last executing test programs: 5.996929988s ago: executing program 0 (id=7275): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="020000009008000006000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x20080810}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0xc5447a33c6f12b8e) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x2400c804) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0x107, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) r5 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r5, 0x0) accept4$nfc_llcp(r5, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000001200)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f00000011c0)={&(0x7f0000002900)={0x0, 0x801, 0x9f7, {r6, r7/1000+60000}, {}, {0x3, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x0, 0x1}, 0x38, 0x3, 0x0, 0x0, "3142edd6c93cf65cc9988dbd3725399c62ae5116c626c04b895492d6d03592fb7e08c9b933316467a6310ae95d9c3e68558396e3581cecd16dd127fb76ea17a0"}}, 0x80}, 0x1, 0x0, 0x0, 0xd4}, 0x48048) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @mcast2, 0x3}], 0x1c) r8 = socket(0x2b, 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) writev(r10, &(0x7f0000003500)=[{&(0x7f0000001440)="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", 0x1064}, {&(0x7f0000000f00)="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", 0x141}, {0x0}, {&(0x7f0000001240)="d35c99d267", 0x5}, {0x0}, {&(0x7f0000000300)="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", 0xbef}, {0x0}, {0x0}, {0x0}], 0x9) setsockopt$IPT_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x800000000}}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000024c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000001380), {[{{@arp={@multicast1, @remote, 0x0, 0x0, 0x2, 0x3, {@mac=@random="f9329b4532c2", {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0xe9, 0x9, 0x9, 0x9, 0x7, 0x3, 'batadv_slave_1\x00', 'netpci0\x00', {0xff}, {0x101}, 0x0, 0x281}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x81}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @empty, @private=0xa010102, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @rand_addr=0x64010101, 0xffffffff, 0xff000000, 0x5, 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xfff, 0x0, 0xfe00, 0x3, 'bond_slave_0\x00', 'veth1\x00', {0xbc202b40b47cd2d1}, {0xff}, 0x0, 0x109}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="8989336d22c1", @empty, @empty, @empty, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 5.65523677s ago: executing program 3 (id=7282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 5.482587795s ago: executing program 3 (id=7285): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="020000009008000006000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x20080810}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0xc5447a33c6f12b8e) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x2400c804) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0x107, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) r5 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r5, 0x0) accept4$nfc_llcp(r5, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000001200)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f00000011c0)={&(0x7f0000002900)={0x0, 0x801, 0x9f7, {r6, r7/1000+60000}, {}, {0x3, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x0, 0x1}, 0x38, 0x3, 0x0, 0x0, "3142edd6c93cf65cc9988dbd3725399c62ae5116c626c04b895492d6d03592fb7e08c9b933316467a6310ae95d9c3e68558396e3581cecd16dd127fb76ea17a0"}}, 0x80}, 0x1, 0x0, 0x0, 0xd4}, 0x48048) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @mcast2, 0x3}], 0x1c) r8 = socket(0x2b, 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) writev(r10, &(0x7f0000003500)=[{&(0x7f0000001440)="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", 0x1064}, {&(0x7f0000000f00)="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", 0x141}, {0x0}, {&(0x7f0000001240)="d35c99d267", 0x5}, {0x0}, {&(0x7f0000000300)="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", 0xbef}, {0x0}, {0x0}, {0x0}], 0x9) setsockopt$IPT_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xa000000, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000024c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000001380), {[{{@arp={@multicast1, @remote, 0x0, 0x0, 0x2, 0x3, {@mac=@random="f9329b4532c2", {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0xe9, 0x9, 0x9, 0x9, 0x7, 0x3, 'batadv_slave_1\x00', 'netpci0\x00', {0xff}, {0x101}, 0x0, 0x281}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x81}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @empty, @private=0xa010102, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @rand_addr=0x64010101, 0xffffffff, 0xff000000, 0x5, 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xfff, 0x0, 0xfe00, 0x3, 'bond_slave_0\x00', 'veth1\x00', {0xbc202b40b47cd2d1}, {0xff}, 0x0, 0x109}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="8989336d22c1", @empty, @empty, @empty, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 5.344391008s ago: executing program 1 (id=7288): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0xfffffffd, 0x1000, 0xfffffffd, 0x7ff, 0xf84, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, 0x0, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60020000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r3, 0x829, 0x4070bd2d, 0x25dfdbfe, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/188, 0xbc, 0x1, &(0x7f0000000200)=""/187, 0xbb}, &(0x7f00000003c0)=0x40) 5.198362814s ago: executing program 1 (id=7290): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40500ef000000007911c000646a52cdc38c211601c12800000085000000350000009500000000000010", @ANYRES16=r0, @ANYRES32=r0], &(0x7f00000002c0)='GPL\x00', 0x5, 0xd9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000c7de00007b8af8ff00000000bfa20007020000f8ffffffb703000008000000b704000000000000851e00000300"/67], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="28000000130a050000000000000000000a00000a08000340007a3000"/40], 0x28}, 0x1, 0x0, 0x0, 0x60008010}, 0x24008004) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000004c0)={0x1d, r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, 0x0, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000400"], 0x78}}, 0x0) bind$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ffffffe}, [@jmp={0x7, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r11, 0x4030582a, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r7}, 0x10) r12 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r12, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r12, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r12, &(0x7f0000000300)=""/74, 0x4a) connect(r12, &(0x7f0000000500)=@nl=@kern={0x10, 0x0, 0x0, 0x1408000}, 0x80) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 5.02716483s ago: executing program 0 (id=7294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@newspdinfo={0x54, 0x24, 0x1, 0x70bd29, 0x25dfdbff, 0x57a40aa3, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x8880}, 0x55) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xdcc4069e8be0ce0a}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001000), r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000180)="c1188e99b95d02ff4284860186dd8a01000080eedc37a2c4c1480c309b3db488eb304bafbae18b852d7840ee363e02c019d905b4f1d7", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x10) close(0x3) r5 = socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000180)={r7, r7, 0x7, 0x1, &(0x7f0000000240)='l', 0x7, 0x4, 0x7, 0x7, 0x3, 0x3, 0x2, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) syz_init_net_socket$x25(0x9, 0x2, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x28, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c014}, 0x20000000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r11 = accept4$unix(r5, &(0x7f0000000580), &(0x7f0000000600)=0x6e, 0x800) sendmmsg(r11, &(0x7f0000004e00)=[{{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0xfff, 0x2, 0x1c, {0xa, 0x4e24, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x80, &(0x7f0000002100)=[{&(0x7f00000006c0)="9b47e99c5330d7e205bd24259e4072fccfe399a28ca823fc2e55ef", 0x1b}, {&(0x7f0000001100)="931b58e1d4f60a26e7b9d68614cd2195c8d9ed5aad72360fe34f1c4e10e182256800fc23896255584d9ef898a9d792092a58522b44ad38f088687c455381a466d6882472f0d9785669e0aac7d6744bab7aedef3c03d791e8ce74d25e10d11514a7e1b78993b4d8b3f6546a93b70afeab460518096f9ea7bb5a0c6df891dcf16d87372dd8d7feea4222a08f92b666153b40ac87d4c68f07ce432b0ccaca1b41bc041fb6ffa990ecdb3d9fec038bb85b721b4b77307ffe3f165e9fc1461dfc2532cad2c869493c49b4650501261a5a7dc0ea8779a641ec2b5d8a27c5f9ee50bcd8529f57ca93b98ef994487e7c98f837f2f5e1788c224e3b8216c6435b77dfe6243245ff06dac3882ae301995c21566a669a9dbd9f77419abd4fa8b15ffdb05b8352ccfe14ecccfa3a9861233baf5f6564c3e8ddf6a14379de480b276ba2f780c4ba639e82fe2b018adbed2f7571c0637b303704927837455171c185c361b5824e8fe86b82f43c3f8459c10b92eea67ceaf4fa2910e257032042b2d26904d10d5ec02b112c2b50a3e5e4782a7559bfd90b09bc4fad28116f3d282b94b167673fd825f244d925ca245aec4e97569847b9e1bc0e9fc860baa1a1d93d19bde65310b0c594596a6980ee254218372a571bc5a90f114b36207ae50927746006e567149868c6367630c066a8bdb9ce3961509dc80b3cb0e92a15ca8dba0e7ae9e2409e245e2461c69ab3a25b0cfe495c7a72c82e99de93fe3953d2e8374c38d88b2657c9df7934b0952675c0bf2ac3aa1c18df73d9dac666e1b2af4385bb41cb8beb80b27f5f2fc692f57450c14dc94c904137f3c0894637248bd4258609421e9c4417f7978918d989825e2d0a47489a90834a4b287d4318f52b4b22d476101b7471cbe5ebf01eb27238af50bf3a4a7b4097da38b6125655da64402c4e61be7ef7fe26b0932d2e4087a067d81ed3f36a26b212bac6142e47b0b7b3f3cfbfada828ad5c60c27497327d386d97f643d1d0c8e5fe57b6de9ec808113c4832af10c80749884de13dea22340abc08aab606166cfaa25445f09afc05378eaad4ca849955a30ca1e7c23c597a16f1082da61205a13db3ba6fd655e1c5d9ca01fbcd4467599fa493006248dc3a830837ee3972523208e64150581f769cc08400e88524b2fad9f0321230a459206fac438b0438d9c3c3de7694f8ec5214cd778b1705a8402b77656a38c08f20faadb5b7262066647506aab1945528901b2340aed6bba7464beb069d18279230e5ef65e484f8b2c07adad68fcdc8e7bff6eb17f75ce6a5ed73c15b949b54955581dcef1b197dd72f3f5a7957e798bfa678ccf1d99aa4965520a801a2a231972384f03c0db5da529b4fa598505bec847a898058b049c8add5a1d643bf83c70bca18acf720c15d256a88e154920931ea1233a348e5333e686e7eacd2c84789c9c0c62a917af86c201ce00e84c8b0878b9c131bb8ca464664f858b2ee794fc841bf61b3ff0c1a32f89c821e49b4a44b9868561f8c2fac4e3f57ba47a14f0787cf5036036842b9b7be850297a1fc6fc31ace6febfd665206ed1a1a62e73d9bf5bf8606b7298489606123b2f3a5ff48ccbec974cc96ed045ff9f18acccf8a2ac805beb790e4ffd99966c45e2b5edf77de8d73e29433eb9fc5c33dabfb8c55eefd8f7ab56b3cd8452532362eaab41c1ee28cb9e0550176255b9c7374565210e000714929d7f9fc20e23e26d86af4291fe64a8c4ecf121083c5f5c60d1b8a8441799ef7b339d118ea9344ed6c7c0efad2d91de62f59d846827fdc1c68ae91e7bf377171b39b7c66b927a88e20916699dd76d17a787a1e613aa51548ca3c6f473d48b908d581b2ae0e17172cdd570aa457ed914ad09dfc32bc2bfbffe60b6c2af18f6ecd73132837e6b265ac525d9ce63fa283d587c4ae3d0c3e5014280e3989beac1c94e560f32a0d640b8f58ce1c5614f0d78460d0b92551cec7bac35786a66190a9f84c7c04842777b22cfa700d20e34a3fa17e3b90cd85fd4c609d4e5e71101c38aee38ed7bef0d89f86008972204ddb4fa4482df654ddee655dad9415eddcae038666950d28968cbf117a1e08e66509908d6c6985cfb8c8288912de080c50b2162f7cb4b39708358570a0e3aa574c283894e2ca312dfe9081b7aec811aa4e672e9ec21e75f2c459af1b77e10679807fdeea3ea574170a4f7cc937223309ca7499556ab487d33c8c4164ed628dca33c1c343892d31fc77bcedb90221178d6c62b8aaf6c8bebd90e19584e13a9d755bdca2a171bbf95b754e20e4592425e47009624aff193fa6a92c5a3123add7e910494930b09d2b3970725c644147476b1f55b0383860ddd3584a6a49d90c0b2bf2faf90018d9acb0d366cf6c739bbf14a7b29a75a5e67d4a8443824ff73f4bcd342aeba799e0f529c4ddf3bae9e7c70d160c61555c72b17fb43f12185152945eba9a777752fc831188907d4ade4aa933af6ac7471d51695f691e8d86b571be80ebde25f8c3afa0535ccb73316b2d399954dca3eeff1fa2775331c6b06263e42f8cda200ff4c4949b4d60cc2372c9f2e679f2c807c138a195f9497654342b4b53ef1401e8257dc50a9832534f7f78e6cf43d1b8767d5a461c8fbba95935111be9678a49e703cf0f403d6cfefd3373225cadcd4e553ded22b2831edd4175c0be035a4284dac41e7a794cbe75246e92f41432ca521eb2624c3a51889e3abc4cec9e59b09f81d6349299ff534a51544537fdbb60c86c1440109263391321c91082ffb62b87223a53248988d558ab5d31c8097a51bfd0088d0a028dd06c4b88053edbfeed91c2261597034d7cf9d56fd8f9f5ef6493c3f45681aa883abc78bbeb6a8c7dee0c4583ae1fee5cb67e2ad513e2cf9c238c08879a6e902cfc5274bbde4e8674a480eb1bf6738065b88f73447751c1dd8f6187a501ed2b270d7247427ab057f00a7f35714708595e22d288333c389c0506447e9cd915cd401ea2f33329d033f87c669b40ae8844ac1173582247bc6a5196290b0679c1d39aec8875df39eca2db8bb88cfab2042c02ffe71464a9c98877f397ef8e4bf1b6058e226387fc5c27d6f50edb4ce35ec3f63e41a15bd3da5901115a954995f2227a94d82b8bf2bb93da5d0239280d9c86e1841d6c46eef4f2091976873b79facdb6e2067b58351ad953c3826f6e34c67b75ea34ae93cf705e30ae26c92203e9f04db8c6d3e17b03ebf0e864ab9ca007551157a630137b00123f1864b22c00f8a332df05766a21e017fa87cb25e97dc4336d1fb63b5c82eb6493d5fadd5dcc7528bf77d1e0c6d8d60b5c5507b384281375bba5585191ebad5fc2b8529c87daa77277eba988f9f2bc237a2bff072d3c2d7199b44f0e216cc324109b6a66bbe325db7672c1d5bc0677494471a51dd09b140f346610fa3fd11f6694a4937ac59c48fe7578541c40b0fcb99d79dcbd6d53568ae859dea2db6ecba0f98f6b8b3692ffee7fa09877b376bd41e34af95e6558d52f8f78910b9fae4e696028b340264ac01fa5bec5932c04f14e358df33aa5b6f3478b2b07740d4c4a4ca4a6e234d2ba6e17031324f1fb7f6eca0ecf2ffdfeb49ce84498091b181979bf4cb85479ecad336a8e25786f40967ab73ec73a9e05508a81788a8b63a7332b5a69ba58d3b2f3805203da6b3e419a5dea52259821f2f5d0c3a4b94d40b8bfcec56fef18fb0a06d39bb0781d133cfb782b4ecefdd54ba6c90328f6167e9bdcc15847073487a29ccc596eec280bec6ff337c99187865c2e648b9405e6054d0dc854d9a6f94a1fbdc73c1da7ae5275ef28107013d904c2cdf5a62048018858784c02bfe1f77897822197a98b4c12ccaba1c31d5f2bac3abed7acfff2f9babe6fe00ed80c5600d8262c6f1c18ee70448b512af519b5adf22b76c21f8cd32a3cf68c6942cc7c8286976df9d6ae8f8e706a742042b3812e18317e655645b580c4d5d870dc69657992f1d7177c1cc3950dd4ac531c4ff17c86883315eeac91be5e358983d0b44e7618ff1e40647f06e398c20c7e1eec29c708796ff53c3889fe0db1f88e9878eeba24dce61d7c6b8c2ebcbcabbfadd49bb59c125be5f356a8318e3d0eb744b3802ad64449fce32d6c80a07cf4bce0122c1d0467cf3a782428848dd8d4870dc46ee552d257240365e5acde231924aae05a7d73323383e175f83f3e234feac8c2b061df693f6d92c9d0fb7a149cc72dbfe925b5c5f3bb4cf8996e7f8fd0b15f88c6e69060994d1fc1c7b5c135b825807d2a279bed3660d62c132e4264f1e5cf88937b4a3b2aec3b73a814da39b02ae31e8ae9d6dd215652b4516afc3c0b6dafad3fb7c11820fd06eebc69f78216bcbbd5c8cad2682167900e2763435c3d0d7ccf8f18c747a8d8d3b43fbec35083be10c4eef42c0c47aa6c6bf41430e20eb1240021fc82779172096129847d7c7c075dc876ed6fc1c42ab58587a547357bf878024d8762d07de90a6cc6e9c708f44c7e7e52867b60c5c2876e9013b3cbd75d7639e6df1184b9d315e462691febc226aca5e560da2296fcde50a69e6cade98913c2dc648347cee3fbff88353bb64e9eb9c697fb07a96d6863a8486bd83c6de3ce62468cc1811f62a7740386dd72c69a42e60e2314f4eb2e5305c615c3898a91cb79c849e563295408857f881d6a7462f9a88d564840e14a343dfb018d263c700cda97226bf874cae19fc61d169e0028cddb5a797599c520efffa97bd8d890eec911d6a0f1fed83e7f7f7f6bee94863226327d82443d0ac765a7de7cb54fbac68b8d46758b99051d58fbfa657fa5035164a62f392e00dce7b8bee1ee5956ec5871c24108df46d94146791a947af4899847697fd40f95e56b959c2b251e518cc500cdf46b8699a12a418d5229d5c049f54aa000ee588079f50b9ee2701b17795a9f9b5f0a3dc14012676a7f625a176d965eae787877df2cc13aa4301672496e925139f06e3f51a55196d029e8e8ccf84ef6fb7f4af390bc9886cff9915eb2fad35eb0cb61f56b19ee9338b1a538ddae347125f73c7c18e60bc900c4bdab6d553c24aa0a6cbf88ad74140538761629ee6a2ff6ff4ce75fb3c1c37b0d45ace6505fb193c1ebd90fe7e4e1b7b56bb090fd106cf339718e285faf6a92adc1cfe07a56bbbaadc7bd6e2a453b0ebbb8b5657a9de516761d52adef57d2a966f7a18b12b3ffa35df1524efee3d67427d8707012a72e398d137100ae69506edc5ef1b7010667d682461cb86db820d55bee76a20f9d89efc22177cd430e9635a2830be4726ef66b9c8265eaf38256352360ed971fd6231589cecb02ebf697ee10c798d60fe599ab36da48f4c8362e018df81f6795ed11a4bf6ccf05132cbf26e4dcb3bf2a6e87dcda90ceac64d17ce939187c20d9a7794411a6838c67f73e39d61e532166c1f74d8a7b834afce10a5136ff74fa0b0e02bca511162df1111c5d7111b2830dbccc7582c0ce06c15b35c702ebb873819346bfb6d5e0c53d3ae9a8cc79f53b22c98a353d1ed5b87c6834ea1bcb2c444274ff4810f6079fb95f83360f48dff2d686787d38e115c778d1f798c77c95a1b4df8e591dd38a176eeee37fef00b0015fdcb904da7e12493e2de9d0d9cbf278ea2739e458c784267fd360ff51103e31689b2ad0644eba7cea9c09909a21280f35d61525a4ca8342d1ab4138247db7daef9099641e6815a5443270b2838abb226e564f198046702d605ed25a27ab49ab2c96ba060f4605702f55ba1250ba9dfdb4740e87cb331048a26f705e5a5430f57b78", 0x1000}], 0x2, &(0x7f0000002140)=[{0xd8, 0x6, 0x61d, "7070c6025aaf0c37853a68a949e28d5d48f32ae562bb7e87e2454559ddabd103b74bbf76518a9e472b2f59609db347df431220ac41f9b4d1729b4d0556a37094ef8171b937bbc34568f8a7c6388180671e09b5d07fb513cd64bcad2572cd5c057d77c92041c8883b4d04de7363e60165734f44f7e371fb4fa598eaa091ae12ccd0f37668a672f9a9c09692a9ab6dcea5e2e7ac1635ae6cbae11bb80776b9ce4eb1a0edb7fbaad4bc4670883cac3ac2347a7316f7198125a71f691195eeca821dc926788f"}, {0xf8, 0x36, 0x4, "80332d489d4d5948b6857d278613497ec58a5c955c9e0f6caadfab0a301d04caf9a593bf47eb4fcc9e8ecca7195153bb36be7384350845a55270a64a0ef622e53a3913338711decf9f01085ff9eb75e83eaec622f918081a59e092dc8e23b55b1a316448d581775bc02355b9a438a9f0f20a49b9a127bd6567e27afcf404349dce979ff81bc144908323c41acbfe70c7302ad6cd5fa97f89287aff3898270224be034ff097e7e4794724292524bc20abe5f77212dfdbb3789d010d114b2022da2d93db61beedeee1cdeef3ddb3b5ee0deff1f06497f94c4047cbea82027e737ccc550ded1ede"}, {0x80, 0x29, 0x9, "08270f69c2964da63c21a4a58bd9a8f1f8647a1803ec2de361ba8699e4c27db14680843e87ceb6f57286eacbe203fee68856257dbe6bd4e681d084768d73efaf0c32c9107621dbe06503ad35bcbe95852be841fe4057769cf46bf0edbb3c5780b89460be7c333d758aa5114e656a1a"}, {0x38, 0x119, 0x0, "e1acc6edd6c525cb798bb878cbfdf09e9971a52169d77953b0a77bef61df82d5d7a87c57a3106b23"}, {0x90, 0x0, 0x7fffffff, "867cf7a9757030aa0b7b83417339768922c54a4fed5cb08e4b2ec4bd5945d5661e70f11d80457768824b48671e72c74806e46843263ba29a406e5500d6a3c45d69c9bc72ab9e16d6655551bdbe950ac3cb07afc9d134815004dfc58d9fd38f2a120ad615a111affb71a91a762f970c4cfdd251b18ef723c470bad3c6"}, {0xc8, 0x101, 0x7fff, "409d04a61373a1c68dd8ba2cf8de622af82d0961f4e77b8f0f9997cf76435eff40a3f8aa8c7c3d9f80cd2a2578f9b540fc7f4cc9c6ca8deb9923d8b4e5ddfe0cd67cf3fb08cd9761afe9e056fee65a1fd063785cd4ebdce3f1a1bfcb5f38d3a4c8989c7e6b408bf674240d37c635dc83340731f27c22b77379894aa5363c885920ceeea3e0d74895f26fbba66f986a48b325d464d450c8993e7ee07bb335323105a6eee81312e90e100f63fc6739e69e26e7b32ae1"}, {0x100, 0x10e, 0x8c1c, "6fc2cd30f9e74878febf56ef7dccbdf62d32c6efc5b219c1cc68357d27eab7c4f74c4abdefce87b3f18bafe9461b8440e22d6fd700e58df0b511b35287c1b9261a52bda01e2982c6d0840180e4d0919676203a09a5103ae6fd408b137d97fa3b888a167ea2bedee005f54de6df1a4e3107174771c68f9f91fda26ee0e107505fae4f684a6958382465cdc2cbef79e5d3b09b5f9571367b7ca4c6f3b7e549e04a7950d3a0adf19470aff47fa8fe9f2ca1fd4a8cf950f678c47533fad1fc9ce369ddf4cafa41df05f5b9bb97955993b42f3db3afbd110ba4f0586116304eb6109a3d9e5f644a5a076baefd2ef544885ab8"}], 0x4e0}}, {{&(0x7f0000002640)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8001}}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000026c0)="3ada30f10633804ff7", 0x9}, {&(0x7f0000002700)="0fc9501796fa3b802f8c2b15bc3cdb7013ff1c74d6f750658e4c89e912d71a26202f8bf68008535d657d83831c7a12cac7989d35d9533da3659c594127e9d37644bb36011f50a11d6a89659a95ed9443d08edb769f675d0eb25b7d04e998235486c3566e5c41a62a6eed2e417fa0dccc90c4d9a56ac77202ed869a3d741ac26a15dea79df3fc18da305cda88e96a6f2434f36fef9877538a1b69407d18b61fc8f02e0571b3479bc36770557617a2af26bd0301", 0xb3}, {&(0x7f00000027c0)="9061614c90ec9c901310f1ff0f28c58e8c22a2ed7e2e3f1e2fa993da0f7795cb74b0c8e6aea877f3c0284a81665d50b09a3aad8ad1ed93278dfdf988858023a1248a4110046065fa6b4a07c2c1d62e0f3e0441ceccbfced88cf2e941fa56bd85e34e93199b3c25203942aaf99e425c8a213281f418068dc5d7fd45779369c77382184ed44051b415615b43", 0x8b}, {&(0x7f0000002880)="24571ffa9a93ce1f31ed9cec3810236c7f473b58e262d6b05785bb1cf7c1198a60e582e14f9589ecdbea7eb0453cd509c0e4035f51883fece19eca5f926049da264f98039863a6d447192bfd50131e32b071941216b8e6f0078b284e043ae9bcd67892a1bc238087efde45be5aedd17352954eeb2316c0bdc180fae84a22d0c45b2605763411e7f0820ec78f8d96c503dfabd76d6d1b3d51ceed10c41942cf8f20936aa051c6303ba2c7e939edbfb5602e4c4d7da48b7e9be7d50693f2b2441d167d34d8b97ec3b41e7606103a6024d7077dc54f9f7e6c2c231832935e983e294b020d3d06c76c81c58734dd25d3421cea1a15", 0xf3}, {&(0x7f0000002980)="fff4ef5481d828a6cd46ea71dd4987bcca80178e85b9d366cf92cd5448262e1ae3c63071a0abb58828ba67bac76ae50e7893ed33f5ce1b1436f081b04b102dd97e9bc4f6119edfd1325512134268ddd40c5c66f36891f82f95232e64f3fea0f2a5cebe1a8f6fb887153e83518fff9c7b537cde9bcff9dcdfb18823338744fc3a276a201233cb82b15b2eb5f8c0bcd851583f5e9d4d8bac23c83b8ccd29f2fcce4e5c0b4579dd6e3433b900f88508c947a327bb3e1144b888316806731e860a914349f1c190d968f23168a7c90fb5edf902963d97fbc497f4427ca8a7de95254a6b60453187f8104a88e966939f673d1dadac4a52", 0xf4}, {&(0x7f0000002a80)="6e0fd4f4c0b3d623b56fe37486b07f5e8b3192cd8555c37f61e1931b7d527a61ae26f1e70efb1f5a8c1c2f7a83d88c7b953dfea10c598af4fadab19ebc638aecb0dee6404a085b84804a9db32675a0c8ba57927aa3e3cc0545df0c609cf35716733afac9942c913d1e26c072c7", 0x6d}], 0x6, &(0x7f0000002b80)=[{0x28, 0x118, 0x2, "d7bb5b07c780dcf49485bea97161722cab01"}, {0x28, 0x29, 0x0, "d7d9862703559ec3790757ba1c12b9581145183e"}, {0x68, 0x119, 0x9f41, "a3a395753642caf08d67e32a950b9bc0b037aab2e48c157fa14508e09914dba98b1833283680eac7396684fef6b533cbaeb7c317377f46e667b89da3ad1d13a70d3bee6e0cc1148ed64d68953e010c827a6e7c995a"}, {0x68, 0x84, 0x401, "f012aa5ec09d3f13ec5fdf1a03f94ffefcc9682210452da5cb3d6e1ce7b59d1d413aa6819312eca06d447b665cf8096126fdc9d14fc2222bda2ae84e880f23f0011024e8049b730bd641ad909873c0053acf60e2"}, {0xc8, 0x111, 0x4, "4d079e3d4ef781221227e3f10ec3748da8743442485c06bd50a9975c4f4d298f7fda0519def668d3dbf1e6ecc2b9b742b05821ecf9663da24a3aadcd30552236e55174a42d45baf60f81182c547e2271b4fa7161b004a6fb5205ccea35ba94a717142c164681dd69f5312a693b67dd1115d1f538455b02029c22671c7cbeb38d8423ed156164c32b6aafa3446bcc9f1ae1f5694633e8e93049c18f4e601a46cb5326a22abaab9fcf643aa504a286e66b96e09ee1"}, {0x100, 0x112, 0x51, "f35194396064e7a7396f2274e54cb20c00097e866c2d79a45d758ad4d81bce9915b60d71508b98bd303100cfeb9b24abc493d47696d5676326a49da3c7025417d4a298564cb25dd6cb24d5a13466c638406a3719c02783fdb8502684fe684d69888226d3ffabe6f36d2f8fd7a658a9ae0fca77b9405496318d3284608fa586bd8790648288edbd5416853476615ce65f540c11e76c7cf11246333b937ab30cb4e0c7d12cbdb8cc27d7469a52a9df2bf61a44bf2eaffd48985e5f439910503fb7973dd44ad708d5095a573e7ad5d4cff8a6c35dca3e5f43ae21699e2f693c8ff5bd858bde7d75b2dabdb0a5bae36bb607"}], 0x2e8}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000002e80)="c11f70a942859db76190f6af13c6185325ff61f6f57b8ade229a9eaa15ab71dfabcd0ff10dc521025f59193cf7ec932e41087aabdd1f12da2750148432a7cc6766a0fa2d61682f", 0x47}, {&(0x7f0000002f00)="00b5a57fd45772a67712047dbecafba416d16c01795df78b7b976144bd1b1c645682a5de9a5439709d2594a1eb5a6157caaf80efa54f6d081f485977252f67cc9e11da9ca145ef0a3d647431f1271947c2c25fc565fd0aba38cfaa9f1c40103467f34960deed9e03392a244a56ef41b429140a1988c4751dd06ea3e99fd26eabd0205e9d2418d12389444b0652c792ef10b929ceb114ab1f4407246ecff70ab5491b678a10f85553303995f2ad8cae44f02ee73ce3237004df899ada747713cd1b", 0xc1}, {&(0x7f0000003000)="d5ebb0b6509b137eed7bc97762ece859221a56c221c813", 0x17}, {&(0x7f0000003040)="6ca7be8cc0770f340b157db3367892c11c414f82822ad57c5e8ac909f93e3959a57b77b6aeed526c36cada9f3203ef16b836a19f9678ba0c7f0217f4a6", 0x3d}, {&(0x7f0000003080)="bbeef6aa0bcc65600531fb9d0b46916f271c6dd409110b14f997e627f96dbdb9f4770dd821d07b3d0c9e3a1f1745134adb2c5f7287717109a815afdb083b33463feee95b18ac78c3d3d6de0d70df06e278519e9f0c0a8762eb56535fae23b3a458ca374fe809c56fb7e34c5f464a4149807e7647d99ef1bb4a5e550da5dbabd8841a7f743cb2bc6e68c1a5787d", 0x8d}, {&(0x7f0000003140)="575fc15b02d306020a9c866ccc10a6ba418e0bc15ba4f4b04a484b7adb43baa06d2d11dbd751151e840f16943423ce2c3360b43637bf61f724b0196043e8460936126a1b57fed653e32c7e1ce2a0b521b6dac6da6100a087561b3b6fc4dda9ef602107480bbd34148ba7741d25cfbb51a6afe5b465afcce00be0f90c6f310c8e285a990b567cac102e142308632c49f1c9415864c19c404d1c7342c3460c47e50a09fb3f7fed38e1de06cb9b884691b40bdbe105f1", 0xb5}, {&(0x7f0000003200)="af2028b358c6052fea55bf555c9209704e4f6d40512efa2247cfd3437da75fc1d3887ce8019a7e14fb2379b73f8e593378d72ba6d76c79a9151f8f50e47ae3e1c687c3c93f9703c51f47dcde39a1afc729a1914f189ac6dbeabe520bbce0c1a50544c6abb72300e76f6aa215dbe46869cd1ab7ee637b16284c3e4d6f79fb6ae6410d54629a87ea611b431ade05e8d40d1768b73dce12e051be802ed1a668f72ba71466140f902c6365a709ad164423118c36a5d5493854bdbd7ccaa95fe0a8e5cadc43879b124b84c8089bce0d87c923a22da90c7ea96e7935e7e6598266b1b726acc859", 0xe4}, {&(0x7f0000003300)="663218c3db8f96189ed8e67d3c018065ec6181bfaa2cd25a6eacb9a6fd9f775c4aebad7a787dab6848e7c714cfe1c453c11ee000cb22c2f20ea149ed7887e39e223fb4a4dc5588bb5858b9b07656bf53728b09fb9a88bacc65d1b2f742ebebb754d5759217c256838cf67562cb0572dd42b309a2f58bb264839d07af022e1e7d3f2c885d5f154342acfc59a474ce6ac758b2a6b98b1fa153204c1979fe38a5c497a6c286270e6bb7b545971bfa3d46606f7b9bb85690c2563dcfbce134c399c837b07fdb30a5ac6a01c72e813325b54a6ef1716965520af46e5ad7b0801904d9c2ebcf58a1fb74fe2cf4e17077ab", 0xee}, {&(0x7f0000003400)="e57d3fd38d6f7feed3bb8decf5c4b2a58b9f023e5859ba95e4a5c8aafa3617a541f9f225db301e6fba13554119ab70c60e68c9cb6761e6e51620d6cbcd5bc803f9d162e0274a8b7429e0d38300ee527c1bb7eb5647ced32123c45251a5d1d467639819657895d6d8cb9b7cf7829da45e7c87497b88c09caa6c9c4e80897d", 0x7e}, {&(0x7f0000003480)="b77a84738b3b33ac1f28ba910ba1c798735fff889422b3d30b4801302941c40e00ccda06740515357841a50f4d7fc3", 0x2f}], 0xa, &(0x7f0000003580)=ANY=[@ANYBLOB="80000000000000000100000008000000b14fd9b736136aa2f24c7d08605a91410b80b7587af1f740897fde601bf9cf8a74b2f6038b971a66516f468dda3856259dbad89487444989129d665b403a4843b8ff96cb5bc2005b45bb617d96578bf85cffd6157025ba71a8a64f8400"/124], 0x80}}, {{&(0x7f0000003600)=@qipcrtr, 0x80, &(0x7f0000003780)=[{&(0x7f0000003680)="aaa65fe99f7a6e692e43d81229ab0f46b1c259a872de19e0910c959f7068f16d2ea2d3ed512c6f67876302106ebcf986f9cdeb1ed346933706802773a9fc9134aebf", 0x42}, {&(0x7f0000003700)="78e88a05df3c31754de22e4863139aeef7e6c78b70aa30f830dcd322fac0ee0a7ee5ccbfa8983e81c27aa3c3fdc183d0e4cf4b8078b2dd2163c2cd5dcfe5ef976562bf0bcc77c6e6b3e6dea57fefbaab3c2105254f494dd5c1257f42f39fd466cd6e83bf895a4e05a45cc427878d633b174cc9a13b5362a0db53134ec9ea", 0x7e}], 0x2, &(0x7f00000037c0)=[{0xf0, 0x114, 0x8, "c0db0210febabfc7d3e787604d3c551ba1d7554381505f0547f67a56ec07129e4c5238c0bcf6c70dc6f000ea165510514c8f2a7edf8d86958aefb5aff9145e6e9c8157e002a4533154fd9b7a0d9daa3c3b9232d153dd1e98c50e4b682ce0e7e041e930c0e316de14f327664068c8768e6b9e959618095e387800734c4fd91a01efc2158af02ae8ae986ea80798d734c845693ade6849c0eac05cd38a5843bc51fd03ce44eef8d161e77793ee8650959cc6874f1228a1b837af18911856b73a9b98f94bdd713509c03b9215f24fa64f904a42cd6f4428dce535dc"}, {0x70, 0x3a, 0x6, "66716e361b33e859d69ac6109832d08e94645810d7a2072e6815e06948c70a9011f523e1fa7bbf8b391fba69d2389c547bb009997e09faf2024088d358a938b0d4c25cdfbc9f716c4e2d90927dad5f318f466a7a03c97b98fb7c"}], 0x160}}, {{&(0x7f0000003940)=@caif=@rfm={0x25, 0x1, "faf9b48820f7ae476bdb33d078328d3c"}, 0x80, &(0x7f0000004b40)=[{&(0x7f00000039c0)="7784d63dd0e9a9795ac56a90238e5d7e37cde28cbfb92c4f39ad980ee6b84cd838b6586dd140a2dc84c3a87cb64f1cc5a74fabb5045e9316f17180d1b3a81de68a9e11adbd822951f655fc43f249b0eaf3d0f020715d5f59c5e98702ab80d68f69b2a52359bbd9bfb7d78c3b15e7ece85ae1d0ca5559bf0ea077c38b4031d597f45dddbc672bf06755e00cc2fe9e351e53ec5026d94b3d2edeb3716a1b503d890d59b6a07263b0d9898a7f29912be23e382eb6a2f574b52eae7141a53e1ffd5fe8c1f247909db62ee9c857d0b328bfcbc6f77e9e7d43461b6917ed7610abf1b81a0a109a", 0xe4}, {&(0x7f0000003ac0)="90f54982dd1207f2837aa1003d1de0968e48fcfabf46269bfaa45fb9ee8aaa6c8f9ac2cdc7578e30eff070d41c5798362daad16f8d9f8387c7f2403a97ae64f6099968633438fa57d52ccb3973a290", 0x4f}, {&(0x7f0000003b40)="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", 0x1000}], 0x3, &(0x7f0000004b80)=[{0x58, 0x111, 0x9, "c029ae7bea99817acc134b2ed3afb2ce87a4569b3514e314b8c14ecf9b9c279bf2032bd02be15c114413eac3f83350020c4d921a0abb6ed80184272d879c1773bd80"}, {0x88, 0x6, 0x9, "58eee6dd366529e017484077154bd02d8766c18887ba3e7929873fac319f27c70d25a6117a0103aa1ad96ac5467b780fd2e3d57027e0a9835bbd3704237ad46e0eb80c6ea9bf7e42a201b4aa078ccf85434f65d6bdff423164df97ef57dd1b75e3bcf855c2d3b123e0611db452ccdc6890ae"}, {0xd0, 0x109, 0x9, "a904d89e85dca0f2b59c1112b1481a4ac40fd2df2e6fbab69bbba99a890dfa037a70f0f5fdfa324dfaa24186b9f86622c588624e95d8f2b5e98366cb4867637d5d1f99296b1b9a714344f322fed26d78f8be1ae9d4709fcf6bf0ab1c8c4db873c3d97cef1c698965859366044dd0e0cea4698f5f5f701cf4aab86d56312ad29f46398acedfd3399559046c9ea3945964e7a498c1c7fb4c643cf0d72a7f93942102caf27880da0da56e7438d70d378cfed2d1e7258511101c4a"}, {0x20, 0x116, 0x4, "7510a0cc72b1b170c741"}], 0x1d0}}], 0x5, 0x88c1) 4.958383994s ago: executing program 4 (id=7296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x260}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value=0xff90}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4.836859846s ago: executing program 4 (id=7297): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x5, 0x6) getsockname$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x6e) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4c054) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xa, 0x7ffe}, {0xffff, 0xffff}}, [@TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x5, 0x1, 0x1, 0x5, 0x402, 0x3}}, {0xa, 0x2, [0x6, 0xa54, 0x9]}}, {{0x1c, 0x1, {0x4, 0x9, 0x4f7, 0x4, 0x0, 0x2, 0xf7, 0x5}}, {0xe, 0x2, [0x5, 0x2, 0x5, 0x9c0, 0x153]}}]}]}, 0x7c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x6}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2}}, 0x26) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000500)=0x2) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0xfffffffffffffffd, &(0x7f0000000240)) ioctl$PPPIOCBRIDGECHAN(r10, 0x40047435, &(0x7f0000000200)=0x401) 4.764268729s ago: executing program 0 (id=7298): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000340)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008880) r2 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000a9a00190004000400000007fd17e5ffff08000400000000000000", 0x3a}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0xff, 0x6}, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @mss={0x2, 0xcd4}, @timestamp], 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffffff}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @l2={0x1f, 0x5e, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x2}, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0xc, 0x3}) accept4$inet(r6, 0x0, &(0x7f0000000140), 0x800) 4.429826078s ago: executing program 3 (id=7300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x14, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="7d76d21808184e67479968535847189b664e230e1b941beca9f07cff8774", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000600)="4fffe3ab59ae73fbb0d00ec31d80de9be9d8dd980cbcaee82f55347b63a9208372b62ee9b4b41c9a5e65a22dd6fb36b716b8dae8093edd78f440a3b4f000fe67eb7fbd7ea83559114724cf7cb29f2df58d3244991cb8de1d63a1d25e697509edc9ef57c6ba6ed654aa1e66c1bcb123acde911a517cb36b3d4bf43516b2108ed815480c324f5064c59dc9cf81e56f2bf06ae5c87d", 0x94}, {&(0x7f0000000800)="5c522807adac5e928247d13837679e7982a322931666054386e7195bb6d7d047c0a3265027c54ae834513726478c5b", 0x2f}], 0x2, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x28044854}], 0x1, 0x804) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/66, 0x96}, {&(0x7f0000000200)=""/61, 0x3d}], 0x2}, 0x151) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 4.333604836s ago: executing program 3 (id=7301): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x6e04a47b48108908) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x7}, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x3) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}, @IFLA_BR_STP_STATE={0x8, 0x32, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) 4.284011677s ago: executing program 1 (id=7303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xb, 0x0, &(0x7f00000002c0)="63eccd8e00000000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.134121572s ago: executing program 1 (id=7304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'team_slave_0\x00', 0x4000}) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa300000000000007"], 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 4.042060987s ago: executing program 2 (id=7306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 3.948002259s ago: executing program 2 (id=7307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x260}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value=0xff95}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.830629874s ago: executing program 2 (id=7308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.993770904s ago: executing program 2 (id=7309): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB="0000000000000000000000000000010000000000", @ANYRESHEX=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x40010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000020601020000000000000000000000001400078008000640000000030800084000000030050001000600000005000500070037000d0003006c6973743a736574000000000900020073797a31000000000500040003000000c31ee7d2ca6b86cfe3494c50e5c65fbd49bbcce4b41cbd6169e08f7bb7fdb3f0e24b"], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffcffff03400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000077decc51000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060002"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x1f, &(0x7f00000006c0)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x16}, [@alu={0x4, 0x0, 0x8, 0x7, 0x4, 0x6, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ldst={0x1, 0x0, 0x4, 0xb, 0x8, 0x20}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x34}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xc}, 0x94) unshare(0x22020400) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731315806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) 1.100833805s ago: executing program 3 (id=7310): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4040045) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001000700"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "fe8000000000"}}}}}}}, 0x0) 1.074049312s ago: executing program 1 (id=7311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000206010800000000000000000700000114000780080011400000008b05001500050000000500010006000000050005000200000005000400020000000900020073797a30000000001100030068e913c1a769702c6d61726b0000000015000300686173683a69702c706f72742c6e6574"], 0x78}}, 0x0) 1.027206007s ago: executing program 0 (id=7312): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40440d9) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070021000000000000000000000000000001050004000100000008000a00", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.025443953s ago: executing program 4 (id=7313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9c3b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 926.064358ms ago: executing program 2 (id=7314): r0 = socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) socket(0x2000000015, 0x80005, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x80008, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x890) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbdf255d00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000001f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001f00)={&(0x7f0000000680)={0x1864, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x81, 0x4e}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x44, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x28, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast2}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @broadcast}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x12, 0x8, {0xb, 0x7, "584ad69ddf85"}}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x574, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1a4, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xd7, 0x8, {0x81, 0x10001, "2b9a6c5b4e66619b86c30be172050a117fac5dc4cc75f80ab20097fddc1dca0d4466e61108dc5ac69118633e013b20053751a92a3fc01d4784f56c12b6058fd7cb264e7dd508922c5426833f44a20a72b9cefbc48f724bbe1e71a25928a1421105bea64f2ecf4adc19f05a0051c4a728dd8031ad8331cd607907344bf57c5c54f6f621513889d846319f82a8455055b123739974e104e498aa15b40350f7dda3109e2cf8fec9a2b707f9eda60ee43ce5c35d7b731f574bde3f8026bee8caeba5135c176f44192818e9faba"}}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xc8, 0xb, "d52f86abb81e511fce4ef5be9cdb4d05006bf8def522f3811e488e9ce153d65cbb797f67df1b5d935ecc4cdb6762b24871ceedd9eef4d74ec6c48a9287bcf7be750ada575510ae1abb5f4998a55b1afd893acfe0ede6082e5798972b57bcd59af5eba35db7df975fae7c21e0bf89151e79d707dab742373c5cece17c218fb3fe78619e0154b82166e4fa0f45a5667c7332d7066bbba6eb8e16f4f7ab45f6b22aafb2a9d19e7328d53a0e008c4ebf459f0fdead0d1fb8992fe34a00b0794e41b0965c2979"}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x3b4, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x2c4, 0x84, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xf6d}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffff8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4dd63a3d}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x101}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x200}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xe3}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x530}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xe}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}]}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4a}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffb}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4f8f41c8}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xecd}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xb, 0x1, @random="151fbf934d9517"}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0xff}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xfffffffd}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x400}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x80000000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x15, 0x1, @random="415916b8d9ef380745dfef25e6ccc0214e"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80000001}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x3ff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x22, 0x1, @random="1a9211e134751d6bc7b01b6d63d07eac55f0de4ab22b262696a86105c339"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80000001}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x22}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}]}, @NL80211_ATTR_IE={0xb8, 0x2a, [@random_vendor={0xdd, 0xb2, "08918cc4bd8f36a168780a5ced2190ed97796330d6fec68ac46e6e3b78271fcd008868f3b317c26e889c6e9280105042b96578a177762811b31f83cd29a71f3016d593a14a921a0d748c9b2d28501dfc9e85a897de93881f4149624022d0293d88c450c09eacc2b4a7c9bc6b0bfd7be00952d1e11857ab4bedea70eeb5c6460452f7deb3d1cfe81d064c32dab838a570a5223fd3d52b1b2ae8b787275ac1297b9271406be3bb01411ad2b4df0eacb20281d2"}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x74, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x5c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SSIDS={0x48, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xc, 0x0, @random="0a970f282069dc70"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x6, 0x0, @random="48c7"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x11e0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0xc}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x11b0, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x103, 0x6, "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"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x2, 0x2, 0x5}}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @private=0xa010101}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x1004, 0xb, "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"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x6e, 0x8, {0x3, 0x3, "8dd451b864fef3032ca088c27bc41561743b13b25afa74806783d16c1bad01aef9f1b74923e99caf3680babf0f8e1dca98bcedefa75ff88b84c77235ac5b91659ef3372ef4c780efab0aeca33c2df965b3c0ac4e58bbdcc80bf9bf2bd72e6f53e145"}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x7}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast2}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x14, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x3}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast1}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0x1864}, 0x1, 0x0, 0x0, 0x40}, 0x48091) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x3c}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020014000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x2}}, 0xb8}}, 0x10) 925.734378ms ago: executing program 3 (id=7315): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000100000000000000000000000000000000000000004d73cc73386c80fa1f3928b413751bfc0e05f807f8a26682cb86d93e8c3947c28fa000000000000000000791a68007bf2cdffcb12ceab05dc4efc8081c80a3baf3d24bc4b426a4154c9f3fb08e1734ab1816dee116e689119f3dccda248ee9dadd35cf666bc1f9434b238c4a05e2c6c6befef76d5cc6fef8a465afd7f64e0d0afa6064c0a5d29a421533ece8840ea2527b6d6dd109a28df76de85c8beed243baece2a9f83b09bf8a5c500"/214], 0x50) syz_emit_ethernet(0xaa, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x2d, 0x10, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16, 0x3}]}, 0x10) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c864) sendto$inet(r6, &(0x7f0000000c80)="e8", 0x1, 0xa8050001, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r7, 0x1, 0x4d, 0x0, &(0x7f0000000040)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) 869.488356ms ago: executing program 4 (id=7316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) socket$inet(0x2, 0xa, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) 437.059929ms ago: executing program 4 (id=7317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 304.832734ms ago: executing program 4 (id=7318): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xb, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) epoll_create1(0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x81}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fbdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) recvmmsg$unix(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf25000000067507193808f91011f8b88bec1f3583034e3158d5a5297586c5e050382dc67a9c649069229f58a28b9c24897f8f087f60b5dcdabea2f21f179d1ba6868fae1759c8050a682ba7ac3871539b49e3762d3aafe64171e587342739ac829fd0ee729524b9", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) readv(r9, &(0x7f0000000780)=[{&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000600)=""/47, 0x2f}, {&(0x7f0000000280)=""/90, 0x5a}, {&(0x7f0000000080)=""/49, 0x31}], 0x6) recvmmsg(r1, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) preadv(r5, &(0x7f0000003c00)=[{&(0x7f0000001480)=""/255, 0xff}, {&(0x7f00000000c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x5, 0x23a1, 0x1) 131.148342ms ago: executing program 0 (id=7319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000001008000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000054000000060a01040000000000000000010000000900010073797a310000000008000b40000000030c000640000000000000000314000480100001800b0001007470726f787900000900010073797a30"], 0x7904}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 64.051624ms ago: executing program 1 (id=7320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000840)={0x0, 0x8, 0x2}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9531, 0x0, 0x0, 0x0, 0x5a, '\x00', r3, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0xffffffff, 0xd7c7, 0x401}, 0x10) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000b0000000000000008000ac0b3c60000", 0x24) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="63eccd8e0000000000000000b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)={0x6, 'erspan0\x00', {0xb6}, 0x6}) 15.910878ms ago: executing program 0 (id=7321): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6", 0x23}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c95001", 0x9e}, {&(0x7f0000001340)="641a6a2b8647e6b5208cf9", 0xb}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 0s ago: executing program 2 (id=7322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'team_slave_0\x00', 0x4000}) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa300000000000007"], 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): 94424][T27833] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 952.994455][T27833] sctp_connect_new_asoc+0x2ff/0x6b0 [ 952.994482][T27833] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 952.994512][T27833] ? __local_bh_enable_ip+0xd0/0x130 [ 952.994536][T27833] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 952.994561][T27833] ? security_sctp_bind_connect+0x7e/0x2c0 [ 952.994596][T27833] sctp_sendmsg+0x159b/0x2d00 [ 952.994647][T27833] ? __pfx_sctp_sendmsg+0x10/0x10 [ 952.994683][T27833] ? aa_sk_perm+0x6d5/0x900 [ 952.994723][T27833] ? sock_rps_record_flow+0x19/0x350 [ 952.994758][T27833] ? inet_sendmsg+0x298/0x320 [ 952.994785][T27833] ? __pfx_inet_sendmsg+0x10/0x10 [ 952.994809][T27833] sock_sendmsg_nosec+0x10e/0x180 [ 952.994836][T27833] ____sys_sendmsg+0x54e/0x850 [ 952.994876][T27833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 952.994921][T27833] ? import_iovec+0x73/0xa0 [ 952.994957][T27833] ___sys_sendmsg+0x2a5/0x360 [ 952.994989][T27833] ? __lock_acquire+0x683/0x2cf0 [ 952.995024][T27833] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.995100][T27833] ? __fget_files+0x2a/0x420 [ 952.995127][T27833] ? __fget_files+0x3a2/0x420 [ 952.995168][T27833] __x64_sys_sendmsg+0x1b1/0x290 [ 952.995205][T27833] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 952.995260][T27833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.995285][T27833] do_syscall_64+0x174/0x580 [ 952.995315][T27833] ? trace_irq_disable+0x3b/0x140 [ 952.995343][T27833] ? clear_bhb_loop+0x40/0x90 [ 952.995370][T27833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.995393][T27833] RIP: 0033:0x7f9daf59de59 [ 952.995415][T27833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.995434][T27833] RSP: 002b:00007f9dad7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.995457][T27833] RAX: ffffffffffffffda RBX: 00007f9daf825fa0 RCX: 00007f9daf59de59 [ 952.995474][T27833] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000004 [ 952.995499][T27833] RBP: 00007f9dad7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 952.995512][T27833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 952.995525][T27833] R13: 00007f9daf826038 R14: 00007f9daf825fa0 R15: 00007ffc2363d0c8 [ 952.995559][T27833] [ 953.963834][T27862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6225'. [ 954.010427][ T1176] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.020853][ T1176] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.042137][ T1176] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.053750][ T1176] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.164470][T27836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6218'. [ 954.235745][T27877] netlink: 'syz.4.6229': attribute type 1 has an invalid length. [ 954.275505][T27877] netlink: 236 bytes leftover after parsing attributes in process `syz.4.6229'. [ 954.318710][T27881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6229'. [ 954.344779][T27883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6231'. [ 954.410366][T19888] hid-generic 0005:0007:0007.0032: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 954.463940][T27883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6231'. [ 954.522832][T27892] bridge3: entered promiscuous mode [ 954.530407][T27893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6231'. [ 954.562164][T27892] bridge3: entered allmulticast mode [ 954.678173][T27895] fido_id[27895]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 955.548918][T19888] hid-generic 0005:0007:0007.0033: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 955.652548][T27940] fido_id[27940]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 956.107283][T27948] bridge2: entered promiscuous mode [ 956.122933][T27948] bridge2: entered allmulticast mode [ 956.157993][T27948] team0: Port device bridge2 added [ 956.233464][T27952] macvtap1: entered promiscuous mode [ 956.249454][T27952] vlan0: entered promiscuous mode [ 956.478704][T27965] sch_tbf: burst 0 is lower than device ip6gre0 mtu (5376) ! [ 956.498458][T27963] netlink: 'syz.4.6252': attribute type 1 has an invalid length. [ 956.617262][T27963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 956.662026][T27974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.675883][T27974] bond1: (slave bond0): making interface the new active one [ 956.687144][T27974] bond1: (slave bond0): Enslaving as an active interface with an up link [ 957.215533][T27997] bridge3: entered promiscuous mode [ 957.237491][T27997] bridge3: entered allmulticast mode [ 957.261738][T27997] team0: Port device bridge3 added [ 957.278058][T27999] FAULT_INJECTION: forcing a failure. [ 957.278058][T27999] name failslab, interval 1, probability 0, space 0, times 0 [ 957.295039][T27999] CPU: 0 UID: 0 PID: 27999 Comm: syz.0.6263 Not tainted syzkaller #0 PREEMPT(full) [ 957.295068][T27999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 957.295085][T27999] Call Trace: [ 957.295093][T27999] [ 957.295103][T27999] dump_stack_lvl+0xe8/0x150 [ 957.295140][T27999] should_fail_ex+0x40c/0x560 [ 957.295172][T27999] should_failslab+0xa8/0x100 [ 957.295205][T27999] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 957.295233][T27999] ? skb_clone+0x212/0x3a0 [ 957.295252][T27999] ? skb_clone+0x212/0x3a0 [ 957.295280][T27999] skb_clone+0x212/0x3a0 [ 957.295306][T27999] __netlink_deliver_tap+0x413/0x860 [ 957.295342][T27999] ? netlink_deliver_tap+0x2e/0x1b0 [ 957.295367][T27999] netlink_deliver_tap+0x19c/0x1b0 [ 957.295389][T27999] netlink_sendskb+0x68/0x140 [ 957.295424][T27999] netlink_rcv_skb+0x2a4/0x4a0 [ 957.295476][T27999] ? __pfx_genl_rcv_msg+0x10/0x10 [ 957.295506][T27999] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 957.295558][T27999] ? down_read+0x2be/0x330 [ 957.295586][T27999] genl_rcv+0x28/0x40 [ 957.295611][T27999] netlink_unicast+0x7bb/0x940 [ 957.295657][T27999] netlink_sendmsg+0x813/0xb40 [ 957.295691][T27999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 957.295719][T27999] ? aa_sock_msg_perm+0xf1/0x1b0 [ 957.295748][T27999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 957.295770][T27999] sock_sendmsg_nosec+0x13a/0x180 [ 957.295801][T27999] ____sys_sendmsg+0x54e/0x850 [ 957.295849][T27999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 957.295894][T27999] ? import_iovec+0x73/0xa0 [ 957.295931][T27999] ___sys_sendmsg+0x2a5/0x360 [ 957.295964][T27999] ? __lock_acquire+0x683/0x2cf0 [ 957.295999][T27999] ? __pfx____sys_sendmsg+0x10/0x10 [ 957.296075][T27999] ? __fget_files+0x2a/0x420 [ 957.296115][T27999] ? __fget_files+0x3a2/0x420 [ 957.296155][T27999] __x64_sys_sendmsg+0x1b1/0x290 [ 957.296191][T27999] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 957.296266][T27999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.296289][T27999] do_syscall_64+0x174/0x580 [ 957.296321][T27999] ? trace_irq_disable+0x3b/0x140 [ 957.296349][T27999] ? clear_bhb_loop+0x40/0x90 [ 957.296390][T27999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.296412][T27999] RIP: 0033:0x7f43e6b9de59 [ 957.296433][T27999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.296452][T27999] RSP: 002b:00007f43e7a54028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 957.296474][T27999] RAX: ffffffffffffffda RBX: 00007f43e6e25fa0 RCX: 00007f43e6b9de59 [ 957.296490][T27999] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000004 [ 957.296504][T27999] RBP: 00007f43e7a54090 R08: 0000000000000000 R09: 0000000000000000 [ 957.296535][T27999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.296549][T27999] R13: 00007f43e6e26038 R14: 00007f43e6e25fa0 R15: 00007fff9b0ded18 [ 957.296586][T27999] [ 957.839645][T28004] __nla_validate_parse: 12 callbacks suppressed [ 957.839668][T28004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6264'. [ 957.863607][T28007] netlink: 'syz.4.6266': attribute type 4 has an invalid length. [ 957.918122][T28011] netlink: 'syz.4.6266': attribute type 4 has an invalid length. [ 957.957936][T28004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 958.023220][T28004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.051532][T28004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 958.106290][T28023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6268'. [ 958.115054][T28004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.169997][T28025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6268'. [ 958.801418][T28050] bridge2: entered promiscuous mode [ 958.806803][T28050] bridge2: entered allmulticast mode [ 958.822336][T28050] team0: Port device bridge2 added [ 958.832591][T28050] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6277'. [ 961.026378][T28017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 961.260351][T28068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6280'. [ 961.274882][T28068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6280'. [ 961.285654][T28068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6280'. [ 961.297192][T28068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6280'. [ 961.307518][T28068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6280'. [ 961.316915][T28068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6280'. [ 961.507490][T28077] l2tp_ppp: sess 2/0: no socket in recv [ 961.513382][T28075] syzkaller0: entered promiscuous mode [ 961.528229][T28075] syzkaller0: entered allmulticast mode [ 961.939422][ T1176] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.956873][T28084] tipc: Enabled bearer , priority 0 [ 961.981801][T28089] tipc: Resetting bearer [ 961.998476][ T1176] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.026470][ T1176] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.062728][ T1176] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.108059][T28074] tipc: Resetting bearer [ 962.444852][T28074] tipc: Disabling bearer [ 962.854089][T28120] Set syz1 is full, maxelem 0 reached [ 963.053201][T28128] netlink: 'syz.0.6301': attribute type 1 has an invalid length. [ 963.064034][T28128] __nla_validate_parse: 7 callbacks suppressed [ 963.064053][T28128] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6301'. [ 963.109466][T28128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6301'. [ 963.326535][T28132] netlink: 'syz.4.6302': attribute type 13 has an invalid length. [ 963.485606][T28142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6305'. [ 963.529162][T28144] FAULT_INJECTION: forcing a failure. [ 963.529162][T28144] name failslab, interval 1, probability 0, space 0, times 0 [ 963.553502][T19888] hid-generic 0005:0007:0007.0034: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 963.587997][T28144] CPU: 1 UID: 0 PID: 28144 Comm: syz.4.6306 Not tainted syzkaller #0 PREEMPT(full) [ 963.588028][T28144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 963.588042][T28144] Call Trace: [ 963.588051][T28144] [ 963.588062][T28144] dump_stack_lvl+0xe8/0x150 [ 963.588101][T28144] should_fail_ex+0x40c/0x560 [ 963.588134][T28144] should_failslab+0xa8/0x100 [ 963.588169][T28144] __kmalloc_cache_noprof+0xa8/0x660 [ 963.588199][T28144] ? __pfx_sctp_v4_cmp_addr+0x10/0x10 [ 963.588231][T28144] ? sctp_add_bind_addr+0x8c/0x370 [ 963.588259][T28144] ? sctp_add_bind_addr+0x8c/0x370 [ 963.588295][T28144] sctp_add_bind_addr+0x8c/0x370 [ 963.588331][T28144] sctp_copy_local_addr_list+0x31a/0x4e0 [ 963.588365][T28144] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 963.588396][T28144] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 963.588428][T28144] ? sctp_v6_is_any+0x64/0x80 [ 963.588461][T28144] ? sctp_copy_one_addr+0x93/0x360 [ 963.588497][T28144] sctp_bind_addr_copy+0xb3/0x3c0 [ 963.588529][T28144] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 963.588560][T28144] sctp_connect_new_asoc+0x2ff/0x6b0 [ 963.588586][T28144] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 963.588621][T28144] ? __local_bh_enable_ip+0xd0/0x130 [ 963.588645][T28144] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 963.588669][T28144] ? security_sctp_bind_connect+0x7e/0x2c0 [ 963.588704][T28144] sctp_sendmsg+0x159b/0x2d00 [ 963.588754][T28144] ? __pfx_sctp_sendmsg+0x10/0x10 [ 963.588795][T28144] ? aa_sk_perm+0x6d5/0x900 [ 963.588843][T28144] ? sock_rps_record_flow+0x19/0x350 [ 963.588879][T28144] ? inet_sendmsg+0x298/0x320 [ 963.588913][T28144] ? __pfx_inet_sendmsg+0x10/0x10 [ 963.588943][T28144] sock_sendmsg_nosec+0x10e/0x180 [ 963.588982][T28144] ____sys_sendmsg+0x54e/0x850 [ 963.589018][T28144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 963.589061][T28144] ? import_iovec+0x73/0xa0 [ 963.589097][T28144] ___sys_sendmsg+0x2a5/0x360 [ 963.589131][T28144] ? __lock_acquire+0x683/0x2cf0 [ 963.589167][T28144] ? __pfx____sys_sendmsg+0x10/0x10 [ 963.589243][T28144] ? __fget_files+0x2a/0x420 [ 963.589271][T28144] ? __fget_files+0x3a2/0x420 [ 963.589311][T28144] __x64_sys_sendmsg+0x1b1/0x290 [ 963.589350][T28144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 963.589406][T28144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.589432][T28144] do_syscall_64+0x174/0x580 [ 963.589463][T28144] ? trace_irq_disable+0x3b/0x140 [ 963.589493][T28144] ? clear_bhb_loop+0x40/0x90 [ 963.589521][T28144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.589544][T28144] RIP: 0033:0x7f9daf59de59 [ 963.589566][T28144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.589585][T28144] RSP: 002b:00007f9dad7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 963.589608][T28144] RAX: ffffffffffffffda RBX: 00007f9daf825fa0 RCX: 00007f9daf59de59 [ 963.589624][T28144] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000004 [ 963.589638][T28144] RBP: 00007f9dad7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 963.589652][T28144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 963.589665][T28144] R13: 00007f9daf826038 R14: 00007f9daf825fa0 R15: 00007ffc2363d0c8 [ 963.589701][T28144] [ 963.591835][T28142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6305'. [ 963.741471][T28148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6305'. [ 964.016484][T28146] fido_id[28146]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 964.184555][T28154] syzkaller0: entered promiscuous mode [ 964.199794][T28154] syzkaller0: entered allmulticast mode [ 964.410164][T28162] Set syz1 is full, maxelem 0 reached [ 965.007301][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 965.023293][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 965.036004][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 965.040073][T28186] netlink: 'syz.3.6320': attribute type 1 has an invalid length. [ 965.053597][T28189] netlink: 'syz.1.6321': attribute type 1 has an invalid length. [ 965.063873][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 965.073989][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 965.090200][T28189] netlink: 236 bytes leftover after parsing attributes in process `syz.1.6321'. [ 965.140284][T28195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6321'. [ 965.149196][T28186] netlink: 236 bytes leftover after parsing attributes in process `syz.3.6320'. [ 965.870348][T28220] netlink: 'syz.2.6324': attribute type 1 has an invalid length. [ 966.124276][T28220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 966.205704][T28226] bond2: (slave geneve3): making interface the new active one [ 966.228584][T28226] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 966.354809][T28188] lo speed is unknown, defaulting to 1000 [ 966.449462][T28244] netlink: 'syz.3.6328': attribute type 1 has an invalid length. [ 966.611597][T28244] 8021q: adding VLAN 0 to HW filter on device bond8 [ 966.809904][T28255] syzkaller0: entered promiscuous mode [ 966.833842][T28255] syzkaller0: entered allmulticast mode [ 966.863946][T28257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6332'. [ 966.910037][T28257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6332'. [ 966.932099][T28188] lo speed is unknown, defaulting to 1000 [ 967.114196][T28267] FAULT_INJECTION: forcing a failure. [ 967.114196][T28267] name failslab, interval 1, probability 0, space 0, times 0 [ 967.141542][T28267] CPU: 1 UID: 0 PID: 28267 Comm: syz.1.6336 Not tainted syzkaller #0 PREEMPT(full) [ 967.141572][T28267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 967.141591][T28267] Call Trace: [ 967.141600][T28267] [ 967.141610][T28267] dump_stack_lvl+0xe8/0x150 [ 967.141648][T28267] should_fail_ex+0x40c/0x560 [ 967.141680][T28267] should_failslab+0xa8/0x100 [ 967.141715][T28267] __kmalloc_cache_noprof+0xa8/0x660 [ 967.141744][T28267] ? __kmalloc_cache_noprof+0x150/0x660 [ 967.141772][T28267] ? sctp_add_bind_addr+0x8c/0x370 [ 967.141800][T28267] ? sctp_add_bind_addr+0x8c/0x370 [ 967.141837][T28267] sctp_add_bind_addr+0x8c/0x370 [ 967.141869][T28267] sctp_copy_local_addr_list+0x31a/0x4e0 [ 967.141899][T28267] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 967.141928][T28267] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 967.141959][T28267] ? sctp_v6_is_any+0x64/0x80 [ 967.141991][T28267] ? sctp_copy_one_addr+0x93/0x360 [ 967.142025][T28267] sctp_bind_addr_copy+0xb3/0x3c0 [ 967.142065][T28267] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 967.142096][T28267] sctp_connect_new_asoc+0x2ff/0x6b0 [ 967.142121][T28267] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 967.142151][T28267] ? __local_bh_enable_ip+0xd0/0x130 [ 967.142175][T28267] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 967.142201][T28267] ? security_sctp_bind_connect+0x7e/0x2c0 [ 967.142236][T28267] sctp_sendmsg+0x159b/0x2d00 [ 967.142288][T28267] ? __pfx_sctp_sendmsg+0x10/0x10 [ 967.142331][T28267] ? aa_sk_perm+0x6d5/0x900 [ 967.142381][T28267] ? sock_rps_record_flow+0x19/0x350 [ 967.142416][T28267] ? inet_sendmsg+0x298/0x320 [ 967.142450][T28267] ? __pfx_inet_sendmsg+0x10/0x10 [ 967.142480][T28267] sock_sendmsg_nosec+0x10e/0x180 [ 967.142511][T28267] ____sys_sendmsg+0x54e/0x850 [ 967.142553][T28267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 967.142599][T28267] ? import_iovec+0x73/0xa0 [ 967.142636][T28267] ___sys_sendmsg+0x2a5/0x360 [ 967.142669][T28267] ? __lock_acquire+0x683/0x2cf0 [ 967.142706][T28267] ? __pfx____sys_sendmsg+0x10/0x10 [ 967.142782][T28267] ? __fget_files+0x2a/0x420 [ 967.142810][T28267] ? __fget_files+0x3a2/0x420 [ 967.142851][T28267] __x64_sys_sendmsg+0x1b1/0x290 [ 967.142889][T28267] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 967.142951][T28267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.142977][T28267] do_syscall_64+0x174/0x580 [ 967.143009][T28267] ? trace_irq_disable+0x3b/0x140 [ 967.143043][T28267] ? clear_bhb_loop+0x40/0x90 [ 967.143072][T28267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.143095][T28267] RIP: 0033:0x7f39d0f9de59 [ 967.143117][T28267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.143137][T28267] RSP: 002b:00007f39d1e35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.143162][T28267] RAX: ffffffffffffffda RBX: 00007f39d1225fa0 RCX: 00007f39d0f9de59 [ 967.143179][T28267] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000004 [ 967.143193][T28267] RBP: 00007f39d1e35090 R08: 0000000000000000 R09: 0000000000000000 [ 967.143208][T28267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 967.143220][T28267] R13: 00007f39d1226038 R14: 00007f39d1225fa0 R15: 00007fff3f049fa8 [ 967.143255][T28267] [ 967.150982][ T5637] Bluetooth: hci0: command tx timeout [ 967.716082][T20231] hid-generic 0005:0007:0007.0035: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 967.884313][T28288] fido_id[28288]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory [ 968.077024][T28295] __nla_validate_parse: 8 callbacks suppressed [ 968.077046][T28295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6342'. [ 968.147676][T28297] veth0: entered promiscuous mode [ 968.164265][T28295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6342'. [ 968.192914][T28297] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 968.359057][T28296] veth0: left promiscuous mode [ 968.401049][T28188] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.408519][T28188] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.415996][T28188] bridge_slave_0: entered allmulticast mode [ 968.425379][T28188] bridge_slave_0: entered promiscuous mode [ 968.434870][T28188] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.442299][T28188] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.452684][T28188] bridge_slave_1: entered allmulticast mode [ 968.460866][T28188] bridge_slave_1: entered promiscuous mode [ 968.518416][T28188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.532579][T28188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.600696][T28312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6347'. [ 968.611600][T28312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6347'. [ 968.621126][T28312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6347'. [ 968.653513][T28312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6347'. [ 968.666593][T28188] team0: Port device team_slave_0 added [ 968.672628][T28312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6347'. [ 968.685303][T28312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6347'. [ 968.709216][T28188] team0: Port device team_slave_1 added [ 968.755391][T28188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.762663][T28188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.808076][T28188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.840490][T28316] ip6tnl2: entered allmulticast mode [ 968.851337][T28188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.860571][T28188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.887149][T28188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.980848][T28188] hsr_slave_0: entered promiscuous mode [ 968.988438][T28188] hsr_slave_1: entered promiscuous mode [ 968.994978][T28188] debugfs: 'hsr0' already exists in 'hsr' [ 969.001749][T28188] Cannot create hsr debugfs directory [ 969.031045][T28319] syzkaller0: entered promiscuous mode [ 969.048832][T28319] syzkaller0: entered allmulticast mode [ 969.066080][T28321] netlink: 45 bytes leftover after parsing attributes in process `syz.3.6351'. [ 969.145681][T28318] tipc: Started in network mode [ 969.157149][T28318] tipc: Node identity 7a5cd3bb4c46, cluster identity 4711 [ 969.178105][T28318] tipc: Enabled bearer , priority 0 [ 969.212182][T28318] tipc: Resetting bearer [ 969.270966][T28317] tipc: Resetting bearer [ 969.351480][T28317] tipc: Disabling bearer [ 969.522114][T28333] netlink: 'syz.1.6355': attribute type 5 has an invalid length. [ 969.546995][T28333] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6355'. [ 969.562175][ T5637] Bluetooth: hci0: command tx timeout [ 969.662625][T28188] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 969.677257][T28188] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.735446][T28342] netlink: 'syz.1.6358': attribute type 1 has an invalid length. [ 969.855538][T28342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 969.877843][T28348] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.885151][T28348] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.922342][T28348] bond2: (slave bridge0): Releasing active interface [ 969.934803][T28348] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.942094][T28348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.949662][T28348] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.956935][T28348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.971211][T28348] bond3: (slave bridge0): making interface the new active one [ 969.981868][T28348] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 970.087107][T28188] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.115392][T28188] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.236201][T28188] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.253816][T28188] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.410631][T28188] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.424119][T28188] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.515602][T28367] pim6reg1: entered promiscuous mode [ 970.527563][T28367] pim6reg1: entered allmulticast mode [ 970.563324][ T29] audit: type=1800 audit(1783938315.975:6): pid=28372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6368" name=20 dev="tmpfs" ino=2839 res=0 errno=0 [ 970.801631][T28382] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 970.844691][T28376] syzkaller0: entered promiscuous mode [ 970.852187][T28376] syzkaller0: entered allmulticast mode [ 970.880059][T28376] tipc: Started in network mode [ 970.888508][T28376] tipc: Node identity 4276c5bb1da6, cluster identity 4711 [ 970.896737][T28376] tipc: Enabled bearer , priority 0 [ 970.944869][T28376] tipc: Resetting bearer [ 970.990441][T28188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 971.009584][T28188] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 971.018334][T28375] tipc: Resetting bearer [ 971.051702][T28375] tipc: Disabling bearer [ 971.080420][T28188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 971.095023][T28188] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 971.112838][T28188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 971.129628][T28188] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 971.143459][T28188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 971.177070][T28188] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 971.269123][T10541] IPVS: starting estimator thread 0... [ 971.284051][T28402] bond1: (slave bond0): Releasing active interface [ 971.323763][T28402] bridge_slave_0: left allmulticast mode [ 971.341409][T28402] bridge_slave_0: left promiscuous mode [ 971.354047][T28402] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.365870][T28402] bridge_slave_1: left allmulticast mode [ 971.375875][T28404] IPVS: using max 27 ests per chain, 64800 per kthread [ 971.383420][T28402] bridge_slave_1: left promiscuous mode [ 971.390511][T28402] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.398544][T28408] netlink: 'syz.3.6378': attribute type 1 has an invalid length. [ 971.411100][T28402] bond0: (slave bond_slave_0): Releasing backup interface [ 971.429813][T28402] bond0: (slave bond_slave_1): Releasing backup interface [ 971.454706][T28402] team0: Port device team_slave_0 removed [ 971.479860][T28402] team0: Port device team_slave_1 removed [ 971.498284][T28402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.505756][T28402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.515091][T28402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.522645][T28402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.533724][T28402] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 971.617806][ T5637] Bluetooth: hci0: command tx timeout [ 971.656028][T28409] batman_adv: batadv0: Removing interface: dummy0 [ 971.675319][T28409] bond9: (slave dummy0): making interface the new active one [ 971.686575][T28409] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 971.769042][T28188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.818746][T28188] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.845651][T17394] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.852949][T17394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.891512][T17394] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.898797][T17394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.361433][T28188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.531505][T28188] veth0_vlan: entered promiscuous mode [ 973.575438][T28188] veth1_vlan: entered promiscuous mode [ 973.585937][T28476] Set syz1 is full, maxelem 0 reached [ 973.593886][T28478] __nla_validate_parse: 12 callbacks suppressed [ 973.593907][T28478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6396'. [ 973.680469][T28482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6397'. [ 973.698063][ T5637] Bluetooth: hci0: command tx timeout [ 973.708676][T28188] veth0_macvtap: entered promiscuous mode [ 973.725844][T28188] veth1_macvtap: entered promiscuous mode [ 973.752138][T28188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.765141][T28188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.805986][ T6975] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.831770][ T6975] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.880998][ T1176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.912447][ T1176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.302073][ T6975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.348735][ T6975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.440691][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.469279][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.603114][T28508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6403'. [ 974.628487][T28508] l2tp_ppp: sess 2/0: no socket in recv [ 974.884030][T28522] FAULT_INJECTION: forcing a failure. [ 974.884030][T28522] name failslab, interval 1, probability 0, space 0, times 0 [ 974.908507][T28522] CPU: 0 UID: 0 PID: 28522 Comm: syz.0.6409 Not tainted syzkaller #0 PREEMPT(full) [ 974.908538][T28522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 974.908552][T28522] Call Trace: [ 974.908561][T28522] [ 974.908571][T28522] dump_stack_lvl+0xe8/0x150 [ 974.908610][T28522] should_fail_ex+0x40c/0x560 [ 974.908642][T28522] should_failslab+0xa8/0x100 [ 974.908677][T28522] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 974.908705][T28522] ? skb_clone+0x212/0x3a0 [ 974.908726][T28522] ? skb_clone+0x212/0x3a0 [ 974.908755][T28522] skb_clone+0x212/0x3a0 [ 974.908781][T28522] __netlink_deliver_tap+0x413/0x860 [ 974.908817][T28522] ? netlink_deliver_tap+0x2e/0x1b0 [ 974.908841][T28522] netlink_deliver_tap+0x19c/0x1b0 [ 974.908864][T28522] netlink_unicast+0x77f/0x940 [ 974.908909][T28522] netlink_sendmsg+0x813/0xb40 [ 974.908943][T28522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.908970][T28522] ? aa_sock_msg_perm+0xf1/0x1b0 [ 974.908999][T28522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.909021][T28522] sock_sendmsg_nosec+0x13a/0x180 [ 974.909053][T28522] ____sys_sendmsg+0x54e/0x850 [ 974.909093][T28522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 974.909138][T28522] ? import_iovec+0x73/0xa0 [ 974.909173][T28522] ___sys_sendmsg+0x2a5/0x360 [ 974.909206][T28522] ? __lock_acquire+0x683/0x2cf0 [ 974.909242][T28522] ? __pfx____sys_sendmsg+0x10/0x10 [ 974.909282][T28522] ? kstrtouint+0x6e/0xe0 [ 974.909337][T28522] ? __fget_files+0x2a/0x420 [ 974.909365][T28522] ? __fget_files+0x3a2/0x420 [ 974.909416][T28522] __sys_sendmmsg+0x273/0x4d0 [ 974.909456][T28522] ? __pfx___sys_sendmmsg+0x10/0x10 [ 974.909502][T28522] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 974.909552][T28522] ? ksys_write+0x242/0x270 [ 974.909588][T28522] ? __pfx_ksys_write+0x10/0x10 [ 974.909629][T28522] __x64_sys_sendmmsg+0xa0/0xc0 [ 974.909663][T28522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.909688][T28522] do_syscall_64+0x174/0x580 [ 974.909719][T28522] ? trace_irq_disable+0x3b/0x140 [ 974.909747][T28522] ? clear_bhb_loop+0x40/0x90 [ 974.909775][T28522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.909798][T28522] RIP: 0033:0x7f51e7f9de59 [ 974.909820][T28522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.909839][T28522] RSP: 002b:00007f51e8dc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 974.909863][T28522] RAX: ffffffffffffffda RBX: 00007f51e8225fa0 RCX: 00007f51e7f9de59 [ 974.909879][T28522] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 974.909895][T28522] RBP: 00007f51e8dc3090 R08: 0000000000000000 R09: 0000000000000000 [ 974.909909][T28522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.909923][T28522] R13: 00007f51e8226038 R14: 00007f51e8225fa0 R15: 00007ffc30e3a3c8 [ 974.909959][T28522] [ 975.389222][T28535] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6415'. [ 975.562623][T28543] vlan2: entered promiscuous mode [ 975.589238][T28543] bridge0: entered promiscuous mode [ 975.652993][T28551] Set syz1 is full, maxelem 0 reached [ 975.801996][T28567] raw_sendmsg: syz.4.6424 forgot to set AF_INET. Fix it! [ 975.811715][T28563] netlink: 'syz.4.6424': attribute type 1 has an invalid length. [ 975.853908][T28563] 8021q: adding VLAN 0 to HW filter on device bond2 [ 975.939095][T28573] FAULT_INJECTION: forcing a failure. [ 975.939095][T28573] name failslab, interval 1, probability 0, space 0, times 0 [ 975.957340][T28574] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6426'. [ 975.975475][T28573] CPU: 1 UID: 0 PID: 28573 Comm: syz.4.6427 Not tainted syzkaller #0 PREEMPT(full) [ 975.975506][T28573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 975.975520][T28573] Call Trace: [ 975.975530][T28573] [ 975.975540][T28573] dump_stack_lvl+0xe8/0x150 [ 975.975578][T28573] should_fail_ex+0x40c/0x560 [ 975.975610][T28573] should_failslab+0xa8/0x100 [ 975.975645][T28573] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 975.975672][T28573] ? local_lock_release+0x9c/0x160 [ 975.975705][T28573] ? __alloc_skb+0x1d7/0x7a0 [ 975.975733][T28573] ? __alloc_skb+0x1d7/0x7a0 [ 975.975772][T28573] __alloc_skb+0x1d7/0x7a0 [ 975.975807][T28573] __ip_append_data+0x2aa9/0x3cf0 [ 975.975862][T28573] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 975.975916][T28573] ? __pfx___ip_append_data+0x10/0x10 [ 975.975949][T28573] ? do_raw_spin_lock+0x12b/0x2f0 [ 975.975978][T28573] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 975.976006][T28573] ip_append_data+0x10d/0x190 [ 975.976040][T28573] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 975.976073][T28573] udp_sendmsg+0x4de/0x2140 [ 975.976118][T28573] ? __lock_acquire+0x683/0x2cf0 [ 975.976157][T28573] ? __pfx_udp_sendmsg+0x10/0x10 [ 975.976229][T28573] ? current_check_autobind_udp_socket+0x198/0x3f0 [ 975.976272][T28573] ? __pfx_aa_sk_perm+0x10/0x10 [ 975.976308][T28573] ? sock_rps_record_flow+0x19/0x350 [ 975.976342][T28573] ? inet_sendmsg+0x23e/0x320 [ 975.976376][T28573] ? __pfx_inet_sendmsg+0x10/0x10 [ 975.976406][T28573] sock_sendmsg_nosec+0x10e/0x180 [ 975.976436][T28573] __sys_sendto+0x408/0x5a0 [ 975.976474][T28573] ? ksys_write+0x1e6/0x270 [ 975.976512][T28573] ? __pfx___sys_sendto+0x10/0x10 [ 975.976541][T28573] ? __mutex_unlock_slowpath+0x731/0x900 [ 975.976604][T28573] ? __pfx_ksys_write+0x10/0x10 [ 975.976644][T28573] __x64_sys_sendto+0xde/0x100 [ 975.976677][T28573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.976703][T28573] do_syscall_64+0x174/0x580 [ 975.976734][T28573] ? trace_irq_disable+0x3b/0x140 [ 975.976762][T28573] ? clear_bhb_loop+0x40/0x90 [ 975.976790][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.976813][T28573] RIP: 0033:0x7f9daf59de59 [ 975.976835][T28573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.976854][T28573] RSP: 002b:00007f9dad7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 975.976878][T28573] RAX: ffffffffffffffda RBX: 00007f9daf825fa0 RCX: 00007f9daf59de59 [ 975.976894][T28573] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000004 [ 975.976908][T28573] RBP: 00007f9dad7f6090 R08: 0000000000000000 R09: 0000000011000a00 [ 975.976923][T28573] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000002 [ 975.976935][T28573] R13: 00007f9daf826038 R14: 00007f9daf825fa0 R15: 00007ffc2363d0c8 [ 975.976970][T28573] [ 976.358637][T28574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6426'. [ 976.528487][T28584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6431'. [ 976.761570][T28595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6433'. [ 976.774681][T28593] bridge3: entered promiscuous mode [ 976.788643][T28593] bridge3: entered allmulticast mode [ 976.810031][T28599] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6432'. [ 976.852490][T28593] team0: Port device bridge3 added [ 976.884049][T28593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6432'. [ 977.141124][T28610] netlink: 'syz.1.6438': attribute type 1 has an invalid length. [ 977.524763][T28610] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 978.579325][T19899] hid-generic 0005:0007:0007.0036: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 978.644612][T28670] __nla_validate_parse: 2 callbacks suppressed [ 978.644635][T28670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6455'. [ 978.700763][T28665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6455'. [ 978.868506][T28676] fido_id[28676]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory [ 978.942549][T28681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6457'. [ 978.965191][T28681] l2tp_ppp: sess 2/0: no socket in recv [ 980.273212][T28730] netlink: 45 bytes leftover after parsing attributes in process `syz.3.6467'. [ 980.567326][T28737] syzkaller0: entered promiscuous mode [ 980.586535][T28737] syzkaller0: entered allmulticast mode [ 980.641246][T28737] tipc: Started in network mode [ 980.656675][T28737] tipc: Node identity ded9c7b05e8a, cluster identity 4711 [ 980.675059][T28737] tipc: Enabled bearer , priority 0 [ 980.762883][T28747] FAULT_INJECTION: forcing a failure. [ 980.762883][T28747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.795789][T28747] CPU: 0 UID: 0 PID: 28747 Comm: syz.3.6472 Not tainted syzkaller #0 PREEMPT(full) [ 980.795821][T28747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 980.795836][T28747] Call Trace: [ 980.795861][T28747] [ 980.795872][T28747] dump_stack_lvl+0xe8/0x150 [ 980.795911][T28747] should_fail_ex+0x40c/0x560 [ 980.795944][T28747] _copy_from_user+0x2d/0xb0 [ 980.795978][T28747] kstrtouint_from_user+0xd6/0x180 [ 980.796010][T28747] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 980.796057][T28747] proc_fail_nth_write+0x8e/0x210 [ 980.796089][T28747] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 980.796130][T28747] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 980.796160][T28747] vfs_write+0x296/0xba0 [ 980.796205][T28747] ? __pfx_vfs_write+0x10/0x10 [ 980.796241][T28747] ? __fget_files+0x2a/0x420 [ 980.796275][T28747] ? __fget_files+0x3a2/0x420 [ 980.796303][T28747] ? __fget_files+0x2a/0x420 [ 980.796341][T28747] ksys_write+0x150/0x270 [ 980.796385][T28747] ? __pfx_ksys_write+0x10/0x10 [ 980.796429][T28747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.796454][T28747] do_syscall_64+0x174/0x580 [ 980.796487][T28747] ? trace_irq_disable+0x3b/0x140 [ 980.796516][T28747] ? clear_bhb_loop+0x40/0x90 [ 980.796545][T28747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.796567][T28747] RIP: 0033:0x7f32fcd5e68e [ 980.796588][T28747] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 980.796609][T28747] RSP: 002b:00007f32fdc03fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 980.796632][T28747] RAX: ffffffffffffffda RBX: 00007f32fdc046c0 RCX: 00007f32fcd5e68e [ 980.796648][T28747] RDX: 0000000000000001 RSI: 00007f32fdc040a0 RDI: 0000000000000005 [ 980.796663][T28747] RBP: 00007f32fdc04090 R08: 0000000000000000 R09: 0000000000000000 [ 980.796677][T28747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 980.796689][T28747] R13: 00007f32fd026038 R14: 00007f32fd025fa0 R15: 00007ffd622f8a98 [ 980.796724][T28747] [ 981.121795][T28737] tipc: Resetting bearer [ 981.205751][T28737] tipc: Disabling bearer [ 981.393592][T28762] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 981.595562][T28779] netlink: 'syz.1.6480': attribute type 1 has an invalid length. [ 981.638993][T28779] netlink: 236 bytes leftover after parsing attributes in process `syz.1.6480'. [ 981.680762][T28781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6480'. [ 982.196229][T28796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6486'. [ 982.254208][T28796] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6486'. [ 982.351825][T28803] netlink: 45 bytes leftover after parsing attributes in process `syz.3.6488'. [ 982.842133][T28834] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6496'. [ 982.885673][T28835] vlan3: entered promiscuous mode [ 982.893451][T28835] bridge0: entered promiscuous mode [ 984.470342][T28883] netlink: 'syz.4.6503': attribute type 1 has an invalid length. [ 984.480472][T28883] netlink: 236 bytes leftover after parsing attributes in process `syz.4.6503'. [ 984.500772][T28883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6503'. [ 984.814994][T28893] bridge_slave_0: left allmulticast mode [ 984.824775][T28893] bridge_slave_0: left promiscuous mode [ 984.832474][T28893] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.846702][T28893] bridge_slave_1: left allmulticast mode [ 984.852966][T28893] bridge_slave_1: left promiscuous mode [ 984.859690][T28893] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.876674][T28893] bond0: (slave bond_slave_0): Releasing backup interface [ 984.894023][T28893] bond0: (slave bond_slave_1): Releasing backup interface [ 984.915136][T28893] team0: Port device team_slave_0 removed [ 984.929525][T28893] team0: Port device team_slave_1 removed [ 984.940172][T28893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 985.161693][T28899] FAULT_INJECTION: forcing a failure. [ 985.161693][T28899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.175811][T28899] CPU: 1 UID: 0 PID: 28899 Comm: syz.2.6510 Not tainted syzkaller #0 PREEMPT(full) [ 985.175842][T28899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 985.175857][T28899] Call Trace: [ 985.175867][T28899] [ 985.175878][T28899] dump_stack_lvl+0xe8/0x150 [ 985.175917][T28899] should_fail_ex+0x40c/0x560 [ 985.175950][T28899] _copy_from_user+0x2d/0xb0 [ 985.175984][T28899] ___sys_sendmsg+0x1c6/0x360 [ 985.176029][T28899] ? __lock_acquire+0x683/0x2cf0 [ 985.176065][T28899] ? __pfx____sys_sendmsg+0x10/0x10 [ 985.176098][T28899] ? __lock_acquire+0x683/0x2cf0 [ 985.176134][T28899] ? kstrtouint+0x6e/0xe0 [ 985.176206][T28899] __sys_sendmmsg+0x273/0x4d0 [ 985.176247][T28899] ? __pfx___sys_sendmmsg+0x10/0x10 [ 985.176293][T28899] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 985.176343][T28899] ? ksys_write+0x242/0x270 [ 985.176383][T28899] ? __pfx_ksys_write+0x10/0x10 [ 985.176424][T28899] __x64_sys_sendmmsg+0xa0/0xc0 [ 985.176459][T28899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.176483][T28899] do_syscall_64+0x174/0x580 [ 985.176514][T28899] ? trace_irq_disable+0x3b/0x140 [ 985.176542][T28899] ? clear_bhb_loop+0x40/0x90 [ 985.176570][T28899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.176593][T28899] RIP: 0033:0x7f53a879de59 [ 985.176614][T28899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.176634][T28899] RSP: 002b:00007f53a96cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 985.176658][T28899] RAX: ffffffffffffffda RBX: 00007f53a8a25fa0 RCX: 00007f53a879de59 [ 985.176675][T28899] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 985.176691][T28899] RBP: 00007f53a96cc090 R08: 0000000000000000 R09: 0000000000000000 [ 985.176705][T28899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.176718][T28899] R13: 00007f53a8a26038 R14: 00007f53a8a25fa0 R15: 00007ffdd46c0898 [ 985.176755][T28899] [ 985.455455][T28901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6511'. [ 985.526103][T28814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 985.608176][T28901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6511'. [ 985.631064][T28908] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 985.680833][T28908] syzkaller0: entered promiscuous mode [ 985.688050][T28901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6511'. [ 985.715875][T28908] syzkaller0: entered allmulticast mode [ 985.994343][T28924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6521'. [ 986.009295][T28925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6519'. [ 986.054186][T28922] vlan3: entered promiscuous mode [ 986.400164][T28950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6527'. [ 986.476861][T19912] hid-generic 0005:0007:0007.0037: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 986.519073][T28950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6527'. [ 986.556750][T28950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6527'. [ 986.615709][T28959] Bluetooth: MGMT ver 1.23 [ 986.728576][T28962] netlink: 'syz.2.6528': attribute type 1 has an invalid length. [ 986.746490][T28952] fido_id[28952]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory [ 986.797810][T28962] 8021q: adding VLAN 0 to HW filter on device bond3 [ 986.936154][T28968] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 987.249217][T28983] syzkaller0: entered promiscuous mode [ 987.261079][T28983] syzkaller0: entered allmulticast mode [ 988.561456][T29055] bridge_slave_0: left allmulticast mode [ 988.573283][T29055] bridge_slave_0: left promiscuous mode [ 988.590731][T29055] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.614310][T29057] FAULT_INJECTION: forcing a failure. [ 988.614310][T29057] name failslab, interval 1, probability 0, space 0, times 0 [ 988.629214][T29057] CPU: 0 UID: 0 PID: 29057 Comm: syz.2.6558 Not tainted syzkaller #0 PREEMPT(full) [ 988.629245][T29057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 988.629259][T29057] Call Trace: [ 988.629268][T29057] [ 988.629277][T29057] dump_stack_lvl+0xe8/0x150 [ 988.629316][T29057] should_fail_ex+0x40c/0x560 [ 988.629347][T29057] should_failslab+0xa8/0x100 [ 988.629382][T29057] __kmalloc_noprof+0xfe/0x720 [ 988.629413][T29057] ? bpf_test_init+0x9f/0x150 [ 988.629445][T29057] ? bpf_test_init+0x9f/0x150 [ 988.629487][T29057] bpf_test_init+0x9f/0x150 [ 988.629526][T29057] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 988.629566][T29057] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 988.629595][T29057] ? __fget_files+0x2a/0x420 [ 988.629630][T29057] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 988.629655][T29057] bpf_prog_test_run+0x2c5/0x340 [ 988.629691][T29057] __sys_bpf+0xa22/0xd90 [ 988.629738][T29057] ? __pfx___sys_bpf+0x10/0x10 [ 988.629780][T29057] ? __fget_files+0x2a/0x420 [ 988.629829][T29057] ? ksys_write+0x242/0x270 [ 988.629865][T29057] ? __pfx_ksys_write+0x10/0x10 [ 988.629905][T29057] __x64_sys_bpf+0xba/0xd0 [ 988.629932][T29057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.629961][T29057] do_syscall_64+0x174/0x580 [ 988.629995][T29057] ? trace_irq_disable+0x3b/0x140 [ 988.630023][T29057] ? clear_bhb_loop+0x40/0x90 [ 988.630051][T29057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.630075][T29057] RIP: 0033:0x7f53a879de59 [ 988.630096][T29057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.630116][T29057] RSP: 002b:00007f53a96cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 988.630140][T29057] RAX: ffffffffffffffda RBX: 00007f53a8a25fa0 RCX: 00007f53a879de59 [ 988.630157][T29057] RDX: 000000000000000e RSI: 0000200000000600 RDI: 000000000000000a [ 988.630171][T29057] RBP: 00007f53a96cc090 R08: 0000000000000000 R09: 0000000000000000 [ 988.630185][T29057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.630199][T29057] R13: 00007f53a8a26038 R14: 00007f53a8a25fa0 R15: 00007ffdd46c0898 [ 988.630235][T29057] [ 989.018077][T29055] bridge_slave_1: left allmulticast mode [ 989.024016][T29055] bridge_slave_1: left promiscuous mode [ 989.030675][T29055] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.089078][T29055] bond0: (slave bond_slave_0): Releasing backup interface [ 989.125889][T29055] bond0: (slave bond_slave_1): Releasing backup interface [ 989.162146][T29055] team0: Port device team_slave_0 removed [ 989.194145][T29055] team0: Port device team_slave_1 removed [ 989.213678][T29055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.225165][T29055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.236946][T29055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.245557][T29055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.256368][T29055] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 989.295088][T29059] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 989.320239][T29061] tipc: Enabling of bearer rejected, failed to enable media [ 989.520876][T29076] __nla_validate_parse: 5 callbacks suppressed [ 989.520897][T29076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6564'. [ 989.567494][T29076] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 989.575779][T29076] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6564'. [ 989.591673][T29076] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6564'. [ 989.605213][T29076] netlink: 3592 bytes leftover after parsing attributes in process `syz.4.6564'. [ 989.719027][T29081] bond3: (slave bridge0): Releasing active interface [ 989.762898][T29081] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.770392][T29081] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.822207][T29081] bridge_slave_0: left allmulticast mode [ 989.836884][T29081] bridge_slave_0: left promiscuous mode [ 989.854693][T29081] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.901085][T29081] bridge_slave_1: left allmulticast mode [ 989.914688][T29081] bridge_slave_1: left promiscuous mode [ 989.922954][T29081] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.954460][T29081] bond0: (slave bond_slave_0): Releasing backup interface [ 989.974587][T29100] netlink: 'syz.3.6571': attribute type 1 has an invalid length. [ 990.011040][T29081] bond0: (slave bond_slave_1): Releasing backup interface [ 990.130468][T29081] team0: Port device team_slave_0 removed [ 990.173384][T29081] team0: Port device team_slave_1 removed [ 990.188867][T29081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.205346][T29081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.234304][T29081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.243143][T29108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6573'. [ 990.253179][T29081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.267149][T29096] Set syz1 is full, maxelem 0 reached [ 990.285195][T29081] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 990.403700][T29100] 8021q: adding VLAN 0 to HW filter on device bond10 [ 990.523737][T29114] netlink: 45 bytes leftover after parsing attributes in process `syz.3.6575'. [ 990.549917][T29112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6574'. [ 991.225105][T21365] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 991.240868][T21365] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 991.263181][T21365] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 991.280939][T21365] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 991.291295][T21365] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 991.792302][T29145] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6583'. [ 991.925493][T29152] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6584'. [ 992.066535][T29147] vlan3: entered allmulticast mode [ 992.077413][T29147] bond0: entered allmulticast mode [ 992.114617][T29152] bond0 (unregistering): Released all slaves [ 992.359189][T29165] netlink: 'syz.0.6587': attribute type 1 has an invalid length. [ 992.413667][T29132] lo speed is unknown, defaulting to 1000 [ 992.420402][T29165] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6587'. [ 992.692830][T29177] netlink: 'syz.4.6590': attribute type 1 has an invalid length. [ 992.817206][T29181] netlink: 'syz.2.6591': attribute type 1 has an invalid length. [ 992.926816][T29132] lo speed is unknown, defaulting to 1000 [ 993.061010][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.377033][T29190] FAULT_INJECTION: forcing a failure. [ 993.377033][T29190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 993.385017][T21365] Bluetooth: hci4: command tx timeout [ 993.433458][T29190] CPU: 0 UID: 0 PID: 29190 Comm: syz.1.6593 Not tainted syzkaller #0 PREEMPT(full) [ 993.433489][T29190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 993.433503][T29190] Call Trace: [ 993.433513][T29190] [ 993.433523][T29190] dump_stack_lvl+0xe8/0x150 [ 993.433562][T29190] should_fail_ex+0x40c/0x560 [ 993.433595][T29190] _copy_to_user+0x31/0xb0 [ 993.433629][T29190] simple_read_from_buffer+0xe1/0x170 [ 993.433665][T29190] proc_fail_nth_read+0x1bb/0x230 [ 993.433700][T29190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 993.433734][T29190] ? rw_verify_area+0x24a/0x4c0 [ 993.433776][T29190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 993.433807][T29190] vfs_read+0x213/0xa80 [ 993.433848][T29190] ? __pfx___mutex_lock+0x10/0x10 [ 993.433883][T29190] ? __pfx_vfs_read+0x10/0x10 [ 993.433918][T29190] ? __fget_files+0x2a/0x420 [ 993.433953][T29190] ? __fget_files+0x3a2/0x420 [ 993.433982][T29190] ? __fget_files+0x2a/0x420 [ 993.434022][T29190] ksys_read+0x150/0x270 [ 993.434060][T29190] ? __pfx_ksys_read+0x10/0x10 [ 993.434104][T29190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.434129][T29190] do_syscall_64+0x174/0x580 [ 993.434162][T29190] ? trace_irq_disable+0x3b/0x140 [ 993.434191][T29190] ? clear_bhb_loop+0x40/0x90 [ 993.434219][T29190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.434243][T29190] RIP: 0033:0x7f39d0f5e68e [ 993.434263][T29190] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 993.434282][T29190] RSP: 002b:00007f39d1e34fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 993.434305][T29190] RAX: ffffffffffffffda RBX: 00007f39d1e356c0 RCX: 00007f39d0f5e68e [ 993.434325][T29190] RDX: 000000000000000f RSI: 00007f39d1e350a0 RDI: 0000000000000004 [ 993.434340][T29190] RBP: 00007f39d1e35090 R08: 0000000000000000 R09: 0000000000000000 [ 993.434353][T29190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.434366][T29190] R13: 00007f39d1226038 R14: 00007f39d1225fa0 R15: 00007fff3f049fa8 [ 993.434403][T29190] [ 993.817252][ T6371] hid-generic 0005:0007:0007.0038: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 993.936655][T29200] fido_id[29200]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 994.240523][T29132] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.247974][T29132] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.255627][T29132] bridge_slave_0: entered allmulticast mode [ 994.264545][T29132] bridge_slave_0: entered promiscuous mode [ 994.274981][T29132] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.285049][T29132] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.330191][T29132] bridge_slave_1: entered allmulticast mode [ 994.351746][T29132] bridge_slave_1: entered promiscuous mode [ 994.465413][T29132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.512622][T29132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.538631][T29216] lo speed is unknown, defaulting to 1000 [ 994.626842][T29132] team0: Port device team_slave_0 added [ 994.636522][T29132] team0: Port device team_slave_1 added [ 994.747017][T29132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.766405][T29132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.826696][T29132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.841492][T29132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.848718][T29132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.877101][T29132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.996275][T29236] __nla_validate_parse: 6 callbacks suppressed [ 994.996296][T29236] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6608'. [ 995.026185][T29132] hsr_slave_0: entered promiscuous mode [ 995.040516][T29132] hsr_slave_1: entered promiscuous mode [ 995.058501][T29132] debugfs: 'hsr0' already exists in 'hsr' [ 995.064424][T29132] Cannot create hsr debugfs directory [ 995.157016][T29216] lo speed is unknown, defaulting to 1000 [ 995.173584][T29240] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 995.201152][T29240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6607'. [ 995.457730][T21365] Bluetooth: hci4: command tx timeout [ 995.682267][T29259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 995.936989][T29132] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.156989][T29285] netlink: 'syz.1.6614': attribute type 1 has an invalid length. [ 996.170346][T29132] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.229049][T29288] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6614'. [ 996.520223][T29285] 8021q: adding VLAN 0 to HW filter on device bond4 [ 996.591167][T29298] vlan2: entered promiscuous mode [ 996.764222][T29132] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.797153][T29305] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 996.844115][T29307] Set syz1 is full, maxelem 0 reached [ 996.865915][T29305] bond0: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 996.885356][T29311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6618'. [ 996.895798][T29305] bond0 (unregistering): Released all slaves [ 996.934596][ T29] audit: type=1107 audit(1783938342.345:7): pid=29313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 997.152304][T29323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6622'. [ 997.503036][T29132] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.538986][T21365] Bluetooth: hci4: command tx timeout [ 997.572235][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.584039][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.613931][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.623427][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.834358][T29353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6626'. [ 997.873567][T29353] l2tp_ppp: sess 2/0: no socket in recv [ 997.982327][T29360] netlink: 'syz.4.6628': attribute type 3 has an invalid length. [ 998.016208][T29360] netlink: 'syz.4.6628': attribute type 1 has an invalid length. [ 998.259706][T29371] syzkaller1: entered promiscuous mode [ 998.280163][T29371] syzkaller1: entered allmulticast mode [ 998.302046][T29132] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 998.344140][T29132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 998.401131][T29382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6634'. [ 998.415611][T29132] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 998.442644][T29132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 998.483191][T29132] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 998.521075][T29132] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 998.546898][T29132] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 998.589680][T29132] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 999.055358][T29411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6638'. [ 999.071149][T29132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.095181][T29411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6638'. [ 999.125686][T29411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6638'. [ 999.142670][T29132] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.219752][T29418] Set syz1 is full, maxelem 0 reached [ 999.280435][T17394] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.313593][T17394] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.352171][ T202] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.359432][ T202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.398850][T17394] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.431333][T17394] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.460663][ T202] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.467964][ T202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.620309][T21365] Bluetooth: hci4: command tx timeout [ 999.776389][T29434] syzkaller0: entered promiscuous mode [ 999.798548][T29434] syzkaller0: entered allmulticast mode [ 999.858398][T29434] tipc: Started in network mode [ 999.876671][T29434] tipc: Node identity 82a2f4c13bc1, cluster identity 4711 [ 999.904560][T29434] tipc: Enabled bearer , priority 0 [ 999.949771][T29432] tipc: Resetting bearer [ 1000.017185][T29450] netlink: 'syz.2.6648': attribute type 1 has an invalid length. [ 1000.044020][T29432] tipc: Disabling bearer [ 1000.240224][T29450] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1000.303407][T29455] bond4: (slave bridge0): Enslaving as an active interface with a down link [ 1000.422306][T29464] ieee802154 phy0 wpan0: encryption failed: -22 [ 1000.561535][T29474] __nla_validate_parse: 3 callbacks suppressed [ 1000.561557][T29474] netlink: 45 bytes leftover after parsing attributes in process `syz.2.6652'. [ 1000.610537][T29473] netlink: 'syz.0.6653': attribute type 1 has an invalid length. [ 1000.856240][T29488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6654'. [ 1000.911757][T29473] bond1: (slave gretap1): making interface the new active one [ 1000.944419][T29488] l2tp_ppp: sess 2/0: no socket in recv [ 1000.990849][T29473] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1001.200782][T29497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6655'. [ 1001.317131][T29505] bond0: entered promiscuous mode [ 1001.322624][T29505] bond0: entered allmulticast mode [ 1001.332215][T29497] Cannot find map_set index 65532 as target [ 1001.375923][T29132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.550046][T29510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6659'. [ 1001.587057][T29132] veth0_vlan: entered promiscuous mode [ 1001.618566][T29132] veth1_vlan: entered promiscuous mode [ 1001.716405][T29132] veth0_macvtap: entered promiscuous mode [ 1001.737079][T29132] veth1_macvtap: entered promiscuous mode [ 1001.790375][T29132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.901996][T29132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.953239][T17396] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.994455][T17396] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.023431][T17396] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.043250][T17396] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.214943][T29536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6666'. [ 1002.311601][T29541] netlink: 'syz.2.6665': attribute type 4 has an invalid length. [ 1002.378224][T29532] lo speed is unknown, defaulting to 1000 [ 1002.383202][T29541] netlink: 'syz.2.6665': attribute type 4 has an invalid length. [ 1002.488232][T17396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.507392][T17396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.673388][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.693267][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.273783][T29569] netlink: 'syz.0.6669': attribute type 1 has an invalid length. [ 1003.292335][T29569] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6669'. [ 1003.336709][T29573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6669'. [ 1003.352102][T29532] lo speed is unknown, defaulting to 1000 [ 1003.620893][T29580] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1004.165510][T29590] netlink: 'syz.3.6675': attribute type 1 has an invalid length. [ 1004.621009][T29612] vlan2: entered promiscuous mode [ 1005.526572][T29599] Set syz1 is full, maxelem 0 reached [ 1005.582960][T29649] netlink: 'syz.0.6688': attribute type 1 has an invalid length. [ 1005.631517][T29649] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6688'. [ 1005.662108][T29654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6688'. [ 1005.694510][T29657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6690'. [ 1005.762711][T29659] netlink: 'syz.1.6692': attribute type 3 has an invalid length. [ 1005.794588][T29659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6692'. [ 1006.505049][T29685] netlink: 'syz.2.6699': attribute type 3 has an invalid length. [ 1006.543848][T29685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6699'. [ 1006.732822][T29693] Set syz1 is full, maxelem 0 reached [ 1006.916266][T29706] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6706'. [ 1007.084365][T29712] netlink: 45 bytes leftover after parsing attributes in process `syz.3.6708'. [ 1007.134306][T29715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6709'. [ 1007.307079][T29715] netlink: 'syz.0.6709': attribute type 1 has an invalid length. [ 1007.353684][T29715] netlink: 'syz.0.6709': attribute type 4 has an invalid length. [ 1007.427278][T29715] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6709'. [ 1007.514748][T29734] netlink: 'syz.1.6712': attribute type 3 has an invalid length. [ 1007.545468][T29734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6712'. [ 1007.578797][T29735] netlink: 'syz.3.6711': attribute type 1 has an invalid length. [ 1007.636557][T29729] lo speed is unknown, defaulting to 1000 [ 1008.277210][T29729] lo speed is unknown, defaulting to 1000 [ 1008.604775][T29775] Set syz1 is full, maxelem 0 reached [ 1010.904420][T29867] vlan2: entered promiscuous mode [ 1011.301808][T29885] bridge1: entered promiscuous mode [ 1011.314481][T29885] bridge1: entered allmulticast mode [ 1011.329526][T29885] team0: Port device bridge1 added [ 1011.355831][T29885] __nla_validate_parse: 10 callbacks suppressed [ 1011.355852][T29885] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6764'. [ 1011.414596][T29885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6764'. [ 1011.531063][T29902] lo: entered allmulticast mode [ 1011.564576][T29902] tunl0: entered allmulticast mode [ 1011.587143][T29902] gre0: entered allmulticast mode [ 1011.602739][T29902] gretap0: entered allmulticast mode [ 1011.615425][T29902] erspan0: entered allmulticast mode [ 1011.627229][T29902] ip_vti0: entered allmulticast mode [ 1011.635778][T29902] ip6_vti0: entered allmulticast mode [ 1011.645855][T29902] sit0: entered allmulticast mode [ 1011.676173][T29902] ip6tnl0: entered allmulticast mode [ 1011.691893][T29902] ip6gre0: entered allmulticast mode [ 1011.702556][T29902] syz_tun: entered allmulticast mode [ 1011.726808][T29902] ip6gretap0: entered allmulticast mode [ 1011.792584][T29902] bridge0: entered allmulticast mode [ 1011.815186][T29902] vcan0: entered allmulticast mode [ 1011.829711][T29902] bond0: entered allmulticast mode [ 1011.842191][T29902] dummy0: entered allmulticast mode [ 1011.854637][T29902] nlmon0: entered allmulticast mode [ 1011.866254][T29902] batadv0: entered allmulticast mode [ 1011.880577][T29902] vxcan0: entered allmulticast mode [ 1011.888039][T29902] vxcan1: entered allmulticast mode [ 1011.895177][T29902] veth0: entered allmulticast mode [ 1011.907195][T29902] veth1: entered allmulticast mode [ 1011.917222][T29902] wg0: entered allmulticast mode [ 1011.926256][T29902] wg1: entered allmulticast mode [ 1011.934891][T29902] wg2: entered allmulticast mode [ 1011.944671][T29902] veth0_to_bridge: entered allmulticast mode [ 1011.955810][T29902] bridge_slave_0: entered allmulticast mode [ 1011.968191][T29902] veth1_to_bridge: entered allmulticast mode [ 1011.981320][T29902] bridge_slave_1: entered allmulticast mode [ 1011.991140][T29902] veth0_to_bond: entered allmulticast mode [ 1012.001604][T29902] bond_slave_0: entered allmulticast mode [ 1012.008219][T29902] veth1_to_bond: entered allmulticast mode [ 1012.018885][T29902] bond_slave_1: entered allmulticast mode [ 1012.025127][T29902] veth0_to_team: entered allmulticast mode [ 1012.034662][T29902] team_slave_0: entered allmulticast mode [ 1012.042878][T29902] veth1_to_team: entered allmulticast mode [ 1012.052868][T29902] team_slave_1: entered allmulticast mode [ 1012.059554][T29902] veth0_to_batadv: entered allmulticast mode [ 1012.071439][T29902] batadv_slave_0: entered allmulticast mode [ 1012.081662][T29902] veth1_to_batadv: entered allmulticast mode [ 1012.093102][T29902] batadv_slave_1: entered allmulticast mode [ 1012.103179][T29902] xfrm0: entered allmulticast mode [ 1012.112709][T29902] veth0_to_hsr: entered allmulticast mode [ 1012.122621][T29902] hsr_slave_0: entered allmulticast mode [ 1012.133737][T29902] veth1_to_hsr: entered allmulticast mode [ 1012.143634][T29902] hsr_slave_1: entered allmulticast mode [ 1012.154300][T29902] hsr0: entered allmulticast mode [ 1012.167231][T29902] veth1_virt_wifi: entered allmulticast mode [ 1012.179103][T29902] veth0_virt_wifi: entered allmulticast mode [ 1012.191198][T29902] virt_wifi0: entered allmulticast mode [ 1012.197755][T29902] veth1_vlan: entered allmulticast mode [ 1012.210269][T29902] veth0_vlan: entered allmulticast mode [ 1012.220665][T29902] vlan0: entered allmulticast mode [ 1012.230724][T29902] vlan1: entered allmulticast mode [ 1012.240595][T29902] macvlan0: entered allmulticast mode [ 1012.251003][T29902] macvlan1: entered allmulticast mode [ 1012.260293][T29902] ipvlan0: entered allmulticast mode [ 1012.265953][T29902] ipvlan1: entered allmulticast mode [ 1012.278397][T29902] veth1_macvtap: entered allmulticast mode [ 1012.291227][T29902] veth0_macvtap: entered allmulticast mode [ 1012.303678][T29902] macvtap0: entered allmulticast mode [ 1012.324463][T29902] macsec0: entered allmulticast mode [ 1012.332810][T29902] geneve0: entered allmulticast mode [ 1012.341703][T29902] geneve1: entered allmulticast mode [ 1012.353337][T29902] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1012.364979][T29902] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 1012.383556][T29902] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 1012.395088][T29902] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 1012.411536][T29902] mac80211_hwsim hwsim93 wlan0: entered allmulticast mode [ 1012.428833][T29902] mac80211_hwsim hwsim94 wlan1: entered allmulticast mode [ 1012.439959][T29902] bridge1: entered allmulticast mode [ 1012.446218][T29902] vxlan0: entered allmulticast mode [ 1012.454235][T29902] erspan1: entered allmulticast mode [ 1012.463278][T29902] bond1: entered allmulticast mode [ 1012.468922][T29902] gretap1: entered allmulticast mode [ 1012.495894][T19560] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.510537][T19560] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.536641][T19560] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.556883][T19560] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.575967][T19560] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.615663][T19560] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.642069][T19560] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1012.664645][T19560] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.706014][T29923] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6775'. [ 1012.743635][T29922] syzkaller0: entered promiscuous mode [ 1012.759217][T29922] syzkaller0: entered allmulticast mode [ 1012.779404][T29925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6778'. [ 1012.825823][T29928] vlan2: entered promiscuous mode [ 1012.842978][T29928] bridge0: entered promiscuous mode [ 1012.913268][T29925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6778'. [ 1012.927093][T29936] netlink: 'syz.4.6780': attribute type 1 has an invalid length. [ 1012.950854][T29937] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6781'. [ 1012.961075][T29935] bridge2: entered promiscuous mode [ 1012.966532][T29935] bridge2: entered allmulticast mode [ 1012.979752][T29933] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6780'. [ 1012.991910][T29935] team0: Port device bridge2 added [ 1013.019605][T29935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6781'. [ 1013.053197][T29936] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1013.125818][T29933] bond3: entered promiscuous mode [ 1013.139593][T19560] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1013.139757][T29933] bond3: entered allmulticast mode [ 1013.227661][T29939] bond3: (slave dummy0): making interface the new active one [ 1013.235325][T29939] dummy0: entered promiscuous mode [ 1013.241030][T29939] dummy0: entered allmulticast mode [ 1013.248600][T29939] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1013.314407][T29952] netlink: 'syz.0.6784': attribute type 22 has an invalid length. [ 1013.325626][T29952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6784'. [ 1013.354308][T29950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6785'. [ 1013.367171][T29957] netlink: 'syz.0.6784': attribute type 22 has an invalid length. [ 1013.384287][T29949] syzkaller0: entered promiscuous mode [ 1013.387499][T29950] l2tp_ppp: sess 2/0: no socket in recv [ 1013.391749][T29949] syzkaller0: entered allmulticast mode [ 1013.881416][T29982] netlink: 'syz.0.6793': attribute type 1 has an invalid length. [ 1013.936089][T29981] netlink: 'syz.4.6794': attribute type 1 has an invalid length. [ 1017.202427][T29981] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1017.243728][T29990] bond4: (slave geneve3): making interface the new active one [ 1017.271396][T29990] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1017.305675][ T6884] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.314693][ T6884] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.336797][ T6884] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.361301][T17396] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.953801][T30004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.961646][T30004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.159591][T30032] __nla_validate_parse: 8 callbacks suppressed [ 1018.159615][T30032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6807'. [ 1018.213748][T29341] hid-generic 0005:0007:0007.0039: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1018.239332][T30032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6807'. [ 1018.292887][T30036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6807'. [ 1018.331073][T30035] fido_id[30035]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 1018.491098][T30004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1018.638394][T30004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.209751][T19560] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.255326][T19560] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.306406][T19560] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.356958][T19560] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.399116][T30041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6808'. [ 1019.439042][T30048] netlink: 'syz.1.6809': attribute type 1 has an invalid length. [ 1019.525810][T30052] netlink: 'syz.2.6810': attribute type 1 has an invalid length. [ 1019.544680][T30055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6813'. [ 1019.597123][T30048] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1019.631917][T30052] netlink: 236 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1019.682818][T30058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1019.809300][T30053] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1019.859254][T30070] netlink: 'syz.3.6817': attribute type 1 has an invalid length. [ 1019.898291][T30070] netlink: 236 bytes leftover after parsing attributes in process `syz.3.6817'. [ 1019.901820][T30057] vlan2: entered allmulticast mode [ 1019.932535][T30057] veth0_to_bond: entered allmulticast mode [ 1019.952060][T30057] veth0_to_bond: entered promiscuous mode [ 1019.979949][T30057] veth0_to_bond: left promiscuous mode [ 1020.004162][T30057] bond5: (slave vlan2): Enslaving as an active interface with a down link [ 1020.131104][T30048] bond6: option updelay: invalid value (18446744073709518847) [ 1020.139935][T30048] bond6: option updelay: allowed values 0 - 2147483647 [ 1020.154564][T30048] bond6 (unregistering): Released all slaves [ 1020.162817][T30075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6818'. [ 1020.215315][T30075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6818'. [ 1021.236169][T30116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.399159][ T6369] hid-generic 0005:0007:0007.003A: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1021.593181][T30137] fido_id[30137]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 1021.624030][T30144] netlink: 'syz.4.6840': attribute type 1 has an invalid length. [ 1021.919725][T30157] bridge2: entered promiscuous mode [ 1021.950974][T30157] bridge2: entered allmulticast mode [ 1021.961406][T30160] netlink: 'syz.1.6843': attribute type 1 has an invalid length. [ 1022.466131][ T6369] hid-generic 0005:0007:0007.003B: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1022.639500][T30178] fido_id[30178]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 1022.709132][ T6369] hid-generic 0005:0007:0007.003C: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1022.936743][T30188] fido_id[30188]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 1023.202785][T30212] __nla_validate_parse: 36 callbacks suppressed [ 1023.202807][T30212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6861'. [ 1023.220997][T30212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6861'. [ 1023.257545][T30212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6861'. [ 1023.292777][T17394] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.304487][T30212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6861'. [ 1023.313571][T17394] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.322732][T30212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6861'. [ 1023.332445][T17394] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.341953][T17394] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.350808][T30212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6861'. [ 1025.931049][T30197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1026.079365][T30230] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6867'. [ 1026.221251][T30236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6868'. [ 1026.233891][T30238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6867'. [ 1026.314345][T30245] netlink: 'syz.0.6871': attribute type 1 has an invalid length. [ 1026.336171][T30247] Set syz1 is full, maxelem 0 reached [ 1026.466993][T30253] netlink: 45 bytes leftover after parsing attributes in process `syz.3.6873'. [ 1026.479957][T30245] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1026.515690][T30251] vcan0: left allmulticast mode [ 1026.744229][T30266] vlan3: entered promiscuous mode [ 1026.757249][T30266] bridge0: entered promiscuous mode [ 1027.323716][T30305] vlan3: entered promiscuous mode [ 1027.668930][T21009] block nbd2: Receive control failed (result -32) [ 1028.157522][T30368] netlink: 'syz.0.6914': attribute type 1 has an invalid length. [ 1028.207441][T30368] __nla_validate_parse: 15 callbacks suppressed [ 1028.207464][T30368] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6914'. [ 1028.232007][T30372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6914'. [ 1028.394876][T30378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6919'. [ 1028.430532][T30385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6921'. [ 1028.545869][T30385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6921'. [ 1028.575000][T30385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6921'. [ 1028.668163][T30392] Set syz1 is full, maxelem 0 reached [ 1028.789960][T30397] Set syz1 is full, maxelem 0 reached [ 1028.940507][T30403] tipc: Invalid UDP bearer configuration [ 1028.940558][T30403] tipc: Enabling of bearer rejected, failed to enable media [ 1029.259587][T30419] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.6933'. [ 1029.341584][T30429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6935'. [ 1029.390557][T29334] hid-generic 0005:0007:0007.003D: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1029.464896][T30429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6935'. [ 1029.501274][T30436] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input30 [ 1029.520172][T30434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6935'. [ 1029.640246][T30433] fido_id[30433]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 1029.888031][T30454] FAULT_INJECTION: forcing a failure. [ 1029.888031][T30454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.934432][T30454] CPU: 1 UID: 0 PID: 30454 Comm: syz.1.6943 Not tainted syzkaller #0 PREEMPT(full) [ 1029.934461][T30454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1029.934474][T30454] Call Trace: [ 1029.934483][T30454] [ 1029.934492][T30454] dump_stack_lvl+0xe8/0x150 [ 1029.934531][T30454] should_fail_ex+0x40c/0x560 [ 1029.934561][T30454] _copy_from_iter+0x1d3/0x1660 [ 1029.934589][T30454] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1029.934626][T30454] ? __pfx_policy_nodemask+0x10/0x10 [ 1029.934658][T30454] ? unwind_next_frame+0x8f/0x2550 [ 1029.934682][T30454] ? __pfx__copy_from_iter+0x10/0x10 [ 1029.934714][T30454] ? alloc_pages_mpol+0x24a/0x380 [ 1029.934755][T30454] copy_page_from_iter+0x219/0x2d0 [ 1029.934788][T30454] tun_get_user+0x1bf1/0x4370 [ 1029.934820][T30454] ? tun_get_user+0x6e7/0x4370 [ 1029.934896][T30454] ? aa_file_perm+0x4ed/0x15f0 [ 1029.934920][T30454] ? __pfx_tun_get_user+0x10/0x10 [ 1029.934952][T30454] ? __lock_acquire+0x683/0x2cf0 [ 1029.934998][T30454] ? ref_tracker_alloc+0x341/0x4b0 [ 1029.935024][T30454] ? get_pid_task+0x20/0x1f0 [ 1029.935058][T30454] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1029.935087][T30454] ? tun_get+0x1c/0x2f0 [ 1029.935116][T30454] ? tun_get+0x1c/0x2f0 [ 1029.935150][T30454] ? tun_get+0x1c/0x2f0 [ 1029.935180][T30454] ? tun_get+0x1c/0x2f0 [ 1029.935215][T30454] tun_chr_write_iter+0x113/0x200 [ 1029.935249][T30454] vfs_write+0x612/0xba0 [ 1029.935292][T30454] ? __pfx_vfs_write+0x10/0x10 [ 1029.935337][T30454] ? __fget_files+0x2a/0x420 [ 1029.935378][T30454] ksys_write+0x150/0x270 [ 1029.935415][T30454] ? __pfx_ksys_write+0x10/0x10 [ 1029.935460][T30454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.935486][T30454] do_syscall_64+0x174/0x580 [ 1029.935519][T30454] ? trace_irq_disable+0x3b/0x140 [ 1029.935547][T30454] ? clear_bhb_loop+0x40/0x90 [ 1029.935574][T30454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.935596][T30454] RIP: 0033:0x7f39d0f5e68e [ 1029.935617][T30454] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1029.935637][T30454] RSP: 002b:00007f39d1e34fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1029.935661][T30454] RAX: ffffffffffffffda RBX: 00007f39d1e356c0 RCX: 00007f39d0f5e68e [ 1029.935678][T30454] RDX: 000000000000003e RSI: 0000200000000180 RDI: 00000000000000c8 [ 1029.935692][T30454] RBP: 00007f39d1e35090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.935706][T30454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.935719][T30454] R13: 00007f39d1226038 R14: 00007f39d1225fa0 R15: 00007fff3f049fa8 [ 1029.935758][T30454] [ 1030.978106][T21009] Bluetooth: hci1: command 0x0406 tx timeout [ 1033.346573][T30474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1033.849140][T30530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1034.049157][T30549] __nla_validate_parse: 3 callbacks suppressed [ 1034.049177][T30549] netlink: 45 bytes leftover after parsing attributes in process `syz.2.6973'. [ 1034.368075][T30560] FAULT_INJECTION: forcing a failure. [ 1034.368075][T30560] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.380842][T30560] CPU: 0 UID: 0 PID: 30560 Comm: syz.2.6977 Not tainted syzkaller #0 PREEMPT(full) [ 1034.380869][T30560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1034.380882][T30560] Call Trace: [ 1034.380891][T30560] [ 1034.380901][T30560] dump_stack_lvl+0xe8/0x150 [ 1034.380940][T30560] should_fail_ex+0x40c/0x560 [ 1034.380972][T30560] should_failslab+0xa8/0x100 [ 1034.381008][T30560] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1034.381037][T30560] ? dst_alloc+0x105/0x170 [ 1034.381060][T30560] ? dst_alloc+0x105/0x170 [ 1034.381092][T30560] dst_alloc+0x105/0x170 [ 1034.381122][T30560] ip_route_input_rcu+0x20ca/0x3190 [ 1034.381177][T30560] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 1034.381209][T30560] ? bpf_skb_load_helper_32+0x11e/0x390 [ 1034.381256][T30560] ? ipt_do_table+0x137f/0x15d0 [ 1034.381284][T30560] ? ip_route_input_noref+0xad/0x270 [ 1034.381316][T30560] ip_route_input_noref+0x17c/0x270 [ 1034.381351][T30560] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1034.381388][T30560] ? ipt_do_table+0x2b9/0x15d0 [ 1034.381410][T30560] ? __pfx_ipt_do_table+0x10/0x10 [ 1034.381434][T30560] ip_rcv_finish_core+0x593/0x1c00 [ 1034.381481][T30560] ip_rcv_finish+0x14c/0x2a0 [ 1034.381508][T30560] NF_HOOK+0x336/0x3c0 [ 1034.381533][T30560] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1034.381556][T30560] ? NF_HOOK+0x9e/0x3c0 [ 1034.381579][T30560] ? __pfx_NF_HOOK+0x10/0x10 [ 1034.381605][T30560] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1034.381636][T30560] ? netif_receive_skb+0x102/0xbf0 [ 1034.381680][T30560] ? __pfx_ip_rcv+0x10/0x10 [ 1034.381704][T30560] netif_receive_skb+0x45b/0xbf0 [ 1034.381739][T30560] ? __pfx_netif_receive_skb+0x10/0x10 [ 1034.381771][T30560] ? rcu_is_watching+0x15/0xb0 [ 1034.381804][T30560] ? tun_rx_batched+0x185/0x790 [ 1034.381845][T30560] tun_rx_batched+0x1de/0x790 [ 1034.381884][T30560] ? __pfx_tun_rx_batched+0x10/0x10 [ 1034.381914][T30560] ? tun_get_user+0x2717/0x4370 [ 1034.381946][T30560] ? tun_get_user+0x2717/0x4370 [ 1034.381976][T30560] ? tun_get_user+0x23cb/0x4370 [ 1034.382013][T30560] ? tun_get_user+0x23cb/0x4370 [ 1034.382043][T30560] ? __local_bh_enable_ip+0xd0/0x130 [ 1034.382074][T30560] ? tun_get_user+0x2717/0x4370 [ 1034.382103][T30560] ? tun_get_user+0x2717/0x4370 [ 1034.382134][T30560] tun_get_user+0x2b44/0x4370 [ 1034.382189][T30560] ? aa_file_perm+0x4ed/0x15f0 [ 1034.382213][T30560] ? __pfx_tun_get_user+0x10/0x10 [ 1034.382250][T30560] ? __lock_acquire+0x683/0x2cf0 [ 1034.382296][T30560] ? ref_tracker_alloc+0x341/0x4b0 [ 1034.382322][T30560] ? get_pid_task+0x20/0x1f0 [ 1034.382360][T30560] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1034.382390][T30560] ? tun_get+0x1c/0x2f0 [ 1034.382419][T30560] ? tun_get+0x1c/0x2f0 [ 1034.382460][T30560] ? tun_get+0x1c/0x2f0 [ 1034.382488][T30560] ? tun_get+0x1c/0x2f0 [ 1034.382522][T30560] tun_chr_write_iter+0x113/0x200 [ 1034.382556][T30560] vfs_write+0x612/0xba0 [ 1034.382606][T30560] ? __pfx_vfs_write+0x10/0x10 [ 1034.382652][T30560] ? __fget_files+0x2a/0x420 [ 1034.382692][T30560] ksys_write+0x150/0x270 [ 1034.382730][T30560] ? __pfx_ksys_write+0x10/0x10 [ 1034.382774][T30560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.382800][T30560] do_syscall_64+0x174/0x580 [ 1034.382832][T30560] ? trace_irq_disable+0x3b/0x140 [ 1034.382861][T30560] ? clear_bhb_loop+0x40/0x90 [ 1034.382906][T30560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.382928][T30560] RIP: 0033:0x7f53a875e68e [ 1034.382949][T30560] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1034.382968][T30560] RSP: 002b:00007f53a96cbfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1034.382991][T30560] RAX: ffffffffffffffda RBX: 00007f53a96cc6c0 RCX: 00007f53a875e68e [ 1034.383007][T30560] RDX: 000000000000003e RSI: 0000200000000180 RDI: 00000000000000c8 [ 1034.383021][T30560] RBP: 00007f53a96cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.383035][T30560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.383048][T30560] R13: 00007f53a8a26038 R14: 00007f53a8a25fa0 R15: 00007ffdd46c0898 [ 1034.383084][T30560] [ 1035.290485][T30591] PKCS7: Unknown OID: [4] (bad) [ 1035.306610][T30601] netlink: 'syz.2.6988': attribute type 1 has an invalid length. [ 1035.325533][T30591] PKCS7: Only support pkcs7_signedData type [ 1035.346677][T30597] Set syz1 is full, maxelem 0 reached [ 1035.405432][T30601] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1035.423214][T30591] netlink: 'syz.0.6987': attribute type 3 has an invalid length. [ 1035.505658][T30587] bond6: (slave geneve4): making interface the new active one [ 1035.533464][T30587] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 1035.866181][T30620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6996'. [ 1036.311080][T30633] lo speed is unknown, defaulting to 1000 [ 1036.325064][T30639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7001'. [ 1036.507931][T30645] netlink: 'syz.4.7003': attribute type 1 has an invalid length. [ 1036.546854][T30645] netlink: 236 bytes leftover after parsing attributes in process `syz.4.7003'. [ 1036.587514][T30645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7003'. [ 1036.846231][T30633] lo speed is unknown, defaulting to 1000 [ 1036.910296][T30638] Set syz1 is full, maxelem 0 reached [ 1037.226540][T30658] syzkaller0: entered promiscuous mode [ 1037.244881][T30658] syzkaller0: entered allmulticast mode [ 1037.370948][T30664] netlink: 'syz.2.7007': attribute type 1 has an invalid length. [ 1037.414366][T30655] lo speed is unknown, defaulting to 1000 [ 1037.427813][T30664] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7007'. [ 1037.482368][T30664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7007'. [ 1037.513991][T30666] vlan2: entered promiscuous mode [ 1037.584605][T19901] hid-generic 0005:0007:0007.003E: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1037.915489][T30676] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7011'. [ 1037.981263][T30678] netlink: 'syz.4.7012': attribute type 40 has an invalid length. [ 1038.054592][T30680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7011'. [ 1038.545978][T30692] netlink: 'syz.3.7015': attribute type 1 has an invalid length. [ 1038.569259][T30692] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7015'. [ 1038.595715][T30696] netlink: 'syz.3.7015': attribute type 21 has an invalid length. [ 1038.616047][T30655] lo speed is unknown, defaulting to 1000 [ 1039.153950][T30707] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1039.162681][T30711] xfrm0 speed is unknown, defaulting to 1000 [ 1039.181075][T19895] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1039.280526][T30711] xfrm0 speed is unknown, defaulting to 1000 [ 1039.299544][T30715] tun0: tun_chr_ioctl cmd 1074025680 [ 1039.322326][T30711] xfrm0 speed is unknown, defaulting to 1000 [ 1039.512531][T30717] __nla_validate_parse: 1 callbacks suppressed [ 1039.512552][T30717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7024'. [ 1039.720718][T30728] bridge_slave_0: left allmulticast mode [ 1039.757422][T30728] bridge_slave_0: left promiscuous mode [ 1039.766500][T30711] infiniband syz0: set active [ 1039.780675][T30711] infiniband syz0: added xfrm0 [ 1039.790987][T30728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.820228][T30711] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1039.835961][T30711] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1039.855481][T30711] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1039.880295][T30728] bridge_slave_1: left allmulticast mode [ 1039.906687][T30728] bridge_slave_1: left promiscuous mode [ 1039.924154][T30711] RDS/IB: syz0: added [ 1039.928890][T30711] smc: adding ib device syz0 with port count 1 [ 1039.935405][T30711] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 1039.944596][T30728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.978727][T30728] bond0: (slave bond_slave_0): Releasing backup interface [ 1039.989777][T30728] bond0: (slave bond_slave_1): Releasing backup interface [ 1040.000954][T30728] team0: Port device team_slave_0 removed [ 1040.008938][T30728] team0: Port device team_slave_1 removed [ 1040.016766][T30728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.036911][T30728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.045506][T30728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1040.066127][T30741] vlan0: left allmulticast mode [ 1040.071058][T29334] xfrm0 speed is unknown, defaulting to 1000 [ 1040.092126][T19913] xfrm0 speed is unknown, defaulting to 1000 [ 1040.134107][T30711] xfrm0 speed is unknown, defaulting to 1000 [ 1040.365187][T30751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7034'. [ 1040.461829][T30756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7034'. [ 1040.632489][T30762] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7037'. [ 1040.732716][T30711] xfrm0 speed is unknown, defaulting to 1000 [ 1041.454339][T30711] xfrm0 speed is unknown, defaulting to 1000 [ 1041.874372][T30795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7052'. [ 1041.885592][T30795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7052'. [ 1041.896379][T30795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7052'. [ 1041.917076][T30795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7052'. [ 1041.942274][T30795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7052'. [ 1041.977606][T30795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7052'. [ 1042.160113][T30711] xfrm0 speed is unknown, defaulting to 1000 [ 1042.314252][T30819] netlink: 'syz.1.7056': attribute type 1 has an invalid length. [ 1042.346359][T30808] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1042.399947][T30825] Set syz1 is full, maxelem 0 reached [ 1042.527760][T30808] bond3 (unregistering): Released all slaves [ 1042.683815][T30819] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1042.741317][T30823] bond6: (slave geneve3): making interface the new active one [ 1042.752225][T30823] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1042.772137][T30831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1042.928522][T30711] xfrm0 speed is unknown, defaulting to 1000 [ 1043.023391][T30836] netlink: 'syz.4.7061': attribute type 13 has an invalid length. [ 1043.428006][T30847] netlink: 'syz.0.7065': attribute type 1 has an invalid length. [ 1043.473253][T30842] bridge1: entered promiscuous mode [ 1043.478735][T30842] bridge1: entered allmulticast mode [ 1043.486478][T30842] team0: Port device bridge1 added [ 1043.492032][ T202] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.501596][ T202] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.511316][ T202] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.522703][ T202] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.532082][ T202] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.532092][T30711] xfrm0 speed is unknown, defaulting to 1000 [ 1043.547166][ T202] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.598309][ T202] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.636936][ T202] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.158203][T30711] xfrm0 speed is unknown, defaulting to 1000 [ 1044.341029][T30874] bridge0: left allmulticast mode [ 1044.615432][T30883] Set syz1 is full, maxelem 0 reached [ 1044.711477][T30711] xfrm0 speed is unknown, defaulting to 1000 [ 1045.045046][T30711] xfrm0 speed is unknown, defaulting to 1000 [ 1045.087037][T30896] bridge5: entered promiscuous mode [ 1045.092948][T30896] bridge5: entered allmulticast mode [ 1045.103721][T30896] team0: Port device bridge5 added [ 1045.114958][T30896] __nla_validate_parse: 1 callbacks suppressed [ 1045.114990][T30896] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7079'. [ 1045.134431][T30896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7079'. [ 1045.356177][T30711] xfrm0 speed is unknown, defaulting to 1000 [ 1045.804492][T30918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7087'. [ 1045.946979][T29334] hid-generic 0005:0007:0007.003F: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1045.986534][T30920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7087'. [ 1046.003692][T30920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7087'. [ 1046.093918][T30923] fido_id[30923]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 1046.515114][T30933] tipc: Enabled bearer , priority 0 [ 1046.524892][T30933] syzkaller0: entered promiscuous mode [ 1046.531620][T30933] syzkaller0: entered allmulticast mode [ 1046.584981][T30933] tipc: Resetting bearer [ 1046.618720][T30932] tipc: Resetting bearer [ 1046.694278][T30932] tipc: Disabling bearer [ 1046.751538][T30945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7094'. [ 1046.770531][T30939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7093'. [ 1046.901234][T30944] lo speed is unknown, defaulting to 1000 [ 1047.067718][T30941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7093'. [ 1047.086031][T30965] xt_hashlimit: max too large, truncated to 1048576 [ 1047.101871][T30941] nbd: device at index 64 is going down [ 1047.155760][T30958] netlink: 'syz.4.7100': attribute type 1 has an invalid length. [ 1047.191496][T30958] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7100'. [ 1047.441172][T30439] udevd[30439]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1047.482691][T30186] udevd[30186]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1047.552550][T30980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7103'. [ 1047.803405][T30990] netlink: 'syz.4.7105': attribute type 1 has an invalid length. [ 1047.812391][T30944] lo speed is unknown, defaulting to 1000 [ 1047.820375][T30944] xfrm0 speed is unknown, defaulting to 1000 [ 1047.997051][T30990] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1048.012731][T31004] netlink: 'syz.0.7108': attribute type 27 has an invalid length. [ 1048.041795][T31004] lo: left allmulticast mode [ 1048.056989][T31004] tunl0: left allmulticast mode [ 1048.069645][T31004] gre0: left allmulticast mode [ 1048.084286][T31004] gretap0: left allmulticast mode [ 1048.097192][T31004] erspan0: left allmulticast mode [ 1048.110521][T31004] ip_vti0: left allmulticast mode [ 1048.121965][T31004] ip6_vti0: left allmulticast mode [ 1048.142129][T31004] sit0: left allmulticast mode [ 1048.153178][T31004] ip6tnl0: left allmulticast mode [ 1048.173190][T31004] ip6gre0: left allmulticast mode [ 1048.193247][T31004] syz_tun: left allmulticast mode [ 1048.209361][T31004] ip6gretap0: left allmulticast mode [ 1048.225208][T31004] bond0: left allmulticast mode [ 1048.240398][T31004] dummy0: left allmulticast mode [ 1048.254538][T31004] nlmon0: left allmulticast mode [ 1048.267146][T31004] batadv0: left allmulticast mode [ 1048.280435][T31004] vxcan0: left allmulticast mode [ 1048.293346][T31004] vxcan1: left allmulticast mode [ 1048.300129][T31004] veth0: left allmulticast mode [ 1048.305340][T31004] veth1: left allmulticast mode [ 1048.311528][T31004] wg0: left allmulticast mode [ 1048.316559][T31004] wg1: left allmulticast mode [ 1048.321900][T31004] wg2: left allmulticast mode [ 1048.326910][T31004] veth0_to_bridge: left allmulticast mode [ 1048.333126][T31004] bridge_slave_0: left allmulticast mode [ 1048.348052][T31004] veth1_to_bridge: left allmulticast mode [ 1048.354222][T31004] bridge_slave_1: left allmulticast mode [ 1048.361842][T31004] veth0_to_bond: left allmulticast mode [ 1048.368092][T31004] bond_slave_0: left allmulticast mode [ 1048.373889][T31004] veth1_to_bond: left allmulticast mode [ 1048.379918][T31004] bond_slave_1: left allmulticast mode [ 1048.385723][T31004] veth0_to_team: left allmulticast mode [ 1048.391773][T31004] team_slave_0: left allmulticast mode [ 1048.399528][T31004] veth1_to_team: left allmulticast mode [ 1048.405524][T31004] team_slave_1: left allmulticast mode [ 1048.412818][T31004] veth0_to_batadv: left allmulticast mode [ 1048.419401][T31004] batadv_slave_0: left allmulticast mode [ 1048.425579][T31004] veth1_to_batadv: left allmulticast mode [ 1048.431922][T31004] batadv_slave_1: left allmulticast mode [ 1048.438085][T31004] xfrm0: left allmulticast mode [ 1048.443365][T31004] veth0_to_hsr: left allmulticast mode [ 1048.449313][T31004] veth1_to_hsr: left allmulticast mode [ 1048.475227][T31004] hsr0: left allmulticast mode [ 1048.483781][T31004] hsr_slave_0: left allmulticast mode [ 1048.490860][T31004] hsr_slave_1: left allmulticast mode [ 1048.500305][T31004] veth1_virt_wifi: left allmulticast mode [ 1048.506353][T31004] veth0_virt_wifi: left allmulticast mode [ 1048.512527][T31004] virt_wifi0: left allmulticast mode [ 1048.518145][T31004] veth1_vlan: left allmulticast mode [ 1048.523962][T31004] vlan1: left allmulticast mode [ 1048.535608][T31004] macvlan0: left allmulticast mode [ 1048.541831][T31004] macvlan1: left allmulticast mode [ 1048.547723][T31004] ipvlan0: left allmulticast mode [ 1048.553139][T31004] ipvlan1: left allmulticast mode [ 1048.560030][T31004] veth0_vlan: left allmulticast mode [ 1048.565667][T31004] veth1_macvtap: left allmulticast mode [ 1048.572129][T31004] veth0_macvtap: left allmulticast mode [ 1048.579876][T31004] macvtap0: left allmulticast mode [ 1048.585483][T31004] macsec0: left allmulticast mode [ 1048.591261][T31004] geneve0: left allmulticast mode [ 1048.596782][T31004] geneve1: left allmulticast mode [ 1048.602562][T31004] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1048.613737][T31004] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 1048.621716][T31004] netdevsim netdevsim0 netdevsim2: left allmulticast mode [ 1048.629777][T31004] netdevsim netdevsim0 netdevsim3: left allmulticast mode [ 1048.637795][T31004] mac80211_hwsim hwsim93 wlan0: left allmulticast mode [ 1048.645116][T31004] mac80211_hwsim hwsim94 wlan1: left allmulticast mode [ 1048.656850][T31004] bridge1: left allmulticast mode [ 1048.662497][T31004] vxlan0: left allmulticast mode [ 1048.668535][T31004] erspan1: left allmulticast mode [ 1048.673910][T31004] bond1: left allmulticast mode [ 1048.679671][T31004] gretap1: left allmulticast mode [ 1048.713204][T30997] bond5: (slave geneve4): making interface the new active one [ 1048.723171][T30997] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 1048.820919][T30996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.851758][T30996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.915326][T30996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1048.926271][T30996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1048.944882][T30996] veth1_vlan: left promiscuous mode [ 1048.954631][T30996] veth0_vlan: left promiscuous mode [ 1048.962772][T30996] veth0_vlan: entered promiscuous mode [ 1048.972337][T30996] veth1_vlan: entered promiscuous mode [ 1048.990018][T30996] veth1_macvtap: left promiscuous mode [ 1048.997000][T30996] veth0_macvtap: left promiscuous mode [ 1049.004210][T30996] veth0_macvtap: entered promiscuous mode [ 1049.011840][T30996] veth1_macvtap: entered promiscuous mode [ 1049.026281][T30996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1049.035483][T30996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1049.045187][T30996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1049.054338][T30996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1049.080687][T30996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1049.096921][T30996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1049.124077][T19560] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.205277][T19560] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.232210][T19560] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.252311][T19560] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.302109][T19560] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.326987][T19560] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.433989][T19560] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.457405][T19560] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.474745][T19560] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.491292][T19560] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.525001][T19560] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.580974][T19560] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.433912][T31053] __nla_validate_parse: 6 callbacks suppressed [ 1050.433932][T31053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7120'. [ 1050.600072][T31059] netlink: 'syz.4.7122': attribute type 2 has an invalid length. [ 1051.394917][T31092] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 1051.644286][T31119] netlink: 'syz.4.7134': attribute type 1 has an invalid length. [ 1051.719500][T31123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7135'. [ 1051.729196][T31123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7135'. [ 1051.789745][T31119] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1051.866090][T31107] bond6: (slave geneve5): making interface the new active one [ 1051.887954][T31107] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 1052.000144][T31134] netlink: 'syz.3.7138': attribute type 10 has an invalid length. [ 1052.066588][T31134] team0: Port device dummy0 added [ 1052.287623][T31147] netlink: 'syz.4.7141': attribute type 1 has an invalid length. [ 1052.295664][T31147] netlink: 236 bytes leftover after parsing attributes in process `syz.4.7141'. [ 1052.321218][T31147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7141'. [ 1052.464823][T31151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7142'. [ 1052.760346][T31160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7146'. [ 1052.771655][T31160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7146'. [ 1052.914595][T31162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1053.000231][T31172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7150'. [ 1053.076336][T31172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7150'. [ 1053.615684][ T29] audit: type=1800 audit(1783938399.025:8): pid=31208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7161" name=20 dev="tmpfs" ino=1365 res=0 errno=0 [ 1054.415919][T31254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.503371][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.513445][T31254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.917847][T19901] hid-generic 0005:0007:0007.0040: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1055.071830][T31282] fido_id[31282]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 1055.121347][T31289] xt_NFQUEUE: number of total queues is 0 [ 1055.477504][T31302] __nla_validate_parse: 10 callbacks suppressed [ 1055.477526][T31302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7192'. [ 1055.676635][T31322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7198'. [ 1055.824133][T19895] hid-generic 0005:0007:0007.0041: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1055.902595][T31330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7198'. [ 1055.953457][T31330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7198'. [ 1055.972013][T31340] Set syz1 is full, maxelem 0 reached [ 1055.983633][T31340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7201'. [ 1056.043475][T31334] fido_id[31334]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 1056.276331][T31349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7203'. [ 1056.374007][T31355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7206'. [ 1056.680235][T31370] syzkaller0: entered promiscuous mode [ 1056.693629][T31370] syzkaller0: entered allmulticast mode [ 1056.854902][T31385] netlink: 'syz.1.7214': attribute type 1 has an invalid length. [ 1056.863412][T31385] netlink: 236 bytes leftover after parsing attributes in process `syz.1.7214'. [ 1056.875332][T31385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7214'. [ 1057.160791][T31399] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7219'. [ 1057.476997][T31413] FAULT_INJECTION: forcing a failure. [ 1057.476997][T31413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.516174][T31413] CPU: 0 UID: 0 PID: 31413 Comm: syz.0.7221 Not tainted syzkaller #0 PREEMPT(full) [ 1057.516206][T31413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1057.516221][T31413] Call Trace: [ 1057.516230][T31413] [ 1057.516240][T31413] dump_stack_lvl+0xe8/0x150 [ 1057.516280][T31413] should_fail_ex+0x40c/0x560 [ 1057.516312][T31413] _copy_from_user+0x2d/0xb0 [ 1057.516346][T31413] __sys_bpf+0x2e7/0xd90 [ 1057.516386][T31413] ? __pfx___sys_bpf+0x10/0x10 [ 1057.516427][T31413] ? __fget_files+0x2a/0x420 [ 1057.516477][T31413] ? ksys_write+0x242/0x270 [ 1057.516515][T31413] ? __pfx_ksys_write+0x10/0x10 [ 1057.516555][T31413] __x64_sys_bpf+0xba/0xd0 [ 1057.516583][T31413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.516608][T31413] do_syscall_64+0x174/0x580 [ 1057.516641][T31413] ? trace_irq_disable+0x3b/0x140 [ 1057.516669][T31413] ? clear_bhb_loop+0x40/0x90 [ 1057.516696][T31413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.516720][T31413] RIP: 0033:0x7f51e7f9de59 [ 1057.516741][T31413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.516761][T31413] RSP: 002b:00007f51e8dc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1057.516784][T31413] RAX: ffffffffffffffda RBX: 00007f51e8225fa0 RCX: 00007f51e7f9de59 [ 1057.516800][T31413] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 1057.516815][T31413] RBP: 00007f51e8dc3090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.516829][T31413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.516842][T31413] R13: 00007f51e8226038 R14: 00007f51e8225fa0 R15: 00007ffc30e3a3c8 [ 1057.516877][T31413] [ 1058.069704][T31433] netlink: 'syz.1.7229': attribute type 1 has an invalid length. [ 1058.143475][T31435] netlink: 'syz.4.7230': attribute type 2 has an invalid length. [ 1058.161800][T31435] netlink: 'syz.4.7230': attribute type 2 has an invalid length. [ 1058.725746][T31458] FAULT_INJECTION: forcing a failure. [ 1058.725746][T31458] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.752425][T31458] CPU: 1 UID: 0 PID: 31458 Comm: syz.4.7237 Not tainted syzkaller #0 PREEMPT(full) [ 1058.752466][T31458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1058.752481][T31458] Call Trace: [ 1058.752490][T31458] [ 1058.752501][T31458] dump_stack_lvl+0xe8/0x150 [ 1058.752540][T31458] should_fail_ex+0x40c/0x560 [ 1058.752572][T31458] should_failslab+0xa8/0x100 [ 1058.752608][T31458] __kmalloc_noprof+0xfe/0x720 [ 1058.752638][T31458] ? bpf_test_init+0x9f/0x150 [ 1058.752670][T31458] ? bpf_test_init+0x9f/0x150 [ 1058.752712][T31458] bpf_test_init+0x9f/0x150 [ 1058.752750][T31458] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 1058.752791][T31458] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1058.752821][T31458] ? __fget_files+0x2a/0x420 [ 1058.752857][T31458] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1058.752883][T31458] bpf_prog_test_run+0x2c5/0x340 [ 1058.752919][T31458] __sys_bpf+0xa22/0xd90 [ 1058.752958][T31458] ? __pfx___sys_bpf+0x10/0x10 [ 1058.753000][T31458] ? __fget_files+0x2a/0x420 [ 1058.753049][T31458] ? ksys_write+0x242/0x270 [ 1058.753087][T31458] ? __pfx_ksys_write+0x10/0x10 [ 1058.753131][T31458] __x64_sys_bpf+0xba/0xd0 [ 1058.753158][T31458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.753184][T31458] do_syscall_64+0x174/0x580 [ 1058.753217][T31458] ? trace_irq_disable+0x3b/0x140 [ 1058.753245][T31458] ? clear_bhb_loop+0x40/0x90 [ 1058.753274][T31458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.753297][T31458] RIP: 0033:0x7f9daf59de59 [ 1058.753318][T31458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.753339][T31458] RSP: 002b:00007f9dad7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1058.753364][T31458] RAX: ffffffffffffffda RBX: 00007f9daf825fa0 RCX: 00007f9daf59de59 [ 1058.753381][T31458] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 1058.753396][T31458] RBP: 00007f9dad7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.753410][T31458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.753424][T31458] R13: 00007f9daf826038 R14: 00007f9daf825fa0 R15: 00007ffc2363d0c8 [ 1058.753468][T31458] [ 1059.336924][T31463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1062.275668][T31463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1062.504131][T31494] __nla_validate_parse: 7 callbacks suppressed [ 1062.504153][T31494] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7249'. [ 1062.539867][T31495] bridge3: entered promiscuous mode [ 1062.545159][T31495] bridge3: entered allmulticast mode [ 1062.561383][T31495] team0: Port device bridge3 added [ 1062.568146][T31499] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7250'. [ 1062.601212][T31490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7248'. [ 1062.614500][T31495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7250'. [ 1062.625075][T31494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7249'. [ 1062.644487][T31504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7252'. [ 1062.682243][T31490] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1063.257850][T31533] netlink: 'syz.1.7259': attribute type 1 has an invalid length. [ 1063.288135][T31532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7262'. [ 1063.436288][T31533] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1063.524274][T31542] bond7: (slave geneve5): making interface the new active one [ 1063.557275][T31542] bond7: (slave geneve5): Enslaving as an active interface with an up link [ 1064.142519][T31561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7268'. [ 1064.160772][T31561] l2tp_ppp: sess 2/0: no socket in recv [ 1064.604628][T31553] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1064.960436][T31588] netlink: 45 bytes leftover after parsing attributes in process `syz.3.7279'. [ 1065.159114][T31598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7284'. [ 1065.223650][T31598] batman_adv: batadv0: Adding interface: vlan3 [ 1065.238055][T31598] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.277584][T31598] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 1065.358278][T31607] netlink: 'syz.1.7288': attribute type 4 has an invalid length. [ 1065.476982][T31617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1065.799943][T29334] hid-generic 0005:0007:0007.0042: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1065.929719][T31634] fido_id[31634]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 1065.991250][T31635] syzkaller0: entered promiscuous mode [ 1065.996908][T31635] syzkaller0: entered allmulticast mode [ 1066.017751][T31637] netlink: 'syz.0.7298': attribute type 4 has an invalid length. [ 1068.766377][T31669] __nla_validate_parse: 9 callbacks suppressed [ 1068.766398][T31669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7309'. [ 1068.800442][T31669] netlink: 'syz.2.7309': attribute type 1 has an invalid length. [ 1068.808308][T31669] netlink: 'syz.2.7309': attribute type 2 has an invalid length. [ 1069.610985][T31673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7310'. [ 1069.818901][T31690] netlink: 'syz.0.7312': attribute type 1 has an invalid length. [ 1069.948155][T31690] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1070.048851][T31679] bond3: (slave geneve3): making interface the new active one [ 1070.075117][T31679] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1070.620966][T31712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7318'. [ 1070.702914][T31708] nbd4: detected capacity change from 0 to 63 [ 1070.731438][ T1594] [ 1070.733839][ T1594] ====================================================== [ 1070.740891][ T1594] WARNING: possible circular locking dependency detected [ 1070.747956][ T1594] syzkaller #0 Not tainted [ 1070.752408][ T1594] ------------------------------------------------------ [ 1070.759462][ T1594] kworker/1:1H/1594 is trying to acquire lock: [ 1070.765757][ T1594] ffff88805cfda068 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0x1150 [ 1070.774877][ T1594] [ 1070.774877][ T1594] but task is already holding lock: [ 1070.782258][ T1594] ffff8880273ce178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 1070.790827][ T1594] [ 1070.790827][ T1594] which lock already depends on the new lock. [ 1070.790827][ T1594] [ 1070.801242][ T1594] [ 1070.801242][ T1594] the existing dependency chain (in reverse order) is: [ 1070.810264][ T1594] [ 1070.810264][ T1594] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 1070.817507][ T1594] __mutex_lock+0x19d/0x1550 [ 1070.822647][ T1594] nbd_queue_rq+0xc1/0x1150 [ 1070.827710][ T1594] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1070.833796][ T1594] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1070.840669][ T1594] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1070.847206][ T1594] blk_mq_run_work_fn+0x16c/0x300 [ 1070.852779][ T1594] process_scheduled_works+0xa8e/0x14e0 [ 1070.858870][ T1594] worker_thread+0xa47/0xfb0 [ 1070.864012][ T1594] kthread+0x388/0x470 [ 1070.868627][ T1594] ret_from_fork+0x514/0xb70 [ 1070.873766][ T1594] ret_from_fork_asm+0x1a/0x30 [ 1070.879075][ T1594] [ 1070.879075][ T1594] -> #5 (set->srcu){.+.+}-{0:0}: [ 1070.886228][ T1594] __synchronize_srcu+0xc9/0x2f0 [ 1070.891712][ T1594] elevator_switch+0x1e8/0x7b0 [ 1070.897022][ T1594] elevator_change+0x2fa/0x480 [ 1070.902346][ T1594] elevator_set_default+0x375/0x440 [ 1070.908094][ T1594] blk_register_queue+0x3f3/0x4e0 [ 1070.913683][ T1594] __add_disk+0x6cb/0xe30 [ 1070.918563][ T1594] add_disk_fwnode+0xfb/0x4b0 [ 1070.923781][ T1594] nbd_dev_add+0x733/0xb60 [ 1070.928748][ T1594] nbd_init+0x15f/0x1e0 [ 1070.933451][ T1594] do_one_initcall+0x250/0x870 [ 1070.938772][ T1594] do_initcall_level+0x10a/0x1a0 [ 1070.944254][ T1594] do_initcalls+0x59/0xa0 [ 1070.949130][ T1594] kernel_init_freeable+0x29d/0x3e0 [ 1070.954874][ T1594] kernel_init+0x1d/0x1d0 [ 1070.959748][ T1594] ret_from_fork+0x514/0xb70 [ 1070.964878][ T1594] ret_from_fork_asm+0x1a/0x30 [ 1070.970186][ T1594] [ 1070.970186][ T1594] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 1070.978022][ T1594] __mutex_lock+0x19d/0x1550 [ 1070.983156][ T1594] elevator_change+0x1af/0x480 [ 1070.988485][ T1594] elevator_set_none+0xb5/0x140 [ 1070.993880][ T1594] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1071.000229][ T1594] nbd_start_device+0x189/0xb30 [ 1071.005626][ T1594] nbd_genl_connect+0x1597/0x1c10 [ 1071.011193][ T1594] genl_family_rcv_msg_doit+0x233/0x340 [ 1071.017279][ T1594] genl_rcv_msg+0x614/0x7a0 [ 1071.022322][ T1594] netlink_rcv_skb+0x226/0x4a0 [ 1071.027630][ T1594] genl_rcv+0x28/0x40 [ 1071.032155][ T1594] netlink_unicast+0x7bb/0x940 [ 1071.037470][ T1594] netlink_sendmsg+0x813/0xb40 [ 1071.042778][ T1594] sock_sendmsg_nosec+0x13a/0x180 [ 1071.048345][ T1594] ____sys_sendmsg+0x54e/0x850 [ 1071.053671][ T1594] ___sys_sendmsg+0x2a5/0x360 [ 1071.058893][ T1594] __x64_sys_sendmsg+0x1b1/0x290 [ 1071.064373][ T1594] do_syscall_64+0x174/0x580 [ 1071.069505][ T1594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.075940][ T1594] [ 1071.075940][ T1594] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1071.084567][ T1594] blk_alloc_queue+0x544/0x690 [ 1071.089887][ T1594] __blk_mq_alloc_disk+0x194/0x390 [ 1071.095545][ T1594] nbd_dev_add+0x494/0xb60 [ 1071.100523][ T1594] nbd_init+0x15f/0x1e0 [ 1071.105222][ T1594] do_one_initcall+0x250/0x870 [ 1071.110534][ T1594] do_initcall_level+0x10a/0x1a0 [ 1071.116017][ T1594] do_initcalls+0x59/0xa0 [ 1071.120895][ T1594] kernel_init_freeable+0x29d/0x3e0 [ 1071.126641][ T1594] kernel_init+0x1d/0x1d0 [ 1071.131514][ T1594] ret_from_fork+0x514/0xb70 [ 1071.136649][ T1594] ret_from_fork_asm+0x1a/0x30 [ 1071.141949][ T1594] [ 1071.141949][ T1594] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1071.149187][ T1594] fs_reclaim_acquire+0x71/0x100 [ 1071.154672][ T1594] __kmalloc_cache_noprof+0x61/0x660 [ 1071.160521][ T1594] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1071.166273][ T1594] tcp_sendmsg_locked+0x4cdc/0x55c0 [ 1071.172018][ T1594] tcp_sendmsg+0x2f/0x50 [ 1071.176799][ T1594] sock_sendmsg_nosec+0x90/0x180 [ 1071.182274][ T1594] ____sys_sendmsg+0x54e/0x850 [ 1071.187594][ T1594] ___sys_sendmsg+0x2a5/0x360 [ 1071.192829][ T1594] __sys_sendmmsg+0x273/0x4d0 [ 1071.198055][ T1594] __x64_sys_sendmmsg+0xa0/0xc0 [ 1071.203454][ T1594] do_syscall_64+0x174/0x580 [ 1071.208585][ T1594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.215016][ T1594] [ 1071.215016][ T1594] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 1071.223111][ T1594] lock_sock_nested+0x41/0x100 [ 1071.228437][ T1594] inet_shutdown+0x6a/0x390 [ 1071.233486][ T1594] nbd_mark_nsock_dead+0x2cb/0x550 [ 1071.239153][ T1594] sock_shutdown+0x15e/0x260 [ 1071.244313][ T1594] nbd_clear_sock+0x24/0x170 [ 1071.249437][ T1594] nbd_config_put+0x35b/0x660 [ 1071.255005][ T1594] nbd_genl_connect+0x18f7/0x1c10 [ 1071.260574][ T1594] genl_family_rcv_msg_doit+0x233/0x340 [ 1071.266672][ T1594] genl_rcv_msg+0x614/0x7a0 [ 1071.271722][ T1594] netlink_rcv_skb+0x226/0x4a0 [ 1071.277029][ T1594] genl_rcv+0x28/0x40 [ 1071.281548][ T1594] netlink_unicast+0x7bb/0x940 [ 1071.286854][ T1594] netlink_sendmsg+0x813/0xb40 [ 1071.292161][ T1594] sock_sendmsg_nosec+0x13a/0x180 [ 1071.297763][ T1594] ____sys_sendmsg+0x54e/0x850 [ 1071.303069][ T1594] ___sys_sendmsg+0x2a5/0x360 [ 1071.308287][ T1594] __x64_sys_sendmsg+0x1b1/0x290 [ 1071.313778][ T1594] do_syscall_64+0x174/0x580 [ 1071.318910][ T1594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.325342][ T1594] [ 1071.325342][ T1594] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 1071.333003][ T1594] __lock_acquire+0x1520/0x2cf0 [ 1071.338393][ T1594] lock_acquire+0x106/0x350 [ 1071.343446][ T1594] __mutex_lock+0x19d/0x1550 [ 1071.348596][ T1594] nbd_queue_rq+0x373/0x1150 [ 1071.353731][ T1594] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1071.359818][ T1594] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1071.366696][ T1594] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1071.373218][ T1594] blk_mq_run_work_fn+0x16c/0x300 [ 1071.378781][ T1594] process_scheduled_works+0xa8e/0x14e0 [ 1071.384853][ T1594] worker_thread+0xa47/0xfb0 [ 1071.389993][ T1594] kthread+0x388/0x470 [ 1071.394617][ T1594] ret_from_fork+0x514/0xb70 [ 1071.399748][ T1594] ret_from_fork_asm+0x1a/0x30 [ 1071.405045][ T1594] [ 1071.405045][ T1594] other info that might help us debug this: [ 1071.405045][ T1594] [ 1071.415282][ T1594] Chain exists of: [ 1071.415282][ T1594] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 1071.415282][ T1594] [ 1071.427396][ T1594] Possible unsafe locking scenario: [ 1071.427396][ T1594] [ 1071.434861][ T1594] CPU0 CPU1 [ 1071.440240][ T1594] ---- ---- [ 1071.445617][ T1594] lock(&cmd->lock); [ 1071.449618][ T1594] lock(set->srcu); [ 1071.456049][ T1594] lock(&cmd->lock); [ 1071.462565][ T1594] lock(&nsock->tx_lock); [ 1071.467003][ T1594] [ 1071.467003][ T1594] *** DEADLOCK *** [ 1071.467003][ T1594] [ 1071.475155][ T1594] 4 locks held by kworker/1:1H/1594: [ 1071.480448][ T1594] #0: ffff88801eef6d40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1071.491532][ T1594] #1: ffffc9000607fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1071.504458][ T1594] #2: ffff888026bf3398 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 1071.513884][ T1594] #3: ffff8880273ce178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 1071.522896][ T1594] [ 1071.522896][ T1594] stack backtrace: [ 1071.528800][ T1594] CPU: 1 UID: 0 PID: 1594 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 1071.528821][ T1594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1071.528834][ T1594] Workqueue: kblockd blk_mq_run_work_fn [ 1071.528854][ T1594] Call Trace: [ 1071.528861][ T1594] [ 1071.528870][ T1594] dump_stack_lvl+0xe8/0x150 [ 1071.528897][ T1594] print_circular_bug+0x2e1/0x300 [ 1071.528918][ T1594] check_noncircular+0x12e/0x150 [ 1071.528950][ T1594] __lock_acquire+0x1520/0x2cf0 [ 1071.528985][ T1594] ? nbd_queue_rq+0x373/0x1150 [ 1071.529010][ T1594] lock_acquire+0x106/0x350 [ 1071.529032][ T1594] ? nbd_queue_rq+0x373/0x1150 [ 1071.529064][ T1594] __mutex_lock+0x19d/0x1550 [ 1071.529091][ T1594] ? nbd_queue_rq+0x373/0x1150 [ 1071.529116][ T1594] ? ret_from_fork_asm+0x1a/0x30 [ 1071.529132][ T1594] ? unwind_next_frame+0x8f/0x2550 [ 1071.529153][ T1594] ? nbd_queue_rq+0x373/0x1150 [ 1071.529179][ T1594] ? __pfx___mutex_lock+0x10/0x10 [ 1071.529205][ T1594] ? ret_from_fork_asm+0x1a/0x30 [ 1071.529223][ T1594] ? stack_trace_save+0xa9/0x100 [ 1071.529243][ T1594] ? __pfx_stack_trace_save+0x10/0x10 [ 1071.529267][ T1594] nbd_queue_rq+0x373/0x1150 [ 1071.529296][ T1594] ? __lock_acquire+0x13e8/0x2cf0 [ 1071.529321][ T1594] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1071.529355][ T1594] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1071.529386][ T1594] ? sbitmap_get+0x229/0x390 [ 1071.529417][ T1594] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1071.529441][ T1594] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1071.529467][ T1594] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1071.529503][ T1594] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1071.529543][ T1594] ? blk_mq_run_work_fn+0x144/0x300 [ 1071.529560][ T1594] ? blk_mq_run_work_fn+0x144/0x300 [ 1071.529581][ T1594] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1071.529606][ T1594] ? blk_mq_run_work_fn+0x144/0x300 [ 1071.529622][ T1594] blk_mq_run_work_fn+0x16c/0x300 [ 1071.529640][ T1594] ? process_scheduled_works+0xa20/0x14e0 [ 1071.529658][ T1594] process_scheduled_works+0xa8e/0x14e0 [ 1071.529689][ T1594] ? __pfx_process_scheduled_works+0x10/0x10 [ 1071.529710][ T1594] ? assign_work+0x3cf/0x5d0 [ 1071.529730][ T1594] worker_thread+0xa47/0xfb0 [ 1071.529755][ T1594] ? __kthread_parkme+0x71/0x1f0 [ 1071.529780][ T1594] kthread+0x388/0x470 [ 1071.529803][ T1594] ? __pfx_worker_thread+0x10/0x10 [ 1071.529821][ T1594] ? __pfx_kthread+0x10/0x10 [ 1071.529844][ T1594] ret_from_fork+0x514/0xb70 [ 1071.529869][ T1594] ? __pfx_ret_from_fork+0x10/0x10 [ 1071.529892][ T1594] ? __switch_to+0xc89/0x1420 [ 1071.529915][ T1594] ? __pfx_kthread+0x10/0x10 [ 1071.529939][ T1594] ret_from_fork_asm+0x1a/0x30 [ 1071.529961][ T1594] [ 1071.792214][T21009] block nbd4: Receive control failed (result -32) [ 1071.938157][T31719] Bluetooth: hci5: command 0x0406 tx timeout [ 1072.067177][ T1594] block nbd4: Send control failed (result -32) [ 1072.073542][ T1594] block nbd4: Request send failed, requeueing [ 1072.079820][T31727] block nbd4: Dead connection, failed to find a fallback [ 1072.087018][T31727] block nbd4: shutting down sockets [ 1072.092451][T31727] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1072.101676][T31727] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1072.109548][T31727] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1072.118697][T31727] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1072.126459][T31727] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1072.135273][T31727] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1072.145878][ T1605] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1072.155153][ T1605] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1072.163154][ T1605] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1072.171036][ T1605] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1072.179049][ T1605] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1072.187086][ T1605] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1072.196277][ T1605] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1072.204193][ T1605] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1072.212330][ T1605] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1072.221841][ T1605] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1072.231791][ T1605] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1072.241984][ T1605] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1072.252424][ T1605] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1072.261848][T31701] ldm_validate_partition_table(): Disk read failed. [ 1072.268746][ T1605] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1072.279200][T31701] Dev nbd4: unable to read RDB block 0 [ 1072.286582][T31701] nbd4: unable to read partition table [ 1072.300081][T31701] ldm_validate_partition_table(): Disk read failed. [ 1072.308853][T31701] Dev nbd4: unable to read RDB block 0 [ 1072.316206][T31701] nbd4: unable to read partition table