7b2cd87f9fcf1a2b42f8114bed63a3dd19b4f9539c6ffdb5b1c37885b097af5d7cc709c524a484bfa68b0e9e79b67226256f259dab5a216ae026b5262aa2698f5dfde329790de1d7f324bfb9ebcd607956674cf17a8e2f4f7eefb821ccc195"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SRF={0x210, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_SRF={0x10, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_INCLUDE={0x4}]}]}]}, 0x650}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000000d00)={0x4, &(0x7f0000000cc0)=[{0x2, 0x6, 0x8, 0x6}, {0x7, 0x2, 0x5, 0x5}, {0x4f70, 0x4, 0x6, 0x7}, {0x6, 0x80, 0xff, 0xfffffbff}]}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d40)='./cgroup.net/syz0\x00', 0x200002, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x9c, r9, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x18}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6674a8d3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4044}, 0x4000010) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x48, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xe}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_ALGID={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000001080)={0x0, @aes128}) ioctl$FICLONE(r7, 0x40049409, r7) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r8) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000001100)={{0x4, @local, 0x4e24, 0x2, 'fo\x00', 0x2, 0x2, 0x22}, {@private=0xa010100, 0x4e23, 0x3, 0x2, 0x0, 0x800}}, 0x44) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x400080, 0x0) ioctl$TUNGETFILTER(r10, 0x801054db, &(0x7f00000011c0)=""/227) socket$nl_xfrm(0x10, 0x3, 0x6) r11 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000012c0), 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000001300)={0x40, 0x0, 0x1}, 0x10) kernel console output (not intermixed with test programs): ache_noprof+0x70/0x3d0 [ 171.856771][ T9542] ? ctnetlink_alloc_filter+0xb2/0xb20 [ 171.856797][ T9542] ctnetlink_alloc_filter+0xb2/0xb20 [ 171.856818][ T9542] ? rcu_is_watching+0x15/0xb0 [ 171.856835][ T9542] ? __pfx_ctnetlink_alloc_filter+0x10/0x10 [ 171.856855][ T9542] ? trace_contention_end+0x39/0x120 [ 171.856874][ T9542] ? __mutex_lock+0x335/0x1350 [ 171.856892][ T9542] ? __schedule+0x17ae/0x4cc0 [ 171.856917][ T9542] ctnetlink_del_conntrack+0x6c4/0x8e0 [ 171.856942][ T9542] ? __pfx_ctnetlink_del_conntrack+0x10/0x10 [ 171.856990][ T9542] nfnetlink_rcv_msg+0xb4a/0x1130 [ 171.857008][ T9542] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 171.857044][ T9542] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 171.857096][ T9542] ? is_bpf_text_address+0x26/0x2b0 [ 171.857149][ T9542] netlink_rcv_skb+0x208/0x470 [ 171.857170][ T9542] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 171.857190][ T9542] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.857223][ T9542] ? bpf_lsm_capable+0x9/0x20 [ 171.857242][ T9542] ? security_capable+0x7e/0x2e0 [ 171.857274][ T9542] nfnetlink_rcv+0x26a/0x2520 [ 171.857291][ T9542] ? is_bpf_text_address+0x26/0x2b0 [ 171.857317][ T9542] ? kernel_text_address+0xa5/0xe0 [ 171.857339][ T9542] ? __kernel_text_address+0xd/0x40 [ 171.857359][ T9542] ? unwind_get_return_address+0x4d/0x90 [ 171.857378][ T9542] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 171.857397][ T9542] ? arch_stack_walk+0xfc/0x150 [ 171.857433][ T9542] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 171.857453][ T9542] ? __lock_acquire+0xab9/0xd20 [ 171.857479][ T9542] ? __lock_acquire+0xab9/0xd20 [ 171.857527][ T9542] ? __lock_acquire+0xab9/0xd20 [ 171.857560][ T9542] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.857586][ T9542] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.857613][ T9542] netlink_unicast+0x82f/0x9e0 [ 171.857640][ T9542] ? __pfx_netlink_unicast+0x10/0x10 [ 171.857660][ T9542] ? netlink_sendmsg+0x642/0xb30 [ 171.857686][ T9542] netlink_sendmsg+0x805/0xb30 [ 171.857714][ T9542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.857737][ T9542] ? __lock_acquire+0xab9/0xd20 [ 171.857756][ T9542] ? aa_sock_msg_perm+0xf1/0x1d0 [ 171.857776][ T9542] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 171.857793][ T9542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.857813][ T9542] __sock_sendmsg+0x21c/0x270 [ 171.857835][ T9542] ____sys_sendmsg+0x505/0x830 [ 171.857862][ T9542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.857893][ T9542] ? import_iovec+0x74/0xa0 [ 171.857919][ T9542] ___sys_sendmsg+0x21f/0x2a0 [ 171.857943][ T9542] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.858003][ T9542] ? __fget_files+0x2a/0x420 [ 171.858018][ T9542] ? __fget_files+0x3a0/0x420 [ 171.858045][ T9542] __x64_sys_sendmsg+0x19b/0x260 [ 171.858070][ T9542] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.858102][ T9542] ? __pfx_ksys_write+0x10/0x10 [ 171.858120][ T9542] ? rcu_is_watching+0x15/0xb0 [ 171.858149][ T9542] ? do_syscall_64+0xbe/0x3b0 [ 171.858172][ T9542] do_syscall_64+0xfa/0x3b0 [ 171.858189][ T9542] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.858206][ T9542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.858223][ T9542] ? clear_bhb_loop+0x60/0xb0 [ 171.858244][ T9542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.858261][ T9542] RIP: 0033:0x7f9963b8eec9 [ 171.858277][ T9542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.858291][ T9542] RSP: 002b:00007f9964b07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.858309][ T9542] RAX: ffffffffffffffda RBX: 00007f9963de5fa0 RCX: 00007f9963b8eec9 [ 171.858322][ T9542] RDX: 00000000000000c0 RSI: 0000200000000380 RDI: 0000000000000009 [ 171.858333][ T9542] RBP: 00007f9964b07090 R08: 0000000000000000 R09: 0000000000000000 [ 171.858344][ T9542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.858355][ T9542] R13: 00007f9963de6038 R14: 00007f9963de5fa0 R15: 00007ffc951aa598 [ 171.858387][ T9542] [ 172.329250][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1156'. [ 172.607421][ T9557] vlan2: entered promiscuous mode [ 172.613121][ T9557] bond0: entered promiscuous mode [ 172.639090][ T9557] bond_slave_0: entered promiscuous mode [ 172.662874][ T9557] bond_slave_1: entered promiscuous mode [ 172.865815][ T9573] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 172.920538][ T9576] bridge_slave_0: left promiscuous mode [ 172.931291][ T9576] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.947004][ T9576] bridge_slave_1: left promiscuous mode [ 172.957237][ T9576] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.973885][ T9581] FAULT_INJECTION: forcing a failure. [ 172.973885][ T9581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.992138][ T9576] bond0: (slave bond_slave_0): Releasing backup interface [ 173.010912][ T9576] bond_slave_0: left promiscuous mode [ 173.020382][ T9581] CPU: 1 UID: 0 PID: 9581 Comm: syz.2.1172 Not tainted syzkaller #0 PREEMPT(full) [ 173.020407][ T9581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 173.020418][ T9581] Call Trace: [ 173.020425][ T9581] [ 173.020433][ T9581] dump_stack_lvl+0x189/0x250 [ 173.020456][ T9581] ? __pfx____ratelimit+0x10/0x10 [ 173.020475][ T9581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.020494][ T9581] ? __pfx__printk+0x10/0x10 [ 173.020528][ T9581] should_fail_ex+0x414/0x560 [ 173.020557][ T9581] _copy_to_user+0x31/0xb0 [ 173.020581][ T9581] bpf_test_finish+0x24e/0x700 [ 173.020607][ T9581] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 173.020628][ T9581] ? __pfx_bpf_test_finish+0x10/0x10 [ 173.020653][ T9581] ? bpf_test_init+0x133/0x170 [ 173.020674][ T9581] bpf_prog_test_run_xdp+0x79a/0x1000 [ 173.020711][ T9581] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 173.020735][ T9581] ? __fget_files+0x2a/0x420 [ 173.020757][ T9581] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 173.020786][ T9581] bpf_prog_test_run+0x2c7/0x340 [ 173.020813][ T9581] __sys_bpf+0x581/0x870 [ 173.020835][ T9581] ? __pfx___sys_bpf+0x10/0x10 [ 173.020870][ T9581] ? ksys_write+0x22a/0x250 [ 173.020894][ T9581] ? __pfx_ksys_write+0x10/0x10 [ 173.020911][ T9581] ? rcu_is_watching+0x15/0xb0 [ 173.020936][ T9581] __x64_sys_bpf+0x7c/0x90 [ 173.020957][ T9581] do_syscall_64+0xfa/0x3b0 [ 173.020974][ T9581] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.020991][ T9581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.021008][ T9581] ? clear_bhb_loop+0x60/0xb0 [ 173.021028][ T9581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.021044][ T9581] RIP: 0033:0x7fb60fd8eec9 [ 173.021059][ T9581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.021074][ T9581] RSP: 002b:00007fb610cfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.021093][ T9581] RAX: ffffffffffffffda RBX: 00007fb60ffe5fa0 RCX: 00007fb60fd8eec9 [ 173.021106][ T9581] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 173.021117][ T9581] RBP: 00007fb610cfc090 R08: 0000000000000000 R09: 0000000000000000 [ 173.021128][ T9581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.021138][ T9581] R13: 00007fb60ffe6038 R14: 00007fb60ffe5fa0 R15: 00007fff3a570758 [ 173.021168][ T9581] [ 173.259909][ T9576] bond0: (slave bond_slave_1): Releasing backup interface [ 173.268144][ T9576] bond_slave_1: left promiscuous mode [ 173.277759][ T9576] team0: Port device team_slave_0 removed [ 173.290316][ T9576] team0: Port device team_slave_1 removed [ 173.301179][ T9576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.317716][ T9576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.341350][ T9576] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 173.549810][ T9597] dvmrp8: entered allmulticast mode [ 173.667314][ T9606] FAULT_INJECTION: forcing a failure. [ 173.667314][ T9606] name failslab, interval 1, probability 0, space 0, times 0 [ 173.690623][ T9606] CPU: 0 UID: 0 PID: 9606 Comm: syz.4.1182 Not tainted syzkaller #0 PREEMPT(full) [ 173.690647][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 173.690658][ T9606] Call Trace: [ 173.690665][ T9606] [ 173.690672][ T9606] dump_stack_lvl+0x189/0x250 [ 173.690697][ T9606] ? __pfx____ratelimit+0x10/0x10 [ 173.690715][ T9606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.690735][ T9606] ? __pfx__printk+0x10/0x10 [ 173.690761][ T9606] ? __pfx___might_resched+0x10/0x10 [ 173.690778][ T9606] ? fs_reclaim_acquire+0x7d/0x100 [ 173.690800][ T9606] should_fail_ex+0x414/0x560 [ 173.690828][ T9606] should_failslab+0xa8/0x100 [ 173.690851][ T9606] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 173.690873][ T9606] ? __alloc_skb+0x112/0x2d0 [ 173.690904][ T9606] __alloc_skb+0x112/0x2d0 [ 173.690927][ T9606] netlink_ack+0x146/0xa50 [ 173.690946][ T9606] ? is_bpf_text_address+0x26/0x2b0 [ 173.690985][ T9606] netlink_rcv_skb+0x28c/0x470 [ 173.691013][ T9606] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 173.691033][ T9606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 173.691064][ T9606] ? bpf_lsm_capable+0x9/0x20 [ 173.691083][ T9606] ? security_capable+0x7e/0x2e0 [ 173.691114][ T9606] nfnetlink_rcv+0x26a/0x2520 [ 173.691132][ T9606] ? is_bpf_text_address+0x26/0x2b0 [ 173.691162][ T9606] ? kernel_text_address+0xa5/0xe0 [ 173.691185][ T9606] ? __kernel_text_address+0xd/0x40 [ 173.691206][ T9606] ? unwind_get_return_address+0x4d/0x90 [ 173.691224][ T9606] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 173.691244][ T9606] ? arch_stack_walk+0xfc/0x150 [ 173.691279][ T9606] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 173.691299][ T9606] ? __lock_acquire+0xab9/0xd20 [ 173.691324][ T9606] ? __lock_acquire+0xab9/0xd20 [ 173.691372][ T9606] ? __lock_acquire+0xab9/0xd20 [ 173.691404][ T9606] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.691431][ T9606] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.691458][ T9606] netlink_unicast+0x82f/0x9e0 [ 173.691485][ T9606] ? __pfx_netlink_unicast+0x10/0x10 [ 173.691505][ T9606] ? netlink_sendmsg+0x642/0xb30 [ 173.691529][ T9606] netlink_sendmsg+0x805/0xb30 [ 173.691558][ T9606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.691580][ T9606] ? __lock_acquire+0xab9/0xd20 [ 173.691600][ T9606] ? aa_sock_msg_perm+0xf1/0x1d0 [ 173.691618][ T9606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.691636][ T9606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.691656][ T9606] __sock_sendmsg+0x21c/0x270 [ 173.691676][ T9606] ____sys_sendmsg+0x505/0x830 [ 173.691704][ T9606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.691735][ T9606] ? import_iovec+0x74/0xa0 [ 173.691758][ T9606] ___sys_sendmsg+0x21f/0x2a0 [ 173.691782][ T9606] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.691840][ T9606] ? __fget_files+0x2a/0x420 [ 173.691855][ T9606] ? __fget_files+0x3a0/0x420 [ 173.691882][ T9606] __x64_sys_sendmsg+0x19b/0x260 [ 173.691907][ T9606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.691937][ T9606] ? __pfx_ksys_write+0x10/0x10 [ 173.691955][ T9606] ? rcu_is_watching+0x15/0xb0 [ 173.691977][ T9606] ? do_syscall_64+0xbe/0x3b0 [ 173.692006][ T9606] do_syscall_64+0xfa/0x3b0 [ 173.692023][ T9606] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.692041][ T9606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.692058][ T9606] ? clear_bhb_loop+0x60/0xb0 [ 173.692078][ T9606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.692095][ T9606] RIP: 0033:0x7f354658eec9 [ 173.692111][ T9606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.692126][ T9606] RSP: 002b:00007f3547489038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.692145][ T9606] RAX: ffffffffffffffda RBX: 00007f35467e5fa0 RCX: 00007f354658eec9 [ 173.692158][ T9606] RDX: 00000000000000c0 RSI: 0000200000000380 RDI: 0000000000000009 [ 173.692169][ T9606] RBP: 00007f3547489090 R08: 0000000000000000 R09: 0000000000000000 [ 173.692179][ T9606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.692189][ T9606] R13: 00007f35467e6038 R14: 00007f35467e5fa0 R15: 00007ffcfdcc1608 [ 173.692219][ T9606] [ 174.147869][ T9615] netlink: 'syz.5.1184': attribute type 8 has an invalid length. [ 174.316744][ T9596] dvmrp8: left allmulticast mode [ 174.375625][ T9630] vlan3: entered promiscuous mode [ 174.380869][ T9630] bond0: entered promiscuous mode [ 174.386103][ T9630] bond_slave_0: entered promiscuous mode [ 174.392036][ T9630] bond_slave_1: entered promiscuous mode [ 174.582199][ T9636] tipc: Enabled bearer , priority 0 [ 174.589952][ T9632] syzkaller0: entered promiscuous mode [ 174.597178][ T9632] syzkaller0: entered allmulticast mode [ 174.606477][ T9648] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1196'. [ 174.636366][ T9642] syzkaller0: entered promiscuous mode [ 174.655086][ T9642] syzkaller0: entered allmulticast mode [ 174.665708][ T9632] tipc: Resetting bearer [ 174.704967][ T9631] tipc: Resetting bearer [ 174.748607][ T9631] tipc: Disabling bearer [ 174.972863][ T9661] tipc: Enabled bearer , priority 0 [ 175.018159][ T9661] syzkaller0: entered promiscuous mode [ 175.028398][ T9661] syzkaller0: entered allmulticast mode [ 175.067974][ T9661] syzkaller0: mtu greater than device maximum [ 175.077463][ T9661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1199'. [ 175.153622][ T9661] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1199'. [ 175.165006][ T9659] tipc: Resetting bearer [ 175.213177][ T9659] tipc: Disabling bearer [ 175.354650][ T9673] vlan2: entered allmulticast mode [ 175.528153][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1203'. [ 175.859051][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1206'. [ 176.032002][ T9704] netlink: 'syz.4.1209': attribute type 13 has an invalid length. [ 176.072477][ T9704] netlink: 'syz.4.1209': attribute type 17 has an invalid length. [ 176.115174][ T9704] lo: left allmulticast mode [ 176.133166][ T9704] tunl0: left allmulticast mode [ 176.160399][ T9704] gre0: left allmulticast mode [ 176.189165][ T9704] gretap0: left allmulticast mode [ 176.217737][ T9708] netlink: 'syz.6.1210': attribute type 4 has an invalid length. [ 176.226473][ T9704] gretap0: refused to change device tx_queue_len [ 176.233897][ T9704] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 176.489005][ T9724] FAULT_INJECTION: forcing a failure. [ 176.489005][ T9724] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 176.516261][ T9724] CPU: 1 UID: 0 PID: 9724 Comm: syz.4.1212 Not tainted syzkaller #0 PREEMPT(full) [ 176.516285][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 176.516296][ T9724] Call Trace: [ 176.516303][ T9724] [ 176.516311][ T9724] dump_stack_lvl+0x189/0x250 [ 176.516334][ T9724] ? __pfx____ratelimit+0x10/0x10 [ 176.516353][ T9724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.516371][ T9724] ? __pfx__printk+0x10/0x10 [ 176.516393][ T9724] ? fs_reclaim_acquire+0x7d/0x100 [ 176.516417][ T9724] should_fail_ex+0x414/0x560 [ 176.516444][ T9724] prepare_alloc_pages+0x213/0x610 [ 176.516467][ T9724] __alloc_frozen_pages_noprof+0x123/0x370 [ 176.516488][ T9724] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 176.516515][ T9724] ? policy_nodemask+0x27c/0x720 [ 176.516535][ T9724] ? __lock_acquire+0xab9/0xd20 [ 176.516572][ T9724] alloc_pages_mpol+0x232/0x4a0 [ 176.516601][ T9724] vma_alloc_folio_noprof+0xe4/0x200 [ 176.516627][ T9724] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 176.516663][ T9724] folio_prealloc+0x30/0x180 [ 176.516688][ T9724] __handle_mm_fault+0x2ab9/0x5440 [ 176.516727][ T9724] ? __pfx___handle_mm_fault+0x10/0x10 [ 176.516771][ T9724] ? find_vma+0xe7/0x160 [ 176.516790][ T9724] ? __pfx_find_vma+0x10/0x10 [ 176.516813][ T9724] handle_mm_fault+0x40a/0x8e0 [ 176.516845][ T9724] do_user_addr_fault+0x764/0x1390 [ 176.516885][ T9724] exc_page_fault+0x76/0xf0 [ 176.516906][ T9724] asm_exc_page_fault+0x26/0x30 [ 176.516921][ T9724] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 176.516944][ T9724] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 176.516958][ T9724] RSP: 0018:ffffc90003e3f4d8 EFLAGS: 00050202 [ 176.516975][ T9724] RAX: ffff888021ef2001 RBX: ffff888021ef21d2 RCX: 0000000000000cc6 [ 176.516988][ T9724] RDX: 0000000000000000 RSI: ffff888021ef21d2 RDI: 00002000000018c0 [ 176.517000][ T9724] RBP: ffffc90003e3f650 R08: ffff888021ef2e97 R09: 1ffff110043de5d2 [ 176.517013][ T9724] R10: dffffc0000000000 R11: ffffed10043de5d3 R12: dffffc0000000000 [ 176.517026][ T9724] R13: 0000000000000cc6 R14: 00007ffffffff000 R15: 0000200000002586 [ 176.517058][ T9724] _copy_to_iter+0x60a/0x1790 [ 176.517094][ T9724] ? __pfx__copy_to_iter+0x10/0x10 [ 176.517111][ T9724] ? __skb_try_recv_from_queue+0x58f/0x730 [ 176.517141][ T9724] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 176.517170][ T9724] __skb_datagram_iter+0xf8/0x990 [ 176.517195][ T9724] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 176.517227][ T9724] skb_copy_datagram_iter+0xc5/0x230 [ 176.517254][ T9724] netlink_recvmsg+0x2ab/0xa30 [ 176.517289][ T9724] ? __pfx_netlink_recvmsg+0x10/0x10 [ 176.517313][ T9724] ? __lock_acquire+0xab9/0xd20 [ 176.517333][ T9724] ? aa_sock_msg_perm+0xf1/0x1d0 [ 176.517353][ T9724] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 176.517372][ T9724] ? __pfx_netlink_recvmsg+0x10/0x10 [ 176.517392][ T9724] sock_recvmsg_nosec+0x183/0x1c0 [ 176.517414][ T9724] ____sys_recvmsg+0x3aa/0x460 [ 176.517446][ T9724] ? __pfx_____sys_recvmsg+0x10/0x10 [ 176.517485][ T9724] ? import_iovec+0x74/0xa0 [ 176.517510][ T9724] ___sys_recvmsg+0x1b5/0x510 [ 176.517538][ T9724] ? __pfx____sys_recvmsg+0x10/0x10 [ 176.517600][ T9724] ? __might_fault+0xb0/0x130 [ 176.517626][ T9724] do_recvmmsg+0x307/0x770 [ 176.517658][ T9724] ? __pfx_do_recvmmsg+0x10/0x10 [ 176.517694][ T9724] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 176.517733][ T9724] __x64_sys_recvmmsg+0x190/0x240 [ 176.517758][ T9724] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 176.517786][ T9724] ? do_syscall_64+0xbe/0x3b0 [ 176.517809][ T9724] do_syscall_64+0xfa/0x3b0 [ 176.517825][ T9724] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.517842][ T9724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.517858][ T9724] ? clear_bhb_loop+0x60/0xb0 [ 176.517879][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.517895][ T9724] RIP: 0033:0x7f354658eec9 [ 176.517910][ T9724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.517924][ T9724] RSP: 002b:00007f3547468038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 176.517942][ T9724] RAX: ffffffffffffffda RBX: 00007f35467e6090 RCX: 00007f354658eec9 [ 176.517954][ T9724] RDX: 0000000000000009 RSI: 0000200000006880 RDI: 0000000000000003 [ 176.517965][ T9724] RBP: 00007f3547468090 R08: 0000000000000000 R09: 0000000000000000 [ 176.517976][ T9724] R10: 0000000000004022 R11: 0000000000000246 R12: 0000000000000002 [ 176.517986][ T9724] R13: 00007f35467e6128 R14: 00007f35467e6090 R15: 00007ffcfdcc1608 [ 176.518018][ T9724] [ 177.261477][ T9736] macsec1: entered allmulticast mode [ 177.303587][ T9739] tipc: Enabled bearer , priority 0 [ 177.311861][ T9739] syzkaller0: entered promiscuous mode [ 177.318848][ T9739] syzkaller0: entered allmulticast mode [ 177.350637][ T9739] tipc: Resetting bearer [ 177.366341][ T9738] tipc: Resetting bearer [ 177.384374][ T9738] tipc: Disabling bearer [ 177.621215][ T9746] tipc: Enabled bearer , priority 0 [ 177.639778][ T9746] syzkaller0: entered promiscuous mode [ 177.648836][ T9746] syzkaller0: entered allmulticast mode [ 177.686332][ T9746] tipc: Resetting bearer [ 177.728073][ T9745] tipc: Resetting bearer [ 177.764456][ T9745] tipc: Disabling bearer [ 178.397536][ T9766] syzkaller0: entered promiscuous mode [ 178.403336][ T9766] syzkaller0: entered allmulticast mode [ 178.616678][ T9770] FAULT_INJECTION: forcing a failure. [ 178.616678][ T9770] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 178.648285][ T9770] CPU: 1 UID: 0 PID: 9770 Comm: syz.7.1230 Not tainted syzkaller #0 PREEMPT(full) [ 178.648311][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.648321][ T9770] Call Trace: [ 178.648328][ T9770] [ 178.648336][ T9770] dump_stack_lvl+0x189/0x250 [ 178.648361][ T9770] ? __pfx____ratelimit+0x10/0x10 [ 178.648381][ T9770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.648401][ T9770] ? __pfx__printk+0x10/0x10 [ 178.648425][ T9770] ? fs_reclaim_acquire+0x7d/0x100 [ 178.648449][ T9770] should_fail_ex+0x414/0x560 [ 178.648478][ T9770] prepare_alloc_pages+0x213/0x610 [ 178.648504][ T9770] __alloc_frozen_pages_noprof+0x123/0x370 [ 178.648527][ T9770] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 178.648556][ T9770] ? policy_nodemask+0x27c/0x720 [ 178.648576][ T9770] ? __lock_acquire+0xab9/0xd20 [ 178.648603][ T9770] alloc_pages_mpol+0x232/0x4a0 [ 178.648626][ T9770] vma_alloc_folio_noprof+0xe4/0x200 [ 178.648650][ T9770] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 178.648686][ T9770] folio_prealloc+0x30/0x180 [ 178.648714][ T9770] __handle_mm_fault+0x2ab9/0x5440 [ 178.648759][ T9770] ? __pfx___handle_mm_fault+0x10/0x10 [ 178.648802][ T9770] ? find_vma+0xe7/0x160 [ 178.648822][ T9770] ? __pfx_find_vma+0x10/0x10 [ 178.648845][ T9770] handle_mm_fault+0x40a/0x8e0 [ 178.648877][ T9770] do_user_addr_fault+0x764/0x1390 [ 178.648920][ T9770] exc_page_fault+0x76/0xf0 [ 178.648941][ T9770] asm_exc_page_fault+0x26/0x30 [ 178.648957][ T9770] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 178.648979][ T9770] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 178.648993][ T9770] RSP: 0018:ffffc90003bff4d8 EFLAGS: 00050202 [ 178.649010][ T9770] RAX: ffff888031a8c001 RBX: ffff888031a8c1d2 RCX: 000000000000058a [ 178.649023][ T9770] RDX: 0000000000000000 RSI: ffff888031a8c912 RDI: 0000200000002000 [ 178.649035][ T9770] RBP: ffffc90003bff650 R08: ffff888031a8ce9b R09: 1ffff110063519d3 [ 178.649048][ T9770] R10: dffffc0000000000 R11: ffffed10063519d4 R12: dffffc0000000000 [ 178.649060][ T9770] R13: 0000000000000cca R14: 00007ffffffff000 R15: 000020000000258a [ 178.649092][ T9770] _copy_to_iter+0x60a/0x1790 [ 178.649128][ T9770] ? __pfx__copy_to_iter+0x10/0x10 [ 178.649145][ T9770] ? __skb_try_recv_from_queue+0x58f/0x730 [ 178.649175][ T9770] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 178.649205][ T9770] __skb_datagram_iter+0xf8/0x990 [ 178.649229][ T9770] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 178.649261][ T9770] skb_copy_datagram_iter+0xc5/0x230 [ 178.649286][ T9770] netlink_recvmsg+0x2ab/0xa30 [ 178.649315][ T9770] ? __pfx_netlink_recvmsg+0x10/0x10 [ 178.649337][ T9770] ? __lock_acquire+0xab9/0xd20 [ 178.649355][ T9770] ? aa_sock_msg_perm+0xf1/0x1d0 [ 178.649374][ T9770] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 178.649392][ T9770] ? __pfx_netlink_recvmsg+0x10/0x10 [ 178.649411][ T9770] sock_recvmsg_nosec+0x183/0x1c0 [ 178.649433][ T9770] ____sys_recvmsg+0x3aa/0x460 [ 178.649461][ T9770] ? __pfx_____sys_recvmsg+0x10/0x10 [ 178.649497][ T9770] ? import_iovec+0x74/0xa0 [ 178.649520][ T9770] ___sys_recvmsg+0x1b5/0x510 [ 178.649547][ T9770] ? __pfx____sys_recvmsg+0x10/0x10 [ 178.649602][ T9770] ? __might_fault+0xb0/0x130 [ 178.649628][ T9770] do_recvmmsg+0x307/0x770 [ 178.649659][ T9770] ? __pfx_do_recvmmsg+0x10/0x10 [ 178.649695][ T9770] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 178.649740][ T9770] __x64_sys_recvmmsg+0x190/0x240 [ 178.649765][ T9770] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 178.649784][ T9770] ? rcu_is_watching+0x15/0xb0 [ 178.649807][ T9770] ? do_syscall_64+0xbe/0x3b0 [ 178.649829][ T9770] do_syscall_64+0xfa/0x3b0 [ 178.649845][ T9770] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.649862][ T9770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.649878][ T9770] ? clear_bhb_loop+0x60/0xb0 [ 178.649899][ T9770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.649915][ T9770] RIP: 0033:0x7f92f458eec9 [ 178.649931][ T9770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.649944][ T9770] RSP: 002b:00007f92f540e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 178.649962][ T9770] RAX: ffffffffffffffda RBX: 00007f92f47e5fa0 RCX: 00007f92f458eec9 [ 178.649975][ T9770] RDX: 0000000000000009 RSI: 0000200000006880 RDI: 0000000000000003 [ 178.649985][ T9770] RBP: 00007f92f540e090 R08: 0000000000000000 R09: 0000000000000000 [ 178.649996][ T9770] R10: 0000000000004022 R11: 0000000000000246 R12: 0000000000000002 [ 178.650006][ T9770] R13: 00007f92f47e6038 R14: 00007f92f47e5fa0 R15: 00007ffd9998aea8 [ 178.650037][ T9770] [ 179.226342][ T9782] netlink: 'syz.7.1235': attribute type 8 has an invalid length. [ 179.585391][ T9804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1242'. [ 180.130879][ T9823] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1247'. [ 180.241174][ T9826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.302753][ T5874] Bluetooth: hci3: command tx timeout [ 180.312342][ T9825] geneve2: entered promiscuous mode [ 180.318987][ T9825] geneve2: entered allmulticast mode [ 180.340556][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 180.359657][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 180.377412][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 180.401939][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 180.670469][ T9846] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1258'. [ 180.714748][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1257'. [ 180.813792][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1257'. [ 180.912694][ T9860] netlink: 'syz.4.1261': attribute type 13 has an invalid length. [ 180.944829][ T9860] netlink: 'syz.4.1261': attribute type 17 has an invalid length. [ 180.970076][ T9860] gretap0: refused to change device tx_queue_len [ 180.986091][ T9860] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 181.571306][ T9898] lo: left allmulticast mode [ 181.582780][ T9898] tunl0: left allmulticast mode [ 181.591747][ T9898] gre0: left allmulticast mode [ 181.613322][ T9898] gretap0: left allmulticast mode [ 181.618524][ T9898] erspan0: left allmulticast mode [ 181.654592][ T9898] ip_vti0: left allmulticast mode [ 181.675098][ T9898] ip6_vti0: left allmulticast mode [ 181.699344][ T9898] sit0: left allmulticast mode [ 181.723944][ T9898] ip6tnl0: left allmulticast mode [ 181.729152][ T9898] ip6gre0: left allmulticast mode [ 181.739535][ T9898] syz_tun: left allmulticast mode [ 181.746388][ T9898] ip6gretap0: left allmulticast mode [ 181.751839][ T9898] bridge0: left allmulticast mode [ 181.757982][ T9898] bond0: left allmulticast mode [ 181.763692][ T9898] team0: left allmulticast mode [ 181.768816][ T9898] dummy0: left allmulticast mode [ 181.774875][ T9898] nlmon0: left allmulticast mode [ 181.780361][ T9898] caif0: left allmulticast mode [ 181.786891][ T9898] batadv0: left allmulticast mode [ 181.794560][ T9898] vxcan0: left allmulticast mode [ 181.799819][ T9898] vxcan1: left allmulticast mode [ 181.805929][ T9898] veth0: left allmulticast mode [ 181.811043][ T9898] veth1: left allmulticast mode [ 181.817575][ T9898] wg0: left allmulticast mode [ 181.823141][ T9898] wg1: left allmulticast mode [ 181.828162][ T9898] wg2: left allmulticast mode [ 181.833149][ T9898] veth0_to_bridge: left allmulticast mode [ 181.839331][ T9898] veth1_to_bridge: left allmulticast mode [ 181.845850][ T9898] bridge_slave_1: left allmulticast mode [ 181.851773][ T9898] veth0_to_bond: left allmulticast mode [ 181.857664][ T9898] bond_slave_0: left allmulticast mode [ 181.863895][ T9898] veth1_to_bond: left allmulticast mode [ 181.869722][ T9898] bond_slave_1: left allmulticast mode [ 181.875608][ T9898] veth0_to_team: left allmulticast mode [ 181.881400][ T9898] team_slave_0: left allmulticast mode [ 181.887245][ T9898] veth1_to_team: left allmulticast mode [ 181.893113][ T9898] team_slave_1: left allmulticast mode [ 181.898881][ T9898] veth0_to_batadv: left allmulticast mode [ 181.904971][ T9898] batadv_slave_0: left allmulticast mode [ 181.910914][ T9898] veth1_to_batadv: left allmulticast mode [ 181.916947][ T9898] batadv_slave_1: left allmulticast mode [ 181.923004][ T9898] xfrm0: left allmulticast mode [ 181.928208][ T9898] veth0_to_hsr: left allmulticast mode [ 181.935487][ T9898] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.212517][ T9920] netlink: 'syz.4.1285': attribute type 13 has an invalid length. [ 182.230652][ T9920] netlink: 'syz.4.1285': attribute type 17 has an invalid length. [ 182.246714][ T9920] gretap0: refused to change device tx_queue_len [ 182.253760][ T9920] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 182.326900][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1284'. [ 182.551973][ T9935] FAULT_INJECTION: forcing a failure. [ 182.551973][ T9935] name failslab, interval 1, probability 0, space 0, times 0 [ 182.566176][ T9935] CPU: 0 UID: 0 PID: 9935 Comm: syz.6.1291 Not tainted syzkaller #0 PREEMPT(full) [ 182.566201][ T9935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 182.566211][ T9935] Call Trace: [ 182.566218][ T9935] [ 182.566226][ T9935] dump_stack_lvl+0x189/0x250 [ 182.566250][ T9935] ? __pfx____ratelimit+0x10/0x10 [ 182.566269][ T9935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.566289][ T9935] ? __pfx__printk+0x10/0x10 [ 182.566318][ T9935] ? __pfx___might_resched+0x10/0x10 [ 182.566334][ T9935] ? fs_reclaim_acquire+0x7d/0x100 [ 182.566355][ T9935] should_fail_ex+0x414/0x560 [ 182.566383][ T9935] should_failslab+0xa8/0x100 [ 182.566407][ T9935] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 182.566429][ T9935] ? __alloc_workqueue+0x8e8/0x1b70 [ 182.566456][ T9935] __alloc_workqueue+0x8e8/0x1b70 [ 182.566500][ T9935] alloc_workqueue_noprof+0xd4/0x210 [ 182.566521][ T9935] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 182.566543][ T9935] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 182.566561][ T9935] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 182.566593][ T9935] nci_register_device+0x220/0x9d0 [ 182.566624][ T9935] ? __pfx_nci_register_device+0x10/0x10 [ 182.566648][ T9935] ? __raw_spin_lock_init+0x45/0x100 [ 182.566670][ T9935] ? __init_waitqueue_head+0xa9/0x150 [ 182.566696][ T9935] virtual_ncidev_open+0x129/0x1a0 [ 182.566719][ T9935] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 182.566739][ T9935] misc_open+0x2b9/0x330 [ 182.566765][ T9935] chrdev_open+0x4c9/0x5e0 [ 182.566784][ T9935] ? __pfx_chrdev_open+0x10/0x10 [ 182.566811][ T9935] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 182.566840][ T9935] ? __pfx_chrdev_open+0x10/0x10 [ 182.566861][ T9935] do_dentry_open+0x950/0x13f0 [ 182.566896][ T9935] vfs_open+0x3b/0x340 [ 182.566911][ T9935] ? path_openat+0x2ecd/0x3830 [ 182.566935][ T9935] path_openat+0x2ee5/0x3830 [ 182.566953][ T9935] ? arch_stack_walk+0xfc/0x150 [ 182.566993][ T9935] ? stack_depot_save_flags+0x40/0x860 [ 182.567046][ T9935] ? __pfx_path_openat+0x10/0x10 [ 182.567063][ T9935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.567102][ T9935] do_filp_open+0x1fa/0x410 [ 182.567121][ T9935] ? __lock_acquire+0xab9/0xd20 [ 182.567145][ T9935] ? __pfx_do_filp_open+0x10/0x10 [ 182.567190][ T9935] ? _raw_spin_unlock+0x28/0x50 [ 182.567211][ T9935] ? alloc_fd+0x64c/0x6c0 [ 182.567246][ T9935] do_sys_openat2+0x121/0x1c0 [ 182.567268][ T9935] ? __pfx_do_sys_openat2+0x10/0x10 [ 182.567287][ T9935] ? ksys_write+0x22a/0x250 [ 182.567311][ T9935] ? __pfx_ksys_write+0x10/0x10 [ 182.567329][ T9935] ? rcu_is_watching+0x15/0xb0 [ 182.567351][ T9935] __x64_sys_openat+0x138/0x170 [ 182.567375][ T9935] do_syscall_64+0xfa/0x3b0 [ 182.567393][ T9935] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.567411][ T9935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.567427][ T9935] ? clear_bhb_loop+0x60/0xb0 [ 182.567449][ T9935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.567465][ T9935] RIP: 0033:0x7fe06278eec9 [ 182.567488][ T9935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.567502][ T9935] RSP: 002b:00007fe0636da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.567521][ T9935] RAX: ffffffffffffffda RBX: 00007fe0629e5fa0 RCX: 00007fe06278eec9 [ 182.567534][ T9935] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 182.567546][ T9935] RBP: 00007fe0636da090 R08: 0000000000000000 R09: 0000000000000000 [ 182.567557][ T9935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.567567][ T9935] R13: 00007fe0629e6038 R14: 00007fe0629e5fa0 R15: 00007ffef500ad28 [ 182.567598][ T9935] [ 183.147794][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1296'. [ 183.219010][ T9950] FAULT_INJECTION: forcing a failure. [ 183.219010][ T9950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.232580][ T9950] CPU: 0 UID: 0 PID: 9950 Comm: syz.7.1298 Not tainted syzkaller #0 PREEMPT(full) [ 183.232604][ T9950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.232614][ T9950] Call Trace: [ 183.232620][ T9950] [ 183.232627][ T9950] dump_stack_lvl+0x189/0x250 [ 183.232652][ T9950] ? __pfx____ratelimit+0x10/0x10 [ 183.232671][ T9950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.232690][ T9950] ? __pfx__printk+0x10/0x10 [ 183.232711][ T9950] ? __might_fault+0xb0/0x130 [ 183.232746][ T9950] should_fail_ex+0x414/0x560 [ 183.232774][ T9950] _copy_from_user+0x2d/0xb0 [ 183.232795][ T9950] ___sys_recvmsg+0x12e/0x510 [ 183.232823][ T9950] ? __pfx____sys_recvmsg+0x10/0x10 [ 183.232877][ T9950] ? __might_fault+0xb0/0x130 [ 183.232903][ T9950] do_recvmmsg+0x307/0x770 [ 183.232934][ T9950] ? __pfx_do_recvmmsg+0x10/0x10 [ 183.232969][ T9950] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.233008][ T9950] __x64_sys_recvmmsg+0x190/0x240 [ 183.233033][ T9950] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 183.233052][ T9950] ? rcu_is_watching+0x15/0xb0 [ 183.233076][ T9950] ? do_syscall_64+0xbe/0x3b0 [ 183.233098][ T9950] do_syscall_64+0xfa/0x3b0 [ 183.233114][ T9950] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.233131][ T9950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.233147][ T9950] ? clear_bhb_loop+0x60/0xb0 [ 183.233168][ T9950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.233184][ T9950] RIP: 0033:0x7f92f458eec9 [ 183.233201][ T9950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.233215][ T9950] RSP: 002b:00007f92f540e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 183.233233][ T9950] RAX: ffffffffffffffda RBX: 00007f92f47e5fa0 RCX: 00007f92f458eec9 [ 183.233246][ T9950] RDX: 0000000000000009 RSI: 0000200000006880 RDI: 0000000000000003 [ 183.233258][ T9950] RBP: 00007f92f540e090 R08: 0000000000000000 R09: 0000000000000000 [ 183.233269][ T9950] R10: 0000000000004022 R11: 0000000000000246 R12: 0000000000000002 [ 183.233280][ T9950] R13: 00007f92f47e6038 R14: 00007f92f47e5fa0 R15: 00007ffd9998aea8 [ 183.233311][ T9950] [ 183.616714][ T9955] tipc: Enabling of bearer rejected, failed to enable media [ 183.645573][ T9958] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1302'. [ 183.657214][ T9955] syzkaller0: entered promiscuous mode [ 183.669115][ T9955] syzkaller0: entered allmulticast mode [ 183.677009][ T9961] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1303'. [ 183.692347][ T9961] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1303'. [ 183.877039][ T9967] lo: entered allmulticast mode [ 183.905296][ T9967] tunl0: entered allmulticast mode [ 183.912302][ T9967] gre0: entered allmulticast mode [ 183.941133][ T9967] gretap0: entered allmulticast mode [ 183.990543][ T9967] mac80211_hwsim hwsim40 wlan4: entered allmulticast mode [ 184.275761][ T9983] netlink: 'syz.4.1312': attribute type 8 has an invalid length. [ 184.521757][ T9985] syzkaller1: entered promiscuous mode [ 184.530387][ T9985] syzkaller1: entered allmulticast mode [ 184.554921][ T9995] netlink: 'syz.5.1317': attribute type 1 has an invalid length. [ 184.627213][ T9995] bond3: entered promiscuous mode [ 184.642948][ T9995] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.999036][T10009] FAULT_INJECTION: forcing a failure. [ 184.999036][T10009] name failslab, interval 1, probability 0, space 0, times 0 [ 185.056400][T10009] CPU: 0 UID: 0 PID: 10009 Comm: syz.4.1323 Not tainted syzkaller #0 PREEMPT(full) [ 185.056425][T10009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 185.056435][T10009] Call Trace: [ 185.056442][T10009] [ 185.056450][T10009] dump_stack_lvl+0x189/0x250 [ 185.056473][T10009] ? __pfx____ratelimit+0x10/0x10 [ 185.056491][T10009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.056508][T10009] ? __pfx__printk+0x10/0x10 [ 185.056534][T10009] ? __pfx___might_resched+0x10/0x10 [ 185.056554][T10009] should_fail_ex+0x414/0x560 [ 185.056581][T10009] should_failslab+0xa8/0x100 [ 185.056605][T10009] __kmalloc_cache_noprof+0x70/0x3d0 [ 185.056625][T10009] ? apply_wqattrs_prepare+0x12d/0xe00 [ 185.056645][T10009] apply_wqattrs_prepare+0x12d/0xe00 [ 185.056665][T10009] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 185.056686][T10009] ? pcpu_memcg_post_alloc_hook+0xb8/0x520 [ 185.056711][T10009] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 185.056740][T10009] apply_workqueue_attrs_locked+0x65/0x240 [ 185.056764][T10009] __alloc_workqueue+0x10c5/0x1b70 [ 185.056799][T10009] alloc_workqueue_noprof+0xd4/0x210 [ 185.056819][T10009] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 185.056837][T10009] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 185.056854][T10009] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 185.056883][T10009] nci_register_device+0x220/0x9d0 [ 185.056912][T10009] ? __pfx_nci_register_device+0x10/0x10 [ 185.056935][T10009] ? __raw_spin_lock_init+0x45/0x100 [ 185.056955][T10009] ? __init_waitqueue_head+0xa9/0x150 [ 185.056980][T10009] virtual_ncidev_open+0x129/0x1a0 [ 185.057004][T10009] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 185.057029][T10009] misc_open+0x2b9/0x330 [ 185.057054][T10009] chrdev_open+0x4c9/0x5e0 [ 185.057072][T10009] ? __pfx_chrdev_open+0x10/0x10 [ 185.057098][T10009] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 185.057126][T10009] ? __pfx_chrdev_open+0x10/0x10 [ 185.057145][T10009] do_dentry_open+0x950/0x13f0 [ 185.057179][T10009] vfs_open+0x3b/0x340 [ 185.057193][T10009] ? path_openat+0x2ecd/0x3830 [ 185.057215][T10009] path_openat+0x2ee5/0x3830 [ 185.057232][T10009] ? arch_stack_walk+0xfc/0x150 [ 185.057270][T10009] ? stack_depot_save_flags+0x40/0x860 [ 185.057305][T10009] ? __pfx_path_openat+0x10/0x10 [ 185.057321][T10009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.057356][T10009] do_filp_open+0x1fa/0x410 [ 185.057372][T10009] ? __lock_acquire+0xab9/0xd20 [ 185.057394][T10009] ? __pfx_do_filp_open+0x10/0x10 [ 185.057435][T10009] ? _raw_spin_unlock+0x28/0x50 [ 185.057454][T10009] ? alloc_fd+0x64c/0x6c0 [ 185.057486][T10009] do_sys_openat2+0x121/0x1c0 [ 185.057505][T10009] ? __pfx_do_sys_openat2+0x10/0x10 [ 185.057523][T10009] ? ksys_write+0x22a/0x250 [ 185.057544][T10009] ? __pfx_ksys_write+0x10/0x10 [ 185.057561][T10009] ? rcu_is_watching+0x15/0xb0 [ 185.057581][T10009] __x64_sys_openat+0x138/0x170 [ 185.057604][T10009] do_syscall_64+0xfa/0x3b0 [ 185.057620][T10009] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.057636][T10009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.057651][T10009] ? clear_bhb_loop+0x60/0xb0 [ 185.057671][T10009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.057685][T10009] RIP: 0033:0x7f354658eec9 [ 185.057699][T10009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.057711][T10009] RSP: 002b:00007f3547489038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 185.057727][T10009] RAX: ffffffffffffffda RBX: 00007f35467e5fa0 RCX: 00007f354658eec9 [ 185.057738][T10009] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 185.057748][T10009] RBP: 00007f3547489090 R08: 0000000000000000 R09: 0000000000000000 [ 185.057758][T10009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.057767][T10009] R13: 00007f35467e6038 R14: 00007f35467e5fa0 R15: 00007ffcfdcc1608 [ 185.057795][T10009] [ 185.495797][T10016] lo: entered allmulticast mode [ 185.500880][T10016] tunl0: entered allmulticast mode [ 185.506469][T10016] gre0: entered allmulticast mode [ 185.511770][T10016] gretap0: entered allmulticast mode [ 185.517270][T10016] erspan0: entered allmulticast mode [ 185.523087][T10016] ip_vti0: entered allmulticast mode [ 185.528553][T10016] ip6_vti0: entered allmulticast mode [ 185.538963][T10016] sit0: entered allmulticast mode [ 185.544208][T10016] ip6tnl0: entered allmulticast mode [ 185.549757][T10016] ip6gre0: entered allmulticast mode [ 185.556306][T10016] ip6gretap0: entered allmulticast mode [ 185.562191][T10016] bond0: entered allmulticast mode [ 185.567375][T10016] bond_slave_0: entered allmulticast mode [ 185.573208][T10016] bond_slave_1: entered allmulticast mode [ 185.579116][T10016] team0: entered allmulticast mode [ 185.584513][T10016] team_slave_0: entered allmulticast mode [ 185.590428][T10016] team_slave_1: entered allmulticast mode [ 185.597693][T10016] !: entered allmulticast mode [ 185.602795][T10016] nlmon0: entered allmulticast mode [ 185.608196][T10016] caif0: entered allmulticast mode [ 185.613559][T10016] batadv0: entered allmulticast mode [ 185.619758][T10016] vxcan0: entered allmulticast mode [ 185.625273][T10016] vxcan1: entered allmulticast mode [ 185.630772][T10016] veth0: entered allmulticast mode [ 185.636182][T10016] veth1: entered allmulticast mode [ 185.641467][T10016] wg0: entered allmulticast mode [ 185.646637][T10016] wg1: entered allmulticast mode [ 185.651906][T10016] wg2: entered allmulticast mode [ 185.657086][T10016] veth0_to_bridge: entered allmulticast mode [ 185.663356][T10016] bridge_slave_0: entered allmulticast mode [ 185.669433][T10016] veth1_to_bridge: entered allmulticast mode [ 185.675665][T10016] bridge_slave_1: entered allmulticast mode [ 185.681732][T10016] veth0_to_bond: entered allmulticast mode [ 185.687913][T10016] veth1_to_bond: entered allmulticast mode [ 185.694355][T10016] veth0_to_team: entered allmulticast mode [ 185.700493][T10016] veth1_to_team: entered allmulticast mode [ 185.706717][T10016] veth0_to_batadv: entered allmulticast mode [ 185.713006][T10016] batadv_slave_0: entered allmulticast mode [ 185.719103][T10016] veth1_to_batadv: entered allmulticast mode [ 185.725520][T10016] batadv_slave_1: entered allmulticast mode [ 185.731595][T10016] xfrm0: entered allmulticast mode [ 185.736962][T10016] veth0_to_hsr: entered allmulticast mode [ 185.742981][T10016] hsr_slave_0: entered allmulticast mode [ 185.748876][T10016] veth1_to_hsr: entered allmulticast mode [ 185.755455][T10016] hsr_slave_1: entered allmulticast mode [ 185.761309][T10016] hsr0: entered allmulticast mode [ 185.766598][T10016] veth1_virt_wifi: entered allmulticast mode [ 185.772863][T10016] veth0_virt_wifi: entered allmulticast mode [ 185.779198][T10016] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 185.786852][T10016] veth1_vlan: entered allmulticast mode [ 185.792628][T10016] veth0_vlan: entered allmulticast mode [ 185.798349][T10016] vlan0: entered allmulticast mode [ 185.803697][T10016] vlan1: entered allmulticast mode [ 185.808973][T10016] macvlan0: entered allmulticast mode [ 185.814576][T10016] macvlan1: entered allmulticast mode [ 185.820114][T10016] ipvlan0: entered allmulticast mode [ 185.825656][T10016] ipvlan1: entered allmulticast mode [ 185.831117][T10016] veth1_macvtap: entered allmulticast mode [ 185.837133][T10016] veth0_macvtap: entered allmulticast mode [ 185.843187][T10016] macvtap0: entered allmulticast mode [ 185.848911][T10016] macsec0: entered allmulticast mode [ 185.859806][T10016] geneve0: entered allmulticast mode [ 185.865465][T10016] geneve1: entered allmulticast mode [ 185.870942][T10016] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 185.878617][T10016] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 185.886256][T10016] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 185.893870][T10016] netdevsim netdevsim7 netdevsim3: entered allmulticast mode [ 185.901879][T10016] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 185.914005][T10016] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 185.921325][T10016] bridge0: entered allmulticast mode [ 185.953671][T10016] veth2: entered allmulticast mode [ 185.959009][T10016] veth3: entered allmulticast mode [ 185.968177][T10016] bridge1: entered allmulticast mode [ 186.112046][T10031] __nla_validate_parse: 4 callbacks suppressed [ 186.112066][T10031] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1328'. [ 186.136647][T10023] syzkaller0: entered promiscuous mode [ 186.142314][T10023] syzkaller0: entered allmulticast mode [ 188.037189][T10047] netlink: 'syz.6.1335': attribute type 1 has an invalid length. [ 188.164214][T10047] bond1: entered promiscuous mode [ 188.186393][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 188.203395][T10047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.217719][T10064] FAULT_INJECTION: forcing a failure. [ 188.217719][T10064] name failslab, interval 1, probability 0, space 0, times 0 [ 188.279582][T10064] CPU: 0 UID: 0 PID: 10064 Comm: syz.5.1338 Not tainted syzkaller #0 PREEMPT(full) [ 188.279607][T10064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 188.279618][T10064] Call Trace: [ 188.279625][T10064] [ 188.279633][T10064] dump_stack_lvl+0x189/0x250 [ 188.279658][T10064] ? __pfx____ratelimit+0x10/0x10 [ 188.279677][T10064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.279697][T10064] ? __pfx__printk+0x10/0x10 [ 188.279727][T10064] ? __pfx___might_resched+0x10/0x10 [ 188.279742][T10064] ? fs_reclaim_acquire+0x7d/0x100 [ 188.279765][T10064] should_fail_ex+0x414/0x560 [ 188.279792][T10064] should_failslab+0xa8/0x100 [ 188.279817][T10064] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 188.279838][T10064] ? alloc_unbound_pwq+0xac8/0xe00 [ 188.279858][T10064] alloc_unbound_pwq+0xac8/0xe00 [ 188.279889][T10064] apply_wqattrs_prepare+0x3cc/0xe00 [ 188.279937][T10064] apply_workqueue_attrs_locked+0x65/0x240 [ 188.279963][T10064] __alloc_workqueue+0x10c5/0x1b70 [ 188.280002][T10064] alloc_workqueue_noprof+0xd4/0x210 [ 188.280024][T10064] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 188.280045][T10064] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 188.280063][T10064] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 188.280102][T10064] nci_register_device+0x220/0x9d0 [ 188.280132][T10064] ? __pfx_nci_register_device+0x10/0x10 [ 188.280157][T10064] ? __raw_spin_lock_init+0x45/0x100 [ 188.280179][T10064] ? __init_waitqueue_head+0xa9/0x150 [ 188.280205][T10064] virtual_ncidev_open+0x129/0x1a0 [ 188.280228][T10064] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 188.280247][T10064] misc_open+0x2b9/0x330 [ 188.280274][T10064] chrdev_open+0x4c9/0x5e0 [ 188.280294][T10064] ? __pfx_chrdev_open+0x10/0x10 [ 188.280321][T10064] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 188.280350][T10064] ? __pfx_chrdev_open+0x10/0x10 [ 188.280371][T10064] do_dentry_open+0x950/0x13f0 [ 188.280407][T10064] vfs_open+0x3b/0x340 [ 188.280421][T10064] ? path_openat+0x2ecd/0x3830 [ 188.280444][T10064] path_openat+0x2ee5/0x3830 [ 188.280460][T10064] ? arch_stack_walk+0xfc/0x150 [ 188.280508][T10064] ? stack_depot_save_flags+0x40/0x860 [ 188.280545][T10064] ? __pfx_path_openat+0x10/0x10 [ 188.280562][T10064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.280601][T10064] do_filp_open+0x1fa/0x410 [ 188.280617][T10064] ? __lock_acquire+0xab9/0xd20 [ 188.280641][T10064] ? __pfx_do_filp_open+0x10/0x10 [ 188.280687][T10064] ? _raw_spin_unlock+0x28/0x50 [ 188.280709][T10064] ? alloc_fd+0x64c/0x6c0 [ 188.280745][T10064] do_sys_openat2+0x121/0x1c0 [ 188.280767][T10064] ? __pfx_do_sys_openat2+0x10/0x10 [ 188.280787][T10064] ? ksys_write+0x22a/0x250 [ 188.280811][T10064] ? __pfx_ksys_write+0x10/0x10 [ 188.280830][T10064] ? rcu_is_watching+0x15/0xb0 [ 188.280850][T10064] __x64_sys_openat+0x138/0x170 [ 188.280876][T10064] do_syscall_64+0xfa/0x3b0 [ 188.280893][T10064] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.280910][T10064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.280925][T10064] ? clear_bhb_loop+0x60/0xb0 [ 188.280946][T10064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.280961][T10064] RIP: 0033:0x7f9963b8eec9 [ 188.280976][T10064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.280990][T10064] RSP: 002b:00007f9964b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 188.281009][T10064] RAX: ffffffffffffffda RBX: 00007f9963de5fa0 RCX: 00007f9963b8eec9 [ 188.281022][T10064] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 188.281034][T10064] RBP: 00007f9964b07090 R08: 0000000000000000 R09: 0000000000000000 [ 188.281044][T10064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.281053][T10064] R13: 00007f9963de6038 R14: 00007f9963de5fa0 R15: 00007ffc951aa598 [ 188.281080][T10064] [ 188.807532][T10060] sctp: [Deprecated]: syz.2.1337 (pid 10060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.807532][T10060] Use struct sctp_sack_info instead [ 188.873968][T10073] sctp: [Deprecated]: syz.5.1340 (pid 10073) Use of int in maxseg socket option. [ 188.873968][T10073] Use struct sctp_assoc_value instead [ 188.915447][T10074] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1340'. [ 189.085111][T10076] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.267680][T10082] team0: left allmulticast mode [ 189.277544][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1343'. [ 189.305824][T10082] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 189.343201][T10083] tipc: Started in network mode [ 189.354078][T10083] tipc: Node identity 967b28cb8d98, cluster identity 4711 [ 189.370767][T10083] tipc: Enabled bearer , priority 0 [ 189.388799][T10085] tipc: Enabling of bearer rejected, already enabled [ 189.464786][T10085] tipc: Disabling bearer [ 189.548100][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1346'. [ 189.627553][T10097] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1348'. [ 189.708276][T10099] pimreg: entered allmulticast mode [ 189.734846][T10099] pimreg: left allmulticast mode [ 189.790022][T10108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1349'. [ 189.876574][T10115] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1354'. [ 189.959729][T10117] vlan2: entered promiscuous mode [ 190.380106][T10146] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1369'. [ 190.909274][T10180] bond0: (slave bond_slave_0): Releasing backup interface [ 190.920305][T10180] bond0: (slave bond_slave_1): Releasing backup interface [ 190.934775][T10180] team0: Port device team_slave_0 removed [ 190.947486][T10180] team0: Port device team_slave_1 removed [ 190.955136][T10180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.965013][T10180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.981605][T10180] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.205125][ T5968] hid-generic 0005:16C0:5502.0001: item fetching failed at offset 0/3 [ 191.233490][ T5968] hid-generic 0005:16C0:5502.0001: probe with driver hid-generic failed with error -22 [ 191.262317][T10197] tipc: Enabled bearer , priority 0 [ 191.292229][T10194] syzkaller0: entered promiscuous mode [ 191.323030][T10202] netlink: 'syz.2.1388': attribute type 8 has an invalid length. [ 191.328212][T10194] syzkaller0: entered allmulticast mode [ 191.432966][T10194] tipc: Resetting bearer [ 191.469333][T10194] tipc: Disabling bearer [ 191.717555][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1398'. [ 191.748908][T10230] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 191.857082][T10239] openvswitch: netlink: IPv4 tun info is not correct [ 191.879849][T10238] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1402'. [ 191.986012][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1402'. [ 192.154970][T10252] FAULT_INJECTION: forcing a failure. [ 192.154970][T10252] name failslab, interval 1, probability 0, space 0, times 0 [ 192.192011][T10252] CPU: 1 UID: 0 PID: 10252 Comm: syz.4.1406 Not tainted syzkaller #0 PREEMPT(full) [ 192.192035][T10252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 192.192044][T10252] Call Trace: [ 192.192051][T10252] [ 192.192058][T10252] dump_stack_lvl+0x189/0x250 [ 192.192081][T10252] ? __pfx____ratelimit+0x10/0x10 [ 192.192098][T10252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.192115][T10252] ? __pfx__printk+0x10/0x10 [ 192.192137][T10252] ? __pfx___might_resched+0x10/0x10 [ 192.192152][T10252] ? fs_reclaim_acquire+0x7d/0x100 [ 192.192171][T10252] should_fail_ex+0x414/0x560 [ 192.192197][T10252] should_failslab+0xa8/0x100 [ 192.192218][T10252] __kmalloc_noprof+0xcb/0x4f0 [ 192.192236][T10252] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 192.192263][T10252] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 192.192290][T10252] genl_start+0x180/0x6c0 [ 192.192308][T10252] ? netlink_lookup+0x30/0x200 [ 192.192330][T10252] __netlink_dump_start+0x466/0x7e0 [ 192.192360][T10252] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 192.192382][T10252] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 192.192401][T10252] ? genl_get_cmd+0x67f/0x910 [ 192.192425][T10252] ? __pfx_genl_start+0x10/0x10 [ 192.192442][T10252] ? __pfx_genl_dumpit+0x10/0x10 [ 192.192458][T10252] ? __pfx_genl_done+0x10/0x10 [ 192.192482][T10252] ? stack_trace_save+0x9c/0xe0 [ 192.192505][T10252] genl_rcv_msg+0x5da/0x790 [ 192.192531][T10252] ? __pfx_genl_rcv_msg+0x10/0x10 [ 192.192550][T10252] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 192.192584][T10252] netlink_rcv_skb+0x208/0x470 [ 192.192609][T10252] ? __lock_acquire+0xab9/0xd20 [ 192.192629][T10252] ? __pfx_genl_rcv_msg+0x10/0x10 [ 192.192650][T10252] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 192.192684][T10252] ? down_read+0x1ad/0x2e0 [ 192.192705][T10252] genl_rcv+0x28/0x40 [ 192.192722][T10252] netlink_unicast+0x82f/0x9e0 [ 192.192746][T10252] ? __pfx_netlink_unicast+0x10/0x10 [ 192.192763][T10252] ? netlink_sendmsg+0x642/0xb30 [ 192.192778][T10252] ? skb_put+0x11b/0x210 [ 192.192799][T10252] netlink_sendmsg+0x805/0xb30 [ 192.192825][T10252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.192845][T10252] ? aa_sock_msg_perm+0xf1/0x1d0 [ 192.192863][T10252] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.192879][T10252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.192897][T10252] __sock_sendmsg+0x21c/0x270 [ 192.192915][T10252] ____sys_sendmsg+0x505/0x830 [ 192.192940][T10252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.192968][T10252] ? import_iovec+0x74/0xa0 [ 192.192990][T10252] ___sys_sendmsg+0x21f/0x2a0 [ 192.193011][T10252] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.193069][T10252] ? __fget_files+0x2a/0x420 [ 192.193083][T10252] ? __fget_files+0x3a0/0x420 [ 192.193109][T10252] __x64_sys_sendmsg+0x19b/0x260 [ 192.193133][T10252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.193164][T10252] ? __pfx_ksys_write+0x10/0x10 [ 192.193183][T10252] ? rcu_is_watching+0x15/0xb0 [ 192.193205][T10252] ? do_syscall_64+0xbe/0x3b0 [ 192.193229][T10252] do_syscall_64+0xfa/0x3b0 [ 192.193245][T10252] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.193262][T10252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.193278][T10252] ? clear_bhb_loop+0x60/0xb0 [ 192.193298][T10252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.193314][T10252] RIP: 0033:0x7f354658eec9 [ 192.193331][T10252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.193346][T10252] RSP: 002b:00007f3547489038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.193365][T10252] RAX: ffffffffffffffda RBX: 00007f35467e5fa0 RCX: 00007f354658eec9 [ 192.193377][T10252] RDX: 0000000020060000 RSI: 0000200000000640 RDI: 0000000000000004 [ 192.193388][T10252] RBP: 00007f3547489090 R08: 0000000000000000 R09: 0000000000000000 [ 192.193399][T10252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.193409][T10252] R13: 00007f35467e6038 R14: 00007f35467e5fa0 R15: 00007ffcfdcc1608 [ 192.193440][T10252] [ 192.881147][T10271] dvmrp8: entered allmulticast mode [ 193.195501][T10270] dvmrp8: left allmulticast mode [ 193.433330][T10298] netlink: 'syz.6.1427': attribute type 8 has an invalid length. [ 193.509664][T10302] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.721936][T10305] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.852031][T10321] FAULT_INJECTION: forcing a failure. [ 193.852031][T10321] name failslab, interval 1, probability 0, space 0, times 0 [ 193.885161][T10321] CPU: 0 UID: 0 PID: 10321 Comm: syz.4.1434 Not tainted syzkaller #0 PREEMPT(full) [ 193.885187][T10321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.885197][T10321] Call Trace: [ 193.885205][T10321] [ 193.885212][T10321] dump_stack_lvl+0x189/0x250 [ 193.885237][T10321] ? __pfx____ratelimit+0x10/0x10 [ 193.885257][T10321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.885276][T10321] ? __pfx__printk+0x10/0x10 [ 193.885305][T10321] ? __pfx___might_resched+0x10/0x10 [ 193.885321][T10321] ? fs_reclaim_acquire+0x7d/0x100 [ 193.885343][T10321] should_fail_ex+0x414/0x560 [ 193.885372][T10321] should_failslab+0xa8/0x100 [ 193.885396][T10321] __kmalloc_cache_noprof+0x70/0x3d0 [ 193.885417][T10321] ? genl_start+0x1c9/0x6c0 [ 193.885443][T10321] genl_start+0x1c9/0x6c0 [ 193.885464][T10321] ? netlink_lookup+0x30/0x200 [ 193.885491][T10321] __netlink_dump_start+0x466/0x7e0 [ 193.885519][T10321] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 193.885547][T10321] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 193.885568][T10321] ? genl_get_cmd+0x67f/0x910 [ 193.885596][T10321] ? __pfx_genl_start+0x10/0x10 [ 193.885616][T10321] ? __pfx_genl_dumpit+0x10/0x10 [ 193.885643][T10321] ? __pfx_genl_done+0x10/0x10 [ 193.885671][T10321] ? stack_trace_save+0x9c/0xe0 [ 193.885698][T10321] genl_rcv_msg+0x5da/0x790 [ 193.885728][T10321] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.885749][T10321] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 193.885790][T10321] netlink_rcv_skb+0x208/0x470 [ 193.885807][T10321] ? __lock_acquire+0xab9/0xd20 [ 193.885830][T10321] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.885855][T10321] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.885894][T10321] ? down_read+0x1ad/0x2e0 [ 193.885918][T10321] genl_rcv+0x28/0x40 [ 193.885937][T10321] netlink_unicast+0x82f/0x9e0 [ 193.885964][T10321] ? __pfx_netlink_unicast+0x10/0x10 [ 193.885983][T10321] ? netlink_sendmsg+0x642/0xb30 [ 193.886000][T10321] ? skb_put+0x11b/0x210 [ 193.886025][T10321] netlink_sendmsg+0x805/0xb30 [ 193.886055][T10321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.886078][T10321] ? aa_sock_msg_perm+0xf1/0x1d0 [ 193.886098][T10321] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 193.886116][T10321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.886137][T10321] __sock_sendmsg+0x21c/0x270 [ 193.886158][T10321] ____sys_sendmsg+0x505/0x830 [ 193.886185][T10321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.886218][T10321] ? import_iovec+0x74/0xa0 [ 193.886243][T10321] ___sys_sendmsg+0x21f/0x2a0 [ 193.886284][T10321] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.886346][T10321] ? __fget_files+0x2a/0x420 [ 193.886361][T10321] ? __fget_files+0x3a0/0x420 [ 193.886387][T10321] __x64_sys_sendmsg+0x19b/0x260 [ 193.886410][T10321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.886442][T10321] ? __pfx_ksys_write+0x10/0x10 [ 193.886460][T10321] ? rcu_is_watching+0x15/0xb0 [ 193.886483][T10321] ? do_syscall_64+0xbe/0x3b0 [ 193.886505][T10321] do_syscall_64+0xfa/0x3b0 [ 193.886519][T10321] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.886535][T10321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.886550][T10321] ? clear_bhb_loop+0x60/0xb0 [ 193.886571][T10321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.886587][T10321] RIP: 0033:0x7f354658eec9 [ 193.886603][T10321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.886617][T10321] RSP: 002b:00007f3547489038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.886643][T10321] RAX: ffffffffffffffda RBX: 00007f35467e5fa0 RCX: 00007f354658eec9 [ 193.886656][T10321] RDX: 0000000020060000 RSI: 0000200000000640 RDI: 0000000000000004 [ 193.886667][T10321] RBP: 00007f3547489090 R08: 0000000000000000 R09: 0000000000000000 [ 193.886678][T10321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.886689][T10321] R13: 00007f35467e6038 R14: 00007f35467e5fa0 R15: 00007ffcfdcc1608 [ 193.886720][T10321] [ 194.396946][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.403996][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.511237][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1436'. [ 194.565771][T10334] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 194.635662][T10344] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1441'. [ 194.691584][T10344] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1441'. [ 194.947929][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1448'. [ 194.973546][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1448'. [ 195.000427][T10360] netlink: 26 bytes leftover after parsing attributes in process `syz.6.1448'. [ 195.035960][T10362] team0: Device ipip0 is up. Set it down before adding it as a team port [ 195.082021][T10363] tipc: Enabled bearer , priority 0 [ 195.101646][T10363] syzkaller0: entered promiscuous mode [ 195.111779][T10363] syzkaller0: entered allmulticast mode [ 195.211770][T10362] tipc: Resetting bearer [ 195.260658][T10361] tipc: Resetting bearer [ 195.269032][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1452'. [ 195.303908][T10361] tipc: Disabling bearer [ 195.808402][T10395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.932182][T10405] macsec1: entered allmulticast mode [ 196.636421][T10422] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 196.687521][T10426] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 196.768916][T10424] __nla_validate_parse: 3 callbacks suppressed [ 196.768935][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1470'. [ 197.129354][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1474'. [ 197.160850][T10436] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1474'. [ 197.191242][T10436] netlink: 'syz.7.1474': attribute type 32 has an invalid length. [ 197.448367][T10444] netlink: 'syz.7.1477': attribute type 1 has an invalid length. [ 197.564936][T10444] bond1: entered promiscuous mode [ 197.570469][T10444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.597054][T10452] netlink: 'syz.6.1480': attribute type 13 has an invalid length. [ 197.662798][T10452] netlink: 'syz.6.1480': attribute type 17 has an invalid length. [ 197.736323][T10452] gretap0: refused to change device tx_queue_len [ 197.743853][T10452] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 197.847491][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'. [ 197.871555][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'. [ 197.927400][T10466] FAULT_INJECTION: forcing a failure. [ 197.927400][T10466] name failslab, interval 1, probability 0, space 0, times 0 [ 197.957238][T10466] CPU: 0 UID: 0 PID: 10466 Comm: syz.2.1483 Not tainted syzkaller #0 PREEMPT(full) [ 197.957265][T10466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.957275][T10466] Call Trace: [ 197.957282][T10466] [ 197.957290][T10466] dump_stack_lvl+0x189/0x250 [ 197.957315][T10466] ? __pfx____ratelimit+0x10/0x10 [ 197.957334][T10466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.957353][T10466] ? __pfx__printk+0x10/0x10 [ 197.957383][T10466] ? __pfx___might_resched+0x10/0x10 [ 197.957399][T10466] ? fs_reclaim_acquire+0x7d/0x100 [ 197.957429][T10466] should_fail_ex+0x414/0x560 [ 197.957458][T10466] should_failslab+0xa8/0x100 [ 197.957483][T10466] __kmalloc_cache_noprof+0x70/0x3d0 [ 197.957503][T10466] ? ieee802154_nl_fill_phy+0xb0/0x670 [ 197.957532][T10466] ieee802154_nl_fill_phy+0xb0/0x670 [ 197.957556][T10466] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 197.957573][T10466] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 197.957591][T10466] ? __pfx_ieee802154_nl_fill_phy+0x10/0x10 [ 197.957620][T10466] ? __pfx_klist_class_dev_put+0x10/0x10 [ 197.957648][T10466] ieee802154_dump_phy_iter+0x115/0x210 [ 197.957676][T10466] class_for_each_device+0x24e/0x360 [ 197.957699][T10466] ? __pfx_wpan_phy_iter+0x10/0x10 [ 197.957721][T10466] ? __pfx_class_for_each_device+0x10/0x10 [ 197.957742][T10466] ? rcu_is_watching+0x15/0xb0 [ 197.957765][T10466] ? __mutex_lock+0x335/0x1350 [ 197.957788][T10466] ? __pfx_ieee802154_dump_phy_iter+0x10/0x10 [ 197.957811][T10466] wpan_phy_for_each+0x91/0xd0 [ 197.957833][T10466] ? __pfx_wpan_phy_for_each+0x10/0x10 [ 197.957854][T10466] ? __pfx_ieee802154_dump_phy_iter+0x10/0x10 [ 197.957876][T10466] ? genl_dumpit+0xdb/0x1b0 [ 197.957907][T10466] ieee802154_dump_phy+0xc8/0x190 [ 197.957930][T10466] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 197.957960][T10466] ? __build_skb_around+0x257/0x3e0 [ 197.957986][T10466] genl_dumpit+0x108/0x1b0 [ 197.958012][T10466] netlink_dump+0x6e1/0xe90 [ 197.958045][T10466] ? __pfx_netlink_dump+0x10/0x10 [ 197.958062][T10466] ? genl_start+0x1c9/0x6c0 [ 197.958107][T10466] ? genl_start+0x499/0x6c0 [ 197.958137][T10466] __netlink_dump_start+0x5cb/0x7e0 [ 197.958166][T10466] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 197.958187][T10466] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 197.958204][T10466] ? genl_get_cmd+0x67f/0x910 [ 197.958226][T10466] ? __pfx_genl_start+0x10/0x10 [ 197.958242][T10466] ? __pfx_genl_dumpit+0x10/0x10 [ 197.958261][T10466] ? __pfx_genl_done+0x10/0x10 [ 197.958289][T10466] ? stack_trace_save+0x9c/0xe0 [ 197.958314][T10466] genl_rcv_msg+0x5da/0x790 [ 197.958344][T10466] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.958365][T10466] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 197.958404][T10466] netlink_rcv_skb+0x208/0x470 [ 197.958461][T10466] ? __lock_acquire+0xab9/0xd20 [ 197.958483][T10466] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.958508][T10466] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.958548][T10466] ? down_read+0x1ad/0x2e0 [ 197.958570][T10466] genl_rcv+0x28/0x40 [ 197.958590][T10466] netlink_unicast+0x82f/0x9e0 [ 197.958619][T10466] ? __pfx_netlink_unicast+0x10/0x10 [ 197.958639][T10466] ? netlink_sendmsg+0x642/0xb30 [ 197.958656][T10466] ? skb_put+0x11b/0x210 [ 197.958680][T10466] netlink_sendmsg+0x805/0xb30 [ 197.958710][T10466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.958733][T10466] ? aa_sock_msg_perm+0xf1/0x1d0 [ 197.958754][T10466] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.958772][T10466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.958792][T10466] __sock_sendmsg+0x21c/0x270 [ 197.958814][T10466] ____sys_sendmsg+0x505/0x830 [ 197.958841][T10466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.958873][T10466] ? import_iovec+0x74/0xa0 [ 197.958899][T10466] ___sys_sendmsg+0x21f/0x2a0 [ 197.958923][T10466] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.958986][T10466] ? __fget_files+0x2a/0x420 [ 197.959001][T10466] ? __fget_files+0x3a0/0x420 [ 197.959030][T10466] __x64_sys_sendmsg+0x19b/0x260 [ 197.959054][T10466] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.959085][T10466] ? __pfx_ksys_write+0x10/0x10 [ 197.959104][T10466] ? rcu_is_watching+0x15/0xb0 [ 197.959127][T10466] ? do_syscall_64+0xbe/0x3b0 [ 197.959150][T10466] do_syscall_64+0xfa/0x3b0 [ 197.959165][T10466] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.959180][T10466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.959193][T10466] ? clear_bhb_loop+0x60/0xb0 [ 197.959210][T10466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.959227][T10466] RIP: 0033:0x7fb60fd8eec9 [ 197.959244][T10466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.959258][T10466] RSP: 002b:00007fb610cfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.959277][T10466] RAX: ffffffffffffffda RBX: 00007fb60ffe5fa0 RCX: 00007fb60fd8eec9 [ 197.959289][T10466] RDX: 0000000020060000 RSI: 0000200000000640 RDI: 0000000000000004 [ 197.959301][T10466] RBP: 00007fb610cfc090 R08: 0000000000000000 R09: 0000000000000000 [ 197.959311][T10466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.959321][T10466] R13: 00007fb60ffe6038 R14: 00007fb60ffe5fa0 R15: 00007fff3a570758 [ 197.959353][T10466] [ 198.674457][T10475] netlink: 'syz.4.1488': attribute type 1 has an invalid length. [ 198.721668][T10472] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 198.925413][T10475] bond2: entered promiscuous mode [ 198.930915][T10475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.292087][T10496] batadv_slave_1: entered promiscuous mode [ 199.318076][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1493'. [ 199.319855][T10499] macsec1: entered allmulticast mode [ 199.442059][T10495] batadv_slave_1: left promiscuous mode [ 199.578021][T10516] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 199.648499][T10518] FAULT_INJECTION: forcing a failure. [ 199.648499][T10518] name failslab, interval 1, probability 0, space 0, times 0 [ 199.664874][T10518] CPU: 0 UID: 0 PID: 10518 Comm: syz.2.1501 Not tainted syzkaller #0 PREEMPT(full) [ 199.664899][T10518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.664910][T10518] Call Trace: [ 199.664917][T10518] [ 199.664925][T10518] dump_stack_lvl+0x189/0x250 [ 199.664949][T10518] ? __pfx____ratelimit+0x10/0x10 [ 199.664969][T10518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.664988][T10518] ? __pfx__printk+0x10/0x10 [ 199.665015][T10518] ? __pfx___might_resched+0x10/0x10 [ 199.665031][T10518] ? fs_reclaim_acquire+0x7d/0x100 [ 199.665053][T10518] should_fail_ex+0x414/0x560 [ 199.665083][T10518] should_failslab+0xa8/0x100 [ 199.665118][T10518] __kmalloc_cache_noprof+0x70/0x3d0 [ 199.665138][T10518] ? ieee802154_nl_fill_phy+0xb0/0x670 [ 199.665167][T10518] ieee802154_nl_fill_phy+0xb0/0x670 [ 199.665192][T10518] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 199.665209][T10518] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 199.665226][T10518] ? __pfx_ieee802154_nl_fill_phy+0x10/0x10 [ 199.665248][T10518] ? klist_dec_and_del+0x13d/0x3d0 [ 199.665278][T10518] ieee802154_dump_phy_iter+0x115/0x210 [ 199.665306][T10518] class_for_each_device+0x24e/0x360 [ 199.665330][T10518] ? __pfx_wpan_phy_iter+0x10/0x10 [ 199.665353][T10518] ? __pfx_class_for_each_device+0x10/0x10 [ 199.665374][T10518] ? rcu_is_watching+0x15/0xb0 [ 199.665395][T10518] ? __mutex_lock+0x335/0x1350 [ 199.665418][T10518] ? __pfx_ieee802154_dump_phy_iter+0x10/0x10 [ 199.665442][T10518] wpan_phy_for_each+0x91/0xd0 [ 199.665464][T10518] ? __pfx_wpan_phy_for_each+0x10/0x10 [ 199.665485][T10518] ? __pfx_ieee802154_dump_phy_iter+0x10/0x10 [ 199.665507][T10518] ? genl_dumpit+0xdb/0x1b0 [ 199.665537][T10518] ieee802154_dump_phy+0xc8/0x190 [ 199.665560][T10518] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 199.665590][T10518] ? __build_skb_around+0x257/0x3e0 [ 199.665616][T10518] genl_dumpit+0x108/0x1b0 [ 199.665643][T10518] netlink_dump+0x6e1/0xe90 [ 199.665679][T10518] ? __pfx_netlink_dump+0x10/0x10 [ 199.665717][T10518] ? genl_start+0x499/0x6c0 [ 199.665749][T10518] __netlink_dump_start+0x5cb/0x7e0 [ 199.665777][T10518] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 199.665803][T10518] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 199.665824][T10518] ? genl_get_cmd+0x67f/0x910 [ 199.665851][T10518] ? __pfx_genl_start+0x10/0x10 [ 199.665887][T10518] ? __pfx_genl_dumpit+0x10/0x10 [ 199.665906][T10518] ? __pfx_genl_done+0x10/0x10 [ 199.665933][T10518] ? stack_trace_save+0x9c/0xe0 [ 199.665959][T10518] genl_rcv_msg+0x5da/0x790 [ 199.665989][T10518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.666011][T10518] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 199.666049][T10518] netlink_rcv_skb+0x208/0x470 [ 199.666067][T10518] ? __lock_acquire+0xab9/0xd20 [ 199.666095][T10518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.666120][T10518] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.666162][T10518] ? down_read+0x1ad/0x2e0 [ 199.666184][T10518] genl_rcv+0x28/0x40 [ 199.666204][T10518] netlink_unicast+0x82f/0x9e0 [ 199.666231][T10518] ? __pfx_netlink_unicast+0x10/0x10 [ 199.666252][T10518] ? netlink_sendmsg+0x642/0xb30 [ 199.666269][T10518] ? skb_put+0x11b/0x210 [ 199.666293][T10518] netlink_sendmsg+0x805/0xb30 [ 199.666324][T10518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.666347][T10518] ? aa_sock_msg_perm+0xf1/0x1d0 [ 199.666367][T10518] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.666385][T10518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.666406][T10518] __sock_sendmsg+0x21c/0x270 [ 199.666428][T10518] ____sys_sendmsg+0x505/0x830 [ 199.666455][T10518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.666488][T10518] ? import_iovec+0x74/0xa0 [ 199.666513][T10518] ___sys_sendmsg+0x21f/0x2a0 [ 199.666536][T10518] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.666592][T10518] ? __fget_files+0x2a/0x420 [ 199.666605][T10518] ? __fget_files+0x3a0/0x420 [ 199.666630][T10518] __x64_sys_sendmsg+0x19b/0x260 [ 199.666652][T10518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.666683][T10518] ? __pfx_ksys_write+0x10/0x10 [ 199.666702][T10518] ? rcu_is_watching+0x15/0xb0 [ 199.666725][T10518] ? do_syscall_64+0xbe/0x3b0 [ 199.666747][T10518] do_syscall_64+0xfa/0x3b0 [ 199.666764][T10518] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.666780][T10518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.666796][T10518] ? clear_bhb_loop+0x60/0xb0 [ 199.666816][T10518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.666830][T10518] RIP: 0033:0x7fb60fd8eec9 [ 199.666845][T10518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.666859][T10518] RSP: 002b:00007fb610cfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.666876][T10518] RAX: ffffffffffffffda RBX: 00007fb60ffe5fa0 RCX: 00007fb60fd8eec9 [ 199.666887][T10518] RDX: 0000000020060000 RSI: 0000200000000640 RDI: 0000000000000004 [ 199.666898][T10518] RBP: 00007fb610cfc090 R08: 0000000000000000 R09: 0000000000000000 [ 199.666909][T10518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.666919][T10518] R13: 00007fb60ffe6038 R14: 00007fb60ffe5fa0 R15: 00007fff3a570758 [ 199.666952][T10518] [ 200.316321][T10528] syzkaller0: entered promiscuous mode [ 200.328606][T10528] syzkaller0: entered allmulticast mode [ 200.897869][T10570] netlink: 'syz.6.1522': attribute type 1 has an invalid length. [ 200.914755][T10570] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1522'. [ 201.008300][T10572] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 201.270062][T10584] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.1526'. [ 201.307267][T10584] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.1526'. [ 201.569495][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 201.584553][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 201.759708][T10615] netlink: 'syz.2.1538': attribute type 8 has an invalid length. [ 201.858728][T10625] : renamed from veth0_to_bond [ 201.991842][T10634] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1545'. [ 202.918469][T10660] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1551'. [ 203.037746][T10667] netlink: 'syz.2.1554': attribute type 1 has an invalid length. [ 203.109944][T10667] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.117268][T10674] FAULT_INJECTION: forcing a failure. [ 203.117268][T10674] name failslab, interval 1, probability 0, space 0, times 0 [ 203.134833][T10674] CPU: 0 UID: 0 PID: 10674 Comm: syz.5.1557 Not tainted syzkaller #0 PREEMPT(full) [ 203.134856][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 203.134865][T10674] Call Trace: [ 203.134871][T10674] [ 203.134878][T10674] dump_stack_lvl+0x189/0x250 [ 203.134901][T10674] ? __pfx____ratelimit+0x10/0x10 [ 203.134921][T10674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.134940][T10674] ? __pfx__printk+0x10/0x10 [ 203.134968][T10674] ? __pfx___might_resched+0x10/0x10 [ 203.134985][T10674] ? fs_reclaim_acquire+0x7d/0x100 [ 203.135007][T10674] should_fail_ex+0x414/0x560 [ 203.135036][T10674] should_failslab+0xa8/0x100 [ 203.135070][T10674] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 203.135093][T10674] ? __alloc_workqueue+0x8e8/0x1b70 [ 203.135119][T10674] __alloc_workqueue+0x8e8/0x1b70 [ 203.135158][T10674] alloc_workqueue_noprof+0xd4/0x210 [ 203.135181][T10674] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 203.135202][T10674] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 203.135220][T10674] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 203.135251][T10674] nci_register_device+0x3f3/0x9d0 [ 203.135281][T10674] ? __pfx_nci_register_device+0x10/0x10 [ 203.135303][T10674] ? __raw_spin_lock_init+0x45/0x100 [ 203.135323][T10674] ? __init_waitqueue_head+0xa9/0x150 [ 203.135347][T10674] virtual_ncidev_open+0x129/0x1a0 [ 203.135370][T10674] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 203.135388][T10674] misc_open+0x2b9/0x330 [ 203.135413][T10674] chrdev_open+0x4c9/0x5e0 [ 203.135433][T10674] ? __pfx_chrdev_open+0x10/0x10 [ 203.135459][T10674] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 203.135488][T10674] ? __pfx_chrdev_open+0x10/0x10 [ 203.135509][T10674] do_dentry_open+0x950/0x13f0 [ 203.135544][T10674] vfs_open+0x3b/0x340 [ 203.135559][T10674] ? path_openat+0x2ecd/0x3830 [ 203.135582][T10674] path_openat+0x2ee5/0x3830 [ 203.135599][T10674] ? arch_stack_walk+0xfc/0x150 [ 203.135639][T10674] ? stack_depot_save_flags+0x40/0x860 [ 203.135677][T10674] ? __pfx_path_openat+0x10/0x10 [ 203.135694][T10674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.135734][T10674] do_filp_open+0x1fa/0x410 [ 203.135752][T10674] ? __lock_acquire+0xab9/0xd20 [ 203.135776][T10674] ? __pfx_do_filp_open+0x10/0x10 [ 203.135819][T10674] ? _raw_spin_unlock+0x28/0x50 [ 203.135840][T10674] ? alloc_fd+0x64c/0x6c0 [ 203.135875][T10674] do_sys_openat2+0x121/0x1c0 [ 203.135897][T10674] ? __pfx_do_sys_openat2+0x10/0x10 [ 203.135917][T10674] ? ksys_write+0x22a/0x250 [ 203.135940][T10674] ? __pfx_ksys_write+0x10/0x10 [ 203.135957][T10674] ? rcu_is_watching+0x15/0xb0 [ 203.135978][T10674] __x64_sys_openat+0x138/0x170 [ 203.136003][T10674] do_syscall_64+0xfa/0x3b0 [ 203.136020][T10674] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.136037][T10674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.136059][T10674] ? clear_bhb_loop+0x60/0xb0 [ 203.136080][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.136096][T10674] RIP: 0033:0x7f9963b8eec9 [ 203.136113][T10674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.136127][T10674] RSP: 002b:00007f9964b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.136147][T10674] RAX: ffffffffffffffda RBX: 00007f9963de5fa0 RCX: 00007f9963b8eec9 [ 203.136160][T10674] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 203.136172][T10674] RBP: 00007f9964b07090 R08: 0000000000000000 R09: 0000000000000000 [ 203.136183][T10674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.136193][T10674] R13: 00007f9963de6038 R14: 00007f9963de5fa0 R15: 00007ffc951aa598 [ 203.136224][T10674] [ 203.198623][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1558'. [ 203.378213][T10669] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 203.553837][T10667] macvlan2: entered promiscuous mode [ 203.564510][T10667] macvlan2: entered allmulticast mode [ 203.574166][T10667] bond3: (slave macvlan2): Opening slave failed [ 203.584980][T10693] netlink: 'syz.7.1559': attribute type 1 has an invalid length. [ 203.599547][T10693] netlink: 172 bytes leftover after parsing attributes in process `syz.7.1559'. [ 203.640847][T10697] vlan3: entered allmulticast mode [ 203.925558][T10712] IPv6: sit3: Disabled Multicast RS [ 204.110212][T10731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1573'. [ 204.177793][T10733] syzkaller0: entered allmulticast mode [ 204.264742][T10733] syzkaller0 (unregistering): left allmulticast mode [ 204.286871][T10736] FAULT_INJECTION: forcing a failure. [ 204.286871][T10736] name failslab, interval 1, probability 0, space 0, times 0 [ 204.311655][T10736] CPU: 1 UID: 0 PID: 10736 Comm: syz.2.1574 Not tainted syzkaller #0 PREEMPT(full) [ 204.311682][T10736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.311693][T10736] Call Trace: [ 204.311700][T10736] [ 204.311717][T10736] dump_stack_lvl+0x189/0x250 [ 204.311742][T10736] ? __pfx____ratelimit+0x10/0x10 [ 204.311761][T10736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.311780][T10736] ? __pfx__printk+0x10/0x10 [ 204.311809][T10736] ? __pfx___might_resched+0x10/0x10 [ 204.311831][T10736] should_fail_ex+0x414/0x560 [ 204.311860][T10736] should_failslab+0xa8/0x100 [ 204.311885][T10736] __kmalloc_noprof+0xcb/0x4f0 [ 204.311906][T10736] ? apply_wqattrs_prepare+0xf6/0xe00 [ 204.311929][T10736] apply_wqattrs_prepare+0xf6/0xe00 [ 204.311948][T10736] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 204.311969][T10736] ? pcpu_memcg_post_alloc_hook+0xb8/0x520 [ 204.311996][T10736] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 204.312026][T10736] apply_workqueue_attrs_locked+0x65/0x240 [ 204.312053][T10736] __alloc_workqueue+0x10c5/0x1b70 [ 204.312092][T10736] alloc_workqueue_noprof+0xd4/0x210 [ 204.312113][T10736] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 204.312134][T10736] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 204.312152][T10736] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 204.312184][T10736] nci_register_device+0x3f3/0x9d0 [ 204.312214][T10736] ? __pfx_nci_register_device+0x10/0x10 [ 204.312238][T10736] ? __raw_spin_lock_init+0x45/0x100 [ 204.312261][T10736] ? __init_waitqueue_head+0xa9/0x150 [ 204.312286][T10736] virtual_ncidev_open+0x129/0x1a0 [ 204.312310][T10736] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 204.312329][T10736] misc_open+0x2b9/0x330 [ 204.312358][T10736] chrdev_open+0x4c9/0x5e0 [ 204.312375][T10736] ? __pfx_chrdev_open+0x10/0x10 [ 204.312401][T10736] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 204.312431][T10736] ? __pfx_chrdev_open+0x10/0x10 [ 204.312451][T10736] do_dentry_open+0x950/0x13f0 [ 204.312487][T10736] vfs_open+0x3b/0x340 [ 204.312502][T10736] ? path_openat+0x2ecd/0x3830 [ 204.312525][T10736] path_openat+0x2ee5/0x3830 [ 204.312543][T10736] ? arch_stack_walk+0xfc/0x150 [ 204.312582][T10736] ? stack_depot_save_flags+0x40/0x860 [ 204.312621][T10736] ? __pfx_path_openat+0x10/0x10 [ 204.312637][T10736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.312678][T10736] do_filp_open+0x1fa/0x410 [ 204.312696][T10736] ? __lock_acquire+0xab9/0xd20 [ 204.312798][T10736] ? __pfx_do_filp_open+0x10/0x10 [ 204.312842][T10736] ? _raw_spin_unlock+0x28/0x50 [ 204.312864][T10736] ? alloc_fd+0x64c/0x6c0 [ 204.312900][T10736] do_sys_openat2+0x121/0x1c0 [ 204.312923][T10736] ? __pfx_do_sys_openat2+0x10/0x10 [ 204.312943][T10736] ? ksys_write+0x22a/0x250 [ 204.312964][T10736] ? __pfx_ksys_write+0x10/0x10 [ 204.312982][T10736] ? rcu_is_watching+0x15/0xb0 [ 204.313004][T10736] __x64_sys_openat+0x138/0x170 [ 204.313029][T10736] do_syscall_64+0xfa/0x3b0 [ 204.313047][T10736] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.313064][T10736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.313079][T10736] ? clear_bhb_loop+0x60/0xb0 [ 204.313099][T10736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.313114][T10736] RIP: 0033:0x7fb60fd8eec9 [ 204.313131][T10736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.313146][T10736] RSP: 002b:00007fb610cfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 204.313165][T10736] RAX: ffffffffffffffda RBX: 00007fb60ffe5fa0 RCX: 00007fb60fd8eec9 [ 204.313178][T10736] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 204.313189][T10736] RBP: 00007fb610cfc090 R08: 0000000000000000 R09: 0000000000000000 [ 204.313200][T10736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.313211][T10736] R13: 00007fb60ffe6038 R14: 00007fb60ffe5fa0 R15: 00007fff3a570758 [ 204.313240][T10736] [ 204.852216][T10743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1577'. [ 204.998872][T10747] lo: left allmulticast mode [ 205.034202][T10747] tunl0: left allmulticast mode [ 205.035521][T10749] netlink: 'syz.4.1579': attribute type 13 has an invalid length. [ 205.050570][T10749] netlink: 'syz.4.1579': attribute type 17 has an invalid length. [ 205.070134][T10747] gre0: left allmulticast mode [ 205.110886][T10747] gretap0: left allmulticast mode [ 205.127579][T10747] erspan0: left allmulticast mode [ 205.135098][T10747] ip_vti0: left allmulticast mode [ 205.146025][T10747] ip6_vti0: left allmulticast mode [ 205.153271][T10747] sit0: left allmulticast mode [ 205.172128][T10747] ip6tnl0: left allmulticast mode [ 205.184651][T10747] ip6gre0: left allmulticast mode [ 205.191871][T10747] ip6gretap0: left allmulticast mode [ 205.199597][T10747] bond0: left allmulticast mode [ 205.206705][T10747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.214425][T10747] team0: left allmulticast mode [ 205.220244][T10747] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.228034][T10747] !: left allmulticast mode [ 205.240607][T10747] nlmon0: left allmulticast mode [ 205.251292][T10747] caif0: left allmulticast mode [ 205.256406][T10747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.273174][T10749] lo: left allmulticast mode [ 205.280494][T10749] tunl0: left allmulticast mode [ 205.287568][T10749] gre0: left allmulticast mode [ 205.295388][T10749] gretap0: left allmulticast mode [ 205.316143][T10749] gretap0: refused to change device tx_queue_len [ 205.323210][T10749] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 205.541727][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 205.551967][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1590'. [ 205.564658][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 205.901020][T10801] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 205.935710][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1592'. [ 206.277856][T10820] netlink: 'syz.5.1600': attribute type 2 has an invalid length. [ 206.320005][T10822] lo: entered allmulticast mode [ 206.327796][T10822] tunl0: entered allmulticast mode [ 206.337745][T10822] gre0: entered allmulticast mode [ 206.347007][T10822] gretap0: entered allmulticast mode [ 206.355296][T10822] erspan0: entered allmulticast mode [ 206.360950][T10822] ip_vti0: entered allmulticast mode [ 206.366709][T10822] ip6_vti0: entered allmulticast mode [ 206.372324][T10822] sit0: entered allmulticast mode [ 206.377900][T10822] ip6tnl0: entered allmulticast mode [ 206.383732][T10822] ip6gre0: entered allmulticast mode [ 206.389230][T10822] syz_tun: entered allmulticast mode [ 206.395410][T10822] ip6gretap0: entered allmulticast mode [ 206.401168][T10822] bond0: entered allmulticast mode [ 206.406769][T10822] team0: entered allmulticast mode [ 206.412141][T10822] dummy0: entered allmulticast mode [ 206.417860][T10822] nlmon0: entered allmulticast mode [ 206.423505][T10822] caif0: entered allmulticast mode [ 206.428913][T10822] batadv0: entered allmulticast mode [ 206.434552][T10822] vxcan0: entered allmulticast mode [ 206.439968][T10822] vxcan1: entered allmulticast mode [ 206.445574][T10822] veth0: entered allmulticast mode [ 206.450958][T10822] veth1: entered allmulticast mode [ 206.456351][T10822] wg0: entered allmulticast mode [ 206.461529][T10822] wg1: entered allmulticast mode [ 206.467773][T10822] veth0_to_bridge: entered allmulticast mode [ 206.474261][T10822] veth1_to_bridge: entered allmulticast mode [ 206.480430][T10822] bridge_slave_1: entered allmulticast mode [ 206.487017][T10822] : entered allmulticast mode [ 206.491918][T10822] bond_slave_0: entered allmulticast mode [ 206.498064][T10822] veth1_to_bond: entered allmulticast mode [ 206.504273][T10822] bond_slave_1: entered allmulticast mode [ 206.510249][T10822] veth0_to_team: entered allmulticast mode [ 206.516603][T10822] team_slave_0: entered allmulticast mode [ 206.522636][T10822] veth1_to_team: entered allmulticast mode [ 206.528628][T10822] team_slave_1: entered allmulticast mode [ 206.534677][T10822] veth0_to_batadv: entered allmulticast mode [ 206.540847][T10822] batadv_slave_0: entered allmulticast mode [ 206.547509][T10822] veth1_to_batadv: entered allmulticast mode [ 206.553768][T10822] batadv_slave_1: entered allmulticast mode [ 206.559947][T10822] xfrm0: entered allmulticast mode [ 206.565389][T10822] veth0_to_hsr: entered allmulticast mode [ 206.571832][T10822] mac80211_hwsim hwsim38 wlan3: entered allmulticast mode [ 206.579612][T10822] mac80211_hwsim hwsim39 wlan4: entered allmulticast mode [ 206.590975][T10822] mac80211_hwsim hwsim41 wlan5: entered allmulticast mode [ 206.600573][T10822] bond1: left promiscuous mode [ 206.606105][T10822] bond1: entered allmulticast mode [ 206.612942][T10822] bridge1: entered allmulticast mode [ 206.624489][T10822] syztnl2: entered allmulticast mode [ 206.630147][T10822] syztnl1: entered allmulticast mode [ 206.863152][T10838] syz.6.1604: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 206.882168][T10838] CPU: 1 UID: 0 PID: 10838 Comm: syz.6.1604 Not tainted syzkaller #0 PREEMPT(full) [ 206.882192][T10838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.882202][T10838] Call Trace: [ 206.882209][T10838] [ 206.882216][T10838] dump_stack_lvl+0x189/0x250 [ 206.882243][T10838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.882262][T10838] ? __pfx__printk+0x10/0x10 [ 206.882283][T10838] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 206.882301][T10838] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 206.882320][T10838] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 206.882340][T10838] warn_alloc+0x214/0x310 [ 206.882371][T10838] ? __pfx_warn_alloc+0x10/0x10 [ 206.882402][T10838] ? __get_vm_area_node+0x28f/0x300 [ 206.882423][T10838] ? nf_tables_newset+0x132b/0x2530 [ 206.882448][T10838] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 206.882495][T10838] ? alloc_pages_mpol+0x3cd/0x4a0 [ 206.882520][T10838] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 206.882545][T10838] ? rcu_is_watching+0x15/0xb0 [ 206.882565][T10838] ? nf_tables_newset+0x132b/0x2530 [ 206.882586][T10838] ? nf_tables_newset+0x132b/0x2530 [ 206.882604][T10838] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 206.882626][T10838] ? nf_tables_newset+0x132b/0x2530 [ 206.882648][T10838] ? nft_table_lookup+0x211/0x230 [ 206.882668][T10838] ? nft_set_lookup+0x128/0x150 [ 206.882684][T10838] ? nft_hash_privsize+0x2f/0xf0 [ 206.882706][T10838] nf_tables_newset+0x132b/0x2530 [ 206.882742][T10838] ? __pfx_nf_tables_newset+0x10/0x10 [ 206.882788][T10838] ? __nla_parse+0x40/0x60 [ 206.882812][T10838] nfnetlink_rcv+0x1132/0x2520 [ 206.882872][T10838] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 206.882945][T10838] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.882984][T10838] netlink_unicast+0x82f/0x9e0 [ 206.883011][T10838] ? __pfx_netlink_unicast+0x10/0x10 [ 206.883032][T10838] ? netlink_sendmsg+0x642/0xb30 [ 206.883049][T10838] ? skb_put+0x11b/0x210 [ 206.883073][T10838] netlink_sendmsg+0x805/0xb30 [ 206.883103][T10838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.883126][T10838] ? aa_sock_msg_perm+0xf1/0x1d0 [ 206.883145][T10838] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.883163][T10838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.883183][T10838] __sock_sendmsg+0x21c/0x270 [ 206.883203][T10838] ____sys_sendmsg+0x505/0x830 [ 206.883231][T10838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.883263][T10838] ? import_iovec+0x74/0xa0 [ 206.883288][T10838] ___sys_sendmsg+0x21f/0x2a0 [ 206.883311][T10838] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.883372][T10838] ? __fget_files+0x2a/0x420 [ 206.883387][T10838] ? __fget_files+0x3a0/0x420 [ 206.883414][T10838] __x64_sys_sendmsg+0x19b/0x260 [ 206.883438][T10838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.883471][T10838] ? rcu_is_watching+0x15/0xb0 [ 206.883494][T10838] ? do_syscall_64+0xbe/0x3b0 [ 206.883517][T10838] do_syscall_64+0xfa/0x3b0 [ 206.883533][T10838] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.883550][T10838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.883567][T10838] ? clear_bhb_loop+0x60/0xb0 [ 206.883587][T10838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.883603][T10838] RIP: 0033:0x7fe06278eec9 [ 206.883619][T10838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.883634][T10838] RSP: 002b:00007fe063698038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.883652][T10838] RAX: ffffffffffffffda RBX: 00007fe0629e6180 RCX: 00007fe06278eec9 [ 206.883665][T10838] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000c [ 206.883676][T10838] RBP: 00007fe062811f91 R08: 0000000000000000 R09: 0000000000000000 [ 206.883687][T10838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.883697][T10838] R13: 00007fe0629e6218 R14: 00007fe0629e6180 R15: 00007ffef500ad28 [ 206.883728][T10838] [ 206.967732][T10843] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 206.973290][T10838] Mem-Info: [ 207.272643][T10838] active_anon:8026 inactive_anon:0 isolated_anon:0 [ 207.272643][T10838] active_file:3537 inactive_file:39938 isolated_file:0 [ 207.272643][T10838] unevictable:768 dirty:275 writeback:0 [ 207.272643][T10838] slab_reclaimable:12889 slab_unreclaimable:103040 [ 207.272643][T10838] mapped:29482 shmem:1357 pagetables:1347 [ 207.272643][T10838] sec_pagetables:0 bounce:0 [ 207.272643][T10838] kernel_misc_reclaimable:0 [ 207.272643][T10838] free:1318421 free_pcp:12829 free_cma:0 [ 207.318084][T10838] Node 0 active_anon:32104kB inactive_anon:0kB active_file:14148kB inactive_file:159548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117928kB dirty:1100kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12660kB pagetables:5236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.350256][T10838] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.395340][T10838] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.426978][T10838] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 207.462894][T10838] Node 0 DMA32 free:1366288kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31956kB inactive_anon:0kB active_file:14148kB inactive_file:157972kB unevictable:1536kB writepending:1100kB present:3129332kB managed:2557376kB mlocked:0kB bounce:0kB free_pcp:35108kB local_pcp:16800kB free_cma:0kB [ 207.496212][T10838] lowmem_reserve[]: 0 0 1 1 1 [ 207.506197][T10838] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 207.566165][T10838] lowmem_reserve[]: 0 0 0 0 0 [ 207.603045][T10838] Node 1 Normal free:3892024kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16832kB local_pcp:9216kB free_cma:0kB [ 207.647109][T10838] lowmem_reserve[]: 0 0 0 0 0 [ 207.651879][T10838] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 207.700878][T10853] FAULT_INJECTION: forcing a failure. [ 207.700878][T10853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.723592][T10849] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 207.732508][T10838] Node 0 DMA32: 548*4kB (UM) 524*8kB (UME) 598*16kB (UME) 1002*32kB (UM) 570*64kB (UME) 422*128kB (UME) 332*256kB (UME) 252*512kB (UME) 180*1024kB (UE) 5*2048kB (UE) 200*4096kB (UM) = 1366288kB [ 207.738448][T10853] CPU: 0 UID: 0 PID: 10853 Comm: syz.7.1611 Not tainted syzkaller #0 PREEMPT(full) [ 207.738481][T10853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.738492][T10853] Call Trace: [ 207.738499][T10853] [ 207.738506][T10853] dump_stack_lvl+0x189/0x250 [ 207.738531][T10853] ? __pfx____ratelimit+0x10/0x10 [ 207.738549][T10853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.738568][T10853] ? __pfx__printk+0x10/0x10 [ 207.738590][T10853] ? __might_fault+0xb0/0x130 [ 207.738622][T10853] should_fail_ex+0x414/0x560 [ 207.738650][T10853] _copy_from_iter+0x1de/0x1790 [ 207.738676][T10853] ? rcu_is_watching+0x15/0xb0 [ 207.738695][T10853] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 207.738716][T10853] ? __pfx__copy_from_iter+0x10/0x10 [ 207.738736][T10853] ? __build_skb_around+0x257/0x3e0 [ 207.738759][T10853] ? netlink_sendmsg+0x642/0xb30 [ 207.738777][T10853] ? skb_put+0x11b/0x210 [ 207.738800][T10853] netlink_sendmsg+0x6b2/0xb30 [ 207.738828][T10853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.738850][T10853] ? aa_sock_msg_perm+0xf1/0x1d0 [ 207.738868][T10853] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.738885][T10853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.738905][T10853] __sock_sendmsg+0x21c/0x270 [ 207.738925][T10853] ____sys_sendmsg+0x505/0x830 [ 207.738951][T10853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.738980][T10853] ? import_iovec+0x74/0xa0 [ 207.739004][T10853] ___sys_sendmsg+0x21f/0x2a0 [ 207.739026][T10853] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.739082][T10853] ? __fget_files+0x2a/0x420 [ 207.739097][T10853] ? __fget_files+0x3a0/0x420 [ 207.739122][T10853] __x64_sys_sendmsg+0x19b/0x260 [ 207.739145][T10853] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.739175][T10853] ? __pfx_ksys_write+0x10/0x10 [ 207.739193][T10853] ? rcu_is_watching+0x15/0xb0 [ 207.739214][T10853] ? do_syscall_64+0xbe/0x3b0 [ 207.739234][T10853] do_syscall_64+0xfa/0x3b0 [ 207.739250][T10853] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.739266][T10853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.739282][T10853] ? clear_bhb_loop+0x60/0xb0 [ 207.739302][T10853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.739318][T10853] RIP: 0033:0x7f92f458eec9 [ 207.739346][T10853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.739360][T10853] RSP: 002b:00007f92f540e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.739378][T10853] RAX: ffffffffffffffda RBX: 00007f92f47e5fa0 RCX: 00007f92f458eec9 [ 207.739390][T10853] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 207.739400][T10853] RBP: 00007f92f540e090 R08: 0000000000000000 R09: 0000000000000000 [ 207.739410][T10853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.739419][T10853] R13: 00007f92f47e6038 R14: 00007f92f47e5fa0 R15: 00007ffd9998aea8 [ 207.739447][T10853] [ 207.947427][T10861] __nla_validate_parse: 3 callbacks suppressed [ 207.947443][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'. [ 207.953819][T10838] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 208.073078][T10838] Node 1 Normal: 134*4kB (UM) 38*8kB (UME) 45*16kB (UME) 127*32kB (UME) 33*64kB (UME) 12*128kB (UME) 3*256kB (UM) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3892024kB [ 208.091811][T10838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.102065][T10838] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.123500][T10838] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.142602][T10838] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.151929][T10838] 44828 total pagecache pages [ 208.162788][T10838] 0 pages in swap cache [ 208.171590][T10838] Free swap = 124996kB [ 208.178124][T10838] Total swap = 124996kB [ 208.186236][T10838] 2097051 pages RAM [ 208.193019][T10838] 0 pages HighMem/MovableOnly [ 208.197957][T10838] 425681 pages reserved [ 208.202232][T10838] 0 pages cma reserved [ 208.469593][T10880] netlink: 'syz.4.1620': attribute type 1 has an invalid length. [ 208.508045][T10880] netlink: 'syz.4.1620': attribute type 2 has an invalid length. [ 208.518448][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1620'. [ 208.518545][T10879] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 208.542938][T10880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.571217][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1622'. [ 208.579793][T10882] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1621'. [ 208.892582][T10896] lo: entered allmulticast mode [ 208.908924][T10896] tunl0: entered allmulticast mode [ 208.922556][T10896] gre0: entered allmulticast mode [ 208.932141][T10899] netlink: ct family unspecified [ 208.938445][T10899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.962706][T10896] gretap0: entered allmulticast mode [ 208.969929][T10896] erspan0: entered allmulticast mode [ 208.986559][T10896] ip_vti0: entered allmulticast mode [ 209.003922][T10896] ip6_vti0: entered allmulticast mode [ 209.009951][T10906] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1627'. [ 209.017639][T10896] sit0: entered allmulticast mode [ 209.030465][T10896] ip6tnl0: entered allmulticast mode [ 209.036171][T10896] ip6gre0: entered allmulticast mode [ 209.041803][T10896] syz_tun: entered allmulticast mode [ 209.047699][T10896] ip6gretap0: entered allmulticast mode [ 209.054899][T10896] bridge0: entered allmulticast mode [ 209.061123][T10896] bond0: entered allmulticast mode [ 209.071737][T10896] team0: entered allmulticast mode [ 209.077893][T10896] !: entered allmulticast mode [ 209.083616][T10896] nlmon0: entered allmulticast mode [ 209.095075][T10896] caif0: entered allmulticast mode [ 209.100654][T10896] batadv0: entered allmulticast mode [ 209.107067][T10896] vxcan0: entered allmulticast mode [ 209.112737][T10896] vxcan1: entered allmulticast mode [ 209.118301][T10896] veth0: entered allmulticast mode [ 209.123711][T10896] veth1: entered allmulticast mode [ 209.129112][T10896] wg0: entered allmulticast mode [ 209.136096][T10896] wg1: entered allmulticast mode [ 209.141279][T10896] wg2: entered allmulticast mode [ 209.146511][T10896] veth0_to_bridge: entered allmulticast mode [ 209.148249][ T49] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 209.152938][T10896] bridge_slave_0: entered allmulticast mode [ 209.167693][T10896] veth1_to_bridge: entered allmulticast mode [ 209.174244][T10896] bridge_slave_1: entered allmulticast mode [ 209.180461][T10896] veth0_to_bond: entered allmulticast mode [ 209.187098][T10896] bond_slave_0: entered allmulticast mode [ 209.198523][T10896] veth1_to_bond: entered allmulticast mode [ 209.205454][T10896] bond_slave_1: entered allmulticast mode [ 209.211470][T10896] veth0_to_team: entered allmulticast mode [ 209.218943][T10896] team_slave_0: entered allmulticast mode [ 209.225528][T10896] veth1_to_team: entered allmulticast mode [ 209.231715][T10896] team_slave_1: entered allmulticast mode [ 209.238145][T10896] veth0_to_batadv: entered allmulticast mode [ 209.244704][T10896] batadv_slave_0: entered allmulticast mode [ 209.250868][T10896] veth1_to_batadv: entered allmulticast mode [ 209.257381][T10896] batadv_slave_1: entered allmulticast mode [ 209.264614][T10896] xfrm0: entered allmulticast mode [ 209.270055][T10896] veth0_to_hsr: entered allmulticast mode [ 209.276937][T10896] bond2: left promiscuous mode [ 209.281720][T10896] bond2: entered allmulticast mode [ 209.287628][T10896] mac80211_hwsim hwsim28 wlan5: entered allmulticast mode [ 209.295137][T10896] mac80211_hwsim hwsim35 wlan6: entered allmulticast mode [ 209.302467][T10896] mac80211_hwsim hwsim36 wlan7: entered allmulticast mode [ 209.311013][T10896] bridge4: entered allmulticast mode [ 209.317486][T10896] bridge5: entered allmulticast mode [ 209.327392][T10896] bridge6: entered allmulticast mode [ 209.334020][T10896] bond3: entered allmulticast mode [ 209.340177][T10896] sit3: entered allmulticast mode [ 209.348463][T10896] vti0: entered allmulticast mode [ 209.360649][T10900] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1626'. [ 209.603657][T10932] vlan2: entered promiscuous mode [ 209.666430][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 209.906325][T10956] syzkaller0: entered promiscuous mode [ 209.912762][T10956] syzkaller0: entered allmulticast mode [ 209.972986][T10959] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 210.218255][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1650'. [ 210.333932][T10977] FAULT_INJECTION: forcing a failure. [ 210.333932][T10977] name failslab, interval 1, probability 0, space 0, times 0 [ 210.389460][T10977] CPU: 0 UID: 0 PID: 10977 Comm: syz.7.1653 Not tainted syzkaller #0 PREEMPT(full) [ 210.389487][T10977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 210.389498][T10977] Call Trace: [ 210.389506][T10977] [ 210.389514][T10977] dump_stack_lvl+0x189/0x250 [ 210.389539][T10977] ? __pfx____ratelimit+0x10/0x10 [ 210.389557][T10977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.389577][T10977] ? __pfx__printk+0x10/0x10 [ 210.389606][T10977] ? __pfx___might_resched+0x10/0x10 [ 210.389622][T10977] ? fs_reclaim_acquire+0x7d/0x100 [ 210.389645][T10977] should_fail_ex+0x414/0x560 [ 210.389675][T10977] should_failslab+0xa8/0x100 [ 210.389699][T10977] __kmalloc_cache_noprof+0x70/0x3d0 [ 210.389721][T10977] ? __kthread_create_on_node+0xef/0x3e0 [ 210.389740][T10977] ? __pfx_rescuer_thread+0x10/0x10 [ 210.389762][T10977] __kthread_create_on_node+0xef/0x3e0 [ 210.389784][T10977] ? __pfx___kthread_create_on_node+0x10/0x10 [ 210.389801][T10977] ? string+0x279/0x2b0 [ 210.389837][T10977] ? __pfx_rescuer_thread+0x10/0x10 [ 210.389856][T10977] ? __pfx_rescuer_thread+0x10/0x10 [ 210.389874][T10977] kthread_create_on_node+0xdd/0x130 [ 210.389900][T10977] ? __pfx_kthread_create_on_node+0x10/0x10 [ 210.389924][T10977] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 210.389954][T10977] init_rescuer+0x305/0x570 [ 210.389980][T10977] ? __pfx_init_rescuer+0x10/0x10 [ 210.390013][T10977] ? wq_adjust_max_active+0x195/0x4b0 [ 210.390040][T10977] __alloc_workqueue+0x176b/0x1b70 [ 210.390079][T10977] alloc_workqueue_noprof+0xd4/0x210 [ 210.390101][T10977] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 210.390123][T10977] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 210.390141][T10977] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 210.390173][T10977] nci_register_device+0x3f3/0x9d0 [ 210.390204][T10977] ? __pfx_nci_register_device+0x10/0x10 [ 210.390229][T10977] ? __raw_spin_lock_init+0x45/0x100 [ 210.390251][T10977] ? __init_waitqueue_head+0xa9/0x150 [ 210.390277][T10977] virtual_ncidev_open+0x129/0x1a0 [ 210.390307][T10977] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 210.390327][T10977] misc_open+0x2b9/0x330 [ 210.390353][T10977] chrdev_open+0x4c9/0x5e0 [ 210.390373][T10977] ? __pfx_chrdev_open+0x10/0x10 [ 210.390400][T10977] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 210.390430][T10977] ? __pfx_chrdev_open+0x10/0x10 [ 210.390454][T10977] do_dentry_open+0x950/0x13f0 [ 210.390490][T10977] vfs_open+0x3b/0x340 [ 210.390505][T10977] ? path_openat+0x2ecd/0x3830 [ 210.390528][T10977] path_openat+0x2ee5/0x3830 [ 210.390546][T10977] ? arch_stack_walk+0xfc/0x150 [ 210.390581][T10977] ? stack_depot_save_flags+0x40/0x860 [ 210.390616][T10977] ? __pfx_path_openat+0x10/0x10 [ 210.390632][T10977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.390670][T10977] do_filp_open+0x1fa/0x410 [ 210.390687][T10977] ? __lock_acquire+0xab9/0xd20 [ 210.390712][T10977] ? __pfx_do_filp_open+0x10/0x10 [ 210.390757][T10977] ? _raw_spin_unlock+0x28/0x50 [ 210.390779][T10977] ? alloc_fd+0x64c/0x6c0 [ 210.390814][T10977] do_sys_openat2+0x121/0x1c0 [ 210.390836][T10977] ? __pfx_do_sys_openat2+0x10/0x10 [ 210.390856][T10977] ? ksys_write+0x22a/0x250 [ 210.390880][T10977] ? __pfx_ksys_write+0x10/0x10 [ 210.390898][T10977] ? rcu_is_watching+0x15/0xb0 [ 210.390920][T10977] __x64_sys_openat+0x138/0x170 [ 210.390944][T10977] do_syscall_64+0xfa/0x3b0 [ 210.390962][T10977] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.390979][T10977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.390996][T10977] ? clear_bhb_loop+0x60/0xb0 [ 210.391017][T10977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.391033][T10977] RIP: 0033:0x7f92f458eec9 [ 210.391049][T10977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.391064][T10977] RSP: 002b:00007f92f540e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 210.391082][T10977] RAX: ffffffffffffffda RBX: 00007f92f47e5fa0 RCX: 00007f92f458eec9 [ 210.391095][T10977] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 210.391107][T10977] RBP: 00007f92f540e090 R08: 0000000000000000 R09: 0000000000000000 [ 210.391124][T10977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.391134][T10977] R13: 00007f92f47e6038 R14: 00007f92f47e5fa0 R15: 00007ffd9998aea8 [ 210.391166][T10977] [ 210.812258][T10977] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -ENOMEM [ 211.301201][T11013] netlink: 'syz.5.1660': attribute type 13 has an invalid length. [ 211.320490][T11013] netlink: 'syz.5.1660': attribute type 17 has an invalid length. [ 211.343248][T11013] lo: left allmulticast mode [ 211.356860][T11013] tunl0: left allmulticast mode [ 211.388003][T11013] gre0: left allmulticast mode [ 211.408412][T11013] gretap0: left allmulticast mode [ 211.480664][T11013] erspan0: left allmulticast mode [ 211.526964][T11013] ip_vti0: left allmulticast mode [ 211.545024][T11013] ip6_vti0: left allmulticast mode [ 211.565102][T11013] sit0: left allmulticast mode [ 211.597856][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1665'. [ 211.602788][T11013] ip6tnl0: left allmulticast mode [ 211.628504][T11013] ip6gre0: left allmulticast mode [ 211.660212][T11013] syz_tun: left allmulticast mode [ 211.704966][T11013] ip6gretap0: left allmulticast mode [ 211.730418][T11013] vcan0: left allmulticast mode [ 211.738326][T11013] bond0: left allmulticast mode [ 211.746351][T11013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.758018][T11013] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.767055][T11013] dummy0: left allmulticast mode [ 211.777891][T11013] nlmon0: left allmulticast mode [ 211.788163][T11013] caif0: left allmulticast mode [ 211.795938][T11013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.971725][T11036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1666'. [ 212.962308][T11076] nbd: socks must be embedded in a SOCK_ITEM attr [ 212.970159][T11084] netlink: 'syz.5.1682': attribute type 8 has an invalid length. [ 213.186927][T11090] __nla_validate_parse: 9 callbacks suppressed [ 213.186944][T11090] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1684'. [ 213.416774][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'. [ 213.981805][T11127] tipc: Enabled bearer , priority 0 [ 214.002326][T11127] tipc: Resetting bearer [ 214.024226][T11125] tipc: Disabling bearer [ 214.183393][T11133] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 214.241088][T11137] netlink: 'syz.2.1700': attribute type 1 has an invalid length. [ 214.306872][T11137] bond4: entered promiscuous mode [ 214.321850][T11137] bond4: entered allmulticast mode [ 214.344329][T11143] bridge7: entered promiscuous mode [ 214.349576][T11143] bridge7: entered allmulticast mode [ 214.594887][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1706'. [ 214.909811][T11182] netlink: 'syz.4.1715': attribute type 1 has an invalid length. [ 215.010310][T11182] bond3: entered promiscuous mode [ 215.021246][T11182] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.161151][T11192] netlink: 'syz.6.1717': attribute type 13 has an invalid length. [ 215.163077][T11190] netlink: 'syz.6.1717': attribute type 13 has an invalid length. [ 215.190647][T11192] netlink: 'syz.6.1717': attribute type 17 has an invalid length. [ 215.205323][T11190] netlink: 'syz.6.1717': attribute type 17 has an invalid length. [ 215.244142][T11192] lo: left allmulticast mode [ 215.260608][T11192] tunl0: left allmulticast mode [ 215.269581][T11192] gre0: left allmulticast mode [ 215.288181][T11192] gretap0: left allmulticast mode [ 215.330074][T11192] erspan0: left allmulticast mode [ 215.344148][T11192] ip_vti0: left allmulticast mode [ 215.351175][T11192] ip6_vti0: left allmulticast mode [ 215.359806][T11192] sit0: left allmulticast mode [ 215.368535][T11197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1719'. [ 215.375556][T11192] ip6tnl0: left allmulticast mode [ 215.386759][T11192] ip6gre0: left allmulticast mode [ 215.393942][T11192] syz_tun: left allmulticast mode [ 215.408126][T11192] ip6gretap0: left allmulticast mode [ 215.420299][T11192] bond0: left allmulticast mode [ 215.427364][T11192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.435152][T11192] team0: left allmulticast mode [ 215.440630][T11192] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.449497][T11192] dummy0: left allmulticast mode [ 215.456884][T11192] nlmon0: left allmulticast mode [ 215.465166][T11192] caif0: left allmulticast mode [ 215.470131][T11192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.491683][T11190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.519918][T11202] sctp: [Deprecated]: syz.2.1721 (pid 11202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.519918][T11202] Use struct sctp_sack_info instead [ 215.601934][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1723'. [ 215.667622][T11205] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1723'. [ 215.708606][T11207] syzkaller0: entered promiscuous mode [ 215.714477][T11207] syzkaller0: entered allmulticast mode [ 215.745910][T11218] netlink: 344 bytes leftover after parsing attributes in process `syz.6.1723'. [ 215.963830][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1730'. [ 215.977879][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1730'. [ 215.990024][T11229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1730'. [ 216.212536][T11240] tipc: Enabled bearer , priority 0 [ 216.239818][T11240] syzkaller0: entered promiscuous mode [ 216.245573][T11240] syzkaller0: entered allmulticast mode [ 216.285649][T11238] tipc: Resetting bearer [ 216.308803][T11238] tipc: Disabling bearer [ 216.825054][T11268] lo: entered allmulticast mode [ 216.832155][T11268] tunl0: entered allmulticast mode [ 216.845161][T11268] gre0: entered allmulticast mode [ 216.884707][T11271] FAULT_INJECTION: forcing a failure. [ 216.884707][T11271] name failslab, interval 1, probability 0, space 0, times 0 [ 216.903468][T11271] CPU: 1 UID: 0 PID: 11271 Comm: syz.2.1741 Not tainted syzkaller #0 PREEMPT(full) [ 216.903495][T11271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 216.903506][T11271] Call Trace: [ 216.903513][T11271] [ 216.903520][T11271] dump_stack_lvl+0x189/0x250 [ 216.903546][T11271] ? __pfx____ratelimit+0x10/0x10 [ 216.903566][T11271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.903585][T11271] ? __pfx__printk+0x10/0x10 [ 216.903614][T11271] ? __pfx___might_resched+0x10/0x10 [ 216.903630][T11271] ? fs_reclaim_acquire+0x7d/0x100 [ 216.903660][T11271] should_fail_ex+0x414/0x560 [ 216.903690][T11271] should_failslab+0xa8/0x100 [ 216.903714][T11271] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 216.903737][T11271] ? __alloc_workqueue+0x6a4/0x1b70 [ 216.903763][T11271] __alloc_workqueue+0x6a4/0x1b70 [ 216.903801][T11271] alloc_workqueue_noprof+0xd4/0x210 [ 216.903823][T11271] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 216.903853][T11271] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 216.903876][T11271] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 216.903908][T11271] nci_register_device+0x5bb/0x9d0 [ 216.903939][T11271] ? __pfx_nci_register_device+0x10/0x10 [ 216.903964][T11271] ? __raw_spin_lock_init+0x45/0x100 [ 216.903995][T11271] ? __init_waitqueue_head+0xa9/0x150 [ 216.904020][T11271] virtual_ncidev_open+0x129/0x1a0 [ 216.904045][T11271] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 216.904065][T11271] misc_open+0x2b9/0x330 [ 216.904090][T11271] chrdev_open+0x4c9/0x5e0 [ 216.904108][T11271] ? __pfx_chrdev_open+0x10/0x10 [ 216.904135][T11271] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 216.904164][T11271] ? __pfx_chrdev_open+0x10/0x10 [ 216.904185][T11271] do_dentry_open+0x950/0x13f0 [ 216.904220][T11271] vfs_open+0x3b/0x340 [ 216.904235][T11271] ? path_openat+0x2ecd/0x3830 [ 216.904258][T11271] path_openat+0x2ee5/0x3830 [ 216.904275][T11271] ? arch_stack_walk+0xfc/0x150 [ 216.904315][T11271] ? stack_depot_save_flags+0x40/0x860 [ 216.904353][T11271] ? __pfx_path_openat+0x10/0x10 [ 216.904370][T11271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.904410][T11271] do_filp_open+0x1fa/0x410 [ 216.904428][T11271] ? __lock_acquire+0xab9/0xd20 [ 216.904452][T11271] ? __pfx_do_filp_open+0x10/0x10 [ 216.904497][T11271] ? _raw_spin_unlock+0x28/0x50 [ 216.904518][T11271] ? alloc_fd+0x64c/0x6c0 [ 216.904554][T11271] do_sys_openat2+0x121/0x1c0 [ 216.904576][T11271] ? __pfx_do_sys_openat2+0x10/0x10 [ 216.904595][T11271] ? ksys_write+0x22a/0x250 [ 216.904619][T11271] ? __pfx_ksys_write+0x10/0x10 [ 216.904637][T11271] ? rcu_is_watching+0x15/0xb0 [ 216.904659][T11271] __x64_sys_openat+0x138/0x170 [ 216.904684][T11271] do_syscall_64+0xfa/0x3b0 [ 216.904702][T11271] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.904724][T11271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.904755][T11271] ? clear_bhb_loop+0x60/0xb0 [ 216.904776][T11271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.904793][T11271] RIP: 0033:0x7fb60fd8eec9 [ 216.904809][T11271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.904823][T11271] RSP: 002b:00007fb610cfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 216.904842][T11271] RAX: ffffffffffffffda RBX: 00007fb60ffe5fa0 RCX: 00007fb60fd8eec9 [ 216.904855][T11271] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 216.904874][T11271] RBP: 00007fb610cfc090 R08: 0000000000000000 R09: 0000000000000000 [ 216.904885][T11271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.904895][T11271] R13: 00007fb60ffe6038 R14: 00007fb60ffe5fa0 R15: 00007fff3a570758 [ 216.904926][T11271] [ 217.269997][T11268] gretap0: entered allmulticast mode [ 217.336743][T11268] erspan0: entered allmulticast mode [ 217.344783][T11268] ip_vti0: entered allmulticast mode [ 217.351607][T11268] ip6_vti0: entered allmulticast mode [ 217.359576][T11268] sit0: entered allmulticast mode [ 217.370754][T11268] ip6tnl0: entered allmulticast mode [ 217.379267][T11268] ip6gre0: entered allmulticast mode [ 217.387657][T11268] syz_tun: entered allmulticast mode [ 217.396115][T11268] ip6gretap0: entered allmulticast mode [ 217.413499][T11268] vcan0: entered allmulticast mode [ 217.420657][T11268] bond0: entered allmulticast mode [ 217.430785][T11268] team0: entered allmulticast mode [ 217.441212][T11268] dummy0: entered allmulticast mode [ 217.450314][T11268] nlmon0: entered allmulticast mode [ 217.456727][T11268] caif0: entered allmulticast mode [ 217.463318][T11268] bridge1: entered allmulticast mode [ 217.468779][T11268] bond2: entered allmulticast mode [ 217.474509][T11268] ip6erspan1: entered allmulticast mode [ 217.481464][T11268] geneve2: left promiscuous mode [ 217.493525][T11268] bond3: left promiscuous mode [ 217.508539][T11268] bond3: entered allmulticast mode [ 217.515107][T11268] syztnl2: entered allmulticast mode [ 217.522737][T11268] gre1: entered allmulticast mode [ 217.534213][T11268] gre2: entered allmulticast mode [ 217.545090][T11268] bridge2: entered allmulticast mode [ 217.560412][T11268] veth1_macvtap.3: entered allmulticast mode [ 217.597769][T11280] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.631217][ T1118] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 217.640365][ T1118] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 217.823415][ T1118] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 217.833300][ T1118] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 217.921660][T11311] tipc: Enabled bearer , priority 0 [ 217.998626][T11305] tipc: Resetting bearer [ 218.069686][T11304] tipc: Disabling bearer [ 218.156961][T11323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.202106][T11324] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20004 [ 219.007761][T10196] ================================================================== [ 219.016164][T10196] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350 [ 219.023722][T10196] Read of size 8 at addr ffff88807c9340a0 by task khidpd_16c05502/10196 [ 219.032043][T10196] [ 219.034445][T10196] CPU: 0 UID: 0 PID: 10196 Comm: khidpd_16c05502 Not tainted syzkaller #0 PREEMPT(full) [ 219.034464][T10196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 219.034473][T10196] Call Trace: [ 219.034479][T10196] [ 219.034486][T10196] dump_stack_lvl+0x189/0x250 [ 219.034505][T10196] ? __kasan_check_byte+0x12/0x40 [ 219.034524][T10196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.034538][T10196] ? lock_release+0x4b/0x3e0 [ 219.034559][T10196] ? __virt_addr_valid+0x4a5/0x5c0 [ 219.034576][T10196] print_report+0xca/0x240 [ 219.034588][T10196] ? __mutex_lock+0x801/0x1350 [ 219.034602][T10196] kasan_report+0x118/0x150 [ 219.034620][T10196] ? __mutex_lock+0x801/0x1350 [ 219.034636][T10196] __mutex_lock+0x801/0x1350 [ 219.034652][T10196] ? __mutex_lock+0x5bb/0x1350 [ 219.034667][T10196] ? l2cap_unregister_user+0x6a/0x1b0 [ 219.034683][T10196] ? __pfx___mutex_lock+0x10/0x10 [ 219.034697][T10196] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 219.034715][T10196] l2cap_unregister_user+0x6a/0x1b0 [ 219.034731][T10196] hidp_session_thread+0x3c9/0x410 [ 219.034748][T10196] ? __pfx_hidp_session_thread+0x10/0x10 [ 219.034761][T10196] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 219.034778][T10196] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 219.034794][T10196] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 219.034810][T10196] ? __kthread_parkme+0x7b/0x200 [ 219.034824][T10196] ? __kthread_parkme+0x1a1/0x200 [ 219.034839][T10196] kthread+0x70e/0x8a0 [ 219.034855][T10196] ? __pfx_hidp_session_thread+0x10/0x10 [ 219.034869][T10196] ? __pfx_kthread+0x10/0x10 [ 219.034884][T10196] ? _raw_spin_unlock_irq+0x23/0x50 [ 219.034896][T10196] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.034909][T10196] ? __pfx_kthread+0x10/0x10 [ 219.034924][T10196] ret_from_fork+0x439/0x7d0 [ 219.034939][T10196] ? __pfx_ret_from_fork+0x10/0x10 [ 219.034954][T10196] ? __switch_to_asm+0x39/0x70 [ 219.034969][T10196] ? __switch_to_asm+0x33/0x70 [ 219.035011][T10196] ? __pfx_kthread+0x10/0x10 [ 219.035026][T10196] ret_from_fork_asm+0x1a/0x30 [ 219.035047][T10196] [ 219.035052][T10196] [ 219.238426][T10196] Allocated by task 8516: [ 219.242742][T10196] kasan_save_track+0x3e/0x80 [ 219.247413][T10196] __kasan_kmalloc+0x93/0xb0 [ 219.251990][T10196] __kmalloc_noprof+0x27a/0x4f0 [ 219.256829][T10196] hci_alloc_dev_priv+0x28/0x2060 [ 219.261888][T10196] vhci_create_device+0x120/0x650 [ 219.266982][T10196] vhci_write+0x3ce/0x4a0 [ 219.271401][T10196] vfs_write+0x5c9/0xb30 [ 219.275683][T10196] ksys_write+0x145/0x250 [ 219.280005][T10196] do_syscall_64+0xfa/0x3b0 [ 219.284492][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.290468][T10196] [ 219.292822][T10196] Freed by task 8516: [ 219.296817][T10196] kasan_save_track+0x3e/0x80 [ 219.301489][T10196] kasan_save_free_info+0x46/0x50 [ 219.306502][T10196] __kasan_slab_free+0x5b/0x80 [ 219.311257][T10196] kfree+0x18e/0x440 [ 219.315230][T10196] bt_host_release+0x82/0x90 [ 219.319809][T10196] device_release+0x9c/0x1c0 [ 219.324427][T10196] kobject_put+0x22b/0x480 [ 219.328922][T10196] vhci_release+0x15a/0x1a0 [ 219.333413][T10196] __fput+0x44c/0xa70 [ 219.337380][T10196] task_work_run+0x1d1/0x260 [ 219.341959][T10196] do_exit+0x6b5/0x2300 [ 219.346102][T10196] do_group_exit+0x21c/0x2d0 [ 219.351292][T10196] __x64_sys_exit_group+0x3f/0x40 [ 219.356301][T10196] x64_sys_call+0x21f7/0x2200 [ 219.360967][T10196] do_syscall_64+0xfa/0x3b0 [ 219.365546][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.371452][T10196] [ 219.373763][T10196] Last potentially related work creation: [ 219.379471][T10196] kasan_save_stack+0x3e/0x60 [ 219.384147][T10196] kasan_record_aux_stack+0xbd/0xd0 [ 219.389343][T10196] insert_work+0x3d/0x330 [ 219.393860][T10196] __queue_work+0xbaf/0xfb0 [ 219.398342][T10196] queue_work_on+0x181/0x270 [ 219.403019][T10196] process_scheduled_works+0xae1/0x17b0 [ 219.408552][T10196] worker_thread+0x8a0/0xda0 [ 219.413646][T10196] kthread+0x70e/0x8a0 [ 219.417700][T10196] ret_from_fork+0x439/0x7d0 [ 219.422270][T10196] ret_from_fork_asm+0x1a/0x30 [ 219.427109][T10196] [ 219.429423][T10196] Second to last potentially related work creation: [ 219.436099][T10196] kasan_save_stack+0x3e/0x60 [ 219.440769][T10196] kasan_record_aux_stack+0xbd/0xd0 [ 219.445956][T10196] insert_work+0x3d/0x330 [ 219.450278][T10196] __queue_work+0xcd2/0xfb0 [ 219.454767][T10196] call_timer_fn+0x17b/0x5f0 [ 219.459341][T10196] __run_timer_base+0x646/0x860 [ 219.464183][T10196] run_timer_softirq+0xb7/0x180 [ 219.469105][T10196] handle_softirqs+0x283/0x870 [ 219.473861][T10196] __irq_exit_rcu+0xca/0x1f0 [ 219.478437][T10196] irq_exit_rcu+0x9/0x30 [ 219.482742][T10196] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 219.488359][T10196] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 219.494321][T10196] [ 219.496627][T10196] The buggy address belongs to the object at ffff88807c934000 [ 219.496627][T10196] which belongs to the cache kmalloc-8k of size 8192 [ 219.510667][T10196] The buggy address is located 160 bytes inside of [ 219.510667][T10196] freed 8192-byte region [ffff88807c934000, ffff88807c936000) [ 219.524536][T10196] [ 219.526861][T10196] The buggy address belongs to the physical page: [ 219.533869][T10196] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807c930000 pfn:0x7c930 [ 219.543965][T10196] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 219.552542][T10196] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 219.561030][T10196] page_type: f5(slab) [ 219.565012][T10196] raw: 00fff00000000240 ffff88801a442280 ffffea0001efe010 ffffea00009b5c10 [ 219.573753][T10196] raw: ffff88807c930000 0000000000020001 00000000f5000000 0000000000000000 [ 219.582431][T10196] head: 00fff00000000240 ffff88801a442280 ffffea0001efe010 ffffea00009b5c10 [ 219.591178][T10196] head: ffff88807c930000 0000000000020001 00000000f5000000 0000000000000000 [ 219.599927][T10196] head: 00fff00000000003 ffffea0001f24c01 00000000ffffffff 00000000ffffffff [ 219.608672][T10196] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 219.617329][T10196] page dumped because: kasan: bad access detected [ 219.623768][T10196] page_owner tracks the page as allocated [ 219.629466][T10196] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8503, tgid 8498 (syz.4.825), ts 142425666464, free_ts 139348317844 [ 219.650908][T10196] post_alloc_hook+0x240/0x2a0 [ 219.655765][T10196] get_page_from_freelist+0x21e4/0x22c0 [ 219.661648][T10196] __alloc_frozen_pages_noprof+0x181/0x370 [ 219.667443][T10196] alloc_pages_mpol+0x232/0x4a0 [ 219.672291][T10196] allocate_slab+0x8a/0x370 [ 219.676789][T10196] ___slab_alloc+0xbeb/0x1420 [ 219.681456][T10196] __kmalloc_noprof+0x305/0x4f0 [ 219.686381][T10196] ops_init+0x7b/0x5c0 [ 219.690557][T10196] setup_net+0x10c/0x320 [ 219.694825][T10196] copy_net_ns+0x31b/0x4d0 [ 219.699248][T10196] create_new_namespaces+0x3f3/0x720 [ 219.704558][T10196] unshare_nsproxy_namespaces+0x11c/0x170 [ 219.710266][T10196] ksys_unshare+0x4c8/0x8c0 [ 219.714759][T10196] __x64_sys_unshare+0x38/0x50 [ 219.719601][T10196] do_syscall_64+0xfa/0x3b0 [ 219.724091][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.730056][T10196] page last free pid 8412 tgid 8411 stack trace: [ 219.736362][T10196] __free_frozen_pages+0xbc4/0xd30 [ 219.741463][T10196] __put_partials+0x156/0x1a0 [ 219.746126][T10196] put_cpu_partial+0x17c/0x250 [ 219.750882][T10196] __slab_free+0x2d5/0x3c0 [ 219.755288][T10196] qlist_free_all+0x97/0x140 [ 219.759950][T10196] kasan_quarantine_reduce+0x148/0x160 [ 219.765478][T10196] __kasan_slab_alloc+0x22/0x80 [ 219.770329][T10196] __kmalloc_noprof+0x224/0x4f0 [ 219.775276][T10196] tomoyo_realpath_from_path+0xe3/0x5d0 [ 219.780824][T10196] tomoyo_path_number_perm+0x1e8/0x5a0 [ 219.786300][T10196] security_file_ioctl+0xcb/0x2d0 [ 219.791334][T10196] __se_sys_ioctl+0x47/0x170 [ 219.796183][T10196] do_syscall_64+0xfa/0x3b0 [ 219.800716][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.806800][T10196] [ 219.809219][T10196] Memory state around the buggy address: [ 219.814863][T10196] ffff88807c933f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 219.823000][T10196] ffff88807c934000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.831175][T10196] >ffff88807c934080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.839230][T10196] ^ [ 219.844413][T10196] ffff88807c934100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.852548][T10196] ffff88807c934180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.860596][T10196] ================================================================== [ 219.869902][T10196] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 219.877122][T10196] CPU: 0 UID: 0 PID: 10196 Comm: khidpd_16c05502 Not tainted syzkaller #0 PREEMPT(full) [ 219.886948][T10196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 219.897195][T10196] Call Trace: [ 219.900652][T10196] [ 219.903587][T10196] dump_stack_lvl+0x99/0x250 [ 219.908232][T10196] ? __asan_memcpy+0x40/0x70 [ 219.913057][T10196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.918263][T10196] ? __pfx__printk+0x10/0x10 [ 219.922851][T10196] vpanic+0x281/0x750 [ 219.926829][T10196] ? __pfx_vpanic+0x10/0x10 [ 219.931308][T10196] ? irqentry_exit+0x74/0x90 [ 219.935899][T10196] panic+0xb9/0xc0 [ 219.939636][T10196] ? __pfx_panic+0x10/0x10 [ 219.944156][T10196] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 219.950135][T10196] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 219.956015][T10196] ? __mutex_lock+0x801/0x1350 [ 219.960805][T10196] check_panic_on_warn+0x89/0xb0 [ 219.965779][T10196] ? __mutex_lock+0x801/0x1350 [ 219.970751][T10196] end_report+0x78/0x160 [ 219.975006][T10196] kasan_report+0x129/0x150 [ 219.979730][T10196] ? __mutex_lock+0x801/0x1350 [ 219.984737][T10196] __mutex_lock+0x801/0x1350 [ 219.989326][T10196] ? __mutex_lock+0x5bb/0x1350 [ 219.994086][T10196] ? l2cap_unregister_user+0x6a/0x1b0 [ 219.999646][T10196] ? __pfx___mutex_lock+0x10/0x10 [ 220.004661][T10196] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 220.010727][T10196] l2cap_unregister_user+0x6a/0x1b0 [ 220.016004][T10196] hidp_session_thread+0x3c9/0x410 [ 220.021138][T10196] ? __pfx_hidp_session_thread+0x10/0x10 [ 220.026853][T10196] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 220.032764][T10196] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 220.039019][T10196] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 220.045700][T10196] ? __kthread_parkme+0x7b/0x200 [ 220.050646][T10196] ? __kthread_parkme+0x1a1/0x200 [ 220.055659][T10196] kthread+0x70e/0x8a0 [ 220.059811][T10196] ? __pfx_hidp_session_thread+0x10/0x10 [ 220.065521][T10196] ? __pfx_kthread+0x10/0x10 [ 220.070192][T10196] ? _raw_spin_unlock_irq+0x23/0x50 [ 220.075372][T10196] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.080568][T10196] ? __pfx_kthread+0x10/0x10 [ 220.085148][T10196] ret_from_fork+0x439/0x7d0 [ 220.089812][T10196] ? __pfx_ret_from_fork+0x10/0x10 [ 220.094955][T10196] ? __switch_to_asm+0x39/0x70 [ 220.099714][T10196] ? __switch_to_asm+0x33/0x70 [ 220.104472][T10196] ? __pfx_kthread+0x10/0x10 [ 220.109168][T10196] ret_from_fork_asm+0x1a/0x30 [ 220.113997][T10196] [ 220.117356][T10196] Kernel Offset: disabled [ 220.121827][T10196] Rebooting in 86400 seconds..