last executing test programs: 2.763659765s ago: executing program 0 (id=13868): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x144}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465247b839c49f83cc481ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e681734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xad}, {&(0x7f0000001400)="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", 0xc07}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000f80)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000880)="5684ce31e0c1622cb1c3d0e26106d43980c87c22723b9a1087766a8be3922150d0dc8d5feb43ce466d4bbee420f2aad4f12da860f7282425ae12601df7589312db4b30ba166b600bd72be76063f04a7bd6", 0x51}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.591208859s ago: executing program 0 (id=13871): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x144}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465247b839c49f83cc481ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e681734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xad}, {&(0x7f0000001400)="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", 0xdc0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000f80)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef7", 0x83}, {&(0x7f0000000880)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.250842698s ago: executing program 0 (id=13873): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800000003000000000000004600"], 0xfce) 2.086909664s ago: executing program 0 (id=13876): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x8001, 0x7, 0x9223, 0x2}, {0x5, 0x2, 0xc, 0x2, 0x401, 0xe}, 0x1, 0x3, 0x19e8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x20000000) 2.003386515s ago: executing program 0 (id=13880): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) socket$inet(0x2, 0xb, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x3a0, 0xffffffff, 0xffffffff, 0x3a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, [0xff000000, 0x0, 0xffffff00, 0xff], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'vlan0\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x33, 0xd, 0x6, 0x2}, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'veth0_virt_wifi\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x4, 0x5}, 0x0, 0x298, 0x2d8, 0x0, {0x1100}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x10, "dd08ec21c22bfdd7dd3f682a9bc5414c0633598bb09376c4ee58379d6eeb"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}}, 0x40040) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = epoll_create(0x400) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000500)={0x40000000}) r7 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) ppoll(&(0x7f00000000c0)=[{r7, 0x8004}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02008dffffff"}) r9 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) recvmmsg(r9, &(0x7f0000002180)=[{{&(0x7f0000000300)=@ax25={{0x3, @default}, [@remote, @rose, @default, @bcast, @bcast, @null, @remote, @netrom]}, 0x80, 0x0, 0x0, &(0x7f0000000480)=""/200, 0xc8}, 0xf51}], 0x1, 0x40002105, 0x0) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000001840), 0x3b, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0x4, 0xfffffe7d) close(0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b14e90800000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1828000003000000000000000200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bd0000000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.70264666s ago: executing program 1 (id=13884): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02830003130000002cbd700000000000000000000000800900000000000000010000000000008005000600000000000a000000000000000000000000000000000000000000000102000000000000000200010000000000040007000000000005000500000000000a00000000000000000000000000000000000000000000010700"/152], 0x98}, 0x1, 0x7}, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) r1 = accept4(r0, 0x0, 0x0, 0x180800) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0xc043, 0x0) write$rfkill(r2, &(0x7f0000000280)={0x1, 0x4, 0x1, 0x1}, 0x8) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x3e, 0x9}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x10, 0x8000, 0x5, 0x7fff, {{0x8, 0x4, 0x2, 0x7, 0x20, 0x66, 0x0, 0x9c, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x44, 0x9, "3a5fad0ba73a6e"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000100)={'gre0\x00', r3, 0x0, 0x10, 0x8, 0x2, {{0x21, 0x4, 0x0, 0x22, 0x84, 0x65, 0x0, 0x4, 0x29, 0x0, @loopback, @multicast2, {[@end, @generic={0x83, 0x2}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x3e, [@remote]}, @ra={0x94, 0x4}, @generic={0x82, 0xd, "cfe820aa3bd2714c88da6c"}, @timestamp_prespec={0x44, 0x4, 0xe3, 0x3, 0x8}, @timestamp_prespec={0x44, 0x2c, 0x87, 0x3, 0x3, [{@empty, 0x656}, {@private=0xa010101, 0xe}, {@empty, 0xca2}, {@remote, 0x80000001}, {@multicast2, 0xfff}]}, @ssrr={0x89, 0x1f, 0x14, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0x34}, @multicast2, @broadcast, @multicast1, @multicast1]}]}}}}}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000076a8a042abd004400", @ANYRES32, @ANYBLOB="0500540000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x811) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="4e5d26430b79121402b476c6837098afe041ead357fabe71f3ed43caeccbab14b63fe6e955f018f03778d9fe6b5c913020fe68c72691362b282906a7b2b3dedb9ecff1ca5aed09137cff2bfd7556", 0x4e) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000088500000076000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[], 0x70}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x90, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x4}, {0xfffffffffffffe41}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0x4, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1}, {0x3, 0x4}, {0x1}}}, 0x24}}, 0x40c4) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 1.536955033s ago: executing program 1 (id=13887): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x800) bind$packet(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$AUDIT_USER(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x40, 0x3ed, 0x200, 0x70bd2a, 0x25dfdbfe, "5653a766e60b4ecdd7e9d01d78a4ea01640ebb5c37a470bdcd2be1c43ef232f5de47402633996b27abc31bf4a0"}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x891b, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000004d40000060c01000000030005000000000002004e21ac1e010100000007000000000200130003"], 0x78}, 0x1, 0x7}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000180), &(0x7f00000001c0)=0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) 1.383546764s ago: executing program 1 (id=13890): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x8001, 0x7, 0x9223, 0x2}, {0x5, 0x2, 0xc, 0x2, 0x401, 0xe}, 0x1, 0x3, 0x19e8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x20000000) 1.295246982s ago: executing program 4 (id=13892): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000280)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_exit\x00', r0}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x11, 0x1, 0xfb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x70bd2d, 0x0, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xa, 0x0, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x130, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x70}, 0x1, 0x7}, 0x0) 1.210023795s ago: executing program 1 (id=13893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000180)=@ethtool_regs={0x12, 0x0, 0xd, "ea7bf860630445c76d50d7a351"}}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x17ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000a00)) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.158842352s ago: executing program 4 (id=13895): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, &(0x7f0000002700)=[{&(0x7f0000002280)="ed", 0x1}], 0x1, 0x0, 0x0, 0x4095}, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)=""/248, 0xf8}, {&(0x7f0000000040)=""/60, 0x3c}], 0x2, &(0x7f0000000280)=""/48, 0x30}, 0xa}], 0x1, 0x40011032, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000440)={'rose0\x00', 0x200}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000240), &(0x7f00000006c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r3, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbb2970bbbb86ce0e44222e0102"], 0x0) 1.129905726s ago: executing program 4 (id=13896): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324", 0x12}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x144}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xfffffffffffffea4, 0x2, [@TCA_FQ_PLIMIT={0x0, 0x1, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x40004}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x5f}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465247b839c49f83cc481ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e681734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xad}, {&(0x7f0000001400)="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", 0xd52}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000f80)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83d", 0x58}, {&(0x7f0000000880)="5684ce31e0c1622cb1c3d0e26106d43980c87c22723b9a1087766a8be3922150d0dc8d5feb43ce466d4bbee420f2aad4f12da860f7282425ae12601df7589312db4b30ba166b60", 0x47}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.072150524s ago: executing program 0 (id=13898): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x14, 0x0, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet(0x2b, 0x801, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x6, 0x4, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x10000000000, 0x100000000000000, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x8001, 0x86, {{0x10, 0x4, 0x0, 0x2, 0x40, 0x65, 0x0, 0x9, 0x2f, 0x0, @loopback, @remote, {[@timestamp={0x44, 0xc, 0xc, 0x0, 0x3, [0x0, 0x0]}, @rr={0x7, 0x7, 0x9a, [@multicast2]}, @timestamp={0x44, 0x18, 0xd, 0x0, 0x4, [0x400, 0xb, 0x40, 0x1, 0x8]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000a40)={@local, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000d80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="88010000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fedbdf2504000000400001801400020065727370616e300000000000000000001400020076657468315f746f5f627269646765001400020070696d7265673000000000000000000058000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e30000000000000000000000008000300030000001400020076657468305f6d6163767461700000001400020076657468315f766c616e00000000000034000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB='\x00'/12, @ANYRES32=r11, @ANYBLOB="0800030001000000380001801400020076657468315f766972745f776966690008000300020000000800030000000000080003000100000008000100", @ANYRES32=r12, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f687372000000005000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f68737200000000140002007767310000000000000000000000000008000100", @ANYRES32=r13], 0x188}, 0x1, 0x0, 0x0, 0x44805}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1.022812226s ago: executing program 1 (id=13899): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000040)=""/197, &(0x7f0000000140)=0xc5) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x4) recvfrom$l2tp(r6, &(0x7f0000000240)=""/145, 0x91, 0x2, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x38, r4, 0x603, 0x70bd32, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfe}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4085}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r8, 0x1, 0x2, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x401c404) 1.009246163s ago: executing program 2 (id=13901): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x4, 0xffffffff, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x2f, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x4}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000d80)={0x334, 0x22, 0x800, 0x0, 0x25dfdbff, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @typed={0x8, 0x34, 0x0, 0x0, @u32=0x8}, @nested={0x26b, 0x8d, 0x0, 0x1, [@nested={0x18, 0x58, 0x0, 0x1, [@typed={0x14, 0x53, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @nested={0x8a, 0x20, 0x0, 0x1, [@typed={0x4, 0x19}, @nested={0x4, 0x11}, @nested={0x4, 0x151}, @nested={0x4, 0x97}, @typed={0x8, 0xa5, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xcf}, @typed={0xc, 0x41, 0x0, 0x0, @u64=0xe6}, @generic="4b071f8aa768a0d29f0ae054f7d6846a3cbb82b1ccdb614a44af8e741cabebc6a2acba03fbf18a32493d5baf92348fe5380780211d22dc21476bb8c5e7a7e9655dbe12f7980ae0c25605dce560cf61b8485a5a01ff5c182ed6cb8b30c84a"]}, @generic="83c06b777ddaa86a0a700337e9e511a2efb4b30a687a4e001504168e955cd29a7a8b4f39edb5f331357b6eccf4e80922518301c183439e5d7a547ce523b8763c25c335457a5070e5cb9d03a65d2927765c136b3e987c161fcec367856c5d86910d7a9bbdfe95473db5592a2dcb37739be69cdf7df34a9e5c0707901271d441a415d2f30a93ff7d4b79aa783ad0048488ef4c45f578d77360a08163a2672c81eb8db5a9e26f3a4fb4d7f9369a9bae4b119ef82641a753d26332ae36ea", @typed={0x7e, 0x72, 0x0, 0x0, @binary="75743017e739bfb784d231687791fcff340f19e4f5f39e2e9ce87e4cb29ee6339a63ed71869f6969d1eeed3b2fbeb28b2885a0463c1d0fb93070e783a43fc100e1e10f2442bfbc98b4c0f12cf06642b3171900a4167a4b8535608bd0e25094e68e266cbc6262d8df8553a1816b2756b9007819ed605a3decc759"}, @generic="30e92ffdaf4c9c911f420da5041612f91855d71b90135abca485d0d18f20b60f8c68513ec21770698aa00d0ec8bc9e71c0ef62ecf771dca67625ac3f6b28fd7ae5bb4e6a989a4b50fa18be40a2e2e62a7a7f04e5e5f8cf079d5780ac263408d2d0a6e3b0b44b7f8613d1984fb985fff907d21569114197", @typed={0x8, 0x12c, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x4, 0x0, 0x0, @fd=r2}]}, @generic="bfe3db221a7078174123e8f00ebf7467a4496338b8038263a39ae5d0d2a689f379568e0ecec992e0205c25b178d9926afd4b49cee8ef4f74fe8cfaebe46b769cb0b27b5f3aa39e62aa4d908a4f81cba6528368f229bc4dab76ce5622bf21ebd71e5e8244c22c329f60487aa6a9b597edc6b550cbb3f480a8f834f18fbb3ab84da303791d82f1bb6422c6da537af96c5e943984dcf89b040fa16d67cd57734303042c5c48b67192"]}, 0x334}], 0x1}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f00000015c0)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe}, 0x1c) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r14 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="1709000000000000000001000000050007000200000008000a0000000000060002000100000008001700", @ANYRES32=r14, @ANYBLOB='\b\x00\t'], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 987.31072ms ago: executing program 4 (id=13902): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xfffffffffffffea4, 0x2, [@TCA_FQ_PLIMIT={0x0, 0x1, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x40004}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x5f}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)}, {&(0x7f00000007c0)="a960e57530b65741465247b839c49f83cc481ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e681734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xad}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206ec227e6e9050c1efa1a1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fbdfc9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027aebce0a83963888396f3e7c953e5416b522fd3a0660fefaea0fc97ca7d82191e2e8f23ca2aa56e8b9de2e1d3e093b8c3f4d7e700b7193b3d83c5b6bb1e7ff2a1c574c9d15ad79631573e41d46653601c510ec7cd0d6125c8e600ebb41247988c28305ac47eead817fecf4460c2221a399134d1d11363401090691a7bf1f58f27a09311d6591cef3d879570667e9e10eebf7df32ec9417f0132be9f1485b167b58b0bf88e31fb2d3957fa05a4d3f191c1d1caa189fc0c11c04287ceaee39a147aced6e3e9c2fe8f51a9823401ad4bf92b0fd4070aae1fe886b8c160a0d2a1507259e58c5608654f05f444877bf9ec215933d6f0a89a3f6199a23c535d8cf9541f2eb970261b12325884fe64330f67a8b07748522c58e5096a04afc67f08b4b0b3da2c9e010b8f079fabdbd187b3d1f69b9f8110e0ec3a488aa8b8563745f7e9fdc1faeaf542858f417d3a75d416e8f55c46cd962d9ac96ce8b56f7a0e22350d2b9e8a537780edddd519fd43baec4834aa6abb0b8c4007dfbb9dac74bf3802108966bf7d5a2999d16110ad0d2cab1c72c2d0ddce14e5043ee62fe9b722355dd2b7e728a589da59ef46dae95f1b89c22d5487a855bc1ee5f9d1427f643e2fa8748e07e6b51e365ab5e23e32401acc229c09f56868532ca611fa678b13f7f580392aee230878817f9dadc9b071245f75b7f626ab6f3342e8d80c3735e3a37646dfddeddec617fd3c155bb0735dd74eb1b71b957645978638f6bab555681b1e0047f7ccf370051f8fd42b171d16291a79ab5aad78940d12129d4de9f1d0a17f539fe333c7e3af31703dd147044ab4efd666cda9942c14cb25fae13cdb497bf7d71094192765df81234cf3dc9d38cdf373a06f5b723ab987708c8ed1b1b7c14cf55663298e752621be837d9e8f806552e0d605515dc0346354c76536d7681bac9dce48479abf18fc8b45862471ce1d75957a23c6bee5b2eb0022d557b6ad6153124e4594d26cc4a6e70de89086e0365039d215c2d9c7d881766b564b58be42104b4a4cad074eb1600be3a98fd7e19296066ee8a8d141d1b9f070c06c58c4f6e5c73b43022f39a13e701220064ceac7951818b1a88f68b2241efc57d37f224161533c75e279500896058aa03ce9571567172b57dbd40e1e14f8068cec77cde8da6aebf54039de9c7251289192616dca9d90bcc3ca24708dde9309d00d9a61c7be33f5858729ca3726fd8e8fdf911e58d3908797ec7b53cec49a8d51a3a30c3172b4277a8be98346488f10385ab3396ba34390f5f44a6f51606a392c25f4b6c65d3cee98004c5312b9f2a6349facbb7f0491fa0505ddc859e25963fae59e8ff05282c108be2a267690c8d53cd2ab7189b997cca8f0905ebcdc86a29b851546284870b348d54023e16262e78c034885696e931e1b2a7b2c23c59ef21393370a16f068ce46115e6b1c3ba9375bb9cb644ec9032bb2eb57eb4897284164af7a8b0a7019a610985dad9f1ce9f12a9a2399ee63fd6d21ee4adc8cbeb7ffe22b50e14c959042197ae45c8f8db2a5d03d6d9c2d5e826112a0bf6d21854a6d5fc77604e4117d7e9a92804c7db9f3eeca536b61a079654f8afbccc140602db833e537ac3c591b98549b5c70734e98b5a47eb9cc16ab2e0ed4f32ff69558e5dcfa2a3b54b8cf3326d4cdd7e9a0c19e4b703070a996acb40a882c2c512e38b4e3d31fe918a3562526132c7bbd497d3f5d40881e6c7363f2e21c8ae8d3ade72d57b6fe9a6cce7f100ae63775c6706b5004312b057aa9191e7614a69584974629c81e536b6422072cdb55b5d98418bf0b15268551548fbc6a9c84f4f701461c5e8e9f12573cc7611758c085582c823f9500d1fb8fa0eb44423f78fa60262f1578304c834865ba39ae3a1a393cfc3c9892518fca1ce37752f488faeabcb616700e831239025481f", 0xdc0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000f80)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000880)="5684ce31e0c1622cb1c3d0e26106d43980c87c22723b9a1087766a8be3922150d0dc8d5feb43ce466d4bbee420f2aad4f12da860f7282425ae12601df7589312db4b30ba166b600bd72be76063f04a7bd6", 0x51}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 842.227538ms ago: executing program 2 (id=13903): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x8001, 0x7, 0x9223, 0x2}, {0x5, 0x2, 0xc, 0x2, 0x401, 0xe}, 0x1, 0x3, 0x19e8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x20000000) 841.812932ms ago: executing program 4 (id=13904): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 724.797447ms ago: executing program 3 (id=13906): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, &(0x7f0000002700)=[{&(0x7f0000002280)="ed", 0x1}], 0x1, 0x0, 0x0, 0x4095}, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)=""/248, 0xf8}, {&(0x7f0000000040)=""/60, 0x3c}], 0x2, &(0x7f0000000280)=""/48, 0x30}, 0xa}], 0x1, 0x40011032, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000440)={'rose0\x00', 0x200}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000240), &(0x7f00000006c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r3, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbb2970bbbb86ce0e44222e0102"], 0x0) 644.329551ms ago: executing program 3 (id=13907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 556.769511ms ago: executing program 3 (id=13908): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703bf000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="ddc937b79e6399c3eaf955856100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r3, r4, 0x4, r2}, 0x10) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xbb, 0x1000000757}) 462.821533ms ago: executing program 4 (id=13909): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e21000014"], 0x70}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x1) unshare(0x2c060000) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 462.348895ms ago: executing program 3 (id=13910): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delrng={0x10, 0x14, 0x200, 0x70bd25, 0x7, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x840) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000201}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x38}}, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c055}, 0x6000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r0, 0x800, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000580)={0x8, 'rose0\x00', {'veth1_virt_wifi\x00'}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x608, 0x7, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x10) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@delrng={0x10, 0x14, 0x20, 0x70bd29, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000007c0), &(0x7f0000000800)=0x4) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000840)) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000940)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000980)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000009c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0xea6f9a134bdace34}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044010}, 0x20000040) socketpair(0x1f, 0x1, 0x9, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(r12, &(0x7f0000002040)=[{&(0x7f0000000b80)="c17a855346b0a625206adbb1a078385b4d1d0137", 0x14}, {&(0x7f0000000bc0)="015a2473e8002a3a19dfa36c1f6894d1cf0ac2020f2987e38538dda7d0b52cbd5e011eeed95530e1fee02a08db39c7c7ebfd3d7c0b1ce455f4d76a7491154f64a6be562e373395b5d7298c4f27d17dc60fa3da46fe54e4e25798bb9730be7b876bbc9e51aa4e9053ac79a9fc0b9337675cf6231ff22a46ccadcdea7249af21f78d859cfd77d1a760af0a68998f211f28", 0x90}, {&(0x7f0000000c80)="82ef6dafc23695d4064f598a23640505dec7ed9be6454774dc50e1e3147a82d28a2d57e5e9eecd9ac6ebb94c6eabe9eeeaefb0fa73bdd605e262710073b8cc6bbd8895a02f7001bbae131527068814bd5b6dfe8d233ccfc7ab428e4d03bf", 0x5e}, {&(0x7f0000000d00)="f05da971170f7cef8ff792cbc08062265c6e201309b662b2a9dc9f5feb77b389372bb32b30499f5fdc2c816240f766c517bd32aced39192414c1a668b9b7a2655db47cbccb8ffc3821ebb7c1c2247a823a146d4aa9d127d07f7e1b13ddcfcc57b3db601c5697695291d20d73d895d5ba40d99ed40e0ff44622072a8e94ef9dac3f9954b8902091745be253c23b1defec2b3dcffd01626aae17a1881b7df518e50d8c694991bbb7b0ecab47fc3fbe82ddd433d1051535c589ecc9d654128adf92ef59ae4ce71f1ab7d4d9ff63c94df03a65", 0xd1}, {&(0x7f0000000e00)="5371721797d6119f7c5082dad60f1866f03e5fc84f8a9f7e3fc86f6437fe27d217937674b9bb40eb8968e3a31f3bcbdaefd85b83a48a505d3e85905d37db8d123e4bec3e1ce80099a09851ac1d115a1814ffda1a182932670411af1b50b491ef1cc73539ef084700277d3640404e589ee99ceeaf04322eb58f20835b90ab05917e4615507ed291dce22d002b23b34dc997c7d35e48b90f1d6e0143b458de167afbf90488ba26a3dd7e9a98e4e4c8bd240cebb6", 0xb3}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="6985312104ced0a614ecf3ff3b04c29bc2abc188cbb749f042c5dd99378de2ec9b3545fe25e41d10493a81814ea56ff20e207f4438a5e4994dd65d6833b875a73c0fcee5a14a792d40b057d044afd1143de338486fa670bb110e471c8680c6d5893cb22293fcea3860e2b466e046b168b75b1c9c38532b0ab132275202b9cec84ca8e065ce4e7e381fd86a513516f28b2caa8ac2a2f0069e0a39f71d4bca37c4d8e4153de9a6b3d854f14e378dde6d1e31adcb3950af4a670cc7635b6a334b7a79284347a5ab7ae540e1cf77c16024b34117e3", 0xd3}, {&(0x7f0000001fc0)="7ed0be798b9c829cebb1e98fc4474ab4690d472d3633dd7a19f64fcd23cc37cd91d4bfc89106ccbfd5e218baaf3fe721a0ee43791bebe8791a8c8287523dc4ec4892a3675b4aa188243a833e6ec3d43ce544fcaaed24b1a21791ba642b1ea70a9f5c103fbe58e9901fa4f976885d1e714ac7b341124522e530942eb1c4", 0x7d}], 0x8, 0x7, 0x4d) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002100)=@generic={&(0x7f00000020c0)='./file0\x00', 0x0, 0x18}, 0x18) r13 = accept$ax25(r11, &(0x7f0000002140)={{0x3, @default}, [@remote, @default, @rose, @bcast, @netrom, @null, @rose, @default]}, &(0x7f00000021c0)=0x48) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r13, 0x8982, &(0x7f0000002200)) r14 = socket(0x22, 0x80000, 0x5) setsockopt$IP_VS_SO_SET_DEL(r14, 0x0, 0x484, &(0x7f0000002240)={0x5c977afb9305debd, @rand_addr=0x64010101, 0x4e24, 0x1, 'wrr\x00', 0x1, 0x6, 0x77}, 0x2c) 448.084311ms ago: executing program 2 (id=13911): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 357.149535ms ago: executing program 3 (id=13912): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324", 0x12}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x144}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xfffffffffffffea4, 0x2, [@TCA_FQ_PLIMIT={0x0, 0x1, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x40004}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x5f}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465247b839c49f83cc481ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e681734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xad}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206ec227e6e9050c1efa1a1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fbdfc9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027aebce0a83963888396f3e7c953e5416b522fd3a0660fefaea0fc97ca7d82191e2e8f23ca2aa56e8b9de2e1d3e093b8c3f4d7e700b7193b3d83c5b6bb1e7ff2a1c574c9d15ad79631573e41d46653601c510ec7cd0d6125c8e600ebb41247988c28305ac47eead817fecf4460c2221a399134d1d11363401090691a7bf1f58f27a09311d6591cef3d879570667e9e10eebf7df32ec9417f0132be9f1485b167b58b0bf88e31fb2d3957fa05a4d3f191c1d1caa189fc0c11c04287ceaee39a147aced6e3e9c2fe8f51a9823401ad4bf92b0fd4070aae1fe886b8c160a0d2a1507259e58c5608654f05f444877bf9ec215933d6f0a89a3f6199a23c535d8cf9541f2eb970261b12325884fe64330f67a8b07748522c58e5096a04afc67f08b4b0b3da2c9e010b8f079fabdbd187b3d1f69b9f8110e0ec3a488aa8b8563745f7e9fdc1faeaf542858f417d3a75d416e8f55c46cd962d9ac96ce8b56f7a0e22350d2b9e8a537780edddd519fd43baec4834aa6abb0b8c4007dfbb9dac74bf3802108966bf7d5a2999d16110ad0d2cab1c72c2d0ddce14e5043ee62fe9b722355dd2b7e728a589da59ef46dae95f1b89c22d5487a855bc1ee5f9d1427f643e2fa8748e07e6b51e365ab5e23e32401acc229c09f56868532ca611fa678b13f7f580392aee230878817f9dadc9b071245f75b7f626ab6f3342e8d80c3735e3a37646dfddeddec617fd3c155bb0735dd74eb1b71b957645978638f6bab555681b1e0047f7ccf370051f8fd42b171d16291a79ab5aad78940d12129d4de9f1d0a17f539fe333c7e3af31703dd147044ab4efd666cda9942c14cb25fae13cdb497bf7d71094192765df81234cf3dc9d38cdf373a06f5b723ab987708c8ed1b1b7c14cf55663298e752621be837d9e8f806552e0d605515dc0346354c76536d7681bac9dce48479abf18fc8b45862471ce1d75957a23c6bee5b2eb0022d557b6ad6153124e4594d26cc4a6e70de89086e0365039d215c2d9c7d881766b564b58be42104b4a4cad074eb1600be3a98fd7e19296066ee8a8d141d1b9f070c06c58c4f6e5c73b43022f39a13e701220064ceac7951818b1a88f68b2241efc57d37f224161533c75e279500896058aa03ce9571567172b57dbd40e1e14f8068cec77cde8da6aebf54039de9c7251289192616dca9d90bcc3ca24708dde9309d00d9a61c7be33f5858729ca3726fd8e8fdf911e58d3908797ec7b53cec49a8d51a3a30c3172b4277a8be98346488f10385ab3396ba34390f5f44a6f51606a392c25f4b6c65d3cee98004c5312b9f2a6349facbb7f0491fa0505ddc859e25963fae59e8ff05282c108be2a267690c8d53cd2ab7189b997cca8f0905ebcdc86a29b851546284870b348d54023e16262e78c034885696e931e1b2a7b2c23c59ef21393370a16f068ce46115e6b1c3ba9375bb9cb644ec9032bb2eb57eb4897284164af7a8b0a7019a610985dad9f1ce9f12a9a2399ee63fd6d21ee4adc8cbeb7ffe22b50e14c959042197ae45c8f8db2a5d03d6d9c2d5e826112a0bf6d21854a6d5fc77604e4117d7e9a92804c7db9f3eeca536b61a079654f8afbccc140602db833e537ac3c591b98549b5c70734e98b5a47eb9cc16ab2e0ed4f32ff69558e5dcfa2a3b54b8cf3326d4cdd7e9a0c19e4b703070a996acb40a882c2c512e38b4e3d31fe918a3562526132c7bbd497d3f5d40881e6c7363f2e21c8ae8d3ade72d57b6fe9a6cce7f100ae63775c6706b5004312b057aa9191e7", 0xd52}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000f80)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83d", 0x58}, {&(0x7f0000000880)="5684ce31e0c1622cb1c3d0e26106d43980c87c22723b9a1087766a8be3922150d0dc8d5feb43ce466d4bbee420f2aad4f12da860f7282425ae12601df7589312db4b30ba166b60", 0x47}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 328.282228ms ago: executing program 2 (id=13913): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r0, 0xcf0, 0x7, 0x5}) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) 174.336621ms ago: executing program 3 (id=13914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)=""/177, 0xb1}], 0x1, &(0x7f0000000c80)=""/68, 0x44}, 0xcce1}], 0x1, 0x20, 0x0) sendmmsg$inet(r1, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001440)="ff", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)='#', 0x1}], 0x1}}], 0x2, 0x40480dc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x54, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x39}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3ff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7f}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004881}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f5101007f51010049f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f000073f000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x400000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40) 170.292613ms ago: executing program 2 (id=13915): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, 0x0) (async) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x1, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000880)=0xfbf, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000880)=0xfbf, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x20000010) (async) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x20000010) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400020008000a00"/41, @ANYRESDEC=r1, @ANYBLOB='\n\x00:'], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400020008000a00"/41, @ANYRESDEC=r1, @ANYBLOB='\n\x00:'], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x61) (async) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x61) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="e40767", 0x3}, {&(0x7f0000000400)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2bf920be733d5e21ac510b279753142e15c366bd567563a39dc8a1f82c12b5e23e4297fa70d70110fd408097aa1b9c560dae166223968985d838c4dc5cf0b9122d7df3e79c64af3b05fe3dd65bdba33b66aa6e67e71127deb6cab6c7b1ee2858dc8e2aed6de1a8e07dd75b017df1bd495c59812ac39c2066b761f596a88ece33728617f756fd136f6b2819c27e68ea969881ae13899dd2fe4193b18c0210a47dd57b02240ed5fbe3b902caf598599", 0xcf}, {0x0}, {&(0x7f00000008c0)="2cad1cb24db0481cba0fe4efcc9b012f9976ea7f782c100ce30fca34ffa9c98e5c24851bc899a730ff662353fa6cad61e53be4c5d14f555ef2a1a9e7dfca05c8532236694df200cd9fba820c02cec743286b58f4380acfec90d09a8f38dee5976a2b5204b2", 0x65}, {&(0x7f00000007c0)="252727ab6335934788a2392b166e43702e1ffb52cee09553c1b56514b04ce8dc62ac5933990b20f45e69af6008ec0e56193c3e0ebf87841556c4592b76750b0c7b10b4b28ea514acfa72f951426faa258d8828931125deffab", 0x59}], 0x5}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001480)}, {&(0x7f0000000600)="c88b24d13e46650476bd62b2a4a9e5258baaa2b1b66b01e3187aa58a5113890ed7917a083d5b4cc77aca9afa9e", 0x2d}, {&(0x7f0000000940)="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", 0x116}, {&(0x7f00000006c0)="28af22ee5579386f090000000000000000000000002f1bb962067560f20849897defddcc9d10bae0452d478880ba507183c78b5c1efe9f45f0e7a4ef0b76e656c836f13aab1d6dc20a979f369d0138ae25598c12691ae036ea88f7795caa02000000000000008bfaa4c19dc2000000ae8da3e6cb0f6733ffd11c8235c6e5759bfd1bb1cc82c61e63a1316e3e6ae0acf6c9b445316d617d700df440817a4e505915ce6d77f883da6173830838af380d13e9c78300aad57a78d4408c4e2a55d011be914c1b93659eb7bbaf94c63636e2c14334e77699a4d77138aa08a300"/231, 0xe7}, {&(0x7f00000015c0)="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", 0x138}, {&(0x7f0000001a40)="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", 0xb3b}], 0x6}}], 0x2, 0x8058) r6 = socket(0x1f, 0x4, 0x2) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001a00010a29bd70e4bfffffff80"], 0x14}, 0x1, 0x0, 0x0, 0x40008d5}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 427.117µs ago: executing program 1 (id=13916): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x144}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465247b839c49f83cc481ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e681734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xad}, {&(0x7f0000001400)="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", 0xc07}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000f80)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000880)="5684ce31e0c1622cb1c3d0e26106d43980c87c22723b9a1087766a8be3922150d0dc8d5feb43ce466d4bbee420f2aad4f12da860f7282425ae12601df7589312db4b30ba166b600bd72be76063f04a7bd6", 0x51}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 2 (id=13917): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, &(0x7f0000002700)=[{&(0x7f0000002280)="ed", 0x1}], 0x1, 0x0, 0x0, 0x4095}, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)=""/248, 0xf8}, {&(0x7f0000000040)=""/60, 0x3c}], 0x2, &(0x7f0000000280)=""/48, 0x30}, 0xa}], 0x1, 0x40011032, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x27c8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000440)={'rose0\x00', 0x200}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r3, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbb2970bbbb86ce0e44222e0102"], 0x0) kernel console output (not intermixed with test programs): 458] RBP: 00007ff2f27dd090 R08: 0000000000000000 R09: 0000000000000000 [ 751.353321][ T2458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 751.353332][ T2458] R13: 00007ff2f1be6038 R14: 00007ff2f1be5fa0 R15: 00007ffe58bc97d8 [ 751.353362][ T2458] [ 751.743853][ T2467] siw: device registration error -23 [ 751.773802][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 751.790804][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 751.799991][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 751.820717][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 751.828567][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 751.930162][ T2465] lo speed is unknown, defaulting to 1000 [ 752.125713][ T2483] tun0: tun_chr_ioctl cmd 1074025675 [ 752.131169][ T2483] tun0: persist enabled [ 752.158330][ T2483] bridge_slave_0: left allmulticast mode [ 752.187697][ T2483] bridge_slave_0: left promiscuous mode [ 752.193917][ T2483] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.220822][ T2483] bridge_slave_1: left allmulticast mode [ 752.233687][ T2483] bridge_slave_1: left promiscuous mode [ 752.239718][ T2483] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.261549][ T2483] bond0: (slave bond_slave_0): Releasing backup interface [ 752.275580][ T2483] bond0: (slave bond_slave_1): Releasing backup interface [ 752.296358][ T2483] team0: Port device team_slave_0 removed [ 752.311291][ T2483] team0: Port device team_slave_1 removed [ 752.317939][ T2483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.325725][ T2483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.334975][ T2483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.342427][ T2483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.352326][ T2483] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 752.416300][ T2465] chnl_net:caif_netlink_parms(): no params data found [ 752.459511][ T2502] syzkaller0: entered promiscuous mode [ 752.466136][ T2502] syzkaller0: entered allmulticast mode [ 752.499752][ T2498] netlink: 'syz.4.12289': attribute type 11 has an invalid length. [ 752.774313][ T2465] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.781650][ T2465] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.789659][ T2465] bridge_slave_0: entered allmulticast mode [ 752.797833][ T2465] bridge_slave_0: entered promiscuous mode [ 752.807905][ T2465] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.817570][ T2465] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.825096][ T2465] bridge_slave_1: entered allmulticast mode [ 752.833526][ T2465] bridge_slave_1: entered promiscuous mode [ 752.890088][ T2465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.913919][ T2465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.968821][ T2465] team0: Port device team_slave_0 added [ 752.977670][ T2465] team0: Port device team_slave_1 added [ 753.030792][ T2465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.048636][ T2465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.080507][ T2465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.095397][ T2465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.102444][ T2465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.131061][ T2465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.144297][ T2536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12299'. [ 753.154007][ T2536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12299'. [ 753.159785][ T2538] ip6gre1: entered promiscuous mode [ 753.163041][ T2536] netlink: 'syz.3.12299': attribute type 18 has an invalid length. [ 753.163070][ T2536] netlink: 'syz.3.12299': attribute type 20 has an invalid length. [ 753.184527][ T2538] ip6gre1: entered allmulticast mode [ 753.265693][ T2465] hsr_slave_0: entered promiscuous mode [ 753.280513][ T2465] hsr_slave_1: entered promiscuous mode [ 753.288513][ T2465] debugfs: 'hsr0' already exists in 'hsr' [ 753.295078][ T2465] Cannot create hsr debugfs directory [ 753.476372][ T2553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12302'. [ 753.500604][ T2552] tipc: Enabled bearer , priority 0 [ 753.508233][ T2552] syzkaller0: entered promiscuous mode [ 753.514444][ T2552] syzkaller0: entered allmulticast mode [ 753.561467][ T2548] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12302'. [ 753.567796][ T2552] syzkaller0: mtu less than device minimum [ 753.604829][ T2465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.622160][ T2562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12305'. [ 753.635205][ T2551] tipc: Resetting bearer [ 753.656475][ T2551] tipc: Disabling bearer [ 753.702332][ T2465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.856130][ T2465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.903214][ T52] Bluetooth: hci4: command tx timeout [ 754.021373][ T2465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.374059][ T2465] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 754.393032][ T2599] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.12316'. [ 754.396121][ T2465] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 754.423534][ T2465] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 754.454307][ T2465] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 754.509729][ T2612] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 754.524795][ T2612] bond1 (unregistering): Released all slaves [ 754.739363][ T2465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.798557][ T2465] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.829481][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.836674][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.880356][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.887558][ T5932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.147362][ T2643] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.12328'. [ 755.327397][ T2662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12333'. [ 755.354817][ T2665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12332'. [ 755.467254][ T2465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.550775][ T2465] veth0_vlan: entered promiscuous mode [ 755.579576][ T2465] veth1_vlan: entered promiscuous mode [ 755.629123][ T2465] veth0_macvtap: entered promiscuous mode [ 755.674590][ T2465] veth1_macvtap: entered promiscuous mode [ 755.734913][ T2465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.758838][ T2465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.778244][ T2690] siw: device registration error -23 [ 755.784988][ T79] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.795674][ T79] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.805276][ T79] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.815510][ T79] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.922046][ T2692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12339'. [ 755.948435][ T2692] tap0: tun_chr_ioctl cmd 35108 [ 755.954746][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.973700][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.984095][ T52] Bluetooth: hci4: command tx timeout [ 756.038394][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.051967][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.207179][ T2705] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 756.297229][ T2709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12343'. [ 756.320241][ T2707] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.12342'. [ 756.376853][ T2714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.449089][ T2722] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12347'. [ 756.462383][ T2722] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12347'. [ 756.487941][ T2714] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 756.520958][ T2725] siw: device registration error -23 [ 756.528563][ T2714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.723563][ T2738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12353'. [ 756.733284][ T2738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12353'. [ 756.761560][ T2738] gretap0: entered promiscuous mode [ 756.771926][ T2738] gretap0: left promiscuous mode [ 757.042021][ T2750] lo speed is unknown, defaulting to 1000 [ 757.042631][ T2752] nbd: illegal input index -1 [ 758.062936][ T52] Bluetooth: hci4: command tx timeout [ 758.064717][ T2777] siw: device registration error -23 [ 758.374669][ T2787] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.12368'. [ 758.525493][ T2789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12367'. [ 758.556811][ T2789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12367'. [ 758.560327][ T2802] ipt_rpfilter: unknown options [ 758.995411][ T2831] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 759.003969][ T2833] siw: device registration error -23 [ 759.013315][ T2830] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 759.302889][ T2855] ip6gretap1: entered promiscuous mode [ 759.344519][ T2860] openvswitch: netlink: Flow actions attr not present in new flow. [ 759.476963][ T2876] netlink: 'syz.1.12392': attribute type 4 has an invalid length. [ 759.616921][ T2883] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 759.934499][ T2901] SET target dimension over the limit! [ 760.142762][ T52] Bluetooth: hci4: command tx timeout [ 760.467075][ T2929] netlink: 'syz.4.12412': attribute type 72 has an invalid length. [ 760.950707][ T2957] tap0: tun_chr_ioctl cmd 1074025677 [ 760.967673][ T2957] tap0: linktype set to 825 [ 760.987328][ T2957] __nla_validate_parse: 10 callbacks suppressed [ 760.987342][ T2957] netlink: 77 bytes leftover after parsing attributes in process `syz.3.12422'. [ 761.407742][ T2978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12430'. [ 761.529000][ T2975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.811013][ T2992] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12436'. [ 761.902821][ T2998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12440'. [ 762.027493][ T3005] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12441'. [ 762.124001][ T3007] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 762.189047][ T3012] veth3: entered promiscuous mode [ 762.211665][ T3015] hsr0: entered promiscuous mode [ 762.262715][ T3017] netlink: 92 bytes leftover after parsing attributes in process `syz.3.12446'. [ 762.271775][ T3017] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12446'. [ 762.338514][ T3017] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12446'. [ 762.400293][ T3013] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 762.465816][ T95] block nbd4: Possible stuck request ffff88802516e000: control (read@0,1024B). Runtime 210 seconds [ 762.479846][ T95] block nbd4: Possible stuck request ffff88802516e1c0: control (read@1024,1024B). Runtime 210 seconds [ 762.490962][ T95] block nbd4: Possible stuck request ffff88802516e380: control (read@2048,1024B). Runtime 210 seconds [ 762.502696][ T95] block nbd4: Possible stuck request ffff88802516e540: control (read@3072,1024B). Runtime 210 seconds [ 762.573349][ T3043] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12452'. [ 762.587199][ T3043] batadv_slave_0: Caught tx_queue_len zero misconfig [ 762.878409][ T3062] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.954494][ T3062] bridge0: entered allmulticast mode [ 762.962222][ T3062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12461'. [ 762.978801][ T3062] bridge_slave_1: left allmulticast mode [ 762.992108][ T3062] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.020532][ T3062] bridge_slave_0: left allmulticast mode [ 763.041651][ T3062] bridge_slave_0: left promiscuous mode [ 763.056954][ T3062] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.101093][ T3062] bridge0 (unregistering): left allmulticast mode [ 763.175203][ T3074] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.182899][ T3074] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.465080][ T3087] siw: device registration error -23 [ 763.479352][ T3086] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 763.679426][ T3096] siw: device registration error -23 [ 763.850021][ T3102] netlink: 'syz.0.12475': attribute type 2 has an invalid length. [ 764.060867][ T3111] netlink: 'syz.4.12478': attribute type 31 has an invalid length. [ 764.087072][ T3111] ip6gre0: Caught tx_queue_len zero misconfig [ 764.105449][ T3111] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 764.168262][ T3112] tipc: Started in network mode [ 764.173542][ T3112] tipc: Node identity 16b541380c5, cluster identity 4711 [ 764.183649][ T3112] tipc: Enabled bearer , priority 0 [ 764.191502][ T3112] syzkaller0: entered promiscuous mode [ 764.214797][ T3112] syzkaller0: entered allmulticast mode [ 764.688578][ T3127] gretap0: entered promiscuous mode [ 764.699134][ T3127] gretap0: left promiscuous mode [ 764.713697][ T3103] tipc: Resetting bearer [ 764.757067][ T3103] tipc: Disabling bearer [ 765.175969][ T3142] siw: device registration error -23 [ 765.248449][T30572] udevd[30572]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 765.291816][T30572] udevd[30572]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 765.360768][ T3147] siw: device registration error -23 [ 765.463060][ T3152] tap0: tun_chr_ioctl cmd 37916 [ 765.475447][ T3152] tap0: tun_chr_ioctl cmd 2147767521 [ 765.896005][ T3176] siw: device registration error -23 [ 765.947981][ T3179] xt_TCPMSS: Only works on TCP SYN packets [ 765.963156][ T3178] siw: device registration error -23 [ 766.115703][ T3188] __nla_validate_parse: 13 callbacks suppressed [ 766.115720][ T3188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12503'. [ 766.152355][ T3187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12502'. [ 766.423750][ T3201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12504'. [ 766.431638][ T3207] FAULT_INJECTION: forcing a failure. [ 766.431638][ T3207] name failslab, interval 1, probability 0, space 0, times 0 [ 766.460088][ T3207] CPU: 0 UID: 0 PID: 3207 Comm: syz.4.12510 Not tainted syzkaller #0 PREEMPT(full) [ 766.460112][ T3207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 766.460122][ T3207] Call Trace: [ 766.460128][ T3207] [ 766.460135][ T3207] dump_stack_lvl+0x189/0x250 [ 766.460159][ T3207] ? __pfx____ratelimit+0x10/0x10 [ 766.460177][ T3207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 766.460197][ T3207] ? __pfx__printk+0x10/0x10 [ 766.460217][ T3207] ? __pfx___might_resched+0x10/0x10 [ 766.460231][ T3207] ? fs_reclaim_acquire+0x7d/0x100 [ 766.460257][ T3207] should_fail_ex+0x414/0x560 [ 766.460283][ T3207] should_failslab+0xa8/0x100 [ 766.460300][ T3207] __kmalloc_noprof+0xcb/0x7f0 [ 766.460319][ T3207] ? tomoyo_encode+0x28b/0x550 [ 766.460345][ T3207] tomoyo_encode+0x28b/0x550 [ 766.460371][ T3207] tomoyo_realpath_from_path+0x58d/0x5d0 [ 766.460394][ T3207] ? tomoyo_domain+0xd9/0x130 [ 766.460420][ T3207] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 766.460439][ T3207] tomoyo_path_number_perm+0x1e8/0x5a0 [ 766.460459][ T3207] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 766.460513][ T3207] ? __fget_files+0x2a/0x420 [ 766.460532][ T3207] ? __fget_files+0x3a0/0x420 [ 766.460544][ T3207] ? __fget_files+0x2a/0x420 [ 766.460561][ T3207] security_file_ioctl+0xcb/0x2d0 [ 766.460581][ T3207] __se_sys_ioctl+0x47/0x170 [ 766.460602][ T3207] do_syscall_64+0xfa/0xfa0 [ 766.460620][ T3207] ? lockdep_hardirqs_on+0x9c/0x150 [ 766.460637][ T3207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.460652][ T3207] ? clear_bhb_loop+0x60/0xb0 [ 766.460671][ T3207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.460685][ T3207] RIP: 0033:0x7f346f58efc9 [ 766.460700][ T3207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.460713][ T3207] RSP: 002b:00007f347042b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 766.460730][ T3207] RAX: ffffffffffffffda RBX: 00007f346f7e5fa0 RCX: 00007f346f58efc9 [ 766.460741][ T3207] RDX: 0000200000000080 RSI: 00000000400448e7 RDI: 0000000000000004 [ 766.460751][ T3207] RBP: 00007f347042b090 R08: 0000000000000000 R09: 0000000000000000 [ 766.460760][ T3207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.460769][ T3207] R13: 00007f346f7e6038 R14: 00007f346f7e5fa0 R15: 00007ffda463e798 [ 766.460797][ T3207] [ 766.500467][ T3207] ERROR: Out of memory at tomoyo_realpath_from_path. [ 766.680807][ T3212] netlink: 'syz.1.12511': attribute type 4 has an invalid length. [ 766.759313][ T3210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12511'. [ 767.256217][ T3229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12518'. [ 767.283274][ T3229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12518'. [ 767.292250][ T3229] nbd: socks must be embedded in a SOCK_ITEM attr [ 767.348344][ T3230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12518'. [ 767.372967][ T3230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12518'. [ 767.392575][ T3230] nbd: socks must be embedded in a SOCK_ITEM attr [ 767.600916][ T3241] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.12522'. [ 767.611581][ T3245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12524'. [ 767.878915][ T3256] nbd: nbd4 already in use [ 768.353617][ T3289] FAULT_INJECTION: forcing a failure. [ 768.353617][ T3289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.368120][ T3289] CPU: 1 UID: 0 PID: 3289 Comm: syz.4.12541 Not tainted syzkaller #0 PREEMPT(full) [ 768.368143][ T3289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 768.368154][ T3289] Call Trace: [ 768.368161][ T3289] [ 768.368168][ T3289] dump_stack_lvl+0x189/0x250 [ 768.368197][ T3289] ? __pfx____ratelimit+0x10/0x10 [ 768.368217][ T3289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 768.368239][ T3289] ? __pfx__printk+0x10/0x10 [ 768.368257][ T3289] ? __might_fault+0xb0/0x130 [ 768.368290][ T3289] should_fail_ex+0x414/0x560 [ 768.368320][ T3289] _copy_from_user+0x2d/0xb0 [ 768.368342][ T3289] kstrtouint_from_user+0xc4/0x170 [ 768.368364][ T3289] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 768.368400][ T3289] proc_fail_nth_write+0x88/0x200 [ 768.368423][ T3289] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 768.368450][ T3289] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 768.368472][ T3289] vfs_write+0x27e/0xb30 [ 768.368505][ T3289] ? __pfx_vfs_write+0x10/0x10 [ 768.368529][ T3289] ? __fget_files+0x2a/0x420 [ 768.368551][ T3289] ? __fget_files+0x3a0/0x420 [ 768.368566][ T3289] ? __fget_files+0x2a/0x420 [ 768.368591][ T3289] ksys_write+0x145/0x250 [ 768.368612][ T3289] ? __fget_files+0x2a/0x420 [ 768.368630][ T3289] ? __pfx_ksys_write+0x10/0x10 [ 768.368655][ T3289] ? do_syscall_64+0xbe/0xfa0 [ 768.368686][ T3289] do_syscall_64+0xfa/0xfa0 [ 768.368705][ T3289] ? lockdep_hardirqs_on+0x9c/0x150 [ 768.368725][ T3289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.368743][ T3289] ? clear_bhb_loop+0x60/0xb0 [ 768.368764][ T3289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.368782][ T3289] RIP: 0033:0x7f346f58da7f [ 768.368797][ T3289] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 768.368811][ T3289] RSP: 002b:00007f347042b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 768.368831][ T3289] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f346f58da7f [ 768.368844][ T3289] RDX: 0000000000000001 RSI: 00007f347042b0a0 RDI: 0000000000000003 [ 768.368855][ T3289] RBP: 00007f347042b090 R08: 0000000000000000 R09: 0000000000000000 [ 768.368867][ T3289] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 768.368878][ T3289] R13: 00007f346f7e6038 R14: 00007f346f7e5fa0 R15: 00007ffda463e798 [ 768.368908][ T3289] [ 768.722336][ T3301] netlink: 'syz.4.12549': attribute type 1 has an invalid length. [ 768.729922][ T3309] vlan0: entered promiscuous mode [ 768.765226][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.776054][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.940074][ T3314] lo speed is unknown, defaulting to 1000 [ 769.667105][ T3361] tipc: Started in network mode [ 769.672004][ T3361] tipc: Node identity 9e3c644f7077, cluster identity 4711 [ 769.705706][ T3361] tipc: Enabled bearer , priority 0 [ 769.815737][ T3361] syzkaller0: entered promiscuous mode [ 769.821240][ T3361] syzkaller0: entered allmulticast mode [ 769.839052][ T3361] tipc: Resetting bearer [ 769.968247][T19473] tipc: Resetting bearer [ 770.019661][ T3383] lo: entered promiscuous mode [ 770.029556][ T3383] tunl0: entered promiscuous mode [ 770.044713][ T3383] gre0: entered promiscuous mode [ 770.055437][ T3383] gretap0: entered promiscuous mode [ 770.080306][ T3383] erspan0: entered promiscuous mode [ 770.086677][ T3383] ip_vti0: entered promiscuous mode [ 770.096767][ T3383] ip6_vti0: entered promiscuous mode [ 770.110553][ T3383] sit0: entered promiscuous mode [ 770.126059][ T3383] ip6tnl0: entered promiscuous mode [ 770.133968][ T3383] ip6gre0: entered promiscuous mode [ 770.140558][ T3383] syz_tun: entered promiscuous mode [ 770.149778][ T3383] ip6gretap0: entered promiscuous mode [ 770.158536][ T3383] bridge0: entered promiscuous mode [ 770.166826][ T3383] vcan0: entered promiscuous mode [ 770.174565][ T3383] bond0: entered promiscuous mode [ 770.179695][ T3383] bond_slave_0: entered promiscuous mode [ 770.189271][ T3383] bond_slave_1: entered promiscuous mode [ 770.197263][ T3383] team0: entered promiscuous mode [ 770.203697][ T3383] team_slave_0: entered promiscuous mode [ 770.209848][ T3383] team_slave_1: entered promiscuous mode [ 770.217582][ T3383] dummy0: entered promiscuous mode [ 770.227641][ T3383] nlmon0: entered promiscuous mode [ 770.238626][ T3381] netlink: 'syz.3.12573': attribute type 16 has an invalid length. [ 770.251960][ T3383] caif0: entered promiscuous mode [ 770.257289][ T3383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 770.309206][ T3381] lo speed is unknown, defaulting to 1000 [ 770.326822][ T3385] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 770.336347][ T3385] macvtap1: entered allmulticast mode [ 770.341742][ T3385] mac80211_hwsim hwsim46 wlan0: entered allmulticast mode [ 770.363284][ T3385] mac80211_hwsim hwsim46 wlan0: left allmulticast mode [ 770.370444][ T3385] mac80211_hwsim hwsim46 wlan0: left promiscuous mode [ 770.435861][ T3360] tipc: Resetting bearer [ 770.470439][ T3360] tipc: Disabling bearer [ 771.356437][ T3461] __nla_validate_parse: 10 callbacks suppressed [ 771.356455][ T3461] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12596'. [ 771.436624][ T3467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12595'. [ 771.477732][ T3466] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12596'. [ 771.522052][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 771.565000][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 771.573109][ T5823] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 771.824397][ T3452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12593'. [ 771.848116][ T3491] x_tables: ip_tables: ah match: only valid for protocol 51 [ 771.872953][ T3491] dummy0: entered promiscuous mode [ 771.878245][ T3491] dummy0: entered allmulticast mode [ 771.971098][ T3497] team0: Caught tx_queue_len zero misconfig [ 772.009211][ T3497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12603'. [ 772.219058][ T3507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12607'. [ 772.228862][ T5823] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 772.387529][ T5823] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 772.763114][ T3518] can: request_module (can-proto-5) failed. [ 772.872042][ T3524] team0: Device gtp0 is up. Set it down before adding it as a team port [ 773.148280][ T3530] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12612'. [ 773.159969][ T3530] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12612'. [ 773.477997][ T3538] lo speed is unknown, defaulting to 1000 [ 773.720174][ T3547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12620'. [ 773.817286][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 773.830598][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 773.845405][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 773.862967][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 773.884424][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 774.041334][ T3551] lo speed is unknown, defaulting to 1000 [ 774.193476][ T3564] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12625'. [ 774.225571][ T3564] team0: No ports can be present during mode change [ 774.411448][ T3576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.427210][ T3576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.438088][ T3576] bond0 (unregistering): Released all slaves [ 774.609713][ T3551] chnl_net:caif_netlink_parms(): no params data found [ 774.864866][ T3606] netlink: 'syz.1.12639': attribute type 1 has an invalid length. [ 774.975873][ T3606] 8021q: adding VLAN 0 to HW filter on device bond1 [ 775.098369][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.144591][ T3551] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.162188][ T3551] bridge_slave_0: entered allmulticast mode [ 775.188709][ T3551] bridge_slave_0: entered promiscuous mode [ 775.213960][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.228631][ T3551] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.240945][ T3551] bridge_slave_1: entered allmulticast mode [ 775.255971][ T3551] bridge_slave_1: entered promiscuous mode [ 775.263198][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 775.350598][ T3551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.364386][ T3551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.431836][ T3551] team0: Port device team_slave_0 added [ 775.450910][ T3551] team0: Port device team_slave_1 added [ 775.523116][ T3551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.540340][ T3551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.595786][ T3551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.631203][ T3551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.639127][ T3551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.670112][ T3551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.783765][ T3551] hsr_slave_0: entered promiscuous mode [ 775.793454][ T3551] hsr_slave_1: entered promiscuous mode [ 775.800016][ T3551] debugfs: 'hsr0' already exists in 'hsr' [ 775.807111][ T3551] Cannot create hsr debugfs directory [ 775.904463][ T56] block nbd0: Possible stuck request ffff888024ffe000: control (read@0,1024B). Runtime 180 seconds [ 775.915764][ T56] block nbd0: Possible stuck request ffff888024ffe1c0: control (read@1024,1024B). Runtime 180 seconds [ 775.929022][ T56] block nbd0: Possible stuck request ffff888024ffe380: control (read@2048,1024B). Runtime 180 seconds [ 775.940285][ T56] block nbd0: Possible stuck request ffff888024ffe540: control (read@3072,1024B). Runtime 180 seconds [ 775.983910][ T52] Bluetooth: hci0: command tx timeout [ 776.018096][ T3551] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.028909][ T3551] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 776.039829][ T3551] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 776.041986][ T3626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 776.196341][ T3551] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.209118][ T3551] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 776.233949][ T3551] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 776.313189][ T3551] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.328156][ T3551] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 776.347609][ T3551] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 776.460311][ T3551] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.473502][ T3551] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 776.484675][ T3551] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 776.512345][ T3676] FAULT_INJECTION: forcing a failure. [ 776.512345][ T3676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.528599][ T3676] CPU: 1 UID: 0 PID: 3676 Comm: syz.3.12656 Not tainted syzkaller #0 PREEMPT(full) [ 776.528623][ T3676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 776.528633][ T3676] Call Trace: [ 776.528640][ T3676] [ 776.528647][ T3676] dump_stack_lvl+0x189/0x250 [ 776.528676][ T3676] ? __pfx____ratelimit+0x10/0x10 [ 776.528697][ T3676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 776.528719][ T3676] ? __pfx__printk+0x10/0x10 [ 776.528738][ T3676] ? __might_fault+0xb0/0x130 [ 776.528770][ T3676] should_fail_ex+0x414/0x560 [ 776.528800][ T3676] _copy_from_user+0x2d/0xb0 [ 776.528823][ T3676] ___sys_sendmsg+0x158/0x2a0 [ 776.528845][ T3676] ? __pfx____sys_sendmsg+0x10/0x10 [ 776.528899][ T3676] ? __fget_files+0x2a/0x420 [ 776.528915][ T3676] ? __fget_files+0x3a0/0x420 [ 776.528943][ T3676] __x64_sys_sendmsg+0x19b/0x260 [ 776.528963][ T3676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 776.528991][ T3676] ? __pfx_ksys_write+0x10/0x10 [ 776.529021][ T3676] ? do_syscall_64+0xbe/0xfa0 [ 776.529046][ T3676] do_syscall_64+0xfa/0xfa0 [ 776.529065][ T3676] ? lockdep_hardirqs_on+0x9c/0x150 [ 776.529085][ T3676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.529102][ T3676] ? clear_bhb_loop+0x60/0xb0 [ 776.529123][ T3676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.529139][ T3676] RIP: 0033:0x7ff2f198efc9 [ 776.529154][ T3676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.529168][ T3676] RSP: 002b:00007ff2f27bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 776.529186][ T3676] RAX: ffffffffffffffda RBX: 00007ff2f1be6090 RCX: 00007ff2f198efc9 [ 776.529199][ T3676] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000006 [ 776.529210][ T3676] RBP: 00007ff2f27bc090 R08: 0000000000000000 R09: 0000000000000000 [ 776.529221][ T3676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.529230][ T3676] R13: 00007ff2f1be6128 R14: 00007ff2f1be6090 R15: 00007ffe58bc97d8 [ 776.529266][ T3676] [ 776.619118][ T3682] netlink: 'syz.1.12660': attribute type 4 has an invalid length. [ 776.843997][ T3687] netlink: 'syz.1.12661': attribute type 11 has an invalid length. [ 776.879521][ T3687] __nla_validate_parse: 4 callbacks suppressed [ 776.879537][ T3687] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12661'. [ 776.897696][ T3551] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 776.916323][ T3551] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 776.930645][ T3551] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 776.955902][ T3551] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 777.177475][ T3551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.209866][ T3551] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.227094][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.234297][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.267003][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.274191][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.324039][ T3711] lo speed is unknown, defaulting to 1000 [ 777.430547][ T3717] netlink: 'syz.0.12669': attribute type 4 has an invalid length. [ 777.457862][ T3717] pimreg: entered allmulticast mode [ 777.494036][ T3717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12669'. [ 777.556512][ T3722] netlink: 'syz.2.12671': attribute type 27 has an invalid length. [ 777.571953][ T3717] pimreg: left allmulticast mode [ 777.608475][ T3722] lo: left promiscuous mode [ 777.631405][ T3722] tunl0: left promiscuous mode [ 777.639757][ T3722] gre0: left promiscuous mode [ 777.659778][ T3722] gretap0: left promiscuous mode [ 777.670475][ T3722] erspan0: left promiscuous mode [ 777.684406][ T3722] ip_vti0: left promiscuous mode [ 777.693053][ T3722] ip6_vti0: left promiscuous mode [ 777.703805][ T3722] sit0: left promiscuous mode [ 777.712288][ T3722] ip6tnl0: left promiscuous mode [ 777.720362][ T3722] ip6gre0: left promiscuous mode [ 777.727862][ T3722] syz_tun: left promiscuous mode [ 777.735684][ T3722] ip6gretap0: left promiscuous mode [ 777.744439][ T3722] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.751807][ T3722] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.760876][ T3722] bridge0: left promiscuous mode [ 777.769317][ T3722] vcan0: left promiscuous mode [ 777.777667][ T3722] bond0: left promiscuous mode [ 777.782435][ T3722] bond_slave_0: left promiscuous mode [ 777.788292][ T3722] bond_slave_1: left promiscuous mode [ 777.801429][ T3722] team0: left promiscuous mode [ 777.806398][ T3722] team_slave_0: left promiscuous mode [ 777.812048][ T3722] team_slave_1: left promiscuous mode [ 777.820985][ T3722] dummy0: left promiscuous mode [ 777.830975][ T3722] nlmon0: left promiscuous mode [ 777.837599][ T3722] caif0: left promiscuous mode [ 777.888215][ T3722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.902386][ T3722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.030892][ T3725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.040284][ T3725] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.049922][ T3725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 778.067077][ T52] Bluetooth: hci0: command tx timeout [ 778.102703][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.129844][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.195341][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.224293][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.283159][ T3551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.370499][ T3739] Bluetooth: MGMT ver 1.23 [ 778.455021][ T3746] FAULT_INJECTION: forcing a failure. [ 778.455021][ T3746] name failslab, interval 1, probability 0, space 0, times 0 [ 778.512688][ T3746] CPU: 0 UID: 0 PID: 3746 Comm: syz.2.12676 Not tainted syzkaller #0 PREEMPT(full) [ 778.512714][ T3746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 778.512726][ T3746] Call Trace: [ 778.512733][ T3746] [ 778.512742][ T3746] dump_stack_lvl+0x189/0x250 [ 778.512770][ T3746] ? __pfx____ratelimit+0x10/0x10 [ 778.512791][ T3746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.512813][ T3746] ? __pfx__printk+0x10/0x10 [ 778.512836][ T3746] ? __pfx___might_resched+0x10/0x10 [ 778.512862][ T3746] ? fs_reclaim_acquire+0x7d/0x100 [ 778.512891][ T3746] should_fail_ex+0x414/0x560 [ 778.512920][ T3746] should_failslab+0xa8/0x100 [ 778.512939][ T3746] kmem_cache_alloc_node_noprof+0x77/0x710 [ 778.512963][ T3746] ? __alloc_skb+0x112/0x2d0 [ 778.512985][ T3746] ? netlink_autobind+0xdb/0x300 [ 778.513007][ T3746] __alloc_skb+0x112/0x2d0 [ 778.513032][ T3746] netlink_sendmsg+0x5c6/0xb30 [ 778.513057][ T3746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.513077][ T3746] ? aa_sock_msg_perm+0xf1/0x1d0 [ 778.513102][ T3746] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 778.513120][ T3746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.513137][ T3746] __sock_sendmsg+0x21c/0x270 [ 778.513162][ T3746] ____sys_sendmsg+0x505/0x830 [ 778.513185][ T3746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 778.513212][ T3746] ? import_iovec+0x74/0xa0 [ 778.513243][ T3746] ___sys_sendmsg+0x21f/0x2a0 [ 778.513265][ T3746] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.513319][ T3746] ? __fget_files+0x2a/0x420 [ 778.513336][ T3746] ? __fget_files+0x3a0/0x420 [ 778.513363][ T3746] __x64_sys_sendmsg+0x19b/0x260 [ 778.513384][ T3746] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 778.513414][ T3746] ? __pfx_ksys_write+0x10/0x10 [ 778.513440][ T3746] ? do_syscall_64+0xbe/0xfa0 [ 778.513465][ T3746] do_syscall_64+0xfa/0xfa0 [ 778.513483][ T3746] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.513504][ T3746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.513521][ T3746] ? clear_bhb_loop+0x60/0xb0 [ 778.513542][ T3746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.513558][ T3746] RIP: 0033:0x7eff85f8efc9 [ 778.513574][ T3746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.513588][ T3746] RSP: 002b:00007eff86d4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.513607][ T3746] RAX: ffffffffffffffda RBX: 00007eff861e6090 RCX: 00007eff85f8efc9 [ 778.513621][ T3746] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000006 [ 778.513633][ T3746] RBP: 00007eff86d4d090 R08: 0000000000000000 R09: 0000000000000000 [ 778.513645][ T3746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.513656][ T3746] R13: 00007eff861e6128 R14: 00007eff861e6090 R15: 00007ffc9070a668 [ 778.513687][ T3746] [ 779.061953][ T3551] veth0_vlan: entered promiscuous mode [ 779.081231][ T3551] veth1_vlan: entered promiscuous mode [ 779.114810][ T3551] veth0_macvtap: entered promiscuous mode [ 779.138080][ T3551] veth1_macvtap: entered promiscuous mode [ 779.154028][ T3766] tipc: Started in network mode [ 779.159939][ T3766] tipc: Node identity , cluster identity 4711 [ 779.166354][ T3766] tipc: Failed to obtain node identity [ 779.171998][ T3766] tipc: Enabling of bearer rejected, failed to enable media [ 779.288682][ T3766] syzkaller0: entered promiscuous mode [ 779.294396][ T3766] syzkaller0: entered allmulticast mode [ 779.312391][ T3551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.435791][ T3774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12685'. [ 780.143092][ T52] Bluetooth: hci0: command tx timeout [ 781.272691][ T5195] udevd[5195]: worker [26147] /devices/virtual/block/nbd0 timeout; kill it [ 781.282804][ T5195] udevd[5195]: seq 22917 '/devices/virtual/block/nbd0' killed [ 782.233099][ T52] Bluetooth: hci0: command tx timeout [ 782.527223][ T3551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.569756][ T1154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.613158][ T1154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.666727][ T3784] netlink: 'syz.3.12689': attribute type 1 has an invalid length. [ 783.440884][ T1154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.450558][ T1154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.490013][ T3786] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 783.512845][ T5901] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 783.518793][ T3787] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 783.533013][ T3787] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 783.569245][ T3789] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 783.598334][ T3791] bond1: (slave gretap1): making interface the new active one [ 783.607058][ T3791] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 783.833728][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.852985][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.886616][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.897017][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.058421][ T3824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12697'. [ 784.189996][ T3830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12700'. [ 784.238666][ T3837] netlink: 232 bytes leftover after parsing attributes in process `syz.0.12702'. [ 784.487138][ T5901] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 784.826795][ T3872] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12708'. [ 784.960764][ T3876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12712'. [ 784.979975][ T3875] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.12713'. [ 785.866928][ T3914] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12722'. [ 785.877400][ T3914] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12722'. [ 786.465409][ T3922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12725'. [ 786.550714][ T3920] netlink: 'syz.4.12726': attribute type 29 has an invalid length. [ 786.610429][ T3923] lo speed is unknown, defaulting to 1000 [ 786.626617][ T3928] netlink: 'syz.4.12726': attribute type 29 has an invalid length. [ 787.354268][ T3946] lo speed is unknown, defaulting to 1000 [ 787.387652][ T13] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 787.779800][ T3963] ip6gretap0: entered promiscuous mode [ 787.786694][ T3965] siw: device registration error -23 [ 787.804421][ T3963] macsec1: entered promiscuous mode [ 787.886043][ T3963] ip6gretap0: left promiscuous mode [ 788.161542][ T3946] netlink: 'syz.4.12732': attribute type 6 has an invalid length. [ 788.257731][ T3976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12737'. [ 788.307865][ T3971] lo speed is unknown, defaulting to 1000 [ 788.332280][ T3975] lo speed is unknown, defaulting to 1000 [ 789.051232][ T3998] macsec1: entered promiscuous mode [ 789.074906][ T3998] macsec1: entered allmulticast mode [ 789.455884][ T4012] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 789.498232][ T4012] syzkaller0: entered promiscuous mode [ 789.510664][ T4012] syzkaller0: entered allmulticast mode [ 792.105898][ T3926] Set syz1 is full, maxelem 65536 reached [ 792.563975][ T95] block nbd4: Possible stuck request ffff88802516e000: control (read@0,1024B). Runtime 240 seconds [ 792.575305][ T95] block nbd4: Possible stuck request ffff88802516e1c0: control (read@1024,1024B). Runtime 240 seconds [ 792.586513][ T95] block nbd4: Possible stuck request ffff88802516e380: control (read@2048,1024B). Runtime 240 seconds [ 792.597638][ T95] block nbd4: Possible stuck request ffff88802516e540: control (read@3072,1024B). Runtime 240 seconds [ 792.972539][ T36] bond0 (unregistering): Released all slaves [ 792.985794][ T36] bond1 (unregistering): Released all slaves [ 793.075770][ T36] bond2 (unregistering): Released all slaves [ 793.088508][ T36] bond3 (unregistering): Released all slaves [ 793.101213][ T36] bond4 (unregistering): Released all slaves [ 793.141794][ T4043] __nla_validate_parse: 4 callbacks suppressed [ 793.141810][ T4043] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12762'. [ 793.166858][ T4047] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12762'. [ 793.306559][ T36] tipc: Left network mode [ 793.356206][ T4053] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.12764'. [ 793.415215][ T4058] siw: device registration error -23 [ 793.654990][ T4064] netlink: 'syz.3.12768': attribute type 13 has an invalid length. [ 793.674808][ T4067] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.12769'. [ 793.688254][ T4064] netlink: 'syz.3.12768': attribute type 17 has an invalid length. [ 793.741462][ T4064] gretap0: refused to change device tx_queue_len [ 793.763372][ T4064] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 793.846288][ T36] veth1_macvtap: left promiscuous mode [ 793.852087][ T36] veth0_macvtap: left promiscuous mode [ 793.860022][ T36] veth1_vlan: left promiscuous mode [ 793.865646][ T36] veth0_vlan: left promiscuous mode [ 793.965962][ T4087] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12776'. [ 794.574187][ T4078] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12772'. [ 794.743361][ T4094] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.12779'. [ 794.923890][ T4104] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.12782'. [ 795.065353][ T4107] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12781'. [ 795.075807][ T4107] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12781'. [ 795.204111][ T36] IPVS: stop unused estimator thread 0... [ 795.350253][ T4123] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 795.356917][ T4123] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 795.621283][ T4136] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 795.639003][ T4136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 795.779910][ T4138] FAULT_INJECTION: forcing a failure. [ 795.779910][ T4138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.794530][ T4138] CPU: 0 UID: 0 PID: 4138 Comm: syz.3.12796 Not tainted syzkaller #0 PREEMPT(full) [ 795.794554][ T4138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 795.794565][ T4138] Call Trace: [ 795.794572][ T4138] [ 795.794580][ T4138] dump_stack_lvl+0x189/0x250 [ 795.794608][ T4138] ? __pfx____ratelimit+0x10/0x10 [ 795.794628][ T4138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 795.794652][ T4138] ? __pfx__printk+0x10/0x10 [ 795.794681][ T4138] should_fail_ex+0x414/0x560 [ 795.794718][ T4138] _copy_to_user+0x31/0xb0 [ 795.794742][ T4138] simple_read_from_buffer+0xe1/0x170 [ 795.794773][ T4138] proc_fail_nth_read+0x1b3/0x220 [ 795.794798][ T4138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 795.794824][ T4138] ? rw_verify_area+0x2a6/0x4d0 [ 795.794846][ T4138] ? __lock_acquire+0xab9/0xd20 [ 795.794862][ T4138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 795.794886][ T4138] vfs_read+0x200/0xa30 [ 795.794909][ T4138] ? fdget_pos+0x247/0x320 [ 795.794930][ T4138] ? __pfx___mutex_lock+0x10/0x10 [ 795.794953][ T4138] ? __pfx_vfs_read+0x10/0x10 [ 795.794978][ T4138] ? __fget_files+0x2a/0x420 [ 795.794999][ T4138] ? __fget_files+0x3a0/0x420 [ 795.795015][ T4138] ? __fget_files+0x2a/0x420 [ 795.795041][ T4138] ksys_read+0x145/0x250 [ 795.795066][ T4138] ? __pfx_ksys_read+0x10/0x10 [ 795.795092][ T4138] ? do_syscall_64+0xbe/0xfa0 [ 795.795116][ T4138] do_syscall_64+0xfa/0xfa0 [ 795.795135][ T4138] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.795158][ T4138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.795176][ T4138] ? clear_bhb_loop+0x60/0xb0 [ 795.795197][ T4138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.795214][ T4138] RIP: 0033:0x7ff2f198d9dc [ 795.795230][ T4138] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 795.795246][ T4138] RSP: 002b:00007ff2f27dd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 795.795266][ T4138] RAX: ffffffffffffffda RBX: 00007ff2f1be5fa0 RCX: 00007ff2f198d9dc [ 795.795280][ T4138] RDX: 000000000000000f RSI: 00007ff2f27dd0a0 RDI: 0000000000000005 [ 795.795291][ T4138] RBP: 00007ff2f27dd090 R08: 0000000000000000 R09: 0000000000000000 [ 795.795303][ T4138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.795314][ T4138] R13: 00007ff2f1be6038 R14: 00007ff2f1be5fa0 R15: 00007ffe58bc97d8 [ 795.795346][ T4138] [ 796.724353][ T4179] netlink: 'syz.2.12810': attribute type 2 has an invalid length. [ 796.732467][ T4179] netlink: 'syz.2.12810': attribute type 5 has an invalid length. [ 797.010005][ T4183] tipc: Started in network mode [ 797.017167][ T4183] tipc: Node identity caad803e45cc, cluster identity 4711 [ 797.032787][ T4183] tipc: Enabled bearer , priority 0 [ 797.043492][ T4185] siw: device registration error -23 [ 797.052072][ T4183] tipc: Resetting bearer [ 797.086021][ T4183] tipc: Disabling bearer [ 797.218061][ T4196] netlink: 'syz.0.12815': attribute type 13 has an invalid length. [ 797.239528][ T4196] netlink: 'syz.0.12815': attribute type 17 has an invalid length. [ 797.411271][ T4196] hsr0: left promiscuous mode [ 797.423751][ T5901] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 797.705971][ T5901] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 797.881448][ T4216] lo speed is unknown, defaulting to 1000 [ 798.691307][ T4258] lo speed is unknown, defaulting to 1000 [ 798.933063][ T4275] __nla_validate_parse: 17 callbacks suppressed [ 798.933080][ T4275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12842'. [ 799.018964][ T4281] lo speed is unknown, defaulting to 1000 [ 799.338449][ T4302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12847'. [ 799.348823][ T4302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12847'. [ 799.358353][ T4302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12847'. [ 799.370711][ T4304] Bluetooth: MGMT ver 1.23 [ 799.378287][ T4296] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 799.543172][ T4307] vlan0: entered promiscuous mode [ 799.709152][ T4321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12857'. [ 799.719922][ T4321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12857'. [ 799.748923][ T4319] x_tables: duplicate underflow at hook 3 [ 799.850837][ T4328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12860'. [ 799.913837][ T4331] netlink: 'syz.3.12859': attribute type 2 has an invalid length. [ 799.947911][ T4331] netlink: 'syz.3.12859': attribute type 5 has an invalid length. [ 800.023672][ T4335] x_tables: duplicate underflow at hook 2 [ 800.084785][ T4338] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 800.112064][ T4341] netlink: 'syz.1.12862': attribute type 12 has an invalid length. [ 800.132661][ T4340] netlink: 'syz.4.12865': attribute type 66 has an invalid length. [ 800.442848][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 800.454717][ T4356] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 801.083328][ T4385] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12879'. [ 801.093739][ T4385] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12879'. [ 801.209859][ T4391] ±ÿ: renamed from batadv_slave_1 (while UP) [ 801.343848][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 801.347252][ T5833] Bluetooth: hci0: command 0x0405 tx timeout [ 801.360247][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 801.408342][ T4402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12885'. [ 801.438965][ T4404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 801.478357][ T4404] vlan3: entered promiscuous mode [ 801.483892][ T4404] bond0: entered promiscuous mode [ 801.489026][ T4404] bond_slave_0: entered promiscuous mode [ 801.496038][ T4404] bond_slave_1: entered promiscuous mode [ 801.513282][ T4404] netlink: 'syz.4.12884': attribute type 14 has an invalid length. [ 802.208701][ T4439] lo speed is unknown, defaulting to 1000 [ 802.916719][ T4466] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.045385][ T4466] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.157984][ T4466] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.229127][ T4483] lo speed is unknown, defaulting to 1000 [ 803.272007][ T4466] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.425294][ T52] Bluetooth: hci0: command 0x0405 tx timeout [ 803.497319][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.550368][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.606785][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.644885][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.833130][ T4506] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 803.856397][ T4506] bond2 (unregistering): Released all slaves [ 804.295784][ T4518] bridge0: entered promiscuous mode [ 804.301301][ T4518] vlan4: entered promiscuous mode [ 804.429670][ T4527] __nla_validate_parse: 11 callbacks suppressed [ 804.429687][ T4527] netlink: 240 bytes leftover after parsing attributes in process `syz.4.12922'. [ 804.686532][ T4542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12926'. [ 804.698642][ T4542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12926'. [ 804.799426][ T4548] nbd: nbd0 already in use [ 804.924756][ T4554] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 804.967242][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12931'. [ 805.119506][ T4564] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.12933'. [ 805.294730][ T4570] netlink: 80 bytes leftover after parsing attributes in process `syz.0.12938'. [ 805.305579][ T4570] netlink: 80 bytes leftover after parsing attributes in process `syz.0.12938'. [ 805.639847][ T4596] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12940'. [ 805.992399][ T56] block nbd0: Possible stuck request ffff888024ffe000: control (read@0,1024B). Runtime 210 seconds [ 806.004262][ T56] block nbd0: Possible stuck request ffff888024ffe1c0: control (read@1024,1024B). Runtime 210 seconds [ 806.015395][ T56] block nbd0: Possible stuck request ffff888024ffe380: control (read@2048,1024B). Runtime 210 seconds [ 806.026873][ T56] block nbd0: Possible stuck request ffff888024ffe540: control (read@3072,1024B). Runtime 210 seconds [ 806.209620][ T4614] syzkaller0: entered promiscuous mode [ 806.225772][ T4614] syzkaller0: entered allmulticast mode [ 806.286337][ T4614] tipc: Started in network mode [ 806.296205][ T4614] tipc: Node identity 2a2a3a466cc8, cluster identity 4711 [ 806.320961][ T4614] tipc: Enabled bearer , priority 0 [ 806.331786][ T4613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12951'. [ 806.356930][ T4612] tipc: Resetting bearer [ 806.387833][ T4612] tipc: Disabling bearer [ 806.405405][ T4613] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12951'. [ 806.418819][ T4613] nbd: illegal input index -1 [ 807.453716][ T4688] pim6reg: entered allmulticast mode [ 807.473333][ T4688] pim6reg: left allmulticast mode [ 807.879369][ T4717] vlan0: entered promiscuous mode [ 807.891685][ T4717] bridge0: entered promiscuous mode [ 808.399166][ T4745] bridge2: entered promiscuous mode [ 808.449992][ T4749] siw: device registration error -23 [ 808.553323][ T5833] Bluetooth: hci0: command 0x0405 tx timeout [ 808.556686][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.567931][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 808.590915][ T4751] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 808.693426][ T4754] siw: device registration error -23 [ 809.101461][ T4760] netlink: 'syz.2.13007': attribute type 2 has an invalid length. [ 809.115284][ T4760] netlink: 'syz.2.13007': attribute type 5 has an invalid length. [ 809.166520][ T4769] lo speed is unknown, defaulting to 1000 [ 809.660791][ T4797] vlan4: entered promiscuous mode [ 810.041272][ T4809] x_tables: duplicate underflow at hook 2 [ 810.179006][ T4816] netlink: 'syz.3.13022': attribute type 1 has an invalid length. [ 810.210523][ T4816] netdevsim netdevsim3: Direct firmware load for þ failed with error -2 [ 810.225798][ T4816] netdevsim netdevsim3: Falling back to sysfs fallback for: þ [ 810.249724][ T4804] __nla_validate_parse: 12 callbacks suppressed [ 810.249742][ T4804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13019'. [ 810.305634][ T4804] sctp: [Deprecated]: syz.1.13019 (pid 4804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 810.305634][ T4804] Use struct sctp_sack_info instead [ 810.449051][ T4823] lo speed is unknown, defaulting to 1000 [ 810.605972][ T4831] lo speed is unknown, defaulting to 1000 [ 810.622974][ T5833] Bluetooth: hci0: command 0x0405 tx timeout [ 810.625246][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 810.890108][ T4840] netlink: 'syz.1.13028': attribute type 11 has an invalid length. [ 810.900389][ T4821] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 811.140056][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13033'. [ 811.249381][ T4857] netlink: 648 bytes leftover after parsing attributes in process `syz.3.13034'. [ 811.413563][ T4859] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13035'. [ 811.447910][ T4859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13035'. [ 811.457269][ T4859] bridge_slave_1: left allmulticast mode [ 811.463634][ T4859] bridge_slave_1: left promiscuous mode [ 811.469689][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.481547][ T4859] bridge_slave_0: left allmulticast mode [ 811.490705][ T4859] bridge_slave_0: left promiscuous mode [ 811.498969][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.654688][ T4837] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 811.782307][ T4867] lo speed is unknown, defaulting to 1000 [ 811.929708][ T4880] sctp: [Deprecated]: syz.3.13039 (pid 4880) Use of int in max_burst socket option deprecated. [ 811.929708][ T4880] Use struct sctp_assoc_value instead [ 812.038189][ T4875] lo speed is unknown, defaulting to 1000 [ 812.066324][ T4883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.338975][ T4890] bond2 (unregistering): Released all slaves [ 812.431611][ T4890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13043'. [ 812.635166][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13044'. [ 812.687187][ T4896] : entered promiscuous mode [ 812.693598][ T4897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13044'. [ 812.703615][ T5833] Bluetooth: hci0: command 0x0405 tx timeout [ 812.709649][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 812.717820][ T4851] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 812.798961][ T4896] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 812.868663][ T4903] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 812.998864][ T4915] bridge0: entered promiscuous mode [ 813.004692][ T4915] vlan2: entered promiscuous mode [ 813.084909][ T4925] tls_set_device_offload_rx: netdev not found [ 813.113067][ T4922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13050'. [ 813.125947][ T4921] netlink: 80 bytes leftover after parsing attributes in process `syz.3.13054'. [ 813.364353][ T4934] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 813.378133][ T4936] sctp: [Deprecated]: syz.3.13060 (pid 4936) Use of int in max_burst socket option. [ 813.378133][ T4936] Use struct sctp_assoc_value instead [ 813.831547][ T4962] pim6reg1: entered promiscuous mode [ 813.891739][ T4962] pim6reg1: entered allmulticast mode [ 814.160194][ T4976] lo speed is unknown, defaulting to 1000 [ 814.399772][ T4989] netlink: 'syz.4.13075': attribute type 2 has an invalid length. [ 814.435821][ T4989] netlink: 'syz.4.13075': attribute type 5 has an invalid length. [ 814.491336][ T4994] lo speed is unknown, defaulting to 1000 [ 814.787980][ T5833] Bluetooth: hci0: command 0x0405 tx timeout [ 814.796970][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 815.129354][ T5020] veth1_to_hsr: entered promiscuous mode [ 815.136413][ T5020] macvtap1: entered promiscuous mode [ 815.141984][ T5020] macvtap1: entered allmulticast mode [ 815.148021][ T5020] veth1_to_hsr: entered allmulticast mode [ 815.185225][ T5020] macvtap2: entered promiscuous mode [ 815.204427][ T5020] macvtap2: entered allmulticast mode [ 815.338437][ T5031] nft_compat: unsupported protocol 1 [ 815.490309][ T5040] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 815.795875][ T5056] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 816.615071][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c86a000: rx timeout, send abort [ 816.892967][ T5081] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 817.124474][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c86a000: abort rx timeout. Force session deactivation [ 817.206080][ T5098] netlink: 'syz.0.13110': attribute type 10 has an invalid length. [ 817.241306][ T5097] lo speed is unknown, defaulting to 1000 [ 817.318784][ T5094] netlink: 'syz.0.13110': attribute type 1 has an invalid length. [ 817.372950][ T5104] raw_sendmsg: syz.0.13110 forgot to set AF_INET. Fix it! [ 817.502763][ T52] Bluetooth: hci0: command tx timeout [ 817.537282][ T5111] siw: device registration error -23 [ 817.847343][ T5123] tipc: Started in network mode [ 817.852325][ T5123] tipc: Node identity d661111ee419, cluster identity 4711 [ 817.860911][ T5123] tipc: Enabled bearer , priority 0 [ 817.907074][ T5125] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 818.096262][ T5123] __nla_validate_parse: 9 callbacks suppressed [ 818.096280][ T5123] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13117'. [ 818.123068][ T5123] bridge_slave_0: mtu less than device minimum [ 818.151134][ T5122] tipc: Disabling bearer [ 818.289274][ T5138] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13122'. [ 818.379709][ T5138] bridge0: port 3(batadv1) entered blocking state [ 818.393137][ T5138] bridge0: port 3(batadv1) entered disabled state [ 818.399741][ T5138] batadv1: entered allmulticast mode [ 818.420556][ T5138] batadv1: entered promiscuous mode [ 818.449453][ T5138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13122'. [ 818.600136][ T5159] tipc: Enabling of bearer rejected, failed to enable media [ 818.631408][ T5159] macvtap0: entered promiscuous mode [ 818.637390][ T5159] macvtap0: entered allmulticast mode [ 818.642972][ T5159] veth0_macvtap: entered allmulticast mode [ 818.748017][ T30] audit: type=1800 audit(1761798624.646:5): pid=5168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13132" name=CB dev="tmpfs" ino=1168 res=0 errno=0 [ 818.808717][ T5169] netlink: 'syz.4.13131': attribute type 16 has an invalid length. [ 818.817723][ T5169] netlink: 'syz.4.13131': attribute type 17 has an invalid length. [ 818.854017][ T1154] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 818.864241][ T1154] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 818.995621][ T5169] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.003450][ T5169] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.091446][ T5190] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 819.187753][ T5169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.204965][ T5169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.405037][ T5169] veth1_to_hsr: left allmulticast mode [ 819.451405][ T79] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.474646][ T79] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.513731][ T79] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.570282][ T79] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.645836][ T5207] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13140'. [ 819.656573][ T5207] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13140'. [ 819.782428][ T5217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13145'. [ 819.793374][ T5218] siw: device registration error -23 [ 819.999694][ T5223] IPVS: Scheduler module ip_vs_sip not found [ 820.284901][ T5256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13152'. [ 820.294263][ T5256] netlink: 'syz.4.13152': attribute type 5 has an invalid length. [ 820.308574][ T5256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13152'. [ 820.356668][ T5256] geneve2: entered promiscuous mode [ 820.362345][ T5256] geneve2: entered allmulticast mode [ 820.370643][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 820.410780][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 820.425551][ T5260] netlink: 'syz.3.13158': attribute type 5 has an invalid length. [ 820.434729][ T9] IPVS: starting estimator thread 0... [ 820.522947][ T5264] IPVS: using max 28 ests per chain, 67200 per kthread [ 820.727043][ T5257] team0 (unregistering): Port device team_slave_0 removed [ 820.753646][ T5257] team0 (unregistering): Port device team_slave_1 removed [ 820.778240][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 820.798843][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 820.893631][ T5263] lo speed is unknown, defaulting to 1000 [ 820.929525][ T5278] netlink: 140 bytes leftover after parsing attributes in process `syz.2.13162'. [ 821.104736][ T5833] Bluetooth: hci0: command tx timeout [ 821.146876][ T5286] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13163'. [ 821.200385][ T5274] lo speed is unknown, defaulting to 1000 [ 821.348753][ T5281] lo speed is unknown, defaulting to 1000 [ 822.383000][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 822.622984][ T95] block nbd4: Possible stuck request ffff88802516e000: control (read@0,1024B). Runtime 270 seconds [ 822.633874][ T95] block nbd4: Possible stuck request ffff88802516e1c0: control (read@1024,1024B). Runtime 270 seconds [ 822.645260][ T95] block nbd4: Possible stuck request ffff88802516e380: control (read@2048,1024B). Runtime 270 seconds [ 822.657457][ T95] block nbd4: Possible stuck request ffff88802516e540: control (read@3072,1024B). Runtime 270 seconds [ 823.479079][ T5361] __nla_validate_parse: 4 callbacks suppressed [ 823.479098][ T5361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13183'. [ 823.513644][ T5361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13183'. [ 823.671119][ T5368] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13185'. [ 823.687585][ T5372] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 823.734309][ T5372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13186'. [ 823.769761][ T5372] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 823.797563][ T5376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13189'. [ 823.822741][ T5376] netlink: 'syz.2.13189': attribute type 30 has an invalid length. [ 823.843916][ T5376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13189'. [ 823.844338][ T5932] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.853072][ T5376] netlink: 'syz.2.13189': attribute type 30 has an invalid length. [ 823.912901][ T5932] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.953365][ T5204] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.971776][ T5204] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.087577][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13192'. [ 824.181302][ T5391] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 824.442428][ T5403] bond0 (unregistering): Released all slaves [ 824.495906][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 824.504053][ T5409] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13197'. [ 824.600954][ T5407] lo speed is unknown, defaulting to 1000 [ 825.946642][ T5448] tun0: tun_chr_ioctl cmd 1074025672 [ 825.951971][ T5448] tun0: ignored: set checksum disabled [ 826.035325][ T5452] siw: device registration error -23 [ 826.134540][ T5456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13209'. [ 826.202182][ T5462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 826.226037][ T5901] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 826.241263][ T52] Bluetooth: hci0: command tx timeout [ 826.285575][ T5901] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 826.341970][ T5464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 826.509691][ T5479] lo speed is unknown, defaulting to 1000 [ 826.539662][ T5471] netlink: 80 bytes leftover after parsing attributes in process `syz.1.13212'. [ 826.763084][ T5471] lo speed is unknown, defaulting to 1000 [ 826.942092][ T5497] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 827.175417][ T5503] siw: device registration error -23 [ 827.840586][ T5532] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.192370][ T5532] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.199416][ T5543] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 828.378450][ T5532] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.457902][ T5540] lo speed is unknown, defaulting to 1000 [ 828.562000][ T5532] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.649571][ T5546] lo speed is unknown, defaulting to 1000 [ 828.688177][ T5565] __nla_validate_parse: 6 callbacks suppressed [ 828.688194][ T5565] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13235'. [ 828.719569][ T5567] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.13236'. [ 828.752890][ T5565] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13235'. [ 828.940706][ T79] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.954022][ T52] Bluetooth: hci0: command tx timeout [ 829.100110][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.196061][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.298810][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.307387][ T5582] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 829.319245][ T5582] bond0: (slave sit0): Error -95 calling set_mac_address [ 829.329246][ T5204] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.427033][ T5584] lo speed is unknown, defaulting to 1000 [ 829.542345][ T5396] Set syz1 is full, maxelem 65536 reached [ 829.701453][ T5596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13244'. [ 829.718769][ T5597] siw: device registration error -23 [ 829.736654][ T5592] vxcan3: entered allmulticast mode [ 829.775105][ T5596] 8021q: VLANs not supported on team0 [ 830.903875][ T5626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13253'. [ 830.953389][ T5624] vlan0: entered promiscuous mode [ 830.960242][ T5624] vlan0: entered allmulticast mode [ 830.980206][ T5624] hsr_slave_1: entered allmulticast mode [ 830.991096][ T5632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13253'. [ 831.056009][ T5629] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13255'. [ 831.295716][ T5625] lo speed is unknown, defaulting to 1000 [ 831.339423][ T5633] lo speed is unknown, defaulting to 1000 [ 831.408213][ T5646] lo speed is unknown, defaulting to 1000 [ 831.708440][ T5662] lo speed is unknown, defaulting to 1000 [ 832.208331][ T5691] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 833.313057][ T5722] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 833.640705][ T5728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13280'. [ 833.659716][ T5731] IPVS: set_ctl: invalid protocol: 4 172.20.20.35:20001 [ 833.681590][ T5728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13280'. [ 833.723750][ T5735] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 834.238913][ T5756] bridge3: entered promiscuous mode [ 834.244380][ T5756] bridge3: entered allmulticast mode [ 834.260561][ T5763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13298'. [ 834.311210][ T5763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13298'. [ 834.985366][ T5810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13310'. [ 835.061706][ T5816] syzkaller0: entered promiscuous mode [ 835.067564][ T5816] syzkaller0: entered allmulticast mode [ 835.077080][ T5810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13310'. [ 835.110288][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13310'. [ 835.136588][ T5822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13313'. [ 835.158649][ T5794] netlink: 240 bytes leftover after parsing attributes in process `syz.3.13300'. [ 835.161238][ T5822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13313'. [ 835.486991][ T5845] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 835.515890][ T5849] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 835.635506][ T5857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13324'. [ 835.644894][ T5855] netlink: 168 bytes leftover after parsing attributes in process `syz.0.13326'. [ 835.670622][ T5851] netlink: 'syz.1.13324': attribute type 10 has an invalid length. [ 835.684898][ T5851] bridge0: port 1(macsec0) entered blocking state [ 835.698078][ T5851] bridge0: port 1(macsec0) entered disabled state [ 835.710485][ T5851] macsec0: entered allmulticast mode [ 835.724989][ T5851] veth1_macvtap: entered allmulticast mode [ 835.745751][ T5833] Bluetooth: hci0: command tx timeout [ 835.752782][ T5851] macsec0: entered promiscuous mode [ 835.765207][ T5851] bridge0: port 1(macsec0) entered blocking state [ 835.771768][ T5851] bridge0: port 1(macsec0) entered forwarding state [ 835.780718][ T5868] siw: device registration error -23 [ 835.981341][ T5882] netlink: 'syz.3.13335': attribute type 2 has an invalid length. [ 836.009285][ T5882] netlink: 'syz.3.13335': attribute type 1 has an invalid length. [ 836.065333][ T56] block nbd0: Possible stuck request ffff888024ffe000: control (read@0,1024B). Runtime 240 seconds [ 836.081654][ T5884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 836.081799][ T56] block nbd0: Possible stuck request ffff888024ffe1c0: control (read@1024,1024B). Runtime 240 seconds [ 836.104619][ T56] block nbd0: Possible stuck request ffff888024ffe380: control (read@2048,1024B). Runtime 240 seconds [ 836.116069][ T56] block nbd0: Possible stuck request ffff888024ffe540: control (read@3072,1024B). Runtime 240 seconds [ 836.125775][ T5890] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 836.148178][ T5893] bridge0: entered promiscuous mode [ 836.168014][ T5893] bridge0: entered allmulticast mode [ 836.226966][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 836.239185][ T5893] team0: Port device bridge0 added [ 836.284585][ T5891] gretap1: entered promiscuous mode [ 836.462106][ T5900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.497717][ T5906] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 836.571409][ T5912] siw: device registration error -23 [ 836.668956][ T5918] tipc: Enabling of bearer rejected, failed to enable media [ 836.987750][ T5942] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 837.398868][ T5958] x_tables: duplicate underflow at hook 1 [ 837.420840][ T5960] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 837.559197][ T5968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.153189][ T52] Bluetooth: hci0: command tx timeout [ 838.485288][ T5999] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 839.077518][ T6037] lo speed is unknown, defaulting to 1000 [ 839.228337][ T6030] lo speed is unknown, defaulting to 1000 [ 839.296460][ T79] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.306071][ T79] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.346767][ T79] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.355940][ T79] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.373276][ T13] bridge_slave_1: left allmulticast mode [ 839.379013][ T13] bridge_slave_1: left promiscuous mode [ 839.393453][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.411381][ T13] bridge_slave_0: left allmulticast mode [ 839.420365][ T6055] block nbd1: server does not support multiple connections per device. [ 839.430165][ T6055] block nbd1: shutting down sockets [ 839.435870][ T13] bridge_slave_0: left promiscuous mode [ 839.445202][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.498391][ T6060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.534817][ T13] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 839.793828][ T13] bond1 (unregistering): Released all slaves [ 839.821658][ T6069] dvmrp0: entered allmulticast mode [ 839.896208][ T13] tipc: Left network mode [ 839.940048][ T6074] __nla_validate_parse: 21 callbacks suppressed [ 839.940067][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13402'. [ 839.958977][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13402'. [ 840.212347][ T6084] siw: device registration error -23 [ 840.236483][ T6087] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 840.338510][ T13] hsr_slave_0: left promiscuous mode [ 840.387023][ T13] hsr_slave_1: left promiscuous mode [ 840.403517][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.422227][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.553037][ T52] Bluetooth: hci0: command tx timeout [ 840.658000][ T6108] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 840.914122][ T13] team0 (unregistering): Port device team_slave_1 removed [ 840.961034][ T13] team0 (unregistering): Port device team_slave_0 removed [ 841.366091][ T6112] netlink: 240 bytes leftover after parsing attributes in process `syz.3.13416'. [ 841.576767][ T6126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13418'. [ 841.627895][ T6133] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 841.890412][ T13] IPVS: stop unused estimator thread 0... [ 842.470154][ T6176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13428'. [ 842.499687][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13427'. [ 842.532308][ T6177] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 842.702718][ T52] Bluetooth: hci0: command tx timeout [ 842.905039][ T6194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13433'. [ 842.918301][ T6194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13433'. [ 843.136204][T30572] udevd[30572]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 843.662243][ T6207] netlink: 'syz.1.13435': attribute type 11 has an invalid length. [ 843.690197][ T6207] netlink: 244 bytes leftover after parsing attributes in process `syz.1.13435'. [ 843.795224][ T6230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13445'. [ 844.288784][ T6216] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 844.945151][ T6273] __nla_validate_parse: 7 callbacks suppressed [ 844.945170][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13457'. [ 844.963451][ T6273] netlink: 'syz.4.13457': attribute type 30 has an invalid length. [ 844.985508][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13459'. [ 845.037986][ T1154] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.064888][ T1154] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.087477][ T6283] netlink: 'syz.0.13461': attribute type 1 has an invalid length. [ 845.088103][ T1154] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.166547][ T1154] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.236359][ T6287] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 845.291285][ T6287] veth3: entered promiscuous mode [ 845.305896][ T6287] bond0: (slave veth3): Enslaving as a backup interface with a down link [ 845.373481][ T1154] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 845.390618][ T6283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.506612][ T12] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 845.523265][ T6310] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13464'. [ 845.570086][ T6304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13467'. [ 845.613701][ T6312] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.13468'. [ 845.666324][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 846.451385][ T6325] bridge0: port 3(batadv1) entered blocking state [ 846.462776][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 846.469095][ T6325] bridge0: port 3(batadv1) entered disabled state [ 846.485922][ T6325] batadv1: entered allmulticast mode [ 846.492729][ T6325] batadv1: entered promiscuous mode [ 846.518778][ T6328] bond1: entered promiscuous mode [ 846.524307][ T6328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 846.878745][ T6350] IPVS: set_ctl: invalid protocol: 60 172.20.20.38:21 [ 846.898548][ T6352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 846.955263][ T5204] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 846.964579][ T5204] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 847.352071][ T6372] lo speed is unknown, defaulting to 1000 [ 847.359130][ T6372] lo speed is unknown, defaulting to 1000 [ 847.365766][ T6372] lo speed is unknown, defaulting to 1000 [ 847.389439][ T6372] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 847.440153][ T6372] lo speed is unknown, defaulting to 1000 [ 847.458053][ T6372] lo speed is unknown, defaulting to 1000 [ 847.480541][ T6372] lo speed is unknown, defaulting to 1000 [ 847.492959][ T6372] lo speed is unknown, defaulting to 1000 [ 847.501843][ T6372] lo speed is unknown, defaulting to 1000 [ 847.514456][ T6372] lo speed is unknown, defaulting to 1000 [ 847.528785][ T6372] lo speed is unknown, defaulting to 1000 [ 847.586903][ T6372] lo speed is unknown, defaulting to 1000 [ 847.608200][ T6372] lo speed is unknown, defaulting to 1000 [ 847.644552][ T6373] lo speed is unknown, defaulting to 1000 [ 847.658176][ T6372] lo speed is unknown, defaulting to 1000 [ 847.673497][ T6372] lo speed is unknown, defaulting to 1000 [ 847.717134][ T6382] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13484'. [ 847.727262][ T6382] block nbd0: Unsupported socket: should be TCP or UNIX. [ 847.863156][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13485'. [ 847.872527][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13485'. [ 848.019303][ T6394] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 848.473645][ T6388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13486'. [ 848.784845][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13495'. [ 849.005434][ T6434] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 849.261962][ T6444] netlink: 'syz.0.13501': attribute type 1 has an invalid length. [ 849.283131][ T6444] netlink: 'syz.0.13501': attribute type 4 has an invalid length. [ 849.506366][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 849.615557][ T5204] bridge_slave_1: left allmulticast mode [ 849.621315][ T5204] bridge_slave_1: left promiscuous mode [ 849.633810][ T5204] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.646924][ T5204] bridge_slave_0: left allmulticast mode [ 849.665497][ T5204] bridge_slave_0: left promiscuous mode [ 849.671847][ T5204] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.708201][ T6476] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20004 [ 849.788982][ T5204] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 849.797705][ T5204] ip6gretap1 (unregistering): left promiscuous mode [ 849.804462][ T5204] ip6gretap1 (unregistering): left allmulticast mode [ 849.906766][ T5204] bond2 (unregistering): (slave gretap1): Releasing active interface [ 850.072929][ T5833] Bluetooth: hci0: command tx timeout [ 850.101823][ T5204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.112890][ T5204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.123838][ T5204] bond0 (unregistering): Released all slaves [ 850.136596][ T5204] bond1 (unregistering): Released all slaves [ 850.149817][ T5204] bond2 (unregistering): Released all slaves [ 850.234557][ T5204] tipc: Left network mode [ 850.544158][ T5204] hsr_slave_0: left promiscuous mode [ 850.551796][ T5204] hsr_slave_1: left promiscuous mode [ 850.558847][ T5204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.566857][ T5204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.577553][ T5204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.594900][ T5204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.667382][ T5204] team_slave_0: left promiscuous mode [ 850.673080][ T5204] team_slave_1: left promiscuous mode [ 850.701713][ T5204] veth1_macvtap: left promiscuous mode [ 850.721535][ T5204] veth0_macvtap: left promiscuous mode [ 850.738935][ T5204] veth1_vlan: left promiscuous mode [ 850.756719][ T5204] veth0_vlan: left promiscuous mode [ 851.305344][ T6526] netlink: 'syz.2.13524': attribute type 1 has an invalid length. [ 851.652257][ T5204] team0 (unregistering): Port device team_slave_1 removed [ 851.715562][ T5204] team0 (unregistering): Port device team_slave_0 removed [ 852.425999][ T6503] syzkaller0: entered promiscuous mode [ 852.431665][ T6503] syzkaller0: entered allmulticast mode [ 852.472340][ T6512] ipvlan2: entered promiscuous mode [ 852.526418][ T6515] team0: Device gtp0 is of different type [ 852.654865][ T6519] syz_tun: entered allmulticast mode [ 852.703270][ T95] block nbd4: Possible stuck request ffff88802516e000: control (read@0,1024B). Runtime 300 seconds [ 852.715437][ T95] block nbd4: Possible stuck request ffff88802516e1c0: control (read@1024,1024B). Runtime 300 seconds [ 852.726626][ T95] block nbd4: Possible stuck request ffff88802516e380: control (read@2048,1024B). Runtime 300 seconds [ 852.737870][ T95] block nbd4: Possible stuck request ffff88802516e540: control (read@3072,1024B). Runtime 300 seconds [ 853.052827][ T6524] syz_tun: left allmulticast mode [ 853.194684][ T6539] __nla_validate_parse: 2 callbacks suppressed [ 853.194703][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13527'. [ 853.215052][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13527'. [ 853.351182][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13529'. [ 853.363182][ T6546] block nbd1: Unsupported socket: should be TCP or UNIX. [ 853.416029][ T6546] netlink: 17 bytes leftover after parsing attributes in process `syz.4.13529'. [ 853.538900][ T5204] IPVS: stop unused estimator thread 0... [ 853.855691][ T6567] siw: device registration error -23 [ 854.062217][ T6573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13538'. [ 854.100138][ T6573] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13538'. [ 854.322631][ T6563] bridge3: left promiscuous mode [ 854.340479][ T6563] bridge3: left allmulticast mode [ 854.352182][ T6563] bond1: left promiscuous mode [ 854.365151][T19473] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.392876][T19473] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.433058][T19473] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.507327][ T6578] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13540'. [ 854.594640][T19473] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.637682][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13542'. [ 854.807703][ T6504] Set syz1 is full, maxelem 65536 reached [ 854.833308][ T6583] netlink: 3444 bytes leftover after parsing attributes in process `syz.4.13540'. [ 855.067475][T30572] udevd[30572]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 855.197583][ T6599] syzkaller1: entered promiscuous mode [ 855.256931][ T6599] syzkaller1: entered allmulticast mode [ 855.329440][ T6592] lo speed is unknown, defaulting to 1000 [ 855.369565][ T6605] tipc: Enabled bearer , priority 0 [ 855.380159][ T6605] syzkaller0: entered promiscuous mode [ 855.385819][ T6605] syzkaller0: entered allmulticast mode [ 855.433062][ T6607] siw: device registration error -23 [ 855.477799][ T6605] tipc: Resetting bearer [ 855.529746][ T6604] tipc: Resetting bearer [ 855.560987][ T6604] tipc: Disabling bearer [ 855.600898][ T6609] lo speed is unknown, defaulting to 1000 [ 856.161332][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13556'. [ 856.247854][ T6642] lo speed is unknown, defaulting to 1000 [ 856.631837][ T6650] lo speed is unknown, defaulting to 1000 [ 856.706907][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 856.811242][ T6663] netlink: 'syz.4.13563': attribute type 1 has an invalid length. [ 856.821046][ T6660] lo speed is unknown, defaulting to 1000 [ 856.830699][ T6663] NCSI netlink: No device for ifindex 0 [ 857.089614][ T6673] netlink: 'syz.0.13566': attribute type 2 has an invalid length. [ 857.110694][ T6673] netlink: 'syz.0.13566': attribute type 4 has an invalid length. [ 857.127556][ T6673] netlink: 'syz.0.13566': attribute type 8 has an invalid length. [ 857.161180][ T6669] vlan3: entered promiscuous mode [ 857.166671][ T6669] bridge0: entered promiscuous mode [ 857.549193][ T5823] IPVS: starting estimator thread 0... [ 857.678729][ T6690] IPVS: using max 30 ests per chain, 72000 per kthread [ 857.737182][ T6698] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 857.818011][ T6700] netlink: 'syz.1.13575': attribute type 4 has an invalid length. [ 858.020250][ T6708] vlan4: entered promiscuous mode [ 858.226421][ T6718] FAULT_INJECTION: forcing a failure. [ 858.226421][ T6718] name failslab, interval 1, probability 0, space 0, times 0 [ 858.253501][ T6720] __nla_validate_parse: 7 callbacks suppressed [ 858.253519][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13582'. [ 858.268925][ T6718] CPU: 1 UID: 0 PID: 6718 Comm: syz.4.13581 Not tainted syzkaller #0 PREEMPT(full) [ 858.268950][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 858.268962][ T6718] Call Trace: [ 858.268970][ T6718] [ 858.268979][ T6718] dump_stack_lvl+0x189/0x250 [ 858.269008][ T6718] ? __pfx____ratelimit+0x10/0x10 [ 858.269029][ T6718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 858.269053][ T6718] ? __pfx__printk+0x10/0x10 [ 858.269087][ T6718] should_fail_ex+0x414/0x560 [ 858.269118][ T6718] should_failslab+0xa8/0x100 [ 858.269138][ T6718] __kmalloc_cache_noprof+0x6f/0x6f0 [ 858.269163][ T6718] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 858.269184][ T6718] ? sctp_add_bind_addr+0x8c/0x370 [ 858.269203][ T6718] ? sctp_add_bind_addr+0xb0/0x370 [ 858.269229][ T6718] sctp_add_bind_addr+0x8c/0x370 [ 858.269256][ T6718] sctp_copy_local_addr_list+0x30b/0x4e0 [ 858.269281][ T6718] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 858.269304][ T6718] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 858.269335][ T6718] ? sctp_v6_is_any+0x64/0x80 [ 858.269359][ T6718] ? sctp_copy_one_addr+0x93/0x360 [ 858.269385][ T6718] sctp_bind_addr_copy+0xb3/0x3c0 [ 858.269408][ T6718] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 858.269431][ T6718] sctp_connect_new_asoc+0x2e0/0x690 [ 858.269459][ T6718] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 858.269481][ T6718] ? __local_bh_enable_ip+0x12d/0x1c0 [ 858.269508][ T6718] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 858.269528][ T6718] ? security_sctp_bind_connect+0x7e/0x2e0 [ 858.269553][ T6718] sctp_sendmsg+0x155c/0x2810 [ 858.269590][ T6718] ? __pfx_sctp_sendmsg+0x10/0x10 [ 858.269618][ T6718] ? aa_sk_perm+0x81e/0x950 [ 858.269648][ T6718] ? __pfx_aa_sk_perm+0x10/0x10 [ 858.269675][ T6718] ? sock_rps_record_flow+0x19/0x410 [ 858.269703][ T6718] ? inet_sendmsg+0x2f4/0x370 [ 858.269732][ T6718] __sock_sendmsg+0x19c/0x270 [ 858.269759][ T6718] __sys_sendto+0x3bd/0x520 [ 858.269787][ T6718] ? __pfx___sys_sendto+0x10/0x10 [ 858.269810][ T6718] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 858.269845][ T6718] ? __fget_files+0x3a0/0x420 [ 858.269874][ T6718] ? ksys_write+0x22a/0x250 [ 858.269899][ T6718] ? __pfx_ksys_write+0x10/0x10 [ 858.269927][ T6718] __x64_sys_sendto+0xde/0x100 [ 858.269957][ T6718] do_syscall_64+0xfa/0xfa0 [ 858.269977][ T6718] ? lockdep_hardirqs_on+0x9c/0x150 [ 858.269998][ T6718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.270016][ T6718] ? clear_bhb_loop+0x60/0xb0 [ 858.270039][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.270057][ T6718] RIP: 0033:0x7f39c098efc9 [ 858.270074][ T6718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 858.270091][ T6718] RSP: 002b:00007f39c1772038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 858.270112][ T6718] RAX: ffffffffffffffda RBX: 00007f39c0be5fa0 RCX: 00007f39c098efc9 [ 858.270126][ T6718] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 858.270139][ T6718] RBP: 00007f39c1772090 R08: 000020000005ffe4 R09: 000000000000001c [ 858.270152][ T6718] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 858.270164][ T6718] R13: 00007f39c0be6038 R14: 00007f39c0be5fa0 R15: 00007ffcdc98cd18 [ 858.270197][ T6718] [ 858.275960][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13583'. [ 858.549816][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13583'. [ 858.636991][ T6720] bond0: (slave rose0): Enslaving as an active interface with an up link [ 858.880764][ T6742] vlan3: entered promiscuous mode [ 858.927692][ T6745] lo speed is unknown, defaulting to 1000 [ 859.083065][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13592'. [ 859.294294][ T6764] IPv6: addrconf: prefix option has invalid lifetime [ 859.489260][ T6783] veth5: entered promiscuous mode [ 859.847401][ T5833] Bluetooth: hci0: command tx timeout [ 859.855543][ T6793] vlan3: entered promiscuous mode [ 860.037338][ T6800] netlink: 'syz.0.13606': attribute type 21 has an invalid length. [ 860.055103][ T6800] netlink: 'syz.0.13606': attribute type 6 has an invalid length. [ 860.063759][ T6800] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13606'. [ 860.076441][ T6800] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13606'. [ 860.152825][ T6805] netlink: 'syz.0.13609': attribute type 12 has an invalid length. [ 860.468198][ T6818] bond0: entered promiscuous mode [ 860.507892][ T6818] bond_slave_0: entered promiscuous mode [ 860.530548][ T6818] bond_slave_1: entered promiscuous mode [ 860.536856][ T6818] bond0: entered allmulticast mode [ 860.542827][ T6818] bond_slave_0: entered allmulticast mode [ 860.548622][ T6818] bond_slave_1: entered allmulticast mode [ 860.564537][ T6818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.577392][ T6828] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 860.661504][ T6833] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13619'. [ 860.670842][ T6835] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 860.696551][ T6837] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13620'. [ 860.758733][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13620'. [ 860.874529][ T6846] vxcan2: entered allmulticast mode [ 860.951117][ T6853] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13623'. [ 861.368694][ T6863] vxcan1 speed is unknown, defaulting to 1000 [ 861.379535][ T6863] vxcan1 speed is unknown, defaulting to 1000 [ 861.408963][ T6863] vxcan1 speed is unknown, defaulting to 1000 [ 861.822259][ T6863] infiniband syz2: set down [ 861.828315][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 861.856999][ T6863] infiniband syz2: added vxcan1 [ 861.904022][ T6863] RDS/IB: syz2: added [ 861.910318][ T6863] smc: adding ib device syz2 with port count 1 [ 861.916802][ T6863] smc: ib device syz2 port 1 has no pnetid [ 861.925756][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 861.936188][ T6863] vxcan1 speed is unknown, defaulting to 1000 [ 862.209344][ T6863] vxcan1 speed is unknown, defaulting to 1000 [ 862.496734][ T9] hid-generic 0005:16BF:0008.0001: unknown main item tag 0x4 [ 862.547543][ T9] hid-generic 0005:16BF:0008.0001: hidraw0: BLUETOOTH HID vc3.a9 Device [syz1] on aa:aa:aa:aa:aa:aa [ 862.622785][ T5833] Bluetooth: hci0: command tx timeout [ 862.662304][ T6912] fido_id[6912]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 862.689419][ T6863] vxcan1 speed is unknown, defaulting to 1000 [ 862.773155][ T6916] netlink: 'syz.4.13644': attribute type 1 has an invalid length. [ 862.895609][ T6916] netlink: 'syz.4.13644': attribute type 4 has an invalid length. [ 862.974282][ T6926] veth1_macvtap: left promiscuous mode [ 862.996157][ T6926] macsec0: entered allmulticast mode [ 863.225784][ T6863] vxcan1 speed is unknown, defaulting to 1000 [ 863.551219][ T6952] bond1 (unregistering): Released all slaves [ 863.588009][ T6947] __nla_validate_parse: 8 callbacks suppressed [ 863.588027][ T6947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13653'. [ 863.844131][ T6863] vxcan1 speed is unknown, defaulting to 1000 [ 863.851282][ T6965] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 863.876279][ T6967] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 864.241876][ T6863] vxcan1 speed is unknown, defaulting to 1000 [ 864.260343][ T6985] syzkaller0: entered promiscuous mode [ 864.266439][ T6985] syzkaller0: entered allmulticast mode [ 864.327966][ T6987] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13668'. [ 864.360862][ T6987] batadv0: entered allmulticast mode [ 864.586927][ T7002] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 864.628834][ T7004] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 864.893873][ T36] bridge_slave_1: left allmulticast mode [ 864.904013][ T36] bridge_slave_1: left promiscuous mode [ 864.918705][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.945886][ T36] bridge_slave_0: left allmulticast mode [ 864.951642][ T36] bridge_slave_0: left promiscuous mode [ 864.958642][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.261073][ T36] bond1 (unregistering): (slave bridge1): Releasing active interface [ 865.574908][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.585081][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.596559][ T36] bond0 (unregistering): Released all slaves [ 865.610044][ T36] bond1 (unregistering): Released all slaves [ 865.627868][ T6863] vxcan1 speed is unknown, defaulting to 1000 [ 865.725431][ T36] tipc: Left network mode [ 865.824915][ T7040] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13682'. [ 865.895125][ T7044] FAULT_INJECTION: forcing a failure. [ 865.895125][ T7044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 865.903027][ T5833] Bluetooth: hci0: command tx timeout [ 865.909412][ T7044] CPU: 1 UID: 0 PID: 7044 Comm: syz.3.13685 Not tainted syzkaller #0 PREEMPT(full) [ 865.909435][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 865.909447][ T7044] Call Trace: [ 865.909454][ T7044] [ 865.909463][ T7044] dump_stack_lvl+0x189/0x250 [ 865.909491][ T7044] ? __pfx____ratelimit+0x10/0x10 [ 865.909512][ T7044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 865.909535][ T7044] ? __pfx__printk+0x10/0x10 [ 865.909554][ T7044] ? __might_fault+0xb0/0x130 [ 865.909590][ T7044] should_fail_ex+0x414/0x560 [ 865.909620][ T7044] _copy_from_user+0x2d/0xb0 [ 865.909642][ T7044] kstrtouint_from_user+0xc4/0x170 [ 865.909663][ T7044] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 865.909699][ T7044] proc_fail_nth_write+0x88/0x200 [ 865.909727][ T7044] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 865.909755][ T7044] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 865.909778][ T7044] vfs_write+0x27e/0xb30 [ 865.909811][ T7044] ? __pfx_vfs_write+0x10/0x10 [ 865.909835][ T7044] ? __fget_files+0x2a/0x420 [ 865.909858][ T7044] ? __fget_files+0x3a0/0x420 [ 865.909873][ T7044] ? __fget_files+0x2a/0x420 [ 865.909898][ T7044] ksys_write+0x145/0x250 [ 865.909924][ T7044] ? __pfx_ksys_write+0x10/0x10 [ 865.909951][ T7044] ? do_syscall_64+0xbe/0xfa0 [ 865.909976][ T7044] do_syscall_64+0xfa/0xfa0 [ 865.909994][ T7044] ? lockdep_hardirqs_on+0x9c/0x150 [ 865.910015][ T7044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.910033][ T7044] ? clear_bhb_loop+0x60/0xb0 [ 865.910055][ T7044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.910072][ T7044] RIP: 0033:0x7ff2f198da7f [ 865.910088][ T7044] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 865.910104][ T7044] RSP: 002b:00007ff2f27dd030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 865.910124][ T7044] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff2f198da7f [ 865.910136][ T7044] RDX: 0000000000000001 RSI: 00007ff2f27dd0a0 RDI: 0000000000000004 [ 865.910148][ T7044] RBP: 00007ff2f27dd090 R08: 0000000000000000 R09: 000000000000001c [ 865.910159][ T7044] R10: 00000000000000e0 R11: 0000000000000293 R12: 0000000000000002 [ 865.910171][ T7044] R13: 00007ff2f1be6038 R14: 00007ff2f1be5fa0 R15: 00007ffe58bc97d8 [ 865.910202][ T7044] [ 866.115042][ T7046] sctp: [Deprecated]: syz.3.13686 (pid 7046) Use of int in maxseg socket option. [ 866.115042][ T7046] Use struct sctp_assoc_value instead [ 866.187380][ T56] block nbd0: Possible stuck request ffff888024ffe000: control (read@0,1024B). Runtime 270 seconds [ 866.199051][ T56] block nbd0: Possible stuck request ffff888024ffe1c0: control (read@1024,1024B). Runtime 270 seconds [ 866.210199][ T7048] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 866.217103][ T56] block nbd0: Possible stuck request ffff888024ffe380: control (read@2048,1024B). Runtime 270 seconds [ 866.229099][ T56] block nbd0: Possible stuck request ffff888024ffe540: control (read@3072,1024B). Runtime 270 seconds [ 866.244596][ T7040] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13682'. [ 866.256557][ T7040] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13682'. [ 866.267151][ T7040] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13682'. [ 866.278459][ T7040] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13682'. [ 866.289274][ T7040] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13682'. [ 866.300472][ T7040] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13682'. [ 866.310998][ T7040] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13682'. [ 866.411083][ T6863] vxcan1 speed is unknown, defaulting to 1000 [ 866.928762][ T7060] syzkaller0: entered promiscuous mode [ 866.943133][ T7060] syzkaller0: entered allmulticast mode [ 868.222833][ T5833] Bluetooth: hci0: command tx timeout [ 868.315080][ T6863] vxcan1 speed is unknown, defaulting to 1000 [ 868.684787][ T7086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 868.743136][ T897] lo speed is unknown, defaulting to 1000 [ 868.748945][ T897] syz1: Port: 1 Link DOWN [ 868.756369][ T7092] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 868.758274][ T7090] netlink: 'syz.0.13701': attribute type 1 has an invalid length. [ 869.011591][ T7090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 869.072440][ T7090] bond1: entered promiscuous mode [ 869.124456][ T7094] bond1: (slave geneve2): making interface the new active one [ 869.133763][ T7094] geneve2: entered promiscuous mode [ 869.141347][ T7094] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 869.158898][ T36] hsr_slave_0: left promiscuous mode [ 869.165770][ T36] hsr_slave_1: left promiscuous mode [ 869.171928][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.182241][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.397645][ T7112] netlink: 'syz.3.13708': attribute type 1 has an invalid length. [ 869.624179][ T36] team0 (unregistering): Port device team_slave_1 removed [ 869.666875][ T36] team0 (unregistering): Port device team_slave_0 removed [ 870.055536][ T7101] netlink: 'syz.2.13705': attribute type 2 has an invalid length. [ 870.064337][ T7101] netlink: 'syz.2.13705': attribute type 5 has an invalid length. [ 870.106152][ T7107] veth1_to_team: entered promiscuous mode [ 870.124839][ T7107] bond0: entered promiscuous mode [ 870.129899][ T7107] ip6gretap1: entered promiscuous mode [ 870.142900][ T7107] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 870.155161][ T7107] hsr1: entered allmulticast mode [ 870.160198][ T7107] veth1_to_team: entered allmulticast mode [ 870.167131][ T7107] bond0: entered allmulticast mode [ 870.172332][ T7107] ip6gretap1: entered allmulticast mode [ 870.178909][ T7107] veth3: entered allmulticast mode [ 870.238718][ T7112] bond2: entered promiscuous mode [ 870.247354][ T7112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 870.291815][ T7113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 870.300077][ T7113] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 870.310716][ T7113] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 870.326869][ T7113] bond2: (slave gre1): making interface the new active one [ 870.334200][ T7113] gre1: entered promiscuous mode [ 870.340527][ T7113] bond2: (slave gre1): Enslaving as an active interface with an up link [ 870.353424][ T7099] lo speed is unknown, defaulting to 1000 [ 870.372044][ T7099] vxcan1 speed is unknown, defaulting to 1000 [ 870.481927][ T7127] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 870.526287][ T7137] __nla_validate_parse: 60 callbacks suppressed [ 870.526305][ T7137] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13715'. [ 870.546863][ T7137] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13715'. [ 870.713334][ T7141] siw: device registration error -23 [ 870.765905][ T7144] netlink: 'syz.2.13718': attribute type 13 has an invalid length. [ 870.774589][ T7144] netlink: 'syz.2.13718': attribute type 17 has an invalid length. [ 870.784311][ T5833] Bluetooth: hci0: command tx timeout [ 870.981048][ T7144] bond0: left promiscuous mode [ 870.987016][ T7144] bond_slave_0: left promiscuous mode [ 870.992817][ T7144] bond_slave_1: left promiscuous mode [ 870.998396][ T7144] bond0: left allmulticast mode [ 871.004092][ T7144] bond_slave_0: left allmulticast mode [ 871.009687][ T7144] bond_slave_1: left allmulticast mode [ 871.025965][ T7144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 871.110530][ T36] IPVS: stop unused estimator thread 0... [ 871.482351][ T7171] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 871.698256][ T7174] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13729'. [ 871.729097][ T7174] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13729'. [ 871.856335][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13732'. [ 871.919622][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13732'. [ 872.308979][ T7204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13738'. [ 872.362164][ T7206] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 872.407455][ T7208] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.13741'. [ 872.628727][ T7216] vlan3: entered promiscuous mode [ 872.719862][ T7220] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13744'. [ 872.732113][ T7220] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13744'. [ 873.034173][ T7235] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 873.411847][ T7250] xt_connbytes: Forcing CT accounting to be enabled [ 873.505150][ T5833] Bluetooth: hci0: command tx timeout [ 873.636627][ T7261] netlink: 'syz.3.13757': attribute type 8 has an invalid length. [ 873.659635][ T7261] bond0: entered promiscuous mode [ 873.665324][ T7261] bond_slave_0: entered promiscuous mode [ 873.671542][ T7261] bond_slave_1: entered promiscuous mode [ 873.685755][ T7261] bond0: left promiscuous mode [ 873.694557][ T7261] bond_slave_0: left promiscuous mode [ 873.700840][ T7265] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 873.710824][ T7261] bond_slave_1: left promiscuous mode [ 873.740341][ T7268] netlink: 'syz.3.13757': attribute type 8 has an invalid length. [ 873.759608][ T7268] bond0: entered promiscuous mode [ 873.789803][ T7268] bond_slave_0: entered promiscuous mode [ 873.803380][ T7268] bond_slave_1: entered promiscuous mode [ 873.810854][ T7268] bond0: left promiscuous mode [ 873.822773][ T7268] bond_slave_0: left promiscuous mode [ 873.837960][ T7268] bond_slave_1: left promiscuous mode [ 873.927528][ T7273] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 874.615281][ T7300] FAULT_INJECTION: forcing a failure. [ 874.615281][ T7300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.649453][ T7300] CPU: 0 UID: 0 PID: 7300 Comm: syz.1.13770 Not tainted syzkaller #0 PREEMPT(full) [ 874.649480][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 874.649492][ T7300] Call Trace: [ 874.649499][ T7300] [ 874.649508][ T7300] dump_stack_lvl+0x189/0x250 [ 874.649536][ T7300] ? __pfx____ratelimit+0x10/0x10 [ 874.649558][ T7300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 874.649582][ T7300] ? __pfx__printk+0x10/0x10 [ 874.649613][ T7300] should_fail_ex+0x414/0x560 [ 874.649644][ T7300] _copy_to_user+0x31/0xb0 [ 874.649668][ T7300] simple_read_from_buffer+0xe1/0x170 [ 874.649697][ T7300] proc_fail_nth_read+0x1b3/0x220 [ 874.649723][ T7300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 874.649748][ T7300] ? rw_verify_area+0x2a6/0x4d0 [ 874.649770][ T7300] ? __lock_acquire+0xab9/0xd20 [ 874.649786][ T7300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 874.649809][ T7300] vfs_read+0x200/0xa30 [ 874.649831][ T7300] ? fdget_pos+0x247/0x320 [ 874.649853][ T7300] ? __pfx___mutex_lock+0x10/0x10 [ 874.649876][ T7300] ? __pfx_vfs_read+0x10/0x10 [ 874.649901][ T7300] ? __fget_files+0x2a/0x420 [ 874.649922][ T7300] ? __fget_files+0x3a0/0x420 [ 874.649938][ T7300] ? __fget_files+0x2a/0x420 [ 874.649965][ T7300] ksys_read+0x145/0x250 [ 874.649995][ T7300] ? __fget_files+0x2a/0x420 [ 874.650014][ T7300] ? __pfx_ksys_read+0x10/0x10 [ 874.650041][ T7300] ? do_syscall_64+0xbe/0xfa0 [ 874.650066][ T7300] do_syscall_64+0xfa/0xfa0 [ 874.650086][ T7300] ? lockdep_hardirqs_on+0x9c/0x150 [ 874.650107][ T7300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.650126][ T7300] ? clear_bhb_loop+0x60/0xb0 [ 874.650148][ T7300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.650166][ T7300] RIP: 0033:0x7f784858d9dc [ 874.650183][ T7300] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 874.650200][ T7300] RSP: 002b:00007f784940b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 874.650219][ T7300] RAX: ffffffffffffffda RBX: 00007f78487e5fa0 RCX: 00007f784858d9dc [ 874.650233][ T7300] RDX: 000000000000000f RSI: 00007f784940b0a0 RDI: 0000000000000004 [ 874.650245][ T7300] RBP: 00007f784940b090 R08: 0000000000000000 R09: 0000000000000000 [ 874.650256][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.650267][ T7300] R13: 00007f78487e6038 R14: 00007f78487e5fa0 R15: 00007fff4fe0dc98 [ 874.650299][ T7300] [ 875.257649][ T7266] Set syz1 is full, maxelem 65536 reached [ 875.268608][ T7309] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 875.521489][ T7316] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 875.619218][ T7321] siw: device registration error -23 [ 875.744522][ T5833] Bluetooth: hci0: command tx timeout [ 875.824412][ T7322] lo speed is unknown, defaulting to 1000 [ 875.846996][ T7322] vxcan1 speed is unknown, defaulting to 1000 [ 875.971119][ T7336] __nla_validate_parse: 4 callbacks suppressed [ 875.971136][ T7336] netlink: 136 bytes leftover after parsing attributes in process `syz.4.13782'. [ 876.029121][ T7332] lo speed is unknown, defaulting to 1000 [ 876.099217][ T7342] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 876.164390][ T7338] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13776'. [ 876.626237][ T7367] netlink: 'syz.0.13792': attribute type 13 has an invalid length. [ 877.007095][ T7367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.021782][ T7367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.130513][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13797'. [ 877.226867][ T7332] vxcan1 speed is unknown, defaulting to 1000 [ 877.277991][ T1154] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.297200][ T1154] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.368510][ T1154] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.388866][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13797'. [ 877.675382][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13802'. [ 877.735605][ T7401] netlink: 'syz.0.13802': attribute type 21 has an invalid length. [ 877.744406][ T7401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13802'. [ 877.756619][ T1154] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.137687][ T7409] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 878.153215][ T5833] Bluetooth: hci0: command tx timeout [ 878.256860][ T7411] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 878.386062][ T7413] vlan4: entered promiscuous mode [ 878.692329][ T7425] netlink: 'syz.1.13812': attribute type 1 has an invalid length. [ 878.833234][ T7439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13816'. [ 878.844353][ T7439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13816'. [ 878.870962][ T7439] netlink: 164 bytes leftover after parsing attributes in process `syz.2.13816'. [ 878.910717][ T7446] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13818'. [ 879.116139][ T7454] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 879.146449][ T7458] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 879.179407][ T7461] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 879.268325][ T7457] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.280618][ T7457] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.418117][ T7457] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.429057][ T7457] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.575025][ T7457] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.601765][ T7457] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.706338][ T7457] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.719584][ T7457] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.779248][ T7489] lo speed is unknown, defaulting to 1000 [ 879.815661][ T7489] vxcan1 speed is unknown, defaulting to 1000 [ 879.837370][ T7495] netlink: 'syz.1.13833': attribute type 5 has an invalid length. [ 879.878978][ T7495] ip6erspan0: entered promiscuous mode [ 879.925722][T19473] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.934451][T19473] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.001866][T19473] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.010717][ T7493] lo speed is unknown, defaulting to 1000 [ 880.016646][T19473] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.096893][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.114187][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.156101][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.172647][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.229532][ T7493] vxcan1 speed is unknown, defaulting to 1000 [ 880.305743][ T5833] Bluetooth: hci0: command tx timeout [ 880.406521][ T7505] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 880.455876][ T7504] tipc: Enabled bearer , priority 0 [ 880.473722][ T7504] syzkaller0: entered promiscuous mode [ 880.479220][ T7504] syzkaller0: entered allmulticast mode [ 880.504959][ T7504] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 880.580243][ T7510] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 880.627258][ T7504] tipc: Resetting bearer [ 880.673453][ T7502] tipc: Resetting bearer [ 880.754119][ T7502] tipc: Disabling bearer [ 880.996041][ T7523] netlink: 'syz.2.13843': attribute type 2 has an invalid length. [ 881.008915][ T7523] netlink: 'syz.2.13843': attribute type 5 has an invalid length. [ 881.100189][ T7531] x_tables: duplicate underflow at hook 3 [ 881.121641][ T7532] x_tables: duplicate underflow at hook 3 [ 881.962108][ T7556] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 882.037057][ T7560] __nla_validate_parse: 4 callbacks suppressed [ 882.037075][ T7560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13852'. [ 882.059464][ T7560] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13852'. [ 882.090850][ T7564] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 882.462668][ T5833] Bluetooth: hci0: command tx timeout [ 882.590830][ T7576] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13858'. [ 882.607222][ T7576] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13858'. [ 882.783121][ T95] block nbd4: Possible stuck request ffff88802516e000: control (read@0,1024B). Runtime 330 seconds [ 882.794124][ T95] block nbd4: Possible stuck request ffff88802516e1c0: control (read@1024,1024B). Runtime 330 seconds [ 882.805396][ T95] block nbd4: Possible stuck request ffff88802516e380: control (read@2048,1024B). Runtime 330 seconds [ 882.825476][ T95] block nbd4: Possible stuck request ffff88802516e540: control (read@3072,1024B). Runtime 330 seconds [ 882.825793][ T7584] siw: device registration error -23 [ 882.852964][ T7580] lo speed is unknown, defaulting to 1000 [ 882.860345][ T7580] vxcan1 speed is unknown, defaulting to 1000 [ 882.956246][ T7587] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.13861'. [ 883.073887][ T7595] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 883.205783][ T7601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13867'. [ 883.231566][ T7601] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13867'. [ 883.480442][ T7608] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13870'. [ 883.494481][ T7608] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13870'. [ 883.589349][ T7611] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.13871'. [ 883.600472][ T7613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.945628][ T7628] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 884.006227][ T7631] siw: device registration error -23 [ 884.136042][ T7636] bond2: entered promiscuous mode [ 884.141168][ T7636] bond2: entered allmulticast mode [ 884.147579][ T7636] 8021q: adding VLAN 0 to HW filter on device bond2 [ 884.682061][ T7657] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 885.021436][ T7682] pim6reg: entered allmulticast mode [ 885.050911][ T7682] pim6reg: left allmulticast mode [ 885.102770][ T5833] Bluetooth: hci0: command tx timeout [ 885.148000][ T7692] gretap0: entered promiscuous mode [ 885.155741][ T7692] gretap0: left promiscuous mode [ 885.591363][ T7708] lo speed is unknown, defaulting to 1000 [ 885.622405][ T7708] vxcan1 speed is unknown, defaulting to 1000 [ 885.704377][ T7715] x_tables: ip_tables: osf match: only valid for protocol 6 [ 885.766244][ T7716] lo speed is unknown, defaulting to 1000 [ 885.992236][ T31] INFO: task udevd:25982 blocked for more than 143 seconds. [ 886.026170][ T31] Not tainted syzkaller #0 [ 886.035237][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 886.037449][ T7727] xt_time: unknown flags 0xf4 [ 886.048988][ T31] task:udevd state:D [ 886.049025][ T7716] vxcan1 speed is unknown, defaulting to 1000 [ 886.049023][ T31] stack:21896 pid:25982 tgid:25982 ppid:5195 task_flags:0x400140 flags:0x00080003 [ 886.111125][ T31] Call Trace: [ 886.114764][ T31] [ 886.117805][ T31] __schedule+0x1798/0x4cc0 [ 886.122627][ T31] ? __pfx___schedule+0x10/0x10 [ 886.127713][ T31] ? schedule+0x91/0x360 [ 886.132112][ T31] schedule+0x165/0x360 [ 886.136521][ T31] io_schedule+0x80/0xd0 [ 886.141266][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 886.147687][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 886.153819][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 886.159522][ T31] ? __filemap_get_folio+0x770/0xaf0 [ 886.165075][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 886.170517][ T31] do_read_cache_folio+0x1aa/0x590 [ 886.175837][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 886.181450][ T31] read_part_sector+0xb6/0x2b0 [ 886.186387][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 886.191896][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 886.197716][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 886.203929][ T31] bdev_disk_changed+0x75f/0x14b0 [ 886.209132][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 886.214767][ T31] ? wait_on_inode+0xc0/0x230 [ 886.219734][ T31] blkdev_get_whole+0x380/0x510 [ 886.225002][ T31] bdev_open+0x31e/0xd30 [ 886.229372][ T31] blkdev_open+0x457/0x600 [ 886.234091][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 886.239319][ T31] do_dentry_open+0x953/0x13f0 [ 886.244719][ T31] vfs_open+0x3b/0x340 [ 886.248900][ T31] ? path_openat+0x2ecd/0x3830 [ 886.253852][ T31] path_openat+0x2ee5/0x3830 [ 886.258764][ T31] ? __pfx_path_openat+0x10/0x10 [ 886.263861][ T31] do_filp_open+0x1fa/0x410 [ 886.268531][ T31] ? __lock_acquire+0xab9/0xd20 [ 886.273754][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 886.278948][ T31] ? _raw_spin_unlock+0x28/0x50 [ 886.284003][ T31] ? alloc_fd+0x64c/0x6c0 [ 886.288453][ T31] do_sys_openat2+0x121/0x1c0 [ 886.293338][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 886.298699][ T31] __x64_sys_openat+0x138/0x170 [ 886.303735][ T31] do_syscall_64+0xfa/0xfa0 [ 886.308331][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 886.313910][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.320204][ T31] ? clear_bhb_loop+0x60/0xb0 [ 886.325232][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.331234][ T31] RIP: 0033:0x7f250d6a7407 [ 886.335884][ T31] RSP: 002b:00007ffefb2df6e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 886.345076][ T31] RAX: ffffffffffffffda RBX: 00007f250ddbf880 RCX: 00007f250d6a7407 [ 886.353455][ T31] RDX: 00000000000a0800 RSI: 00005618f2240a50 RDI: ffffffffffffff9c [ 886.361540][ T31] RBP: 00005618f2227910 R08: 0000000000000000 R09: 0000000000000000 [ 886.377404][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005618f2244f10 [ 886.391495][ T31] R13: 00005618f2235190 R14: 0000000000000000 R15: 00005618f2244f10 [ 886.403143][ T31] [ 886.406590][ T31] [ 886.406590][ T31] Showing all locks held in the system: [ 886.418550][ T31] 1 lock held by khungtaskd/31: [ 886.423526][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 886.433812][ T31] 3 locks held by kworker/u8:4/79: [ 886.439036][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 886.451838][ T31] #1: ffffc9000217fba0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 886.469800][ T31] #2: ffffffff8df42c40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 886.480102][ T31] 4 locks held by kworker/u8:5/1154: [ 886.485759][ T31] 2 locks held by getty/5580: [ 886.490607][ T31] #0: ffff8880301350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 886.500499][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 886.511030][ T31] 1 lock held by udevd/25982: [ 886.515958][ T31] #0: ffff888024f8b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 886.525503][ T31] 1 lock held by udevd/26147: [ 886.530267][ T31] #0: ffff888143b01358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 886.539780][ T31] 4 locks held by syz.4.13909/7716: [ 886.545187][ T31] [ 886.547948][ T31] ============================================= [ 886.547948][ T31] [ 886.557673][ T31] NMI backtrace for cpu 0 [ 886.557688][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 886.557709][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 886.557721][ T31] Call Trace: [ 886.557729][ T31] [ 886.557737][ T31] dump_stack_lvl+0x189/0x250 [ 886.557767][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.557791][ T31] ? __pfx__printk+0x10/0x10 [ 886.557822][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 886.557852][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 886.557880][ T31] ? __pfx__printk+0x10/0x10 [ 886.557903][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 886.557932][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 886.557960][ T31] watchdog+0xf60/0xfa0 [ 886.557983][ T31] ? watchdog+0x1e2/0xfa0 [ 886.558012][ T31] kthread+0x711/0x8a0 [ 886.558039][ T31] ? __pfx_watchdog+0x10/0x10 [ 886.558056][ T31] ? __pfx_kthread+0x10/0x10 [ 886.558080][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.558100][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 886.558119][ T31] ? __pfx_kthread+0x10/0x10 [ 886.558142][ T31] ret_from_fork+0x4bc/0x870 [ 886.558164][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 886.558189][ T31] ? __switch_to_asm+0x39/0x70 [ 886.558204][ T31] ? __switch_to_asm+0x33/0x70 [ 886.558218][ T31] ? __pfx_kthread+0x10/0x10 [ 886.558242][ T31] ret_from_fork_asm+0x1a/0x30 [ 886.558274][ T31] [ 886.558281][ T31] Sending NMI from CPU 0 to CPUs 1: [ 886.704344][ C1] NMI backtrace for cpu 1 [ 886.704359][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 886.704378][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 886.704388][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 886.704412][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 51 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 886.704427][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 886.704443][ C1] RAX: f75dd7c40d025e00 RBX: ffffffff81967b87 RCX: f75dd7c40d025e00 [ 886.704456][ C1] RDX: 0000000000000001 RSI: ffffffff8d70bd92 RDI: ffffffff8bbf0460 [ 886.704468][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 886.704481][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cc970 [ 886.704493][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 886.704505][ C1] FS: 0000000000000000(0000) GS:ffff888126240000(0000) knlGS:0000000000000000 [ 886.704519][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 886.704531][ C1] CR2: 00007f39c0bb12f8 CR3: 0000000074c86000 CR4: 00000000003526f0 [ 886.704546][ C1] Call Trace: [ 886.704553][ C1] [ 886.704560][ C1] default_idle+0x13/0x20 [ 886.704580][ C1] default_idle_call+0x73/0xb0 [ 886.704602][ C1] do_idle+0x1e7/0x510 [ 886.704622][ C1] ? __pfx_do_idle+0x10/0x10 [ 886.704647][ C1] cpu_startup_entry+0x44/0x60 [ 886.704664][ C1] start_secondary+0x101/0x110 [ 886.704688][ C1] common_startup_64+0x13e/0x147 [ 886.704716][ C1]