last executing test programs:

2.644110132s ago: executing program 2 (id=10509):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (fail_nth: 1)

2.245820854s ago: executing program 2 (id=10515):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000001b00), &(0x7f0000000480)=0x4)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
ppoll(&(0x7f0000000980)=[{r4, 0x4}, {r3, 0x4}], 0x2, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000680)={@ipv4={""/10, ""/2, @broadcast}, <r5=>0x0}, &(0x7f00000006c0)=0x14)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000002fc0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045)
shutdown(r6, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x2}, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0x10000004})
connect$llc(r1, &(0x7f0000000040)={0x1a, 0x201, 0x7, 0x8, 0xbe, 0x8f, @remote}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[], 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20008040)
r8 = socket(0xa, 0x3, 0xff)
sendmsg$unix(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5a24f4111d3ed57f2b38869bef41e39914400c06083d9a7d8eaaa246d09a", 0xffffffe4}, {0x0}], 0x2, 0x0, 0x0, 0x408c0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94)

1.970777981s ago: executing program 0 (id=10516):
r0 = socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x1000002, 0x2, 0x9}]}]}, {0x0, [0x30, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180))
close(r0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket(0xa, 0x3, 0x3a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x8c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x7fd, @loopback}, 0x0, {[0x0, 0x2, 0x0, 0x1, 0x0, 0x4, 0x800000]}}, 0x5c)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d333000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB], 0x158}}, 0x0)

1.970325302s ago: executing program 4 (id=10517):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05", 0x20}], 0x1}}], 0x3, 0x20000044)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)

1.366245205s ago: executing program 4 (id=10520):
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x3, 0x20000044)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.347930462s ago: executing program 3 (id=10521):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.27696701s ago: executing program 1 (id=10522):
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8b", 0x8e}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8", 0x48}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x3, 0x20000044)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.215042513s ago: executing program 4 (id=10523):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd65", 0x36}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.194085342s ago: executing program 0 (id=10524):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2", 0x39}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0)

1.193361484s ago: executing program 3 (id=10525):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2", 0x39}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6", 0xcb}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effff"], 0x6f4}}, 0x0)

1.104462886s ago: executing program 1 (id=10526):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb4", 0x2e}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2", 0x39}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6", 0xcb}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.096245124s ago: executing program 3 (id=10527):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000100), 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r2)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x1a8, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x15c, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
shutdown(0xffffffffffffffff, 0x1)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10)
setsockopt(r7, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e21, @multicast2}}}, 0x84)

966.721264ms ago: executing program 0 (id=10528):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000100), 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r2)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x1a8, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x15c, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) (fail_nth: 1)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
shutdown(0xffffffffffffffff, 0x1)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10)
setsockopt(r7, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e21, @multicast2}}}, 0x84)

925.069267ms ago: executing program 1 (id=10529):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38", 0x9c}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c2", 0x4a}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2", 0x39}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748a", 0x99}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

924.647571ms ago: executing program 4 (id=10530):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x8000)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x13}}}}], 0x20}, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket(0x10, 0x803, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=@newtfilter={0x8b8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x884, 0x2, [@TCA_U32_POLICE={0x85c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x8000, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x1, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74db, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x0, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0x0, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x4, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f0000000040)=0x1a2, 0x4)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r1, r1, 0x4, 0x0, 0x0, 0xc0, 0x4, 0x9c3f, 0x6, 0x5, 0x2, 0x7, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

921.642234ms ago: executing program 3 (id=10531):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962", 0xd5}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x3, 0x20000044)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

860.973051ms ago: executing program 2 (id=10532):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, 0x0}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x3, 0x20000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

653.586778ms ago: executing program 3 (id=10533):
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x3, 0x20000044)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

569.880387ms ago: executing program 0 (id=10534):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f0", 0x4f}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2", 0x39}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6", 0xcb}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x3, 0x20000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

556.601063ms ago: executing program 2 (id=10535):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r1, r1, 0x4, 0x0, 0x0, 0xc0, 0x4, 0x9c3f, 0x6, 0x5, 0x2, 0x7, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

501.108687ms ago: executing program 1 (id=10536):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000000)={0x7, 'ip_vti0\x00', {0x2}, 0x7})
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000100000000000000000000000000900000000000000000000000000000001000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac141414000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb013500000000ff00000000000400000001000000fe800000000000000000000000000025000000003200000000000000ffffffff0000000000000000000000000000000000000000000000000200000000000000ac1e0101000000000000000000000000000000003c00000002000000fe8800000000000000000000000001010000000001030000000000000000000000000000fe8000000000000000000000800000bb000000003c00000002000000fe800000000000000000000000000010000000000000ff00ff7f00000300000000000000ac141426000000000000000000000000000000002b00000002000000ac141400000000000000000000000000fcffffff00010000010000800000000000000000fe8000000000000000000000000000aa000000002b00000000000000fe8800000000000000000000000001010000000005"], 0x23c}}, 0x0)

466.698804ms ago: executing program 3 (id=10537):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r1, r1, 0x4, 0x0, 0x0, 0xc0, 0x4, 0x9c3f, 0x6, 0x5, 0x2, 0x7, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (fail_nth: 1)

423.946293ms ago: executing program 1 (id=10538):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2", 0x39}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0)

373.966861ms ago: executing program 0 (id=10539):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2", 0x39}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6", 0xcb}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff08021100"], 0x6f4}}, 0x0)

257.038038ms ago: executing program 1 (id=10540):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd65", 0x36}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

253.9614ms ago: executing program 4 (id=10541):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb4", 0x2e}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2", 0x39}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6", 0xcb}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

208.761484ms ago: executing program 0 (id=10542):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r3, r3, 0x4, 0x0, 0x0, 0xc0, 0x4, 0x9c3f, 0x6, 0x5, 0x2, 0x7, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0x8, 0x12)
connect$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x2, 0x1}, 0x1}}, 0x10)

195.136408ms ago: executing program 2 (id=10543):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962", 0xd5}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x3, 0x20000044)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.127489ms ago: executing program 4 (id=10544):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2", 0x39}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

0s ago: executing program 2 (id=10545):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, 0x0}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x3, 0x20000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

kernel console output (not intermixed with test programs):

3bba97f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  411.209632][T24536] RAX: ffffffffffffffda RBX: 00007f3bb9e15fa0 RCX: 00007f3bb9b9c819
[  411.209646][T24536] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a
[  411.209657][T24536] RBP: 00007f3bba97f090 R08: 0000000000000000 R09: 0000000000000000
[  411.209668][T24536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  411.209678][T24536] R13: 00007f3bb9e16038 R14: 00007f3bb9e15fa0 R15: 00007ffce4ca7fe8
[  411.209708][T24536]  </TASK>
[  412.437793][T24577] FAULT_INJECTION: forcing a failure.
[  412.437793][T24577] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  412.470683][T24577] CPU: 0 UID: 0 PID: 24577 Comm: syz.1.8701 Not tainted syzkaller #0 PREEMPT(full) 
[  412.470710][T24577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  412.470721][T24577] Call Trace:
[  412.470728][T24577]  <TASK>
[  412.470735][T24577]  dump_stack_lvl+0xe8/0x150
[  412.470762][T24577]  should_fail_ex+0x412/0x560
[  412.470789][T24577]  _copy_from_user+0x2d/0xb0
[  412.470811][T24577]  do_ipt_set_ctl+0x6a5/0xe00
[  412.470831][T24577]  ? rcu_is_watching+0x15/0xb0
[  412.470855][T24577]  ? trace_contention_end+0x3d/0x150
[  412.470873][T24577]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  412.470904][T24577]  ? __pfx___mutex_lock+0x10/0x10
[  412.470923][T24577]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  412.470947][T24577]  ? __pfx_aa_sk_perm+0x10/0x10
[  412.470976][T24577]  nf_setsockopt+0x26f/0x290
[  412.470997][T24577]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  412.471019][T24577]  do_sock_setsockopt+0x17c/0x1b0
[  412.471047][T24577]  __x64_sys_setsockopt+0x13d/0x1b0
[  412.471076][T24577]  do_syscall_64+0x14d/0xf80
[  412.471093][T24577]  ? trace_irq_disable+0x3b/0x150
[  412.471107][T24577]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.471124][T24577]  ? clear_bhb_loop+0x40/0x90
[  412.471144][T24577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.471160][T24577] RIP: 0033:0x7f883099c819
[  412.471174][T24577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  412.471189][T24577] RSP: 002b:00007f88317d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  412.471207][T24577] RAX: ffffffffffffffda RBX: 00007f8830c15fa0 RCX: 00007f883099c819
[  412.471218][T24577] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004
[  412.471228][T24577] RBP: 00007f88317d4090 R08: 0000000000000428 R09: 0000000000000000
[  412.471239][T24577] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  412.471250][T24577] R13: 00007f8830c16038 R14: 00007f8830c15fa0 R15: 00007fff99bd6108
[  412.471277][T24577]  </TASK>
[  413.209280][T24609] __nla_validate_parse: 4 callbacks suppressed
[  413.209299][T24609] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.8716'.
[  413.350278][T24615] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.8720'.
[  413.870826][T24643] ipvlan2: entered promiscuous mode
[  413.878624][T24643] bridge0: port 3(ipvlan2) entered blocking state
[  413.887810][T24643] bridge0: port 3(ipvlan2) entered disabled state
[  413.899703][T24643] ipvlan2: entered allmulticast mode
[  413.906700][T24643] bridge0: entered allmulticast mode
[  413.919502][T24643] ipvlan2: left allmulticast mode
[  413.943436][T24647] netlink: 'syz.4.8734': attribute type 72 has an invalid length.
[  413.952733][T24643] bridge0: left allmulticast mode
[  414.247968][T24665] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.8742'.
[  414.424325][T24678] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.8747'.
[  414.465065][T24680] syzkaller0: entered promiscuous mode
[  414.480905][T24680] syzkaller0: entered allmulticast mode
[  414.827746][T24704] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8760'.
[  415.227480][T24726] FAULT_INJECTION: forcing a failure.
[  415.227480][T24726] name failslab, interval 1, probability 0, space 0, times 1
[  415.294269][T24726] CPU: 0 UID: 0 PID: 24726 Comm: syz.4.8767 Not tainted syzkaller #0 PREEMPT(full) 
[  415.294293][T24726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  415.294303][T24726] Call Trace:
[  415.294310][T24726]  <TASK>
[  415.294317][T24726]  dump_stack_lvl+0xe8/0x150
[  415.294350][T24726]  should_fail_ex+0x412/0x560
[  415.294388][T24726]  should_failslab+0xa8/0x100
[  415.294411][T24726]  __kmalloc_noprof+0xe8/0x760
[  415.294431][T24726]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  415.294455][T24726]  tomoyo_realpath_from_path+0xe3/0x5d0
[  415.294483][T24726]  ? tomoyo_path_number_perm+0x219/0x630
[  415.294507][T24726]  tomoyo_path_number_perm+0x246/0x630
[  415.294533][T24726]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  415.294560][T24726]  ? __lock_acquire+0x6b5/0x2cf0
[  415.294592][T24726]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  415.294630][T24726]  ? __fget_files+0x2a/0x420
[  415.294649][T24726]  ? __fget_files+0x2a/0x420
[  415.294664][T24726]  ? __fget_files+0x3a0/0x420
[  415.294678][T24726]  ? __fget_files+0x2a/0x420
[  415.294696][T24726]  security_file_ioctl+0xc3/0x2a0
[  415.294720][T24726]  __se_sys_ioctl+0x47/0x170
[  415.294742][T24726]  do_syscall_64+0x14d/0xf80
[  415.294758][T24726]  ? trace_irq_disable+0x3b/0x150
[  415.294773][T24726]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.294791][T24726]  ? clear_bhb_loop+0x40/0x90
[  415.294812][T24726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.294829][T24726] RIP: 0033:0x7fbc25b9c819
[  415.294846][T24726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.294861][T24726] RSP: 002b:00007fbc269a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  415.294879][T24726] RAX: ffffffffffffffda RBX: 00007fbc25e16180 RCX: 00007fbc25b9c819
[  415.294891][T24726] RDX: 0000200000000100 RSI: 000000000000894b RDI: 0000000000000003
[  415.294903][T24726] RBP: 00007fbc269a9090 R08: 0000000000000000 R09: 0000000000000000
[  415.294913][T24726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  415.294924][T24726] R13: 00007fbc25e16218 R14: 00007fbc25e16180 R15: 00007ffc3f1fbaa8
[  415.294952][T24726]  </TASK>
[  415.294985][T24726] ERROR: Out of memory at tomoyo_realpath_from_path.
[  415.859021][T24761] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí
[  415.859021][T24761] 3ìUH†5rºBnœ�æ
[  415.927137][T24764] netlink: zone id is out of range
[  415.936265][T24764] netlink: zone id is out of range
[  415.942626][T24764] netlink: zone id is out of range
[  415.948021][T24764] netlink: zone id is out of range
[  415.954383][T24764] netlink: zone id is out of range
[  415.971729][T24764] netlink: zone id is out of range
[  415.987127][T24764] netlink: zone id is out of range
[  416.004298][T24768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8785'.
[  416.031873][T24764] netlink: zone id is out of range
[  416.049623][T24764] netlink: zone id is out of range
[  416.073482][T24764] netlink: zone id is out of range
[  416.464933][T24786] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.8794'.
[  417.299132][T24841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8816'.
[  417.594268][T24859] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8824'.
[  417.631002][T24859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8824'.
[  417.726237][T24864] FAULT_INJECTION: forcing a failure.
[  417.726237][T24864] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.746217][T24864] CPU: 1 UID: 0 PID: 24864 Comm: syz.3.8827 Not tainted syzkaller #0 PREEMPT(full) 
[  417.746242][T24864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  417.746252][T24864] Call Trace:
[  417.746259][T24864]  <TASK>
[  417.746266][T24864]  dump_stack_lvl+0xe8/0x150
[  417.746294][T24864]  should_fail_ex+0x412/0x560
[  417.746323][T24864]  _copy_from_user+0x2d/0xb0
[  417.746344][T24864]  ___sys_sendmsg+0x1c6/0x360
[  417.746372][T24864]  ? __pfx____sys_sendmsg+0x10/0x10
[  417.746425][T24864]  ? __fget_files+0x2a/0x420
[  417.746442][T24864]  ? __fget_files+0x3a0/0x420
[  417.746466][T24864]  __x64_sys_sendmsg+0x1bd/0x2a0
[  417.746492][T24864]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  417.746525][T24864]  ? __pfx_ksys_write+0x10/0x10
[  417.746555][T24864]  do_syscall_64+0x14d/0xf80
[  417.746571][T24864]  ? trace_irq_disable+0x3b/0x150
[  417.746587][T24864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.746604][T24864]  ? clear_bhb_loop+0x40/0x90
[  417.746625][T24864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.746642][T24864] RIP: 0033:0x7f37d739c819
[  417.746657][T24864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  417.746672][T24864] RSP: 002b:00007f37d81fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  417.746690][T24864] RAX: ffffffffffffffda RBX: 00007f37d7615fa0 RCX: 00007f37d739c819
[  417.746701][T24864] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000b
[  417.746711][T24864] RBP: 00007f37d81fb090 R08: 0000000000000000 R09: 0000000000000000
[  417.746721][T24864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.746730][T24864] R13: 00007f37d7616038 R14: 00007f37d7615fa0 R15: 00007fff5c078dd8
[  417.746754][T24864]  </TASK>
[  418.603177][T24916] __nla_validate_parse: 2 callbacks suppressed
[  418.603195][T24916] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.8847'.
[  419.837986][T24990] warning: `syz.3.8881' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  421.053597][T25070] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.8923'.
[  421.143374][T25074] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.8924'.
[  421.553670][T25097] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.8936'.
[  422.083391][T25132] sctp: [Deprecated]: syz.3.8953 (pid 25132) Use of struct sctp_assoc_value in delayed_ack socket option.
[  422.083391][T25132] Use struct sctp_sack_info instead
[  422.360706][T25147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8955'.
[  422.721392][T25146] netlink: 'syz.0.8958': attribute type 1 has an invalid length.
[  423.273423][T25163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8964'.
[  423.414926][T25163] veth3: entered allmulticast mode
[  423.446893][T25163] bond1: (slave veth3): Enslaving as an active interface with an up link
[  423.489147][T25171] bond1 (unregistering): (slave veth3): Releasing backup interface
[  423.503282][T25171] bond1 (unregistering): Released all slaves
[  424.077575][T25220] FAULT_INJECTION: forcing a failure.
[  424.077575][T25220] name failslab, interval 1, probability 0, space 0, times 0
[  424.092064][T25220] CPU: 1 UID: 0 PID: 25220 Comm: syz.4.8984 Not tainted syzkaller #0 PREEMPT(full) 
[  424.092087][T25220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  424.092098][T25220] Call Trace:
[  424.092105][T25220]  <TASK>
[  424.092113][T25220]  dump_stack_lvl+0xe8/0x150
[  424.092140][T25220]  should_fail_ex+0x412/0x560
[  424.092170][T25220]  should_failslab+0xa8/0x100
[  424.092203][T25220]  ? do_getname+0x2e/0x250
[  424.092225][T25220]  kmem_cache_alloc_noprof+0x87/0x650
[  424.092253][T25220]  do_getname+0x2e/0x250
[  424.092274][T25220]  ? getname_flags+0x11/0x20
[  424.092298][T25220]  do_sys_openat2+0xca/0x200
[  424.092326][T25220]  ? __pfx_do_sys_openat2+0x10/0x10
[  424.092351][T25220]  ? ksys_write+0x242/0x270
[  424.092372][T25220]  ? __pfx_ksys_write+0x10/0x10
[  424.092394][T25220]  __x64_sys_openat+0x138/0x170
[  424.092422][T25220]  do_syscall_64+0x14d/0xf80
[  424.092439][T25220]  ? trace_irq_disable+0x3b/0x150
[  424.092454][T25220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.092471][T25220]  ? clear_bhb_loop+0x40/0x90
[  424.092493][T25220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.092511][T25220] RIP: 0033:0x7fbc25b9c819
[  424.092527][T25220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.092542][T25220] RSP: 002b:00007fbc269eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  424.092561][T25220] RAX: ffffffffffffffda RBX: 00007fbc25e15fa0 RCX: 00007fbc25b9c819
[  424.092575][T25220] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  424.092587][T25220] RBP: 00007fbc269eb090 R08: 0000000000000000 R09: 0000000000000000
[  424.092598][T25220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  424.092609][T25220] R13: 00007fbc25e16038 R14: 00007fbc25e15fa0 R15: 00007ffc3f1fbaa8
[  424.092638][T25220]  </TASK>
[  425.128686][T25272] delete_channel: no stack
[  425.262376][T25285] FAULT_INJECTION: forcing a failure.
[  425.262376][T25285] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  425.311447][T25285] CPU: 1 UID: 0 PID: 25285 Comm: syz.3.9013 Not tainted syzkaller #0 PREEMPT(full) 
[  425.311472][T25285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  425.311482][T25285] Call Trace:
[  425.311490][T25285]  <TASK>
[  425.311497][T25285]  dump_stack_lvl+0xe8/0x150
[  425.311526][T25285]  should_fail_ex+0x412/0x560
[  425.311555][T25285]  _copy_from_user+0x2d/0xb0
[  425.311577][T25285]  ___sys_sendmsg+0x1c6/0x360
[  425.311605][T25285]  ? __pfx____sys_sendmsg+0x10/0x10
[  425.311658][T25285]  ? __fget_files+0x2a/0x420
[  425.311673][T25285]  ? __fget_files+0x3a0/0x420
[  425.311698][T25285]  __x64_sys_sendmsg+0x1bd/0x2a0
[  425.311723][T25285]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  425.311757][T25285]  ? __pfx_ksys_write+0x10/0x10
[  425.311787][T25285]  do_syscall_64+0x14d/0xf80
[  425.311804][T25285]  ? trace_irq_disable+0x3b/0x150
[  425.311821][T25285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.311839][T25285]  ? clear_bhb_loop+0x40/0x90
[  425.311859][T25285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.311877][T25285] RIP: 0033:0x7f37d739c819
[  425.311893][T25285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  425.311907][T25285] RSP: 002b:00007f37d81fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  425.311926][T25285] RAX: ffffffffffffffda RBX: 00007f37d7615fa0 RCX: 00007f37d739c819
[  425.311939][T25285] RDX: 00000000040000c4 RSI: 0000200000000000 RDI: 0000000000000004
[  425.311950][T25285] RBP: 00007f37d81fb090 R08: 0000000000000000 R09: 0000000000000000
[  425.311961][T25285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.311971][T25285] R13: 00007f37d7616038 R14: 00007f37d7615fa0 R15: 00007fff5c078dd8
[  425.312003][T25285]  </TASK>
[  425.860662][T25309] sctp: [Deprecated]: syz.0.9023 (pid 25309) Use of struct sctp_assoc_value in delayed_ack socket option.
[  425.860662][T25309] Use struct sctp_sack_info instead
[  425.956033][T25318] syzkaller0: entered promiscuous mode
[  425.970781][T25318] syzkaller0: entered allmulticast mode
[  425.998618][T25315] netlink: 'syz.4.9027': attribute type 39 has an invalid length.
[  426.008367][T25318] netlink: 'syz.4.9027': attribute type 39 has an invalid length.
[  427.548826][T25413] xt_hashlimit: size too large, truncated to 1048576
[  427.833976][T25433] lo speed is unknown, defaulting to 1000
[  427.892428][T25433] lo speed is unknown, defaulting to 1000
[  427.916552][T25433] lo speed is unknown, defaulting to 1000
[  428.059461][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  428.069568][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  428.079491][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  428.088170][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  428.101445][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  428.210081][T25443] gre0 speed is unknown, defaulting to 1000
[  428.407344][T25447] FAULT_INJECTION: forcing a failure.
[  428.407344][T25447] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  428.425110][T25447] CPU: 0 UID: 0 PID: 25447 Comm: syz.0.9079 Not tainted syzkaller #0 PREEMPT(full) 
[  428.425130][T25447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  428.425138][T25447] Call Trace:
[  428.425144][T25447]  <TASK>
[  428.425150][T25447]  dump_stack_lvl+0xe8/0x150
[  428.425177][T25447]  should_fail_ex+0x412/0x560
[  428.425206][T25447]  _copy_from_user+0x2d/0xb0
[  428.425225][T25447]  ___sys_sendmsg+0x1c6/0x360
[  428.425253][T25447]  ? __pfx____sys_sendmsg+0x10/0x10
[  428.425304][T25447]  ? __fget_files+0x2a/0x420
[  428.425320][T25447]  ? __fget_files+0x3a0/0x420
[  428.425343][T25447]  __x64_sys_sendmsg+0x1bd/0x2a0
[  428.425370][T25447]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  428.425403][T25447]  ? __pfx_ksys_write+0x10/0x10
[  428.425433][T25447]  do_syscall_64+0x14d/0xf80
[  428.425448][T25447]  ? trace_irq_disable+0x3b/0x150
[  428.425463][T25447]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.425479][T25447]  ? clear_bhb_loop+0x40/0x90
[  428.425500][T25447]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.425517][T25447] RIP: 0033:0x7f3bb9b9c819
[  428.425533][T25447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  428.425548][T25447] RSP: 002b:00007f3bba97f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  428.425567][T25447] RAX: ffffffffffffffda RBX: 00007f3bb9e15fa0 RCX: 00007f3bb9b9c819
[  428.425580][T25447] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000003
[  428.425590][T25447] RBP: 00007f3bba97f090 R08: 0000000000000000 R09: 0000000000000000
[  428.425601][T25447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  428.425611][T25447] R13: 00007f3bb9e16038 R14: 00007f3bb9e15fa0 R15: 00007ffce4ca7fe8
[  428.425635][T25447]  </TASK>
[  428.797378][T25433] infiniband syz2: set active
[  428.804901][T25433] infiniband syz2: added lo
[  428.811627][T25433] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  428.814770][T25433] infiniband syz2: Couldn't open port 1
[  428.856143][ T5830] lo speed is unknown, defaulting to 1000
[  428.914120][T25433] RDS/IB: syz2: added
[  428.924497][T25433] smc: adding ib device syz2 with port count 1
[  428.940040][T25433] smc:    ib device syz2 port 1 has no pnetid
[  428.968624][ T5956] lo speed is unknown, defaulting to 1000
[  428.974820][T25433] lo speed is unknown, defaulting to 1000
[  429.310238][T25443] chnl_net:caif_netlink_parms(): no params data found
[  429.455320][T25433] lo speed is unknown, defaulting to 1000
[  429.560788][T25443] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.568047][T25443] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.575536][T25443] bridge_slave_0: entered allmulticast mode
[  429.583335][T25443] bridge_slave_0: entered promiscuous mode
[  429.595248][T25443] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.602637][T25443] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.609907][T25443] bridge_slave_1: entered allmulticast mode
[  429.618111][T25443] bridge_slave_1: entered promiscuous mode
[  429.656828][T25443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.684758][T25443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.744710][T25443] team0: Port device team_slave_0 added
[  429.753847][T25443] team0: Port device team_slave_1 added
[  429.838846][T25443] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.877296][T25443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.916421][T25443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.937916][T25443] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.957865][T25443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.000846][T25443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.021140][T25433] lo speed is unknown, defaulting to 1000
[  430.140989][ T5822] Bluetooth: hci1: command tx timeout
[  430.167861][T25443] hsr_slave_0: entered promiscuous mode
[  430.189650][T25443] hsr_slave_1: entered promiscuous mode
[  430.196082][T25443] debugfs: 'hsr0' already exists in 'hsr'
[  430.205338][T25443] Cannot create hsr debugfs directory
[  430.622971][T25443] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.643496][T25433] lo speed is unknown, defaulting to 1000
[  430.755535][T25443] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.907629][T25443] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.054417][T25443] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.206143][T25540] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.9114'.
[  431.292907][T25433] lo speed is unknown, defaulting to 1000
[  431.324205][T25443] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  431.359668][T25443] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  431.394108][T25443] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  431.415120][T25443] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  431.635012][T25443] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.667729][T25443] 8021q: adding VLAN 0 to HW filter on device team0
[  431.701358][  T333] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.708519][  T333] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.795976][  T333] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.803169][  T333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.876301][T25433] lo speed is unknown, defaulting to 1000
[  431.881269][T25443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  432.221486][ T5822] Bluetooth: hci1: command tx timeout
[  432.287143][T25443] 8021q: adding VLAN 0 to HW filter on device batadv0
[  432.656611][T25606] tipc: Started in network mode
[  432.661922][T25606] tipc: Node identity 7ab6fa0eadbf, cluster identity 4711
[  432.669189][T25606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  432.725337][T25603] tipc: Disabling bearer <eth:syzkaller0>
[  432.798495][T25443] veth0_vlan: entered promiscuous mode
[  432.845500][T25443] veth1_vlan: entered promiscuous mode
[  432.920458][T25443] veth0_macvtap: entered promiscuous mode
[  432.959472][T25443] veth1_macvtap: entered promiscuous mode
[  433.024235][T25443] batman_adv: batadv0: Interface activated: batadv_slave_0
[  433.048518][T25443] batman_adv: batadv0: Interface activated: batadv_slave_1
[  433.095238][   T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  433.113602][   T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  433.161443][   T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  433.193638][   T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  433.279372][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  433.310766][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.352947][  T333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  433.373660][  T333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.566391][T25647] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.9154'.
[  433.680013][T25653] sctp: [Deprecated]: syz.3.9156 (pid 25653) Use of struct sctp_assoc_value in delayed_ack socket option.
[  433.680013][T25653] Use struct sctp_sack_info instead
[  434.149762][T25679] sctp: [Deprecated]: syz.2.9170 (pid 25679) Use of struct sctp_assoc_value in delayed_ack socket option.
[  434.149762][T25679] Use struct sctp_sack_info instead
[  434.239753][T25687] FAULT_INJECTION: forcing a failure.
[  434.239753][T25687] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  434.265735][T25687] CPU: 1 UID: 0 PID: 25687 Comm: syz.4.9174 Not tainted syzkaller #0 PREEMPT(full) 
[  434.265760][T25687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  434.265771][T25687] Call Trace:
[  434.265778][T25687]  <TASK>
[  434.265786][T25687]  dump_stack_lvl+0xe8/0x150
[  434.265816][T25687]  should_fail_ex+0x412/0x560
[  434.265847][T25687]  _copy_from_user+0x2d/0xb0
[  434.265869][T25687]  ___sys_sendmsg+0x1c6/0x360
[  434.265899][T25687]  ? __pfx____sys_sendmsg+0x10/0x10
[  434.265954][T25687]  ? __fget_files+0x2a/0x420
[  434.265970][T25687]  ? __fget_files+0x3a0/0x420
[  434.265995][T25687]  __x64_sys_sendmsg+0x1bd/0x2a0
[  434.266023][T25687]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  434.266056][T25687]  ? __pfx_ksys_write+0x10/0x10
[  434.266085][T25687]  do_syscall_64+0x14d/0xf80
[  434.266102][T25687]  ? trace_irq_disable+0x3b/0x150
[  434.266117][T25687]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.266135][T25687]  ? clear_bhb_loop+0x40/0x90
[  434.266157][T25687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.266174][T25687] RIP: 0033:0x7f517319c819
[  434.266190][T25687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.266205][T25687] RSP: 002b:00007f517409c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  434.266231][T25687] RAX: ffffffffffffffda RBX: 00007f5173415fa0 RCX: 00007f517319c819
[  434.266244][T25687] RDX: 0000000000000000 RSI: 00002000000023c0 RDI: 0000000000000004
[  434.266254][T25687] RBP: 00007f517409c090 R08: 0000000000000000 R09: 0000000000000000
[  434.266264][T25687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  434.266273][T25687] R13: 00007f5173416038 R14: 00007f5173415fa0 R15: 00007fffe31b54d8
[  434.266301][T25687]  </TASK>
[  434.446263][ T5822] Bluetooth: hci1: command tx timeout
[  434.579999][T25696] FAULT_INJECTION: forcing a failure.
[  434.579999][T25696] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  434.661265][T25696] CPU: 1 UID: 0 PID: 25696 Comm: syz.4.9179 Not tainted syzkaller #0 PREEMPT(full) 
[  434.661289][T25696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  434.661300][T25696] Call Trace:
[  434.661306][T25696]  <TASK>
[  434.661314][T25696]  dump_stack_lvl+0xe8/0x150
[  434.661342][T25696]  should_fail_ex+0x412/0x560
[  434.661372][T25696]  _copy_from_user+0x2d/0xb0
[  434.661395][T25696]  ___sys_sendmsg+0x1c6/0x360
[  434.661425][T25696]  ? __pfx____sys_sendmsg+0x10/0x10
[  434.661489][T25696]  ? __fget_files+0x2a/0x420
[  434.661504][T25696]  ? __fget_files+0x3a0/0x420
[  434.661529][T25696]  __x64_sys_sendmsg+0x1bd/0x2a0
[  434.661557][T25696]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  434.661589][T25696]  ? __pfx_ksys_write+0x10/0x10
[  434.661620][T25696]  do_syscall_64+0x14d/0xf80
[  434.661637][T25696]  ? trace_irq_disable+0x3b/0x150
[  434.661652][T25696]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.661671][T25696]  ? clear_bhb_loop+0x40/0x90
[  434.661691][T25696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.661709][T25696] RIP: 0033:0x7f517319c819
[  434.661726][T25696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.661741][T25696] RSP: 002b:00007f517409c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  434.661759][T25696] RAX: ffffffffffffffda RBX: 00007f5173415fa0 RCX: 00007f517319c819
[  434.661773][T25696] RDX: 0000000004000040 RSI: 0000200000000240 RDI: 0000000000000003
[  434.661784][T25696] RBP: 00007f517409c090 R08: 0000000000000000 R09: 0000000000000000
[  434.661794][T25696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  434.661805][T25696] R13: 00007f5173416038 R14: 00007f5173415fa0 R15: 00007fffe31b54d8
[  434.661833][T25696]  </TASK>
[  434.997162][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  435.015160][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  435.025898][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  435.064543][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  435.089106][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  435.210992][T25699] gre0 speed is unknown, defaulting to 1000
[  435.405292][T25718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9187'.
[  435.469777][T25718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9187'.
[  435.779641][T25699] lo speed is unknown, defaulting to 1000
[  436.461084][ T5822] Bluetooth: hci1: command tx timeout
[  436.490080][T25699] chnl_net:caif_netlink_parms(): no params data found
[  436.785495][T25699] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.792872][T25699] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.800078][T25699] bridge_slave_0: entered allmulticast mode
[  436.811054][T25699] bridge_slave_0: entered promiscuous mode
[  436.833399][T25699] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.844368][T25699] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.853592][T25699] bridge_slave_1: entered allmulticast mode
[  436.862181][T25699] bridge_slave_1: entered promiscuous mode
[  436.884989][T25791] netlink: 'syz.3.9218': attribute type 9 has an invalid length.
[  436.919465][T25699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.935995][T25699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  437.008605][T25699] team0: Port device team_slave_0 added
[  437.021148][ T5822] Bluetooth: hci5: command 0x0406 tx timeout
[  437.058909][T25699] team0: Port device team_slave_1 added
[  437.160328][T25699] batman_adv: batadv0: Adding interface: batadv_slave_0
[  437.168899][T25699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  437.196258][T25699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  437.201407][ T5826] Bluetooth: hci3: command tx timeout
[  437.215574][T25699] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.223103][T25699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  437.251032][T25699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.373850][T25699] hsr_slave_0: entered promiscuous mode
[  437.396387][T25699] hsr_slave_1: entered promiscuous mode
[  437.412773][T25699] debugfs: 'hsr0' already exists in 'hsr'
[  437.427284][T25699] Cannot create hsr debugfs directory
[  437.544699][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.685584][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.737812][T25814] netlink: 'syz.3.9227': attribute type 12 has an invalid length.
[  437.868069][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.026624][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.041976][T25831] FAULT_INJECTION: forcing a failure.
[  438.041976][T25831] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  438.060189][T25831] CPU: 1 UID: 0 PID: 25831 Comm: syz.3.9236 Not tainted syzkaller #0 PREEMPT(full) 
[  438.060232][T25831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  438.060253][T25831] Call Trace:
[  438.060268][T25831]  <TASK>
[  438.060282][T25831]  dump_stack_lvl+0xe8/0x150
[  438.060334][T25831]  should_fail_ex+0x412/0x560
[  438.060399][T25831]  _copy_from_user+0x2d/0xb0
[  438.060446][T25831]  ___sys_sendmsg+0x1c6/0x360
[  438.060510][T25831]  ? __pfx____sys_sendmsg+0x10/0x10
[  438.060562][T25831]  ? __fget_files+0x2a/0x420
[  438.060578][T25831]  ? __fget_files+0x3a0/0x420
[  438.060602][T25831]  __x64_sys_sendmsg+0x1bd/0x2a0
[  438.060628][T25831]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  438.060658][T25831]  ? __pfx_ksys_write+0x10/0x10
[  438.060686][T25831]  do_syscall_64+0x14d/0xf80
[  438.060701][T25831]  ? trace_irq_disable+0x3b/0x150
[  438.060717][T25831]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.060734][T25831]  ? clear_bhb_loop+0x40/0x90
[  438.060755][T25831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.060772][T25831] RIP: 0033:0x7f37d739c819
[  438.060788][T25831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  438.060802][T25831] RSP: 002b:00007f37d81fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  438.060820][T25831] RAX: ffffffffffffffda RBX: 00007f37d7615fa0 RCX: 00007f37d739c819
[  438.060832][T25831] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  438.060842][T25831] RBP: 00007f37d81fb090 R08: 0000000000000000 R09: 0000000000000000
[  438.060853][T25831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  438.060863][T25831] R13: 00007f37d7616038 R14: 00007f37d7615fa0 R15: 00007fff5c078dd8
[  438.060889][T25831]  </TASK>
[  438.440369][   T12] bridge_slave_1: left allmulticast mode
[  438.453845][   T12] bridge_slave_1: left promiscuous mode
[  438.490421][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.513536][   T12] bridge_slave_0: left allmulticast mode
[  438.519261][   T12] bridge_slave_0: left promiscuous mode
[  438.527013][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.576154][   T12] ip6gretap0 (unregistering): left promiscuous mode
[  438.696028][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  438.708476][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  438.718816][   T12] bond0 (unregistering): Released all slaves
[  439.272586][ T5826] Bluetooth: hci3: command tx timeout
[  439.533954][T25699] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  439.575521][T25699] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  439.639368][T25699] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  439.721736][T25699] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  439.911685][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  439.918020][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  440.080890][T25699] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.143178][T25699] 8021q: adding VLAN 0 to HW filter on device team0
[  440.192158][  T138] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.199304][  T138] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.242489][  T138] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.249641][  T138] bridge0: port 2(bridge_slave_1) entered forwarding state
[  440.283492][   T12] dummy0: left promiscuous mode
[  440.335467][   T12] hsr_slave_0: left promiscuous mode
[  440.342175][   T12] hsr_slave_1: left promiscuous mode
[  440.354540][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  440.363153][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  440.371329][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  440.392502][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  440.406733][   T12] veth1_macvtap: left promiscuous mode
[  440.412707][   T12] veth0_macvtap: left promiscuous mode
[  440.418476][   T12] veth1_vlan: left promiscuous mode
[  440.424111][   T12] veth0_vlan: left promiscuous mode
[  440.745105][   T12] team0 (unregistering): Port device team_slave_1 removed
[  440.765874][   T12] team0 (unregistering): Port device team_slave_0 removed
[  441.340837][ T5822] Bluetooth: hci3: command tx timeout
[  441.379353][T25699] 8021q: adding VLAN 0 to HW filter on device batadv0
[  441.477764][T25699] veth0_vlan: entered promiscuous mode
[  441.496972][T25699] veth1_vlan: entered promiscuous mode
[  441.548474][T25699] veth0_macvtap: entered promiscuous mode
[  441.573711][T25699] veth1_macvtap: entered promiscuous mode
[  441.592304][T25699] batman_adv: batadv0: Interface activated: batadv_slave_0
[  441.603511][T25699] batman_adv: batadv0: Interface activated: batadv_slave_1
[  441.615609][   T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.642974][   T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.669021][   T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.729162][   T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  441.832167][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.856601][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.904729][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.921491][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.981119][ T5822] Bluetooth: hci2: command 0x0406 tx timeout
[  442.356627][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  442.366694][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  442.374434][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  442.394854][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  442.403011][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  442.498451][T26005] FAULT_INJECTION: forcing a failure.
[  442.498451][T26005] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  442.541533][T26005] CPU: 1 UID: 0 PID: 26005 Comm: syz.2.9296 Not tainted syzkaller #0 PREEMPT(full) 
[  442.541557][T26005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  442.541568][T26005] Call Trace:
[  442.541575][T26005]  <TASK>
[  442.541583][T26005]  dump_stack_lvl+0xe8/0x150
[  442.541612][T26005]  should_fail_ex+0x412/0x560
[  442.541643][T26005]  _copy_from_user+0x2d/0xb0
[  442.541665][T26005]  ___sys_sendmsg+0x1c6/0x360
[  442.541695][T26005]  ? __pfx____sys_sendmsg+0x10/0x10
[  442.541750][T26005]  ? __fget_files+0x2a/0x420
[  442.541766][T26005]  ? __fget_files+0x3a0/0x420
[  442.541791][T26005]  __x64_sys_sendmsg+0x1bd/0x2a0
[  442.541817][T26005]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  442.541849][T26005]  ? __pfx_ksys_write+0x10/0x10
[  442.541878][T26005]  do_syscall_64+0x14d/0xf80
[  442.541895][T26005]  ? trace_irq_disable+0x3b/0x150
[  442.541911][T26005]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.541929][T26005]  ? clear_bhb_loop+0x40/0x90
[  442.541950][T26005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.541967][T26005] RIP: 0033:0x7f2331b9c819
[  442.541983][T26005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  442.541998][T26005] RSP: 002b:00007f2332980028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  442.542017][T26005] RAX: ffffffffffffffda RBX: 00007f2331e15fa0 RCX: 00007f2331b9c819
[  442.542030][T26005] RDX: 0000000000028040 RSI: 0000200000000180 RDI: 0000000000000003
[  442.542041][T26005] RBP: 00007f2332980090 R08: 0000000000000000 R09: 0000000000000000
[  442.542052][T26005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.542063][T26005] R13: 00007f2331e16038 R14: 00007f2331e15fa0 R15: 00007ffff2831ec8
[  442.542090][T26005]  </TASK>
[  442.563269][T26000] gre0 speed is unknown, defaulting to 1000
[  443.148070][  T138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.292259][  T138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.322759][T26000] lo speed is unknown, defaulting to 1000
[  443.406718][  T138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.422212][ T5822] Bluetooth: hci3: command tx timeout
[  443.518013][  T138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.789660][  T138] bridge_slave_1: left allmulticast mode
[  443.797213][  T138] bridge_slave_1: left promiscuous mode
[  443.811975][  T138] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.823203][  T138] bridge_slave_0: left allmulticast mode
[  443.828916][  T138] bridge_slave_0: left promiscuous mode
[  443.834804][  T138] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.908005][  T138] ip6gretap0 (unregistering): left promiscuous mode
[  444.121218][  T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.136398][  T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.144805][T26073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9320'.
[  444.157113][  T138] bond0 (unregistering): Released all slaves
[  444.344400][  T138] tipc: Left network mode
[  444.484974][ T5822] Bluetooth: hci5: command tx timeout
[  445.025543][T26000] chnl_net:caif_netlink_parms(): no params data found
[  445.191831][T26104] FAULT_INJECTION: forcing a failure.
[  445.191831][T26104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  445.220914][T26104] CPU: 0 UID: 0 PID: 26104 Comm: syz.2.9329 Not tainted syzkaller #0 PREEMPT(full) 
[  445.220939][T26104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  445.220950][T26104] Call Trace:
[  445.220958][T26104]  <TASK>
[  445.220965][T26104]  dump_stack_lvl+0xe8/0x150
[  445.220994][T26104]  should_fail_ex+0x412/0x560
[  445.221025][T26104]  _copy_from_user+0x2d/0xb0
[  445.221047][T26104]  __sys_bpf+0x229/0x950
[  445.221067][T26104]  ? __pfx___sys_bpf+0x10/0x10
[  445.221098][T26104]  ? ksys_write+0x242/0x270
[  445.221120][T26104]  ? __pfx_ksys_write+0x10/0x10
[  445.221147][T26104]  __x64_sys_bpf+0x7c/0x90
[  445.221171][T26104]  do_syscall_64+0x14d/0xf80
[  445.221188][T26104]  ? trace_irq_disable+0x3b/0x150
[  445.221203][T26104]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.221220][T26104]  ? clear_bhb_loop+0x40/0x90
[  445.221240][T26104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.221257][T26104] RIP: 0033:0x7f2331b9c819
[  445.221274][T26104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  445.221289][T26104] RSP: 002b:00007f2332980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  445.221308][T26104] RAX: ffffffffffffffda RBX: 00007f2331e15fa0 RCX: 00007f2331b9c819
[  445.221321][T26104] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[  445.221332][T26104] RBP: 00007f2332980090 R08: 0000000000000000 R09: 0000000000000000
[  445.221343][T26104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  445.221353][T26104] R13: 00007f2331e16038 R14: 00007f2331e15fa0 R15: 00007ffff2831ec8
[  445.221382][T26104]  </TASK>
[  445.849057][T26000] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.879100][T26000] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.886400][T26000] bridge_slave_0: entered allmulticast mode
[  445.923791][T26000] bridge_slave_0: entered promiscuous mode
[  445.962361][T26000] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.984600][T26000] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.015417][T26000] bridge_slave_1: entered allmulticast mode
[  446.024650][T26000] bridge_slave_1: entered promiscuous mode
[  446.048580][  T138] dummy0: left promiscuous mode
[  446.074590][  T138] hsr_slave_0: left promiscuous mode
[  446.081054][  T138] hsr_slave_1: left promiscuous mode
[  446.086933][  T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  446.094586][  T138] batman_adv: batadv0: Removing interface: batadv_slave_0
[  446.102867][  T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  446.110250][  T138] batman_adv: batadv0: Removing interface: batadv_slave_1
[  446.121382][  T138] veth1_macvtap: left promiscuous mode
[  446.126858][  T138] veth0_macvtap: left promiscuous mode
[  446.132584][  T138] veth1_vlan: left promiscuous mode
[  446.137851][  T138] veth0_vlan: left promiscuous mode
[  446.309476][  T138] team0 (unregistering): Port device team_slave_1 removed
[  446.327278][  T138] team0 (unregistering): Port device team_slave_0 removed
[  446.451250][T26000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.488683][T26000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.541261][ T5822] Bluetooth: hci5: command tx timeout
[  446.671525][T26140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9338'.
[  446.701088][T26138] FAULT_INJECTION: forcing a failure.
[  446.701088][T26138] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  446.721946][T26000] team0: Port device team_slave_0 added
[  446.743427][T26000] team0: Port device team_slave_1 added
[  446.750838][T26138] CPU: 0 UID: 0 PID: 26138 Comm: syz.4.9340 Not tainted syzkaller #0 PREEMPT(full) 
[  446.750861][T26138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  446.750873][T26138] Call Trace:
[  446.750881][T26138]  <TASK>
[  446.750888][T26138]  dump_stack_lvl+0xe8/0x150
[  446.750917][T26138]  should_fail_ex+0x412/0x560
[  446.750946][T26138]  _copy_from_user+0x2d/0xb0
[  446.750968][T26138]  ___sys_sendmsg+0x1c6/0x360
[  446.750998][T26138]  ? __pfx____sys_sendmsg+0x10/0x10
[  446.751053][T26138]  ? __fget_files+0x2a/0x420
[  446.751077][T26138]  ? __fget_files+0x3a0/0x420
[  446.751103][T26138]  __x64_sys_sendmsg+0x1bd/0x2a0
[  446.751129][T26138]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  446.751162][T26138]  ? __pfx_ksys_write+0x10/0x10
[  446.751192][T26138]  do_syscall_64+0x14d/0xf80
[  446.751208][T26138]  ? trace_irq_disable+0x3b/0x150
[  446.751224][T26138]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.751242][T26138]  ? clear_bhb_loop+0x40/0x90
[  446.751263][T26138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.751281][T26138] RIP: 0033:0x7f517319c819
[  446.751297][T26138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  446.751311][T26138] RSP: 002b:00007f517409c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  446.751330][T26138] RAX: ffffffffffffffda RBX: 00007f5173415fa0 RCX: 00007f517319c819
[  446.751342][T26138] RDX: 0000000004048044 RSI: 0000200000000a00 RDI: 0000000000000004
[  446.751352][T26138] RBP: 00007f517409c090 R08: 0000000000000000 R09: 0000000000000000
[  446.751363][T26138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.751373][T26138] R13: 00007f5173416038 R14: 00007f5173415fa0 R15: 00007fffe31b54d8
[  446.751399][T26138]  </TASK>
[  446.966203][T26000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  446.973216][T26000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  446.999148][T26000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.011610][T26000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.018560][T26000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.044912][T26000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  447.097936][T26000] hsr_slave_0: entered promiscuous mode
[  447.105228][T26000] hsr_slave_1: entered promiscuous mode
[  447.111547][T26000] debugfs: 'hsr0' already exists in 'hsr'
[  447.117287][T26000] Cannot create hsr debugfs directory
[  448.483339][T26000] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  448.505094][T26000] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  448.536963][T26000] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  448.584019][T26000] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  448.621596][ T5822] Bluetooth: hci5: command tx timeout
[  448.865432][T26000] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.935645][T26000] 8021q: adding VLAN 0 to HW filter on device team0
[  448.985631][T26209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9353'.
[  449.073790][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.080990][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[  449.299008][T26000] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  449.527287][T26000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  449.575747][  T138] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.582974][  T138] bridge0: port 2(bridge_slave_1) entered forwarding state
[  450.105188][T26000] 8021q: adding VLAN 0 to HW filter on device batadv0
[  450.226894][T26000] veth0_vlan: entered promiscuous mode
[  450.270532][T26000] veth1_vlan: entered promiscuous mode
[  450.380239][T26000] veth0_macvtap: entered promiscuous mode
[  450.426860][T26000] veth1_macvtap: entered promiscuous mode
[  450.505979][T26000] batman_adv: batadv0: Interface activated: batadv_slave_0
[  450.548065][T26000] batman_adv: batadv0: Interface activated: batadv_slave_1
[  450.599424][   T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.633880][   T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.669025][   T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.688637][   T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.701817][ T5826] Bluetooth: hci5: command tx timeout
[  450.955407][T26280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9374'.
[  451.281192][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.367372][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.545128][  T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.567858][  T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.093512][T26330] xt_hashlimit: size too large, truncated to 1048576
[  452.231007][ T5826] Bluetooth: hci0: command 0x0406 tx timeout
[  452.384024][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  452.393901][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  452.401787][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  452.409692][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  452.417736][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  452.458428][T26339] gre0 speed is unknown, defaulting to 1000
[  452.891617][T26339] lo speed is unknown, defaulting to 1000
[  453.187395][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.296248][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.389140][T26378] xt_hashlimit: size too large, truncated to 1048576
[  453.424320][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.537863][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.698441][T26339] chnl_net:caif_netlink_parms(): no params data found
[  453.887565][T26339] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.905014][T26339] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.927278][T26339] bridge_slave_0: entered allmulticast mode
[  453.935853][T26339] bridge_slave_0: entered promiscuous mode
[  453.974543][T26339] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.997472][T26339] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.031065][T26339] bridge_slave_1: entered allmulticast mode
[  454.055637][T26339] bridge_slave_1: entered promiscuous mode
[  454.187223][T26339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.219323][T26339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.337061][   T35] bridge_slave_1: left allmulticast mode
[  454.361615][   T35] bridge_slave_1: left promiscuous mode
[  454.367398][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.402754][   T35] bridge_slave_0: left allmulticast mode
[  454.415915][   T35] bridge_slave_0: left promiscuous mode
[  454.428296][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.460866][ T5826] Bluetooth: hci2: command tx timeout
[  454.570137][   T35] ip6gretap0 (unregistering): left promiscuous mode
[  454.816196][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  454.838315][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  454.868224][   T35] bond0 (unregistering): Released all slaves
[  454.889559][T26339] team0: Port device team_slave_0 added
[  454.908616][T26339] team0: Port device team_slave_1 added
[  454.977315][T26339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.985212][T26339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.053069][T26339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.080046][   T35] tipc: Left network mode
[  455.096662][T26339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.120128][T26339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.147221][T26339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.506521][T26339] hsr_slave_0: entered promiscuous mode
[  455.519174][T26339] hsr_slave_1: entered promiscuous mode
[  455.534048][T26339] debugfs: 'hsr0' already exists in 'hsr'
[  455.549976][T26339] Cannot create hsr debugfs directory
[  456.545867][ T5826] Bluetooth: hci2: command tx timeout
[  456.659504][   T35] dummy0: left promiscuous mode
[  456.681624][   T35] hsr_slave_0: left promiscuous mode
[  456.689915][   T35] hsr_slave_1: left promiscuous mode
[  456.697600][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  456.708588][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  456.719215][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  456.726873][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  456.741262][   T35] veth1_macvtap: left promiscuous mode
[  456.746838][   T35] veth0_macvtap: left promiscuous mode
[  456.752964][   T35] veth1_vlan: left promiscuous mode
[  456.758288][   T35] veth0_vlan: left promiscuous mode
[  456.934707][   T35] team0 (unregistering): Port device team_slave_1 removed
[  456.948797][   T35] team0 (unregistering): Port device team_slave_0 removed
[  457.050396][  T333] smc: removing ib device syz2
[  457.114870][   T47] lo speed is unknown, defaulting to 1000
[  457.150591][   T47] syz2: Port: 1 Link DOWN
[  457.768935][T26339] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  457.827439][T26339] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  457.897761][T26339] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  457.967249][T26339] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  458.316573][T26339] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.402334][T26339] 8021q: adding VLAN 0 to HW filter on device team0
[  458.447042][  T138] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.454243][  T138] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.542959][T26224] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.550113][T26224] bridge0: port 2(bridge_slave_1) entered forwarding state
[  458.621432][ T5826] Bluetooth: hci2: command tx timeout
[  458.767105][T26339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  458.812004][T26339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  459.025068][T26590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9467'.
[  460.234650][T26339] 8021q: adding VLAN 0 to HW filter on device batadv0
[  460.405228][T26339] veth0_vlan: entered promiscuous mode
[  460.475580][T26339] veth1_vlan: entered promiscuous mode
[  460.613284][T26339] veth0_macvtap: entered promiscuous mode
[  460.636781][T26339] veth1_macvtap: entered promiscuous mode
[  460.687596][T26339] batman_adv: batadv0: Interface activated: batadv_slave_0
[  460.700850][ T5826] Bluetooth: hci2: command tx timeout
[  460.728243][T26339] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.744829][ T1314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.757199][T26636] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.9487'.
[  460.801007][ T1314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.842443][ T1314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.855518][ T1314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  461.131816][  T333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.158742][  T333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.266159][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.276974][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.538613][T26676] netlink: 'syz.0.9499': attribute type 72 has an invalid length.
[  463.830103][T26802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9549'.
[  464.387065][T26818] FAULT_INJECTION: forcing a failure.
[  464.387065][T26818] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  464.440703][T26818] CPU: 0 UID: 0 PID: 26818 Comm: syz.0.9556 Not tainted syzkaller #0 PREEMPT(full) 
[  464.440731][T26818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  464.440742][T26818] Call Trace:
[  464.440750][T26818]  <TASK>
[  464.440757][T26818]  dump_stack_lvl+0xe8/0x150
[  464.440786][T26818]  should_fail_ex+0x412/0x560
[  464.440817][T26818]  _copy_from_user+0x2d/0xb0
[  464.440838][T26818]  ___sys_sendmsg+0x1c6/0x360
[  464.440869][T26818]  ? __pfx____sys_sendmsg+0x10/0x10
[  464.440924][T26818]  ? __fget_files+0x2a/0x420
[  464.440940][T26818]  ? __fget_files+0x3a0/0x420
[  464.440966][T26818]  __x64_sys_sendmsg+0x1bd/0x2a0
[  464.440994][T26818]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  464.441027][T26818]  ? __pfx_ksys_write+0x10/0x10
[  464.441057][T26818]  do_syscall_64+0x14d/0xf80
[  464.441073][T26818]  ? trace_irq_disable+0x3b/0x150
[  464.441092][T26818]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.441110][T26818]  ? clear_bhb_loop+0x40/0x90
[  464.441131][T26818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.441148][T26818] RIP: 0033:0x7f928f79c819
[  464.441164][T26818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.441184][T26818] RSP: 002b:00007f9290735028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  464.441204][T26818] RAX: ffffffffffffffda RBX: 00007f928fa15fa0 RCX: 00007f928f79c819
[  464.441217][T26818] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000003
[  464.441228][T26818] RBP: 00007f9290735090 R08: 0000000000000000 R09: 0000000000000000
[  464.441239][T26818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.441249][T26818] R13: 00007f928fa16038 R14: 00007f928fa15fa0 R15: 00007fff408d5638
[  464.441277][T26818]  </TASK>
[  464.806900][T26825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9558'.
[  464.987389][T26832] syzkaller0: entered promiscuous mode
[  465.005281][T26832] syzkaller0: entered allmulticast mode
[  465.383536][T26853] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.9570'.
[  466.656534][T26929] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.9604'.
[  467.251281][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  467.260342][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  467.270299][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  467.279104][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  467.289463][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  467.412396][T26964] gre0 speed is unknown, defaulting to 1000
[  467.623729][T26973] syzkaller0: entered promiscuous mode
[  467.629295][T26973] syzkaller0: entered allmulticast mode
[  467.864947][T26986] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.9629'.
[  468.312512][T27013] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.9642'.
[  468.385241][T26964] chnl_net:caif_netlink_parms(): no params data found
[  468.585835][T26964] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.593143][T26964] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.600362][T26964] bridge_slave_0: entered allmulticast mode
[  468.608313][T26964] bridge_slave_0: entered promiscuous mode
[  468.617956][T26964] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.625483][T26964] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.633382][T26964] bridge_slave_1: entered allmulticast mode
[  468.640833][T26964] bridge_slave_1: entered promiscuous mode
[  468.682775][T26964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  468.695140][T26964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  468.832605][T26964] team0: Port device team_slave_0 added
[  468.846244][T26964] team0: Port device team_slave_1 added
[  468.901346][T26964] batman_adv: batadv0: Adding interface: batadv_slave_0
[  468.925334][T26964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.980481][T26964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  469.007752][T26964] batman_adv: batadv0: Adding interface: batadv_slave_1
[  469.015615][T26964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  469.042217][T26964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  469.159356][T26964] hsr_slave_0: entered promiscuous mode
[  469.176288][T26964] hsr_slave_1: entered promiscuous mode
[  469.192519][T26964] debugfs: 'hsr0' already exists in 'hsr'
[  469.213660][T26964] Cannot create hsr debugfs directory
[  469.348045][ T5822] Bluetooth: hci0: command tx timeout
[  469.576342][T27072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9663'.
[  469.722617][T26964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.897698][T26964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.988684][T27084] netlink: 340 bytes leftover after parsing attributes in process `syz.1.9671'.
[  470.013271][T27084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9671'.
[  470.036412][T26964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.105642][T27086] netlink: 340 bytes leftover after parsing attributes in process `syz.0.9672'.
[  470.135878][T27086] FAULT_INJECTION: forcing a failure.
[  470.135878][T27086] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  470.187368][T27086] CPU: 0 UID: 0 PID: 27086 Comm: syz.0.9672 Not tainted syzkaller #0 PREEMPT(full) 
[  470.187393][T27086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  470.187404][T27086] Call Trace:
[  470.187411][T27086]  <TASK>
[  470.187418][T27086]  dump_stack_lvl+0xe8/0x150
[  470.187447][T27086]  should_fail_ex+0x412/0x560
[  470.187478][T27086]  _copy_from_user+0x2d/0xb0
[  470.187501][T27086]  ___sys_sendmsg+0x1c6/0x360
[  470.187532][T27086]  ? __pfx____sys_sendmsg+0x10/0x10
[  470.187588][T27086]  ? __fget_files+0x2a/0x420
[  470.187605][T27086]  ? __fget_files+0x3a0/0x420
[  470.187630][T27086]  __x64_sys_sendmsg+0x1bd/0x2a0
[  470.187658][T27086]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  470.187691][T27086]  ? __pfx_ksys_write+0x10/0x10
[  470.187722][T27086]  do_syscall_64+0x14d/0xf80
[  470.187740][T27086]  ? trace_irq_disable+0x3b/0x150
[  470.187756][T27086]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.187774][T27086]  ? clear_bhb_loop+0x40/0x90
[  470.187795][T27086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.187812][T27086] RIP: 0033:0x7f928f79c819
[  470.187829][T27086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  470.187844][T27086] RSP: 002b:00007f9290735028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  470.187870][T27086] RAX: ffffffffffffffda RBX: 00007f928fa15fa0 RCX: 00007f928f79c819
[  470.187883][T27086] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[  470.187894][T27086] RBP: 00007f9290735090 R08: 0000000000000000 R09: 0000000000000000
[  470.187905][T27086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.187915][T27086] R13: 00007f928fa16038 R14: 00007f928fa15fa0 R15: 00007fff408d5638
[  470.187943][T27086]  </TASK>
[  470.443610][T26964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.825685][T26964] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  470.854370][T26964] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  470.885028][T26964] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  470.900815][T26964] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  471.108761][T26964] 8021q: adding VLAN 0 to HW filter on device bond0
[  471.125754][T27126] FAULT_INJECTION: forcing a failure.
[  471.125754][T27126] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  471.151221][T27126] CPU: 0 UID: 0 PID: 27126 Comm: syz.0.9688 Not tainted syzkaller #0 PREEMPT(full) 
[  471.151247][T27126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  471.151257][T27126] Call Trace:
[  471.151265][T27126]  <TASK>
[  471.151272][T27126]  dump_stack_lvl+0xe8/0x150
[  471.151301][T27126]  should_fail_ex+0x412/0x560
[  471.151331][T27126]  _copy_from_iter+0x1d3/0x1670
[  471.151356][T27126]  ? txopt_get+0x79/0x3f0
[  471.151378][T27126]  ? txopt_get+0x79/0x3f0
[  471.151397][T27126]  ? txopt_get+0x79/0x3f0
[  471.151418][T27126]  ? __pfx__copy_from_iter+0x10/0x10
[  471.151434][T27126]  ? txopt_get+0x343/0x3f0
[  471.151456][T27126]  ? txopt_get+0x79/0x3f0
[  471.151476][T27126]  ? __pfx_txopt_get+0x10/0x10
[  471.151498][T27126]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  471.151529][T27126]  rawv6_sendmsg+0xbbd/0x18e0
[  471.151561][T27126]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  471.151595][T27126]  ? aa_sk_perm+0x6d5/0x900
[  471.151626][T27126]  ? __pfx_aa_sk_perm+0x10/0x10
[  471.151652][T27126]  ? __pfx_aa_file_perm+0x10/0x10
[  471.151668][T27126]  ? sock_rps_record_flow+0x19/0x350
[  471.151695][T27126]  ? inet_sendmsg+0x2f4/0x370
[  471.151716][T27126]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  471.151738][T27126]  ? __pfx_inet_sendmsg+0x10/0x10
[  471.151759][T27126]  sock_write_iter+0x406/0x4f0
[  471.151789][T27126]  ? __pfx_sock_write_iter+0x10/0x10
[  471.151816][T27126]  ? bpf_lsm_file_permission+0x9/0x20
[  471.151837][T27126]  ? security_file_permission+0x75/0x260
[  471.151867][T27126]  vfs_write+0x61d/0xb90
[  471.151894][T27126]  ? __pfx_vfs_write+0x10/0x10
[  471.151923][T27126]  ? __fget_files+0x2a/0x420
[  471.151946][T27126]  ksys_write+0x150/0x270
[  471.151967][T27126]  ? __pfx_ksys_write+0x10/0x10
[  471.151996][T27126]  do_syscall_64+0x14d/0xf80
[  471.152012][T27126]  ? trace_irq_disable+0x3b/0x150
[  471.152027][T27126]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.152045][T27126]  ? clear_bhb_loop+0x40/0x90
[  471.152065][T27126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.152083][T27126] RIP: 0033:0x7f928f79c819
[  471.152098][T27126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.152112][T27126] RSP: 002b:00007f9290735028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  471.152131][T27126] RAX: ffffffffffffffda RBX: 00007f928fa15fa0 RCX: 00007f928f79c819
[  471.152144][T27126] RDX: 000000000000000a RSI: 00002000000005c0 RDI: 0000000000000003
[  471.152155][T27126] RBP: 00007f9290735090 R08: 0000000000000000 R09: 0000000000000000
[  471.152166][T27126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  471.152176][T27126] R13: 00007f928fa16038 R14: 00007f928fa15fa0 R15: 00007fff408d5638
[  471.152204][T27126]  </TASK>
[  471.442557][T26964] 8021q: adding VLAN 0 to HW filter on device team0
[  471.454760][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.461907][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state
[  471.469595][ T5826] Bluetooth: hci0: command tx timeout
[  471.538940][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.546144][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state
[  471.600213][T26964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  471.610870][T26964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  471.970222][T27160] netlink: 340 bytes leftover after parsing attributes in process `syz.2.9703'.
[  472.070274][T26964] 8021q: adding VLAN 0 to HW filter on device batadv0
[  472.176346][T26964] veth0_vlan: entered promiscuous mode
[  472.205569][T26964] veth1_vlan: entered promiscuous mode
[  472.279649][T26964] veth0_macvtap: entered promiscuous mode
[  472.293798][T26964] veth1_macvtap: entered promiscuous mode
[  472.340239][T26964] batman_adv: batadv0: Interface activated: batadv_slave_0
[  472.377213][T26964] batman_adv: batadv0: Interface activated: batadv_slave_1
[  472.406975][ T1314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.433136][ T1314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.451671][ T1314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.477291][ T1314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  472.619359][  T333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.632240][  T333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.691822][  T333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.720618][  T333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  473.393380][T27217] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.9729'.
[  473.439217][T27221] FAULT_INJECTION: forcing a failure.
[  473.439217][T27221] name failslab, interval 1, probability 0, space 0, times 0
[  473.483357][T27221] CPU: 0 UID: 0 PID: 27221 Comm: syz.3.9731 Not tainted syzkaller #0 PREEMPT(full) 
[  473.483402][T27221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  473.483414][T27221] Call Trace:
[  473.483421][T27221]  <TASK>
[  473.483429][T27221]  dump_stack_lvl+0xe8/0x150
[  473.483459][T27221]  should_fail_ex+0x412/0x560
[  473.483490][T27221]  should_failslab+0xa8/0x100
[  473.483514][T27221]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  473.483536][T27221]  ? __alloc_skb+0x1d0/0x7d0
[  473.483562][T27221]  __alloc_skb+0x1d0/0x7d0
[  473.483588][T27221]  tcp_stream_alloc_skb+0x3f/0x580
[  473.483611][T27221]  tcp_sendmsg_locked+0x1375/0x5480
[  473.483641][T27221]  ? __lock_acquire+0x6b5/0x2cf0
[  473.483698][T27221]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  473.483723][T27221]  ? tcp_sendmsg+0x21/0x50
[  473.483742][T27221]  ? __local_bh_enable_ip+0xd0/0x130
[  473.483766][T27221]  ? __pfx_inet_sendmsg+0x10/0x10
[  473.483790][T27221]  tcp_sendmsg+0x2f/0x50
[  473.483816][T27221]  __sys_sendto+0x5de/0x710
[  473.483842][T27221]  ? __pfx___sys_sendto+0x10/0x10
[  473.483862][T27221]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  473.483893][T27221]  ? __fget_files+0x3a0/0x420
[  473.483918][T27221]  ? ksys_write+0x242/0x270
[  473.483938][T27221]  ? __pfx_ksys_write+0x10/0x10
[  473.483962][T27221]  __x64_sys_sendto+0xde/0x100
[  473.483986][T27221]  do_syscall_64+0x14d/0xf80
[  473.484001][T27221]  ? trace_irq_disable+0x3b/0x150
[  473.484015][T27221]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.484033][T27221]  ? clear_bhb_loop+0x40/0x90
[  473.484053][T27221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.484070][T27221] RIP: 0033:0x7fb8dad9c819
[  473.484087][T27221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  473.484101][T27221] RSP: 002b:00007fb8d8fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  473.484119][T27221] RAX: ffffffffffffffda RBX: 00007fb8db015fa0 RCX: 00007fb8dad9c819
[  473.484132][T27221] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000003
[  473.484143][T27221] RBP: 00007fb8d8fee090 R08: 0000000000000000 R09: 0000000000000000
[  473.484154][T27221] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001
[  473.484164][T27221] R13: 00007fb8db016038 R14: 00007fb8db015fa0 R15: 00007ffed56b19d8
[  473.484191][T27221]  </TASK>
[  473.779085][ T5826] Bluetooth: hci0: command tx timeout
[  474.179457][T27246] netlink: 340 bytes leftover after parsing attributes in process `syz.0.9743'.
[  474.256249][T27250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9737'.
[  475.292146][T27277] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.9754'.
[  475.588457][T27297] netlink: 340 bytes leftover after parsing attributes in process `syz.4.9763'.
[  475.820995][ T5826] Bluetooth: hci0: command tx timeout
[  475.945756][T27302] veth3: entered promiscuous mode
[  476.154370][T27325] netlink: 340 bytes leftover after parsing attributes in process `syz.0.9775'.
[  476.280257][T27331] FAULT_INJECTION: forcing a failure.
[  476.280257][T27331] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  476.360385][T27331] CPU: 1 UID: 0 PID: 27331 Comm: syz.4.9776 Not tainted syzkaller #0 PREEMPT(full) 
[  476.360410][T27331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  476.360421][T27331] Call Trace:
[  476.360428][T27331]  <TASK>
[  476.360435][T27331]  dump_stack_lvl+0xe8/0x150
[  476.360464][T27331]  should_fail_ex+0x412/0x560
[  476.360495][T27331]  _copy_from_user+0x2d/0xb0
[  476.360520][T27331]  ___sys_sendmsg+0x1c6/0x360
[  476.360549][T27331]  ? __pfx____sys_sendmsg+0x10/0x10
[  476.360599][T27331]  ? __fget_files+0x2a/0x420
[  476.360615][T27331]  ? __fget_files+0x3a0/0x420
[  476.360638][T27331]  __x64_sys_sendmsg+0x1bd/0x2a0
[  476.360664][T27331]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  476.360697][T27331]  ? __pfx_ksys_write+0x10/0x10
[  476.360728][T27331]  do_syscall_64+0x14d/0xf80
[  476.360745][T27331]  ? trace_irq_disable+0x3b/0x150
[  476.360761][T27331]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.360778][T27331]  ? clear_bhb_loop+0x40/0x90
[  476.360800][T27331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.360817][T27331] RIP: 0033:0x7f517319c819
[  476.360833][T27331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  476.360849][T27331] RSP: 002b:00007f517409c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  476.360868][T27331] RAX: ffffffffffffffda RBX: 00007f5173415fa0 RCX: 00007f517319c819
[  476.360880][T27331] RDX: 0000000004008080 RSI: 0000200000000400 RDI: 0000000000000003
[  476.360891][T27331] RBP: 00007f517409c090 R08: 0000000000000000 R09: 0000000000000000
[  476.360902][T27331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  476.360913][T27331] R13: 00007f5173416038 R14: 00007f5173415fa0 R15: 00007fffe31b54d8
[  476.360941][T27331]  </TASK>
[  476.898366][T27360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9792'.
[  477.868986][T27428] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.9821'.
[  478.069054][T27439] FAULT_INJECTION: forcing a failure.
[  478.069054][T27439] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  478.122984][T27439] CPU: 0 UID: 0 PID: 27439 Comm: syz.2.9829 Not tainted syzkaller #0 PREEMPT(full) 
[  478.123009][T27439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  478.123021][T27439] Call Trace:
[  478.123028][T27439]  <TASK>
[  478.123035][T27439]  dump_stack_lvl+0xe8/0x150
[  478.123064][T27439]  should_fail_ex+0x412/0x560
[  478.123094][T27439]  _copy_from_user+0x2d/0xb0
[  478.123117][T27439]  get_timespec64+0x96/0x1b0
[  478.123139][T27439]  ? __pfx_get_timespec64+0x10/0x10
[  478.123170][T27439]  __x64_sys_recvmmsg+0x14b/0x250
[  478.123191][T27439]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  478.123219][T27439]  do_syscall_64+0x14d/0xf80
[  478.123236][T27439]  ? trace_irq_disable+0x3b/0x150
[  478.123252][T27439]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.123270][T27439]  ? clear_bhb_loop+0x40/0x90
[  478.123291][T27439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.123308][T27439] RIP: 0033:0x7fb0af99c819
[  478.123325][T27439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  478.123340][T27439] RSP: 002b:00007fb0b08f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  478.123359][T27439] RAX: ffffffffffffffda RBX: 00007fb0afc15fa0 RCX: 00007fb0af99c819
[  478.123379][T27439] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  478.123391][T27439] RBP: 00007fb0b08f3090 R08: 0000200000003700 R09: 0000000000000000
[  478.123403][T27439] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001
[  478.123413][T27439] R13: 00007fb0afc16038 R14: 00007fb0afc15fa0 R15: 00007ffd4e2b1958
[  478.123442][T27439]  </TASK>
[  479.356816][T27511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9851'.
[  479.796895][T27529] FAULT_INJECTION: forcing a failure.
[  479.796895][T27529] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  479.864579][T27529] CPU: 1 UID: 0 PID: 27529 Comm: syz.3.9861 Not tainted syzkaller #0 PREEMPT(full) 
[  479.864606][T27529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  479.864616][T27529] Call Trace:
[  479.864623][T27529]  <TASK>
[  479.864631][T27529]  dump_stack_lvl+0xe8/0x150
[  479.864661][T27529]  should_fail_ex+0x412/0x560
[  479.864693][T27529]  _copy_from_user+0x2d/0xb0
[  479.864715][T27529]  ___sys_sendmsg+0x1c6/0x360
[  479.864745][T27529]  ? __pfx____sys_sendmsg+0x10/0x10
[  479.864801][T27529]  ? __fget_files+0x2a/0x420
[  479.864818][T27529]  ? __fget_files+0x3a0/0x420
[  479.864843][T27529]  __x64_sys_sendmsg+0x1bd/0x2a0
[  479.864871][T27529]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  479.864905][T27529]  ? __pfx_ksys_write+0x10/0x10
[  479.864935][T27529]  do_syscall_64+0x14d/0xf80
[  479.864952][T27529]  ? trace_irq_disable+0x3b/0x150
[  479.864968][T27529]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.864985][T27529]  ? clear_bhb_loop+0x40/0x90
[  479.865006][T27529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.865024][T27529] RIP: 0033:0x7fb8dad9c819
[  479.865041][T27529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  479.865056][T27529] RSP: 002b:00007fb8d8fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  479.865076][T27529] RAX: ffffffffffffffda RBX: 00007fb8db015fa0 RCX: 00007fb8dad9c819
[  479.865089][T27529] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  479.865100][T27529] RBP: 00007fb8d8fee090 R08: 0000000000000000 R09: 0000000000000000
[  479.865111][T27529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  479.865121][T27529] R13: 00007fb8db016038 R14: 00007fb8db015fa0 R15: 00007ffed56b19d8
[  479.865150][T27529]  </TASK>
[  480.732420][T27561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9877'.
[  480.922809][T27575] xt_hashlimit: size too large, truncated to 1048576
[  480.980364][T27580] FAULT_INJECTION: forcing a failure.
[  480.980364][T27580] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  481.004661][T27581] netlink: 'syz.2.9886': attribute type 2 has an invalid length.
[  481.034397][T27580] CPU: 1 UID: 0 PID: 27580 Comm: syz.1.9885 Not tainted syzkaller #0 PREEMPT(full) 
[  481.034422][T27580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  481.034439][T27580] Call Trace:
[  481.034446][T27580]  <TASK>
[  481.034454][T27580]  dump_stack_lvl+0xe8/0x150
[  481.034484][T27580]  should_fail_ex+0x412/0x560
[  481.034515][T27580]  _copy_from_iter+0x1d3/0x1670
[  481.034545][T27580]  ? __pfx__copy_from_iter+0x10/0x10
[  481.034565][T27580]  ? __lock_acquire+0x6b5/0x2cf0
[  481.034593][T27580]  ? page_copy_sane+0x4e/0x270
[  481.034613][T27580]  copy_page_from_iter+0xdd/0x170
[  481.034636][T27580]  tun_get_user+0x1db3/0x3ed0
[  481.034655][T27580]  ? tun_get_user+0x6ff/0x3ed0
[  481.034686][T27580]  ? aa_file_perm+0x50e/0x15e0
[  481.034705][T27580]  ? __pfx_tun_get_user+0x10/0x10
[  481.034724][T27580]  ? aa_file_perm+0x192/0x15e0
[  481.034759][T27580]  ? ref_tracker_alloc+0x35c/0x4c0
[  481.034781][T27580]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  481.034805][T27580]  ? tun_get+0x1c/0x2f0
[  481.034837][T27580]  ? tun_get+0x1c/0x2f0
[  481.034856][T27580]  ? tun_get+0x1c/0x2f0
[  481.034879][T27580]  tun_chr_write_iter+0x113/0x200
[  481.034902][T27580]  vfs_write+0x61d/0xb90
[  481.034927][T27580]  ? __pfx_vfs_write+0x10/0x10
[  481.034956][T27580]  ? __fget_files+0x2a/0x420
[  481.034981][T27580]  ksys_write+0x150/0x270
[  481.035004][T27580]  ? __pfx_ksys_write+0x10/0x10
[  481.035034][T27580]  do_syscall_64+0x14d/0xf80
[  481.035051][T27580]  ? trace_irq_disable+0x3b/0x150
[  481.035066][T27580]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.035085][T27580]  ? clear_bhb_loop+0x40/0x90
[  481.035107][T27580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.035125][T27580] RIP: 0033:0x7f19b1f5d04e
[  481.035141][T27580] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  481.035157][T27580] RSP: 002b:00007f19b2dccfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  481.035176][T27580] RAX: ffffffffffffffda RBX: 00007f19b2dcd6c0 RCX: 00007f19b1f5d04e
[  481.035189][T27580] RDX: 000000000000004a RSI: 00002000000004c0 RDI: 00000000000000c8
[  481.035200][T27580] RBP: 00007f19b2dcd090 R08: 0000000000000000 R09: 0000000000000000
[  481.035211][T27580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  481.035222][T27580] R13: 00007f19b2216128 R14: 00007f19b2216090 R15: 00007fff82729748
[  481.035250][T27580]  </TASK>
[  481.036106][T27581] netlink: 'syz.2.9886': attribute type 9 has an invalid length.
[  481.362028][T27581] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9886'.
[  481.553540][T27601] xt_hashlimit: size too large, truncated to 1048576
[  481.892324][T27626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9896'.
[  483.054838][T27669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9920'.
[  483.605319][T27702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9931'.
[  484.118571][T27711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9936'.
[  485.070327][T27740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9949'.
[  485.209953][T27746] FAULT_INJECTION: forcing a failure.
[  485.209953][T27746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  485.223531][T27746] CPU: 1 UID: 0 PID: 27746 Comm: syz.4.9952 Not tainted syzkaller #0 PREEMPT(full) 
[  485.223556][T27746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  485.223567][T27746] Call Trace:
[  485.223574][T27746]  <TASK>
[  485.223582][T27746]  dump_stack_lvl+0xe8/0x150
[  485.223612][T27746]  should_fail_ex+0x412/0x560
[  485.223643][T27746]  _copy_from_user+0x2d/0xb0
[  485.223665][T27746]  ___sys_sendmsg+0x1c6/0x360
[  485.223694][T27746]  ? __pfx____sys_sendmsg+0x10/0x10
[  485.223723][T27746]  ? kstrtouint+0x6e/0xe0
[  485.223771][T27746]  ? __fget_files+0x2a/0x420
[  485.223788][T27746]  ? __fget_files+0x3a0/0x420
[  485.223814][T27746]  __sys_sendmmsg+0x27c/0x4e0
[  485.223843][T27746]  ? __pfx___sys_sendmmsg+0x10/0x10
[  485.223867][T27746]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  485.223909][T27746]  ? ksys_write+0x242/0x270
[  485.223931][T27746]  ? __pfx_ksys_write+0x10/0x10
[  485.223956][T27746]  __x64_sys_sendmmsg+0xa0/0xc0
[  485.223983][T27746]  do_syscall_64+0x14d/0xf80
[  485.223999][T27746]  ? trace_irq_disable+0x3b/0x150
[  485.224015][T27746]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.224033][T27746]  ? clear_bhb_loop+0x40/0x90
[  485.224054][T27746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.224072][T27746] RIP: 0033:0x7f517319c819
[  485.224089][T27746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  485.224103][T27746] RSP: 002b:00007f517409c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  485.224122][T27746] RAX: ffffffffffffffda RBX: 00007f5173415fa0 RCX: 00007f517319c819
[  485.224135][T27746] RDX: 0000000000000002 RSI: 0000200000002bc0 RDI: 0000000000000003
[  485.224146][T27746] RBP: 00007f517409c090 R08: 0000000000000000 R09: 0000000000000000
[  485.224157][T27746] R10: 6ef8eb021116b2d8 R11: 0000000000000246 R12: 0000000000000001
[  485.224169][T27746] R13: 00007f5173416038 R14: 00007f5173415fa0 R15: 00007fffe31b54d8
[  485.224197][T27746]  </TASK>
[  485.881983][T27770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9957'.
[  487.111806][T27808] netem: change failed
[  487.135052][T27809] IPVS: Scheduler module ip_vs_sip not found
[  487.185298][T27804] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  487.194108][T27816] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.9980'.
[  487.661145][T27843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9985'.
[  488.334201][T27851] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.9994'.
[  489.436909][T27912] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10021'.
[  489.494623][T27912] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.502469][T27912] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.317400][T27970] netlink: 'syz.1.10044': attribute type 72 has an invalid length.
[  491.272518][ T5956] hid-generic 0005:9C3F:0006.0001: item fetching failed at offset 0/1
[  491.283183][ T5956] hid-generic 0005:9C3F:0006.0001: probe with driver hid-generic failed with error -22
[  492.584874][T28114] FAULT_INJECTION: forcing a failure.
[  492.584874][T28114] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  492.655016][T28114] CPU: 1 UID: 0 PID: 28114 Comm: syz.2.10115 Not tainted syzkaller #0 PREEMPT(full) 
[  492.655042][T28114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  492.655052][T28114] Call Trace:
[  492.655059][T28114]  <TASK>
[  492.655066][T28114]  dump_stack_lvl+0xe8/0x150
[  492.655095][T28114]  should_fail_ex+0x412/0x560
[  492.655126][T28114]  _copy_from_user+0x2d/0xb0
[  492.655147][T28114]  __sys_bpf+0x229/0x950
[  492.655167][T28114]  ? __pfx___sys_bpf+0x10/0x10
[  492.655197][T28114]  ? ksys_write+0x242/0x270
[  492.655218][T28114]  ? __pfx_ksys_write+0x10/0x10
[  492.655244][T28114]  __x64_sys_bpf+0x7c/0x90
[  492.655268][T28114]  do_syscall_64+0x14d/0xf80
[  492.655285][T28114]  ? trace_irq_disable+0x3b/0x150
[  492.655301][T28114]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.655318][T28114]  ? clear_bhb_loop+0x40/0x90
[  492.655339][T28114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.655356][T28114] RIP: 0033:0x7fb0af99c819
[  492.655372][T28114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  492.655387][T28114] RSP: 002b:00007fb0b08f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  492.655405][T28114] RAX: ffffffffffffffda RBX: 00007fb0afc15fa0 RCX: 00007fb0af99c819
[  492.655418][T28114] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a
[  492.655429][T28114] RBP: 00007fb0b08f3090 R08: 0000000000000000 R09: 0000000000000000
[  492.655439][T28114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  492.655449][T28114] R13: 00007fb0afc16038 R14: 00007fb0afc15fa0 R15: 00007ffd4e2b1958
[  492.655478][T28114]  </TASK>
[  493.283205][T28148] netlink: 'syz.3.10132': attribute type 10 has an invalid length.
[  493.296033][T28148] 8021q: adding VLAN 0 to HW filter on device team0
[  493.305761][T28148] bond0: (slave team0): Enslaving as an active interface with an up link
[  493.316773][T28148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10132'.
[  493.456254][T28161] netlink: 'syz.3.10136': attribute type 1 has an invalid length.
[  493.516344][T28161] gretap1: entered allmulticast mode
[  493.526336][T28161] bond1: (slave gretap1): making interface the new active one
[  493.534886][T28161] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  493.781662][T28182] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10146'.
[  494.135190][ T5956] IPVS: starting estimator thread 0...
[  494.251490][T28209] IPVS: using max 31 ests per chain, 74400 per kthread
[  494.302810][T28212] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.10158'.
[  494.492854][T28221] FAULT_INJECTION: forcing a failure.
[  494.492854][T28221] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  494.517466][T28221] CPU: 1 UID: 0 PID: 28221 Comm: syz.0.10162 Not tainted syzkaller #0 PREEMPT(full) 
[  494.517491][T28221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  494.517502][T28221] Call Trace:
[  494.517509][T28221]  <TASK>
[  494.517517][T28221]  dump_stack_lvl+0xe8/0x150
[  494.517547][T28221]  should_fail_ex+0x412/0x560
[  494.517578][T28221]  _copy_from_user+0x2d/0xb0
[  494.517609][T28221]  ___sys_recvmsg+0x175/0x590
[  494.517640][T28221]  ? __pfx____sys_recvmsg+0x10/0x10
[  494.517687][T28221]  ? __fget_files+0x3a0/0x420
[  494.517714][T28221]  do_recvmmsg+0x334/0x800
[  494.517738][T28221]  ? __pfx_do_recvmmsg+0x10/0x10
[  494.517774][T28221]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  494.517808][T28221]  __x64_sys_recvmmsg+0x198/0x250
[  494.517829][T28221]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  494.517856][T28221]  do_syscall_64+0x14d/0xf80
[  494.517872][T28221]  ? trace_irq_disable+0x3b/0x150
[  494.517888][T28221]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.517904][T28221]  ? clear_bhb_loop+0x40/0x90
[  494.517925][T28221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.517941][T28221] RIP: 0033:0x7f928f79c819
[  494.517957][T28221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  494.517972][T28221] RSP: 002b:00007f9290735028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  494.517991][T28221] RAX: ffffffffffffffda RBX: 00007f928fa15fa0 RCX: 00007f928f79c819
[  494.518004][T28221] RDX: 0000000000000001 RSI: 0000200000001700 RDI: 0000000000000003
[  494.518014][T28221] RBP: 00007f9290735090 R08: 0000000000000000 R09: 0000000000000000
[  494.518025][T28221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  494.518035][T28221] R13: 00007f928fa16038 R14: 00007f928fa15fa0 R15: 00007fff408d5638
[  494.518061][T28221]  </TASK>
[  495.230386][T28244] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.10173'.
[  495.602403][T28267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10176'.
[  496.023032][T28281] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.10186'.
[  497.003445][T28312] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.10199'.
[  497.157900][T28320] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10204'.
[  497.609460][T28344] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.10216'.
[  497.625297][T28347] FAULT_INJECTION: forcing a failure.
[  497.625297][T28347] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  497.668699][T28347] CPU: 0 UID: 0 PID: 28347 Comm: syz.3.10215 Not tainted syzkaller #0 PREEMPT(full) 
[  497.668723][T28347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  497.668734][T28347] Call Trace:
[  497.668741][T28347]  <TASK>
[  497.668749][T28347]  dump_stack_lvl+0xe8/0x150
[  497.668778][T28347]  should_fail_ex+0x412/0x560
[  497.668809][T28347]  _copy_from_user+0x2d/0xb0
[  497.668831][T28347]  ___sys_sendmsg+0x1c6/0x360
[  497.668862][T28347]  ? __pfx____sys_sendmsg+0x10/0x10
[  497.668918][T28347]  ? __fget_files+0x2a/0x420
[  497.668934][T28347]  ? __fget_files+0x3a0/0x420
[  497.668960][T28347]  __x64_sys_sendmsg+0x1bd/0x2a0
[  497.668988][T28347]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  497.669021][T28347]  ? __pfx_ksys_write+0x10/0x10
[  497.669052][T28347]  do_syscall_64+0x14d/0xf80
[  497.669069][T28347]  ? trace_irq_disable+0x3b/0x150
[  497.669085][T28347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.669103][T28347]  ? clear_bhb_loop+0x40/0x90
[  497.669124][T28347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.669142][T28347] RIP: 0033:0x7fb8dad9c819
[  497.669158][T28347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  497.669173][T28347] RSP: 002b:00007fb8d8fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  497.669192][T28347] RAX: ffffffffffffffda RBX: 00007fb8db015fa0 RCX: 00007fb8dad9c819
[  497.669206][T28347] RDX: 000000002400e850 RSI: 0000200000000400 RDI: 0000000000000003
[  497.669217][T28347] RBP: 00007fb8d8fee090 R08: 0000000000000000 R09: 0000000000000000
[  497.669228][T28347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  497.669238][T28347] R13: 00007fb8db016038 R14: 00007fb8db015fa0 R15: 00007ffed56b19d8
[  497.669267][T28347]  </TASK>
[  498.979812][T28419] FAULT_INJECTION: forcing a failure.
[  498.979812][T28419] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  499.024301][T28419] CPU: 1 UID: 0 PID: 28419 Comm: syz.0.10247 Not tainted syzkaller #0 PREEMPT(full) 
[  499.024327][T28419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  499.024338][T28419] Call Trace:
[  499.024345][T28419]  <TASK>
[  499.024353][T28419]  dump_stack_lvl+0xe8/0x150
[  499.024383][T28419]  should_fail_ex+0x412/0x560
[  499.024421][T28419]  _copy_from_user+0x2d/0xb0
[  499.024443][T28419]  ___sys_sendmsg+0x1c6/0x360
[  499.024474][T28419]  ? __pfx____sys_sendmsg+0x10/0x10
[  499.024530][T28419]  ? __fget_files+0x2a/0x420
[  499.024548][T28419]  ? __fget_files+0x3a0/0x420
[  499.024573][T28419]  __x64_sys_sendmsg+0x1bd/0x2a0
[  499.024600][T28419]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  499.024634][T28419]  ? __pfx_ksys_write+0x10/0x10
[  499.024663][T28419]  do_syscall_64+0x14d/0xf80
[  499.024681][T28419]  ? trace_irq_disable+0x3b/0x150
[  499.024697][T28419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.024715][T28419]  ? clear_bhb_loop+0x40/0x90
[  499.024736][T28419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.024754][T28419] RIP: 0033:0x7f928f79c819
[  499.024771][T28419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  499.024786][T28419] RSP: 002b:00007f9290735028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  499.024805][T28419] RAX: ffffffffffffffda RBX: 00007f928fa15fa0 RCX: 00007f928f79c819
[  499.024818][T28419] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  499.024829][T28419] RBP: 00007f9290735090 R08: 0000000000000000 R09: 0000000000000000
[  499.024840][T28419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  499.024851][T28419] R13: 00007f928fa16038 R14: 00007f928fa15fa0 R15: 00007fff408d5638
[  499.024878][T28419]  </TASK>
[  499.025540][T28417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  500.163069][T28481] FAULT_INJECTION: forcing a failure.
[  500.163069][T28481] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  500.210626][T28481] CPU: 1 UID: 0 PID: 28481 Comm: syz.2.10276 Not tainted syzkaller #0 PREEMPT(full) 
[  500.210652][T28481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  500.210663][T28481] Call Trace:
[  500.210670][T28481]  <TASK>
[  500.210678][T28481]  dump_stack_lvl+0xe8/0x150
[  500.210706][T28481]  should_fail_ex+0x412/0x560
[  500.210737][T28481]  _copy_from_user+0x2d/0xb0
[  500.210761][T28481]  do_tcp_setsockopt+0x4f3/0x2060
[  500.210788][T28481]  ? __pfx_do_tcp_setsockopt+0x10/0x10
[  500.210812][T28481]  ? __pfx_aa_sk_perm+0x10/0x10
[  500.210839][T28481]  ? __fget_files+0x2a/0x420
[  500.210854][T28481]  ? aa_sock_opt_perm+0xff/0x1a0
[  500.210873][T28481]  ? sock_common_setsockopt+0x36/0xc0
[  500.210892][T28481]  ? tcp_setsockopt+0x3d/0xe0
[  500.210910][T28481]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  500.210933][T28481]  do_sock_setsockopt+0x17c/0x1b0
[  500.210961][T28481]  __x64_sys_setsockopt+0x13d/0x1b0
[  500.210989][T28481]  do_syscall_64+0x14d/0xf80
[  500.211006][T28481]  ? trace_irq_disable+0x3b/0x150
[  500.211023][T28481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.211039][T28481]  ? clear_bhb_loop+0x40/0x90
[  500.211059][T28481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.211077][T28481] RIP: 0033:0x7fb0af99c819
[  500.211093][T28481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.211109][T28481] RSP: 002b:00007fb0b08f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  500.211127][T28481] RAX: ffffffffffffffda RBX: 00007fb0afc15fa0 RCX: 00007fb0af99c819
[  500.211139][T28481] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003
[  500.211149][T28481] RBP: 00007fb0b08f3090 R08: 0000000000000004 R09: 0000000000000000
[  500.211159][T28481] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  500.211170][T28481] R13: 00007fb0afc16038 R14: 00007fb0afc15fa0 R15: 00007ffd4e2b1958
[  500.211198][T28481]  </TASK>
[  501.373338][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  501.379669][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  503.353174][T28572] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10307'.
[  503.383881][T28572] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.391325][T28572] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.051989][T28607] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10321'.
[  504.071837][T28607] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.079139][T28607] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.666103][T28638] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10337'.
[  504.699989][T28638] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.707353][T28638] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.783522][T28648] FAULT_INJECTION: forcing a failure.
[  504.783522][T28648] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  504.836369][T28648] CPU: 0 UID: 0 PID: 28648 Comm: syz.2.10341 Not tainted syzkaller #0 PREEMPT(full) 
[  504.836394][T28648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  504.836405][T28648] Call Trace:
[  504.836412][T28648]  <TASK>
[  504.836420][T28648]  dump_stack_lvl+0xe8/0x150
[  504.836446][T28648]  should_fail_ex+0x412/0x560
[  504.836478][T28648]  _copy_from_user+0x2d/0xb0
[  504.836500][T28648]  ___sys_sendmsg+0x1c6/0x360
[  504.836530][T28648]  ? __pfx____sys_sendmsg+0x10/0x10
[  504.836585][T28648]  ? __fget_files+0x2a/0x420
[  504.836600][T28648]  ? __fget_files+0x3a0/0x420
[  504.836624][T28648]  __x64_sys_sendmsg+0x1bd/0x2a0
[  504.836650][T28648]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  504.836680][T28648]  ? __pfx_ksys_write+0x10/0x10
[  504.836709][T28648]  do_syscall_64+0x14d/0xf80
[  504.836725][T28648]  ? trace_irq_disable+0x3b/0x150
[  504.836740][T28648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.836756][T28648]  ? clear_bhb_loop+0x40/0x90
[  504.836776][T28648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.836792][T28648] RIP: 0033:0x7fb0af99c819
[  504.836807][T28648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  504.836821][T28648] RSP: 002b:00007fb0b08f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  504.836847][T28648] RAX: ffffffffffffffda RBX: 00007fb0afc15fa0 RCX: 00007fb0af99c819
[  504.836859][T28648] RDX: 0000000000000100 RSI: 00002000000009c0 RDI: 0000000000000005
[  504.836869][T28648] RBP: 00007fb0b08f3090 R08: 0000000000000000 R09: 0000000000000000
[  504.836880][T28648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  504.836889][T28648] R13: 00007fb0afc16038 R14: 00007fb0afc15fa0 R15: 00007ffd4e2b1958
[  504.836915][T28648]  </TASK>
[  505.593598][T28681] netlink: 1528 bytes leftover after parsing attributes in process `syz.2.10357'.
[  505.997724][T28704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10368'.
[  506.012631][T28704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  506.027884][T28704] netlink: 'syz.1.10368': attribute type 10 has an invalid length.
[  506.061341][T28704] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  506.671861][T28728] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.10377'.
[  507.472221][T28750] netlink: 1528 bytes leftover after parsing attributes in process `syz.3.10385'.
[  507.979169][T28774] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.10393'.
[  508.172352][T28783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10400'.
[  508.236147][T28788] netlink: 108 bytes leftover after parsing attributes in process `syz.0.10401'.
[  508.660941][T28818] FAULT_INJECTION: forcing a failure.
[  508.660941][T28818] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  508.674660][T28818] CPU: 1 UID: 0 PID: 28818 Comm: syz.3.10417 Not tainted syzkaller #0 PREEMPT(full) 
[  508.674682][T28818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  508.674693][T28818] Call Trace:
[  508.674700][T28818]  <TASK>
[  508.674707][T28818]  dump_stack_lvl+0xe8/0x150
[  508.674736][T28818]  should_fail_ex+0x412/0x560
[  508.674766][T28818]  _copy_from_user+0x2d/0xb0
[  508.674787][T28818]  ___sys_sendmsg+0x1c6/0x360
[  508.674816][T28818]  ? __pfx____sys_sendmsg+0x10/0x10
[  508.674869][T28818]  ? __fget_files+0x2a/0x420
[  508.674885][T28818]  ? __fget_files+0x3a0/0x420
[  508.674906][T28818]  __x64_sys_sendmsg+0x1bd/0x2a0
[  508.674933][T28818]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  508.674963][T28818]  ? __pfx_ksys_write+0x10/0x10
[  508.674992][T28818]  do_syscall_64+0x14d/0xf80
[  508.675009][T28818]  ? trace_irq_disable+0x3b/0x150
[  508.675024][T28818]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.675041][T28818]  ? clear_bhb_loop+0x40/0x90
[  508.675061][T28818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.675078][T28818] RIP: 0033:0x7fb8dad9c819
[  508.675094][T28818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  508.675110][T28818] RSP: 002b:00007fb8d8fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  508.675129][T28818] RAX: ffffffffffffffda RBX: 00007fb8db015fa0 RCX: 00007fb8dad9c819
[  508.675142][T28818] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  508.675152][T28818] RBP: 00007fb8d8fee090 R08: 0000000000000000 R09: 0000000000000000
[  508.675163][T28818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  508.675173][T28818] R13: 00007fb8db016038 R14: 00007fb8db015fa0 R15: 00007ffed56b19d8
[  508.675202][T28818]  </TASK>
[  509.070437][T28830] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10422'.
[  509.259761][T28842] FAULT_INJECTION: forcing a failure.
[  509.259761][T28842] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  509.291084][T28842] CPU: 1 UID: 0 PID: 28842 Comm: syz.3.10429 Not tainted syzkaller #0 PREEMPT(full) 
[  509.291108][T28842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  509.291118][T28842] Call Trace:
[  509.291124][T28842]  <TASK>
[  509.291132][T28842]  dump_stack_lvl+0xe8/0x150
[  509.291160][T28842]  should_fail_ex+0x412/0x560
[  509.291189][T28842]  _copy_from_user+0x2d/0xb0
[  509.291210][T28842]  ___sys_sendmsg+0x1c6/0x360
[  509.291239][T28842]  ? __pfx____sys_sendmsg+0x10/0x10
[  509.291290][T28842]  ? __fget_files+0x2a/0x420
[  509.291305][T28842]  ? __fget_files+0x3a0/0x420
[  509.291327][T28842]  __x64_sys_sendmsg+0x1bd/0x2a0
[  509.291353][T28842]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  509.291384][T28842]  ? __pfx_ksys_write+0x10/0x10
[  509.291411][T28842]  do_syscall_64+0x14d/0xf80
[  509.291428][T28842]  ? trace_irq_disable+0x3b/0x150
[  509.291450][T28842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.291467][T28842]  ? clear_bhb_loop+0x40/0x90
[  509.291487][T28842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.291504][T28842] RIP: 0033:0x7fb8dad9c819
[  509.291520][T28842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  509.291535][T28842] RSP: 002b:00007fb8d8fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  509.291553][T28842] RAX: ffffffffffffffda RBX: 00007fb8db015fa0 RCX: 00007fb8dad9c819
[  509.291565][T28842] RDX: 0000000000000010 RSI: 0000200000000380 RDI: 0000000000000006
[  509.291575][T28842] RBP: 00007fb8d8fee090 R08: 0000000000000000 R09: 0000000000000000
[  509.291585][T28842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  509.291595][T28842] R13: 00007fb8db016038 R14: 00007fb8db015fa0 R15: 00007ffed56b19d8
[  509.291622][T28842]  </TASK>
[  509.709156][T28865] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10437'.
[  509.967803][T28878] FAULT_INJECTION: forcing a failure.
[  509.967803][T28878] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  509.988146][T28878] CPU: 0 UID: 0 PID: 28878 Comm: syz.0.10445 Not tainted syzkaller #0 PREEMPT(full) 
[  509.988170][T28878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  509.988181][T28878] Call Trace:
[  509.988188][T28878]  <TASK>
[  509.988195][T28878]  dump_stack_lvl+0xe8/0x150
[  509.988225][T28878]  should_fail_ex+0x412/0x560
[  509.988255][T28878]  _copy_from_user+0x2d/0xb0
[  509.988277][T28878]  ___sys_sendmsg+0x1c6/0x360
[  509.988304][T28878]  ? __pfx____sys_sendmsg+0x10/0x10
[  509.988353][T28878]  ? __fget_files+0x2a/0x420
[  509.988366][T28878]  ? __fget_files+0x3a0/0x420
[  509.988389][T28878]  __x64_sys_sendmsg+0x1bd/0x2a0
[  509.988413][T28878]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  509.988444][T28878]  ? __pfx_ksys_write+0x10/0x10
[  509.988471][T28878]  do_syscall_64+0x14d/0xf80
[  509.988485][T28878]  ? trace_irq_disable+0x3b/0x150
[  509.988498][T28878]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.988514][T28878]  ? clear_bhb_loop+0x40/0x90
[  509.988534][T28878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.988550][T28878] RIP: 0033:0x7f928f79c819
[  509.988567][T28878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  509.988581][T28878] RSP: 002b:00007f9290735028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  509.988601][T28878] RAX: ffffffffffffffda RBX: 00007f928fa15fa0 RCX: 00007f928f79c819
[  509.988614][T28878] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  509.988625][T28878] RBP: 00007f9290735090 R08: 0000000000000000 R09: 0000000000000000
[  509.988635][T28878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  509.988646][T28878] R13: 00007f928fa16038 R14: 00007f928fa15fa0 R15: 00007fff408d5638
[  509.988675][T28878]  </TASK>
[  510.403679][T28899] syzkaller0: entered promiscuous mode
[  510.427468][T28899] syzkaller0: entered allmulticast mode
[  510.454789][T28899] FAULT_INJECTION: forcing a failure.
[  510.454789][T28899] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  510.530583][T28899] CPU: 0 UID: 0 PID: 28899 Comm: syz.1.10451 Not tainted syzkaller #0 PREEMPT(full) 
[  510.530609][T28899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  510.530620][T28899] Call Trace:
[  510.530627][T28899]  <TASK>
[  510.530635][T28899]  dump_stack_lvl+0xe8/0x150
[  510.530665][T28899]  should_fail_ex+0x412/0x560
[  510.530695][T28899]  _copy_from_user+0x2d/0xb0
[  510.530717][T28899]  ___sys_sendmsg+0x1c6/0x360
[  510.530747][T28899]  ? __pfx____sys_sendmsg+0x10/0x10
[  510.530798][T28899]  ? __fget_files+0x2a/0x420
[  510.530815][T28899]  ? __fget_files+0x3a0/0x420
[  510.530839][T28899]  __x64_sys_sendmsg+0x1bd/0x2a0
[  510.530866][T28899]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  510.530896][T28899]  ? __pfx_ksys_write+0x10/0x10
[  510.530926][T28899]  do_syscall_64+0x14d/0xf80
[  510.530943][T28899]  ? trace_irq_disable+0x3b/0x150
[  510.530958][T28899]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.530973][T28899]  ? clear_bhb_loop+0x40/0x90
[  510.530994][T28899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.531011][T28899] RIP: 0033:0x7f19b1f9c819
[  510.531027][T28899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  510.531042][T28899] RSP: 002b:00007f19b2dee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  510.531067][T28899] RAX: ffffffffffffffda RBX: 00007f19b2215fa0 RCX: 00007f19b1f9c819
[  510.531079][T28899] RDX: 0000000000008014 RSI: 00002000000000c0 RDI: 0000000000000006
[  510.531090][T28899] RBP: 00007f19b2dee090 R08: 0000000000000000 R09: 0000000000000000
[  510.531102][T28899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  510.531111][T28899] R13: 00007f19b2216038 R14: 00007f19b2215fa0 R15: 00007fff82729748
[  510.531139][T28899]  </TASK>
[  510.997745][T28918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10455'.
[  511.424712][T28927] FAULT_INJECTION: forcing a failure.
[  511.424712][T28927] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  511.465143][T28927] CPU: 0 UID: 0 PID: 28927 Comm: syz.0.10463 Not tainted syzkaller #0 PREEMPT(full) 
[  511.465168][T28927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  511.465179][T28927] Call Trace:
[  511.465186][T28927]  <TASK>
[  511.465194][T28927]  dump_stack_lvl+0xe8/0x150
[  511.465223][T28927]  should_fail_ex+0x412/0x560
[  511.465254][T28927]  _copy_from_user+0x2d/0xb0
[  511.465276][T28927]  ___sys_sendmsg+0x1c6/0x360
[  511.465307][T28927]  ? __pfx____sys_sendmsg+0x10/0x10
[  511.465365][T28927]  ? __fget_files+0x2a/0x420
[  511.465381][T28927]  ? __fget_files+0x3a0/0x420
[  511.465407][T28927]  __x64_sys_sendmsg+0x1bd/0x2a0
[  511.465435][T28927]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  511.465469][T28927]  ? __pfx_ksys_write+0x10/0x10
[  511.465500][T28927]  do_syscall_64+0x14d/0xf80
[  511.465517][T28927]  ? trace_irq_disable+0x3b/0x150
[  511.465533][T28927]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.465550][T28927]  ? clear_bhb_loop+0x40/0x90
[  511.465571][T28927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.465589][T28927] RIP: 0033:0x7f928f79c819
[  511.465606][T28927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  511.465621][T28927] RSP: 002b:00007f9290735028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  511.465640][T28927] RAX: ffffffffffffffda RBX: 00007f928fa15fa0 RCX: 00007f928f79c819
[  511.465653][T28927] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000004
[  511.465665][T28927] RBP: 00007f9290735090 R08: 0000000000000000 R09: 0000000000000000
[  511.465676][T28927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  511.465687][T28927] R13: 00007f928fa16038 R14: 00007f928fa15fa0 R15: 00007fff408d5638
[  511.465716][T28927]  </TASK>
[  511.661229][T28925] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10462'.
[  511.670571][T28925] unsupported nlmsg_type 40
[  512.563142][T28972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  513.058516][T29004] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.10500'.
[  513.349186][T29024] FAULT_INJECTION: forcing a failure.
[  513.349186][T29024] name failslab, interval 1, probability 0, space 0, times 0
[  513.417705][T29024] CPU: 1 UID: 0 PID: 29024 Comm: syz.2.10509 Not tainted syzkaller #0 PREEMPT(full) 
[  513.417730][T29024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  513.417741][T29024] Call Trace:
[  513.417749][T29024]  <TASK>
[  513.417756][T29024]  dump_stack_lvl+0xe8/0x150
[  513.417795][T29024]  should_fail_ex+0x412/0x560
[  513.417827][T29024]  should_failslab+0xa8/0x100
[  513.417852][T29024]  __kmalloc_noprof+0xe8/0x760
[  513.417873][T29024]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  513.417898][T29024]  tomoyo_realpath_from_path+0xe3/0x5d0
[  513.417926][T29024]  ? tomoyo_path_number_perm+0x219/0x630
[  513.417950][T29024]  tomoyo_path_number_perm+0x246/0x630
[  513.417975][T29024]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  513.418001][T29024]  ? __lock_acquire+0x6b5/0x2cf0
[  513.418034][T29024]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  513.418070][T29024]  ? __fget_files+0x2a/0x420
[  513.418089][T29024]  ? __fget_files+0x2a/0x420
[  513.418105][T29024]  ? __fget_files+0x3a0/0x420
[  513.418119][T29024]  ? __fget_files+0x2a/0x420
[  513.418139][T29024]  security_file_ioctl+0xc3/0x2a0
[  513.418163][T29024]  __se_sys_ioctl+0x47/0x170
[  513.418186][T29024]  do_syscall_64+0x14d/0xf80
[  513.418202][T29024]  ? trace_irq_disable+0x3b/0x150
[  513.418217][T29024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.418235][T29024]  ? clear_bhb_loop+0x40/0x90
[  513.418256][T29024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.418271][T29024] RIP: 0033:0x7fb0af99c819
[  513.418287][T29024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  513.418302][T29024] RSP: 002b:00007fb0b08f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  513.418320][T29024] RAX: ffffffffffffffda RBX: 00007fb0afc15fa0 RCX: 00007fb0af99c819
[  513.418332][T29024] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000004
[  513.418344][T29024] RBP: 00007fb0b08f3090 R08: 0000000000000000 R09: 0000000000000000
[  513.418355][T29024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  513.418365][T29024] R13: 00007fb0afc16038 R14: 00007fb0afc15fa0 R15: 00007ffd4e2b1958
[  513.418394][T29024]  </TASK>
[  513.418401][T29024] ERROR: Out of memory at tomoyo_realpath_from_path.
[  513.677186][T29028] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.684871][T29028] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.742947][T29028] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  513.755451][T29028] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  513.844289][  T138] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  513.862896][  T138] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  513.874666][  T138] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  513.884118][  T138] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  514.070464][T29052] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5
[  514.123050][T29053] FAULT_INJECTION: forcing a failure.
[  514.123050][T29053] name failslab, interval 1, probability 0, space 0, times 0
[  514.173899][T29053] CPU: 1 UID: 0 PID: 29053 Comm: syz.1.10518 Not tainted syzkaller #0 PREEMPT(full) 
[  514.173924][T29053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  514.173936][T29053] Call Trace:
[  514.173949][T29053]  <TASK>
[  514.173957][T29053]  dump_stack_lvl+0xe8/0x150
[  514.173987][T29053]  should_fail_ex+0x412/0x560
[  514.174020][T29053]  should_failslab+0xa8/0x100
[  514.174046][T29053]  __kmalloc_noprof+0xe8/0x760
[  514.174068][T29053]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  514.174093][T29053]  tomoyo_realpath_from_path+0xe3/0x5d0
[  514.174122][T29053]  ? tomoyo_path_number_perm+0x219/0x630
[  514.174147][T29053]  tomoyo_path_number_perm+0x246/0x630
[  514.174172][T29053]  ? rcu_is_watching+0x15/0xb0
[  514.174196][T29053]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  514.174222][T29053]  ? __lock_acquire+0x6b5/0x2cf0
[  514.174255][T29053]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  514.174294][T29053]  ? __fget_files+0x2a/0x420
[  514.174314][T29053]  ? __fget_files+0x2a/0x420
[  514.174329][T29053]  ? __fget_files+0x3a0/0x420
[  514.174344][T29053]  ? __fget_files+0x2a/0x420
[  514.174365][T29053]  security_file_ioctl+0xc3/0x2a0
[  514.174391][T29053]  __se_sys_ioctl+0x47/0x170
[  514.174415][T29053]  do_syscall_64+0x14d/0xf80
[  514.174433][T29053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.174451][T29053]  ? clear_bhb_loop+0x40/0x90
[  514.174473][T29053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.174491][T29053] RIP: 0033:0x7f19b1f9c819
[  514.174508][T29053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  514.174523][T29053] RSP: 002b:00007f19b2dcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  514.174542][T29053] RAX: ffffffffffffffda RBX: 00007f19b2216090 RCX: 00007f19b1f9c819
[  514.174556][T29053] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000004
[  514.174567][T29053] RBP: 00007f19b2dcd090 R08: 0000000000000000 R09: 0000000000000000
[  514.174578][T29053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  514.174589][T29053] R13: 00007f19b2216128 R14: 00007f19b2216090 R15: 00007fff82729748
[  514.174618][T29053]  </TASK>
[  514.174685][T29053] ERROR: Out of memory at tomoyo_realpath_from_path.
[  515.006538][T29080] FAULT_INJECTION: forcing a failure.
[  515.006538][T29080] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  515.019755][T29080] CPU: 1 UID: 0 PID: 29080 Comm: syz.0.10528 Not tainted syzkaller #0 PREEMPT(full) 
[  515.019781][T29080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  515.019792][T29080] Call Trace:
[  515.019799][T29080]  <TASK>
[  515.019806][T29080]  dump_stack_lvl+0xe8/0x150
[  515.019835][T29080]  should_fail_ex+0x412/0x560
[  515.019866][T29080]  _copy_from_user+0x2d/0xb0
[  515.019895][T29080]  ___sys_sendmsg+0x1c6/0x360
[  515.019926][T29080]  ? __pfx____sys_sendmsg+0x10/0x10
[  515.019981][T29080]  ? __fget_files+0x2a/0x420
[  515.019997][T29080]  ? __fget_files+0x3a0/0x420
[  515.020023][T29080]  __x64_sys_sendmsg+0x1bd/0x2a0
[  515.020049][T29080]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  515.020082][T29080]  ? __pfx_ksys_write+0x10/0x10
[  515.020113][T29080]  do_syscall_64+0x14d/0xf80
[  515.020130][T29080]  ? trace_irq_disable+0x3b/0x150
[  515.020146][T29080]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.020164][T29080]  ? clear_bhb_loop+0x40/0x90
[  515.020186][T29080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.020204][T29080] RIP: 0033:0x7f928f79c819
[  515.020221][T29080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  515.020236][T29080] RSP: 002b:00007f9290735028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  515.020255][T29080] RAX: ffffffffffffffda RBX: 00007f928fa15fa0 RCX: 00007f928f79c819
[  515.020268][T29080] RDX: 0000000004000040 RSI: 0000200000000240 RDI: 0000000000000006
[  515.020280][T29080] RBP: 00007f9290735090 R08: 0000000000000000 R09: 0000000000000000
[  515.020291][T29080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  515.020302][T29080] R13: 00007f928fa16038 R14: 00007f928fa15fa0 R15: 00007fff408d5638
[  515.020331][T29080]  </TASK>
[  515.312808][T29091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10530'.
[  515.364145][T29091] 8021q: adding VLAN 0 to HW filter on device bond2
[  515.390479][T29088] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  515.452108][T29088] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[  515.518155][T29101] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7
[  515.574308][T29109] FAULT_INJECTION: forcing a failure.
[  515.574308][T29109] name failslab, interval 1, probability 0, space 0, times 0
[  515.634047][T29109] CPU: 1 UID: 0 PID: 29109 Comm: syz.3.10537 Not tainted syzkaller #0 PREEMPT(full) 
[  515.634073][T29109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  515.634084][T29109] Call Trace:
[  515.634090][T29109]  <TASK>
[  515.634098][T29109]  dump_stack_lvl+0xe8/0x150
[  515.634127][T29109]  should_fail_ex+0x412/0x560
[  515.634158][T29109]  should_failslab+0xa8/0x100
[  515.634182][T29109]  __kmalloc_noprof+0xe8/0x760
[  515.634204][T29109]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  515.634229][T29109]  tomoyo_realpath_from_path+0xe3/0x5d0
[  515.634259][T29109]  ? tomoyo_path_number_perm+0x219/0x630
[  515.634284][T29109]  tomoyo_path_number_perm+0x246/0x630
[  515.634310][T29109]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  515.634337][T29109]  ? __lock_acquire+0x6b5/0x2cf0
[  515.634371][T29109]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  515.634410][T29109]  ? __fget_files+0x2a/0x420
[  515.634429][T29109]  ? __fget_files+0x2a/0x420
[  515.634444][T29109]  ? __fget_files+0x3a0/0x420
[  515.634460][T29109]  ? __fget_files+0x2a/0x420
[  515.634480][T29109]  security_file_ioctl+0xc3/0x2a0
[  515.634506][T29109]  __se_sys_ioctl+0x47/0x170
[  515.634530][T29109]  do_syscall_64+0x14d/0xf80
[  515.634548][T29109]  ? trace_irq_disable+0x3b/0x150
[  515.634564][T29109]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.634582][T29109]  ? clear_bhb_loop+0x40/0x90
[  515.634603][T29109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.634621][T29109] RIP: 0033:0x7fb8dad9c819
[  515.634638][T29109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  515.634653][T29109] RSP: 002b:00007fb8d8fcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  515.634672][T29109] RAX: ffffffffffffffda RBX: 00007fb8db016090 RCX: 00007fb8dad9c819
[  515.634685][T29109] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000004
[  515.634696][T29109] RBP: 00007fb8d8fcd090 R08: 0000000000000000 R09: 0000000000000000
[  515.634707][T29109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  515.634718][T29109] R13: 00007fb8db016128 R14: 00007fb8db016090 R15: 00007ffed56b19d8
[  515.634748][T29109]  </TASK>
[  515.634756][T29109] ERROR: Out of memory at tomoyo_realpath_from_path.
[  515.790785][T29115] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8
[  515.918293][T29119] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN PTI
[  515.930212][T29119] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff]
[  515.938635][T29119] CPU: 0 UID: 0 PID: 29119 Comm: syz.0.10542 Not tainted syzkaller #0 PREEMPT(full) 
[  515.948093][T29119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  515.958138][T29119] RIP: 0010:__mutex_lock+0x14b/0x1300
[  515.963504][T29119] Code: 80 84 28 9a 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 e4 0f 00 00 83 3d f3 4e 74 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 99 cc 7b f6 4d 39 64 24 60 0f 85 10 0f 00
[  515.983107][T29119] RSP: 0018:ffffc9000c74f7c0 EFLAGS: 00010206
[  515.989165][T29119] RAX: 000000000000005f RBX: 1ffff920018e9f10 RCX: ffffffff9a288403
[  515.997124][T29119] RDX: 0000000000000000 RSI: ffffffff8e19e895 RDI: 00000000000002f8
[  516.005082][T29119] RBP: ffffc9000c74f980 R08: ffffc9000c74f8e7 R09: 0000000000000000
[  516.013034][T29119] R10: ffffc9000c74f8c0 R11: fffff520018e9f1d R12: 0000000000000298
[  516.020989][T29119] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  516.028946][T29119] FS:  00007f92907146c0(0000) GS:ffff88812544e000(0000) knlGS:0000000000000000
[  516.037864][T29119] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  516.044436][T29119] CR2: 000000110c266cc4 CR3: 0000000037352000 CR4: 00000000003526f0
[  516.052394][T29119] Call Trace:
[  516.055658][T29119]  <TASK>
[  516.058576][T29119]  ? wake_up_q+0x99/0xd0
[  516.062817][T29119]  ? preempt_schedule_thunk+0x16/0x30
[  516.068176][T29119]  ? preempt_schedule_common+0x82/0xd0
[  516.073628][T29119]  ? l2cap_unregister_user+0x36/0x170
[  516.078999][T29119]  ? preempt_schedule_thunk+0x16/0x30
[  516.084362][T29119]  ? __pfx___mutex_lock+0x10/0x10
[  516.089378][T29119]  ? __up_read+0x2fe/0x6b0
[  516.093781][T29119]  ? __pfx___up_read+0x10/0x10
[  516.098528][T29119]  ? hidp_session_find+0xce/0x100
[  516.103551][T29119]  l2cap_unregister_user+0x36/0x170
[  516.108738][T29119]  hidp_connection_del+0xb0/0x170
[  516.113750][T29119]  hidp_sock_ioctl+0x3ab/0x650
[  516.118506][T29119]  ? __pfx_hidp_sock_ioctl+0x10/0x10
[  516.123800][T29119]  ? do_vfs_ioctl+0x1166/0x1530
[  516.128643][T29119]  sock_do_ioctl+0x101/0x320
[  516.133220][T29119]  ? __pfx_sock_do_ioctl+0x10/0x10
[  516.138320][T29119]  sock_ioctl+0x5c6/0x7f0
[  516.142632][T29119]  ? __pfx_sock_ioctl+0x10/0x10
[  516.147471][T29119]  ? __fget_files+0x2a/0x420
[  516.152045][T29119]  ? __fget_files+0x3a0/0x420
[  516.156703][T29119]  ? __fget_files+0x2a/0x420
[  516.161280][T29119]  ? bpf_lsm_file_ioctl+0x9/0x20
[  516.166205][T29119]  ? __pfx_sock_ioctl+0x10/0x10
[  516.171041][T29119]  __se_sys_ioctl+0xfc/0x170
[  516.175625][T29119]  do_syscall_64+0x14d/0xf80
[  516.180202][T29119]  ? trace_irq_disable+0x3b/0x150
[  516.185215][T29119]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.191271][T29119]  ? clear_bhb_loop+0x40/0x90
[  516.195936][T29119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.201813][T29119] RIP: 0033:0x7f928f79c819
[  516.206216][T29119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  516.225811][T29119] RSP: 002b:00007f9290714028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  516.234213][T29119] RAX: ffffffffffffffda RBX: 00007f928fa16090 RCX: 00007f928f79c819
[  516.242172][T29119] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000004
[  516.250134][T29119] RBP: 00007f928f832c91 R08: 0000000000000000 R09: 0000000000000000
[  516.258087][T29119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  516.266040][T29119] R13: 00007f928fa16128 R14: 00007f928fa16090 R15: 00007fff408d5638
[  516.274003][T29119]  </TASK>
[  516.277014][T29119] Modules linked in:
[  516.282286][T29119] ---[ end trace 0000000000000000 ]---
[  516.305608][T29119] RIP: 0010:__mutex_lock+0x14b/0x1300
[  516.314556][T29119] Code: 80 84 28 9a 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 e4 0f 00 00 83 3d f3 4e 74 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 99 cc 7b f6 4d 39 64 24 60 0f 85 10 0f 00
[  516.334830][T29119] RSP: 0018:ffffc9000c74f7c0 EFLAGS: 00010206
[  516.347108][T29119] RAX: 000000000000005f RBX: 1ffff920018e9f10 RCX: ffffffff9a288403
[  516.356545][T29119] RDX: 0000000000000000 RSI: ffffffff8e19e895 RDI: 00000000000002f8
[  516.365827][T29119] RBP: ffffc9000c74f980 R08: ffffc9000c74f8e7 R09: 0000000000000000
[  516.375046][T29119] R10: ffffc9000c74f8c0 R11: fffff520018e9f1d R12: 0000000000000298
[  516.383388][T29119] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  516.392881][T29119] FS:  00007f92907146c0(0000) GS:ffff88812544e000(0000) knlGS:0000000000000000
[  516.402198][T29119] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  516.408877][T29119] CR2: 00007f51733e7158 CR3: 0000000037352000 CR4: 00000000003526f0
[  516.417397][T29119] Kernel panic - not syncing: Fatal exception
[  516.423802][T29119] Kernel Offset: disabled
[  516.428111][T29119] Rebooting in 86400 seconds..