last executing test programs: 3.458628159s ago: executing program 4 (id=1875): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r3, 0x4, r4}, 0x28) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2c, r2, 0x301, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040c01}, 0x8044) 3.188523378s ago: executing program 4 (id=1880): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000240)={@mcast2, 0x0}, &(0x7f0000000280)=0x14) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000380)={0x0, 0x4, 0xf, 0x3b8f3aa7, @vifc_lcl_ifindex=r4, @empty}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x4, 0x8, 0x80000001, 0xfffffffe}, &(0x7f00000003c0)=0x9c) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x3, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @remote, @multicast1, 0x2, 0x1}}}, {{@arp={@multicast2, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, {[0x0, 0x0, 0xff]}}, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 'team_slave_0\x00', 'veth0\x00', {}, {}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0xa86e373238e3ef48]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfffffffd}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000006004000850002000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$'], 0x20) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010010000000fedbdf2500000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012800b5dc83d9f616373656300000c000280060002404e24000017d77dcccc45748e1d301df8b951b218068341bf42df8f9e87589db9d28ecd2d4ea90efc0982a99f0f1e4fff7b001ed48962fbb62de89c771b1a092bd218ed0bda385cd3b723431c49201bb3eaf20ad0ae23b60070ce9b413fb159999f72c08d8c98b3f3ef447f90ffec262fc1d5edc66f3e970675d4a10e04bfab49238fa613d142a38e57e5"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x20) 3.162161031s ago: executing program 2 (id=1881): syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x8}}, @var={0x6, 0x0, 0x0, 0xe, 0x3, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0xfffffffb}}, @struct={0x4, 0x1, 0x0, 0x4, 0x0, 0xfffffffd, [{0x3, 0x5, 0x5}]}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x1, 0x3}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x1, 0x7}, @volatile={0xc, 0x0, 0x0, 0x9, 0x4}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x5f]}}, &(0x7f0000000480)=""/225, 0xad, 0xe1, 0x0, 0xf, 0x10000, @value=r1}, 0x28) syz_extract_tcp_res(&(0x7f0000000380)={0x41424344}, 0x0, 0x10000) syz_emit_ethernet(0x52, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x1c, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[], {{0x0, 0x4e22, 0x41424344, r2, 0x0, 0x2, 0x7, 0x70, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) syz_emit_ethernet(0x211, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0xe, 0x6, "6f8596", 0x1db, 0x6, 0x1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@routing={0x87, 0x8, 0x1, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @fragment={0x62, 0x0, 0x2, 0x0, 0x0, 0x1, 0x68}, @routing={0xdffcf5f8506f0a83, 0x10, 0x1, 0x7, 0x0, [@local, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x29}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x87, 0xa, 0x4, 0x5, 0x7, 0x10, 0xe, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x42}]}, @dstopts={0x0, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x809}, @enc_lim={0x4, 0x1, 0x6}]}, @fragment={0x6, 0x0, 0xd, 0x1, 0x0, 0x1c, 0x68}], {{0x4e21, 0x4e23, r0, r2, 0x0, 0x0, 0xb, 0x4, 0x8, 0x0, 0x7, {[@exp_fastopen={0xfe, 0xd, 0xf989, "984b2e4c36bc1fbf49"}, @mss={0x2, 0x4, 0x3ff}, @mss={0x2, 0x4, 0xfff9}]}}, {"923ed31548b3452a118b20d8eabe770d04ded84156780f3942c98c208386d8d1df8242c5bcdbff7ffa3748ae2fc9bbb90d7b406f86aaaf2536cfda2d527536bd323081056d021e56a512aae83fa0bdf7f9ec7fa4fdfa4516a8e7832ad272d3"}}}}}}}, &(0x7f0000000280)={0x1, 0x3, [0x1ae, 0xe6c, 0x7d1, 0x5fd]}) 2.967755624s ago: executing program 4 (id=1884): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRES8, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYRES16], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRES8, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYRES16], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket(0x11, 0x800000003, 0x2) (async) socket(0x11, 0x800000003, 0x2) unshare(0x62040200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x2, 0x2) write$tun(r1, 0x0, 0x3e) (async) write$tun(r1, 0x0, 0x3e) unshare(0x20000400) (async) unshare(0x20000400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0xb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000380)=0x1, 0x37) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='io_uring_file_get\x00', r3}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) mmap(&(0x7f0000961000/0x1000)=nil, 0x1000, 0x3, 0x8031, 0xffffffffffffffff, 0xe8694000) (async) mmap(&(0x7f0000961000/0x1000)=nil, 0x1000, 0x3, 0x8031, 0xffffffffffffffff, 0xe8694000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) 2.912025548s ago: executing program 2 (id=1885): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0xfffffd9d}, 0x1, 0x0, 0x0, 0x20004840}, 0x800) ioctl$SIOCRSACCEPT(r0, 0x89e3) 2.744338001s ago: executing program 2 (id=1887): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100600000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000400"/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000100000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0xa0001f98, 0xe, 0x0, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10) 2.579903639s ago: executing program 2 (id=1888): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691096000000000004001000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = socket(0xa, 0x3, 0x3a) recvmsg$qrtr(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100}, 0x38, 0x1041) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000140), 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x28, 0x26, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0x9}, {0xf, 0xfff2}, {0xf, 0x6}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4048804) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008045}, 0x20000080) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xf2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}}, 0x0) 2.398159722s ago: executing program 4 (id=1891): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x1) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) splice(r0, 0x0, r1, 0x0, 0x1, 0x1) 2.31170371s ago: executing program 0 (id=1892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0)=0xffffffffffffffff, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "e4918dbf6665a9ac", "b46769c4b74951144f1af91ec121614f", "af9c04e1", "ce5cf4b9c821bf65"}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000001a00010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a11000000003300010073797a30000000000800d44000000018380000000c0a01010000000000000000070000000900010073797a30000000000400038008000440000000030900020073797a3000000000140000001000010000000000000000000084000a"], 0xbc}}, 0x0) 2.310519612s ago: executing program 4 (id=1893): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/69, 0xa9}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000780)=""/210}], 0x2}, 0x0) 2.075947333s ago: executing program 0 (id=1894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x80001, 0x84) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="cc00028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686153685f746f5f706f72745f6d617070696e67000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068"], 0xe8}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xba01}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="de398678721220f2b908096c997b61246bca3aa7", 0x14}, {&(0x7f00000002c0)="ed08a4802176b58e66ad4bfca6bd45ef2776fb0fc604484bdc0eaf3b3ad31b6e7d47c060ba9e463a889c1f9c7d3eb07342a0068b70dc7ce22c7ca26ec5c406a08a1e4753018e23b5fcbf79fd8cbd8f9fb2c780e9852ae97d9cd681e2d78b9d800cd8d350bfd04895a7b396d4502c50255180ecbf1163aac88c65c9df40528ccf99e7d946ca4003f85ed751bc28646a520c5e6adccd8261653969db76c8cecb656693f19e1b3b646890ea89f04d10dd30790685a304bf5776471a2b559c847ce47c4f3528bc8af7427b1d69d2db7c", 0xce}, {&(0x7f00000003c0)="720406f60784d426eef22665c6c301944b1dd922bc628e6c07424f745639c0a84f0fc13e8ad4c6de15a6dd9e6daa76b8ea1d445d756d5f3c19eca19e2c4b59c96e3e7d", 0x43}, {&(0x7f00000005c0)="2b5409813c21b9757b40d48ff01393b1bf12bda6b1294ca9eaf4b7032834bcfa3f3b4344df8e1b465a57b75f3f91dffb2be2a633435ef5615f33a62a1935651b0f0122cf380734e382fea232f4f340b414a331b25c981b35051e79", 0x5b}], 0x4, &(0x7f0000000640)="09c2a55931eacc47d41d7abe13b693f2fea89f409fad5f76e5d9fa509d9537a204f378731830681c5247b564873f6235eefe46b03b6130ad8415a9ed50f6bf73c37ba30cc40819c1014eca01444fa21405887003c1561ae8e4f1534f9b1cb021a9361ba3506b84f58146b1a50f98be97dc540fc192a0a104be8d78f64f42bca6a8554a3e4a823abd0827e5d3bbb71b2c317db1e1bb6b5b075b0af8715c99e580abdf9e596c80e8300d4b3cfeeaa7441bb179394365138151f293ac58489927c609802e0d7adc3625bce30b8b245463e1480f1e75c9bc52a03b3914", 0xdb, 0x20004081}, 0x0) setsockopt$inet_int(r8, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r8, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3e0, &(0x7f0000000bc0)={@random="d00b4728ed74", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@mpls_mc={0x8848, {[{0x1}, {0x9}, {0x6a3}, {0x7}, {0x8}, {0x3}, {0xdce, 0x0, 0x1}], @ipv6=@dccp_packet={0x3, 0x6, "964fcf", 0x38e, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, {[@routing={0x33, 0x8, 0x0, 0x8, 0x0, [@mcast2, @remote, @private1, @private0]}, @routing={0x3a, 0x8, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x42}]}, @srh={0x6c, 0x6, 0x4, 0x3, 0x2, 0x18, 0x5, [@private0, @local, @empty]}, @srh={0x2b, 0x4, 0x4, 0x2, 0xb, 0x0, 0x4, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}, @srh={0x2e, 0x2, 0x4, 0x1, 0xfb, 0x28, 0x9, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @routing={0x0, 0x6, 0x2, 0xf1, 0x0, [@mcast1, @mcast2, @local]}, @dstopts={0x14, 0x8, '\x00', [@pad1, @calipso={0x7, 0x40, {0x0, 0xe, 0x81, 0x5, [0xc, 0x5, 0x7, 0x1, 0xff, 0x5, 0x9fb]}}]}, @hopopts={0x2f, 0x15, '\x00', [@pad1, @generic={0xc, 0x9d, "5a415e136f2c5c24563afb33ee93af379728babe540a2664fbc7c7f042aea720f733db9e830c5c6351103394d3d989b9e439cbd1b31f82eb0f2494ac6075f205bdc9bff0d0db9d50ae116315a3d32adac2ffd697fe3b4602849c1f5b903d9052e489a65ef9652ad3df22f4a98fc41e4f2210eaffeab87c9ad3b21edd13a801917eccba8ae0866af7d01b9c4bd232dd38d0f9e84bdfe2acc4ea1d915d55"}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @pad1, @pad1]}, @hopopts={0x0, 0xc, '\x00', [@pad1, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x693}, @jumbo={0xc2, 0x4, 0xfff}, @enc_lim={0x4, 0x1, 0xf7}, @ra={0x5, 0x2, 0xe00}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x3, 0xf, [0x0, 0x3, 0x5, 0x6, 0x1]}}]}], {{0x4e23, 0x4e21, 0x4, 0x1, 0x3, 0x0, 0x0, 0x1, 0x3, "f76979", 0x8, "db2520"}, "6fc9793c181781e5a4f7cd1e0acff1e7c71861789817fd879f704051f6bfff7c8deeb36f490f562044ab2bb588e8981e627320d17a9ebcbc06d1e43708347ed15b2eecc1aeb32bdbf738d354b720b3c53915ef2ad03999195200c8a318f4376498f7633c5309d4e4dbf480d76484da8dfb8035d88370e576c6a2d4f02512b83550ac18f504cdad77c7e09702ee12d5cf8639bc68d3025bf900baa7bff29d07aae375bf39056e1eae007ab7a0ef309d59931c0bd2e1648ceb4c250fbf0aa825f25ef06a730aba"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x28, 0x6, 0xc, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20044000) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)={0x2c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0x3, [0x1222600000000000]}}]}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="050000000000000063115800000000008510000002000000850000000500000095000000000000009500a5050000000087a45f2f52cef602ee26b815b347e4ed1026ee3b8abcd838b31a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 2.075231305s ago: executing program 3 (id=1895): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt(r2, 0x84, 0x80, &(0x7f00000001c0)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @private=0xa010101}}}, 0x84) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000400), &(0x7f0000000440)=r4}, 0x20) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r8, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[], 0x3ec}, 0x1, 0x0, 0x0, 0x54}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/10], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x400c0) close(0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 1.903603976s ago: executing program 1 (id=1897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000020000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000b5dff9adccc8e5a1d7cc0800"/38], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4) close(r4) pipe(&(0x7f0000000100)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004600002000000000000190560a010102ac1414aa07035b000800907800000003056803af6b213a89bc8e7eb86c7aaf6b9aaeeeaf012e8ba574a7d4f873292f6591ec4f8b8b99f9fa7110024fc00a489522c42b4a9f19a7242b0e6996069498a8bd5aa020ffb3f0d106c74e14f9e6678ba69e3de5c09ad1164d865b5d4579fb438d9c3c1bab127f2d2725cf2648645e7499f673a11a85819eeb08b25c0738db00"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000108000200"/20, @ANYRES32=r6, @ANYBLOB="fe000000000000000c00298000000100", @ANYRES32, @ANYBLOB="88000b56b749c869faf2617aaa01005138791a87b3ccff624f915839b6697fe2f0ad42c3f58621a201942a654f5168e4fd58d410d556e5fd07cd4bd8c33dba882494a3072d2f9a7217100724bb5952375ef531d82de0"], 0x34}}, 0x20048090) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x88a8fb2c, 0x8000}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x34}}, 0x0) pipe(0x0) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x24, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 1.82894907s ago: executing program 3 (id=1898): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0xf1}], 0x1, 0x1, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.706850537s ago: executing program 2 (id=1899): socket$key(0xf, 0x3, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r8 = socket$inet(0x2, 0xa, 0x1) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r10 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f00000004c0)={0xe0000012}) ioctl$SIOCGETNODEID(r9, 0x89e1, &(0x7f0000000140)) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x64, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="0800b123e7ef003f1c", 0x9}], 0x1, &(0x7f0000000000)=ANY=[], 0x40}, 0x20000000) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000000)) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, 0x0, 0x0) recvfrom$llc(r2, &(0x7f0000000000)=""/248, 0xf8, 0x40010001, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005f40)=[{0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f0000001f80)="b9bbbff5f9455314042c453f000a920f496774d9379f20c3b358684144c3c594b9a81b7df11a903570c4a50da5d6780902596bebc2d3b0cd26368446a7c56b43bef46cf049e6fb03e83443405ca871513298810a48e0e1059c180068dd0fce97b0ea92d7", 0x64}, {&(0x7f0000005140)="32ce4482ad2fdaa8e9f9b6593880e8a928761ddb0e3e43481aecdec00c17ed40b6a3a6b80e68cafc8f61c3af1b9f2a2b9df67a92ff28fdce6061cf69fc4b47c6b3a079db094b9a0b62f17e8f35922f171bfb835333407d719519c6abba00111bc3704e1289d447d9", 0x68}, {&(0x7f0000005240)="16345de08029397f88749e879e6b45be1131b0747c22c18f0d774bc63823b92aab0faa654530932968426555b0b050ccc23ede3be455a39f29547db89864a70d7f1ef5de7e82ea416fefc1768a620182d2132bd8e78d9f652868751876f5e3c9a4f58d14ceafe388f984ed9a67d2fd198787e8419fa5b25cdb0ae12826dfc841c179fef216d2fd85846b26732b924ddf1b2e", 0x92}, {&(0x7f0000005300)="145637c4e3c5cf83761fdcebaa8ebcc4ea37f119bd7beafc5d6a3b259e461dad2179b4a61cad9fe2ec4cd369091617deca7075fc925f86d8fae6c0471f391c995aaa5d175625f7f5557cc049c4a65db6807db39cd0a5564bba6d7066dee46651d82050f6e8cc96451213aeb7385331cc7c63ec326d536fe04aff57c23df16e95b097bbc54fb6ccf58906ccbcf8042ff191b3", 0x92}, {&(0x7f00000053c0)="21adc87b21af0f8e206940f534a5d43460fc1c9c8b2e3b6271bbf10116a4cc5ae201635732e69abac7f40b4915796c6932c7d7dc77d44dc75a2601c75ae714684e941ea9ce6558a16d75479cf46636285e968360885652086f916a16c38e6a194e294312bd894ed9673ea8ba79b594ec3523028d56fcfabb593076898ee837ece0942fe54588d936f1546f656313fa6557", 0x91}], 0x5}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801b87ead942fe610321b3963fccb866ea90000786c6c250000e7ffff1f2020fffff8ff00000000bfa1000000008c0000000000f8ffffffb702000008000000b70300000300000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$key(r9, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRESOCT=r5], 0x50}}, 0x200c00ca) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000000)) 1.603868747s ago: executing program 1 (id=1900): r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x3) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) getsockopt$sock_int(r0, 0x1, 0x2e, 0x0, &(0x7f0000000140)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) unshare(0x28000600) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003c40)=""/4067, 0xfe3}, {&(0x7f00000018c0)=""/147, 0x93}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x8060, 0x0) read(r4, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020500000a0000000000000000000000030006002b00000002004e20ac1414bb000004000000000002000100000000004000000000000040030005000000000002"], 0x50}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r10 = syz_open_procfs$namespace(r9, &(0x7f00000000c0)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) 1.548679808s ago: executing program 3 (id=1901): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x58}}, 0x0) 1.536895397s ago: executing program 1 (id=1902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, &(0x7f00000002c0)=r7, 0x4) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000500)={0x2, 0x4e1d, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000600)="6ef8fde7c10a", 0xffe3}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x5, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000002000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b0001007470726f7879000014000280080001400000000008000340000000120900010073797a30000000000900020073797a3200000000140000001100000000000000000000010000000a"], 0x7c}}, 0x40080) r8 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$rose(r8, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x404c840) 1.387395149s ago: executing program 3 (id=1903): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newsa={0x13c, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@remote, @in=@loopback, 0x4e25, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in=@rand_addr=0x64010102, {0x0, 0x0, 0x4, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0xb3}, @nested={0x4, 0x4d}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) r8 = getgid() r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = gettid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000005980)={0x0, 0x0}, &(0x7f00000059c0)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000005a00)={0x0, 0x0, 0x0}, &(0x7f0000005a40)=0xc) r14 = socket$inet_icmp(0x2, 0x2, 0x1) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r15, 0x1, 0x22, &(0x7f0000000140)=0x403a7, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005bc0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000340)="850d052cb29cf4cf59057b2dd1e980abd8ed4c2724dc0eac7cd0e2cce2994a2a3800978d61e97fea6d3b0981b36641f4b9697e73169a538d993b1c8d37", 0x3d}, {&(0x7f0000000540)="b22ce8ccb6521142414b5e6c0b73738fefd91431fd349de6bab084d991f04173a82216746813f63c71299c717dabc83eb6eadc9c435dfa8d519794491cd0e4071984974f79598267b1c222f51a5e7aa2fceb43ec42e6eb6aedd5328372be9d1bf3a50df519512cfad24f82f1f6325b67b3ed0a6b4aed506bc6253cc56869b04879", 0x81}, {&(0x7f0000000380)="2f687bcc84", 0x5}, {&(0x7f0000000600)="86a1bf808669df1a16d012487dc2bfe7452fab977866b8ecc22503a5b62743aebb8cbd365ac558f02450f0e9b1ea2f520dfd0389df6d558c6af2a60246696992f13d0a1abaef97e3a6766f6b217c25a2c8e31c45", 0x54}, {&(0x7f0000000680)="05d78b83abc94c6ed59d949bd1132867a062dbb49398ca4eb14aff37bda4946a9df35da93c14ee4626cd448009c06e6c44488dad20d06517ca6e9a844e3af827a0e4a211b0f6a58f6ce15b2626893c039208c931635cfb4df88b042d3c437dd0990a304a479be707f2ab8b6dd74a5dca99e5499bf84457af5ec7dbbb5f7e94acead5038b6517d0c88fe73d53a38aa5a01aa2f61e6b664bf4462e6d22cdc62f929295b124c76983c91829c7fdb9be1beb2ab0cf65d41e3424bf0126dcb02e91", 0xbf}, {&(0x7f00000003c0)="fd4c064c40a6f51a6bcfff2e5db7e8657ee5d038307744ed510f89b9745974", 0x1f}, {&(0x7f0000000740)="5d1a4f2028471e43d99596e68c466af323a43088d265a4f7a13c351a46573f64737b5389a045ac85707f8783012ca41ec6a266ca1c40025e46ec31f566e37d581caaa0aaf28b4213460ccad891ff7c72fd0c950b85c1bf810617c69a1ee03d5c06264c93e9b3ee465c3c861f4b7df24f8e80d97172062c855f2720c9647c88b39f9e657d005fcdf8e6a6c1f1e6335dbde383b7753ec349", 0x97}, {&(0x7f0000000440)="322a81", 0x3}], 0x8, &(0x7f0000000b80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r2, r0, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0, 0x4c000}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000ec0)="305ec99192ccd60bccee0a1a3f3db8d61f9061e87b3c2004b7be8280412c51d118bd26cdec4ee4875fc5fbeb7f327c94e1bd164c5c4dffc23c12352bf218684958a1e13adc1ff359d23a233e7fd5181b23fe1c05cfce94521933af69173fee337dff6c280949354b1f5a60a2ea86c5fb3738c4c96e3a9163519d9d656d7c8cfce6396b76a713f85eec8f68127787a97f6f02f3a53ea57c4ffd49f2709ed98ca59ed4dc2764791cba4aec4c5c0c8199daa770ac61c01668fb1fcc68ef891f7eb753f1df1be620fd1b03e7463df179195bfb0fd67c3c49a41f2cdfaf98907de384d575594bf655dd8863153d44f5139ce120385c98d6d5c85f7b9f09bddf1a119483ef710447d1a343632efbdff6ee6ffd8ddabb3c160efcbc0264901765346751aae9ccb1545e7bf12d52673e4810bfc79a20884bac4be9899261f5a9a4cee19c18bf3d9b03b9aef9fdf3d23457741752e0873d5c059fecad7bed59f60c82d16d745e9b3a6fb502796080f72e3a4e230fe56cbb27bc95dc3cab6daf8683d6d4cb815ec8373f9282870d4525bdeaef69aeead8ee44a2812e36444fdc1cefe8d55c240a85b9938130641de14eb47ca38137880cea2f7ee66deac9d7c57a1873a6d329b50d37445ecb59c05271f3ba99d6db65929d3df6b0de3f5e8ac0f3e4e204794244ca2ba113e8536f307cd0ecbbcdb75a719fbfeb01ebd8815081e3bae1a48501cadf690fe36b4f3c06723412a0721937bfd4a09af2b069cde2beef39e96034239e59ee3c8e14461aeeff2ee41d46040f1abc3ffa0ffee7ecfd260003054d171138c89e93b6df9fc98ede726381bb77a6cd2ec5846eb257fc38061b2b851847b0a919cf28dcabb89b86089934c559f0fed646177690b9b937e301385a8b1f3bcd0b39a876a11c3b02a7582eb9ff6bb58898ab24843f54bf9a437117d55338c150cb13ca6396db0171678d5cf20704f85b400f558827d34a98cc4a66f36ad7fe36f434f379b3318d45297ab000dd6edd0cee7f7c71d5c11cf75db7df704695bc14d0084451ef0ecacfc79c377b8e61747c36e909d11d63e69c61a01aaa79616c8c3698043907bc35c4cdac8d6454bc4cf6ae2b9f8077df8a1ba4f5fb539058c60b16dabac1970db350141fb06953455c44f91b9638e1ae4026ca878facc7a11b796865b394d79862fd29411b149fe66d506dd09f745c155a3ed34bbd8c75163e6717d1759628b11585f818fd099b82a5226ce62fde2598ae1d2b9e6dcd9c1703dacb879b76f281e60c9f2249491a52ba5c5657e6f35f2aaf9cf751fdfc9a9c8375c634afde333852b26c77c88ceda619498d271969504357eecb5e9adfc3747857f77b7f0a8ba034ca8ffb85b4177abd6af21bf18956f0ddfaf4b0fe86d4a8f03cd425bf0ef45dce621c1aa2ced9f480940214abc67f26521aace38c2050eb867e01f07c8a028280c7eb151cbd2bb1e978766617eaa7f1850d8a48c4010a27e60204e670fd4bd19fdd8d98af94296bbd58a854d16ba0d76c3e110704926ecd88a00e25bca920351d70a29a744a797ffb8d192850b580af19b27e0cfbfdb925e8382fd7e082e0ac5260b0075d5eff8e4dfe3cb86b6746917ff844e852e76ad0a6447c5a23bef26bb39d1c5a828b14a0261e960a82aa74da6de3329f254f963263f224f5eb9cd2fef43d7a69b47eb8114250a38bb81d908a358ab887a34ea43556c2625d50f51508deddf664925f38b3734e9d0ef20fc344d817cbc75610d45348c9a49a9292a591f284532269fef18a3188e8f9aafe63b3f711d333f0f5079b444ca8cd7841a18097b9a708d593244946c78e5679a45d4c1a4d125109879529e8dead69e0ca1b3437af873b49a26fe834d481805846be68c8fd946c08f62ae5808e61eda5c1796aa633da488292f3e349bf8a17f7da0c06d17e11bc44eeabe60c32251d625771b674e75e0c714fba061b9764cf5758616bc7f656ac5beeb6c59a64d9f67a0375fae29317f451a52cc615a0601292056c33927d24ab064a2c30198f834a9f5942d7d796244eb4c5360382d1c3c46947b22c3cc88938f62995f7795a211822e1cfa5102da3b6913ed04a58c3a9923b758ec3250a7b64312f763c8d3ed63985e590aa507739151170638eaf9e218b8ef1bd552eead5501f039a75fff8bd97d7dd37b56563899bbfde9b20e5d273c136c885f96f621741e798089ca03d420d6004459217a948970620025394dafa9ef236baf82f2c5f86c11e4b602509f9408e4ca38dcae518363be2eaaa7a82a20cb325e7cc8453166769d37d79614baf06a2f95c8ccebc942d7a709f955e82993c070949f6c3ff2f230d7c77a0081f7dd4cca32a0048558e05418459741d42b8aa621adae238f39b1b87c073b46724c51cbbb33a8aa4351899f57fca28bd33b8d4ff1f095c8955a2204b6dea1e3cb2a8a3464af4048cedcfe796f5b8e2f5b5138d8069724e9d5515f59dfb0f778fd41dcd502ee141604264feef45cf9d5a244859e3fabffe8d83175f64a7a2c781d4930c2761efb193a95389cfd815ddc6a28376b567676c401eea2ce96414f2e3472fc4b64cd164d665c6aaa1204c7beb3e4c351d24491daae3719ea8da734a1c39758c3098c8ad7d824ec884b3a87ce90d03a33ff2009a9f9d18082c437d2ff7224f1b4e55a67e852c5becfa8d1cc440f0a229ab004676dae00e9eb5109a87730bec7907233d81a54b3a79c57d64ac74899fd61b8b0bf2fedcc297fb6c6ad9027f2f5d6bdb848115133c1ead7aa3bc74f13cbdf7c8b90b09b5f15d87a165d65be2501a2c70d67e43e8621470067405b6a08100fba8b5bcfbe39a2bd54dba5246ceac8d91f66355e2b549679bcac12417efe6b0d2bd6274bf85ed6b491c76e92cde6fe8b226d19694b2d1cb249bab24984498fd54d98d2c7a1ce14ab364cf8e38e7bba657840d789ae3d57b6bbaae6cb58dd96a3a440ff76e52caf8d9175ddab9c277d11aaece9a94e4f8830e0b6922e93ec4047deeedf69752d26ecc1e29a875a6a4db8076a866fe2839d8e7c76362016be486e3d34e15e19d6e43850229bd0283fd032ef0925d20227714beb7632f626da9dfb0c21b6cad05d1fc9710dd89b56eca2e23be19d6d81612fd79e617e45ca58be38252a709d42c7aa5f12bf4040824f8deb7535587c89de36ccd2636c459f41f572376679a7d730b6f90e8a67c2534744da325a9fe118ae8dbaf2fc1d895fe790ea76bd89c497dd1d0270e7e2849dd0ca2630c4706a9d71ee3eb1345331ce4b26e08bc825aec37d31d390ebae7d641e7df4748de1a1a4a04783f6b46c5444b753c0fcad2abcdb0d872777a313d41d35a2a991c867039d351b93ea8b4b7fe021b5bcbd9ac5c1dab435d2ab0d3eaf67d4aec656da081a0ebdca246e1fcef4bf91c5a42e8e3e884e854233dfcba47aa302f9ad3b537257ba8470f64d17e15fb4eb81b27770e3c4092c01fee32028068d8f9da77796f99effbcd55b0408dc697b9110a212359b874f01f3f40f7160e07acc0da3828d12d36301874320eef35f4aa4da3defdca2f68d63b987d67aeaad0456e267a61f70ce5b8ecd1ecf5941b06c50a90d9af18a7dad321e4481909c457c55ce4ea2cededaf869b7f4bcacbf31a859a036a1d1750bb9b34a68550e9a0166dfededfde3ac6434e4b4323ad1470875842e387fd04d9fdb475d9c6fabe8d94f0d80632731fb4601717733c389f492c27842ce7fb9045f6273e9ad6b492e1966deace819d70410fee7768f8d6d56c2f8f7b9fc5f29a1a9d82358f06167034d7069f73de50607ecb5964c0deeb6870d5849b69dfe3aca67745a12027c1ac38d87320d3c9f511a2213915cf2b5855ecbf2ddc77c8657007ecc26a9a74d9e8026d3c949280c98957e0adc90607a45a1779eb33a4ad863eb3caa4739e775ccbf1b8f2ad7b94705bea51dfeafa50e19611177a241fe996cea411b7b584e1ca7e4a89d1f42d4ef286f0bdedd19acb5ffe6569e3a8df379136c11a2a2c8daa40cfd31712635156bfa4dfee9f0802cdbc15439536c422554678b83a4fbedc2bca2a39a4fca5e60930fb1664e690240888d2538c0dfe7f720b0f693231e83f82bb61e82639c9e7382f023a1c140a29ad1be7aec549dcf28b04f85d79e20bb077b2bdacad176ec2e7a40db564a1fb75fb4ddbb47f4c43ae3db0fb2e2ea4ccdb3a1029a9442fae35866553e57ac8ffdfc9dc79aa3af3ceecac76522f4e64963f80fe424c69091941e568e610f2c864b07b71c934fb8996d77a64b10e4035d10702c1ec0448a8860659e4abb95b12b4d770f672c740710ed4f3a2ad9b7c12ffd92c5262ffe911549c985830bda0df0c65c56f9016039bdb1550a7aafae1dc2c1292e16e061229bde00809bf6cf2329e5e9b9975c47d64b6414f21ee0db52a3785697b66e588045d3f834c525e712620abd1c0e630ffae8c7f9622d8d6ea85cbd93e124c2a19e8f2e8ac5ff9bfefcdb0340a4dae7b6dc13c34054f7fbdd551bb8f7a97bcfe1cc428bbd1c5cb3bacc5262f5e8b224504f0faf5c0ec7d0b6ad97bc16fb9da70a4585376225d655c4646180914da5956d1c85b963116aa490cb862d6945cbd0f1825c250891db7611dc5cd8e15556a71dbe4a8df348082849228586ac6eca5a03a9bfd7427dbe37d68a4f5aff26b32c188e41265ea058a23fffc32db991c2e4a3b6044d8ca0545ced591e12a31823e212dc5881d0108601c7f0a79813fae72fd52972d5cdfdaff8ba8abe333b6ecf9e7f146cd6a6746bc8a1065d016bb678b2eb72be04ab2aa0c40eca0248766008c7d5fad2346d652f1641526ab0275500a6f02f3dcdb711c1395c4bb2097383d77b60dc1c72a7ae22113e91b5b5b74da20c58ed11293f4a92f6e5cdd53884b90da5234e1e77d01497e058a6aa151f988c5c742aad60426bc02e2f2fafe8449420d667ea3d8c58131c7978d2e869ac476c37f8f9bb094c53350c75e17e210f17c0a8358f5184d55817b314429764441d30218894aa790834235e7258d9d54b7a2a125ed7d4a3b25230a1122348030bf1c1576f0361999ca3deb05ecffdcfcb812c7693e094cf14e1d3494336bd1612974cea82a47076d85e81852e5e3bbf5f208e26e87e86ea8c091e83fc079b2e6f5a3f04290774d274f1200189cc43d400c2e2fcba0c500d4ed5f468852ec7951d9c800768eb449bb9f070f9144218c707205660e0add092c831c16f572f1cdb278a6438adfcaa2cf34394e1346887af7f5ea9f9e2a441262b4e3b7e5989463bd04b276635691216bc954a8ef2cab157312dfb9c476cf296c26fe92ec67bed43d96966c264f708c84247af1b6653e6290e773f23141cbd0b5e445f1261819a75da8ae7a274880b0ea1320bc27f66a58d5cf63190708833f687c014d9fc1a14f0d0d9212457d40f46c988b7f50583b3d950a1972e73f4ccd4baf7587f8bd4fd570587621e08f005ad50f067f525a00fae7b794e6aa8dd3263bed086cab7a3e4e81e298a91c09845c9683a40f51e4b529a55127647926a3dd372cda35ff15cfa0d75d3b786a2be59ecada322e1b1a3417abd318ea2d3b17d14ac4ff238f9cbea3cb1ee403b8a63839e80782a7bea05524849f728e35d0ad350916f1c45f79179f365e801956c90b8ec40cc023a385bc1bcabd902fd61079d7f7bdbab8bd16d7ad8ac31c4fbbb852aa9b883a9456a888550c7b0e4c7ae7169b0666458edad2c199d76b08398002535ec45f13b34e046ca2f3ee8200ae0830fdb1349126479297bc525e952b5bb2", 0x1000}], 0x1, 0x0, 0x0, 0x4040801}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000c80)="0cce", 0x2}, {&(0x7f0000000cc0)="efe1927e003ce60fa05fc7ec63fa7ad5a74daf568b37c37bd1443bbbbaac6ff43463aa7e23ef92381892062483be969a53bf82ba8eb6318565e5e9c2679e55af403ca77417df21fef2cb59e924a4b67477d7ece80ec66287ec95401fa2c0147443855733dc51097357b495d400528ba015e0fa79f0c26738533b1a278fb41ead1dd484", 0x83}, {&(0x7f0000001ec0)="6024b758ab648e4bba", 0x9}, {&(0x7f0000001f00)="7b2452497690ff0ef593bd07be8a593576ffcd4cfddea2481f90292b5a99c17f2db79f2f0647763bceb3bf982c458ae6cf40b559d4634cb88ec20aa663c514b613a716f94be26729a6a564e55740299bc705dc8152f2a80ace321859a12adc4baf65b76b4bfe6efdbb2fbc41480175da2af08f16884ce16fbd75feffdace53a5c5d86f265500b6fe0775678a43fb859260d012b22d2ed3a6149fd4c2b5f3349ddfacccc2b0338725a09837c93bd68ec0580d39de0e6dc3faf002344fdda17d8bec1cfc0f9d70d46224cf0b0433b7ce4de6f26760216281d44dd5054d4de89b", 0xdf}, {&(0x7f0000002000)="9f88cc47c1d9962e7d1d5b0ffdab649e8841a61d62f98d428c08dac28a54015e51151f2fc48eb5e6ddf8769fba94b9ae526d64aaa7aae20e7dea43d55ca4fa76225ce8bb826e670494e2d192d2a986b05f5ed05c6cfada4041f469da7a93fc", 0x5f}], 0x5, 0x0, 0x0, 0x8800}}, {{&(0x7f0000002100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000002180)="5981be99982a9f33ceeb81d411f3d577d4e9fa0d13d4537b78c97c37295f9d7c41707e6ae94ae6b9dac6af7f022d2d1704d98bbd2bc1a2aaec8a76169273f937c6f2f65a45c5eb2505a9ca3074947b9bc15e900c5d70582075bb92c8b292db045eb830475ded43c606bf9b37d2cd820f09ec59e21f3dd09b4f88c986d9db047da3712a2bdcf2a7bd8f07817541824b46fd964f31c0e5d9c7fe19ec13b8afcf7f65f254b9c70b034bbbf4e1e1b81bfe32c9193e731411fb1d77d98b936cee76a77cc875b4f4513fe8ca84cf925f865bb3d7d7c72bd0406f174267561f83e673cc227672c796249787226af560a287afffaf12ca65388a43aee7a55a967e394ecffd151e414a7e16f4c5a43e93c54f078e2027cdbb783b73bfc4f816dc6dd372022f73190155890f222e3762a97cb3466dbdf6c952ce3602747ce56d124417e440be1ad2d7a093eb484f5070cd56bb0fc03da274494ceed0ba581d036b5b50e02b0078c9dc0acb6e145032fddaca286c06f4eecfb9933f5d013c05bf7505257247e77913afe3d63cd811b7120c815f6d654eb624575aaf98bc5c64c9366876202bf3c959ff65480b7a6035e228e9476f288c9fd063268a05f44ef044bf8235a6ea4fc628dbe4e87420ed83ddbe4b3a3c5d9ae429961776258cbdd0d21d7afa05ce13765f947391190546bf85b22f8092d76baab718e4f91d25c9af72d0222ddcb15e0028e995fd18f895c59dd13539ce077e508282ebf229f802438e816921f301044284b677faa9dac358dae86f3f7cf8b28ed2e95dc284ea62702ccb84f647422dc20b9c3dd0b919845846dd8198f0a61489d552df9fc5d17f248b669f6edc6942fb3c0c74ec229ea5d9f1155e30c8b414fb86dcb05e47e6ddcd69263a67a5ae767259b90379f937c7eb84c1a3323c762173373e708580286287cda5807b96345845106a1d45d59e6527953dcbe411e18a83d6b670be698035f2fd95bac54bcee1bde62d506a510cb3e927168c0545b0d7a8a94819b484c4a8b709b79a4fb8e0cfc4100589be33b4943f45149fc640036462a8207a4c59171e32d23d62fe00f8c9c0647e23e844d91aaa902beb215fa6ca9c743dfb901b90d120580ac0ace04bd0f40477d32bdaf37dd2d5ee08c4d5cad8cc6e54f6e612eb421a785dcee20c9e6f2556680ef549a75457d0ce5334f6f655f8274426807ea1bedeeec417cf67eebb33ca1fd1f6938b75bdb851b6a6fdfd9010b7b447e8ace696bcb65fe8d133f8282efcdc66c080751e4076e6da80d462a53fc527ef05ee751d34fdc8d98772fa91f44ad7d15bcdcf79d3552361903bd3d7cc8e5d58edff2dbb6992f08eab0f125a545fe082ded2bab332cdc7bd27cb40bcb176796dae6b8d11735f2c3bff4d2d29ea578c1e558c957bbbc48b1608b50696f41c6ab5217a90195d75ae8ac0f233ccbe620e6885c6ba4d015abc84d1278d9799238b0929dd93c95e691361910bae6cf377582570b10813afdfa344fc0a7a2ff98a1ceef9b798c450ef50e80d93e8413761e1e610eb58aac7cca7de60b97849273d3b622b1a1356c727f3fb2fe554f77de2bc413e7914665bb024fde5d7e63e3eb5b512faef96ce043f2173a9a7024014c62eaef0c26f3f71a4259e65cae687fa17599eeaaae3e54a0cfbdd21c30224b0db02f8a91e72cd63127e60ca2e878367462a76962d4df40539f5923ef97ecf13d903497b8ca507ad7ff1215760240de131103fc9c5b0871d59072f62d541b2156a79f266e632789634035e77766ea06028c8119e7eef1d48604406ac3c0e4ba75e39b08bbfe0b7ae9b41939ca27db7a275d2ccd206fcac4a961481d0a0084a7dc774f55a36907df074f618a642e257153b910da93459bf1d6779f3fddcd93f3fff13da21ae4cd709648f162910f74aea57db2e3f270a8a7d042ea6df588238aea66123a70434bee6f213145bd5aff06bbade4d5dce4b34bf6670d1de30a7da43b689e0ecee6d68a3f247e6487480ceae68bd14c1dc0489b7cf7207ab03390bdd63254fe891ff3bb6195f2fd31718fb4cf50183764add50bc28294ec8b8e9ba4e8717210a22a30aac56ef9b8f3b898e86c720ebf5612262be0c68c3544f89520abd97d0c03fe3f0fe03338804c57a81773d597fe0db0367765e0d8ad1720862eb38fa24df6ef8c2726cc2d4428013dada04b727b0b97b4a4a9e2aeca2affcd11783f8b19e8cb92e7a12543b4d105cb9c1f7342260e74704dc1daff566d46cccafa159e79a3faf1484a87d81a90473cd5baab53555b2c7a94db8ee4f095dddb6acf8c060f5f9740ce4398900cd6cf01b5b3aaf8b003ace9228f953a51f0a41a268c4e04efe65e2fb1363ab6cdb5860a1655fa4829884b2bd57f3db557930b5b830904ecd001a87cb565fadd3c0244d604918c55169fce7c663a9158e14270e96dd083640fd8ab03900e1250e25aff7277003991210a0f0a84acec99943917b9d55b57611ae65a19406e3abcd8d3bd7846a645c827ba3252efcf9e0544b06e92b5c7a35029e53a96679f5bfd8b859f66fa916af91522c62fdfc67fe01cdc04f26b3de4e32b355c028ca3cc0814dc7bdde0227c3c1764f13d6888141b7118fc372243aea9b089360dd38df7b266cd575ccf577b3f866895cf875c8af2abeb7501a2c955a40f5366975458e4b8bf186157f2b7fc49266f1a6bfa3f9bb5aa0d6b66de3d0300ac191b7be061e12fae7026157defad18a82572500628c57a849b598a0a1793ac631e45cbc21e60a0465717b9f0f0cbe8ef50ba404d085068c2c425cfb07aa3c6c569dbacdb976bd7164c4187a51bb56930f48bf709f71b3043fcd893bdefae486007d08939a91b5120dc3602a0612ca38edb2ef586379ea57d1c746b4e890b345137bdfdb485c29b36c640135205efeac4d7ba3668fa2438890a21344f6c037b9b3f5370f54eb038e3c574fd6eed4ca4394d6b87f3532ff14d1d71ac79b9af883015a3f12dabb0a457c8c103bb07dbacb770cfad63c466a4d9974386105ef9c92675e4cce64389df1aad1922b1fe4bc0bf97181b3146f7bee3aed572c032330631f202020d2f734086bfd90776518f391f2099594dbb61478ce53cf10f937e16bc9326ca9a9e00e01adbc83f44a56ae9078f88ea9741035136243272898d06cb3886918893d5a86d3f91c5eb836b6363ca72430e2c70d1bdd7ba667813e320954f9f243d2d34ade8e5c9f6fee9b827c7d0bb33a608776e72e43c37b91ba55e0cb52747e45b8104dab7b1e2890cdaee21c41fb4143855eea3edb7bfadf3e579efb37feb4a447b5b1693788ca84488fd24759a39d81dd1e854620b8f4a48b64e578a9356abe62e0ff8c50a85b842bf81c742726883c0bba10554c65b76db6e580591e217374cbfc1e23a68fe3e177b480eebeca5c483663396bb2faf846096d167060ba9a4befd4f1c8b5f7cb5a54c6e5a7b232f7a8a214ae46972f70b4b24fb3fc2452e7ce7457dd814e4320c588ac3047f5252ae272580accb8fdd7af89a597a4c7e16ed437c09b279977c353a85c62d3a52f29bb83f9b526aaaf8a428866c1f7ce5ee33701da0703e0dcfd457b10bc8cac1ff2a65f2bf32744f53f1167d548ad61676f5b47927b4da0be638b9d79e3d5d6f6794fcbbe9d79eed71a2f3b091b38bafcc9fbb943cf4e02f3f54b9a94ebad43f66e5415fab9f037c1c3a87e2c16d3c5623738139330920a80e2fbb7559cd32b988ecd384d37d054975d4315df3d2fef0602d198356e7db94e9bd8cbb491cdd4c18702160e85afc6bad3daa1af6e34e4f5d9b1333af175c201d0e61ad3b1aa461939cf7defe9c29fcfbf67f44c49e601f144d164ad592ad2a86a20326d1a2a081f292315dea476f586a526b4253f97a641f48f1a0f4ab59e4b28f79346b0911548958244b2aed514f1a3c676d8bf81f4c54ffbb2b80120243a27ef5a7bf7b40164f2bfee1653d657afedf77d5c7c86be19c99b866e2ca0e4c7e98a681666c1a6f010e46b7ca5dd90c8e7fb5b0a2d6c3fee80b7aa519296964d8f50e67146c25cebdf9008d5214bf56a74347da4e8e59f87c9429ef389168fa7af5e2bfba92186ffc3bfaefac1735686119d509720ee48aade46de85f8b3ef7c272af2f7fb7f2a304a882f837349f8b42dd9306aafc8cc8966cfb7c778bc37903e1c6974f7c8d78177b7cfb980112eb7a55b4b004b5be0b0d79cb07d7c396bfb54ea6010c1710d8a2e508c7502a69089152005b2c6384b7b93f42034024b06d8671cda3513fd6102892bf2537bfcaf96913265aab6114cb0948557357b63cde04bf88c5c8071b4eb6df20f61fe994f94eeda3f0d771c07e8336616cb97a11a777476a3ada471abe9fb3bf4903be49dbc77722fffbb2ea314c547a407a33f54531b8f58beddd29b68aa03b05f783c46208f18b7a86914214023e16a10d90127f2afef443a309504922d286d911bce0bcfb8173474a90b88f65b0a5129486232b911af17346cf7e5c1f9a9057cfee78a09ab62330d30b67bf32c03ccffd2763dee00c76d1b18f3bf3add7bca70b7af7dfb39bc488047bc2a0fba8a4aff4b8b9211b25cb1e7d377f36e7d0fe9e84dd0d0c83f69ca9e40b077105bc685faf2bcf42b62e0d597809bfad37da903a5e4c805dab209cb496af7f33bb3bd65e3c93dfd7f7cab051755fc2a867f117441f81b338c484044d6438163f9bdd29f698bd042bab420485a387f3b300b4845bb428d27bf9e299be3454ab3a078164b3f46d930c6b30bb9e091d176399709fa52dcb831f81992681840d297eb635cbbb2809c776e10e994ae5c6a7913ff11f8bde630b115ea2c4cc0c0efaecd2eb3979931ff96f459202e9a354ffc99dac787f706d82a19b56db944a1abe66679a4fb971294341a5a92d479cf8ca15b8434d9ed4ac7e0b2237e6c5600b87a887c7c6f548647562d5964b8f2a1cdbceece68850c73a211a4ae03f4d1d61c21d1b45c94e29b3c4cf8f33160c51d6ae1c1988a49f844eb702205924b84604c2461a234717b611c5943f61c7dc21141796af38276e5f5f7f4a3dac8ab517235ad0222308ff07b63178777a8500647500b914a4947a20f1c5957dabad30e9283fbce242b7d470748668fdc785faee1a74c3ccb6b69c73cf56fc1f819b66ff1dd810bbeef3e76b6aa997df0a6efe889f5bd05dd73beb94cd03165494ff60bca6353ac7a16dc8f5e01a8268b8edaf0326cd8a9092344d27ecfbc0e678920e9c8d964c1e17fce2b365b2c46a90d2c97163c149069290374d459b5c332113a3e8ef0cdc53cef44b3ee72ba90a167b89ceb044aa8b1ea0d8a2291160f458dd861fd2ac417f81f92cd6fa55b2353c53861c9bcde1a7bbad893c92646f85a263e907c995e0dc5648a1b6f82da71ea73ae63781f8702dd6da5292bdf1792003e9cc57f3c5033f53e82c2718709a7008cb07fc865a32b110c18dcc14b2c56f0414790b6bf616758cf443a5e0448bc38b05154aa8d56787828d161100c221998a8c2c9a6d4e200fa304f33043a74ec6cfe300b6c1c63011d33303691e936e2bd357c326aedef7bd87ddc4a898e8ae68691aa2e8b06935ef5c0d21f1d86c1465026711f3be50c51bf55628aabae956f192069b1bb3f12fccadbd1aae4685445d811256d69ae2878ed25dc84104bc8c5acc7bf96a80804ccd634ac2be3a087a4bcee28788c99d2795c48833f8ab9866f2f73280eb1fac39ede801699a699bf11910c0ada0db02257bf7752eb28fd40a08a2fa00e1d1ef4e2419f52d4e24f34fdef", 0x1000}, {&(0x7f0000003180)="1bf3a8047e4cc12b70820d70f6b9313e933b2a1e9c7b4bf664822bb7abf45e869cea375887a6eeb4190d441f87510764fb9781f9f1a1c88925cf264d4f8335b1a0ceeef9adeaa4327e69501835166ad30b203fd6837116442bf9dd4fb41850a241191e8631ac24ab9aa870ad8b0d3bc382757f39c41f1fec66e3e665a05aa03db287d4b88a7307d96783159dbfafd552c68822d8bc291c9f801b6f8e88cf905b8e3c4ad0eb095288547ee545ebc7", 0xae}, {&(0x7f0000003240)="27b406ebabdf285442b11115a3d38af9fbb57ee2b3c40b2d8cc6123297df5ae56443dc9ca01a020e46c7edf84f5df1e716bba51dadab4df5d2df681fbea3201621408c80c3eb2644ddc173b1c46d2ffeebe331d2865241469cdfd665a7f2b5b3659b59", 0x63}, {&(0x7f00000032c0)="e4bd869152fecf1a2e685753233e2f49ba9cc0a67f7de45627437a04b3125f3ab8da5f069f46c6e283fe5aa5475e7cbd370bff4010c0fde6add128d1cc665213cf1295fb5157d2dbea0f5c543514063487cc34a1dedc64981907e44530924a88e5f7c7ff61efd29ef282e4dcd70909597ef1aea01e15f2ae4aca09004de05bd518e6899cae4581797c26a9881c080b5d21d9f508dc8db9dbfc78f23d67041c40e4718b60a27b68fa649d52a28c83c8f668b7de2838a2bfd25e908d5aab3eb4d2e192eed21639a3b61a40f1b60332ff2bc6b0a4b6e10e62", 0xd7}], 0x4, &(0x7f0000003540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2]}}], 0x78, 0x44001}}, {{&(0x7f00000035c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003880)=[{&(0x7f0000003640)="30bd63bd4f358208b1b2163fadd28a7d864085800a164b9f4993211549f238f35527aa40c40742b60af6d6e8640e12a5e5ab3cce4f52d9fe0034c55494686abfba75111084bb8d59da583f33fbdf5390accfa7fa02ece657c4cdb7d990f8b04e4985c30e364a4fe2c9b8bf14ad6bb1002165f482cccf945204b5d2b0a599500ada2506041a3e389d6c2e1e9d5d35878bf1c671a3896aa9bd4340a83da1", 0x9d}, {&(0x7f0000003700)="bf60c5803b5c0060d5dbc02b1768d4f402a5e807f0bcf69173b6ac70cbf1e497c460e503dd50885cdbadf99e19c923c791472f4bde6ed98462594546bb9235ae62714ee151e638854d2be1772f3a7d762aa92e66db6a93f67aba8cb8b71cd887df896fb11c014a359ebcc8049e01977187ad41d35ac8d325a7e5a95569d4a64c9cd4f28376a5d921b421acd0d302eb2e3e2b42b977419e38322f2e", 0x9b}, {&(0x7f00000037c0)="944b4e885312656f0d32ffa8cac1e5821ffbc04c9d791591b9a2b0f5ea56b399303fa3fd7a799f911d7d761a5b9c860de9867ae20293252183b4e76bea70f9efd2138742da157c3b36e03bb60c95e8fae7fbd3c370db2a1aa6ac61cce8d3e40b2864c1d1272bc3b3f4ed93668c8d5878371a683e784edd99362a0e2fb30d4d889eda72b43be986214b5dd17ff371a474f9ef8abf30f6b7f09e27e606b238ac8cd2f9763f9a7ec3fab2bfdb5ba919578171e37eb4375c6e653a372d47176d8676", 0xc0}], 0x3, 0x0, 0x0, 0x4000}}, {{&(0x7f00000038c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003940)="3aedfb419b1a288f9e317c0dbf0f4c706fffd74bd52d1e6d1e3f91685d746640379826c23127652e4b337a59b1c41ca6ce4b47e37c6efa48720f68f7aaf949dfb493c088d2181f50b8230aecaf989a6a54c73498293d16b680297e8590ea316610972fa48ebe013fae2522c69b67d78daabd534f7e0b95b8bfc3102967553a3615000aa1fd52b9a170e5d3f597b7748104a0ffe3b3389cd53368cb2a18aa0ab8ba4b401c8508c680a02b4dae982d7cffe2cd436178fe89c03f673708b91b745012a3", 0xc2}, {&(0x7f0000003a40)="f47fd31490c34b35ef8d0a", 0xb}, {&(0x7f0000003a80)="0f6e3417c4bfe8e223e96cb7f60084994b03921c3144433573b86ec50f13ee732ed65a6a1b4dffa049e91429363997f21eaba6352eb873f6bc68c4fb0d70348b150bbfe1bad7cd7c5b7b9993afcab54593dd0adc80de6d21e24f96f9b46b190f55fdaf9d90d77a9a55c345ba97605b03ff0054f5d9d1e2c184f8f52fe79c7c975f89698aa7fdfaf765b582bd424ffd1c9e6dcf8ab28b72acf42a690ce588bd6803a77a", 0xa3}], 0x3, &(0x7f0000003c00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r3, r4, r0, r2, r0, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r2, r2, 0xffffffffffffffff, r2, r2, r1]}}], 0x78, 0x10}}, {{&(0x7f0000003c80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000003d00)="07fd8ee7036177f5d5d55b63051dbd", 0xf}, {&(0x7f0000003d40)="629a4ce0105deaadd3e3b5d0ddac7c35d84ad2798e26b0ed45a27f3d860351bbe40a50a5a21c168d51ef4e533f84c5f704a73b084d24016c7776f33b26e8d069c95efb215f4f2a3e6d4ff61a976d541a1e7299ecf60c618ed121cc4693dc0338103437ba12490ad39bd472c7f14fb9bd362118b25b00d5f003a4a857ae642fd4c64292374b3094950bd36436082da7152308dfdc6e6d60a090f69f395fb198cd12d088d394c22e708b1b6d43795c091c9d528643313abe0331d23ac22e003b3a8b84f830fbef374822ed11f855b36695923d73ebe947354cfaa8c357093b33", 0xdf}, {&(0x7f0000003e40)="773851e681865727d948316d8d429bee641932008307c09cdd1c439d579f52781e912e64a67bd36eda79bfd272c5c8aeeedead52354f82676d2d69c4277497e58757c388d23c14c3efeebed9dc3eb8035a0a27efdcc8ff", 0x57}, {&(0x7f0000003ec0)="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", 0x1000}, {&(0x7f0000004ec0)="c362a6e293c0dd3082c90aa5badb53ec577c04af224bf13e3f987b712579c3049ffd4fb801b47e29bf0c95bb353e26f17889ba173e985f34958fb35c151574935239055e623d9b27075c99158b839e5b4d484cc2c46b66f79a44aef84fabf6b2889493b0ef4f6887972465e299e4304e1c24295108a4919441a9a5591cc59dfbcb4b6c9af033885c94626b4cb573ac3a7339a947ef2ff868dfba56abe92c208de267dd40bb1b1e36d3d3c896a7e1c3e25ad8611a146df065f69a09b35bcd13eadea2c5d10bb6f8d2903af3334c0a2623dcc1f49ceaaa815bc4", 0xd9}], 0x5, 0x0, 0x0, 0xc000}}, {{&(0x7f0000005040)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000005240)=[{&(0x7f00000050c0)="7c1886c117add1932ffd294a9c5727a93d84eef302acfcafdb74ef0e22a003fb127aea69c9a7c459212a85da5150ae9a560598db751e569c62fdcf0c2a4b95be1b467f3fd3d165f290a3c4777d6f54f7e26531687a0661ecb2c642064fdf55aef2061e21af5e2786a8397aa7c1015fcb295bb943b74b7ab6aec1fcf440f822762de6f686a8d1b081aec56cc3297ba607fab8225102681934d38662bc5de301c3345823bfa97ee1458f", 0xa9}, {&(0x7f0000005180)="d16a0967c2a87a973b033aacb71118244346bc8024812923a959060db11655366749c4963343738a1966efc157caa65ac05b0a8290b1ef01731d7c29c89f8423a0efb0021adf2ed31045ab0e65fd0ed9ecb380c43cac1558685eaa327d50ed181ea5304a9bd7d0eff478f7b70b6604df7f39a46efb538510b19e1410168f7bc318237049d7be8376be582452d04016d7bae5efb8", 0x94}], 0x2, &(0x7f00000054c0)=[@rights={{0x30, 0x1, 0x1, [r4, r4, r3, r1, r4, r0, r4, r1]}}, @rights={{0x34, 0x1, 0x1, [r1, r1, r4, 0xffffffffffffffff, r0, r2, r2, r4, r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, r2, 0xffffffffffffffff, r1, r4, r1, r3]}}], 0xf0, 0x20008800}}, {{&(0x7f00000055c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000005840)=[{&(0x7f0000005640)="4282c8b987f018ca8d7182c9ba526fa3f8f2d27ad88208fd455e2006e0bcccd0b2014d3a1559125ba8bfd055ac215c036dd0501252e22b7575dddbbd377927f17d03ba490029b7ada34209f124d4edbe7e0bed7befad57c2f74d20bbedd1bde4596e578e2e687b048b0cbf756bed2293930fe5d7b8a033c456d6c4ab", 0x7c}, {&(0x7f00000056c0)="f9161355d11753c5df2d47a4674e62ee1d5226a8d7eedad4aba267f86dcfe671ecf04df50751f1b934d239dfa2ee94af096e7110628f73d8ff830615ce1efb057d8ad78273456ae1aa3c66da8ed2bdd26f93f6fd05b6a79c147e6723cdf68daafd280cffc4c844d602a8bb4ad7e7c6f0740b02cca33eb166daf0d977f5ca950eceaf2c38e2c0b9672a17c11ffbc61440acaad3f4dbe6f02cb0309f63643c94467e", 0xa1}, {&(0x7f0000005780)="8c83c1b388a862d1b4acedd4c4c938295ce2342d0134e09d802f3abb26a9126510d5b31b2baf86a20f2b6efea69bb76981285aa0f26161aff15dd188ac6968808c5ea8e0fc2a24f2ded3260bf753fa4a225b9dd3f674d5eea9f65bf4a5a3948fc8b2209f414ac53be408d9724a3bb43692c074f6e4664eb73df96baa84093ed60457321dc0a2dae051e4c0b1d36c3e304407b861bd4939ac8da4e260197b33d2a30863de21", 0xa5}], 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000000016ba9aa62d4dff5888a349afe", @ANYRES32=r3, @ANYRES32=r9, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r10, @ANYRES32=r2, @ANYRESDEC=r5, @ANYRES32=r1, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r14, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r15, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x40000}}], 0x9, 0xc000) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0) r16 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01002cbd70008400006206000000080009000200000008000c00a80a00000c001600fed0000000000000060001000400000008000b"], 0x40}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r16, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xc6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 1.381532606s ago: executing program 4 (id=1904): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000006"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x2, 0x108, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x800) syz_emit_ethernet(0x6a, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYRES16=r2], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x8d666755a8584635, 0x0, 0x4}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x90) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000000)={0x6, 0x7bc, 0x7, 0x7e0a, 0x3, 0x0, [{0x1, 0x7, 0x1, '\x00', 0x184}, {0x3, 0xabd, 0x13, '\x00', 0x480}, {0x242, 0x6d5f6825, 0x0, '\x00', 0x3}]}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x200, 0x70bd26, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40818) mmap(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0xf, 0x4010, r7, 0xe5f49000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0800010001000000"], 0x20}}, 0x20000010) syz_emit_ethernet(0xbe, &(0x7f0000000580)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x1b59, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "fbb21a45d76f90027b0ef0c2e3cfc4ca9906c7112e27f27a2c086f6c9fe7827e", "52aa2145dd2002954f253c51856691c6dae33708d1ee94df87c4d56dc08f30c78ae1cd2bccbf060487bf39897cc11adb", "e98914bc40a34f8703586ff4225a999e345f0a3f58505296e5b5bd91", {"97d3ccb7f2720f3e461e34919a13dcb5", "52616fb8e500000080000000000c3027"}}}}}}}, 0x0) listen(r5, 0x235a) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x1404, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40080) 1.32318842s ago: executing program 0 (id=1905): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x10000000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000040)=0x3) epoll_create1(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000030400000000fddbdf2500000400", @ANYRES32=r4, @ANYBLOB="60bc010034a705002400128009000100626f6e64000000001400028008000b00", @ANYRES32=r4, @ANYBLOB="08000700ff21249c"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x8010) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0600, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) close(r1) socket$tipc(0x1e, 0x5, 0x0) 1.201344883s ago: executing program 1 (id=1906): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000003b0514000426b97000fcdbdf25080001000200000008000300000000fc70e4baf18a11c927238e68ed8c00b59b46d69508bb71eacfa1378fb6325440047a450713400e6d6dbeaa9519331bc16077323d6a0d44970d5c569c2d1de682b6162bf62572f53a8802ff18afa22b38f9afcd2d4aad540e42e2a7aea640e497b18d7be7137891383b73ff48180661ed537a1b0e9ceb9791ca61409c634c3be5b8ac4ca5ade23029a6527028341b55cf70226ff61f9d7c003c014041492d0b2e87d0d5596eb5a06160"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) (async) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x5) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) (async) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f00000014c0)=""/259, 0x103}], 0x2}, 0x8c}], 0x1, 0x40030002, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000001600), r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'wg2\x00'}) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000400)=0x6, 0x4) (async) poll(&(0x7f0000000000)=[{r3, 0x6040}], 0x1, 0xfffffdf9) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd700000dcdf251200000008000300", @ANYRES32=r8, @ANYBLOB="0a000600ffffffffffff0000340081001a0001007f0000000500010008000000050002000200000005000200020000000500020001000000050001007d000000"], 0x5c}}, 0x0) r9 = accept$inet(r3, &(0x7f0000000100), &(0x7f00000001c0)=0x10) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000200)={{0x2, 0x4e21, @empty}, {0x1, @multicast}, 0x8, {0x2, 0x4e21, @remote}, 'tunl0\x00'}) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f00000001c0)={0x2, 'gretap0\x00', 0x4}, 0x18) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000dd68a040005000000000000010000060900020073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4044004) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000004000000711076000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 939.997116ms ago: executing program 1 (id=1907): socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_dccp(0x2, 0x6, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000060a0b04000000000000000002000000040004800900010073797a3000000000140000001100010000004000000000000000000a"], 0x4c}}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e6900850000005400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x4f, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r2, 0x0, 0x0, 0x4000, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 939.422815ms ago: executing program 3 (id=1908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) (async) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000016000000b30000100000000000000000cd97ced9cd7c84647fa439182512ae9d9462ad309bf29b2b7691872e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x7d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xcea1}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x8, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x1ff}, {}, {0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xcf, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {0x0, 0xa24}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x6}, {}, {0x6}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1000}, {}, {0xfffffff7}, {}, {0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {}, {0x0, 0xfffffffe}, {}, {}, {0x0, 0x7f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x5}, {0x2}, {}, {}, {}, {}, {}, {0x3}, {0x5}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006", @ANYRES32=r6, @ANYBLOB="0000000000000000660000100000000018000000000000000000000000000000950000000000000044030000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x2000000b, 0xfffffff6, 0x40, 0x3, {0x9f, 0x0, 0x101, 0x4, 0x7}, {0x1, 0x2, 0x81, 0x5, 0x3, 0x6cf212f}, 0x0, 0x101, 0x9000000}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'netdevsim0\x00', 0x400}) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 789.852502ms ago: executing program 0 (id=1909): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000060a0102000000000800000002000000040004800900010073797a3100000000140000001100010000000000000000000000000a"], 0x4c}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xb8, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xb, 0xc}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TX_RATES={0x64, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x18, 0xc, 0x60, 0x16, 0x3, 0x1, 0x18, 0x3, 0x4, 0x24, 0x5, 0x4, 0x24, 0x60, 0x16, 0x5, 0x16, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x18, 0x48, 0x4, 0x24, 0x30, 0x36, 0x12, 0x18]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 767.951254ms ago: executing program 3 (id=1910): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x1000, 0x4, 0x8, 0x5, 0x8, 0x8, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/191, 0xbf}], 0x1}}], 0x3, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x61, &(0x7f0000000400)=[{&(0x7f00000002c0)="00cee26e1fe3b5047cf8084706b3988ad9fc7596275661ba8bd4f145bc4a7caf9d842cd7ecdc956da50049513272be94385e1e189120259f7618bf4cef7ff89e0823c3c7", 0x44}], 0x1}}], 0x1, 0x9200000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe000000007110bf00000000001d300200000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a71"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f0114008cdc18"], 0xdd12}], 0x1}, 0x20040051) 699.35936ms ago: executing program 1 (id=1911): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000200)={0xbf4, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1b8, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x7fff, 0x462, 0x1, 0x9, 0x5, 0x8, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5b}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x20}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x46}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xad}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3d612171}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x38}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x574, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7a}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x200, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x18, 0x6, 0x3, 0x16, 0x24, 0x24, 0x18, 0x6c, 0x3, 0x16, 0x32, 0x3b, 0x48, 0x5, 0x60, 0xc, 0x36, 0x24, 0x9, 0x18, 0x12, 0x340463c7b315431e, 0x24, 0x48, 0x48, 0x34, 0x36, 0x60, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x8, 0x3, 0x4, 0xff, 0x10, 0x2, 0x6]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0xb, 0x1, 0x18, 0x1, 0x28, 0x24, 0x6c, 0x48, 0x9, 0x0, 0x16, 0x36, 0x36, 0x18, 0x30, 0x0, 0x2, 0x18, 0x1b, 0x2]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x1}, {0x5, 0x7}, {0x3, 0x2}, {}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x6c, 0x12, 0x3, 0x2, 0x60]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xea34, 0x6, 0x8, 0x5, 0x9e, 0xffff, 0x8, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x4, 0x6, 0x400, 0x2, 0x6d30, 0x4]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6, 0xa}, {0x3}, {0x3, 0x7}, {0x5, 0x5}, {0x2, 0x8}, {0x3, 0x5}, {0x1, 0x2}, {0x1}, {0x5, 0x2}, {0x7, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x4}, {0x2, 0x2}, {0x1, 0x8}, {0x2, 0x2}, {0x7, 0x7}, {0x0, 0x7}, {}, {0x0, 0x1}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x3, 0x5}, {0x2, 0x2}, {0x2, 0x9}, {0x1, 0x5}, {0x6, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x2, 0x7}, {0x5}, {0x5, 0x3}, {0x7, 0x8}, {0x5, 0x4}, {0x6, 0x4}, {0x1, 0x5}, {0x4, 0x6}, {0x4, 0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x2}, {0x3, 0x6}, {0x1, 0x4}, {0x6, 0x9}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0x16, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x0, 0x6, 0x5, 0x1, 0x0, 0x3d]}}]}, @NL80211_BAND_6GHZ={0xe8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0x2, 0xa6, 0x325, 0x4, 0x7f, 0xb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x3}, {0x5, 0x7}, {0x5, 0x7}, {0x6, 0x8}, {0x2}, {0x5, 0x5}, {0x2, 0x2}, {}, {0x0, 0x6}, {0x5, 0x4}, {0x3, 0x4}, {0x2, 0x3}, {0x1, 0xa}, {0x6, 0x8}, {0x4, 0x8}, {0x0, 0x3}, {0x0, 0x7}, {0x7, 0xa}, {0x0, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x6, 0x9}, {0x1, 0x6}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x4}, {0x5, 0x8}, {0x1, 0xa}, {0x6}, {0x6, 0x9}, {0x4, 0x2}, {0x4, 0x9}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x6, 0x2}, {0x0, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x2}, {0x3, 0x3}, {0x3, 0x6}, {0x5, 0x9}, {0x0, 0x7}, {0x7, 0x2}, {0x6, 0x8}, {0x4, 0xa}, {0x2, 0x7}, {0x0, 0x9}, {0x2, 0x2}, {0x6, 0x5}, {0x5, 0x4}, {0x5, 0x3}, {0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x16, 0xc, 0x3, 0xb, 0x48, 0x30, 0x1e, 0x24, 0xb, 0x6c, 0x2, 0x16, 0x48, 0x6c, 0x1b, 0x18, 0xc, 0x3c, 0x45, 0xb, 0x5, 0x1b, 0x6, 0x9, 0x18, 0x9, 0x6c, 0x3, 0x7a, 0x3, 0x9, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0xaa64, 0x3, 0x1, 0x7f, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x4, 0x9, 0xfff8, 0x7, 0x81, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x6c, 0x48, 0x12, 0xb, 0x24, 0x1b, 0x60, 0x30, 0x0, 0x18, 0x60, 0x18, 0x1, 0x6, 0xc, 0x9, 0x9, 0x1b, 0x9, 0x3, 0x30, 0x30, 0x79, 0x16, 0xc, 0x36, 0xb, 0xc, 0x59, 0xc, 0x16]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x29c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x78}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x280, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x33, 0x1, 0x16, 0x2, 0x48, 0x1, 0x18, 0x6c, 0x1, 0x1, 0x24, 0x1b, 0x2, 0x44226f6749618e, 0x4, 0x3, 0x2, 0x1, 0x36, 0xc, 0x6, 0xb, 0x1, 0x48, 0x4, 0x6c, 0x60, 0x49, 0xc, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0xfff5, 0x5, 0x8824, 0x6, 0x200, 0x1ff, 0x101]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x4}, {0x4, 0x6}, {0x6, 0xa}, {0x4}, {0x4, 0x3}, {0x6}, {0x1, 0x6}, {0x2}, {0x0, 0x3}, {0x7, 0x9}, {0x0, 0x1}, {0x4}, {0x0, 0x2}, {0x1, 0x4}, {0x3, 0x7}, {0x7, 0x8}, {0x7, 0x4}, {0x4}, {0x1, 0x3}, {0x7, 0x1}, {0x7, 0x8}, {0x2, 0x3}, {0x5}, {0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0x7}, {0x4, 0x8}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0x4}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x7}, {0x6, 0x1}, {0x1, 0x2}, {0x2, 0x7}, {0x0, 0x1}, {0x2}, {0x1, 0x8}, {0x5, 0x3}, {0x6, 0xa}, {0x2}, {0x5, 0x1}, {0x3, 0xa}, {0x0, 0x3}, {0x3, 0x8}, {0x6}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x3}, {0x5, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x7}, {0x0, 0x6}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0x7}, {0x4, 0x7}, {0x0, 0x6}, {0x1, 0x1}, {0x3, 0x5}, {0x6}, {0x2, 0x9}, {0x7, 0x9}, {0x3, 0x7}, {0x5, 0xa}, {0x7, 0x4}, {0x5, 0x4}, {0x7, 0x7}, {0x2, 0x6}, {0x4, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x9, 0x11af, 0x5, 0x9aa0, 0xbc2, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0xb, 0x1, 0x30, 0xb, 0x60, 0x60, 0x9, 0x1, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x6, 0x4, 0x7, 0x7, 0x6, 0xfffb]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x7, 0x5}, {0x4, 0x4}, {0x5, 0x7}, {0x7, 0xa}, {0x2, 0x4}, {0x5, 0x5}, {0x7, 0x9}, {0x6}, {0x3, 0x5}, {0x0, 0x9}, {0x1, 0x7}, {0x2}, {0x0, 0x4}, {0x4, 0x8}, {0x3, 0x5}, {0x7, 0x9}, {0x7, 0x3}, {0x0, 0x2}, {0x1}, {0x7, 0x1}, {0x5, 0x5}, {0x3, 0x9}, {0x6, 0x9}, {0x5, 0x7}, {0x2, 0x2}, {0x6, 0x2}, {0x6, 0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x1, 0xa}, {0x6, 0x1}, {0x1, 0x1}, {0x4, 0x5}, {0x5, 0xa}, {0x5, 0x1}, {0x1, 0x2}, {0x3, 0x1}, {0x0, 0x7}, {0x3, 0x5}, {0x4, 0x2}, {0x7, 0x4}, {0x2, 0x7}, {0x7, 0x3}, {0x1, 0x9}, {0x3, 0x7}, {0x5}, {0x5, 0x9}, {0x6, 0xa}, {0x7, 0x2}, {0x0, 0x2}, {0x4, 0x6}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x3}, {}, {}, {0x4}, {0x7, 0x8}, {0x2, 0xa}, {0x0, 0x6}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0x7}, {0x2, 0x2}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x9}, {0x7, 0xa}, {0x0, 0x5}, {0x3, 0x5}, {0x7, 0x1}, {0x6, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x0, 0x6}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x60, 0xb, 0x5, 0x36, 0x9, 0x12, 0xc, 0x4, 0x3, 0x24, 0x30, 0x1b, 0xc, 0x1b, 0x10, 0x60, 0x2, 0x12, 0x4, 0x24, 0x17, 0xb, 0x14, 0x9, 0x1b, 0x6, 0x1b, 0xb]}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0x72a, 0xa, 0x8, 0x5, 0x4, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x9, 0x8, 0x1, 0xbb2, 0x8, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0xc, 0x3, 0x36, 0x18, 0x36, 0x9, 0x6, 0x36, 0x9, 0x48, 0x4, 0x5, 0x4, 0x0, 0x60, 0x4, 0x3, 0x6, 0x18, 0x5, 0x5, 0x6, 0x16, 0x9, 0x18, 0x48, 0x3, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x2, 0x7, 0x50, 0x2, 0x4, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x4ac, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6a}]}, {0x454, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x9, 0x800, 0x8000, 0x401, 0x1, 0x4, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x32, 0x6, 0x6c, 0xfcb0, 0xcb3, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbed, 0x4, 0x86, 0x7, 0x7, 0xff29, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xb, 0x2, 0x1, 0x800, 0x8, 0x1ff, 0xdf0]}}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x7, 0x200, 0x6, 0x549b, 0xdc5b, 0x3, 0xff3f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x3, 0x1, 0x16, 0x6c, 0x3, 0x1b, 0x6, 0x18, 0x48, 0x1, 0x6c, 0x48, 0x1b, 0x36, 0x12, 0x1b, 0x1b, 0x16, 0x9, 0x30, 0x5, 0x18, 0x36, 0x18, 0xb, 0xd, 0x1b, 0x18, 0x6, 0x2]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x36, 0xb, 0x6c, 0x1b, 0x6, 0xb, 0x6, 0x16, 0x2, 0xb, 0xc, 0x4, 0x9, 0x12, 0x24, 0xdf, 0x9, 0x1b, 0x60, 0x9, 0x1, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xb, 0x3, 0x7, 0x200, 0xc07e, 0x164, 0xff]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x48, 0xb, 0x18, 0x60, 0x12, 0x1, 0x12, 0x24, 0x1b, 0x24, 0x18, 0x24, 0x16, 0x6, 0x2, 0xb, 0x16]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0x4}, {0x1, 0x5}, {0x0, 0x4}, {0x4}, {0x1, 0x4}, {0x3, 0x6}, {0x2, 0x7}, {0x3}, {0x5, 0x1}, {0x6, 0x5}, {0x1, 0x9}, {0x7, 0x3}, {0x1, 0x3}, {0x5, 0xa}, {0x4}, {0x5, 0x2}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0x8}, {0x1, 0x1}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x4}, {0x6}, {0x5, 0x9}, {0x5, 0x7}, {0x1, 0x4}, {0x3, 0x6}, {0x7, 0x8}, {0x1, 0x3}, {0x7, 0x4}, {0x4, 0x6}, {0x6, 0x9}, {0x2, 0x1}, {0x7, 0x3}, {0x3}, {0x2, 0x4}, {0x0, 0x9}, {0x1, 0xa}, {0x4, 0x8}, {0x4, 0x5}, {0x2, 0x5}, {0x0, 0x8}, {0x6, 0x9}, {0x5, 0x8}, {0x3, 0x4}, {0x3, 0xa}, {0x1, 0xa}, {}, {0x1, 0x4}, {0x7, 0x4}, {0x4, 0x4}, {0x1, 0x8}, {0x2, 0x7}, {0x7, 0x6}, {0x3, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x4, 0x7}]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x16, 0x6, 0xc, 0x6b, 0x48, 0x0, 0x60, 0x48, 0x18, 0x48, 0x2, 0x24, 0x5, 0x1, 0x3]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x2}, {0x5, 0x8}, {0x6, 0x4}, {0x5, 0x6}, {0x0, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x1ff, 0x8, 0x1, 0x1, 0x6, 0x6]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xc, 0x18, 0x30, 0x6c, 0x6, 0x16]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2e, 0xb, 0x4, 0x24, 0x0, 0x18, 0x36, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x3, 0xb4, 0x7, 0x1ff, 0x5, 0xfff]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x791e, 0x2, 0x1, 0x0, 0xfff8, 0xbb4, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x16, 0x1b, 0xb, 0x60, 0x6, 0x6, 0x24, 0x43, 0x30, 0x6c, 0x60, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x20c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x1, 0x7}, {0x3, 0x2}, {}, {0x1}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x5}, {0x0, 0x4}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x3}, {0x1}, {0x1, 0x9}, {0x1, 0x7}, {0x7, 0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x3}, {0x6, 0x4}, {0x3, 0x5}, {0x7, 0xa}, {0x7, 0x5}, {0x1, 0x5}, {0x2}, {0x1, 0x5}, {0x7, 0x9}, {0x2, 0x1}, {0x2, 0x8}, {0x1, 0x9}, {0x2, 0x3}, {0x3, 0x9}, {0x2, 0x3}, {0x6}, {}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x1}, {0x2, 0xa}, {0x7, 0x4}, {0x0, 0x4}, {0x2, 0x2}, {0x1, 0x8}, {0x2, 0x9}, {0x7, 0x8}, {0x7, 0x7}, {0x1, 0x9}, {0x7, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1b, 0x4, 0x1, 0x1, 0x5, 0x30, 0x1b, 0x1e, 0x5, 0x9, 0x2, 0x12, 0x16, 0xde, 0x48, 0x18, 0x18, 0xc, 0x60, 0x3, 0xc, 0x12, 0x16, 0x16, 0x9, 0x6, 0x60, 0x3, 0x9, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x6}, {0x3, 0x6}, {0x6, 0x4}, {0x0, 0x2}, {0x3, 0x5}, {0x5, 0x9}, {0x0, 0x1}, {0x2, 0xa}, {0x1, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x5}, {0x0, 0x3}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x2}, {0x5, 0x2}, {0x1, 0x1}, {0x1, 0x5}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x6}, {0x7, 0x6}, {0x3, 0x3}, {0x4, 0x7}, {0x2, 0x9}, {0x0, 0x8}, {0x6, 0x7}, {0x3, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x2}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x7}, {0x1, 0xa}, {0x5, 0x8}, {0x1, 0x2}, {0x7, 0x9}, {0x5, 0x4}, {0x3}, {0x2, 0xa}, {0x0, 0x6}, {0x5, 0x2}, {0x7, 0x1}, {0x0, 0x6}, {0x4, 0x4}, {0x7, 0x5}, {0x6, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x3, 0x8}, {0x7, 0x4}, {0x3, 0x3}, {0x4, 0x7}, {0x2, 0x5}, {0x7, 0x9}, {0x5}, {0x4, 0x8}, {0x5, 0x6}, {0x0, 0x8}, {0x2, 0x1}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0xa}, {0x0, 0x5}, {0x7, 0x6}, {0x2, 0x1}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x3}, {0x1, 0x8}, {0x5, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x4a, 0x5, 0x5, 0x1b, 0x60, 0x18, 0x16, 0xc, 0x48, 0x18, 0x6, 0x1b, 0x48, 0xb, 0x3, 0x6, 0x6, 0x12, 0x1, 0x1, 0x22, 0x18, 0x16, 0x0, 0x1, 0x24, 0x5, 0x9, 0x1b, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x80, 0x5, 0x1, 0xfba5, 0x101, 0x8001, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x10, 0xc, 0xf, 0x6c, 0xc, 0x24, 0x60, 0x3, 0x4, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x48c3, 0x3, 0x7810, 0x9, 0x7, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x3, 0x3, 0x0, 0xf0c8, 0x3, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x3, 0xa}, {0x0, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x7, 0x3}, {0x3, 0x9}, {0x3, 0x8}, {0x5, 0x4}, {0x0, 0x7}, {0x4, 0x9}, {0x3, 0x5}, {0x0, 0x4}, {0x2, 0x9}, {0x7, 0x7}, {0x1, 0x4}, {0x2}, {0x7, 0x8}, {0x7}, {0x2, 0x6}, {0x7, 0x8}, {0x1, 0x4}, {0x7, 0xa}, {0x7, 0x6}, {0x5, 0x3}, {0x3, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xfff, 0x9, 0x4, 0x0, 0x2, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa0}]}]}]}, 0xbf4}, 0x1, 0x0, 0x0, 0x5041}, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000e80)="4eae15d1b4156d3bb78f8ab9c5a1abddb3ee14df0c91e72eea2567b4", 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000ec0)={0x0, 0x401, 0x38, 0xc, 0x7ff}, &(0x7f0000000f00)=0x18) sendto$inet6(r0, &(0x7f0000000f40)="8c1cfc718018c20f532d6908a8dc4aee4e74bd225bdb9a4df90be6ae3fa791d0237726bd28bbcc848288c05bac59293d90a24837a5066a889f3601420718db7b54c9ee99fa1fca7e6f6bff38139bf941b9c772e3884403c8e6cea8c0030411afddd7b32005d99b9b4b14312da9cb", 0x6e, 0x56220814e26d0fe7, &(0x7f0000000fc0)={0xa, 0x4e21, 0x8, @local, 0x7fff}, 0x1c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r2) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000001500)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000014c0)={&(0x7f00000011c0)={0x2f4, r7, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x629b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x58}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5584}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x67a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc9a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff49}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4b2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbf1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40000000}]}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'pimreg\x00'}) epoll_create1(0x80000) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001580), 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000015c0)={r5, 0x60, "abe0e52a9cce700dabdce5e20f6f792c4c15a33b188e4e503ac2cfece9c37854d0f33116de4c2aa34fc677124ae038faa2182649796604f18fa89a602e4731ef7b74f6555dbe25337fb51cdf6e2d5cc3fbd543671e40336da033d1c02460a54e"}, &(0x7f0000001640)=0x68) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000001680)={r8, 0x10}, 0x8) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)={0x2, 0x18, 0x5, 0xe26914b419b17d5e, 0xd, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d2, 0x4, 0x7, 0xe, 0x4, 0xc0000001}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010101, @in=@broadcast, 0x11, 0x0, 0x10}, @sadb_lifetime={0x4, 0x0, 0x80, 0xffffffffffffff80, 0x100000001, 0x6}]}, 0x68}}, 0x24000081) r10 = socket$inet(0x2, 0x5, 0x9) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f00000017c0)={r5, 0x9}, &(0x7f0000001800)=0xc) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r11, &(0x7f0000001840)="2e5135a999", 0x5, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000001880)={r5, 0x40, "11a895e93c3bbec9cfc7d653a5d0a158f711151747a97c5e0c1657a2bfcfbb58495c31198ff1786d8f1f7a553c7eeb77e99158b3b5652f127c005d44a9b83d05"}, &(0x7f0000001900)=0x48) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001940)='memory.current\x00', 0x0, 0x0) getsockopt$SO_J1939_SEND_PRIO(r12, 0x6b, 0x3, &(0x7f0000001980), &(0x7f00000019c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x12, 0x10, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xad}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001a80)='GPL\x00', 0x4, 0x80, &(0x7f0000001ac0)=""/128, 0x40f00, 0xc, '\x00', 0x0, @fallback=0xe, r12, 0x8, &(0x7f0000001b40)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0x10, 0x2, 0x8}, 0x10, 0xffffffffffffffff, r12, 0x0, &(0x7f0000001cc0)=[r12, r12, 0xffffffffffffffff, r0, r11, r12, r11, 0xffffffffffffffff, r12, r12], 0x0, 0x10, 0x4, @void, @value}, 0x94) 373.552071ms ago: executing program 0 (id=1912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@enum={0xf, 0x6, 0x0, 0x6, 0x4, [{0xf, 0x35}, {0x5, 0x3ff}, {0x3, 0x8}, {0x2, 0x1}, {0xa, 0x4}, {0x1, 0x9}]}]}, {0x0, [0x5f, 0x61, 0x61, 0x61]}}, &(0x7f0000000080)=""/51, 0x5a, 0x33, 0x0, 0x3, 0x0, @void, @value}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000200000000000000000000000181100003c9427e29eaad4834fe7d05be5eba49bb2c32789a854c887b361d7a49e97323cc2c7f655d5132228f2e5b26cec7decaa05643478a6ad21deb691e5cfe3deca8894d5b64d694832cf064dd2c2ac280738a22f299c9a2b82feadf0d5", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) 229.384581ms ago: executing program 2 (id=1913): unshare(0x24020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdfd) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800001d691c0900be000000109d33e2849e4d0dfe1043b3", @ANYBLOB="af1e355c95487713fc9fa56baf5c60d71e252dacef9549dae935942a933b2af605fc464c600afaec70e0aa72c1ab9c2d4a451fdd9da4c3dd9140b8c9bee9c8e280e6bab14878b53111a5641cebbb3a93dbf243372d6e768ebf2c619976f3b845a73dc6cd7646532a16b0d684599333770797996b3c11ac4ac573a01d4f67972a18af066a94df40c099b38d4eeac1863c1b39146deeb9a96add", @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESHEX, @ANYRES16=r0], 0x18, 0xe000}, 0x5}], 0x1, 0x61acbc565664f7c8) socket(0x10, 0x803, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)="0000040001000000", 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000040), 0x2, 0x0) sendfile(r4, r6, &(0x7f0000000240)=0x6, 0x9) r7 = socket$inet(0xa, 0x801, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000380)={0x400, 0x7fff, 0xffffffffffffff93, 0x1, 0x100000000, 0xffffffffffffffff, 0xd, 0x48}, &(0x7f0000000400)={0xc1, 0xf08, 0x8, 0x5, 0x0, 0x5, 0x6}, &(0x7f0000000440)={0x9, 0x3, 0x7fff, 0x7, 0x40, 0x6, 0x6, 0x2}, &(0x7f0000000480)={0x0, 0x3938700}, &(0x7f0000000280)={&(0x7f00000004c0)={[0x1296]}, 0x8}) close(0xffffffffffffffff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009501000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r8}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="d80000002f0081024e81f782db44b904111d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a4000140060000090000000000000000000021d67f5194007134cf6ee08000a0e408e8d8ef52298516277ce06bbace8017cbec4c2ee5a7cef4091b14d6ba30dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecfee5de6ccd40dd6e4edef3d93452a92954b4337f97d1d713e0de0932133b92908589616ca1611", 0xdd}], 0x1}, 0x0) r9 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x1, 0x10, 0x0, 0x0, {{0x38, 0x4, 0x3, 0x6, 0xe0, 0x64, 0x0, 0x57, 0x6, 0x0, @remote, @initdev={0xac, 0x1e, 0x3, 0x0}, {[@end, @lsrr={0x83, 0x7, 0xb5, [@empty]}, @cipso={0x86, 0x3a, 0x3, [{0x5, 0xd, "714dd69ef637d5e6ba411e"}, {0x0, 0x3, "fb"}, {0x5, 0x12, "9909ea474d51f76aa908f6459378d936"}, {0x5, 0xd, "dda8d2da8a431470612e4e"}, {0x5, 0x5, "07aa7c"}]}, @lsrr={0x83, 0x13, 0x96, [@broadcast, @private=0xa010102, @multicast2, @remote]}, @noop, @cipso={0x86, 0x3a, 0xffffffffffffffff, [{0x0, 0xb, "c4869c78a5d965f518"}, {0x7, 0xd, "e3e57310069bcf05ee798c"}, {0x5, 0xa, "3ad3b23261a18126"}, {0x7, 0x12, "a6a6ad08725221f73474564637340f3f"}]}, @cipso={0x86, 0x2d, 0x1, [{0x1, 0xf, "085b566a6b4a4e92857017d169"}, {0x7, 0x7, "64dbe0f329"}, {0x1, 0xd, "a1889e718110e13f8ad88e"}, {0x0, 0x4, "5189"}]}, @timestamp_addr={0x44, 0xc, 0xf6, 0x1, 0x3, [{@loopback, 0x5}]}]}}}}}) bind$packet(r9, &(0x7f00000001c0)={0x11, 0x1a, r10, 0x1, 0x3, 0x6, @local}, 0x14) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r11) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=1914): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) recvmsg(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 1.973092][ T7583] syz.1.457 (7583) used greatest stack depth: 18704 bytes left [ 132.134944][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 132.760162][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 132.820529][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 132.847367][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 132.893166][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 133.079013][ T7646] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744071870057742) [ 133.107692][ T7646] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 133.281862][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.289324][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.579328][ T7668] sctp: [Deprecated]: syz.3.476 (pid 7668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.579328][ T7668] Use struct sctp_sack_info instead [ 133.868728][ T7682] bridge0: port 3(vlan2) entered blocking state [ 133.891057][ T7682] bridge0: port 3(vlan2) entered disabled state [ 133.897574][ T7682] vlan2: entered allmulticast mode [ 133.917227][ T7682] bond0: entered allmulticast mode [ 133.930842][ T7682] bond_slave_0: entered allmulticast mode [ 133.936811][ T7682] bond_slave_1: entered allmulticast mode [ 133.946930][ T7682] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 133.977846][ T7682] vlan2: entered promiscuous mode [ 133.999356][ T7682] bond0: entered promiscuous mode [ 134.019424][ T7682] bond_slave_0: entered promiscuous mode [ 134.051486][ T7682] bond_slave_1: entered promiscuous mode [ 134.057759][ T7682] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 134.811529][ T7719] geneve2: entered promiscuous mode [ 134.827092][ T7719] geneve2: entered allmulticast mode [ 135.248636][ T7736] macsec1: entered promiscuous mode [ 135.260719][ T7736] gretap0: entered promiscuous mode [ 135.289580][ T7736] gretap0: left promiscuous mode [ 135.352445][ T7742] netlink: 'syz.3.499': attribute type 20 has an invalid length. [ 136.094837][ T7770] bridge0: port 3(dummy0) entered blocking state [ 136.107644][ T7770] bridge0: port 3(dummy0) entered disabled state [ 136.115731][ T7770] dummy0: entered allmulticast mode [ 136.127860][ T7770] dummy0: entered promiscuous mode [ 136.134857][ T7770] bridge0: port 3(dummy0) entered blocking state [ 136.141373][ T7770] bridge0: port 3(dummy0) entered forwarding state [ 136.213837][ T7770] __nla_validate_parse: 79 callbacks suppressed [ 136.213861][ T7770] netlink: 76 bytes leftover after parsing attributes in process `syz.3.506'. [ 136.317512][ T7776] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.852817][ T7767] netlink: 36 bytes leftover after parsing attributes in process `syz.4.501'. [ 137.290743][ T7817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.658908][ T7829] netlink: 32 bytes leftover after parsing attributes in process `syz.3.522'. [ 137.779594][ T7833] syzkaller0: entered promiscuous mode [ 137.801806][ T7833] syzkaller0: entered allmulticast mode [ 137.902657][ T7841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.044774][ T7846] netlink: 'syz.2.527': attribute type 11 has an invalid length. [ 138.070526][ T7846] netlink: 'syz.2.527': attribute type 11 has an invalid length. [ 138.345122][ T7858] xt_CT: No such helper "snmp" [ 139.775559][ T7863] netlink: 44 bytes leftover after parsing attributes in process `syz.4.533'. [ 139.988557][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.535'. [ 140.042484][ T7876] macvlan3: entered promiscuous mode [ 140.048005][ T7876] macvlan3: entered allmulticast mode [ 140.118714][ T7879] Bluetooth: MGMT ver 1.23 [ 140.324007][ T7890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.540'. [ 140.362845][ T7895] netlink: 'syz.4.543': attribute type 39 has an invalid length. [ 140.373277][ T7890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.540'. [ 140.452095][ T7890] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 140.460826][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 140.475139][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 140.580144][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 140.882564][ T7926] xt_hashlimit: size too large, truncated to 1048576 [ 140.917432][ T7927] gretap1: entered promiscuous mode [ 140.948629][ T7927] gretap1: entered allmulticast mode [ 141.358714][ T7931] netlink: 'syz.0.553': attribute type 12 has an invalid length. [ 141.399429][ T7952] IPVS: starting estimator thread 0... [ 141.490616][ T7963] IPVS: using max 23 ests per chain, 55200 per kthread [ 141.559606][ T7968] bond0: left allmulticast mode [ 141.603799][ T7968] : left allmulticast mode [ 141.608837][ T7968] bond_slave_1: left allmulticast mode [ 141.615346][ T7968] bond0: left promiscuous mode [ 141.620178][ T7968] : left promiscuous mode [ 141.631343][ T7968] bond_slave_1: left promiscuous mode [ 141.645234][ T7968] macvlan2: left promiscuous mode [ 141.650605][ T7968] macvlan2: left allmulticast mode [ 141.695353][ T7968] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.704948][ T7968] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.715082][ T7968] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.724151][ T7968] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.761487][ T7968] veth3: left promiscuous mode [ 141.786318][ T7970] tipc: Enabling of bearer <Þ|i³:æ> rejected, media not registered [ 141.798104][ T7974] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 141.801754][ T7984] bridge_slave_0: left allmulticast mode [ 141.833476][ T7984] bridge_slave_0: left promiscuous mode [ 141.839647][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.860696][ T7984] bridge_slave_1: left allmulticast mode [ 141.866400][ T7984] bridge_slave_1: left promiscuous mode [ 141.890991][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.915588][ T7984] bond0: (slave bond_slave_0): Releasing backup interface [ 141.953891][ T7984] bond_slave_0: left promiscuous mode [ 141.959557][ T7984] bond_slave_0: left allmulticast mode [ 141.978482][ T7984] bond0: (slave bond_slave_1): Releasing backup interface [ 142.002170][ T7984] bond_slave_1: left promiscuous mode [ 142.010174][ T7984] bond_slave_1: left allmulticast mode [ 142.039917][ T7984] team0: Port device team_slave_0 removed [ 142.067590][ T7984] team0: Port device team_slave_1 removed [ 142.078951][ T7984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.094356][ T7984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.136960][ T7984] bond0: (slave wlan1): Releasing backup interface [ 142.174265][ T7984] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 142.189007][ T7984] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 142.227969][ T7984] team0: Port device bridge1 removed [ 142.240250][ T7984] vlan2: left allmulticast mode [ 142.260215][ T7984] bond0: left allmulticast mode [ 142.270200][ T7984] vlan2: left promiscuous mode [ 142.280249][ T7984] bond0: left promiscuous mode [ 142.291826][ T7984] bridge0: port 3(vlan2) entered disabled state [ 142.561980][ T8008] __nla_validate_parse: 4 callbacks suppressed [ 142.561998][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 142.625301][ T8008] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 142.723281][ T8019] netlink: 'syz.0.576': attribute type 1 has an invalid length. [ 142.750725][ T8019] netlink: 784 bytes leftover after parsing attributes in process `syz.0.576'. [ 143.009947][ T8022] netlink: 36 bytes leftover after parsing attributes in process `syz.3.577'. [ 143.020574][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.577'. [ 143.060574][ T8022] netlink: 36 bytes leftover after parsing attributes in process `syz.3.577'. [ 143.120087][ T8022] netlink: 36 bytes leftover after parsing attributes in process `syz.3.577'. [ 143.296073][ T8044] netlink: 52 bytes leftover after parsing attributes in process `syz.2.584'. [ 143.419355][ T8051] netlink: 'syz.2.584': attribute type 2 has an invalid length. [ 143.451169][ T8051] netlink: 'syz.2.584': attribute type 1 has an invalid length. [ 143.624101][ T8058] netlink: 'syz.1.588': attribute type 10 has an invalid length. [ 144.038421][ T8065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.590'. [ 144.518693][ T8081] team0: Port device team_slave_1 removed [ 144.840235][ T8102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.601'. [ 144.871122][ T8102] netlink: 42 bytes leftover after parsing attributes in process `syz.2.601'. [ 145.154736][ T8107] netlink: 'syz.0.605': attribute type 21 has an invalid length. [ 145.203172][ T8107] netlink: 'syz.0.605': attribute type 5 has an invalid length. [ 145.241039][ T8107] netlink: 'syz.0.605': attribute type 6 has an invalid length. [ 145.932692][ T8146] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.723020][ T8205] netlink: 'syz.1.636': attribute type 9 has an invalid length. [ 147.732336][ T8205] __nla_validate_parse: 5 callbacks suppressed [ 147.732356][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 147.790986][ T8212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.639'. [ 147.810154][ T8217] bond0: entered promiscuous mode [ 147.822897][ T8217] : entered promiscuous mode [ 147.827916][ T8217] bond_slave_1: entered promiscuous mode [ 147.849483][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.639'. [ 147.865132][ T8221] xt_TPROXY: Can be used only with -p tcp or -p udp [ 147.875547][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 147.892804][ T8221] xt_TPROXY: Can be used only with -p tcp or -p udp [ 148.024861][ T8219] ipt_REJECT: TCP_RESET invalid for non-tcp [ 148.197935][ T8238] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 148.209280][ T8242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.647'. [ 148.568413][ T8259] netlink: 404 bytes leftover after parsing attributes in process `syz.4.653'. [ 148.588927][ T8259] netlink: 88 bytes leftover after parsing attributes in process `syz.4.653'. [ 148.616393][ T8259] netlink: 88 bytes leftover after parsing attributes in process `syz.4.653'. [ 148.688090][ T8268] sctp: [Deprecated]: syz.3.654 (pid 8268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.688090][ T8268] Use struct sctp_sack_info instead [ 148.991204][ T8284] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.660'. [ 149.174397][ T8292] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 149.428024][ T8300] netlink: 'syz.1.665': attribute type 2 has an invalid length. [ 149.490429][ T8300] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 149.560752][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. [ 149.909808][ T8313] netlink: 'syz.4.669': attribute type 10 has an invalid length. [ 149.934535][ T8316] netlink: 'syz.3.671': attribute type 11 has an invalid length. [ 149.954191][ T8313] veth0_vlan: left promiscuous mode [ 149.969519][ T8313] veth0_vlan: entered promiscuous mode [ 150.020810][ T8313] team0: Device veth0_vlan failed to register rx_handler [ 150.140711][ T5844] Bluetooth: hci1: command 0x0401 tx timeout [ 150.309678][ T8318] smc: net device bond0 applied user defined pnetid SYZ2 [ 150.447744][ T8324] dummy0: left allmulticast mode [ 150.452845][ T8324] dummy0: left promiscuous mode [ 150.457895][ T8324] bridge0: port 3(dummy0) entered disabled state [ 150.534678][ T8324] bridge_slave_0: left allmulticast mode [ 150.648641][ T8324] bridge_slave_0: left promiscuous mode [ 150.658942][ T8324] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.705439][ T8324] bridge_slave_1: left allmulticast mode [ 150.742645][ T8324] bridge_slave_1: left promiscuous mode [ 150.755109][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.835100][ T8324] bond0: (slave bond_slave_0): Releasing backup interface [ 150.905783][ T8324] bond0: (slave bond_slave_1): Releasing backup interface [ 150.965698][ T8324] team0: Port device team_slave_0 removed [ 151.011748][ T8324] team0: Port device team_slave_1 removed [ 151.036452][ T8324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.074076][ T8324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.305675][ T8324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.313413][ T8324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.347261][ T8361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.578783][ T8368] bond0: (slave bond_slave_0): Releasing backup interface [ 152.601765][ T8369] netlink: 'syz.2.682': attribute type 10 has an invalid length. [ 152.636593][ T8368] bond0: (slave bond_slave_1): Releasing backup interface [ 152.696926][ T8368] team0: Port device team_slave_0 removed [ 152.724204][ T8368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.770179][ T8368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.805233][ T8368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.915275][ T8369] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 153.070588][ T8369] __nla_validate_parse: 4 callbacks suppressed [ 153.070610][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.682'. [ 153.720184][ T8287] Set syz1 is full, maxelem 65536 reached [ 154.579166][ T8406] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.616347][ T8414] netlink: 'syz.4.686': attribute type 11 has an invalid length. [ 154.679630][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 154.733662][ T8420] vlan2: entered promiscuous mode [ 154.739110][ T8420] erspan0: entered promiscuous mode [ 154.999753][ T8428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.698'. [ 155.013961][ T8428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.698'. [ 155.046419][ T8431] IPv6: sit1: Disabled Multicast RS [ 155.099472][ T8433] netlink: 'syz.1.700': attribute type 11 has an invalid length. [ 155.371013][ T8455] netlink: 32 bytes leftover after parsing attributes in process `syz.0.705'. [ 155.495326][ T8463] tipc: Enabled bearer , priority 0 [ 155.539435][ T8463] syzkaller0: entered promiscuous mode [ 155.552511][ T8463] syzkaller0: entered allmulticast mode [ 155.571919][ T8463] tipc: Resetting bearer [ 155.595304][ T8462] tipc: Resetting bearer [ 157.477231][ T8462] tipc: Disabling bearer [ 157.510943][ T8489] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 157.873694][ T8526] netlink: 'syz.1.721': attribute type 1 has an invalid length. [ 157.899974][ T8529] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 157.980569][ T8536] bond0: left promiscuous mode [ 157.989607][ T8536] : left promiscuous mode [ 158.001650][ T8536] bond_slave_1: left promiscuous mode [ 158.290051][ T8557] netlink: 'syz.1.728': attribute type 1 has an invalid length. [ 158.308730][ T8557] NCSI netlink: No device for ifindex 0 [ 158.446385][ T8552] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.535547][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 158.610970][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'. [ 158.670395][ T8564] netlink: 'syz.3.731': attribute type 12 has an invalid length. [ 158.892906][ T8574] netlink: 32 bytes leftover after parsing attributes in process `syz.4.736'. [ 159.143000][ T8592] netlink: 188 bytes leftover after parsing attributes in process `syz.4.738'. [ 159.176983][ T8592] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 159.487949][ T8615] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.745'. [ 159.501719][ T8615] openvswitch: netlink: Message has 8 unknown bytes. [ 159.526571][ T8619] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.744'. [ 159.536421][ T8610] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.744'. [ 159.549850][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 159.560730][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 159.757836][ T8624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.827401][ T8631] netlink: 200 bytes leftover after parsing attributes in process `syz.2.749'. [ 160.060445][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 160.390022][ T8671] netlink: 'syz.4.759': attribute type 1 has an invalid length. [ 160.411726][ T8671] netlink: 'syz.4.759': attribute type 2 has an invalid length. [ 160.419458][ T8671] netlink: 'syz.4.759': attribute type 1 has an invalid length. [ 160.824906][ T8691] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.138613][ T8707] tun0: tun_chr_ioctl cmd 1074025677 [ 161.151221][ T8707] tun0: linktype set to 270 [ 161.162805][ T8709] tipc: Enabling of bearer rejected, already enabled [ 161.191006][ T8712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.730223][ T8732] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 161.739161][ T8737] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 161.786608][ T8732] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 163.287522][ T8751] lo speed is unknown, defaulting to 1000 [ 163.304397][ T8751] lo speed is unknown, defaulting to 1000 [ 163.357480][ T8751] lo speed is unknown, defaulting to 1000 [ 163.426473][ T8756] tipc: Started in network mode [ 163.450532][ T8756] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 163.468351][ T8756] tipc: Enabled bearer , priority 10 [ 163.680611][ T8751] infiniband syz0: set down [ 163.685389][ T8751] infiniband syz0: added lo [ 163.692199][ T5923] lo speed is unknown, defaulting to 1000 [ 163.733298][ T8751] syz0: rxe_create_cq: returned err = -12 [ 163.739455][ T8751] infiniband syz0: Couldn't create ib_mad CQ [ 163.770573][ T8751] infiniband syz0: Couldn't open port 1 [ 163.834763][ T8751] RDS/IB: syz0: added [ 163.839315][ T8751] smc: adding ib device syz0 with port count 1 [ 163.860770][ T8751] smc: ib device syz0 port 1 has pnetid [ 163.882770][ T5924] lo speed is unknown, defaulting to 1000 [ 163.912080][ T8751] lo speed is unknown, defaulting to 1000 [ 163.982720][ T8785] __nla_validate_parse: 8 callbacks suppressed [ 163.982740][ T8785] netlink: 148 bytes leftover after parsing attributes in process `syz.4.793'. [ 164.016859][ T8785] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 164.208730][ T8798] sctp: [Deprecated]: syz.4.797 (pid 8798) Use of int in max_burst socket option. [ 164.208730][ T8798] Use struct sctp_assoc_value instead [ 164.270489][ T8751] lo speed is unknown, defaulting to 1000 [ 164.521909][ T8802] lo speed is unknown, defaulting to 1000 [ 164.686736][ T7952] tipc: Node number set to 43690 [ 164.796369][ T8751] lo speed is unknown, defaulting to 1000 [ 165.150275][ T8751] lo speed is unknown, defaulting to 1000 [ 165.254982][ T8829] netlink: 32 bytes leftover after parsing attributes in process `syz.0.807'. [ 165.438756][ T8835] vlan2: entered promiscuous mode [ 165.444399][ T8835] vlan2: entered allmulticast mode [ 165.449543][ T8835] hsr_slave_1: entered allmulticast mode [ 165.456168][ T8751] lo speed is unknown, defaulting to 1000 [ 165.462541][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.806'. [ 165.493239][ T8839] netlink: 19 bytes leftover after parsing attributes in process `syz.0.809'. [ 165.509472][ T8839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.809'. [ 165.526393][ T8835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.806'. [ 166.233315][ T8874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.820'. [ 166.417357][ T8878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.479036][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'. [ 166.539963][ T8891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.825'. [ 166.723359][ T8898] openvswitch: netlink: Message has 16 unknown bytes. [ 166.730454][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 166.745467][ T8898] openvswitch: netlink: Actions may not be safe on all matching packets [ 166.872073][ T8905] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 166.944322][ T8908] lo speed is unknown, defaulting to 1000 [ 167.008970][ T8910] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 167.060755][ T8914] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 167.414392][ T8929] tc_dump_action: action bad kind [ 167.671586][ T8935] lo speed is unknown, defaulting to 1000 [ 167.854906][ T8939] netlink: 'syz.2.842': attribute type 1 has an invalid length. [ 167.937829][ T8939] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 167.960678][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 167.972310][ T8939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.005455][ T8939] veth3: entered promiscuous mode [ 168.016174][ T8939] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 168.101919][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 168.291189][ T8946] tc_dump_action: action bad kind [ 168.306571][ T8947] netlink: 'syz.2.844': attribute type 58 has an invalid length. [ 168.368250][ T8946] netlink: 'syz.2.844': attribute type 7 has an invalid length. [ 168.445222][ T8946] netlink: 'syz.2.844': attribute type 7 has an invalid length. [ 168.465740][ T8946] netlink: 'syz.2.844': attribute type 7 has an invalid length. [ 168.493946][ T8946] netlink: 'syz.2.844': attribute type 7 has an invalid length. [ 168.512892][ T8946] netlink: 'syz.2.844': attribute type 7 has an invalid length. [ 168.520941][ T8947] netlink: 'syz.2.844': attribute type 58 has an invalid length. [ 168.605626][ T8946] netlink: 'syz.2.844': attribute type 7 has an invalid length. [ 168.631476][ T8946] netlink: 'syz.2.844': attribute type 7 has an invalid length. [ 168.903905][ T8972] bridge: RTM_NEWNEIGH with invalid ether address [ 169.023787][ T8970] vlan2: entered promiscuous mode [ 169.044164][ T8970] vlan2: entered allmulticast mode [ 169.061472][ T8947] __nla_validate_parse: 18 callbacks suppressed [ 169.061491][ T8947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.844'. [ 169.070638][ T8970] hsr_slave_1: entered allmulticast mode [ 169.408350][ T8980] lo speed is unknown, defaulting to 1000 [ 169.435725][ T8981] netlink: 176 bytes leftover after parsing attributes in process `syz.1.855'. [ 170.403055][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 170.669128][ T8980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.854'. [ 170.961580][ T9030] sctp: [Deprecated]: syz.3.867 (pid 9030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.961580][ T9030] Use struct sctp_sack_info instead [ 171.245682][ T9037] : renamed from bond_slave_0 [ 171.279023][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 171.492628][ T9041] xt_bpf: check failed: parse error [ 171.601914][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 171.823968][ T9058] xt_hashlimit: size too large, truncated to 1048576 [ 171.911833][ T9061] macvlan1: entered promiscuous mode [ 171.918400][ T9061] ipvlan0: entered promiscuous mode [ 171.991658][ T9061] ipvlan0: left promiscuous mode [ 172.050481][ T9061] macvlan1: left promiscuous mode [ 172.174575][ T9077] netlink: 100 bytes leftover after parsing attributes in process `syz.1.883'. [ 172.201417][ T9077] netlink: 196 bytes leftover after parsing attributes in process `syz.1.883'. [ 172.238097][ T9077] netlink: 6 bytes leftover after parsing attributes in process `syz.1.883'. [ 172.267287][ T9077] vlan0: entered promiscuous mode [ 172.331043][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 172.800092][ T9098] ip_vti0: entered promiscuous mode [ 173.055312][ T9111] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.064271][ T9111] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.073061][ T9111] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.081880][ T9111] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.249642][ T9119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.903919][ T5844] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 174.418610][ T9174] validate_nla: 67 callbacks suppressed [ 174.418629][ T9174] netlink: 'syz.0.911': attribute type 3 has an invalid length. [ 174.435577][ T9174] __nla_validate_parse: 3 callbacks suppressed [ 174.435592][ T9174] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.911'. [ 174.496004][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 174.787039][ T9198] ax25_connect(): syz.2.920 uses autobind, please contact jreuter@yaina.de [ 174.905852][ T9206] netlink: 'syz.4.923': attribute type 9 has an invalid length. [ 174.921352][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 174.930243][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 174.939413][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'. [ 174.953310][ T9206] macvlan3: entered promiscuous mode [ 174.970830][ T9206] hsr0: entered promiscuous mode [ 174.979694][ T9206] macvlan3: entered allmulticast mode [ 174.985344][ T9206] hsr0: entered allmulticast mode [ 174.990559][ T9206] hsr_slave_0: entered allmulticast mode [ 175.769099][ T9246] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 175.848347][ T9243] bond4: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 175.864845][ T9243] bond4: (slave ip6tnl1): Setting fail_over_mac to active for active-backup mode [ 175.881775][ T9243] bond4: (slave ip6tnl1): making interface the new active one [ 175.890082][ T9243] bond4: (slave ip6tnl1): Enslaving as an active interface with an up link [ 175.904420][ T9254] x_tables: duplicate underflow at hook 3 [ 176.087608][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'. [ 176.153392][ T9270] netlink: 128 bytes leftover after parsing attributes in process `syz.4.939'. [ 176.367191][ T9281] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.459719][ T9287] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 176.508436][ T9281] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.585805][ T9281] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.686520][ T9281] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.867065][ T9299] x_tables: unsorted underflow at hook 4 [ 176.909564][ T9281] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.950742][ T9299] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 177.004978][ T9281] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.067042][ T9281] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.105019][ T9281] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.176714][ T9314] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 177.210529][ T9314] netlink: 36 bytes leftover after parsing attributes in process `syz.0.951'. [ 177.341608][ T9318] sctp: [Deprecated]: syz.0.951 (pid 9318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.341608][ T9318] Use struct sctp_sack_info instead [ 177.864653][ T9327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.954'. [ 178.713753][ T9358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.865536][ T9360] bridge0: entered promiscuous mode [ 178.892553][ T9360] vlan4: entered promiscuous mode [ 178.964784][ T9365] netlink: 32 bytes leftover after parsing attributes in process `syz.2.967'. [ 179.275908][ T9380] lo speed is unknown, defaulting to 1000 [ 180.319345][ T9422] FAULT_INJECTION: forcing a failure. [ 180.319345][ T9422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.355206][ T9422] CPU: 1 UID: 0 PID: 9422 Comm: syz.4.980 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 180.355232][ T9422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.355244][ T9422] Call Trace: [ 180.355250][ T9422] [ 180.355258][ T9422] dump_stack_lvl+0x241/0x360 [ 180.355287][ T9422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.355309][ T9422] ? __pfx__printk+0x10/0x10 [ 180.355330][ T9422] ? __pfx_lock_release+0x10/0x10 [ 180.355368][ T9422] should_fail_ex+0x40a/0x550 [ 180.355401][ T9422] _copy_from_iter+0x1df/0x1c40 [ 180.355424][ T9422] ? __virt_addr_valid+0x183/0x530 [ 180.355444][ T9422] ? __pfx_lock_release+0x10/0x10 [ 180.355479][ T9422] ? __alloc_skb+0x28f/0x440 [ 180.355500][ T9422] ? __pfx__copy_from_iter+0x10/0x10 [ 180.355525][ T9422] ? __virt_addr_valid+0x183/0x530 [ 180.355542][ T9422] ? __virt_addr_valid+0x183/0x530 [ 180.355558][ T9422] ? __virt_addr_valid+0x45f/0x530 [ 180.355577][ T9422] ? __phys_addr_symbol+0x2f/0x70 [ 180.355594][ T9422] ? __check_object_size+0x47a/0x730 [ 180.355625][ T9422] netlink_sendmsg+0x742/0xcb0 [ 180.355656][ T9422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.355678][ T9422] ? aa_sock_msg_perm+0x91/0x160 [ 180.355724][ T9422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.355739][ T9422] __sock_sendmsg+0x221/0x270 [ 180.355769][ T9422] ____sys_sendmsg+0x53a/0x860 [ 180.355798][ T9422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.355819][ T9422] ? __fget_files+0x2a/0x410 [ 180.355847][ T9422] ? __fget_files+0x2a/0x410 [ 180.355881][ T9422] __sys_sendmsg+0x269/0x350 [ 180.355907][ T9422] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.355959][ T9422] ? do_sys_openat2+0x17a/0x1d0 [ 180.356012][ T9422] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 180.356043][ T9422] ? do_syscall_64+0x100/0x230 [ 180.356074][ T9422] ? do_syscall_64+0xb6/0x230 [ 180.356104][ T9422] do_syscall_64+0xf3/0x230 [ 180.356140][ T9422] ? clear_bhb_loop+0x35/0x90 [ 180.356173][ T9422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.356198][ T9422] RIP: 0033:0x7f44a018d169 [ 180.356214][ T9422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.356229][ T9422] RSP: 002b:00007f44a0f5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.356249][ T9422] RAX: ffffffffffffffda RBX: 00007f44a03a5fa0 RCX: 00007f44a018d169 [ 180.356262][ T9422] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 180.356273][ T9422] RBP: 00007f44a0f5c090 R08: 0000000000000000 R09: 0000000000000000 [ 180.356284][ T9422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.356295][ T9422] R13: 0000000000000000 R14: 00007f44a03a5fa0 R15: 00007fff92cd9ad8 [ 180.356322][ T9422] [ 180.964104][ T9428] __nla_validate_parse: 1 callbacks suppressed [ 180.964123][ T9428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.979'. [ 180.994934][ T9450] netlink: 260 bytes leftover after parsing attributes in process `syz.2.979'. [ 181.013335][ T9449] tc_dump_action: action bad kind [ 181.047957][ T9454] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 181.280549][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 181.413623][ T9469] batman_adv: batadv0: Adding interface: dummy0 [ 181.420448][ T9469] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.448727][ T9469] batman_adv: batadv0: Interface activated: dummy0 [ 181.470875][ T9470] batadv0: mtu less than device minimum [ 181.485282][ T9470] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.498095][ T9470] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.510843][ T9470] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.523246][ T9470] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.535739][ T9470] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.548113][ T9470] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.560708][ T9470] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.573121][ T9470] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.633460][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 181.745107][ T9476] netlink: 52 bytes leftover after parsing attributes in process `syz.0.990'. [ 181.828394][ T9479] lo: left allmulticast mode [ 181.852785][ T9485] FAULT_INJECTION: forcing a failure. [ 181.852785][ T9485] name failslab, interval 1, probability 0, space 0, times 1 [ 181.852900][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 181.878771][ T9485] CPU: 1 UID: 0 PID: 9485 Comm: syz.3.993 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 181.878799][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.878811][ T9485] Call Trace: [ 181.878818][ T9485] [ 181.878826][ T9485] dump_stack_lvl+0x241/0x360 [ 181.878857][ T9485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.878879][ T9485] ? __pfx__printk+0x10/0x10 [ 181.878914][ T9485] should_fail_ex+0x40a/0x550 [ 181.878961][ T9485] should_failslab+0xac/0x100 [ 181.878987][ T9485] ? skb_clone+0x20c/0x390 [ 181.879010][ T9485] kmem_cache_alloc_noprof+0x70/0x380 [ 181.879048][ T9485] skb_clone+0x20c/0x390 [ 181.879076][ T9485] __netlink_deliver_tap+0x3c4/0x7f0 [ 181.879117][ T9485] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.879146][ T9485] netlink_deliver_tap+0x19d/0x1b0 [ 181.879198][ T9485] netlink_unicast+0x7c4/0x990 [ 181.879237][ T9485] ? __pfx_netlink_unicast+0x10/0x10 [ 181.879268][ T9485] ? __virt_addr_valid+0x45f/0x530 [ 181.879290][ T9485] ? __phys_addr_symbol+0x2f/0x70 [ 181.879309][ T9485] ? __check_object_size+0x47a/0x730 [ 181.879342][ T9485] netlink_sendmsg+0x8de/0xcb0 [ 181.879376][ T9485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.879401][ T9485] ? aa_sock_msg_perm+0x91/0x160 [ 181.879447][ T9485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.879466][ T9485] __sock_sendmsg+0x221/0x270 [ 181.879500][ T9485] ____sys_sendmsg+0x53a/0x860 [ 181.879536][ T9485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.879559][ T9485] ? __fget_files+0x2a/0x410 [ 181.879593][ T9485] ? __fget_files+0x2a/0x410 [ 181.879633][ T9485] __sys_sendmsg+0x269/0x350 [ 181.879665][ T9485] ? __pfx___sys_sendmsg+0x10/0x10 [ 181.879705][ T9485] ? do_sys_openat2+0x17a/0x1d0 [ 181.879766][ T9485] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 181.879800][ T9485] ? do_syscall_64+0x100/0x230 [ 181.879836][ T9485] ? do_syscall_64+0xb6/0x230 [ 181.879870][ T9485] do_syscall_64+0xf3/0x230 [ 181.879901][ T9485] ? clear_bhb_loop+0x35/0x90 [ 181.879933][ T9485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.879960][ T9485] RIP: 0033:0x7f42c238d169 [ 181.879976][ T9485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.879990][ T9485] RSP: 002b:00007f42c3105038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.880010][ T9485] RAX: ffffffffffffffda RBX: 00007f42c25a5fa0 RCX: 00007f42c238d169 [ 181.880023][ T9485] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 181.880040][ T9485] RBP: 00007f42c3105090 R08: 0000000000000000 R09: 0000000000000000 [ 181.880050][ T9485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.880061][ T9485] R13: 0000000000000000 R14: 00007f42c25a5fa0 R15: 00007ffc041cd358 [ 181.880089][ T9485] [ 181.886022][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 182.143155][ T9496] SET target dimension over the limit! [ 182.257783][ T5924] IPVS: starting estimator thread 0... [ 182.278956][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 182.294190][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 182.308997][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 182.326980][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 182.354087][ T9501] IPVS: using max 20 ests per chain, 48000 per kthread [ 182.525937][ T9479] batman_adv: batadv0: Interface deactivated: dummy0 [ 182.877039][ T9479] batadv_slave_1: left promiscuous mode [ 183.273661][ T9479] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.287559][ T9479] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.300406][ T9479] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.308935][ T9479] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.362578][ T9479] gretap1: left promiscuous mode [ 183.367578][ T9479] gretap1: left allmulticast mode [ 183.488181][ T9479] veth3: left promiscuous mode [ 183.507595][ T9496] netlink: 'syz.1.995': attribute type 8 has an invalid length. [ 183.916201][ T5882] IPVS: starting estimator thread 0... [ 184.020476][ T9536] IPVS: using max 22 ests per chain, 52800 per kthread [ 185.158986][ T9568] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 185.173862][ T9565] netlink: 'syz.3.1016': attribute type 10 has an invalid length. [ 185.192849][ T9568] gretap1: entered promiscuous mode [ 185.291384][ T9573] vlan0: entered promiscuous mode [ 185.311194][ T9565] macvlan0: entered allmulticast mode [ 185.342232][ T9580] net_ratelimit: 14 callbacks suppressed [ 185.342251][ T9580] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 185.751124][ T9605] ax25_connect(): syz.1.1028 uses autobind, please contact jreuter@yaina.de [ 185.813553][ T9608] netlink: 'syz.2.1029': attribute type 1 has an invalid length. [ 185.821757][ T9608] netlink: 'syz.2.1029': attribute type 1 has an invalid length. [ 185.841628][ T9608] sctp: [Deprecated]: syz.2.1029 (pid 9608) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.841628][ T9608] Use struct sctp_sack_info instead [ 186.077154][ T9619] netlink: 'syz.2.1033': attribute type 2 has an invalid length. [ 186.086018][ T9619] netlink: 'syz.2.1033': attribute type 9 has an invalid length. [ 186.094904][ T9619] __nla_validate_parse: 91 callbacks suppressed [ 186.094923][ T9619] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1033'. [ 186.223612][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 186.266242][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 186.498379][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 186.832679][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 186.855018][ T9642] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.863357][ T9642] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.871699][ T9642] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.872912][ T9644] netlink: 'syz.4.1041': attribute type 32 has an invalid length. [ 186.879883][ T9642] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.913712][ T9642] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.922628][ T9642] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.931741][ T9642] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.940113][ T9642] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.228664][ T9657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.350213][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 187.372563][ T9663] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1043'. [ 187.400446][ T9661] geneve1: entered promiscuous mode [ 187.706110][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'. [ 187.905707][ T9677] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.914569][ T9677] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.923822][ T9677] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.932820][ T9677] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.297129][ T9680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1049'. [ 188.535981][ T9612] Set syz1 is full, maxelem 65536 reached [ 188.636341][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'. [ 188.819723][ T9691] lo speed is unknown, defaulting to 1000 [ 189.768542][ T9705] lo speed is unknown, defaulting to 1000 [ 189.838114][ T9710] pimreg0: tun_chr_ioctl cmd 1074025677 [ 189.845925][ T9710] pimreg0: linktype set to 65534 [ 190.208344][ T9722] lo speed is unknown, defaulting to 1000 [ 190.317016][ T9727] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.529864][ T9736] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 190.807137][ T9748] sctp: [Deprecated]: syz.3.1069 (pid 9748) Use of int in maxseg socket option. [ 190.807137][ T9748] Use struct sctp_assoc_value instead [ 191.013612][ T9751] xt_hashlimit: size too large, truncated to 1048576 [ 191.159354][ T9759] ax25_connect(): syz.4.1073 uses autobind, please contact jreuter@yaina.de [ 191.331946][ T9766] __nla_validate_parse: 2 callbacks suppressed [ 191.331967][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1073'. [ 191.380505][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1073'. [ 191.463462][ T9772] openvswitch: netlink: Message has 16 unknown bytes. [ 191.483837][ T9772] openvswitch: netlink: Actions may not be safe on all matching packets [ 191.722671][ T9776] netlink: 'syz.1.1077': attribute type 10 has an invalid length. [ 191.857206][ T9783] batman_adv: batadv0: Removing interface: dummy0 [ 191.887040][ T9783] bond0: (slave wlan1): Releasing backup interface [ 191.923755][ T9783] bond1: (slave ip6gretap1): Removing an active aggregator [ 191.941116][ T9783] bond1: (slave ip6gretap1): Releasing backup interface [ 191.996485][ T9783] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 96:6f:76:ae:17:6d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 192.059384][ T9783] bond1: (slave veth3): Releasing backup interface [ 192.388483][ T9808] openvswitch: netlink: Message has 16 unknown bytes. [ 192.410693][ T9808] openvswitch: netlink: Actions may not be safe on all matching packets [ 192.424982][ T9811] netlink: 'syz.4.1087': attribute type 3 has an invalid length. [ 192.455850][ T9811] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1087'. [ 192.536232][ T9811] tc_dump_action: action bad kind [ 192.558447][ T9811] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1087'. [ 192.558499][ T9819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1090'. [ 192.600104][ T9819] tipc: Enabled bearer , priority 0 [ 192.669190][ T9819] syzkaller0: entered promiscuous mode [ 192.674981][ T9819] syzkaller0: entered allmulticast mode [ 192.681548][ T9819] tipc: Resetting bearer [ 192.700250][ T9818] tipc: Resetting bearer [ 193.396476][ T9833] netlink: 'syz.4.1092': attribute type 1 has an invalid length. [ 194.711725][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.718150][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.495252][ T9818] tipc: Disabling bearer [ 195.524346][ T9833] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.535742][ T9834] gretap3: entered promiscuous mode [ 195.543954][ T9834] bond5: (slave gretap3): making interface the new active one [ 195.572171][ T9834] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 195.595361][ T9838] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 195.929593][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 195.943670][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 195.958128][ T9860] openvswitch: netlink: Message has 16 unknown bytes. [ 195.985740][ T9860] openvswitch: netlink: Actions may not be safe on all matching packets [ 196.427839][ T9890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1110'. [ 196.471984][ T9895] geneve2: entered promiscuous mode [ 196.507251][ T9895] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1111'. [ 196.552259][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 196.580982][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1112'. [ 196.784446][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 196.790677][ T5845] Bluetooth: hci1: command 0x0401 tx timeout [ 196.796829][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 197.010543][ T9916] lo speed is unknown, defaulting to 1000 [ 197.322781][ T9930] netlink: 'syz.3.1123': attribute type 10 has an invalid length. [ 197.344929][ T9930] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.364394][ T9930] bond0: (slave team0): Enslaving as an active interface with an up link [ 197.426568][ T9931] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1122'. [ 197.432303][ T9926] lo speed is unknown, defaulting to 1000 [ 197.589831][ T9942] openvswitch: netlink: Message has 16 unknown bytes. [ 197.605587][ T9942] openvswitch: netlink: Actions may not be safe on all matching packets [ 198.231738][ T9976] netlink: 'syz.2.1133': attribute type 2 has an invalid length. [ 198.239741][ T9976] netlink: 'syz.2.1133': attribute type 9 has an invalid length. [ 198.256134][ T9976] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1133'. [ 198.383010][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 198.615945][ T9994] lo speed is unknown, defaulting to 1000 [ 198.665983][ T9995] netlink: 'syz.1.1138': attribute type 6 has an invalid length. [ 198.776740][T10002] pimreg0: tun_chr_ioctl cmd 1074025677 [ 198.821181][T10002] pimreg0: linktype set to 65534 [ 199.225190][T10019] netlink: 'syz.2.1145': attribute type 1 has an invalid length. [ 199.758789][T10038] sctp: [Deprecated]: syz.2.1152 (pid 10038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.758789][T10038] Use struct sctp_sack_info instead [ 200.002135][T10048] openvswitch: netlink: Message has 16 unknown bytes. [ 200.009078][T10048] openvswitch: netlink: Actions may not be safe on all matching packets [ 200.200153][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1157'. [ 200.302586][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'. [ 200.939004][T10086] vlan2: entered promiscuous mode [ 200.945679][T10086] vlan2: entered allmulticast mode [ 200.951253][T10086] hsr_slave_1: entered allmulticast mode [ 201.167637][T10094] netlink: 'syz.2.1169': attribute type 2 has an invalid length. [ 201.175708][T10094] netlink: 'syz.2.1169': attribute type 9 has an invalid length. [ 201.188068][T10094] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1169'. [ 201.318973][T10098] ªªªªªª: renamed from vlan0 [ 201.697318][T10120] openvswitch: netlink: IP tunnel dst address not specified [ 201.913336][T10136] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 201.982456][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1186'. [ 202.003666][T10141] 8021q: adding VLAN 0 to HW filter on device team1 [ 202.024393][T10138] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 25 [ 202.091192][T10144] FAULT_INJECTION: forcing a failure. [ 202.091192][T10144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.110699][T10144] CPU: 1 UID: 0 PID: 10144 Comm: syz.0.1187 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 202.110727][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.110740][T10144] Call Trace: [ 202.110747][T10144] [ 202.110755][T10144] dump_stack_lvl+0x241/0x360 [ 202.110786][T10144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.110810][T10144] ? __pfx__printk+0x10/0x10 [ 202.110833][T10144] ? __pfx_lock_release+0x10/0x10 [ 202.110873][T10144] should_fail_ex+0x40a/0x550 [ 202.110916][T10144] _copy_from_user+0x2d/0xb0 [ 202.110945][T10144] move_addr_to_kernel+0x82/0x150 [ 202.110978][T10144] __sys_connect+0xb6/0x2d0 [ 202.110999][T10144] ? __pfx___might_resched+0x10/0x10 [ 202.111027][T10144] ? __pfx___sys_connect+0x10/0x10 [ 202.111064][T10144] ? rcu_is_watching+0x15/0xb0 [ 202.111103][T10144] __x64_sys_connect+0x7a/0x90 [ 202.111124][T10144] do_syscall_64+0xf3/0x230 [ 202.111152][T10144] ? clear_bhb_loop+0x35/0x90 [ 202.111182][T10144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.111207][T10144] RIP: 0033:0x7f79abd8d169 [ 202.111223][T10144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.111241][T10144] RSP: 002b:00007f79acb42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 202.111261][T10144] RAX: ffffffffffffffda RBX: 00007f79abfa5fa0 RCX: 00007f79abd8d169 [ 202.111274][T10144] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000007 [ 202.111285][T10144] RBP: 00007f79acb42090 R08: 0000000000000000 R09: 0000000000000000 [ 202.111296][T10144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.111307][T10144] R13: 0000000000000000 R14: 00007f79abfa5fa0 R15: 00007ffd7a7a6208 [ 202.111334][T10144] [ 202.798966][T10172] FAULT_INJECTION: forcing a failure. [ 202.798966][T10172] name failslab, interval 1, probability 0, space 0, times 0 [ 202.820636][T10172] CPU: 1 UID: 0 PID: 10172 Comm: syz.0.1198 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 202.820665][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.820678][T10172] Call Trace: [ 202.820685][T10172] [ 202.820694][T10172] dump_stack_lvl+0x241/0x360 [ 202.820726][T10172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.820750][T10172] ? __pfx__printk+0x10/0x10 [ 202.820774][T10172] ? fs_reclaim_acquire+0x93/0x130 [ 202.820797][T10172] ? __pfx___might_resched+0x10/0x10 [ 202.820839][T10172] should_fail_ex+0x40a/0x550 [ 202.820878][T10172] should_failslab+0xac/0x100 [ 202.820908][T10172] __kmalloc_noprof+0xdd/0x4c0 [ 202.820936][T10172] ? tomoyo_encode2+0x27e/0x550 [ 202.820963][T10172] tomoyo_encode2+0x27e/0x550 [ 202.820994][T10172] tomoyo_check_unix_address+0x34c/0x8c0 [ 202.821024][T10172] ? tomoyo_check_unix_address+0x15d/0x8c0 [ 202.821046][T10172] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 202.821094][T10172] tomoyo_socket_connect_permission+0x23a/0x370 [ 202.821122][T10172] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 202.821151][T10172] ? __pfx_current_check_access_socket+0x10/0x10 [ 202.821185][T10172] ? __might_fault+0xc6/0x120 [ 202.821213][T10172] security_socket_connect+0xc6/0x2a0 [ 202.821241][T10172] __sys_connect+0x1d3/0x2d0 [ 202.821268][T10172] ? __pfx___sys_connect+0x10/0x10 [ 202.821308][T10172] ? rcu_is_watching+0x15/0xb0 [ 202.821339][T10172] __x64_sys_connect+0x7a/0x90 [ 202.821363][T10172] do_syscall_64+0xf3/0x230 [ 202.821395][T10172] ? clear_bhb_loop+0x35/0x90 [ 202.821429][T10172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.821457][T10172] RIP: 0033:0x7f79abd8d169 [ 202.821476][T10172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.821492][T10172] RSP: 002b:00007f79acb42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 202.821514][T10172] RAX: ffffffffffffffda RBX: 00007f79abfa5fa0 RCX: 00007f79abd8d169 [ 202.821530][T10172] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000007 [ 202.821544][T10172] RBP: 00007f79acb42090 R08: 0000000000000000 R09: 0000000000000000 [ 202.821557][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.821570][T10172] R13: 0000000000000000 R14: 00007f79abfa5fa0 R15: 00007ffd7a7a6208 [ 202.821602][T10172] [ 203.145550][T10182] team0: Port device gtp0 added [ 203.162267][T10182] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 203.374922][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1205'. [ 203.396490][T10192] ip6gre1: entered allmulticast mode [ 203.487510][T10198] sctp: [Deprecated]: syz.0.1208 (pid 10198) Use of int in maxseg socket option. [ 203.487510][T10198] Use struct sctp_assoc_value instead [ 204.428206][T10209] FAULT_INJECTION: forcing a failure. [ 204.428206][T10209] name failslab, interval 1, probability 0, space 0, times 0 [ 204.460419][T10209] CPU: 0 UID: 0 PID: 10209 Comm: syz.4.1210 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 204.460448][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.460460][T10209] Call Trace: [ 204.460467][T10209] [ 204.460476][T10209] dump_stack_lvl+0x241/0x360 [ 204.460505][T10209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.460528][T10209] ? __pfx__printk+0x10/0x10 [ 204.460549][T10209] ? kmem_cache_alloc_noprof+0x48/0x380 [ 204.460578][T10209] ? __pfx___might_resched+0x10/0x10 [ 204.460603][T10209] ? aa_label_sk_perm+0x4f3/0x6c0 [ 204.460637][T10209] should_fail_ex+0x40a/0x550 [ 204.460673][T10209] should_failslab+0xac/0x100 [ 204.460701][T10209] ? sk_prot_alloc+0x58/0x210 [ 204.460722][T10209] kmem_cache_alloc_noprof+0x70/0x380 [ 204.460755][T10209] sk_prot_alloc+0x58/0x210 [ 204.460776][T10209] ? sk_alloc+0x27/0x370 [ 204.460801][T10209] sk_alloc+0x3e/0x370 [ 204.460828][T10209] unix_create1+0xb4/0x7a0 [ 204.460864][T10209] unix_stream_connect+0x313/0x1070 [ 204.460900][T10209] ? __pfx_aa_sk_perm+0x10/0x10 [ 204.460929][T10209] ? __pfx_unix_stream_connect+0x10/0x10 [ 204.460955][T10209] ? __might_fault+0xc6/0x120 [ 204.460985][T10209] __sys_connect+0x288/0x2d0 [ 204.461009][T10209] ? __pfx___sys_connect+0x10/0x10 [ 204.461045][T10209] ? rcu_is_watching+0x15/0xb0 [ 204.461074][T10209] __x64_sys_connect+0x7a/0x90 [ 204.461096][T10209] do_syscall_64+0xf3/0x230 [ 204.461124][T10209] ? clear_bhb_loop+0x35/0x90 [ 204.461166][T10209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.461193][T10209] RIP: 0033:0x7f44a018d169 [ 204.461210][T10209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.461226][T10209] RSP: 002b:00007f44a0f5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 204.461246][T10209] RAX: ffffffffffffffda RBX: 00007f44a03a5fa0 RCX: 00007f44a018d169 [ 204.461259][T10209] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000007 [ 204.461271][T10209] RBP: 00007f44a0f5c090 R08: 0000000000000000 R09: 0000000000000000 [ 204.461282][T10209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.461292][T10209] R13: 0000000000000000 R14: 00007f44a03a5fa0 R15: 00007fff92cd9ad8 [ 204.461330][T10209] [ 204.464756][T10211] netlink: 'syz.0.1211': attribute type 10 has an invalid length. [ 204.612367][T10212] vxcan1: entered allmulticast mode [ 204.751062][T10211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.783047][T10211] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 204.792830][T10217] netlink: 'syz.2.1212': attribute type 10 has an invalid length. [ 204.805457][T10213] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1211'. [ 204.822287][T10217] team0: Port device dummy0 added [ 204.836801][T10217] syz.2.1212 (10217) used greatest stack depth: 18256 bytes left [ 205.128804][T10227] lo speed is unknown, defaulting to 1000 [ 205.778774][T10227] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1216'. [ 206.155991][T10256] FAULT_INJECTION: forcing a failure. [ 206.155991][T10256] name failslab, interval 1, probability 0, space 0, times 0 [ 206.189159][T10256] CPU: 1 UID: 0 PID: 10256 Comm: syz.2.1223 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 206.189190][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 206.189203][T10256] Call Trace: [ 206.189210][T10256] [ 206.189219][T10256] dump_stack_lvl+0x241/0x360 [ 206.189250][T10256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.189274][T10256] ? __pfx__printk+0x10/0x10 [ 206.189298][T10256] ? __kmalloc_noprof+0xb5/0x4c0 [ 206.189328][T10256] ? __pfx___might_resched+0x10/0x10 [ 206.189363][T10256] should_fail_ex+0x40a/0x550 [ 206.189400][T10256] should_failslab+0xac/0x100 [ 206.189437][T10256] __kmalloc_noprof+0xdd/0x4c0 [ 206.189466][T10256] ? security_sk_alloc+0x53/0x360 [ 206.189491][T10256] ? rcu_is_watching+0x15/0xb0 [ 206.189518][T10256] security_sk_alloc+0x53/0x360 [ 206.189547][T10256] sk_prot_alloc+0xfa/0x210 [ 206.189576][T10256] sk_alloc+0x3e/0x370 [ 206.189605][T10256] unix_create1+0xb4/0x7a0 [ 206.189643][T10256] unix_stream_connect+0x313/0x1070 [ 206.189683][T10256] ? __pfx_aa_sk_perm+0x10/0x10 [ 206.189714][T10256] ? __pfx_unix_stream_connect+0x10/0x10 [ 206.189742][T10256] ? __might_fault+0xc6/0x120 [ 206.189773][T10256] __sys_connect+0x288/0x2d0 [ 206.189800][T10256] ? __pfx___sys_connect+0x10/0x10 [ 206.189839][T10256] ? rcu_is_watching+0x15/0xb0 [ 206.189868][T10256] __x64_sys_connect+0x7a/0x90 [ 206.189892][T10256] do_syscall_64+0xf3/0x230 [ 206.189924][T10256] ? clear_bhb_loop+0x35/0x90 [ 206.189957][T10256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.189985][T10256] RIP: 0033:0x7f36f498d169 [ 206.190003][T10256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.190020][T10256] RSP: 002b:00007f36f57cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 206.190042][T10256] RAX: ffffffffffffffda RBX: 00007f36f4ba5fa0 RCX: 00007f36f498d169 [ 206.190057][T10256] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000007 [ 206.190071][T10256] RBP: 00007f36f57cf090 R08: 0000000000000000 R09: 0000000000000000 [ 206.190083][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.190095][T10256] R13: 0000000000000000 R14: 00007f36f4ba5fa0 R15: 00007ffc2d9ae238 [ 206.190127][T10256] [ 207.038055][T10275] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1229'. [ 207.178544][T10278] ax25_connect(): syz.3.1230 uses autobind, please contact jreuter@yaina.de [ 207.255097][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 207.290822][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1230'. [ 207.537690][T10289] lo speed is unknown, defaulting to 1000 [ 207.841834][T10314] openvswitch: netlink: Message has 16 unknown bytes. [ 207.870221][T10314] openvswitch: netlink: Actions may not be safe on all matching packets [ 209.017687][T10357] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1252'. [ 209.098707][T10359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1255'. [ 209.121188][T10363] ax25_connect(): syz.1.1253 uses autobind, please contact jreuter@yaina.de [ 209.224043][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1253'. [ 209.253851][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1253'. [ 209.312521][T10373] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001 [ 209.550646][T10384] xt_hashlimit: size too large, truncated to 1048576 [ 209.576523][T10383] netlink: 'syz.4.1261': attribute type 1 has an invalid length. [ 209.631359][T10387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1260'. [ 210.019336][T10406] ipt_REJECT: TCP_RESET invalid for non-tcp [ 210.403839][T10427] netlink: 'syz.2.1276': attribute type 1 has an invalid length. [ 211.139056][T10427] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.157915][T10444] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1279'. [ 211.309684][T10453] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1281'. [ 211.689595][T10475] openvswitch: netlink: Key type 29 is not supported [ 211.709998][T10481] lo speed is unknown, defaulting to 1000 [ 211.952474][T10493] tipc: Enabling of bearer rejected, failed to enable media [ 212.699649][T10515] Cannot find add_set index 4 as target [ 212.708196][T10515] netlink: 'syz.2.1298': attribute type 2 has an invalid length. [ 212.716109][T10515] netlink: 'syz.2.1298': attribute type 9 has an invalid length. [ 212.729651][T10515] __nla_validate_parse: 10 callbacks suppressed [ 212.729670][T10515] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1298'. [ 212.936644][T10525] bridge3: entered allmulticast mode [ 213.092419][T10531] netlink: 'syz.1.1301': attribute type 2 has an invalid length. [ 213.178635][T10531] netlink: 'syz.1.1301': attribute type 9 has an invalid length. [ 213.259427][T10531] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1301'. [ 214.211456][T10576] pim6reg1: entered promiscuous mode [ 214.247606][T10576] pim6reg1: entered allmulticast mode [ 214.255010][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'. [ 214.485077][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 214.788676][T10612] netlink: 'syz.4.1323': attribute type 2 has an invalid length. [ 214.831630][T10612] fþ: entered promiscuous mode [ 215.006145][T10617] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1325'. [ 215.491878][T10635] lo speed is unknown, defaulting to 1000 [ 215.871036][T10647] x_tables: duplicate underflow at hook 3 [ 215.886239][T10647] x_tables: duplicate underflow at hook 1 [ 215.940579][T10649] x_tables: duplicate underflow at hook 1 [ 216.464968][T10644] netlink: 'syz.3.1333': attribute type 11 has an invalid length. [ 216.730687][T10672] raw_sendmsg: syz.2.1338 forgot to set AF_INET. Fix it! [ 217.161698][T10686] lo speed is unknown, defaulting to 1000 [ 217.245174][T10689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1342'. [ 217.284937][T10689] bridge_slave_0: left allmulticast mode [ 217.292571][T10689] bridge_slave_0: left promiscuous mode [ 217.301870][T10689] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.353895][T10689] bridge_slave_1: left allmulticast mode [ 217.366454][T10689] bridge_slave_1: left promiscuous mode [ 217.381205][T10689] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.409129][T10689] bond0: (slave 0): Releasing backup interface [ 217.418410][T10689] bond0: (slave bond_slave_1): Releasing backup interface [ 217.443690][T10689] team0: Port device team_slave_0 removed [ 217.469073][T10689] team0: Port device team_slave_1 removed [ 217.505788][T10689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.551220][T10689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.609084][T10689] team0: Port device macvlan2 removed [ 217.619780][T10689] bond1: (slave gretap2): Releasing active interface [ 217.648047][T10689] bond4: (slave ip6tnl1): Releasing backup interface [ 217.672536][T10689] bond5: (slave gretap3): Releasing active interface [ 217.696367][T10696] xt_TCPMSS: Only works on TCP SYN packets [ 217.805255][T10692] lo speed is unknown, defaulting to 1000 [ 218.020512][T10702] ax25_connect(): syz.4.1345 uses autobind, please contact jreuter@yaina.de [ 218.077901][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1341'. [ 218.116394][T10686] openvswitch: netlink: Key type 178 is out of range max 32 [ 218.192818][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1345'. [ 218.202719][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 219.579697][ T5846] cgroup: fork rejected by pids controller in /syz0 [ 219.889971][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 219.971656][T10782] openvswitch: netlink: Tunnel attr 208 out of range max 16 [ 219.979558][T10786] openvswitch: netlink: Tunnel attr 208 out of range max 16 [ 220.085455][T10791] xt_policy: neither incoming nor outgoing policy selected [ 220.191225][T10794] netlink: 'syz.4.1369': attribute type 9 has an invalid length. [ 220.728184][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.757457][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.768457][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.778914][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.787387][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.796337][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.163068][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1375'. [ 221.173319][ T6387] team0: Port device gtp0 removed [ 221.526254][ T6387] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 221.541925][ T6387] bond0 (unregistering): Released all slaves [ 221.716998][ T6387] bond1 (unregistering): Released all slaves [ 221.886130][ T6387] bond2 (unregistering): Released all slaves [ 222.008376][ T6387] bond3 (unregistering): Released all slaves [ 222.022968][ T6387] bond4 (unregistering): Released all slaves [ 222.116742][T10803] lo speed is unknown, defaulting to 1000 [ 222.220919][ T6387] tipc: Disabling bearer [ 222.247584][ T6387] tipc: Left network mode [ 222.291860][T10828] netlink: 'syz.4.1380': attribute type 30 has an invalid length. [ 222.445114][T10835] netlink: 'syz.4.1383': attribute type 10 has an invalid length. [ 222.476418][T10833] bond0: (slave team0): Releasing backup interface [ 222.676672][T10835] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 222.873486][ T5838] Bluetooth: hci4: command tx timeout [ 223.559077][T10872] netlink: 1260 bytes leftover after parsing attributes in process `syz.3.1392'. [ 223.584872][T10872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.428817][ T6387] vxcan1 (unregistering): left allmulticast mode [ 224.614384][T10874] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 224.624835][T10874] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 224.784735][T10803] chnl_net:caif_netlink_parms(): no params data found [ 224.907606][T10893] netlink: 'syz.3.1399': attribute type 2 has an invalid length. [ 224.931748][T10893] netlink: 'syz.3.1399': attribute type 9 has an invalid length. [ 224.940653][ T5838] Bluetooth: hci4: command tx timeout [ 224.946504][T10893] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1399'. [ 225.092724][T10803] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.100106][T10803] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.107627][T10803] bridge_slave_0: entered allmulticast mode [ 225.115392][T10803] bridge_slave_0: entered promiscuous mode [ 225.123682][T10803] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.133022][T10803] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.140456][T10803] bridge_slave_1: entered allmulticast mode [ 225.147700][T10803] bridge_slave_1: entered promiscuous mode [ 225.243288][T10913] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 225.291518][T10803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.417303][T10914] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.429301][T10914] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.464921][T10803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.563656][T10914] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.574155][T10924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1405'. [ 225.600772][T10914] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.695259][T10803] team0: Port device team_slave_0 added [ 225.766216][T10914] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.780970][T10914] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.797327][T10803] team0: Port device team_slave_1 added [ 225.904651][T10914] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.920215][T10914] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.991574][T10803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.998581][T10803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.088069][T10803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.108879][T10803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.119965][T10803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.178324][T10803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.319908][T10914] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.332340][T10914] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.378515][T10803] hsr_slave_0: entered promiscuous mode [ 226.398201][T10803] hsr_slave_1: entered promiscuous mode [ 226.404794][T10803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.422112][T10803] Cannot create hsr debugfs directory [ 226.427781][T10952] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1413'. [ 226.454324][T10914] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.470030][T10914] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.529304][T10914] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.550456][T10914] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.608903][T10914] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.617787][T10914] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.020570][ T5838] Bluetooth: hci4: command tx timeout [ 227.109434][T10974] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.138065][T10974] bond0: (slave bond4): Enslaving as an active interface with an up link [ 227.388685][T10803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 227.404865][T10987] ip_vti0: left promiscuous mode [ 227.410203][T10987] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1424'. [ 227.419527][T10987] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 227.450996][T10803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 227.471027][T10803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 227.520049][T10987] dvmrp0: entered allmulticast mode [ 227.527509][T10803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 227.806400][T10803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.843401][T10803] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.861216][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.868396][ T6391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.891603][ T6369] tipc: Subscription rejected, illegal request [ 227.900332][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.907446][ T6380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.937032][T10993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1426'. [ 228.105192][T11003] netlink: 'syz.2.1428': attribute type 4 has an invalid length. [ 228.140724][T11003] netlink: 'syz.2.1428': attribute type 4 has an invalid length. [ 228.364383][T10803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.382610][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'. [ 228.403883][T11013] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1430'. [ 228.413484][T11013] netlink: 460 bytes leftover after parsing attributes in process `syz.4.1430'. [ 228.504313][T10803] veth0_vlan: entered promiscuous mode [ 228.529262][T10803] veth1_vlan: entered promiscuous mode [ 228.609515][T10803] veth0_macvtap: entered promiscuous mode [ 228.633416][T10803] veth1_macvtap: entered promiscuous mode [ 228.717392][T10803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.728940][T11023] netlink: 'syz.3.1435': attribute type 2 has an invalid length. [ 228.759579][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 228.772350][T10803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.800909][T10803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.819984][T10803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.840595][T10803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.863639][T10803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.028875][T11035] lo speed is unknown, defaulting to 1000 [ 229.061018][ T6391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.083370][ T6391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.100602][ T5146] Bluetooth: hci4: command tx timeout [ 229.197695][T11043] netlink: 'syz.3.1440': attribute type 1 has an invalid length. [ 229.210421][ T4165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.229385][ T4165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.633330][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1447'. [ 229.724961][T11066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1448'. [ 229.791674][T11065] syz.1.1447 (11065) used greatest stack depth: 18224 bytes left [ 230.346338][T11097] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 230.394018][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1457'. [ 230.439652][T11101] xt_bpf: check failed: parse error [ 230.446099][T11101] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1459'. [ 230.698222][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 230.753721][T11116] lo speed is unknown, defaulting to 1000 [ 230.878906][T11123] ax25_connect(): syz.2.1466 uses autobind, please contact jreuter@yaina.de [ 231.023345][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'. [ 231.033286][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1466'. [ 231.097844][T11137] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1470'. [ 231.180708][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 231.309030][T11145] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1471'. [ 232.369916][T11182] tc_dump_action: action bad kind [ 232.506979][T11190] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 233.054431][T11217] sctp: [Deprecated]: syz.0.1492 (pid 11217) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.054431][T11217] Use struct sctp_sack_info instead [ 233.079780][T11216] syzkaller0: entered promiscuous mode [ 233.089542][T11216] syzkaller0: entered allmulticast mode [ 234.572541][T11236] __nla_validate_parse: 6 callbacks suppressed [ 234.572560][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1499'. [ 235.651828][T11224] Set syz1 is full, maxelem 65536 reached [ 235.857014][ T30] audit: type=1800 audit(1742802990.693:2): pid=11239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1500" name="memory.events" dev="tmpfs" ino=58 res=0 errno=0 [ 235.921981][ T30] audit: type=1804 audit(1742802990.773:3): pid=11240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1500" name="/newroot/8/memory.events" dev="tmpfs" ino=58 res=1 errno=0 [ 236.320838][T11244] ax25_connect(): syz.2.1502 uses autobind, please contact jreuter@yaina.de [ 236.367899][T11245] lo speed is unknown, defaulting to 1000 [ 236.452224][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1502'. [ 236.507103][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1502'. [ 236.529432][T11257] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 236.565139][T11259] netlink: 'syz.0.1506': attribute type 6 has an invalid length. [ 236.575173][T11259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.595603][T11259] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 236.799310][T11264] set match dimension is over the limit! [ 236.878981][T11264] pim6reg: entered allmulticast mode [ 237.379153][T11277] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1510'. [ 237.645039][T11282] gtp1: entered promiscuous mode [ 237.650090][T11282] gtp1: entered allmulticast mode [ 237.693541][T11282] netlink: 14516 bytes leftover after parsing attributes in process `syz.3.1515'. [ 237.707712][T11286] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1512'. [ 237.727000][T11287] FAULT_INJECTION: forcing a failure. [ 237.727000][T11287] name failslab, interval 1, probability 0, space 0, times 0 [ 237.740097][T11287] CPU: 1 UID: 0 PID: 11287 Comm: syz.4.1514 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 237.740126][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 237.740138][T11287] Call Trace: [ 237.740145][T11287] [ 237.740153][T11287] dump_stack_lvl+0x241/0x360 [ 237.740184][T11287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.740206][T11287] ? __pfx__printk+0x10/0x10 [ 237.740228][T11287] ? fs_reclaim_acquire+0x93/0x130 [ 237.740253][T11287] ? __pfx___might_resched+0x10/0x10 [ 237.740284][T11287] should_fail_ex+0x40a/0x550 [ 237.740322][T11287] should_failslab+0xac/0x100 [ 237.740353][T11287] __kmalloc_noprof+0xdd/0x4c0 [ 237.740381][T11287] ? kstrtouint_from_user+0x128/0x190 [ 237.740415][T11287] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 237.740440][T11287] tomoyo_realpath_from_path+0xcf/0x5e0 [ 237.740470][T11287] tomoyo_path_number_perm+0x239/0x770 [ 237.740496][T11287] ? __lock_acquire+0x1397/0x2100 [ 237.740527][T11287] ? tomoyo_path_number_perm+0x209/0x770 [ 237.740555][T11287] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 237.740619][T11287] ? __fget_files+0x2a/0x410 [ 237.740649][T11287] ? __fget_files+0x2a/0x410 [ 237.740681][T11287] security_file_ioctl+0xc6/0x2a0 [ 237.740707][T11287] __se_sys_ioctl+0x46/0x170 [ 237.740730][T11287] do_syscall_64+0xf3/0x230 [ 237.740757][T11287] ? clear_bhb_loop+0x35/0x90 [ 237.740786][T11287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.740811][T11287] RIP: 0033:0x7f44a018d169 [ 237.740828][T11287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.740844][T11287] RSP: 002b:00007f44a0f5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.740864][T11287] RAX: ffffffffffffffda RBX: 00007f44a03a5fa0 RCX: 00007f44a018d169 [ 237.740878][T11287] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000004 [ 237.740889][T11287] RBP: 00007f44a0f5c090 R08: 0000000000000000 R09: 0000000000000000 [ 237.740901][T11287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.740911][T11287] R13: 0000000000000000 R14: 00007f44a03a5fa0 R15: 00007fff92cd9ad8 [ 237.740939][T11287] [ 237.980844][T11287] ERROR: Out of memory at tomoyo_realpath_from_path. [ 237.988553][T11285] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1512'. [ 238.285066][T11305] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1520'. [ 238.295127][T11305] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 238.384109][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1523'. [ 238.539943][T11322] FAULT_INJECTION: forcing a failure. [ 238.539943][T11322] name failslab, interval 1, probability 0, space 0, times 0 [ 238.553776][T11322] CPU: 1 UID: 0 PID: 11322 Comm: syz.4.1528 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 238.553804][T11322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 238.553817][T11322] Call Trace: [ 238.553823][T11322] [ 238.553831][T11322] dump_stack_lvl+0x241/0x360 [ 238.553860][T11322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.553882][T11322] ? __pfx__printk+0x10/0x10 [ 238.553903][T11322] ? fs_reclaim_acquire+0x93/0x130 [ 238.553924][T11322] ? __pfx___might_resched+0x10/0x10 [ 238.553947][T11322] ? dynamic_dname+0x144/0x1b0 [ 238.553970][T11322] should_fail_ex+0x40a/0x550 [ 238.554006][T11322] should_failslab+0xac/0x100 [ 238.554033][T11322] __kmalloc_noprof+0xdd/0x4c0 [ 238.554059][T11322] ? tomoyo_encode+0x26f/0x540 [ 238.554100][T11322] tomoyo_encode+0x26f/0x540 [ 238.554122][T11322] ? __pfx_sockfs_dname+0x10/0x10 [ 238.554160][T11322] tomoyo_realpath_from_path+0x59e/0x5e0 [ 238.554195][T11322] tomoyo_path_number_perm+0x239/0x770 [ 238.554224][T11322] ? __lock_acquire+0x1397/0x2100 [ 238.554259][T11322] ? tomoyo_path_number_perm+0x209/0x770 [ 238.554290][T11322] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.554363][T11322] ? __fget_files+0x2a/0x410 [ 238.554397][T11322] ? __fget_files+0x2a/0x410 [ 238.554432][T11322] security_file_ioctl+0xc6/0x2a0 [ 238.554462][T11322] __se_sys_ioctl+0x46/0x170 [ 238.554488][T11322] do_syscall_64+0xf3/0x230 [ 238.554519][T11322] ? clear_bhb_loop+0x35/0x90 [ 238.554551][T11322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.554579][T11322] RIP: 0033:0x7f44a018d169 [ 238.554596][T11322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.554613][T11322] RSP: 002b:00007f44a0f5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.554634][T11322] RAX: ffffffffffffffda RBX: 00007f44a03a5fa0 RCX: 00007f44a018d169 [ 238.554649][T11322] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000004 [ 238.554662][T11322] RBP: 00007f44a0f5c090 R08: 0000000000000000 R09: 0000000000000000 [ 238.554674][T11322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.554686][T11322] R13: 0000000000000000 R14: 00007f44a03a5fa0 R15: 00007fff92cd9ad8 [ 238.554735][T11322] [ 238.555480][T11322] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.028761][T11337] veth0_to_bridge: entered promiscuous mode [ 239.220004][T11348] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1536'. [ 239.373494][T11355] veth2: entered allmulticast mode [ 239.547575][T11362] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.568201][T11362] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.656218][T11362] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.696929][T11362] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.777501][T11374] FAULT_INJECTION: forcing a failure. [ 239.777501][T11374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.813854][T11374] CPU: 0 UID: 0 PID: 11374 Comm: syz.0.1543 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 239.813882][T11374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.813894][T11374] Call Trace: [ 239.813901][T11374] [ 239.813910][T11374] dump_stack_lvl+0x241/0x360 [ 239.813938][T11374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.813960][T11374] ? __pfx__printk+0x10/0x10 [ 239.813981][T11374] ? __pfx_lock_release+0x10/0x10 [ 239.814019][T11374] should_fail_ex+0x40a/0x550 [ 239.814053][T11374] _copy_from_user+0x2d/0xb0 [ 239.814081][T11374] addrconf_del_ifaddr+0xcb/0x1c0 [ 239.814123][T11374] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 239.814153][T11374] ? tomoyo_path_number_perm+0x209/0x770 [ 239.814184][T11374] ? __pfx_lock_release+0x10/0x10 [ 239.814228][T11374] inet6_ioctl+0x10d/0x280 [ 239.814273][T11374] ? __pfx_inet6_ioctl+0x10/0x10 [ 239.814301][T11374] ? tomoyo_path_number_perm+0x65d/0x770 [ 239.814330][T11374] ? __lock_acquire+0x1397/0x2100 [ 239.814372][T11374] sock_do_ioctl+0x158/0x460 [ 239.814409][T11374] ? __pfx_sock_do_ioctl+0x10/0x10 [ 239.814460][T11374] sock_ioctl+0x626/0x8e0 [ 239.814491][T11374] ? __pfx_sock_ioctl+0x10/0x10 [ 239.814520][T11374] ? __fget_files+0x2a/0x410 [ 239.814554][T11374] ? __fget_files+0x2a/0x410 [ 239.814609][T11374] ? __pfx_sock_ioctl+0x10/0x10 [ 239.814640][T11374] __se_sys_ioctl+0xf5/0x170 [ 239.814666][T11374] do_syscall_64+0xf3/0x230 [ 239.814714][T11374] ? clear_bhb_loop+0x35/0x90 [ 239.814748][T11374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.814777][T11374] RIP: 0033:0x7fbb0f98d169 [ 239.814795][T11374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.814813][T11374] RSP: 002b:00007fbb10748038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.814835][T11374] RAX: ffffffffffffffda RBX: 00007fbb0fba6080 RCX: 00007fbb0f98d169 [ 239.814851][T11374] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000004 [ 239.814864][T11374] RBP: 00007fbb10748090 R08: 0000000000000000 R09: 0000000000000000 [ 239.814877][T11374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.814893][T11374] R13: 0000000000000001 R14: 00007fbb0fba6080 R15: 00007ffdf763c848 [ 239.814926][T11374] [ 240.114664][T11362] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.173912][T11362] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.219581][T11336] veth0_to_bridge: left promiscuous mode [ 240.234917][T11376] sctp: [Deprecated]: syz.0.1544 (pid 11376) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.234917][T11376] Use struct sctp_sack_info instead [ 240.265667][T11362] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.276148][T11362] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.488823][T11362] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.516363][T11362] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.541155][T11362] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.549488][T11362] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.582281][T11362] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.601367][T11362] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.629387][T11362] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.648569][T11362] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.795237][T11400] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1550'. [ 240.804752][T11397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1549'. [ 240.978605][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 241.161806][T11419] netlink: 'syz.1.1556': attribute type 2 has an invalid length. [ 241.181236][T11419] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1556'. [ 241.299071][T11426] lo speed is unknown, defaulting to 1000 [ 241.517159][T11434] xt_l2tp: unknown flags: 10 [ 241.789420][T11439] lo speed is unknown, defaulting to 1000 [ 241.798333][T11446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1565'. [ 242.127393][T11459] veth1_macvtap: left promiscuous mode [ 242.133801][T11459] macsec0: entered allmulticast mode [ 242.300725][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 242.389599][T11471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.506934][T11426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1558'. [ 242.517177][T11426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1558'. [ 242.904435][T11487] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 243.203693][T11502] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 243.265290][T11502] lo speed is unknown, defaulting to 1000 [ 243.601036][T11506] lo speed is unknown, defaulting to 1000 [ 243.628575][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1582'. [ 243.639161][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1582'. [ 243.708082][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1583'. [ 243.747967][T11526] vlan5: entered promiscuous mode [ 243.753579][T11526] veth0: entered promiscuous mode [ 243.999110][T11536] xt_socket: unknown flags 0x8 [ 244.031387][T11536] netlink: 'syz.3.1587': attribute type 126 has an invalid length. [ 245.180597][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 245.247727][T11591] x_tables: duplicate underflow at hook 2 [ 245.561468][T11603] lo speed is unknown, defaulting to 1000 [ 245.944072][T11620] FAULT_INJECTION: forcing a failure. [ 245.944072][T11620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.987851][T11620] CPU: 1 UID: 0 PID: 11620 Comm: syz.0.1609 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 245.987882][T11620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.987893][T11620] Call Trace: [ 245.987900][T11620] [ 245.987908][T11620] dump_stack_lvl+0x241/0x360 [ 245.987953][T11620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.987974][T11620] ? __pfx__printk+0x10/0x10 [ 245.987993][T11620] ? __pfx_lock_release+0x10/0x10 [ 245.988029][T11620] should_fail_ex+0x40a/0x550 [ 245.988061][T11620] _copy_from_user+0x2d/0xb0 [ 245.988087][T11620] __sys_bpf+0x1be/0x820 [ 245.988115][T11620] ? __pfx___sys_bpf+0x10/0x10 [ 245.988151][T11620] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.988182][T11620] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.988212][T11620] ? do_syscall_64+0x100/0x230 [ 245.988243][T11620] __x64_sys_bpf+0x7c/0x90 [ 245.988267][T11620] do_syscall_64+0xf3/0x230 [ 245.988294][T11620] ? clear_bhb_loop+0x35/0x90 [ 245.988326][T11620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.988351][T11620] RIP: 0033:0x7fbb0f98d169 [ 245.988374][T11620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.988390][T11620] RSP: 002b:00007fbb10769038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.988420][T11620] RAX: ffffffffffffffda RBX: 00007fbb0fba5fa0 RCX: 00007fbb0f98d169 [ 245.988434][T11620] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 245.988447][T11620] RBP: 00007fbb10769090 R08: 0000000000000000 R09: 0000000000000000 [ 245.988459][T11620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.988470][T11620] R13: 0000000000000000 R14: 00007fbb0fba5fa0 R15: 00007ffdf763c848 [ 245.988500][T11620] [ 246.046226][T11623] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 53096 - 0 [ 246.181078][T11623] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 53096 - 0 [ 246.191566][T11623] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 53096 - 0 [ 246.211031][T11623] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 53096 - 0 [ 246.290712][T11623] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 52640 - 0 [ 246.299598][T11623] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 52640 - 0 [ 246.370672][T11623] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 52640 - 0 [ 246.402615][T11623] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 52640 - 0 [ 246.417524][T11623] geneve2: entered promiscuous mode [ 246.423207][T11623] geneve2: entered allmulticast mode [ 246.604178][T11642] netlink: 'syz.2.1614': attribute type 1 has an invalid length. [ 246.647738][T11644] __nla_validate_parse: 3 callbacks suppressed [ 246.647761][T11644] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1615'. [ 246.683397][T11642] bond5: entered promiscuous mode [ 246.728603][T11642] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.811818][T11648] ipip0: entered promiscuous mode [ 246.817021][T11648] ipip0: entered allmulticast mode [ 246.893380][T11648] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.902293][T11648] bond5: (slave ipip0): The slave device specified does not support setting the MAC address [ 246.918112][T11648] bond5: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 246.949074][T11648] bond5: (slave ipip0): making interface the new active one [ 246.968949][T11648] bond5: (slave ipip0): Enslaving as an active interface with an up link [ 246.984417][T11650] lo speed is unknown, defaulting to 1000 [ 247.168663][T11667] FAULT_INJECTION: forcing a failure. [ 247.168663][T11667] name failslab, interval 1, probability 0, space 0, times 0 [ 247.210489][T11667] CPU: 1 UID: 0 PID: 11667 Comm: syz.2.1621 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 247.210520][T11667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 247.210534][T11667] Call Trace: [ 247.210540][T11667] [ 247.210549][T11667] dump_stack_lvl+0x241/0x360 [ 247.210580][T11667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.210603][T11667] ? __pfx__printk+0x10/0x10 [ 247.210627][T11667] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 247.210661][T11667] ? __pfx___might_resched+0x10/0x10 [ 247.210694][T11667] should_fail_ex+0x40a/0x550 [ 247.210732][T11667] should_failslab+0xac/0x100 [ 247.210760][T11667] ? __get_vm_area_node+0x132/0x2d0 [ 247.210790][T11667] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 247.210828][T11667] __get_vm_area_node+0x132/0x2d0 [ 247.210865][T11667] __vmalloc_node_range_noprof+0x344/0x1380 [ 247.210888][T11667] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 247.210923][T11667] ? mark_lock+0x9a/0x360 [ 247.210968][T11667] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 247.210999][T11667] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 247.211030][T11667] __vmalloc_noprof+0x79/0x90 [ 247.211049][T11667] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 247.211082][T11667] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 247.211120][T11667] ? bpf_prog_alloc+0x28/0x1b0 [ 247.211154][T11667] bpf_prog_alloc+0x3a/0x1b0 [ 247.211186][T11667] bpf_prog_load+0x7f4/0x20e0 [ 247.211233][T11667] ? __pfx_bpf_prog_load+0x10/0x10 [ 247.211264][T11667] ? __pfx___might_resched+0x10/0x10 [ 247.211307][T11667] ? __might_fault+0xaa/0x120 [ 247.211337][T11667] __sys_bpf+0x4ea/0x820 [ 247.211369][T11667] ? __pfx___sys_bpf+0x10/0x10 [ 247.211411][T11667] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 247.211448][T11667] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.211482][T11667] ? do_syscall_64+0x100/0x230 [ 247.211519][T11667] __x64_sys_bpf+0x7c/0x90 [ 247.211547][T11667] do_syscall_64+0xf3/0x230 [ 247.211578][T11667] ? clear_bhb_loop+0x35/0x90 [ 247.211612][T11667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.211640][T11667] RIP: 0033:0x7f36f498d169 [ 247.211657][T11667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.211674][T11667] RSP: 002b:00007f36f57cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.211696][T11667] RAX: ffffffffffffffda RBX: 00007f36f4ba5fa0 RCX: 00007f36f498d169 [ 247.211712][T11667] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 247.211725][T11667] RBP: 00007f36f57cf090 R08: 0000000000000000 R09: 0000000000000000 [ 247.211738][T11667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.211749][T11667] R13: 0000000000000000 R14: 00007f36f4ba5fa0 R15: 00007ffc2d9ae238 [ 247.211780][T11667] [ 247.217824][T11667] warn_alloc: 3 callbacks suppressed [ 247.217842][T11667] syz.2.1621: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 247.254091][T11654] lo speed is unknown, defaulting to 1000 [ 247.268474][T11667] ,cpuset=/,mems_allowed=0-1 [ 247.544984][T11667] CPU: 1 UID: 0 PID: 11667 Comm: syz.2.1621 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 247.545015][T11667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 247.545029][T11667] Call Trace: [ 247.545037][T11667] [ 247.545046][T11667] dump_stack_lvl+0x241/0x360 [ 247.545088][T11667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.545112][T11667] ? __pfx__printk+0x10/0x10 [ 247.545141][T11667] ? __rcu_read_unlock+0xa1/0x110 [ 247.545176][T11667] warn_alloc+0x278/0x410 [ 247.545204][T11667] ? __pfx_warn_alloc+0x10/0x10 [ 247.545224][T11667] ? __kasan_kmalloc+0x23/0xb0 [ 247.545250][T11667] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 247.545288][T11667] ? __get_vm_area_node+0x280/0x2d0 [ 247.545328][T11667] __vmalloc_node_range_noprof+0x369/0x1380 [ 247.545353][T11667] ? mark_lock+0x9a/0x360 [ 247.545398][T11667] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 247.545429][T11667] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 247.545460][T11667] __vmalloc_noprof+0x79/0x90 [ 247.545480][T11667] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 247.545514][T11667] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 247.545544][T11667] ? bpf_prog_alloc+0x28/0x1b0 [ 247.545578][T11667] bpf_prog_alloc+0x3a/0x1b0 [ 247.545611][T11667] bpf_prog_load+0x7f4/0x20e0 [ 247.545658][T11667] ? __pfx_bpf_prog_load+0x10/0x10 [ 247.545689][T11667] ? __pfx___might_resched+0x10/0x10 [ 247.545733][T11667] ? __might_fault+0xaa/0x120 [ 247.545762][T11667] __sys_bpf+0x4ea/0x820 [ 247.545795][T11667] ? __pfx___sys_bpf+0x10/0x10 [ 247.545838][T11667] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 247.545874][T11667] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.545909][T11667] ? do_syscall_64+0x100/0x230 [ 247.545946][T11667] __x64_sys_bpf+0x7c/0x90 [ 247.545975][T11667] do_syscall_64+0xf3/0x230 [ 247.546006][T11667] ? clear_bhb_loop+0x35/0x90 [ 247.546040][T11667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.546076][T11667] RIP: 0033:0x7f36f498d169 [ 247.546094][T11667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.546111][T11667] RSP: 002b:00007f36f57cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.546134][T11667] RAX: ffffffffffffffda RBX: 00007f36f4ba5fa0 RCX: 00007f36f498d169 [ 247.546149][T11667] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 247.546162][T11667] RBP: 00007f36f57cf090 R08: 0000000000000000 R09: 0000000000000000 [ 247.546175][T11667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.546187][T11667] R13: 0000000000000000 R14: 00007f36f4ba5fa0 R15: 00007ffc2d9ae238 [ 247.546233][T11667] [ 247.546241][T11667] Mem-Info: [ 247.830429][T11667] active_anon:3950 inactive_anon:0 isolated_anon:0 [ 247.830429][T11667] active_file:1609 inactive_file:38369 isolated_file:0 [ 247.830429][T11667] unevictable:768 dirty:321 writeback:0 [ 247.830429][T11667] slab_reclaimable:11232 slab_unreclaimable:118008 [ 247.830429][T11667] mapped:28949 shmem:1436 pagetables:781 [ 247.830429][T11667] sec_pagetables:0 bounce:0 [ 247.830429][T11667] kernel_misc_reclaimable:0 [ 247.830429][T11667] free:1323850 free_pcp:783 free_cma:0 [ 247.965443][T11686] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1626'. [ 247.980057][T11681] netlink: 'syz.4.1623': attribute type 303 has an invalid length. [ 248.019738][T11667] Node 0 active_anon:15900kB inactive_anon:0kB active_file:6436kB inactive_file:153400kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118296kB dirty:1280kB writeback:0kB shmem:4208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12344kB pagetables:3024kB sec_pagetables:0kB all_unreclaimable? no [ 248.097624][T11667] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 248.098643][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'. [ 248.170767][T11667] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 248.180571][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'. [ 248.239489][T11667] lowmem_reserve[]: 0 2489 2490 [ 248.239544][T11694] x_tables: duplicate underflow at hook 1 [ 248.251816][T11667] 2490 2490 [ 248.255081][T11667] Node 0 DMA32 free:1374504kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:15864kB inactive_anon:0kB active_file:6436kB inactive_file:153072kB unevictable:1536kB writepending:1276kB present:3129332kB managed:2549692kB mlocked:0kB bounce:0kB free_pcp:1912kB local_pcp:876kB free_cma:0kB [ 248.274100][T11686] netlink: 'syz.1.1626': attribute type 18 has an invalid length. [ 248.291027][T11691] xt_socket: unknown flags 0xd0 [ 248.389649][T11667] lowmem_reserve[]: 0 0 0 0 0 [ 248.414343][T11667] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 248.470436][T11667] lowmem_reserve[]: 0 0 0 0 0 [ 248.475268][T11667] Node 1 Normal free:3902800kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:1000kB local_pcp:248kB free_cma:0kB [ 248.539273][T11667] lowmem_reserve[]: 0 0 0 0 0 [ 248.570235][T11667] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 248.620356][T11667] Node 0 DMA32: 217*4kB (UME) 255*8kB (UME) 239*16kB (UME) 139*32kB (ME) 66*64kB (UME) 54*128kB (ME) 99*256kB (UME) 67*512kB (UME) 60*1024kB (UME) 4*2048kB (ME) 292*4096kB (UM) = 1347628kB [ 248.670201][T11704] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1628'. [ 248.670445][T11667] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 248.727188][T11667] Node 1 Normal: 4*4kB (ME) 70*8kB (UME) 41*16kB (UME) 236*32kB (UME) 96*64kB (UME) 40*128kB (UME) 17*256kB (UME) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3902800kB [ 248.735275][T11703] netlink: 'syz.1.1629': attribute type 10 has an invalid length. [ 248.776658][T11667] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 248.777853][T11703] team0: Device hsr_slave_0 failed to register rx_handler [ 248.827138][T11667] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 248.867512][T11667] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 248.898191][T11667] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 248.942300][T11667] 41414 total pagecache pages [ 248.961361][T11667] 0 pages in swap cache [ 248.970341][T11667] Free swap = 124996kB [ 248.986046][T11667] Total swap = 124996kB [ 248.990649][T11667] 2097051 pages RAM [ 248.994487][T11667] 0 pages HighMem/MovableOnly [ 249.022923][T11667] 427906 pages reserved [ 249.027136][T11667] 0 pages cma reserved [ 249.111762][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1633'. [ 249.133894][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1635'. [ 249.214732][T11720] netlink: 'syz.2.1635': attribute type 15 has an invalid length. [ 249.545657][T11736] netlink: 'syz.3.1642': attribute type 10 has an invalid length. [ 249.568624][T11736] team0: Device veth1_macvtap failed to register rx_handler [ 249.580640][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 249.659394][T11740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1643'. [ 249.721882][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'. [ 249.876789][T11740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1643'. [ 250.026432][T11750] lo speed is unknown, defaulting to 1000 [ 250.874713][T11801] netlink: 'syz.1.1667': attribute type 39 has an invalid length. [ 251.084058][T11814] netlink: 'syz.1.1670': attribute type 6 has an invalid length. [ 251.092386][T11814] netlink: 'syz.1.1670': attribute type 7 has an invalid length. [ 251.100909][T11814] netlink: 'syz.1.1670': attribute type 8 has an invalid length. [ 251.173398][T11814] xt_hashlimit: max too large, truncated to 1048576 [ 251.181303][T11814] Cannot find del_set index 4 as target [ 251.188342][T11814] netlink: 'syz.1.1670': attribute type 11 has an invalid length. [ 251.208699][T11819] macsec0: entered promiscuous mode [ 251.218196][T11819] macsec0: left allmulticast mode [ 251.236858][T11819] veth1_macvtap: entered promiscuous mode [ 251.248187][T11819] macsec0: left promiscuous mode [ 251.256558][T11819] veth1_macvtap: left promiscuous mode [ 251.320794][T11823] netlink: 'syz.1.1673': attribute type 1 has an invalid length. [ 251.403696][T11824] netlink: 'syz.0.1672': attribute type 2 has an invalid length. [ 251.928147][T11847] __nla_validate_parse: 4 callbacks suppressed [ 251.928167][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1681'. [ 252.010710][T11850] macsec0: entered promiscuous mode [ 252.072020][T11850] macsec0 (unregistering): left promiscuous mode [ 252.284474][T11860] pim6reg1: entered promiscuous mode [ 252.305349][T11860] pim6reg1: entered allmulticast mode [ 252.535025][T11871] netlink: 'syz.1.1690': attribute type 10 has an invalid length. [ 252.721190][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1690'. [ 252.901814][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1698'. [ 253.033583][T11898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1700'. [ 253.769143][T11935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1710'. [ 253.834016][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1710'. [ 253.979094][T11935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1710'. [ 254.079016][T11948] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1713'. [ 254.105757][T11948] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 254.357493][T11958] netlink: 'syz.1.1717': attribute type 1 has an invalid length. [ 254.448846][T11958] lo speed is unknown, defaulting to 1000 [ 254.741595][T11969] netlink: 'syz.4.1720': attribute type 1 has an invalid length. [ 254.749753][T11969] netlink: 'syz.4.1720': attribute type 1 has an invalid length. [ 254.771791][T11960] lo speed is unknown, defaulting to 1000 [ 254.792746][T11969] netlink: 'syz.4.1720': attribute type 1 has an invalid length. [ 254.842367][T11969] netlink: 'syz.4.1720': attribute type 1 has an invalid length. [ 254.852014][T11969] netlink: 'syz.4.1720': attribute type 1 has an invalid length. [ 254.995930][T11969] netlink: 'syz.4.1720': attribute type 1 has an invalid length. [ 255.023858][T11969] netlink: 'syz.4.1720': attribute type 1 has an invalid length. [ 255.063817][T11969] netlink: 'syz.4.1720': attribute type 1 has an invalid length. [ 255.139514][T11969] netlink: 'syz.4.1720': attribute type 1 has an invalid length. [ 255.343734][T11984] sctp: [Deprecated]: syz.2.1725 (pid 11984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.343734][T11984] Use struct sctp_sack_info instead [ 255.542406][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1728'. [ 255.615210][T11993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1729'. [ 256.144793][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.224792][T12015] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 256.307150][T12022] lo speed is unknown, defaulting to 1000 [ 256.787391][T12038] tipc: Resetting bearer [ 257.010863][T12038] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.019378][T12038] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.029503][T12038] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.038415][T12038] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.074944][T12038] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.088841][T12038] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.105673][T12038] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.117399][T12038] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.147345][T12041] __nla_validate_parse: 6 callbacks suppressed [ 257.147360][T12041] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1744'. [ 257.169559][T12041] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 257.239259][T12044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.272203][T12044] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.315835][T12044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.361435][T12048] ÿÿÿÿÿÿ: renamed from bond_slave_1 [ 257.983413][T12089] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 258.331102][T12101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1760'. [ 258.642221][T12115] warn_alloc: 1 callbacks suppressed [ 258.642241][T12115] syz.0.1767: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 258.673088][T12115] CPU: 1 UID: 0 PID: 12115 Comm: syz.0.1767 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 258.673121][T12115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.673135][T12115] Call Trace: [ 258.673143][T12115] [ 258.673152][T12115] dump_stack_lvl+0x241/0x360 [ 258.673185][T12115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.673210][T12115] ? __pfx__printk+0x10/0x10 [ 258.673238][T12115] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 258.673267][T12115] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 258.673300][T12115] warn_alloc+0x278/0x410 [ 258.673324][T12115] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 258.673348][T12115] ? __pfx_warn_alloc+0x10/0x10 [ 258.673372][T12115] ? kasan_save_track+0x3f/0x80 [ 258.673395][T12115] ? __kasan_kmalloc+0x98/0xb0 [ 258.673420][T12115] ? xsk_setsockopt+0x4aa/0x810 [ 258.673441][T12115] ? do_sock_setsockopt+0x3af/0x720 [ 258.673465][T12115] ? __x64_sys_setsockopt+0x1ee/0x280 [ 258.673488][T12115] ? do_syscall_64+0xf3/0x230 [ 258.673518][T12115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.673560][T12115] __vmalloc_node_range_noprof+0x126/0x1380 [ 258.673614][T12115] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 258.673642][T12115] ? __kasan_kmalloc+0x98/0xb0 [ 258.673673][T12115] vmalloc_user_noprof+0x74/0x80 [ 258.673695][T12115] ? xskq_create+0xb6/0x170 [ 258.673718][T12115] xskq_create+0xb6/0x170 [ 258.673743][T12115] xsk_init_queue+0xa1/0x100 [ 258.673770][T12115] xsk_setsockopt+0x4aa/0x810 [ 258.673795][T12115] ? __pfx_xsk_setsockopt+0x10/0x10 [ 258.673819][T12115] ? __pfx_aa_sk_perm+0x10/0x10 [ 258.673864][T12115] ? aa_sock_opt_perm+0x79/0x120 [ 258.673904][T12115] ? __pfx_xsk_setsockopt+0x10/0x10 [ 258.673926][T12115] do_sock_setsockopt+0x3af/0x720 [ 258.673959][T12115] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 258.673991][T12115] ? __fget_files+0x395/0x410 [ 258.674022][T12115] ? __fget_files+0x2a/0x410 [ 258.674064][T12115] __x64_sys_setsockopt+0x1ee/0x280 [ 258.674097][T12115] do_syscall_64+0xf3/0x230 [ 258.674129][T12115] ? clear_bhb_loop+0x35/0x90 [ 258.674163][T12115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.674192][T12115] RIP: 0033:0x7fbb0f98d169 [ 258.674211][T12115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.674229][T12115] RSP: 002b:00007fbb10769038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 258.674252][T12115] RAX: ffffffffffffffda RBX: 00007fbb0fba5fa0 RCX: 00007fbb0f98d169 [ 258.674267][T12115] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 258.674280][T12115] RBP: 00007fbb0fa0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 258.674293][T12115] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.674306][T12115] R13: 0000000000000000 R14: 00007fbb0fba5fa0 R15: 00007ffdf763c848 [ 258.674339][T12115] [ 258.674347][T12115] Mem-Info: [ 259.010394][T12115] active_anon:4589 inactive_anon:0 isolated_anon:0 [ 259.010394][T12115] active_file:1609 inactive_file:38373 isolated_file:0 [ 259.010394][T12115] unevictable:768 dirty:301 writeback:0 [ 259.010394][T12115] slab_reclaimable:11591 slab_unreclaimable:122517 [ 259.010394][T12115] mapped:30191 shmem:1989 pagetables:792 [ 259.010394][T12115] sec_pagetables:0 bounce:0 [ 259.010394][T12115] kernel_misc_reclaimable:0 [ 259.010394][T12115] free:1311715 free_pcp:4750 free_cma:0 [ 259.120622][T12115] Node 0 active_anon:22256kB inactive_anon:0kB active_file:6436kB inactive_file:153416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124864kB dirty:1204kB writeback:0kB shmem:10320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12652kB pagetables:3068kB sec_pagetables:0kB all_unreclaimable? no [ 259.175013][T12115] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 259.220716][T12134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1767'. [ 259.298029][T12115] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.360630][T12115] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 259.366744][T12115] Node 0 DMA32 free:1325304kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:33296kB inactive_anon:0kB active_file:6436kB inactive_file:153088kB unevictable:1536kB writepending:1256kB present:3129332kB managed:2549692kB mlocked:0kB bounce:0kB free_pcp:6320kB local_pcp:3484kB free_cma:0kB [ 259.438554][T12115] lowmem_reserve[]: 0 0 0 0 0 [ 259.451626][T12115] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.480771][T12115] lowmem_reserve[]: 0 0 0 0 0 [ 259.485667][T12115] Node 1 Normal free:3903496kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 259.525382][T12115] lowmem_reserve[]: 0 0 0 0 0 [ 259.530683][T12115] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 259.543851][T12115] Node 0 DMA32: 3*4kB (UE) 57*8kB (UE) 101*16kB (UE) 118*32kB (UE) 35*64kB (UME) 62*128kB (UE) 59*256kB (UE) 63*512kB (UM) 58*1024kB (UM) 7*2048kB (UME) 288*4096kB (UM) = 1316772kB [ 259.562540][T12115] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 259.574903][T12115] Node 1 Normal: 187*4kB (UME) 72*8kB (UME) 41*16kB (UME) 236*32kB (UME) 96*64kB (UME) 40*128kB (UME) 17*256kB (UME) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3903548kB [ 259.609379][ T6385] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 259.621051][T12115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.621078][T12115] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.621097][T12115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.621115][T12115] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.621132][T12115] 47334 total pagecache pages [ 259.621142][T12115] 0 pages in swap cache [ 259.621152][T12115] Free swap = 124996kB [ 259.621161][T12115] Total swap = 124996kB [ 259.621171][T12115] 2097051 pages RAM [ 259.621181][T12115] 0 pages HighMem/MovableOnly [ 259.621190][T12115] 427906 pages reserved [ 259.621199][T12115] 0 pages cma reserved [ 259.701492][T12131] veth1_to_bond: entered allmulticast mode [ 259.709269][T12135] veth1_to_bond: entered promiscuous mode [ 259.986477][T12130] veth1_to_bond: left promiscuous mode [ 259.992589][T12130] veth1_to_bond: left allmulticast mode [ 260.249129][T12159] validate_nla: 58 callbacks suppressed [ 260.249157][T12159] netlink: 'syz.3.1775': attribute type 1 has an invalid length. [ 260.306516][T12159] lo speed is unknown, defaulting to 1000 [ 260.311185][T12111] atomic_op ffff888033482998 conn xmit_atomic 0000000000000000 [ 261.181701][T12186] x_tables: duplicate underflow at hook 2 [ 261.364200][T12197] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 261.556006][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1786'. [ 262.322864][T12240] lo speed is unknown, defaulting to 1000 [ 262.998843][T12256] x_tables: duplicate underflow at hook 1 [ 263.264246][T12270] syz.4.1807 uses old SIOCAX25GETINFO [ 263.761907][T12289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1812'. [ 264.029292][T12298] lo speed is unknown, defaulting to 1000 [ 264.797652][T12319] bond0: entered promiscuous mode [ 264.807902][T12319] bond4: entered promiscuous mode [ 264.828216][T12319] x_tables: ip_tables: udp match: only valid for protocol 17 [ 264.864601][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1822'. [ 265.474725][T12348] netlink: 'syz.4.1832': attribute type 39 has an invalid length. [ 265.644157][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1835'. [ 265.686874][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1835'. [ 265.943553][T12357] vlan6: entered allmulticast mode [ 265.949377][T12357] hsr0: entered allmulticast mode [ 265.955031][T12357] hsr_slave_0: entered allmulticast mode [ 265.962447][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1835'. [ 265.965014][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1835'. [ 266.218410][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'. [ 266.290827][T12376] netlink: 'syz.3.1837': attribute type 1 has an invalid length. [ 266.723163][T12401] netlink: 'syz.1.1846': attribute type 2 has an invalid length. [ 266.738831][T12401] netlink: 'syz.1.1846': attribute type 6 has an invalid length. [ 266.747128][T12401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1846'. [ 267.151375][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1854'. [ 267.160715][T12428] netlink: 'syz.0.1854': attribute type 7 has an invalid length. [ 267.382683][T12440] pim6reg: left allmulticast mode [ 267.855265][T12470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.884286][T12466] lo speed is unknown, defaulting to 1000 [ 268.287676][T12478] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1867'. [ 268.869571][T12498] syzkaller1: entered promiscuous mode [ 268.880208][T12498] syzkaller1: entered allmulticast mode [ 269.542136][T12537] __nla_validate_parse: 1 callbacks suppressed [ 269.542157][T12537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1883'. [ 269.565721][T12532] lo speed is unknown, defaulting to 1000 [ 269.600173][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1883'. [ 269.685228][T12547] netlink: 'syz.0.1886': attribute type 11 has an invalid length. [ 269.702316][T12547] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1886'. [ 270.105161][T12561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1892'. [ 270.117181][T12561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1892'. [ 270.184754][T12565] bridge_slave_0: left allmulticast mode [ 270.190599][T12565] bridge_slave_0: left promiscuous mode [ 270.196332][T12565] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.207123][T12565] bridge_slave_1: left allmulticast mode [ 270.218378][T12565] bridge_slave_1: left promiscuous mode [ 270.224950][T12565] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.253534][T12565] bond0: (slave bond_slave_0): Releasing backup interface [ 270.272939][T12565] bond0: (slave bond_slave_1): Releasing backup interface [ 270.307175][T12565] team0: Port device team_slave_0 removed [ 270.364900][T12565] team0: Port device team_slave_1 removed [ 270.377382][T12565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.386216][T12565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.411340][T12565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.418806][T12565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.476902][T12566] team0: Mode changed to "loadbalance" [ 270.597767][T12578] netlink: 'syz.1.1897': attribute type 41 has an invalid length. [ 270.605953][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1897'. [ 270.972539][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1902'. [ 270.992784][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1902'. [ 271.125349][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1903'. [ 271.245964][T12606] smc: removing ib device syz2 [ 271.397613][T12601] bond0: option arp_interval: invalid value (18446744072034198015) [ 271.415727][T12601] bond0: option arp_interval: allowed values 0 - 2147483647 [ 272.406967][T12632] ================================================================== [ 272.415110][T12632] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 272.423917][T12632] Write of size 8 at addr ffff8880355f35b0 by task syz.2.1913/12632 [ 272.431920][T12632] [ 272.434262][T12632] CPU: 1 UID: 0 PID: 12632 Comm: syz.2.1913 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 272.434289][T12632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 272.434302][T12632] Call Trace: [ 272.434310][T12632] [ 272.434318][T12632] dump_stack_lvl+0x241/0x360 [ 272.434348][T12632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.434378][T12632] ? __pfx__printk+0x10/0x10 [ 272.434406][T12632] ? _printk+0xd5/0x120 [ 272.434425][T12632] ? __virt_addr_valid+0x183/0x530 [ 272.434446][T12632] ? __virt_addr_valid+0x183/0x530 [ 272.434468][T12632] print_report+0x16e/0x5b0 [ 272.434494][T12632] ? __virt_addr_valid+0x183/0x530 [ 272.434513][T12632] ? __virt_addr_valid+0x183/0x530 [ 272.434531][T12632] ? __virt_addr_valid+0x45f/0x530 [ 272.434550][T12632] ? __phys_addr+0xba/0x170 [ 272.434570][T12632] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 272.434595][T12632] kasan_report+0x143/0x180 [ 272.434621][T12632] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 272.434650][T12632] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 272.434676][T12632] rxrpc_lookup_local+0xea5/0x1890 [ 272.434708][T12632] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 272.434738][T12632] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 272.434759][T12632] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 272.434786][T12632] ? __local_bh_enable_ip+0x168/0x200 [ 272.434812][T12632] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 272.434843][T12632] rxrpc_sendmsg+0x323/0x5f0 [ 272.434867][T12632] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 272.434887][T12632] __sock_sendmsg+0x221/0x270 [ 272.434919][T12632] ____sys_sendmsg+0x53a/0x860 [ 272.434949][T12632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.434983][T12632] __sys_sendmmsg+0x36a/0x720 [ 272.435014][T12632] ? __pfx___sys_sendmmsg+0x10/0x10 [ 272.435056][T12632] ? wake_up_q+0xdc/0x120 [ 272.435084][T12632] ? futex_wait+0x285/0x360 [ 272.435116][T12632] ? __pfx_futex_wait+0x10/0x10 [ 272.435151][T12632] ? __local_bh_enable_ip+0x168/0x200 [ 272.435176][T12632] ? rxrpc_connect+0x167/0x1b0 [ 272.435195][T12632] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 272.435222][T12632] ? do_futex+0x33b/0x560 [ 272.435253][T12632] ? __sys_connect+0xf0/0x2d0 [ 272.435281][T12632] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 272.435333][T12632] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.435366][T12632] ? do_syscall_64+0x100/0x230 [ 272.435408][T12632] __x64_sys_sendmmsg+0xa0/0xb0 [ 272.435448][T12632] do_syscall_64+0xf3/0x230 [ 272.435478][T12632] ? clear_bhb_loop+0x35/0x90 [ 272.435511][T12632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.435539][T12632] RIP: 0033:0x7f36f498d169 [ 272.435558][T12632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.435594][T12632] RSP: 002b:00007f36f57cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 272.435617][T12632] RAX: ffffffffffffffda RBX: 00007f36f4ba5fa0 RCX: 00007f36f498d169 [ 272.435633][T12632] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 272.435647][T12632] RBP: 00007f36f4a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 272.435660][T12632] R10: 61acbc565664f7c8 R11: 0000000000000246 R12: 0000000000000000 [ 272.435675][T12632] R13: 0000000000000000 R14: 00007f36f4ba5fa0 R15: 00007ffc2d9ae238 [ 272.435698][T12632] [ 272.435707][T12632] [ 272.758069][T12632] Allocated by task 12491: [ 272.762494][T12632] kasan_save_track+0x3f/0x80 [ 272.767189][T12632] __kasan_slab_alloc+0x66/0x80 [ 272.772050][T12632] kmem_cache_alloc_noprof+0x1d9/0x380 [ 272.777542][T12632] sk_prot_alloc+0x58/0x210 [ 272.782063][T12632] sk_alloc+0x3e/0x370 [ 272.786149][T12632] inet_create+0x648/0xea0 [ 272.790577][T12632] __sock_create+0x4c0/0xa30 [ 272.795204][T12632] __sys_socket+0x150/0x3c0 [ 272.799737][T12632] __x64_sys_socket+0x7a/0x90 [ 272.804441][T12632] do_syscall_64+0xf3/0x230 [ 272.808979][T12632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.814897][T12632] [ 272.817242][T12632] Freed by task 12490: [ 272.821323][T12632] kasan_save_track+0x3f/0x80 [ 272.826125][T12632] kasan_save_free_info+0x40/0x50 [ 272.831293][T12632] __kasan_slab_free+0x59/0x70 [ 272.836107][T12632] kmem_cache_free+0x195/0x410 [ 272.840899][T12632] __sk_destruct+0x4fd/0x690 [ 272.845514][T12632] inet_release+0x17d/0x200 [ 272.850036][T12632] sock_close+0xbc/0x240 [ 272.854325][T12632] __fput+0x3e9/0x9f0 [ 272.858775][T12632] task_work_run+0x24f/0x310 [ 272.863381][T12632] syscall_exit_to_user_mode+0x13f/0x340 [ 272.869044][T12632] do_syscall_64+0x100/0x230 [ 272.873682][T12632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.879594][T12632] [ 272.881920][T12632] The buggy address belongs to the object at ffff8880355f2e80 [ 272.881920][T12632] which belongs to the cache UDP of size 1856 [ 272.895373][T12632] The buggy address is located 1840 bytes inside of [ 272.895373][T12632] freed 1856-byte region [ffff8880355f2e80, ffff8880355f35c0) [ 272.909363][T12632] [ 272.911706][T12632] The buggy address belongs to the physical page: [ 272.918225][T12632] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x355f0 [ 272.927006][T12632] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 272.935614][T12632] memcg:ffff888033dd0201 [ 272.939860][T12632] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 272.947780][T12632] page_type: f5(slab) [ 272.951791][T12632] raw: 00fff00000000040 ffff88801bbac3c0 ffffea00017a5600 0000000000000003 [ 272.960399][T12632] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff888033dd0201 [ 272.969011][T12632] head: 00fff00000000040 ffff88801bbac3c0 ffffea00017a5600 0000000000000003 [ 272.977698][T12632] head: 0000000000000000 0000000080100010 00000000f5000000 ffff888033dd0201 [ 272.986376][T12632] head: 00fff00000000003 ffffea0000d57c01 ffffffffffffffff 0000000000000000 [ 272.995052][T12632] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 273.003765][T12632] page dumped because: kasan: bad access detected [ 273.010195][T12632] page_owner tracks the page as allocated [ 273.015922][T12632] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6035, tgid 6034 (syz.4.35), ts 83734880165, free_ts 83652544899 [ 273.036960][T12632] post_alloc_hook+0x1f4/0x240 [ 273.041766][T12632] get_page_from_freelist+0x365c/0x37a0 [ 273.047339][T12632] __alloc_frozen_pages_noprof+0x292/0x710 [ 273.053226][T12632] alloc_pages_mpol+0x311/0x660 [ 273.058113][T12632] allocate_slab+0x8f/0x3a0 [ 273.062633][T12632] ___slab_alloc+0xc27/0x14a0 [ 273.067367][T12632] __slab_alloc+0x58/0xa0 [ 273.071720][T12632] kmem_cache_alloc_noprof+0x268/0x380 [ 273.077195][T12632] sk_prot_alloc+0x58/0x210 [ 273.081714][T12632] sk_alloc+0x3e/0x370 [ 273.085788][T12632] inet_create+0x648/0xea0 [ 273.090223][T12632] __sock_create+0x4c0/0xa30 [ 273.094839][T12632] __sys_socket+0x150/0x3c0 [ 273.099372][T12632] __x64_sys_socket+0x7a/0x90 [ 273.104079][T12632] do_syscall_64+0xf3/0x230 [ 273.108743][T12632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.114676][T12632] page last free pid 6033 tgid 6033 stack trace: [ 273.121021][T12632] free_frozen_pages+0xe0d/0x10e0 [ 273.126078][T12632] __put_partials+0x160/0x1c0 [ 273.130768][T12632] put_cpu_partial+0x17c/0x250 [ 273.135538][T12632] __slab_free+0x290/0x380 [ 273.139965][T12632] qlist_free_all+0x9a/0x140 [ 273.144563][T12632] kasan_quarantine_reduce+0x14f/0x170 [ 273.150034][T12632] __kasan_slab_alloc+0x23/0x80 [ 273.154899][T12632] __kmalloc_node_noprof+0x23c/0x4d0 [ 273.160213][T12632] alloc_slab_obj_exts+0x3a/0xa0 [ 273.165173][T12632] __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 273.171079][T12632] kmem_cache_alloc_noprof+0x287/0x380 [ 273.176554][T12632] __anon_vma_prepare+0x117/0x4a0 [ 273.181673][T12632] __handle_mm_fault+0x5f7d/0x6ef0 [ 273.186799][T12632] handle_mm_fault+0x3e5/0x8d0 [ 273.191579][T12632] exc_page_fault+0x459/0x8b0 [ 273.196262][T12632] asm_exc_page_fault+0x26/0x30 [ 273.201128][T12632] [ 273.203451][T12632] Memory state around the buggy address: [ 273.209075][T12632] ffff8880355f3480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 273.217139][T12632] ffff8880355f3500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 273.225204][T12632] >ffff8880355f3580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 273.233279][T12632] ^ [ 273.238917][T12632] ffff8880355f3600: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 273.246994][T12632] ffff8880355f3680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 273.255053][T12632] ================================================================== [ 273.264530][T12632] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 273.271756][T12632] CPU: 1 UID: 0 PID: 12632 Comm: syz.2.1913 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 273.282608][T12632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.292667][T12632] Call Trace: [ 273.295945][T12632] [ 273.298901][T12632] dump_stack_lvl+0x241/0x360 [ 273.303597][T12632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.308802][T12632] ? __pfx__printk+0x10/0x10 [ 273.313401][T12632] ? vscnprintf+0x5d/0x90 [ 273.317740][T12632] panic+0x349/0x880 [ 273.321641][T12632] ? check_panic_on_warn+0x21/0xb0 [ 273.326770][T12632] ? __pfx_panic+0x10/0x10 [ 273.331194][T12632] ? mark_lock+0x9a/0x360 [ 273.335525][T12632] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 273.341432][T12632] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 273.347333][T12632] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 273.353677][T12632] ? print_report+0x519/0x5b0 [ 273.358369][T12632] check_panic_on_warn+0x86/0xb0 [ 273.363328][T12632] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 273.369582][T12632] end_report+0x77/0x160 [ 273.373835][T12632] kasan_report+0x154/0x180 [ 273.378352][T12632] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 273.384341][T12632] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 273.390159][T12632] rxrpc_lookup_local+0xea5/0x1890 [ 273.395283][T12632] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 273.400835][T12632] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 273.406133][T12632] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 273.411779][T12632] ? __local_bh_enable_ip+0x168/0x200 [ 273.417161][T12632] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 273.422895][T12632] rxrpc_sendmsg+0x323/0x5f0 [ 273.427496][T12632] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 273.432610][T12632] __sock_sendmsg+0x221/0x270 [ 273.437302][T12632] ____sys_sendmsg+0x53a/0x860 [ 273.442081][T12632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.447378][T12632] __sys_sendmmsg+0x36a/0x720 [ 273.452063][T12632] ? __pfx___sys_sendmmsg+0x10/0x10 [ 273.457280][T12632] ? wake_up_q+0xdc/0x120 [ 273.461619][T12632] ? futex_wait+0x285/0x360 [ 273.466146][T12632] ? __pfx_futex_wait+0x10/0x10 [ 273.471044][T12632] ? __local_bh_enable_ip+0x168/0x200 [ 273.476421][T12632] ? rxrpc_connect+0x167/0x1b0 [ 273.481223][T12632] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 273.486951][T12632] ? do_futex+0x33b/0x560 [ 273.491317][T12632] ? __sys_connect+0xf0/0x2d0 [ 273.496006][T12632] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.501995][T12632] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.508351][T12632] ? do_syscall_64+0x100/0x230 [ 273.513135][T12632] __x64_sys_sendmmsg+0xa0/0xb0 [ 273.517990][T12632] do_syscall_64+0xf3/0x230 [ 273.522518][T12632] ? clear_bhb_loop+0x35/0x90 [ 273.527206][T12632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.533104][T12632] RIP: 0033:0x7f36f498d169 [ 273.537529][T12632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.557241][T12632] RSP: 002b:00007f36f57cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 273.565660][T12632] RAX: ffffffffffffffda RBX: 00007f36f4ba5fa0 RCX: 00007f36f498d169 [ 273.573631][T12632] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 273.581602][T12632] RBP: 00007f36f4a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 273.589748][T12632] R10: 61acbc565664f7c8 R11: 0000000000000246 R12: 0000000000000000 [ 273.597719][T12632] R13: 0000000000000000 R14: 00007f36f4ba5fa0 R15: 00007ffc2d9ae238 [ 273.605698][T12632] [ 273.609046][T12632] Kernel Offset: disabled [ 273.613373][T12632] Rebooting in 86400 seconds..