last executing test programs: 4.744391479s ago: executing program 3 (id=1173): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000200)=[{0x3, 0xe7, 0xff, 0x4}, {0x3, 0x7, 0x2, 0x7}]}, 0x10) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000006340)=@bloom_filter={0x1e, 0x7, 0x0, 0x2, 0x100, 0xffffffffffffffff, 0xd4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0xc, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000006200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1}, 0x40002000) (async) socket$nl_generic(0x10, 0x3, 0x10) 4.580975626s ago: executing program 3 (id=1177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014", 0x5}], 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x44, r4, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x0, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 4.30229943s ago: executing program 3 (id=1183): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@ipv6_delrule={0x44, 0x18, 0x301, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x6, 0x3, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x44}}, 0x4008000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x3f5, 0x4, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x400c020) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x5de}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r3, 0x2, 0x6, [0x8, 0x4, 0x0, 0x1, 0x101, 0x7]}, &(0x7f0000000100)=0x14) 4.127573761s ago: executing program 2 (id=1185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020200f00000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000010400008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8842, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.956497168s ago: executing program 2 (id=1189): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) write$ppp(r0, &(0x7f0000000140)="00f79794b34690f5d1dde844617a52514a5e52866601afda2a8d74a26b3d30befed3e3090b52e4fdcf0cc81e012f4d3030160975b80afcbdffffff7f0000000083388b29f59a39c95fbbf86317e02d7b83e18d2160ba2cb251d246c01b52f9a747bfede061990154b32baeba6bdccc8a1008ff038ab397988dd6be514921d85fa96085cc7771d26b3cab6dbe3caad4c6c051984b66cb5204553f362b29e04519b70fd0ee325b01a0a6e8c2b7544af7c43277236e5bd88f86af22c00f9bae49c564b27360dc082d64fbb1e6ce95244d977faaf4dc2fabbf3fdd31e2cb1621d4a1896554710b498177fa4446b5eb910df36f3c3cc19ffd9afa7277ad4d", 0xfffffe2c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xf1a3c000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) socketpair(0x21, 0xa, 0x2, &(0x7f0000002100)) setsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f00000003c0)="3973d7b3cb25cd79c5c880697f129cc0f68a7ccd2d5c8b9b9d8cfa7a3a66b238b480af5f4fa1bd22c50a9aa4443a19e0ecfb3dc08155d6d1351c8561b41ba7758b62ec1ae7383d3bad1ca861cab52c19f64ce845e60dbe157add03ccc76cc8922707939ffb458637b431296d9a37ac10f04b50f9202f7a130cf433806695ee8f06cea0d45adbe814d253be7e98921e7fe1b7774b410397db75262b9bf8cfc8e907a949acd43cdaf0d0a765ef1027c82c7ba0e6e01cdc06c27a6aa3ee75f88f35864adbe324ab204d8ba82f0b928c51e6633524eb59a81351549c75d301", 0xdd) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071108f000000000006000000000000009500000000ffff00"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="9f51eb010018000000000000000c0000000c000000090000000609000000000000000000005fcf2d0006000000000000003958026842cab78dc48b37e68d80700462e5699ba09678846d7e4d951071b7b7ff2eca"], 0x0, 0x2d, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0a00ff0000000071108600000000009500000000001a0091380984c9ff5e9e6859e6139fd40ce3871343e4d3089597cd6bfddaa887ef5e9cbf1d975a211a1d92af781efc41cbebd06662324edf14de1f38fa519f8d23029dd8197ac832a1906ea8d056474105945df2a5651cdb4ce5bf76c557a74f7e01c130b56641a56ba423d4dfe4df70751662f3bbcf04446f51968e4c8f62e67fd1b8fd6bbfc6ec3195c252ee9962be"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000d14010026bd7200ffdbdf25080003000100000008003e0001000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x8000080}, 0x24044890) openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf", @ANYRESHEX], 0xfc}}, 0x4000000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x1000) 3.799799834s ago: executing program 1 (id=1190): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd072f5b89c3043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b8003"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 64) listen(r2, 0x3) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) (async) sendmmsg$unix(r3, &(0x7f0000000f80)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000a00)=ANY=[], 0xa0, 0x4000041}}, {{&(0x7f0000000ac0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040000}}], 0x2, 0x0) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async) syz_emit_ethernet(0x8a, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x4, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x8f}, @window={0x3, 0x3, 0xac}, @timestamp={0x8, 0xa, 0x200, 0x8}, @sack={0x5, 0x2}, @fastopen={0x22, 0xd, "54df942f7e09586180bbb0"}, @sack={0x5, 0x0, [0x8]}, @sack={0x5, 0x1a, [0x5, 0x5, 0x10, 0x0, 0xc2, 0xfffffff7]}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000af99000004000000010000000000000066cfa1b6613574d220af60d112bad2dba98e05cd76ab20000afa5b7f01c5e607d37cd509356b2b6ea573867d04c4858a93f60b7f7c980e69b85fd8b2057ab1a0593b43cee44de7437422680dce6c83a0268b87f53bc0e46a370b1ff6e7402ad77b26a1766b43a9de14b1f096c7d7963d6693af1898fb1178cb2f3f1ff46e8409b4903216f239eab2271a8fa3a8bd1318ee77ed255493ea902c7e99035d076499fcebd4cfdcdd4c22c445f06e433f56453a0420af9f138d456db600b914ff442d309f720047014cf78568b33ec3e81fb2549a8952131d148ce1", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fcffffff00"/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="26000000ff7b21fabfe50000", @ANYRES32, @ANYBLOB="bcc5ae50569812803142e1c14ca4ef333775d55a5c1c346b292e90a944e6324725db79d9d96d0ff19ea26aece61cccf1da321529bbe284150a1390292fb71bd2e072afb85571954f584f60f1b8efde476fb8a9cc1d01fd50175d2a91003003e2f6049c3ab2d793077c10e90394e77f79665da6ad3a26dd91fb683181503a06c8099288c079fd282f92dcdb76f2d20ee826ae38c134b03fb81a73f1b42f290bab277c86b2da142937d7495178927d069630c6e0781adb428422f7faa38e9184900817c514c5c26f92", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000180)="4e02e5a3a28e3be43bec9fe3f9ff780d5dcce8a1490a3c454b5f1f683e1f711c0e7804bee50edb030993f7fb213da77e8756d5e12a0ba7", &(0x7f0000000040)=@udp=r0}, 0x20) (async) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x2040040) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r5) 3.799237136s ago: executing program 3 (id=1191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xc}}]}}]}, 0x40}}, 0x0) r7 = socket(0x2, 0x5, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r9, 0x7fffffff}, &(0x7f0000000640)=0x8) close(0x3) 1.852075982s ago: executing program 2 (id=1194): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @mcast1, @private0, 0x800000, 0x6, 0x0, 0x0, 0x6, 0x160181}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206050000000000000000000704000014000780080008400000009805001400200000000500010006000100050005000a00000005000400000000000900020071797a310000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x20000000) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x5, 0x4) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 1.830358364s ago: executing program 3 (id=1196): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) unshare(0x62040200) mmap(&(0x7f00000ba000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001914000000110001"], 0xd8}}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@delqdisc={0x34, 0x25, 0x200, 0x2070bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe0}, {0xd, 0xe}, {0x3, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000011) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@deltaction={0x16c, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2ac94ed9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x720bcc27}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa322}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r4, &(0x7f0000000280)=@abs, 0x6e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_0\x00', 0x10}) r8 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r1, @ANYRES64=r8, @ANYRESOCT=r5], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000340), 0x11000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000008, 0x10, r10, 0x0) 1.786348005s ago: executing program 1 (id=1198): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x22}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$alg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x8c4}, 0x20000040) recvmsg$qrtr(r3, 0x0, 0x0, 0x2040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) 1.703787072s ago: executing program 0 (id=1199): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000080000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001000090500c100000000000008004300ff030000a90000000b0e13e735a3184f123d6d92f1accfdaee2dd2b184b27db1f3ea7767bf0004003dd93d00000000001dcedf5966bd8b85b01b5f44e4ce28712d28", @ANYRES64=r0], 0xe0}], 0x1, 0x0, 0x0, 0x22000885}, 0x20040044) 1.508711111s ago: executing program 0 (id=1201): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000001000000002"], 0x48) (fail_nth: 3) 1.115728638s ago: executing program 0 (id=1203): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x100000, 0x0}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000030800050009000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r9 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r10, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r8], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.105377201s ago: executing program 1 (id=1204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000003d000d8632cd6bdccc8d0000047c0000040000000c00018006000600800a0000040002"], 0x28}}, 0x20008000) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd75006bdbdf2505000000200001800d0001005564703a73797a31000000000c000280070001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x100) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a0000040502"], 0x528}}, 0xc000) 1.057112723s ago: executing program 4 (id=1205): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x4000040) 999.388459ms ago: executing program 0 (id=1206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xc}}]}}]}, 0x40}}, 0x0) r7 = socket(0x2, 0x5, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r9, 0x7fffffff}, &(0x7f0000000640)=0x8) close(0x3) 932.808162ms ago: executing program 4 (id=1207): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000000020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000500"], 0x28}}, 0x4004) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010324bd700279dbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7933}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r2) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-neon\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x54, r7, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x45}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "93d6423b2d915d018000000000000004"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x49}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000985}, 0xe010) (async) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000006a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0088fb4503005800000000072f90787f000001e0000001248088a80000000010000800000086dd08000000000010000000010000000000080022eb0000000020060000020000"], 0x0) (async) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x2f, &(0x7f0000000680)=0x5, 0x4) (async) r11 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg$alg(r11, &(0x7f0000001700)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="6c7563f9bc", 0x5}], 0x1, 0x0, 0x0, 0x8080}], 0x1, 0x8000) (async, rerun: 64) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000007fc0)={&(0x7f0000007f00)=ANY=[@ANYBLOB="200000070a01020000000000000000000000010900020073797a300000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async, rerun: 64) sendmsg$key(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x70bd2b, 0x25dfdbff}, 0x10}}, 0x80c0) 932.094437ms ago: executing program 2 (id=1208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="41030600", @ANYRES16=r2, @ANYBLOB="00022bbd7000fddbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x34c}, 0x1, 0x0, 0x0, 0x22004804}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000480)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xa}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0x7, 0xff4c, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) r7 = socket(0x2, 0x6, 0x0) connect$rxrpc(r7, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0xd1, @mcast1, 0x14}}, 0x24) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f00000022c0)='dctcp\x00', 0x51) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x7c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x3c, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x7c}}, 0x0) 931.473779ms ago: executing program 1 (id=1209): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x1, @broadcast}, 0x2e, {0x2, 0x4e23, @empty}, 'bridge_slave_1\x00'}) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x3}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0xe0}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x1, @broadcast}, 0x2e, {0x2, 0x4e23, @empty}, 'bridge_slave_1\x00'}) (async) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x3}, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0xe0}}, 0x0) (async) 763.29749ms ago: executing program 4 (id=1210): r0 = socket(0x8, 0xa, 0xffffffff) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x21, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x800, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000140), &(0x7f0000000180)=0x8) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000240)=0x68) (async) connect$bt_sco(r0, &(0x7f0000000280)={0x1f, @none}, 0x8) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000002c0)) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000440)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000002600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000025c0)={&(0x7f0000000480)={0x2140, 0x1f, 0x200, 0x70bd29, 0x25dfdbfc, {0x8}, [@nested={0x1072, 0xc, 0x0, 0x1, [@generic="2348b0fe59e0d2033f1a520b0161a2fc7ef52a0305b01b1eadbf5b422216c542b6962f0c6e787b5464fb867dcb824884c74536e8fa2d2702eb70fc0df79992c414e825da188fb17129acfb2132ce22280c799b6f0f0efc00b697", @typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@mcast2}, @generic="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"]}, @generic="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", @nested={0x3e, 0x2, 0x0, 0x1, [@typed={0x4, 0x16}, @generic="acab1b6e11ab6eacc508be49fc06ec227d14897f5ee9a0efc22e41493350ed4bf6fc07a922135bbd18b676ec6ac9df5d1fbfd92fc313"]}, @nested={0x8, 0xd6, 0x0, 0x1, [@nested={0x4, 0x106}]}, @typed={0x8, 0x146, 0x0, 0x0, @uid=r4}, @generic="c14cfb18337a82b3521b7dda4e1ba21a179bef930f53f37be6522cce8fdb78b3c47216c0add70938f2560777e45962f66285e996600ff3bf86f39e5a23e8290c69d45f4bd32349b1c7588d7085a57229ddba9db336e13ce0b8584fd55c5e15f09c5676e3e8482a3c"]}, 0x2140}, 0x1, 0x0, 0x0, 0x1000}, 0x2000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000026c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002700)=0x18) sendmmsg$inet_sctp(r0, &(0x7f0000004180)=[{&(0x7f0000002640)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000002680), 0x0, &(0x7f0000002740)=[@sndrcv={0x30, 0x84, 0x1, {0x4968, 0x0, 0x2, 0x7, 0x8000, 0xfffffff9, 0x9, 0x1e, r5}}], 0x30, 0x81}, {&(0x7f0000002780)=@in6={0xa, 0x4e22, 0x66e, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x8000}, 0x1c, &(0x7f0000002b00)=[{&(0x7f00000027c0)="86bfaae60227c7b66704eac0868b2bea4301e7193a76152e33201e3a448c9c2920920e1f66a93c38ad702ee6740f2ca9f1e729545785b0a952b63cffc16887045ea97e4846fbf8ea4c5bf9a5ab783eb22d6b2b2679d28d336d10c5c351ae338d26c4abc7f3db00e451313c700ca0da133d42589aba2f5582a4af7539f90b234dd78fb94b09599821807e0d5b4a115aea27c5f52c21713946a09423d51575ec38c347ffd041b7712261215d595743bb10dbf4c671329d41200328bb84d2db877dbe3d890afcee337ead0ba0814c0a8b8cba787b7d6e6cde46d726bf47611baa7c1de262", 0xe3}, {&(0x7f00000028c0)="83052df506ee3fd7da50622948103fd0b2af0f0e48e674960a10a5e4bfc710926e80d76aa5f58d7e14c53f44d7615dee919195c423a99ab64e3eee14f632ad391675484c9113b1329ee67fb990c4c8482162b4e716cb1000ea10295f826bb8d138c3877f2d6495dcc04a60993cba172dc92c6fcd8eafb27234cfc76d71238f3a1f884ba18b4777a4cab06774e04ee10b76ef77618530ebf3f306e2cd1ed04e7fa26c4251877e71eb622bc5bce81b426bdf81b8e18e011ad105f9454bad1e398a46999173b76d87ddce7aa849ec71fa1f720ed698039a3a109b", 0xd9}, {&(0x7f00000029c0)="53dc62cff3b704ec71e6c19f4e1e5f7e6b0445fb21b9def6e65c89b5e8e676ac7c93c62e3f747859bb1718824e10b5d554ed721e81f4e2b8", 0x38}, {&(0x7f0000002a00)="2e676c12941714e730b9127b51c3ca658c01b7410c4f884965c81fc0c5dc0441fc4ddaf3139ca9378e3d44c8473bad309494a2b655c800b2d6d0d5cf8a70fadc55261b69863a177a706b0d2c86d22e783605df0ec22ecba6e8bb58728005025646c046090b7f3ee1dee430305a8e153add5c77d1ae87ac9aa56952a96adcd0d314cdea43759446f71d432360a648f93f179ce4ee0c217655fe", 0x99}, {&(0x7f0000002ac0)="7e5149e7f8f0c0d543052f173a562cdcb186397959833265707226f1c7beb4aa563709", 0x23}], 0x5, &(0x7f0000002b80)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @remote}}, @sndrcv={0x30, 0x84, 0x1, {0x3be0, 0x6, 0xa, 0x8, 0x9, 0x80000001, 0x9, 0x2}}, @authinfo={0x18, 0x84, 0x6, {0x81}}], 0x68, 0x4000011}, {&(0x7f0000002c00)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000003fc0)=[{&(0x7f0000002c40)="290ecc8907526f900a1516d5146a888f9dc8da11b18419c81eda36dbfdcbd678b0d2b6a58845b1967ae72c207b1c746d47c48246aac3cd8a3e5d146893c2187593816b0cff8b", 0x46}, {&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000003cc0)="896cd3c32ba46660452b97ec2653c102cd3c67bfb2c0136ac255c377635e3bd110fcd6780d2cb40f5a4fc0097905bda4c0920f53715b89da82cc814c4281ee8fd73e352b9dff65e99131f2864c1f", 0x4e}, {&(0x7f0000003d40)="3c71dd6dcf22e6ef94471b83c13de733dc4a045b580451ebd98bd6f9f4db3c732521e2824ec4661bb1f23c8191359d84daa098aefcd0b86141d86f37888ecc0c3c58d95b452146c60ce51db9b0b3129d7e00ac83b82a9de1102b521698b3c38dfc4a10f5973c1c65979e26305324e45e0c8c7885c9ecb2f032f96c716b3617ba02ab95768835ef8bbc348d041782c502c613f67dce65fe8f074d5973b2740582681ce963268078b089f52e2f307793cfb365a6843add20465926dbc85adbff592407ace349005026f820d635f1b0612da924894986a10885e6b8f3aed8742db17e794b1a3509eff56f4365a8", 0xec}, {&(0x7f0000003e40)="a4496910627d71810620b56af0237cc3f7d61bd7b4d60a3e750f50da6f28fbf769b708798fd29bcf5bfa8659c4f9b3fcfccb7da5c9a4f352144e1d863e687466a93304127aa40adb7cec84f22a4707b67123adf81267466132281715ac8c0ddad47a9e368cc1803b274ed17dd5fe02b27a62eb3ac846087edae44e475a4459266a26fe8b94d67c90f1675dd42e386929d139ee9a4faa31c4ab02a666c6323e2fd258d04f4eaf3d84c22cb0eaae671b7b72b7cb2b6c5b1bd955ee", 0xba}, {&(0x7f0000003f00)="afba97c6653753f0ccfc02ec8fe446a65aa7931b3faa90ae636f8ec733767c15ab95ea6573f0c12f864048eb10f9b10f46c888d0ff213f7c3e42cf87ca3e1c4cc0c3b9b1edfb1daa73e34250528f1c96dded2be885afb5b14c559f8d76cf2f0ea572062fca9a467c1a3750690dfb762d312ac934d177ba39a33c5e251f71eab700cbc4f9d2438ad27eb34ea1d45797", 0x8f}], 0x6, &(0x7f0000004040)=[@init={0x18, 0x84, 0x0, {0x8, 0x80, 0x2, 0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0xb1, 0xa, 0x0, 0x4, 0xff, 0xffffffff, 0xffffffff}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x8000}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x7ff}}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0xb, 0x3, 0x4, 0xfffffffd, 0x7, 0x9, 0x5, 0x6}}, @authinfo={0x18, 0x84, 0x6, {0x1fe}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x110, 0x4004}], 0x3, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000004240)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000004300)={{r2}, r7, 0x4, @inherit={0x80, &(0x7f0000004280)={0x0, 0x7, 0x9, 0x2, {0x22, 0x5, 0x5, 0x2, 0x1ff}, [0x2, 0x60, 0x8, 0x6d98cb65, 0x6, 0x4, 0xffffffffffffe836]}}, @name="af9c2a01519f8324e535b983c6d6cd266d1a4612b16ae405dd8195bc1d991e6afb2ed3c50a61beee15ab1d5262251f689d14f41be6ac2c95ec14d4e138c89b62986add6e919c0a0367bedac8f85fe44d04f30f3f8e4208da8b60c1626727651a267a95a8bd5f581687ea38f8b50a4d66e40d7e811a0f62fa29bb92c0dd7ab36189588cab5821c72b3f2ed822b18c2719f4a18cfc89deda965f1c34cf6e3166441fd4093f1af7a704d0c6566e423bf378306762579398d7fe83aa338c82fa60e086e4df6a3d90c8d1a31ebefb4d01d0def8799f352e187b36487e12fc7d8d76ce5df70b994f57fb1e58531fd4e35a2d4fb6fae2b728dbf98b1bffa424da40802e1ab609b646963cae9fd5c280990d79f6bce595e388c60d86a471ddb7bc8d4ae7fd4b0fed61fc625b56b514ba6a81ced4e7f4451a1d16676d96847b8cbcb863324fd4a3b9812d3ff92de06c3a9d8103d1e366b769761177633fff01be6bd7c54823f2f781112bd9283d1e6644d44515b91971e6c0d9e9f5c80c8b7be0411ea4afe09d08f0e56af3f9f426a51302fcb8f6d3d1eb9d21850df513a1c863d8c627f258fa4133b5b93876acbfdef56f5519b2066fc11a4881410c7b9cca760c40048484fbb6464d32a6b83b558007af34c920a6cc05ad429cd4f3bd36ea047c0c4ede4eb559ed61620709a3e576c74d1617607328214110cde77889b69ba9b714c20ce10e6c3b12e81cd537dd438237fb03ab5c97f87bd4a455181c4892a7bb9a19c7ac6d64f8ad72b9ec0c2a1f3b20e5773bc3cc011f6c651e65111d9cf7ba880dff82cda566da05f508ec9aedd155eb08564232d6af24b119c619d922e2289831b36d0d670809fa365d98f882c89439fe32626a04a8ecf631b7aad3da83def3b011e8ed37f02298d70a732adede06608741c4d5b8ef9d12ffe00dc808dedb9d5e5061b03f7d3a2b8974b3ee69c0c3bc142be5673ad075be93c3d66d21451cd470402d9c187e7aa198c8f7b4947f8059a6e992027dd156b02dcf74ce165e816395537832775ecf09c7142196599b90a4264280dbb2e2cc3cf86726d8b4e5f8b45a37357d683c39b7d1b73edf25dee5aa8cf373446500d3e9e7a0806a69c67c97db89903b02360c9c75f936da43dfa98c7812414ba2921028a8026b1f269cc997b4d433ce655077678377b930f17f51e7d8c4fa6484ce41d391110790bec812d519220c4be81c456160b89bdb5abbf0a28eee9802f1efcf1680dacf76af3f55df20fc7e725865a54f51876cbe8e4504adc797062e07550789056e8feeb79a976993d615678f3a1cdc0b2dc07a03a65fde6f41b6181ab68eb28fc873b4acd5988804381ddde94cfc4fe6d1e23db2f68a328e89b1145df1686f69a5547294d69e240987869bf3633b49a921f619e1185b3a5a692464cf98e4dcffdbb5eafa3162b7967e3dc20e679c04b2a52604cd233b116661a7f697b1be7ac44c530955311fea2f11ef2a8bb3327aa122f6007119fb46b8825696e944d2e090332f20debfecf76bc7c79a3904f418324ce7e2e674b2e1f827fd540f751e5ee00d2d55daa99414f3bad2669f96b65ea9c8ee4b12f6c4168175b904c6bdc19b797c002e83155609693b5bfcfa9f6189038d04eeb2cf25cd1be3c87f92c4cbc4b563a408b648ce11ad4964ac94e15bfd91f2097dc00c859fbfd508ec16b3ec36a32506e25d2b3e9191dc4f1e2023b0c40f28c0f67d410f96bb67a22185d6422d0790a4bdc090e93a447677e9057f894079dccf32519b372566cd5d3f8a90753b29b7e9fef8bcb6b98bbb1964e10ac46d51b2c91faabdee76e27ce67792842630c78913484ae9f8ab5294fdbf7411525743bb00e789d68bc6d3c2136dfbe1635f4a16f10d5ff37d909931b4cdf5b84e9af4b2ca89bc6f63123aeba27a7d0540ed7f58249cc7de280d182da46591492df0151fed5333c053200867fe3866737f9efe293258118f8da0a011b1bc3ad35a3794b056440d2da1ce1bab86fe8f0bc70a8b6eac2a8b7c67d9a24eb22dd0092b4e3b6e939688082fa6d5a7aee97ad5b5ec0e9883c746d3e19fc1cc20f1085c144cee3e01619e4ecdcc7f29df410def39319fde9f7036d220309239d9fa872b2694b4734f3202c53db1d24aa57f3e0c088fae08cb87cde804cafc7c35ec79a76d8168ea31eda4589b25fb41d3341a70bc5436c56776f44246f3ae0059cfc48fd40c01aac6c53fd41c863504a85ab0dc80bbfc972e95be28fb954d5a5d07d1372b0c804030d225ba2dd7f9be958466da954d75aa9cc4bb1f27fa9077aeb1e21909f393a65df2bf02f08f6ebf233b1650c4f13d6828438552aa8331f7918aeb99ee21c1f52aa4720cd54522f6a89a000db3ea6ac4d13504f9240c95e346bf028423fa577350929f3d5d5f01a0a3c2a3ee670b5c69c36d3f1c1d2361a80d4e8031345fb5fde396be0ae962157bd1e7afcaf88ec9ef6c8476f4583707db26d9e06f783dbea3cc51405ba03c145bb96bbe52efdbf7597c067ad1d6ebfb36f63961990a9982b7858b935387c49f04694c9f66dd10a66fcc8f18e3ea2c024b60f457cb34cb7df7bce4b703d9015a5122dfa606bcdb9da5678656280f60fdadedadd93a1cf997ccca8030f54e6163aa99e797467354c36a3f288fdc74b8931323768e2b48e6ff3fc94681aa950a7676ef41350849d17ca6efa7dcb7ae42236b7e984d68a808ad3d50b21910187e4545658d6b4ff83837b2028998f09d6f76d6c39e534ea7a89c344e8da4680c5ff8375ec3c44271a3537b0f1871c74a758ca505350bd0de7c2a49bcf72e933d258a60e074c2ffcf3388e756f5254baa8974c6370bba09018d3e20347ab118c274e28ed9b5e5a87a04ab6bce57cda734438ac6898974eaa12a4a8bf0040faa78ac92a920710f17861832057fcb5e74f24990bff672a8b4b3cc4fa8d06bdee6af6956e18c6ee491fcd4a91c67f2b7d8346c3b334caa0bcc9b714fedd8694b94dae1aba22c2cbae2cacb026253976835bf4ade9897138e05c8db3ff557e3812a0270fa67473de64a7f7eac67b5bd89c89d440ad046b3d00a154b7b426b2e7cf83ee446ccc52f75cd23a49fdcd30fda14a666d8a24c36c5965c797967842844c5c7972e0c5a2a78e89b1c5239f909adcc629cd6a7e840ddce350549b06ecf1b6256b835b0e11c85cfc21be5538c4149d8166f1d1ceacc0db0219128b28cc801fb91cc7f1d6137196df36b510f553874d6255857294edb3a08a2d178fcfe6d952a0635e32e882c78dcf6fd930df92f212cced9559ff8a0a343763b16159b3dd647d708c461a6a53ca0437cbcbb2c465f361db7457dba6ddd5dcebb77766ea74d571548c7f49f0bfdfaa893caccf3523b227fd518a2dc8ec6c47c4c8388eee6eaf0f95f4e47e4377a6b156f4a0b8570c76b5704bb5a5b9f091b16fd75684b6dc162c9f7962dafedba8ce6b2f1e2c9c2578b593c9134799f6a92c7bb716a5c0404297609117289e47d38eb1fe4b8901305b97e5bab5183e955c0cf9b5c1c7f7bb343d6d812c5e81e48279fb2ab39584a87c9a47a24b3492e852dd770593606a65262565cb482aa561b06e959432a3c24b89f6a07a343bbb486c01690a0a09dfaa080351d90b6ec131eacacf64d88146f35e0a093dbe96394fd56582147500527c35e5159393514bba07376fe236c0bc18980d14bcffc6d60ae3d2d819cf035de5f22aa00461e33a01557627a2646ce3b4f829aa00e517e14f59e25f21ebbd103fdb3cf117f3913eba54cddae5202544c5bdd398a1f45b98deb2d3864171b76635677d5aee547c8403005efbf19dd5a0346f5ce042be2d7baba55fe35a0c94c1556316d04debd603481355eca1ec501c53ac47355a1a88517e946142a153b9c113d072978c2f28f6a33d53f7b0212d909435187e1a95979b9295d721bf41767d443c6adeb46eae3befca9d2774d2d45e1baf8c92ffe01b96fec778062c1c85381ea80369914fe6d349d21dd68c99aa94ac6021c0cc578f6c9e154b1f5a6bb582fd28c99d543bc05e964c0723e75d4914effdacd6f752302216bc1049fb1b0350dbc1a4d5169303486cea2a97f91f128aab4847b022a95fa6da8b829da7724b4646655b87ece967df6f0ec9cb90017eaf22fcb8c25b178d9b72f1b88f3c4ee402a9432e5feecc6ebf52e2eaaf4204461d699742f1a2ba0b4a69dffc167368785a85a5b3d96f9caedd4b562e8c802941b8738d50786a6ba4b26f8fe82e1520cacecb53423c29d86df0083ffb55e369aac637c950be4d31e92988549d2b5e34d7f9b6c0c481e0e584633450f1063febdd9be609c023e1fc08a4e51c36544e2a932490a3102daa188e637a7d897641b51db583a68dbe2ea97e7c3f46cbc3a8449155d8d9cdb2fd2ad973ff181065d2eff05dff97606be898ceb8b173c31cc747b7ae3b1563682f2207a1e28551b48caedd5eeac2722f09524e5ba47e433491f2fecc82aeaa20bb816a8191954ae76638b94ea4507e89367312b7b4d490de409053eae518124c55ac5337a2aa61aab60cfafc9ab667eb4fa592799335bb046e45622c0f9447575395e40cafe007ae8ae05c3d42af5fb4ce777dfe373da550684d397193a07e786bfbaa6f172d5acd4e3a65907c9eebe43075613cb2dbb63cd7aadfe02da5143f12c9c5ec39e7509ec923e50c6913b117400e51300884345b02c4bd230f0cda0e1fc7ff40c83af8d8309e36f6d0e7d86a38327a0d07dbc03ada0b763195f63e19ed47a011b9834e7be4c5e5358ae157d84894b66c09d639dfb7496d448a5a6624da86d4be834eab47ef9ba5c35dc7b863584ab8f6696a8b8dc101d6ebf6ee3c036ef025882dc254dfde4c97ab2cb47f66784aee08a6ecb4a5532bbbb6676dedc2c506d1b8f3cbf8782b89a543e881ef09ae95de79f3c2e45cb5c95dc6be4f8b7e7e52ee0f53cdcdb42380d00d64574469f0a34cce98327dbf10d63692a2ae274cae3656dcfcf0f94561e6fc5c6e4c72c98fe9871d50cfbc970c224d1ed3aafecaa09f24c41fad7b08411db849777096c6e92e142fcc35fdd407317e6ab22cfd20a3feeb9c863710c474448d30b05f753479b48a6ed0a0590e08fb5d024a13240232a632724cf331b39484c1be0ae6b48b4bc671287646be9cb0cccfabf65f7338bddcf7eaccfaec79bb84e5534e5a8e5820e32bb9dab992e96282c036666de5628bd6be3373f2e0cd32dec75a9284ac5aacdd6c64dee985fd246f927084ea777c8141beed10c74287954379bb4dd7c9c66b93cf832cb6d8cfcfe327e0694bea1e2ba637b0ff457760fb83183899206e94c0ccae928da7026fb7124d52ac1e77ffeb6b34de63e319e3e7da14daf311376dbfc0ee1ba19ddf49d5b5c1d1647098d875e32139b7b26a7294071ed7c53b964e704308c809dab1e94da339c7ddbec7fa6cdd3ab41fc3d478c4537eb10a11e1cb9821ed12ca3b878911adc610e13ec7e1301423918c3b6d97487e9bd9a126075477a3d2f55e0330095e7464ff631f25d75511a2ab1fc6e577b0a5d928cfb776b3471f0d007f0155ef3e68b7e45028589e202023e3e4c391c3879979912e4ed82d9505d3b60f342dbad8b9005d50c09e89a24cff15e81d657ab319a52d61ecc2b00137bdc8b35a96f9c0f2880415b40ca45d305242c1c7feb85b65a675a811bf3268d4aca11b8ad33872c27"}) (async) listen(r2, 0x1) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005300)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000005340)='syz0\x00', 0x1ff) (async) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000005380)=""/119, &(0x7f0000005400)=0x77) (async) connect$packet(r0, &(0x7f0000005440)={0x11, 0x3, r3, 0x1, 0xa3, 0x6, @broadcast}, 0x14) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000005480)={@private=0xa010101, @multicast2, 0x1, 0x9, [@rand_addr=0x64010100, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @multicast1, @private=0xa010102, @broadcast]}, 0x34) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000054c0)={0x0, 0x6, 0x10}, 0xc) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000005500)={r6, 0x4db}, &(0x7f0000005540)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000005580)={r9, 0x1, 0x40, "c2d8778ea2d0c64b1513b2bac1ce38d743b1917082093fc5816073a2d0193c32fd0baf15b23a5dacfab403ecf42648e980631f9b684a30da02dc0794ece6402a"}, 0x48) (async) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000005600)=""/218, &(0x7f0000005700)=0xda) (async) shutdown(r0, 0x1) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000005740)=[{{0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x3}, {0x1, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x2}}], 0x28) (async) setsockopt$inet6_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000005780)="a68d394b531877831774ced97be43283e8d710e4ff00eda3683139fcab1d24a9dfdd0c1b8dc32c21", 0x28) pselect6(0x40, &(0x7f00000057c0)={0xf, 0x10, 0x1, 0x4, 0xffffffff, 0x817a, 0x0, 0x1}, &(0x7f0000005800)={0x5, 0x3800000000000000, 0x100000001, 0x1, 0xbbf7, 0x5, 0x9, 0x8001}, &(0x7f0000005840)={0x5, 0x2, 0x1, 0x8, 0x7f, 0x49d2, 0x100000000, 0x8}, &(0x7f0000005880)={0x0, 0x3938700}, &(0x7f0000005900)={&(0x7f00000058c0)={[0x8d9f]}, 0x8}) (async) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000005940)=0x9c00) (async) recvmsg$unix(r0, &(0x7f0000005dc0)={&(0x7f0000005980), 0x6e, &(0x7f0000005d40)=[{&(0x7f0000005a00)=""/231, 0xe7}, {&(0x7f0000005b00)=""/248, 0xf8}, {&(0x7f0000005c00)=""/254, 0xfe}, {&(0x7f0000005d00)=""/15, 0xf}], 0x4, &(0x7f0000005d80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x100) 752.843563ms ago: executing program 3 (id=1211): unshare(0x6a040000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000b00000000ebffffffffffffff00c600"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={r6, 0x5}, 0x8) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000440)={r1, r3, 0x8, 0x0, 0x0, 0xb, 0x3, 0x46d, 0xfff9, 0x3, 0x0, 0x13f7, 'syz0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d8e3484d9c5998b3"}}}, @TCA_STAB={0x4}]}, 0x4c}}, 0x0) (async, rerun: 64) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @broadcast}, 0x10) (async, rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffe01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) unshare(0x68060200) 750.133919ms ago: executing program 1 (id=1212): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608024c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="020403000f00000026bd7000fbdbdf2503000600ff40000002"], 0x78}}, 0x2) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r4}, 0x10, &(0x7f0000000100)={&(0x7f00000005c0)=@canfd={{}, 0x0, 0x2, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947a81f2e3c8973fc2af2a7fa10b9126ea28baed9b57d82ab23db557c307ae88da9c6c68d8ceae8e69b06707297b87f8c925a"}, 0x48}, 0x2, 0x0, 0x0, 0x4904}, 0x4040005) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05eb01d4180000000000005e340000000000000002000004"], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xc, 0x0, 0x0, @void, @value}, 0x28) 641.25757ms ago: executing program 4 (id=1213): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xa70, r1, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x67}}}}, [@NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3, 0x2, 0x16, 0x36, 0x4, 0xb, 0x12, 0x36, 0x18, 0x18, 0x1b, 0xb, 0x6c, 0x4, 0xfe1e34026e7da244, 0x1b, 0x3, 0xc, 0x1b, 0x20, 0x48, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x5, 0x4, 0x2, 0xb, 0x53, 0x24, 0x1, 0x6c, 0x1e, 0x1b, 0x3, 0x4, 0xb, 0x24, 0xc, 0x48, 0x1b, 0x1, 0x2, 0x24, 0x30, 0x24, 0x2, 0xc, 0x3, 0xb, 0x5, 0x5, 0x48, 0x30, 0x60]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x2, 0x4}, {0x7, 0x9}, {0x2, 0xa}, {0x4, 0x4}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x5}, {0x2, 0x8}, {0x4, 0x5}, {0x5, 0x5}, {0x1, 0x2}, {0x1, 0x9}, {0x2, 0xa}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x3}, {0x4}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x6}, {0x7, 0x9}, {0x3, 0xa}, {0x4, 0x2}, {0x7, 0x9}, {0x7, 0x6}, {0x7, 0x5}, {0x4, 0x8}, {0x1, 0x9}, {0x3, 0x8}, {0x3, 0x1}, {}, {0x7, 0x9}, {0x0, 0x3}, {0x6, 0x4}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x1}, {0x3, 0x1}, {0x6, 0xa}, {0x6, 0x9}, {0x3, 0x1}, {0x5, 0x5}, {0x0, 0x7}, {0x2, 0xa}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0xa}, {0x1}, {0x0, 0x7}, {0x3, 0x5}, {0x7, 0x9}, {0x5, 0xa}, {0x5, 0x8}, {0x4, 0x8}, {0x7, 0x2}, {0x5, 0x9}, {0x1, 0x9}, {0x0, 0x4}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x4}, {0x3, 0x6}, {0x4, 0x9}, {0x3, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x0, 0x5}, {0x1, 0x2}, {0x2, 0x1}, {0x3, 0x9}, {0x1, 0x4}, {0x7, 0x4}, {}, {0x2}, {0x4, 0x9}, {0x1, 0x5}, {0x1, 0x2}, {0x7}, {0x1, 0x4}, {0x7, 0x4}, {0x3, 0x6}, {0x7, 0x4}, {0x2, 0x9}, {0x2, 0x7}, {0x3, 0x6}, {0x7, 0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x4}, {0x4, 0xe}, {0x0, 0x2}, {0x1, 0x3}, {0x7, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x4}, {0x2, 0x3}, {0x2, 0x8}, {0x2, 0x8}, {}, {0x7, 0x5}, {0x5}, {0x6}, {0x3, 0x8}, {0x4, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x3, 0x7}, {0x3, 0x7}, {0x7}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x9, 0x24, 0x4, 0x60, 0x30, 0x1, 0x12, 0x32, 0x18, 0x1, 0x18, 0x48, 0x9, 0x24, 0xa4, 0xc, 0x24, 0xc, 0x27, 0x12, 0x3, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x2, 0x0, 0x6, 0x0, 0x5a, 0x9]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x60, 0x1b, 0x5, 0xc, 0x1b, 0x4]}]}]}, @NL80211_ATTR_TX_RATES={0x344, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x16, 0x5, 0x1c, 0x18, 0x6, 0x16, 0x1, 0x6c, 0x6c, 0x9, 0x30, 0x3, 0x6, 0x75, 0x6c, 0x18, 0x9, 0x48, 0x6c, 0x30, 0x60, 0x6c, 0x18, 0x2, 0x58, 0x1b, 0x1, 0x2d]}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0xa, 0x5, 0x401, 0x2, 0x4, 0x645]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x12, 0x9, 0x0, 0x8966, 0x2, 0x5]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x7}, {0x6, 0x2}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x8}, {0x7, 0x2}, {0x0, 0x8}, {0x7, 0x4}, {0x6, 0xa}, {0x7}, {0x1, 0x2}, {0x4, 0x2}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x4, 0x4}, {0x4, 0x6}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x8}, {0x3}, {0x2, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x6, 0x8}, {0x2, 0x1}, {0x3, 0xa}, {0x5, 0xa}, {0x6, 0x4}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0x6}, {0x1, 0x3}, {0x3, 0x8}, {0x6, 0x1}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0x3}, {0x2, 0x9}, {0x2}, {0x6, 0xa}, {0x7, 0x3}, {0x1, 0x1}, {0x5, 0x4}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x2}, {0x6, 0xa}, {0x0, 0xa}, {0x4, 0x8}, {0x5}, {0x5, 0x5}, {0x4, 0x1}, {0x5, 0x3}, {0x7, 0x3}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x2}, {0x4, 0x6}, {0x7, 0xa}, {0x2}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0xa}, {0x1, 0x8}, {0x4, 0x4}, {0x4, 0x7}, {0x5, 0x6}, {0x4, 0x4}, {0x3, 0x8}, {0x4, 0xa}, {0x6, 0xa}, {0x3, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x9}, {0x1, 0x7}, {0x4, 0x4}, {0x4, 0x4}, {0x2, 0x8}, {0x5, 0x9}, {0x7, 0x1}]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2bb, 0x3, 0x8000, 0x9, 0x9, 0x3, 0x0, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x1, 0x8, 0xd, 0x23, 0x2, 0xb0, 0xfe00]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf000, 0x1, 0x8, 0xe2, 0x98df, 0x5, 0x8, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x1000, 0xfffa, 0xfff9, 0x9, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2, 0x0, 0x1b, 0x36, 0x60, 0x48, 0x1, 0x18, 0x1b, 0xc, 0x1b, 0x13, 0x4, 0x6c, 0x60, 0xc, 0x1b, 0x36, 0x60, 0x12, 0xc, 0xc]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7f, 0xfff, 0x5, 0x0, 0x32, 0x8000, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x4, 0x7, 0x6, 0x5, 0x3ff, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x3, 0x5, 0xe, 0x4c, 0xffff, 0x400]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0x60, 0x18, 0xc, 0x0, 0x18, 0x0, 0x0, 0xb, 0x30, 0x36, 0x9, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x40, 0xfff, 0x1, 0x0, 0x3b, 0x7ff, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8d1, 0x5, 0x6, 0xfff, 0x0, 0x8000, 0x800, 0x7]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x6}, {0x6, 0x4}, {0x1, 0x5}, {0x5}, {0x4}, {0x1, 0x5}, {0x6, 0xa}, {0x2, 0x8}, {0x7, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x3, 0xa}, {0x3}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x5}, {0x5}, {0x5}, {0x5, 0x1}, {0x1, 0x6}, {0x4, 0x5}, {0x5, 0x7}, {0x1, 0x8}, {0x7, 0x4}, {0x2}, {0x7, 0x7}, {0x2, 0x2}, {0x4}, {0x4, 0x6}, {0x1, 0x1}, {0x7, 0x4}, {0x3, 0x6}, {0x4, 0x4}, {0x6, 0x4}, {0x6, 0x1}, {0x5, 0x5}, {0x1, 0x6}, {0x5}, {0x1, 0x9}, {0x3, 0x7}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x70, 0xffb7, 0x87, 0x7, 0x3, 0x101, 0xf964, 0x69ce]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x30, 0x1, 0x5, 0x5, 0x9, 0x36, 0x0, 0x1b, 0xc, 0x3]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x1000, 0x1, 0x3, 0x8, 0xfff2, 0x8, 0xfff1]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x7}, {0x6, 0x9}, {0x2, 0x6}, {0x1, 0x2}, {0x7, 0xa}, {0x2, 0x5}, {}, {0x3, 0x2}, {0x1, 0xa}, {0x2}, {0x7, 0x5}, {0x2, 0x5}, {0x1, 0x2}, {0x3, 0x1}, {0x0, 0x9}, {0x3, 0x8}, {0x6, 0x5}, {0x1, 0xa}, {0x4, 0x1}, {0x1, 0x7}, {0x1}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x4}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x6}, {0x3, 0x5}, {0x6, 0x3}, {0x6, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x5}, {0x1, 0x8}, {0x3, 0x5}, {0x6, 0x3}, {0x6, 0x1}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x9}, {0x7, 0x2}, {0x3}, {0x0, 0x8}, {0x1, 0x6}, {0x2, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x3, 0x5}, {0x6, 0x4}, {0x6, 0x1}, {0x5, 0x1}, {0x7, 0x7}, {0x5}, {0x4}, {0x4, 0x4}, {0x5, 0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x89aa, 0x3, 0x1, 0x1, 0x1, 0xfff, 0x74ef, 0x4]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0xb, 0x78, 0xb, 0x18, 0x36, 0x3e, 0x12, 0x30, 0x36, 0x60, 0x9, 0x5, 0x8, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x4, 0x800, 0x4, 0x0, 0xfff7, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x6}, {0x0, 0x1}, {0x6, 0x3}, {0x3}, {0x6, 0x3}, {0x4, 0x2}, {0x6}, {0x4, 0x4}, {0x4, 0x1}, {0x4, 0x2}, {0x2, 0x8}, {0x4, 0x4}, {0x7, 0x6}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0x3}, {0x1, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8001, 0xf61, 0x7, 0x2, 0x0, 0x0, 0x4]}}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x45, 0xe136, 0xb9a5, 0x7, 0x88c5, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x35ae, 0x6, 0xffff, 0x8, 0x8, 0x0, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x200, 0x80, 0x850c, 0x1, 0x6, 0x3b, 0x3]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x1, 0x60, 0x1, 0x6, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x5, 0x400, 0x400, 0x5, 0x2, 0xd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x1, 0x380, 0xb, 0x1, 0x9, 0x100, 0x9]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x54]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x5, 0x2}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x2}, {0x3, 0x8}, {0x1}, {0x0, 0x6}, {0x0, 0x8}, {0x6, 0x6}, {0x2, 0x9}, {0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}, {0x5, 0x7}, {0x6, 0x3}, {0x3, 0x4}, {0x6, 0x6}, {0x5, 0x3}, {0x2, 0x6}, {0x5, 0x5}, {0x6, 0x6}, {0x0, 0x2}, {0x2, 0x4}, {0x5}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x2}, {0x4}, {0x5, 0x9}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x4}, {0x3, 0x4}, {0x5, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xa5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0xacc12fc12428956b, 0x16, 0xa, 0x6c, 0x9, 0x20, 0x48, 0x36, 0x27, 0x27, 0x5, 0x5, 0x16, 0x18, 0x48, 0x9, 0x12, 0x30]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x3}, {0x4, 0x9}, {0x6, 0x3}, {0x4, 0x9}, {0x1}, {0x0, 0x7}, {0x3, 0x4}, {0x6, 0x6}, {0x4, 0x9}, {0x5, 0x5}, {0x4, 0x4}, {0x4, 0x9}, {0x4, 0x8}, {0x2, 0x3}, {0x6, 0x8}, {0x4}, {0x0, 0x8}, {0x0, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x4, 0xffff, 0x0, 0x5b7a, 0x4, 0x0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0xfff7, 0xdb7b, 0x3, 0x5, 0xff7f, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xdb}]}]}, @NL80211_ATTR_TX_RATES={0x2a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x9, 0x30, 0x5, 0x12, 0x30, 0x1b, 0x1b, 0x24, 0x1, 0x6c, 0x9, 0x6c, 0x74, 0x36, 0x1b, 0xb, 0x2, 0x41, 0x2, 0x30, 0x9, 0x5, 0x48, 0x5, 0xb, 0x6, 0x25, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x12, 0x5c, 0xb, 0x1b, 0x18, 0x1, 0x24, 0x6, 0x12, 0x4, 0x1f, 0x1, 0xc, 0x36, 0x24, 0x36, 0x9, 0xb, 0x1c, 0x1b]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x7, 0x1, 0x101, 0x2d, 0x4, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfffb, 0x7ff, 0x4, 0x5, 0x3, 0x40, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x3, 0x1, 0x6, 0x2, 0x0, 0x1, 0xe71]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x4, 0xdc, 0x4, 0x996, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0xb, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x8, 0x8, 0x5, 0x1, 0x2, 0x40, 0xfff]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x7, 0x6}, {0x4, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x4}, {0x2, 0x8}, {0x2, 0x7}, {0x0, 0x6}, {0x4}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3ff, 0x4, 0x2, 0x2, 0x9, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3fd, 0x9, 0xf, 0xf265, 0x101, 0x6, 0xfffd, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6f30, 0x3, 0xfb8, 0x6, 0x6a6, 0x8, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x2, 0x6, 0x9, 0x6, 0x24, 0x48, 0x30, 0x12, 0x4, 0x9, 0x18, 0x48, 0x6, 0x30, 0x36]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x6, 0x60, 0x1b, 0x6c, 0x48, 0x16, 0x24, 0x5, 0x1, 0x1, 0x6c, 0x30, 0x3, 0x2, 0x12, 0x36, 0x0, 0xea773e9c87b03ce1, 0x30, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xb37, 0x9, 0x1c, 0x1000, 0x6, 0x59, 0x3]}}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0x5}, {0x7, 0x2}, {0x5, 0x5}, {0x3, 0x7}, {0x6, 0xa}, {0x6}, {0x5, 0x4}, {0x5, 0x7}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0xa}, {0x3, 0x7}, {0x6, 0x2}, {0x1, 0x6}, {0x7, 0x8}, {0x4, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x3, 0x9}, {0x1, 0xa}, {0x5, 0x8}, {0x3, 0x1}, {0x0, 0x9}, {0x2, 0xa}, {0x4, 0x6}, {0x5, 0x5}, {0x5}, {0x2, 0x3}, {0x4, 0x7}, {0x1, 0x1}, {0x2, 0xa}, {0x5, 0x7}, {0x7, 0xa}, {0x6, 0x4}, {}, {0x4, 0x4}, {0x5, 0x5}, {0x4, 0x3}, {0x3, 0x9}, {0x4, 0x3}, {0x0, 0x6}, {0x0, 0x1}, {0x3, 0x5}, {0x5}, {0x2, 0x3}, {0x0, 0x3}, {0x2, 0x3}, {0x1, 0xa}, {0x4, 0x1}, {0x2, 0xa}, {0x0, 0x4}, {0x1}, {0x4, 0x2}, {0x3}, {0x2, 0x1}, {0x7, 0x7}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x2}, {0x2, 0x6}, {0x2}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x2}, {0x5, 0x6}, {0x7}, {0x6, 0x3}, {0x1}, {0x7, 0x6}, {0x0, 0x5}, {0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0x2}, {0x4, 0x7}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x8}, {0x6, 0x3}, {0x5, 0x9}, {0x1, 0xa}, {0x7, 0x2}, {0x6, 0xa}, {0x5, 0x7}, {0x3, 0x7}, {0x1, 0x6}, {0x4, 0x7}, {0x7, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x4}, {0x7, 0x9}, {0x6, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x3}, {0x2, 0x7}, {0x7, 0x9}, {0x5, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x3}, {0x4, 0x6}, {0x2, 0x1}, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x7}, {0x3, 0x5}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0x2}, {0x3}, {0x4}, {0x7, 0x7}, {0x7, 0xa}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x2}, {0x3, 0x9}, {0x4, 0x6}, {0x0, 0x5}, {0x2, 0x5}, {0x3, 0x8}, {}, {0x5, 0x3}, {0x5}, {0x4}, {0x5, 0x9}, {0x7, 0x3}, {0x1, 0x6}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x8}, {0x6, 0xa}, {0x3, 0x1}, {0x3, 0x3}, {0x2, 0x7}, {0x2, 0xa}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x8}, {0x7, 0x2}, {}, {0x2, 0x2}, {0x6, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x5, 0x6}, {0x3}, {0x5}, {0x4, 0x6}]}]}]}, @NL80211_ATTR_TX_RATES={0x16c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x40, 0x3, 0x5, 0x0, 0x1, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb42f, 0x3ff, 0x800, 0x3f94, 0x101, 0x2, 0x2, 0x8]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0xa}, {0x0, 0x9}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x9}, {0x0, 0x1}, {0x2, 0x9}, {0x6, 0x2}, {0x6}, {0x7, 0x5}, {0x1, 0x4}, {0x6, 0x9}, {0x4, 0x9}, {0x0, 0xa}, {0x2, 0x2}, {0x1, 0x3}, {0x5}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x6}, {0x6, 0x9}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0x6}, {0x1, 0x4}, {0x7, 0xa}, {0x7, 0x3}, {0x7, 0xa}, {0x2, 0x9}, {0x4, 0x6}, {0x7}, {0x4, 0x1}, {0x0, 0x7}, {0x7, 0x7}, {0x1, 0x4}, {0x2}, {0x4, 0x6}, {0x5, 0xa}, {0x1, 0x6}, {0x0, 0x7}, {0x5, 0x5}, {0x7, 0xa}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x6, 0x2}, {0x7, 0xa}, {0x2, 0x9}, {0x5, 0x3}, {0x7}, {0x4, 0x6}, {0x2, 0x6}, {0x6, 0x7}, {0x2, 0x4}, {0x3, 0x9}, {0x5, 0x5}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x3}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff, 0x1, 0x4, 0x3, 0x200, 0x713c, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x7}, {0x1, 0x7}, {0x5, 0x5}, {0x3, 0x3}, {0x2, 0x2}, {0x0, 0x1}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0x5}, {0x2, 0x8}, {0x2}, {0x3, 0x3}, {0x1, 0x5}, {0x3}, {0x6, 0x9}, {0x1, 0xa}, {0x5, 0x6}, {0x7, 0x7}, {0x3, 0x2}, {0x0, 0x3}, {0x1, 0x4}, {0x0, 0x7}, {0x5, 0x4}, {0x6, 0x2}, {0x4, 0x3}, {0x5, 0x5}, {0x2, 0x9}, {0x5, 0x9}, {0x5, 0x8}, {0x3, 0x5}, {0x2, 0x1}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x7, 0x6}, {0x5, 0x2}, {0x2, 0x2}, {0x5, 0x6}, {0x2, 0x3}, {0x0, 0x2}, {0x0, 0xa}, {0x7, 0x1}, {0x6, 0x1}, {0x1, 0x4}, {0x4, 0x1}, {0x5, 0x4}, {0x6, 0xa}, {0x1, 0x2}, {0x1, 0x9}, {0x5, 0x7}, {0x0, 0x6}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x4}, {}, {0x4, 0x8}, {0x0, 0x8}, {0x2, 0x2}, {0x3, 0x7}, {0x5, 0x8}, {0x4, 0x4}, {0x6, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x4, 0x2}, {0x6, 0x3}, {0x1, 0x4}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0x9}, {}, {0x2}, {0x4, 0x9}, {0x2, 0x3}, {0x0, 0xa}, {0x7, 0x7}, {0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x4, 0x9}, {0x5, 0x6}, {0x0, 0x3}, {0x1, 0x3}, {0x2}, {0x4, 0x3}, {0x0, 0x1}, {0x5, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {}, {0x6, 0x7}, {}, {0x1, 0xa}, {0x7, 0x1}, {0x7, 0x7}, {0x2, 0x5}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x2}, {0x6, 0x7}, {0x2, 0x8}, {0x7, 0x9}, {0x4, 0x8}, {0x3, 0x4}, {0x1, 0x3}, {0x0, 0x3}, {0x7, 0x7}, {0x4, 0x9}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0x5}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0xa70}, 0x1, 0x0, 0x0, 0x8000}, 0x890) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000c00)) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xa70, r1, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x67}}}}, [@NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3, 0x2, 0x16, 0x36, 0x4, 0xb, 0x12, 0x36, 0x18, 0x18, 0x1b, 0xb, 0x6c, 0x4, 0xfe1e34026e7da244, 0x1b, 0x3, 0xc, 0x1b, 0x20, 0x48, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x5, 0x4, 0x2, 0xb, 0x53, 0x24, 0x1, 0x6c, 0x1e, 0x1b, 0x3, 0x4, 0xb, 0x24, 0xc, 0x48, 0x1b, 0x1, 0x2, 0x24, 0x30, 0x24, 0x2, 0xc, 0x3, 0xb, 0x5, 0x5, 0x48, 0x30, 0x60]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x2, 0x4}, {0x7, 0x9}, {0x2, 0xa}, {0x4, 0x4}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x5}, {0x2, 0x8}, {0x4, 0x5}, {0x5, 0x5}, {0x1, 0x2}, {0x1, 0x9}, {0x2, 0xa}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x3}, {0x4}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x6}, {0x7, 0x9}, {0x3, 0xa}, {0x4, 0x2}, {0x7, 0x9}, {0x7, 0x6}, {0x7, 0x5}, {0x4, 0x8}, {0x1, 0x9}, {0x3, 0x8}, {0x3, 0x1}, {}, {0x7, 0x9}, {0x0, 0x3}, {0x6, 0x4}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x1}, {0x3, 0x1}, {0x6, 0xa}, {0x6, 0x9}, {0x3, 0x1}, {0x5, 0x5}, {0x0, 0x7}, {0x2, 0xa}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0xa}, {0x1}, {0x0, 0x7}, {0x3, 0x5}, {0x7, 0x9}, {0x5, 0xa}, {0x5, 0x8}, {0x4, 0x8}, {0x7, 0x2}, {0x5, 0x9}, {0x1, 0x9}, {0x0, 0x4}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x4}, {0x3, 0x6}, {0x4, 0x9}, {0x3, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x0, 0x5}, {0x1, 0x2}, {0x2, 0x1}, {0x3, 0x9}, {0x1, 0x4}, {0x7, 0x4}, {}, {0x2}, {0x4, 0x9}, {0x1, 0x5}, {0x1, 0x2}, {0x7}, {0x1, 0x4}, {0x7, 0x4}, {0x3, 0x6}, {0x7, 0x4}, {0x2, 0x9}, {0x2, 0x7}, {0x3, 0x6}, {0x7, 0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x4}, {0x4, 0xe}, {0x0, 0x2}, {0x1, 0x3}, {0x7, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x4}, {0x3, 0x9}, {0x5, 0x4}, {0x2, 0x3}, {0x2, 0x8}, {0x2, 0x8}, {}, {0x7, 0x5}, {0x5}, {0x6}, {0x3, 0x8}, {0x4, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x3, 0x7}, {0x3, 0x7}, {0x7}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x9, 0x24, 0x4, 0x60, 0x30, 0x1, 0x12, 0x32, 0x18, 0x1, 0x18, 0x48, 0x9, 0x24, 0xa4, 0xc, 0x24, 0xc, 0x27, 0x12, 0x3, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x2, 0x0, 0x6, 0x0, 0x5a, 0x9]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x60, 0x1b, 0x5, 0xc, 0x1b, 0x4]}]}]}, @NL80211_ATTR_TX_RATES={0x344, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x16, 0x5, 0x1c, 0x18, 0x6, 0x16, 0x1, 0x6c, 0x6c, 0x9, 0x30, 0x3, 0x6, 0x75, 0x6c, 0x18, 0x9, 0x48, 0x6c, 0x30, 0x60, 0x6c, 0x18, 0x2, 0x58, 0x1b, 0x1, 0x2d]}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0xa, 0x5, 0x401, 0x2, 0x4, 0x645]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x12, 0x9, 0x0, 0x8966, 0x2, 0x5]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x7}, {0x6, 0x2}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x8}, {0x7, 0x2}, {0x0, 0x8}, {0x7, 0x4}, {0x6, 0xa}, {0x7}, {0x1, 0x2}, {0x4, 0x2}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x4, 0x4}, {0x4, 0x6}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x8}, {0x3}, {0x2, 0x4}, {0x2, 0x9}, {0x7, 0x2}, {0x6, 0x8}, {0x2, 0x1}, {0x3, 0xa}, {0x5, 0xa}, {0x6, 0x4}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0x6}, {0x1, 0x3}, {0x3, 0x8}, {0x6, 0x1}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0x3}, {0x2, 0x9}, {0x2}, {0x6, 0xa}, {0x7, 0x3}, {0x1, 0x1}, {0x5, 0x4}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x2}, {0x6, 0xa}, {0x0, 0xa}, {0x4, 0x8}, {0x5}, {0x5, 0x5}, {0x4, 0x1}, {0x5, 0x3}, {0x7, 0x3}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x2}, {0x4, 0x6}, {0x7, 0xa}, {0x2}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0xa}, {0x1, 0x8}, {0x4, 0x4}, {0x4, 0x7}, {0x5, 0x6}, {0x4, 0x4}, {0x3, 0x8}, {0x4, 0xa}, {0x6, 0xa}, {0x3, 0x4}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x9}, {0x1, 0x7}, {0x4, 0x4}, {0x4, 0x4}, {0x2, 0x8}, {0x5, 0x9}, {0x7, 0x1}]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2bb, 0x3, 0x8000, 0x9, 0x9, 0x3, 0x0, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x1, 0x8, 0xd, 0x23, 0x2, 0xb0, 0xfe00]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf000, 0x1, 0x8, 0xe2, 0x98df, 0x5, 0x8, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x1000, 0xfffa, 0xfff9, 0x9, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2, 0x0, 0x1b, 0x36, 0x60, 0x48, 0x1, 0x18, 0x1b, 0xc, 0x1b, 0x13, 0x4, 0x6c, 0x60, 0xc, 0x1b, 0x36, 0x60, 0x12, 0xc, 0xc]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7f, 0xfff, 0x5, 0x0, 0x32, 0x8000, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x4, 0x7, 0x6, 0x5, 0x3ff, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x3, 0x5, 0xe, 0x4c, 0xffff, 0x400]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0x60, 0x18, 0xc, 0x0, 0x18, 0x0, 0x0, 0xb, 0x30, 0x36, 0x9, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x40, 0xfff, 0x1, 0x0, 0x3b, 0x7ff, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8d1, 0x5, 0x6, 0xfff, 0x0, 0x8000, 0x800, 0x7]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x6}, {0x6, 0x4}, {0x1, 0x5}, {0x5}, {0x4}, {0x1, 0x5}, {0x6, 0xa}, {0x2, 0x8}, {0x7, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x3, 0xa}, {0x3}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x5}, {0x5}, {0x5}, {0x5, 0x1}, {0x1, 0x6}, {0x4, 0x5}, {0x5, 0x7}, {0x1, 0x8}, {0x7, 0x4}, {0x2}, {0x7, 0x7}, {0x2, 0x2}, {0x4}, {0x4, 0x6}, {0x1, 0x1}, {0x7, 0x4}, {0x3, 0x6}, {0x4, 0x4}, {0x6, 0x4}, {0x6, 0x1}, {0x5, 0x5}, {0x1, 0x6}, {0x5}, {0x1, 0x9}, {0x3, 0x7}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x70, 0xffb7, 0x87, 0x7, 0x3, 0x101, 0xf964, 0x69ce]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x30, 0x1, 0x5, 0x5, 0x9, 0x36, 0x0, 0x1b, 0xc, 0x3]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x1000, 0x1, 0x3, 0x8, 0xfff2, 0x8, 0xfff1]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x7}, {0x6, 0x9}, {0x2, 0x6}, {0x1, 0x2}, {0x7, 0xa}, {0x2, 0x5}, {}, {0x3, 0x2}, {0x1, 0xa}, {0x2}, {0x7, 0x5}, {0x2, 0x5}, {0x1, 0x2}, {0x3, 0x1}, {0x0, 0x9}, {0x3, 0x8}, {0x6, 0x5}, {0x1, 0xa}, {0x4, 0x1}, {0x1, 0x7}, {0x1}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x4}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x6}, {0x3, 0x5}, {0x6, 0x3}, {0x6, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x5}, {0x1, 0x8}, {0x3, 0x5}, {0x6, 0x3}, {0x6, 0x1}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x9}, {0x7, 0x2}, {0x3}, {0x0, 0x8}, {0x1, 0x6}, {0x2, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x3, 0x5}, {0x6, 0x4}, {0x6, 0x1}, {0x5, 0x1}, {0x7, 0x7}, {0x5}, {0x4}, {0x4, 0x4}, {0x5, 0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x89aa, 0x3, 0x1, 0x1, 0x1, 0xfff, 0x74ef, 0x4]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0xb, 0x78, 0xb, 0x18, 0x36, 0x3e, 0x12, 0x30, 0x36, 0x60, 0x9, 0x5, 0x8, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x4, 0x800, 0x4, 0x0, 0xfff7, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x6}, {0x0, 0x1}, {0x6, 0x3}, {0x3}, {0x6, 0x3}, {0x4, 0x2}, {0x6}, {0x4, 0x4}, {0x4, 0x1}, {0x4, 0x2}, {0x2, 0x8}, {0x4, 0x4}, {0x7, 0x6}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0x3}, {0x1, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8001, 0xf61, 0x7, 0x2, 0x0, 0x0, 0x4]}}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x45, 0xe136, 0xb9a5, 0x7, 0x88c5, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x35ae, 0x6, 0xffff, 0x8, 0x8, 0x0, 0x1, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x200, 0x80, 0x850c, 0x1, 0x6, 0x3b, 0x3]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x1, 0x60, 0x1, 0x6, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x5, 0x400, 0x400, 0x5, 0x2, 0xd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x1, 0x380, 0xb, 0x1, 0x9, 0x100, 0x9]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x54]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x5, 0x2}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x6, 0x2}, {0x3, 0x8}, {0x1}, {0x0, 0x6}, {0x0, 0x8}, {0x6, 0x6}, {0x2, 0x9}, {0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x7}, {0x5, 0x7}, {0x6, 0x3}, {0x3, 0x4}, {0x6, 0x6}, {0x5, 0x3}, {0x2, 0x6}, {0x5, 0x5}, {0x6, 0x6}, {0x0, 0x2}, {0x2, 0x4}, {0x5}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x2}, {0x4}, {0x5, 0x9}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x4}, {0x3, 0x4}, {0x5, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xa5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0xacc12fc12428956b, 0x16, 0xa, 0x6c, 0x9, 0x20, 0x48, 0x36, 0x27, 0x27, 0x5, 0x5, 0x16, 0x18, 0x48, 0x9, 0x12, 0x30]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x3}, {0x4, 0x9}, {0x6, 0x3}, {0x4, 0x9}, {0x1}, {0x0, 0x7}, {0x3, 0x4}, {0x6, 0x6}, {0x4, 0x9}, {0x5, 0x5}, {0x4, 0x4}, {0x4, 0x9}, {0x4, 0x8}, {0x2, 0x3}, {0x6, 0x8}, {0x4}, {0x0, 0x8}, {0x0, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x4, 0xffff, 0x0, 0x5b7a, 0x4, 0x0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0xfff7, 0xdb7b, 0x3, 0x5, 0xff7f, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xdb}]}]}, @NL80211_ATTR_TX_RATES={0x2a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x9, 0x30, 0x5, 0x12, 0x30, 0x1b, 0x1b, 0x24, 0x1, 0x6c, 0x9, 0x6c, 0x74, 0x36, 0x1b, 0xb, 0x2, 0x41, 0x2, 0x30, 0x9, 0x5, 0x48, 0x5, 0xb, 0x6, 0x25, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x12, 0x5c, 0xb, 0x1b, 0x18, 0x1, 0x24, 0x6, 0x12, 0x4, 0x1f, 0x1, 0xc, 0x36, 0x24, 0x36, 0x9, 0xb, 0x1c, 0x1b]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x7, 0x1, 0x101, 0x2d, 0x4, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfffb, 0x7ff, 0x4, 0x5, 0x3, 0x40, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x3, 0x1, 0x6, 0x2, 0x0, 0x1, 0xe71]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x4, 0xdc, 0x4, 0x996, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0xb, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x8, 0x8, 0x5, 0x1, 0x2, 0x40, 0xfff]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x7, 0x6}, {0x4, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x4}, {0x2, 0x8}, {0x2, 0x7}, {0x0, 0x6}, {0x4}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3ff, 0x4, 0x2, 0x2, 0x9, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3fd, 0x9, 0xf, 0xf265, 0x101, 0x6, 0xfffd, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6f30, 0x3, 0xfb8, 0x6, 0x6a6, 0x8, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x2, 0x6, 0x9, 0x6, 0x24, 0x48, 0x30, 0x12, 0x4, 0x9, 0x18, 0x48, 0x6, 0x30, 0x36]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x6, 0x60, 0x1b, 0x6c, 0x48, 0x16, 0x24, 0x5, 0x1, 0x1, 0x6c, 0x30, 0x3, 0x2, 0x12, 0x36, 0x0, 0xea773e9c87b03ce1, 0x30, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xb37, 0x9, 0x1c, 0x1000, 0x6, 0x59, 0x3]}}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0x5}, {0x7, 0x2}, {0x5, 0x5}, {0x3, 0x7}, {0x6, 0xa}, {0x6}, {0x5, 0x4}, {0x5, 0x7}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0xa}, {0x3, 0x7}, {0x6, 0x2}, {0x1, 0x6}, {0x7, 0x8}, {0x4, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x3, 0x9}, {0x1, 0xa}, {0x5, 0x8}, {0x3, 0x1}, {0x0, 0x9}, {0x2, 0xa}, {0x4, 0x6}, {0x5, 0x5}, {0x5}, {0x2, 0x3}, {0x4, 0x7}, {0x1, 0x1}, {0x2, 0xa}, {0x5, 0x7}, {0x7, 0xa}, {0x6, 0x4}, {}, {0x4, 0x4}, {0x5, 0x5}, {0x4, 0x3}, {0x3, 0x9}, {0x4, 0x3}, {0x0, 0x6}, {0x0, 0x1}, {0x3, 0x5}, {0x5}, {0x2, 0x3}, {0x0, 0x3}, {0x2, 0x3}, {0x1, 0xa}, {0x4, 0x1}, {0x2, 0xa}, {0x0, 0x4}, {0x1}, {0x4, 0x2}, {0x3}, {0x2, 0x1}, {0x7, 0x7}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x2}, {0x2, 0x6}, {0x2}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x2}, {0x5, 0x6}, {0x7}, {0x6, 0x3}, {0x1}, {0x7, 0x6}, {0x0, 0x5}, {0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0x2}, {0x4, 0x7}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x8}, {0x6, 0x3}, {0x5, 0x9}, {0x1, 0xa}, {0x7, 0x2}, {0x6, 0xa}, {0x5, 0x7}, {0x3, 0x7}, {0x1, 0x6}, {0x4, 0x7}, {0x7, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x4}, {0x7, 0x9}, {0x6, 0x4}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x4}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x3}, {0x2, 0x7}, {0x7, 0x9}, {0x5, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x3}, {0x4, 0x6}, {0x2, 0x1}, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x7}, {0x3, 0x5}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0x2}, {0x3}, {0x4}, {0x7, 0x7}, {0x7, 0xa}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x2}, {0x3, 0x9}, {0x4, 0x6}, {0x0, 0x5}, {0x2, 0x5}, {0x3, 0x8}, {}, {0x5, 0x3}, {0x5}, {0x4}, {0x5, 0x9}, {0x7, 0x3}, {0x1, 0x6}, {0x1, 0x8}, {0x1, 0x2}, {0x4, 0x8}, {0x6, 0xa}, {0x3, 0x1}, {0x3, 0x3}, {0x2, 0x7}, {0x2, 0xa}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x8}, {0x7, 0x2}, {}, {0x2, 0x2}, {0x6, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x5, 0x6}, {0x3}, {0x5}, {0x4, 0x6}]}]}]}, @NL80211_ATTR_TX_RATES={0x16c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x40, 0x3, 0x5, 0x0, 0x1, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb42f, 0x3ff, 0x800, 0x3f94, 0x101, 0x2, 0x2, 0x8]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0xa}, {0x0, 0x9}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x9}, {0x0, 0x1}, {0x2, 0x9}, {0x6, 0x2}, {0x6}, {0x7, 0x5}, {0x1, 0x4}, {0x6, 0x9}, {0x4, 0x9}, {0x0, 0xa}, {0x2, 0x2}, {0x1, 0x3}, {0x5}, {0x5, 0x2}, {0x2, 0x4}, {0x4, 0x6}, {0x6, 0x9}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0x6}, {0x1, 0x4}, {0x7, 0xa}, {0x7, 0x3}, {0x7, 0xa}, {0x2, 0x9}, {0x4, 0x6}, {0x7}, {0x4, 0x1}, {0x0, 0x7}, {0x7, 0x7}, {0x1, 0x4}, {0x2}, {0x4, 0x6}, {0x5, 0xa}, {0x1, 0x6}, {0x0, 0x7}, {0x5, 0x5}, {0x7, 0xa}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x6, 0x2}, {0x7, 0xa}, {0x2, 0x9}, {0x5, 0x3}, {0x7}, {0x4, 0x6}, {0x2, 0x6}, {0x6, 0x7}, {0x2, 0x4}, {0x3, 0x9}, {0x5, 0x5}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x7}, {0x4, 0x3}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff, 0x1, 0x4, 0x3, 0x200, 0x713c, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x7}, {0x1, 0x7}, {0x5, 0x5}, {0x3, 0x3}, {0x2, 0x2}, {0x0, 0x1}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0x5}, {0x2, 0x8}, {0x2}, {0x3, 0x3}, {0x1, 0x5}, {0x3}, {0x6, 0x9}, {0x1, 0xa}, {0x5, 0x6}, {0x7, 0x7}, {0x3, 0x2}, {0x0, 0x3}, {0x1, 0x4}, {0x0, 0x7}, {0x5, 0x4}, {0x6, 0x2}, {0x4, 0x3}, {0x5, 0x5}, {0x2, 0x9}, {0x5, 0x9}, {0x5, 0x8}, {0x3, 0x5}, {0x2, 0x1}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x7, 0x6}, {0x5, 0x2}, {0x2, 0x2}, {0x5, 0x6}, {0x2, 0x3}, {0x0, 0x2}, {0x0, 0xa}, {0x7, 0x1}, {0x6, 0x1}, {0x1, 0x4}, {0x4, 0x1}, {0x5, 0x4}, {0x6, 0xa}, {0x1, 0x2}, {0x1, 0x9}, {0x5, 0x7}, {0x0, 0x6}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x4}, {}, {0x4, 0x8}, {0x0, 0x8}, {0x2, 0x2}, {0x3, 0x7}, {0x5, 0x8}, {0x4, 0x4}, {0x6, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x4, 0x2}, {0x6, 0x3}, {0x1, 0x4}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0x9}, {}, {0x2}, {0x4, 0x9}, {0x2, 0x3}, {0x0, 0xa}, {0x7, 0x7}, {0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x4, 0x9}, {0x5, 0x6}, {0x0, 0x3}, {0x1, 0x3}, {0x2}, {0x4, 0x3}, {0x0, 0x1}, {0x5, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {}, {0x6, 0x7}, {}, {0x1, 0xa}, {0x7, 0x1}, {0x7, 0x7}, {0x2, 0x5}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x2}, {0x6, 0x7}, {0x2, 0x8}, {0x7, 0x9}, {0x4, 0x8}, {0x3, 0x4}, {0x1, 0x3}, {0x0, 0x3}, {0x7, 0x7}, {0x4, 0x9}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0x5}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0xa70}, 0x1, 0x0, 0x0, 0x8000}, 0x890) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000c00)) (async) 367.384316ms ago: executing program 4 (id=1214): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) unshare(0x22020600) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x3, 0x7) (async) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x800) bind$x25(r1, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x7d, &(0x7f0000000000)=@sack_info={r5, 0xff, 0x10000}, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f00000016c0)=[{&(0x7f0000000780)="1d0467bc7aa4829d859d1d94d566bc6492f2bc2027ff3d7b720757a313d295e582fb668430b24b2ccd33efc9eb8133b1b569e942496dfd60451ffa07a624851a849935b87ab42cab85112a736f6801e66aca1fd05ee603354936d2e12ebd7bbb10a51f61", 0x64}], 0x1) (async) write(r6, &(0x7f00000000c0)="649070c188547f395b4b24eb5b3137a48b0b9a2ed4ace5f3b60580b0f3f0ed0a2a", 0x21) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0xfffffffffffffe61, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xd}]}]}, 0x58}}, 0x2) 303.783805ms ago: executing program 1 (id=1215): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000440)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"a43ef01b000000008b331b07f91efab2", 0x0, r0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x0, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x7, 0x8, 0x9000000000000000, 0x2, 0x9c, 0x2, 0x5]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) unshare(0x20000400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) unshare(0x4040080) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3ffb2d7144f29af11fe6557f8a74d923d12c43bc0000004d0012"], 0xb4}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xffffc000) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="010120"], 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r8, @ANYBLOB="2eff0627", @ANYRESOCT, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x90) 299.043781ms ago: executing program 2 (id=1216): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast1, @empty}, &(0x7f0000000280)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x0, 0x7, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x40, 0x700, 0x0, 0xb}}) (async) getpeername$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000480)={@loopback, @multicast2, 0x0}, &(0x7f00000004c0)=0xc) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket(0x2a, 0x2, 0x0) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newlink={0x2c, 0x10, 0x1, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, r13, 0x88adfda5}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}]}, 0x2c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r17}, @IFLA_MASTER={0x8, 0xa, r17}]}, 0x44}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x0, 0x80, 0xfa, 0x7, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x10, 0x10, 0xe, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x29, 0xfb, 0x3, 0x3, 0x46, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x10, 0x10, 0xfff, 0x6034}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000740)={0x7c4, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x40, 0x2, 0x6, 0x4}, {0x9f7, 0x6, 0x6, 0xe9}, {0x9c2b, 0x7, 0xaf, 0xc}, {0x8001, 0x1, 0xfd, 0x2}, {0x3, 0x74, 0x4, 0x3}, {0x4, 0x6, 0x0, 0x8}, {0x2800, 0x9, 0x8, 0xb9d}, {0x425, 0x3, 0x3, 0x1}, {0x9, 0x2, 0xd, 0xdf8}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xdb16}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfbc9}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x9, 0x6, 0x8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x72}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5566}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x62bf1b91}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r15}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r17}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}]}}]}, 0x7c4}, 0x1, 0x0, 0x0, 0x80}, 0x4000101) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x2}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002200000000000000000000008001d00ac1414bb080019"], 0x2c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 250.506194ms ago: executing program 0 (id=1217): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e2300000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000060000000000000000000000000000000000000000000000f6ffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000c0015005a"], 0xc4}}, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x200, 0x3ff, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b8000000140001000000000000009530000001020000000000000000000000000000f5b40bc50000000000000000000000000000000000000a"], 0xb8}}, 0x0) 206.860487ms ago: executing program 4 (id=1218): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'macvtap0\x00', &(0x7f0000000140)=@ethtool_cmd={0x1, 0x6, 0x5, 0x9, 0xb, 0xf, 0xd, 0x9d, 0x0, 0x11, 0x3, 0x4, 0x6, 0x4, 0x72, 0x480d, [0x6, 0x2a]}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'macvtap0\x00', &(0x7f0000000140)=@ethtool_cmd={0x1, 0x6, 0x5, 0x9, 0xb, 0xf, 0xd, 0x9d, 0x0, 0x11, 0x3, 0x4, 0x6, 0x4, 0x72, 0x480d, [0x6, 0x2a]}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x5}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x44}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 20.178808ms ago: executing program 2 (id=1219): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2712, &(0x7f00000003c0)=""/102394, &(0x7f0000000040)=0x18ffa) (async) sendmsg$kcm(r3, &(0x7f0000000ac0)={&(0x7f0000000500)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x1}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)="69e7544ad729e16fd9669b00762e114a555108f0e44e9f4161ba420cb1741ad1ac7bf55e4e1dedf226c95772713a357f5a9fb7637737c120df1a67286f309a4596aa75fbea7255ca0e66b888b7acb31eee1470091b4607c19ee1906c4f60bee60e76baf5723a0e6510d95a06bf3a9c71d8c3e5bc623c81c7ea48814e519da2973df9a917e741d2cd0459fc20589e4722e6df06dc8630239195891ca8699299ed8957aa94e0db33dca5ade5244c57a22e718bba1fc5da827e78bd19ce5ce312bf663f27c98ae8068279e07e4a05bb", 0xce}, {&(0x7f0000000580)="e92c26bc4ea4cce0363539466946ba1e521dc4790f51452b241591", 0x1b}, {&(0x7f0000000740)="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", 0xff}, {&(0x7f0000000840)="3f32baca2606bbaf998c5f3977317c025814cca1829edc32ebd19d8e7fde83588a50f66501a7d20a52ae5c42a8cd4664679555265d46b18da65a99476ab87a2250c15bfdbe21a33f5a1e0b8c8cd5ec7dfaa3b9b089d53aa760936ea2bd28f00cda8b4a25be3c76b802b443158d063cd9670781431e9fbfbc3a96463ca245586f9caf8a04a67617b4dd34baacd5527b96cdb6426ce76a086addaac29ae258c18274833f2cafb5892ca74ae87da6c5bbb12e204e0bb3db7719ac8cf2fe23e8db56e1c784fd911a07d4aae595b5211d887ecf910eadbcbae1e482dceff05a279c28c7", 0xe1}, {&(0x7f0000000940)="d4bd13a4e60e28e51fc2e37bbff06424c76055a3cbc3ed416197d2c3e0241030986fca10b102af1de9ec27ba8bd41296fe02ab6894bed8b7dca5a308bd77daa62300169a4bb92d81a03e44c28053dbde6c8421b2899cb4177052e82f908d52a3cb2a27e8c3e0a0028d25d6cd3f143a6a4e044dc754ecc7148b4e3722e40f26be5f020bbffe680db79ab8e4c19038066222f93d08f4603f094f7eebe22586ddae36e7244a1b", 0xa5}, {&(0x7f00000005c0)="63305d37a6f759bd943b0a", 0xb}, {&(0x7f0000000a00)="1f6b6a5e87974dc9", 0x8}], 0x7}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = getpid() (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fddbdf25150000003c002b80080001000000000030000380060001000200000008000200010000007ad8bd7800aa00000c0004000000000013000000080002000300000008000300", @ANYRES32=r11], 0x58}, 0x1, 0x0, 0x0, 0x24044880}, 0x4004054) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x31284f1ea349be44, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x40000) (async) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000037400062c000700737b7352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6ee4300000000001000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000004c0)={'vxcan1\x00', 0x1}) (async) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2008030}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, r12, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x25}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:hald_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 0 (id=1220): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5429800088094000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff6400098028000080060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000400001b1b463c61e4def5000200000008000200ac1e0001050003000300000014000200776730"], 0xec}}, 0x0) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {0x1, 0xe}, {0x10, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x48}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x34}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f00000007c0)={0x0, 0x23, &(0x7f0000000780)={&(0x7f0000002a40)=ANY=[@ANYRES8=r5, @ANYRES16=r11, @ANYRESDEC=r6], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) bind$xdp(r8, &(0x7f00000002c0)={0x2c, 0x1, r12, 0x3, r13}, 0x10) (async) ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f0000000740)={{r3}, 0x5, &(0x7f0000000240)=[0xdf2f, 0x8000000000000001, 0x2, 0x5, 0xee1], 0x7, 0x8}) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006b000000660000000000000016000000000000009500800000000000992e5b33961de526f9f9ccc0122eefba0ec0bd98ac30e28f0144d0287eaea2adc8e2d091f40fb9fda345dec00897a901ed0a784ad06c5cd1475d9ee2119314eb81a2b701fe178829b6699fa23f54a48dd1f23a1aaa99e03c653f5db95cb3eb5f4d98038902afaaf30d03f4bf9b0982ad98e18c4498bb5927c734a60db7f1adf846d166c1e7b06711aebc2d60ded9148605558bfc96388a88fa918836c5f0fd9f6085fd"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) recvmmsg(r6, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001a00)=""/4111, 0x100f}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000001840)=""/105, 0x69}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}, {{&(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/155, 0x9b}, {&(0x7f0000000a80)=""/193, 0xc1}, {&(0x7f0000000b80)=""/72, 0x48}], 0x3, &(0x7f0000000c40)=""/85, 0x55}, 0xfffffffa}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000cc0)=""/162, 0xa2}], 0x1, &(0x7f0000000dc0)=""/33, 0x21}, 0xff}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000e00)=""/81, 0x51}, {&(0x7f0000000e80)=""/189, 0xbd}, {&(0x7f0000000f40)=""/235, 0xeb}, {&(0x7f0000001040)=""/31, 0x1f}, {&(0x7f0000001080)=""/43, 0x2b}], 0x5}, 0xaa}, {{&(0x7f0000001140)=@nl, 0x80, &(0x7f00000014c0)=[{&(0x7f00000011c0)=""/62, 0x3e}, {&(0x7f0000001200)=""/222, 0xde}, {&(0x7f0000001300)=""/224, 0xe0}, {&(0x7f0000001400)=""/175, 0xaf}], 0x4, &(0x7f0000001500)=""/172, 0xac}, 0x9}], 0x9, 0x40008062, 0x0) kernel console output (not intermixed with test programs): y needed, restrict with "-p udp" and only use in OUTPUT [ 73.592535][ T6046] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 73.594967][ T1125] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 73.606747][ T6039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.608550][ T1125] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 74.810036][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.819563][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.879953][ T6109] netlink: 'syz.0.45': attribute type 2 has an invalid length. [ 74.889037][ T6109] FAULT_INJECTION: forcing a failure. [ 74.889037][ T6109] name failslab, interval 1, probability 0, space 0, times 1 [ 74.911784][ T6109] CPU: 1 UID: 0 PID: 6109 Comm: syz.0.45 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 74.911807][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 74.911821][ T6109] Call Trace: [ 74.911831][ T6109] [ 74.911838][ T6109] dump_stack_lvl+0x241/0x360 [ 74.911870][ T6109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.911886][ T6109] ? __pfx__printk+0x10/0x10 [ 74.911903][ T6109] ? __kmalloc_cache_noprof+0x48/0x390 [ 74.911922][ T6109] ? __pfx___might_resched+0x10/0x10 [ 74.911943][ T6109] should_fail_ex+0x40a/0x550 [ 74.911966][ T6109] should_failslab+0xac/0x100 [ 74.911986][ T6109] __kmalloc_cache_noprof+0x70/0x390 [ 74.912003][ T6109] ? alloc_netdev_mqs+0xc1a/0x1210 [ 74.912019][ T6109] ? __xdp_rxq_info_reg+0x186/0x290 [ 74.912042][ T6109] alloc_netdev_mqs+0xc1a/0x1210 [ 74.912065][ T6109] internal_dev_create+0x8a/0x450 [ 74.912087][ T6109] ? trace_kmalloc+0x1f/0xd0 [ 74.912110][ T6109] ovs_vport_add+0x13f/0x420 [ 74.912135][ T6109] new_vport+0x1a/0x190 [ 74.912157][ T6109] ovs_dp_cmd_new+0x79c/0xc10 [ 74.912190][ T6109] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 74.912216][ T6109] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 74.912245][ T6109] genl_rcv_msg+0xb1f/0xec0 [ 74.912274][ T6109] ? __pfx_genl_rcv_msg+0x10/0x10 [ 74.912321][ T6109] ? __pfx_lock_acquire+0x10/0x10 [ 74.912342][ T6109] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 74.912363][ T6109] ? __pfx___might_resched+0x10/0x10 [ 74.912393][ T6109] netlink_rcv_skb+0x206/0x480 [ 74.912411][ T6109] ? __pfx_genl_rcv_msg+0x10/0x10 [ 74.912434][ T6109] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 74.912466][ T6109] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 74.912498][ T6109] genl_rcv+0x28/0x40 [ 74.912515][ T6109] netlink_unicast+0x7f6/0x990 [ 74.912538][ T6109] ? __pfx_netlink_unicast+0x10/0x10 [ 74.912551][ T6109] ? __virt_addr_valid+0x45f/0x530 [ 74.912567][ T6109] ? __phys_addr_symbol+0x2f/0x70 [ 74.912581][ T6109] ? __check_object_size+0x47a/0x730 [ 74.912608][ T6109] netlink_sendmsg+0x8de/0xcb0 [ 74.912639][ T6109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.912659][ T6109] ? aa_sock_msg_perm+0x91/0x160 [ 74.912685][ T6109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.912702][ T6109] __sock_sendmsg+0x221/0x270 [ 74.912725][ T6109] ____sys_sendmsg+0x53a/0x860 [ 74.912779][ T6109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.912799][ T6109] ? __fget_files+0x2a/0x410 [ 74.912823][ T6109] ? __fget_files+0x2a/0x410 [ 74.912852][ T6109] __sys_sendmsg+0x269/0x350 [ 74.912881][ T6109] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.912916][ T6109] ? do_sys_openat2+0x17a/0x1d0 [ 74.912965][ T6109] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.912990][ T6109] ? do_syscall_64+0x100/0x230 [ 74.913009][ T6109] ? do_syscall_64+0xb6/0x230 [ 74.913027][ T6109] do_syscall_64+0xf3/0x230 [ 74.913042][ T6109] ? clear_bhb_loop+0x35/0x90 [ 74.913066][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.913086][ T6109] RIP: 0033:0x7f627798d169 [ 74.913108][ T6109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.913120][ T6109] RSP: 002b:00007f627882b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.913138][ T6109] RAX: ffffffffffffffda RBX: 00007f6277ba5fa0 RCX: 00007f627798d169 [ 74.913149][ T6109] RDX: 000000000000c000 RSI: 0000400000000000 RDI: 0000000000000003 [ 74.913158][ T6109] RBP: 00007f627882b090 R08: 0000000000000000 R09: 0000000000000000 [ 74.913167][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.913176][ T6109] R13: 0000000000000000 R14: 00007f6277ba5fa0 R15: 00007ffc1cbc3cc8 [ 74.913202][ T6109] [ 75.458776][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.489260][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.740602][ T6119] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 75.785311][ T6077] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.816202][ T6077] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.825532][ T6077] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.843383][ T6077] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.962228][ T6086] pim6reg1: entered promiscuous mode [ 75.967685][ T6086] pim6reg1: entered allmulticast mode [ 75.969459][ T6128] __nla_validate_parse: 1 callbacks suppressed [ 75.969475][ T6128] netlink: 60 bytes leftover after parsing attributes in process `syz.0.50'. [ 76.001823][ T6128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.50'. [ 76.056510][ T6122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.49'. [ 76.065675][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 76.106360][ T6128] netlink: 208 bytes leftover after parsing attributes in process `syz.0.50'. [ 76.116635][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 76.301014][ T6139] warning: `syz.2.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.733372][ T6159] netlink: 'syz.4.59': attribute type 4 has an invalid length. [ 76.767228][ T6159] netlink: 152 bytes leftover after parsing attributes in process `syz.4.59'. [ 76.845276][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.59'. [ 76.861576][ T6159] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 77.383376][ T6183] netlink: 56 bytes leftover after parsing attributes in process `syz.1.66'. [ 77.401774][ T6184] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 77.443875][ T25] IPVS: starting estimator thread 0... [ 77.449994][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 77.585767][ T6187] IPVS: using max 25 ests per chain, 60000 per kthread [ 78.339556][ T6221] netlink: 'syz.1.75': attribute type 5 has an invalid length. [ 78.646230][ T6240] x_tables: duplicate underflow at hook 1 [ 78.732296][ T6247] pim6reg1: entered promiscuous mode [ 78.800265][ T6247] pim6reg1: entered allmulticast mode [ 79.463678][ T6282] netlink: 'syz.0.91': attribute type 2 has an invalid length. [ 79.481894][ T6289] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 79.915536][ T6319] netlink: 'syz.2.101': attribute type 1 has an invalid length. [ 79.945022][ T6319] netlink: 'syz.2.101': attribute type 1 has an invalid length. [ 79.974346][ T6319] netlink: 'syz.2.101': attribute type 2 has an invalid length. [ 80.268343][ T6333] pim6reg1: entered promiscuous mode [ 80.297274][ T6333] pim6reg1: entered allmulticast mode [ 80.981873][ T6363] __nla_validate_parse: 12 callbacks suppressed [ 80.981891][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 81.033472][ T6363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.113'. [ 81.460301][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 81.469495][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 81.478884][ T6373] netlink: 'syz.0.117': attribute type 13 has an invalid length. [ 81.488763][ T6373] netlink: 'syz.0.117': attribute type 12 has an invalid length. [ 81.659686][ T6376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.118'. [ 81.698759][ T6376] netlink: 60 bytes leftover after parsing attributes in process `syz.4.118'. [ 81.735559][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 81.946910][ T6395] bridge0: entered allmulticast mode [ 81.979650][ T3077] cfg80211: failed to load regulatory.db [ 82.397925][ T6417] netlink: 'syz.3.127': attribute type 1 has an invalid length. [ 82.444614][ T6417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.454172][ T6416] can: request_module (can-proto-3) failed. [ 82.629695][ T975] hid-generic 0005:046D:0A0E.0001: item fetching failed at offset 0/1 [ 82.680848][ T975] hid-generic 0005:046D:0A0E.0001: probe with driver hid-generic failed with error -22 [ 82.845458][ T6437] macvtap1: entered promiscuous mode [ 82.853557][ T6437] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 82.862155][ T6437] macvtap1: entered allmulticast mode [ 82.868131][ T6437] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 82.976214][ T6437] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 82.994589][ T6437] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 83.064948][ T6445] netlink: 196 bytes leftover after parsing attributes in process `syz.0.136'. [ 83.091845][ T6445] netlink: 196 bytes leftover after parsing attributes in process `syz.0.136'. [ 83.112408][ T6445] netlink: 19 bytes leftover after parsing attributes in process `syz.0.136'. [ 83.154385][ T6446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.136'. [ 83.283274][ T6453] x_tables: unsorted underflow at hook 1 [ 83.303234][ T6450] x_tables: unsorted underflow at hook 1 [ 83.351540][ T6455] openvswitch: netlink: Flow actions attr not present in new flow. [ 83.368192][ T6455] netlink: 'syz.4.141': attribute type 30 has an invalid length. [ 83.406764][ T6455] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 83.439004][ T6455] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 83.874112][ T6471] ip6tnl1: entered allmulticast mode [ 84.018173][ T6466] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 85.455828][ T6512] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 85.824913][ T6527] netlink: 'syz.0.163': attribute type 1 has an invalid length. [ 85.834815][ T6527] netlink: 'syz.0.163': attribute type 1 has an invalid length. [ 85.843628][ T6527] netlink: 'syz.0.163': attribute type 1 has an invalid length. [ 85.864734][ T6527] netlink: 'syz.0.163': attribute type 1 has an invalid length. [ 85.873212][ T6527] netlink: 'syz.0.163': attribute type 1 has an invalid length. [ 85.918552][ T6526] IPVS: Unknown mcast interface: veth°ñ [ 86.586532][ T6544] __nla_validate_parse: 12 callbacks suppressed [ 86.586562][ T6544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.169'. [ 86.663012][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'. [ 86.907008][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.175'. [ 86.916507][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.175'. [ 87.134008][ T6571] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.179'. [ 87.202640][ T6565] netlink: 84 bytes leftover after parsing attributes in process `syz.1.178'. [ 87.270306][ T6565] netem: invalid attributes len -16 [ 87.286970][ T6565] netem: change failed [ 87.415861][ T6569] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 87.443058][ T6569] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 87.577269][ T6590] bridge_slave_0: default FDB implementation only supports local addresses [ 87.725929][ T6598] bridge_slave_0: left allmulticast mode [ 87.755574][ T6598] bridge_slave_0: left promiscuous mode [ 87.786570][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.866374][ T6598] bridge_slave_1: left allmulticast mode [ 87.877794][ T6598] bridge_slave_1: left promiscuous mode [ 87.888137][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.918222][ T6598] bond0: (slave bond_slave_0): Releasing backup interface [ 87.936282][ T6598] bond0: (slave bond_slave_1): Releasing backup interface [ 87.977218][ T6598] team0: Port device team_slave_0 removed [ 88.003406][ T6598] team0: Port device team_slave_1 removed [ 88.011006][ T6598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.018819][ T6598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.038370][ T6598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.048209][ T6598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.072062][ T6598] batman_adv: batadv0: Removing interface: macvtap0 [ 88.088607][ T6602] team0: Mode changed to "loadbalance" [ 88.344067][ T6629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.192'. [ 88.356853][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 88.466711][ T6632] netlink: 40 bytes leftover after parsing attributes in process `syz.4.193'. [ 88.477212][ T6629] netlink: 148 bytes leftover after parsing attributes in process `syz.1.192'. [ 88.495971][ T6629] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 88.544183][ T6629] Bluetooth: MGMT ver 1.23 [ 88.556958][ T6629] Bluetooth: MGMT ver 1.23 [ 89.532391][ T6723] netlink: 'syz.1.203': attribute type 1 has an invalid length. [ 89.634508][ T6727] Bluetooth: MGMT ver 1.23 [ 89.902048][ T6738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.050366][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 90.782578][ T6779] netlink: 'syz.1.223': attribute type 1 has an invalid length. [ 90.814178][ T6779] netlink: 'syz.1.223': attribute type 2 has an invalid length. [ 91.096887][ T6795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.126683][ T6788] netlink: 'syz.2.229': attribute type 2 has an invalid length. [ 91.138351][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.148468][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.156171][ T6788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.319755][ T6802] x_tables: duplicate entry at hook 3 [ 91.595059][ T6799] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 91.613488][ T6811] netlink: 'syz.4.232': attribute type 1 has an invalid length. [ 91.649199][ T6799] macvtap1: entered promiscuous mode [ 91.676211][ T6799] macvtap1: entered allmulticast mode [ 91.722161][ T6799] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 92.076196][ T6799] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 92.095290][ T6799] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 92.807388][ T6848] __nla_validate_parse: 13 callbacks suppressed [ 92.807406][ T6848] netlink: 144 bytes leftover after parsing attributes in process `syz.3.238'. [ 93.286927][ T6866] netlink: 'syz.1.243': attribute type 29 has an invalid length. [ 93.296082][ T6866] netlink: 'syz.1.243': attribute type 29 has an invalid length. [ 93.305895][ T6866] netlink: 'syz.1.243': attribute type 29 has an invalid length. [ 93.314159][ T6866] netlink: 'syz.1.243': attribute type 29 has an invalid length. [ 93.322585][ T6866] netlink: 'syz.1.243': attribute type 29 has an invalid length. [ 93.611473][ T6876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.246'. [ 93.789926][ T6882] batman_adv: batadv0: Adding interface: macvtap0 [ 93.796572][ T6882] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.827438][ T6882] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 93.883551][ T6881] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 93.899891][ T6881] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 93.924495][ T6881] syz.0.248 (6881) used greatest stack depth: 18192 bytes left [ 94.006459][ T6886] pim6reg: entered allmulticast mode [ 94.012055][ T6887] pim6reg: left allmulticast mode [ 94.736519][ T6924] validate_nla: 22 callbacks suppressed [ 94.736537][ T6924] netlink: 'syz.3.260': attribute type 10 has an invalid length. [ 95.020969][ T6935] netlink: 'syz.1.263': attribute type 5 has an invalid length. [ 95.417331][ T6948] netlink: 152 bytes leftover after parsing attributes in process `syz.1.266'. [ 95.495012][ T6948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.266'. [ 95.597722][ T6950] syzkaller1: entered promiscuous mode [ 95.608164][ T6950] syzkaller1: entered allmulticast mode [ 95.927143][ T6939] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 96.007066][ T6966] netlink: 'syz.3.272': attribute type 10 has an invalid length. [ 96.095068][ T6968] tipc: Started in network mode [ 96.116272][ T6968] tipc: Node identity , cluster identity 4711 [ 96.133217][ T6968] tipc: Failed to set node id, please configure manually [ 96.160408][ T6968] tipc: Enabling of bearer rejected, failed to enable media [ 96.816284][ T6984] x_tables: duplicate underflow at hook 2 [ 96.834076][ T6985] x_tables: duplicate underflow at hook 2 [ 96.937398][ T6987] No such timeout policy "syz0" [ 97.116786][ T6988] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.152156][ T6988] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 97.748182][ T6999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.283'. [ 97.789652][ T7001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.090477][ T7005] netlink: zone id is out of range [ 98.095650][ T7005] netlink: zone id is out of range [ 98.159730][ T7005] netlink: zone id is out of range [ 98.181568][ T7005] netlink: zone id is out of range [ 98.207412][ T7005] netlink: set zone limit has 8 unknown bytes [ 98.306496][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 98.359008][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 98.362973][ T7014] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.678422][ T7014] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.906232][ T7014] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.945285][ T7039] netlink: 'syz.3.293': attribute type 4 has an invalid length. [ 98.957234][ T7039] netlink: 3581 bytes leftover after parsing attributes in process `syz.3.293'. [ 99.122874][ T7043] netlink: 'syz.0.294': attribute type 11 has an invalid length. [ 99.187398][ T7014] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.198105][ T7048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.295'. [ 99.288199][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 99.486370][ T7031] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 99.499089][ T7031] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 99.501021][ T7014] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.522241][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 99.577621][ T7014] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.601921][ T7014] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.624641][ T7014] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.043266][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'. [ 100.100654][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'. [ 101.358816][ T7104] netlink: 148 bytes leftover after parsing attributes in process `syz.1.310'. [ 101.420390][ T7104] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 101.481368][ T7104] netlink: 'syz.1.310': attribute type 2 has an invalid length. [ 101.879336][ T7129] bond2 (unregistering): Released all slaves [ 102.097469][ T7148] sctp: [Deprecated]: syz.2.321 (pid 7148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.097469][ T7148] Use struct sctp_sack_info instead [ 102.424195][ T7159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.323'. [ 103.759306][ T7184] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.839380][ T7193] __nla_validate_parse: 1 callbacks suppressed [ 103.839398][ T7193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.334'. [ 104.048402][ T7184] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.282188][ T7184] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.498398][ T7184] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.755389][ T7184] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.952233][ T7184] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.059893][ T7184] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.099780][ T7184] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.197102][ T7236] netlink: 104 bytes leftover after parsing attributes in process `syz.2.346'. [ 105.529762][ T7250] netlink: 'syz.3.350': attribute type 30 has an invalid length. [ 105.983097][ T7262] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 106.098012][ T7258] smc: net device bond0 applied user defined pnetid SYZ2 [ 106.206662][ T7270] bridge0: port 3(hsr0) entered blocking state [ 106.235828][ T7270] bridge0: port 3(hsr0) entered disabled state [ 106.261385][ T7270] hsr0: entered allmulticast mode [ 106.274441][ T7270] hsr_slave_0: entered allmulticast mode [ 106.326184][ T7270] hsr_slave_1: entered allmulticast mode [ 106.358999][ T7270] hsr0: entered promiscuous mode [ 106.388944][ T7270] bridge0: port 3(hsr0) entered blocking state [ 106.395856][ T7270] bridge0: port 3(hsr0) entered forwarding state [ 106.493172][ T7282] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.853625][ T7300] netlink: 9 bytes leftover after parsing attributes in process `syz.4.362'. [ 106.953360][ T7300] gretap0: entered promiscuous mode [ 107.482679][ T7322] netlink: 'syz.3.371': attribute type 3 has an invalid length. [ 107.498973][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.372'. [ 107.596045][ T7326] netlink: 'syz.0.372': attribute type 1 has an invalid length. [ 107.725795][ T7332] openvswitch: netlink: Actions may not be safe on all matching packets [ 107.980371][ T29] audit: type=1800 audit(1741181741.898:2): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.376" name="memory.events" dev="tmpfs" ino=334 res=0 errno=0 [ 108.041606][ T29] audit: type=1804 audit(1741181741.958:3): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.376" name="/newroot/62/memory.events" dev="tmpfs" ino=334 res=1 errno=0 [ 108.216003][ T7349] netlink: 112 bytes leftover after parsing attributes in process `syz.3.380'. [ 108.252688][ T7353] syz.0.382: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 108.269078][ T7353] CPU: 0 UID: 0 PID: 7353 Comm: syz.0.382 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 108.269100][ T7353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 108.269109][ T7353] Call Trace: [ 108.269115][ T7353] [ 108.269122][ T7353] dump_stack_lvl+0x241/0x360 [ 108.269149][ T7353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.269168][ T7353] ? __pfx__printk+0x10/0x10 [ 108.269201][ T7353] ? __rcu_read_unlock+0xa1/0x110 [ 108.269224][ T7353] warn_alloc+0x278/0x410 [ 108.269243][ T7353] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 108.269268][ T7353] ? __pfx_warn_alloc+0x10/0x10 [ 108.269286][ T7353] ? kasan_save_track+0x3f/0x80 [ 108.269302][ T7353] ? __kasan_kmalloc+0x98/0xb0 [ 108.269321][ T7353] ? xsk_setsockopt+0x4aa/0x810 [ 108.269338][ T7353] ? do_sock_setsockopt+0x3af/0x720 [ 108.269359][ T7353] ? __x64_sys_setsockopt+0x1ee/0x280 [ 108.269380][ T7353] ? do_syscall_64+0xf3/0x230 [ 108.269394][ T7353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.269423][ T7353] __vmalloc_node_range_noprof+0x126/0x1380 [ 108.269475][ T7353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 108.269504][ T7353] ? __kasan_kmalloc+0x98/0xb0 [ 108.269527][ T7353] vmalloc_user_noprof+0x74/0x80 [ 108.269544][ T7353] ? xskq_create+0xb6/0x170 [ 108.269561][ T7353] xskq_create+0xb6/0x170 [ 108.269583][ T7353] xsk_init_queue+0xa1/0x100 [ 108.269604][ T7353] xsk_setsockopt+0x4aa/0x810 [ 108.269625][ T7353] ? __pfx_xsk_setsockopt+0x10/0x10 [ 108.269644][ T7353] ? __pfx_aa_sk_perm+0x10/0x10 [ 108.269667][ T7353] ? aa_sock_opt_perm+0x79/0x120 [ 108.269694][ T7353] ? __pfx_xsk_setsockopt+0x10/0x10 [ 108.269716][ T7353] do_sock_setsockopt+0x3af/0x720 [ 108.269745][ T7353] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 108.269772][ T7353] ? __fget_files+0x395/0x410 [ 108.269792][ T7353] ? __fget_files+0x2a/0x410 [ 108.269822][ T7353] __x64_sys_setsockopt+0x1ee/0x280 [ 108.269852][ T7353] do_syscall_64+0xf3/0x230 [ 108.269867][ T7353] ? clear_bhb_loop+0x35/0x90 [ 108.269891][ T7353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.269911][ T7353] RIP: 0033:0x7f627798d169 [ 108.269925][ T7353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.269939][ T7353] RSP: 002b:00007f627882b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 108.269956][ T7353] RAX: ffffffffffffffda RBX: 00007f6277ba5fa0 RCX: 00007f627798d169 [ 108.269968][ T7353] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 108.269979][ T7353] RBP: 00007f6277a0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 108.269989][ T7353] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.270000][ T7353] R13: 0000000000000000 R14: 00007f6277ba5fa0 R15: 00007ffc1cbc3cc8 [ 108.270028][ T7353] [ 108.275829][ T7349] macsec1: entered promiscuous mode [ 108.285354][ T7353] Mem-Info: [ 108.327996][ T7349] macsec1: entered allmulticast mode [ 108.516299][ T7353] active_anon:5126 inactive_anon:0 isolated_anon:0 [ 108.516299][ T7353] active_file:1424 inactive_file:38313 isolated_file:0 [ 108.516299][ T7353] unevictable:768 dirty:172 writeback:0 [ 108.516299][ T7353] slab_reclaimable:10012 slab_unreclaimable:99793 [ 108.516299][ T7353] mapped:28714 shmem:1439 pagetables:887 [ 108.516299][ T7353] sec_pagetables:0 bounce:0 [ 108.516299][ T7353] kernel_misc_reclaimable:0 [ 108.516299][ T7353] free:1341483 free_pcp:434 free_cma:0 [ 108.619087][ T7353] Node 0 active_anon:20504kB inactive_anon:0kB active_file:5696kB inactive_file:153180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114856kB dirty:688kB writeback:0kB shmem:4220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11752kB pagetables:3548kB sec_pagetables:0kB all_unreclaimable? no [ 108.669717][ T7353] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 108.793922][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'. [ 108.805100][ T7353] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.850870][ T7353] lowmem_reserve[]: 0 2490 2490 0 0 [ 108.856517][ T7353] Node 0 DMA32 free:1442124kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:20164kB inactive_anon:0kB active_file:5696kB inactive_file:152856kB unevictable:1536kB writepending:688kB present:3129332kB managed:2549792kB mlocked:0kB bounce:0kB free_pcp:1860kB local_pcp:1260kB free_cma:0kB [ 108.898475][ T7362] FAULT_INJECTION: forcing a failure. [ 108.898475][ T7362] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.927062][ T7362] CPU: 1 UID: 0 PID: 7362 Comm: syz.2.385 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 108.927086][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 108.927095][ T7362] Call Trace: [ 108.927101][ T7362] [ 108.927115][ T7362] dump_stack_lvl+0x241/0x360 [ 108.927142][ T7362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.927159][ T7362] ? __pfx__printk+0x10/0x10 [ 108.927177][ T7362] ? __pfx_lock_release+0x10/0x10 [ 108.927208][ T7362] should_fail_ex+0x40a/0x550 [ 108.927231][ T7362] _copy_from_user+0x2d/0xb0 [ 108.927250][ T7362] __sys_bpf+0x1be/0x820 [ 108.927272][ T7362] ? __pfx___sys_bpf+0x10/0x10 [ 108.927302][ T7362] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 108.927327][ T7362] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.927350][ T7362] ? do_syscall_64+0x100/0x230 [ 108.927367][ T7362] __x64_sys_bpf+0x7c/0x90 [ 108.927387][ T7362] do_syscall_64+0xf3/0x230 [ 108.927402][ T7362] ? clear_bhb_loop+0x35/0x90 [ 108.927424][ T7362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.927442][ T7362] RIP: 0033:0x7f2badf8d169 [ 108.927457][ T7362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.927469][ T7362] RSP: 002b:00007f2baeddb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.927485][ T7362] RAX: ffffffffffffffda RBX: 00007f2bae1a5fa0 RCX: 00007f2badf8d169 [ 108.927496][ T7362] RDX: 0000000000000038 RSI: 0000400000000700 RDI: 0000000000000018 [ 108.927505][ T7362] RBP: 00007f2baeddb090 R08: 0000000000000000 R09: 0000000000000000 [ 108.927515][ T7362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.927524][ T7362] R13: 0000000000000000 R14: 00007f2bae1a5fa0 R15: 00007ffe68f6fb88 [ 108.927548][ T7362] [ 108.972360][ T7353] lowmem_reserve[]: 0 0 0 0 0 [ 109.130398][ T7366] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 109.144951][ T7353] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.146665][ T7366] syzkaller0: entered promiscuous mode [ 109.185794][ T7366] syzkaller0: entered allmulticast mode [ 109.187452][ T7353] lowmem_reserve[]: 0 0 0 0 0 [ 109.214039][ T7353] Node 1 Normal free:3908664kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:548kB local_pcp:248kB free_cma:0kB [ 109.244562][ T7353] lowmem_reserve[]: 0 0 0 0 0 [ 109.249441][ T7353] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 109.269573][ T7353] Node 0 DMA32: 386*4kB (U) 519*8kB (UME) 372*16kB (UE) 195*32kB (UME) 252*64kB (UME) 139*128kB (UME) 78*256kB (UM) 59*512kB (UM) 37*1024kB (UM) 13*2048kB (UM) 309*4096kB (UME) = 1432160kB [ 109.297730][ T7353] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 109.310036][ T7353] Node 1 Normal: 155*4kB (UE) 55*8kB (UME) 34*16kB (UME) 209*32kB (UME) 88*64kB (UME) 28*128kB (UME) 17*256kB (UM) 10*512kB (UM) 3*1024kB (UME) 4*2048kB (UE) 945*4096kB (M) = 3908964kB [ 109.353306][ T7353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.363522][ T7353] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.375204][ T7353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.399833][ T7353] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.417792][ T7353] 42329 total pagecache pages [ 109.438017][ T7353] 0 pages in swap cache [ 109.456488][ T7353] Free swap = 124996kB [ 109.468350][ T7353] Total swap = 124996kB [ 109.473329][ T7353] 2097051 pages RAM [ 109.477580][ T7353] 0 pages HighMem/MovableOnly [ 109.484348][ T7353] 427881 pages reserved [ 109.488604][ T7353] 0 pages cma reserved [ 109.869930][ T7386] netlink: 'syz.0.393': attribute type 4 has an invalid length. [ 111.467554][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 111.789693][ T7414] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 111.905818][ T7414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.957664][ T7420] netlink: 'syz.3.400': attribute type 15 has an invalid length. [ 111.981526][ T7414] bond1: (slave ip6gretap1): making interface the new active one [ 111.992789][ T7414] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 112.011681][ T7414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.399'. [ 112.037977][ T7414] vlan2: entered promiscuous mode [ 112.062841][ T7414] bond1: entered promiscuous mode [ 112.078351][ T7414] ip6gretap1: entered promiscuous mode [ 112.105368][ T7414] vlan2: entered allmulticast mode [ 112.130284][ T7414] bond1: entered allmulticast mode [ 112.153626][ T7414] ip6gretap1: entered allmulticast mode [ 112.163210][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.403'. [ 113.007210][ T7451] netlink: 332 bytes leftover after parsing attributes in process `syz.3.411'. [ 113.050255][ T7451] netlink: 104 bytes leftover after parsing attributes in process `syz.3.411'. [ 113.103123][ T7451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.411'. [ 113.264092][ T7457] xt_hashlimit: size too large, truncated to 1048576 [ 113.393832][ T7461] IPv6: sit1: Disabled Multicast RS [ 113.703022][ T7479] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:2 [ 113.950286][ T7486] lo: entered allmulticast mode [ 113.992856][ T7486] lo: left allmulticast mode [ 114.293592][ T7493] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 114.314094][ T7499] netlink: 104 bytes leftover after parsing attributes in process `syz.4.424'. [ 114.591180][ T7466] netlink: 'syz.0.416': attribute type 11 has an invalid length. [ 114.631247][ T7466] netlink: 'syz.0.416': attribute type 5 has an invalid length. [ 114.740745][ T7504] gretap0: left promiscuous mode [ 115.021979][ T7504] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 115.173345][ T7526] netlink: 256 bytes leftover after parsing attributes in process `syz.2.434'. [ 115.335769][ T7531] xt_connbytes: Forcing CT accounting to be enabled [ 115.354083][ T7531] --map-set only usable from mangle table [ 115.632966][ T7543] netlink: 88 bytes leftover after parsing attributes in process `syz.2.440'. [ 115.647778][ T7543] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 116.291150][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 116.427352][ T7571] nbd: socks must be embedded in a SOCK_ITEM attr [ 116.460724][ T5830] block nbd64: NBD_DISCONNECT [ 116.573847][ T7577] team0: Device gtp0 is of different type [ 116.959413][ T7588] FAULT_INJECTION: forcing a failure. [ 116.959413][ T7588] name failslab, interval 1, probability 0, space 0, times 0 [ 117.022539][ T7588] CPU: 1 UID: 0 PID: 7588 Comm: syz.2.451 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 117.022566][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.022576][ T7588] Call Trace: [ 117.022582][ T7588] [ 117.022589][ T7588] dump_stack_lvl+0x241/0x360 [ 117.022618][ T7588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.022635][ T7588] ? __pfx__printk+0x10/0x10 [ 117.022653][ T7588] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 117.022675][ T7588] ? __pfx___might_resched+0x10/0x10 [ 117.022700][ T7588] should_fail_ex+0x40a/0x550 [ 117.022726][ T7588] should_failslab+0xac/0x100 [ 117.022748][ T7588] kmem_cache_alloc_node_noprof+0x77/0x380 [ 117.022768][ T7588] ? __alloc_skb+0x1c3/0x440 [ 117.022792][ T7588] __alloc_skb+0x1c3/0x440 [ 117.022818][ T7588] ? __pfx___alloc_skb+0x10/0x10 [ 117.022841][ T7588] ? netlink_autobind+0xd6/0x2f0 [ 117.022859][ T7588] ? netlink_autobind+0x2b0/0x2f0 [ 117.022881][ T7588] netlink_sendmsg+0x634/0xcb0 [ 117.022910][ T7588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.022933][ T7588] ? aa_sock_msg_perm+0x91/0x160 [ 117.022960][ T7588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.022977][ T7588] __sock_sendmsg+0x221/0x270 [ 117.022998][ T7588] ____sys_sendmsg+0x53a/0x860 [ 117.023029][ T7588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.023050][ T7588] ? __fget_files+0x2a/0x410 [ 117.023073][ T7588] ? __fget_files+0x2a/0x410 [ 117.023102][ T7588] __sys_sendmsg+0x269/0x350 [ 117.023129][ T7588] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.023164][ T7588] ? do_sys_openat2+0x17a/0x1d0 [ 117.023208][ T7588] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 117.023232][ T7588] ? do_syscall_64+0x100/0x230 [ 117.023251][ T7588] ? do_syscall_64+0xb6/0x230 [ 117.023267][ T7588] do_syscall_64+0xf3/0x230 [ 117.023281][ T7588] ? clear_bhb_loop+0x35/0x90 [ 117.023305][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.023324][ T7588] RIP: 0033:0x7f2badf8d169 [ 117.023338][ T7588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.023351][ T7588] RSP: 002b:00007f2baeddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.023369][ T7588] RAX: ffffffffffffffda RBX: 00007f2bae1a5fa0 RCX: 00007f2badf8d169 [ 117.023381][ T7588] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 117.023390][ T7588] RBP: 00007f2baeddb090 R08: 0000000000000000 R09: 0000000000000000 [ 117.023400][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.023409][ T7588] R13: 0000000000000000 R14: 00007f2bae1a5fa0 R15: 00007ffe68f6fb88 [ 117.023435][ T7588] [ 117.906583][ T7602] gtp0: entered promiscuous mode [ 117.912078][ T7602] gtp0: entered allmulticast mode [ 118.069951][ T7606] __nla_validate_parse: 2 callbacks suppressed [ 118.069968][ T7606] netlink: 44 bytes leftover after parsing attributes in process `syz.1.456'. [ 118.167147][ T7609] FAULT_INJECTION: forcing a failure. [ 118.167147][ T7609] name failslab, interval 1, probability 0, space 0, times 0 [ 118.223457][ T7609] CPU: 1 UID: 0 PID: 7609 Comm: syz.0.457 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 118.223484][ T7609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.223494][ T7609] Call Trace: [ 118.223500][ T7609] [ 118.223507][ T7609] dump_stack_lvl+0x241/0x360 [ 118.223531][ T7609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.223549][ T7609] ? __pfx__printk+0x10/0x10 [ 118.223566][ T7609] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 118.223588][ T7609] ? __pfx___might_resched+0x10/0x10 [ 118.223613][ T7609] should_fail_ex+0x40a/0x550 [ 118.223639][ T7609] should_failslab+0xac/0x100 [ 118.223660][ T7609] kmem_cache_alloc_node_noprof+0x77/0x380 [ 118.223681][ T7609] ? __alloc_skb+0x1c3/0x440 [ 118.223706][ T7609] __alloc_skb+0x1c3/0x440 [ 118.223731][ T7609] ? __pfx___alloc_skb+0x10/0x10 [ 118.223762][ T7609] alloc_skb_with_frags+0xc3/0x820 [ 118.223787][ T7609] ? validate_chain+0x11e/0x5920 [ 118.223804][ T7609] ? __pfx_validate_chain+0x10/0x10 [ 118.223827][ T7609] sock_alloc_send_pskb+0x91a/0xa60 [ 118.223861][ T7609] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 118.223877][ T7609] ? mark_lock+0x9a/0x360 [ 118.223895][ T7609] ? __lock_acquire+0x1397/0x2100 [ 118.223924][ T7609] __ip_append_data+0x3013/0x46b0 [ 118.223965][ T7609] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 118.223985][ T7609] ? __pfx_lock_release+0x10/0x10 [ 118.224026][ T7609] ? __pfx___ip_append_data+0x10/0x10 [ 118.224045][ T7609] ? __pfx_ipv4_mtu+0x10/0x10 [ 118.224066][ T7609] ? ip_setup_cork+0x580/0x9a0 [ 118.224090][ T7609] ip_make_skb+0x198/0x420 [ 118.224116][ T7609] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 118.224137][ T7609] ? __pfx_ip_make_skb+0x10/0x10 [ 118.224155][ T7609] ? widen_string+0x3a/0x280 [ 118.224217][ T7609] udp_sendmsg+0x1c77/0x2c90 [ 118.224241][ T7609] ? look_up_lock_class+0x77/0x170 [ 118.224282][ T7609] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 118.224303][ T7609] ? __pfx_udp_sendmsg+0x10/0x10 [ 118.224329][ T7609] ? __pfx_validate_chain+0x10/0x10 [ 118.224351][ T7609] ? __lock_acquire+0x1397/0x2100 [ 118.224381][ T7609] ? mark_lock+0x9a/0x360 [ 118.224412][ T7609] udpv6_sendmsg+0xe4a/0x3070 [ 118.224440][ T7609] ? release_sock+0x30/0x1f0 [ 118.224475][ T7609] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 118.224503][ T7609] ? inet_send_prepare+0x1b7/0x260 [ 118.224525][ T7609] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 118.224560][ T7609] ? inet_send_prepare+0x1b7/0x260 [ 118.224581][ T7609] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 118.224598][ T7609] ? inet_send_prepare+0x1b7/0x260 [ 118.224619][ T7609] ? do_raw_spin_unlock+0x13c/0x8b0 [ 118.224647][ T7609] ? inet_send_prepare+0x1b7/0x260 [ 118.224675][ T7609] __sock_sendmsg+0xef/0x270 [ 118.224696][ T7609] ____sys_sendmsg+0x53a/0x860 [ 118.224726][ T7609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.224747][ T7609] ? __fget_files+0x2a/0x410 [ 118.224770][ T7609] ? __fget_files+0x2a/0x410 [ 118.224799][ T7609] __sys_sendmmsg+0x36a/0x720 [ 118.224832][ T7609] ? __pfx___sys_sendmmsg+0x10/0x10 [ 118.224866][ T7609] ? __pfx_lock_release+0x10/0x10 [ 118.224885][ T7609] ? kstrtouint_from_user+0x128/0x190 [ 118.224924][ T7609] ? ksys_write+0x22a/0x2b0 [ 118.224940][ T7609] ? __pfx_lock_release+0x10/0x10 [ 118.224967][ T7609] ? sb_end_write+0xe9/0x1c0 [ 118.224988][ T7609] ? vfs_write+0x7fa/0xd10 [ 118.225005][ T7609] ? __mutex_unlock_slowpath+0x227/0x800 [ 118.225053][ T7609] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 118.225077][ T7609] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 118.225100][ T7609] ? do_syscall_64+0x100/0x230 [ 118.225118][ T7609] __x64_sys_sendmmsg+0xa0/0xb0 [ 118.225143][ T7609] do_syscall_64+0xf3/0x230 [ 118.225157][ T7609] ? clear_bhb_loop+0x35/0x90 [ 118.225180][ T7609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.225204][ T7609] RIP: 0033:0x7f627798d169 [ 118.225218][ T7609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.225231][ T7609] RSP: 002b:00007f627882b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 118.225249][ T7609] RAX: ffffffffffffffda RBX: 00007f6277ba5fa0 RCX: 00007f627798d169 [ 118.225261][ T7609] RDX: 0000000000000001 RSI: 00004000000017c0 RDI: 0000000000000004 [ 118.225271][ T7609] RBP: 00007f627882b090 R08: 0000000000000000 R09: 0000000000000000 [ 118.225280][ T7609] R10: 0000000004040880 R11: 0000000000000246 R12: 0000000000000001 [ 118.225290][ T7609] R13: 0000000000000000 R14: 00007f6277ba5fa0 R15: 00007ffc1cbc3cc8 [ 118.225316][ T7609] [ 119.608117][ T7622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.461'. [ 119.628647][ T7622] veth1: entered promiscuous mode [ 119.664116][ T7622] veth1: left promiscuous mode [ 119.727963][ T7633] FAULT_INJECTION: forcing a failure. [ 119.727963][ T7633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.771545][ T7633] CPU: 1 UID: 0 PID: 7633 Comm: syz.2.464 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 119.771571][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.771581][ T7633] Call Trace: [ 119.771587][ T7633] [ 119.771594][ T7633] dump_stack_lvl+0x241/0x360 [ 119.771620][ T7633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.771637][ T7633] ? __pfx__printk+0x10/0x10 [ 119.771660][ T7633] should_fail_ex+0x40a/0x550 [ 119.771684][ T7633] _copy_to_user+0x31/0xb0 [ 119.771703][ T7633] generic_map_lookup_batch+0x98a/0xf20 [ 119.771720][ T7633] ? __pfx_lock_release+0x10/0x10 [ 119.771753][ T7633] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 119.771768][ T7633] ? __fget_files+0x395/0x410 [ 119.771788][ T7633] ? __fget_files+0x2a/0x410 [ 119.771811][ T7633] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 119.771855][ T7633] bpf_map_do_batch+0x288/0x660 [ 119.771881][ T7633] __sys_bpf+0x653/0x820 [ 119.771902][ T7633] ? __pfx___sys_bpf+0x10/0x10 [ 119.771929][ T7633] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 119.771952][ T7633] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.771974][ T7633] ? do_syscall_64+0x100/0x230 [ 119.771994][ T7633] __x64_sys_bpf+0x7c/0x90 [ 119.772013][ T7633] do_syscall_64+0xf3/0x230 [ 119.772027][ T7633] ? clear_bhb_loop+0x35/0x90 [ 119.772051][ T7633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.772071][ T7633] RIP: 0033:0x7f2badf8d169 [ 119.772086][ T7633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.772098][ T7633] RSP: 002b:00007f2baedba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.772116][ T7633] RAX: ffffffffffffffda RBX: 00007f2bae1a6080 RCX: 00007f2badf8d169 [ 119.772128][ T7633] RDX: 0000000000000038 RSI: 0000400000000700 RDI: 0000000000000018 [ 119.772138][ T7633] RBP: 00007f2baedba090 R08: 0000000000000000 R09: 0000000000000000 [ 119.772148][ T7633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.772157][ T7633] R13: 0000000000000000 R14: 00007f2bae1a6080 R15: 00007ffe68f6fb88 [ 119.772182][ T7633] [ 120.083923][ T7629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.092531][ T7629] batadv_slave_0: entered promiscuous mode [ 120.127708][ T7634] wireguard0: entered promiscuous mode [ 120.140818][ T7634] wireguard0: entered allmulticast mode [ 120.765355][ T7671] FAULT_INJECTION: forcing a failure. [ 120.765355][ T7671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.860732][ T7671] CPU: 1 UID: 0 PID: 7671 Comm: syz.3.476 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 120.860758][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.860768][ T7671] Call Trace: [ 120.860773][ T7671] [ 120.860780][ T7671] dump_stack_lvl+0x241/0x360 [ 120.860806][ T7671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.860824][ T7671] ? __pfx__printk+0x10/0x10 [ 120.860842][ T7671] ? __pfx_lock_release+0x10/0x10 [ 120.860872][ T7671] should_fail_ex+0x40a/0x550 [ 120.860898][ T7671] _copy_from_iter+0x427/0x1c40 [ 120.860929][ T7671] ? __pfx__copy_from_iter+0x10/0x10 [ 120.860948][ T7671] ? __virt_addr_valid+0x183/0x530 [ 120.860963][ T7671] ? __virt_addr_valid+0x183/0x530 [ 120.860976][ T7671] ? __virt_addr_valid+0x45f/0x530 [ 120.860991][ T7671] ? __phys_addr_symbol+0x2f/0x70 [ 120.861005][ T7671] ? __check_object_size+0x47a/0x730 [ 120.861029][ T7671] netlink_sendmsg+0x742/0xcb0 [ 120.861058][ T7671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.861080][ T7671] ? aa_sock_msg_perm+0x91/0x160 [ 120.861107][ T7671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.861123][ T7671] __sock_sendmsg+0x221/0x270 [ 120.861145][ T7671] ____sys_sendmsg+0x53a/0x860 [ 120.861183][ T7671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.861204][ T7671] ? __fget_files+0x2a/0x410 [ 120.861227][ T7671] ? __fget_files+0x2a/0x410 [ 120.861257][ T7671] __sys_sendmsg+0x269/0x350 [ 120.861283][ T7671] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.861315][ T7671] ? do_sys_openat2+0x17a/0x1d0 [ 120.861356][ T7671] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.861377][ T7671] ? do_syscall_64+0x100/0x230 [ 120.861394][ T7671] ? do_syscall_64+0xb6/0x230 [ 120.861410][ T7671] do_syscall_64+0xf3/0x230 [ 120.861424][ T7671] ? clear_bhb_loop+0x35/0x90 [ 120.861447][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.861467][ T7671] RIP: 0033:0x7f4a7a38d169 [ 120.861481][ T7671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.861494][ T7671] RSP: 002b:00007f4a7b21d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.861512][ T7671] RAX: ffffffffffffffda RBX: 00007f4a7a5a5fa0 RCX: 00007f4a7a38d169 [ 120.861523][ T7671] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 120.861533][ T7671] RBP: 00007f4a7b21d090 R08: 0000000000000000 R09: 0000000000000000 [ 120.861542][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.861551][ T7671] R13: 0000000000000000 R14: 00007f4a7a5a5fa0 R15: 00007ffe96558568 [ 120.861576][ T7671] [ 120.896845][ T7676] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 121.502141][ T7685] netlink: 16 bytes leftover after parsing attributes in process `syz.3.478'. [ 121.853819][ T7689] FAULT_INJECTION: forcing a failure. [ 121.853819][ T7689] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 121.922420][ T7689] CPU: 1 UID: 0 PID: 7689 Comm: syz.0.479 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 121.922445][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.922455][ T7689] Call Trace: [ 121.922461][ T7689] [ 121.922468][ T7689] dump_stack_lvl+0x241/0x360 [ 121.922494][ T7689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.922511][ T7689] ? __pfx__printk+0x10/0x10 [ 121.922527][ T7689] ? validate_chain+0x11e/0x5920 [ 121.922553][ T7689] should_fail_ex+0x40a/0x550 [ 121.922578][ T7689] prepare_alloc_pages+0x1da/0x5b0 [ 121.922603][ T7689] __alloc_frozen_pages_noprof+0x16f/0x710 [ 121.922624][ T7689] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 121.922642][ T7689] ? __lock_acquire+0x1397/0x2100 [ 121.922680][ T7689] alloc_pages_mpol+0x311/0x660 [ 121.922706][ T7689] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 121.922736][ T7689] vma_alloc_folio_noprof+0x12b/0x260 [ 121.922759][ T7689] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 121.922791][ T7689] ? do_raw_spin_unlock+0x13c/0x8b0 [ 121.922815][ T7689] folio_prealloc+0x2e/0x170 [ 121.922832][ T7689] do_wp_page+0x1253/0x49b0 [ 121.922866][ T7689] ? __pfx_do_wp_page+0x10/0x10 [ 121.922884][ T7689] ? mark_lock+0x9a/0x360 [ 121.922901][ T7689] ? __pfx_lock_acquire+0x10/0x10 [ 121.922920][ T7689] ? rcu_is_watching+0x15/0xb0 [ 121.922939][ T7689] ? do_raw_spin_lock+0x14f/0x370 [ 121.922955][ T7689] ? __pfx____pte_offset_map+0x10/0x10 [ 121.922990][ T7689] __handle_mm_fault+0x24d5/0x70f0 [ 121.923032][ T7689] ? __pfx___handle_mm_fault+0x10/0x10 [ 121.923064][ T7689] ? mt_find+0x2a9/0x920 [ 121.923085][ T7689] ? __pfx_lock_release+0x10/0x10 [ 121.923116][ T7689] ? mt_find+0x2a9/0x920 [ 121.923138][ T7689] ? mt_find+0x6c8/0x920 [ 121.923164][ T7689] ? __pfx_mt_find+0x10/0x10 [ 121.923202][ T7689] ? find_vma+0xf9/0x170 [ 121.923223][ T7689] ? __pfx_find_vma+0x10/0x10 [ 121.923246][ T7689] handle_mm_fault+0x3e5/0x8d0 [ 121.923277][ T7689] exc_page_fault+0x2b9/0x8b0 [ 121.923299][ T7689] ? __might_fault+0xaa/0x120 [ 121.923316][ T7689] asm_exc_page_fault+0x26/0x30 [ 121.923336][ T7689] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 121.923355][ T7689] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 121.923367][ T7689] RSP: 0018:ffffc9000591fb68 EFLAGS: 00050202 [ 121.923382][ T7689] RAX: ffffffff84f54a01 RBX: 000040000002180c RCX: 00000000000200cc [ 121.923394][ T7689] RDX: 0000000000000000 RSI: ffff88804e7c000f RDI: 0000400000001740 [ 121.923404][ T7689] RBP: ffffc9000591fd00 R08: 0000000000000002 R09: ffffed1009cfc01b [ 121.923415][ T7689] R10: dffffc0000000000 R11: ffffed1009cfc01b R12: 00000000000200cc [ 121.923426][ T7689] R13: 00007ffffffff000 R14: ffff88804e7c000f R15: 0000400000001740 [ 121.923442][ T7689] ? _copy_to_user+0x51/0xb0 [ 121.923468][ T7689] _copy_to_user+0x8b/0xb0 [ 121.923487][ T7689] generic_map_lookup_batch+0x98a/0xf20 [ 121.923506][ T7689] ? __pfx_lock_release+0x10/0x10 [ 121.923542][ T7689] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 121.923558][ T7689] ? __fget_files+0x395/0x410 [ 121.923577][ T7689] ? __fget_files+0x2a/0x410 [ 121.923602][ T7689] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 121.923622][ T7689] bpf_map_do_batch+0x288/0x660 [ 121.923649][ T7689] __sys_bpf+0x653/0x820 [ 121.923672][ T7689] ? __pfx___sys_bpf+0x10/0x10 [ 121.923705][ T7689] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 121.923730][ T7689] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.923753][ T7689] ? do_syscall_64+0x100/0x230 [ 121.923772][ T7689] __x64_sys_bpf+0x7c/0x90 [ 121.923800][ T7689] do_syscall_64+0xf3/0x230 [ 121.923814][ T7689] ? clear_bhb_loop+0x35/0x90 [ 121.923837][ T7689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.923856][ T7689] RIP: 0033:0x7f627798d169 [ 121.923870][ T7689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.923882][ T7689] RSP: 002b:00007f627882b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.923898][ T7689] RAX: ffffffffffffffda RBX: 00007f6277ba5fa0 RCX: 00007f627798d169 [ 121.923909][ T7689] RDX: 0000000000000038 RSI: 0000400000000700 RDI: 0000000000000018 [ 121.923919][ T7689] RBP: 00007f627882b090 R08: 0000000000000000 R09: 0000000000000000 [ 121.923928][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.923937][ T7689] R13: 0000000000000000 R14: 00007f6277ba5fa0 R15: 00007ffc1cbc3cc8 [ 121.923964][ T7689] [ 122.850313][ T54] Bluetooth: hci0: command 0x0401 tx timeout [ 122.857754][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 123.041452][ T7715] netlink: 64 bytes leftover after parsing attributes in process `syz.1.489'. [ 123.242519][ T7718] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 123.265826][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'. [ 123.312359][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'. [ 123.564047][ T7728] delete_channel: no stack [ 123.846058][ T7745] netlink: 104 bytes leftover after parsing attributes in process `syz.3.498'. [ 123.858803][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.498'. [ 123.997871][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.501'. [ 124.306192][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'. [ 124.586384][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 124.784196][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 124.795308][ T7794] netlink: 32 bytes leftover after parsing attributes in process `syz.2.516'. [ 124.930328][ T5838] Bluetooth: hci0: command 0x0401 tx timeout [ 125.034996][ T7807] netlink: 68 bytes leftover after parsing attributes in process `syz.4.520'. [ 125.162579][ T7804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.170328][ T7804] IPv6: NLM_F_CREATE should be set when creating new route [ 125.177781][ T7804] IPv6: NLM_F_CREATE should be set when creating new route [ 125.185191][ T7804] IPv6: NLM_F_CREATE should be set when creating new route [ 125.409812][ T7814] netlink: 'syz.4.524': attribute type 15 has an invalid length. [ 125.516831][ T7821] vlan2: entered promiscuous mode [ 125.551215][ T7821] bond0: entered promiscuous mode [ 125.569596][ T7821] bond0: left promiscuous mode [ 126.109321][ T7855] FAULT_INJECTION: forcing a failure. [ 126.109321][ T7855] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 126.131986][ T7855] CPU: 1 UID: 0 PID: 7855 Comm: syz.1.537 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 126.132010][ T7855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.132020][ T7855] Call Trace: [ 126.132025][ T7855] [ 126.132033][ T7855] dump_stack_lvl+0x241/0x360 [ 126.132059][ T7855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.132076][ T7855] ? __pfx__printk+0x10/0x10 [ 126.132101][ T7855] should_fail_ex+0x40a/0x550 [ 126.132125][ T7855] prepare_alloc_pages+0x1da/0x5b0 [ 126.132151][ T7855] __alloc_frozen_pages_noprof+0x16f/0x710 [ 126.132171][ T7855] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 126.132188][ T7855] ? validate_chain+0x11e/0x5920 [ 126.132210][ T7855] ? __pfx_validate_chain+0x10/0x10 [ 126.132227][ T7855] alloc_pages_mpol+0x311/0x660 [ 126.132250][ T7855] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 126.132272][ T7855] ? __pfx_validate_chain+0x10/0x10 [ 126.132291][ T7855] alloc_pages_noprof+0x121/0x190 [ 126.132314][ T7855] pte_alloc_one+0x24/0x160 [ 126.132338][ T7855] __pte_alloc+0x79/0x220 [ 126.132359][ T7855] ? __pfx___pte_alloc+0x10/0x10 [ 126.132377][ T7855] ? rb_read_data_buffer+0x4a9/0x520 [ 126.132403][ T7855] __handle_mm_fault+0x5ea0/0x70f0 [ 126.132448][ T7855] ? __pfx___handle_mm_fault+0x10/0x10 [ 126.132485][ T7855] ? mt_find+0x2a9/0x920 [ 126.132507][ T7855] ? __pfx_lock_release+0x10/0x10 [ 126.132540][ T7855] ? mt_find+0x2a9/0x920 [ 126.132562][ T7855] ? mt_find+0x6c8/0x920 [ 126.132584][ T7855] ? mt_find+0x2a9/0x920 [ 126.132629][ T7855] ? __pfx___might_resched+0x10/0x10 [ 126.132663][ T7855] handle_mm_fault+0x3e5/0x8d0 [ 126.132695][ T7855] __get_user_pages+0x1a92/0x4140 [ 126.132740][ T7855] ? __pfx_bpf_trace_printk+0x10/0x10 [ 126.132771][ T7855] ? __pfx___get_user_pages+0x10/0x10 [ 126.132796][ T7855] ? __pfx_down_read_killable+0x10/0x10 [ 126.132816][ T7855] ? __lock_acquire+0x1397/0x2100 [ 126.132853][ T7855] __gup_longterm_locked+0xe64/0x17f0 [ 126.132883][ T7855] ? mark_lock+0x9a/0x360 [ 126.132905][ T7855] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 126.132928][ T7855] ? __pfx___gup_longterm_locked+0x10/0x10 [ 126.132945][ T7855] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 126.132965][ T7855] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 126.132991][ T7855] ? gup_fast_fallback+0x207e/0x29c0 [ 126.133010][ T7855] gup_fast_fallback+0x2266/0x29c0 [ 126.133035][ T7855] ? lockdep_hardirqs_on+0x99/0x150 [ 126.133073][ T7855] ? __pfx_gup_fast_fallback+0x10/0x10 [ 126.133101][ T7855] ? __pfx___schedule+0x10/0x10 [ 126.133126][ T7855] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 126.133159][ T7855] ? is_valid_gup_args+0x124/0x200 [ 126.133177][ T7855] pin_user_pages_fast+0xcc/0x160 [ 126.133197][ T7855] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 126.133215][ T7855] ? irqentry_exit+0x63/0x90 [ 126.133233][ T7855] ? lockdep_hardirqs_on+0x99/0x150 [ 126.133256][ T7855] iov_iter_extract_pages+0x3bb/0x5c0 [ 126.133283][ T7855] extract_iter_to_sg+0xea6/0x2650 [ 126.133303][ T7855] ? sg_next+0x7d/0xb0 [ 126.133323][ T7855] ? crc32_le_base+0x21c/0x270 [ 126.133350][ T7855] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 126.133367][ T7855] ? unpin_user_page+0xe0/0x1e0 [ 126.133387][ T7855] ? __pfx_unpin_user_page+0x10/0x10 [ 126.133406][ T7855] ? __local_bh_enable_ip+0x168/0x200 [ 126.133427][ T7855] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 126.133444][ T7855] ? do_raw_spin_unlock+0x13c/0x8b0 [ 126.133467][ T7855] ? __asan_memset+0x23/0x50 [ 126.133485][ T7855] hash_sendmsg+0x513/0x1140 [ 126.133525][ T7855] ? __pfx_hash_sendmsg+0x10/0x10 [ 126.133543][ T7855] __sock_sendmsg+0x221/0x270 [ 126.133565][ T7855] ____sys_sendmsg+0x53a/0x860 [ 126.133595][ T7855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.133615][ T7855] ? __fget_files+0x2a/0x410 [ 126.133639][ T7855] ? __fget_files+0x2a/0x410 [ 126.133672][ T7855] __sys_sendmmsg+0x36a/0x720 [ 126.133707][ T7855] ? __pfx___sys_sendmmsg+0x10/0x10 [ 126.133741][ T7855] ? __pfx_lock_release+0x10/0x10 [ 126.133761][ T7855] ? kstrtouint_from_user+0x128/0x190 [ 126.133798][ T7855] ? ksys_write+0x22a/0x2b0 [ 126.133815][ T7855] ? __pfx_lock_release+0x10/0x10 [ 126.133840][ T7855] ? sb_end_write+0xe9/0x1c0 [ 126.133861][ T7855] ? vfs_write+0x7fa/0xd10 [ 126.133880][ T7855] ? __mutex_unlock_slowpath+0x227/0x800 [ 126.133929][ T7855] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 126.133954][ T7855] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 126.133976][ T7855] ? do_syscall_64+0x100/0x230 [ 126.133994][ T7855] __x64_sys_sendmmsg+0xa0/0xb0 [ 126.134018][ T7855] do_syscall_64+0xf3/0x230 [ 126.134032][ T7855] ? clear_bhb_loop+0x35/0x90 [ 126.134056][ T7855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.134075][ T7855] RIP: 0033:0x7f4d01f8d169 [ 126.134090][ T7855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.134103][ T7855] RSP: 002b:00007f4d02d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 126.134121][ T7855] RAX: ffffffffffffffda RBX: 00007f4d021a5fa0 RCX: 00007f4d01f8d169 [ 126.134132][ T7855] RDX: 0000000000000001 RSI: 0000400000001440 RDI: 0000000000000006 [ 126.134142][ T7855] RBP: 00007f4d02d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 126.134152][ T7855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.134161][ T7855] R13: 0000000000000000 R14: 00007f4d021a5fa0 R15: 00007ffc0b08cf28 [ 126.134186][ T7855] [ 127.502315][ T7880] @ÿ: renamed from bond_slave_0 (while UP) [ 127.724331][ T7890] sctp: [Deprecated]: syz.2.548 (pid 7890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.724331][ T7890] Use struct sctp_sack_info instead [ 127.763875][ T7891] sctp: [Deprecated]: syz.2.548 (pid 7891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.763875][ T7891] Use struct sctp_sack_info instead [ 127.801815][ T7892] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 127.848477][ T29] audit: type=1800 audit(1741181761.768:4): pid=7888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.549" name="memory.events" dev="tmpfs" ino=591 res=0 errno=0 [ 128.363915][ T7918] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 128.807023][ T7934] xfrm1: entered allmulticast mode [ 128.919399][ T7935] xfrm1: entered allmulticast mode [ 128.969432][ T7949] __nla_validate_parse: 4 callbacks suppressed [ 128.969450][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'. [ 129.006212][ T7956] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 129.348456][ T7971] netlink: 40 bytes leftover after parsing attributes in process `syz.3.573'. [ 129.414948][ T7977] netlink: 68 bytes leftover after parsing attributes in process `syz.0.574'. [ 129.427803][ T7977] netlink: 68 bytes leftover after parsing attributes in process `syz.0.574'. [ 129.453241][ T7978] netlink: 'syz.2.576': attribute type 4 has an invalid length. [ 129.461007][ T7978] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.576'. [ 129.868257][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.583'. [ 129.937283][ T8005] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 130.106478][ T8015] tipc: Started in network mode [ 130.111940][ T8015] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 130.122067][ T8015] tipc: Enabling of bearer rejected, failed to enable media [ 130.253370][ T8017] pimreg3: entered allmulticast mode [ 130.259303][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 130.304794][ T8021] xt_TCPMSS: Only works on TCP SYN packets [ 130.421865][ T8025] bridge2: entered allmulticast mode [ 130.449211][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 130.472632][ T8032] netlink: 5 bytes leftover after parsing attributes in process `syz.4.591'. [ 130.488431][ T8032] 0ªX¹¦Dö»: renamed from gretap0 [ 130.508229][ T8032] 0ªX¹¦Dö»: entered allmulticast mode [ 130.523439][ T8032] syz.4.591 (8032) used greatest stack depth: 17648 bytes left [ 130.568982][ T8039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.594'. [ 131.047706][ T8060] batadv_slave_1: entered promiscuous mode [ 131.194777][ T8053] batadv_slave_1: left promiscuous mode [ 131.496110][ T8072] team0 (unregistering): Port device team_slave_0 removed [ 131.534307][ T8072] team0 (unregistering): Port device team_slave_1 removed [ 131.547088][ T8085] FAULT_INJECTION: forcing a failure. [ 131.547088][ T8085] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.576405][ T8085] CPU: 1 UID: 0 PID: 8085 Comm: syz.1.610 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 131.576430][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.576440][ T8085] Call Trace: [ 131.576445][ T8085] [ 131.576453][ T8085] dump_stack_lvl+0x241/0x360 [ 131.576478][ T8085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.576495][ T8085] ? __pfx__printk+0x10/0x10 [ 131.576511][ T8085] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 131.576542][ T8085] should_fail_ex+0x40a/0x550 [ 131.576569][ T8085] prepare_alloc_pages+0x1da/0x5b0 [ 131.576594][ T8085] __alloc_frozen_pages_noprof+0x16f/0x710 [ 131.576615][ T8085] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 131.576653][ T8085] alloc_pages_mpol+0x311/0x660 [ 131.576678][ T8085] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 131.576707][ T8085] vma_alloc_folio_noprof+0x12b/0x260 [ 131.576730][ T8085] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 131.576752][ T8085] ? do_raw_spin_unlock+0x13c/0x8b0 [ 131.576776][ T8085] folio_prealloc+0x2e/0x170 [ 131.576794][ T8085] do_wp_page+0x1253/0x49b0 [ 131.576836][ T8085] ? __pfx_do_wp_page+0x10/0x10 [ 131.576863][ T8085] ? __pfx_lock_acquire+0x10/0x10 [ 131.576882][ T8085] ? rcu_is_watching+0x15/0xb0 [ 131.576902][ T8085] ? do_raw_spin_lock+0x14f/0x370 [ 131.576920][ T8085] ? __pfx____pte_offset_map+0x10/0x10 [ 131.576953][ T8085] __handle_mm_fault+0x24d5/0x70f0 [ 131.576998][ T8085] ? __pfx___handle_mm_fault+0x10/0x10 [ 131.577031][ T8085] ? mt_find+0x2a9/0x920 [ 131.577053][ T8085] ? __pfx_lock_release+0x10/0x10 [ 131.577083][ T8085] ? mt_find+0x2a9/0x920 [ 131.577106][ T8085] ? mt_find+0x6c8/0x920 [ 131.577135][ T8085] ? __pfx_mt_find+0x10/0x10 [ 131.577174][ T8085] ? find_vma+0xf9/0x170 [ 131.577195][ T8085] ? __pfx_find_vma+0x10/0x10 [ 131.577219][ T8085] handle_mm_fault+0x3e5/0x8d0 [ 131.577250][ T8085] exc_page_fault+0x2b9/0x8b0 [ 131.577278][ T8085] asm_exc_page_fault+0x26/0x30 [ 131.577297][ T8085] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 131.577317][ T8085] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 131.577330][ T8085] RSP: 0018:ffffc90004f9fb68 EFLAGS: 00050202 [ 131.577346][ T8085] RAX: ffffffff84f54a01 RBX: 000040000002180c RCX: 000000000001c80c [ 131.577358][ T8085] RDX: 0000000000000000 RSI: ffff8880566838cf RDI: 0000400000005000 [ 131.577369][ T8085] RBP: ffffc90004f9fd00 R08: 0000000000000002 R09: ffffed100acd401b [ 131.577380][ T8085] R10: dffffc0000000000 R11: ffffed100acd401b R12: 00000000000200cc [ 131.577391][ T8085] R13: 00007ffffffff000 R14: ffff88805668000f R15: 0000400000001740 [ 131.577409][ T8085] ? _copy_to_user+0x51/0xb0 [ 131.577438][ T8085] _copy_to_user+0x8b/0xb0 [ 131.577458][ T8085] generic_map_lookup_batch+0x98a/0xf20 [ 131.577476][ T8085] ? __pfx_lock_release+0x10/0x10 [ 131.577512][ T8085] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 131.577528][ T8085] ? __fget_files+0x395/0x410 [ 131.577548][ T8085] ? __fget_files+0x2a/0x410 [ 131.577572][ T8085] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 131.577591][ T8085] bpf_map_do_batch+0x288/0x660 [ 131.577617][ T8085] __sys_bpf+0x653/0x820 [ 131.577639][ T8085] ? __pfx___sys_bpf+0x10/0x10 [ 131.577671][ T8085] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 131.577696][ T8085] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.577719][ T8085] ? do_syscall_64+0x100/0x230 [ 131.577738][ T8085] __x64_sys_bpf+0x7c/0x90 [ 131.577757][ T8085] do_syscall_64+0xf3/0x230 [ 131.577771][ T8085] ? clear_bhb_loop+0x35/0x90 [ 131.577794][ T8085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.577813][ T8085] RIP: 0033:0x7f4d01f8d169 [ 131.577828][ T8085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.577847][ T8085] RSP: 002b:00007f4d02d2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.577863][ T8085] RAX: ffffffffffffffda RBX: 00007f4d021a6080 RCX: 00007f4d01f8d169 [ 131.577874][ T8085] RDX: 0000000000000038 RSI: 0000400000000700 RDI: 0000000000000018 [ 131.577884][ T8085] RBP: 00007f4d02d2e090 R08: 0000000000000000 R09: 0000000000000000 [ 131.577893][ T8085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.577902][ T8085] R13: 0000000000000000 R14: 00007f4d021a6080 R15: 00007ffc0b08cf28 [ 131.577927][ T8085] [ 131.650926][ T8086] netlink: 'syz.4.604': attribute type 10 has an invalid length. [ 132.000352][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 132.134074][ T8095] ip6tnl3: entered promiscuous mode [ 132.869134][ T8131] C: renamed from team_slave_0 [ 132.924951][ T8131] netlink: 'syz.1.623': attribute type 1 has an invalid length. [ 132.976159][ T8131] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 133.173896][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.180679][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.571040][ T8208] netlink: 'syz.1.641': attribute type 39 has an invalid length. [ 134.674338][ T8211] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.802327][ T8211] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.889206][ T8219] __nla_validate_parse: 9 callbacks suppressed [ 134.889223][ T8219] netlink: 60 bytes leftover after parsing attributes in process `syz.3.644'. [ 134.960929][ T8219] netlink: 'syz.3.644': attribute type 1 has an invalid length. [ 134.996984][ T8219] netlink: 128 bytes leftover after parsing attributes in process `syz.3.644'. [ 135.019400][ T8223] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 135.137371][ T8211] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.183409][ T8233] FAULT_INJECTION: forcing a failure. [ 135.183409][ T8233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.221824][ T8233] CPU: 0 UID: 0 PID: 8233 Comm: syz.3.648 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 135.221850][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.221859][ T8233] Call Trace: [ 135.221868][ T8233] [ 135.221875][ T8233] dump_stack_lvl+0x241/0x360 [ 135.221901][ T8233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.221917][ T8233] ? __pfx__printk+0x10/0x10 [ 135.221934][ T8233] ? __pfx_lock_release+0x10/0x10 [ 135.221965][ T8233] should_fail_ex+0x40a/0x550 [ 135.221991][ T8233] _copy_from_iter+0x1df/0x1c40 [ 135.222008][ T8233] ? __virt_addr_valid+0x183/0x530 [ 135.222024][ T8233] ? __pfx_lock_release+0x10/0x10 [ 135.222052][ T8233] ? __alloc_skb+0x28f/0x440 [ 135.222072][ T8233] ? __pfx__copy_from_iter+0x10/0x10 [ 135.222091][ T8233] ? __virt_addr_valid+0x183/0x530 [ 135.222105][ T8233] ? __virt_addr_valid+0x183/0x530 [ 135.222118][ T8233] ? __virt_addr_valid+0x45f/0x530 [ 135.222133][ T8233] ? __phys_addr_symbol+0x2f/0x70 [ 135.222147][ T8233] ? __check_object_size+0x47a/0x730 [ 135.222171][ T8233] netlink_sendmsg+0x742/0xcb0 [ 135.222200][ T8233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.222221][ T8233] ? aa_sock_msg_perm+0x91/0x160 [ 135.222248][ T8233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.222264][ T8233] __sock_sendmsg+0x221/0x270 [ 135.222286][ T8233] ____sys_sendmsg+0x53a/0x860 [ 135.222315][ T8233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.222335][ T8233] ? __fget_files+0x2a/0x410 [ 135.222358][ T8233] ? __fget_files+0x2a/0x410 [ 135.222386][ T8233] __sys_sendmsg+0x269/0x350 [ 135.222413][ T8233] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.222446][ T8233] ? do_sys_openat2+0x17a/0x1d0 [ 135.222491][ T8233] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 135.222514][ T8233] ? do_syscall_64+0x100/0x230 [ 135.222540][ T8233] ? do_syscall_64+0xb6/0x230 [ 135.222558][ T8233] do_syscall_64+0xf3/0x230 [ 135.222572][ T8233] ? clear_bhb_loop+0x35/0x90 [ 135.222596][ T8233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.222616][ T8233] RIP: 0033:0x7f4a7a38d169 [ 135.222631][ T8233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.222644][ T8233] RSP: 002b:00007f4a7b21d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.222662][ T8233] RAX: ffffffffffffffda RBX: 00007f4a7a5a5fa0 RCX: 00007f4a7a38d169 [ 135.222674][ T8233] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000006 [ 135.222684][ T8233] RBP: 00007f4a7b21d090 R08: 0000000000000000 R09: 0000000000000000 [ 135.222693][ T8233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.222703][ T8233] R13: 0000000000000000 R14: 00007f4a7a5a5fa0 R15: 00007ffe96558568 [ 135.222728][ T8233] [ 135.536848][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 135.575776][ T8238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.590833][ T8238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.598954][ T8238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.606548][ T8238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.679101][ T8211] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.724101][ T8241] netlink: 'syz.2.649': attribute type 11 has an invalid length. [ 135.798696][ T8246] bridge_slave_1: left allmulticast mode [ 135.825915][ T8246] bridge_slave_1: left promiscuous mode [ 135.839458][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.888569][ T8246] bridge_slave_0: left allmulticast mode [ 135.897973][ T8246] bridge_slave_0: left promiscuous mode [ 135.905078][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.928860][ T8259] netlink: 260 bytes leftover after parsing attributes in process `syz.2.652'. [ 135.948004][ T8246] bridge0 (unregistering): left allmulticast mode [ 135.952358][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 136.071987][ T8211] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.112759][ T8211] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.221079][ T8211] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.244924][ T8276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.654'. [ 136.267258][ T8211] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.297274][ T8275] netlink: 'syz.4.656': attribute type 30 has an invalid length. [ 136.769665][ T8296] FAULT_INJECTION: forcing a failure. [ 136.769665][ T8296] name failslab, interval 1, probability 0, space 0, times 0 [ 136.800054][ T8296] CPU: 1 UID: 0 PID: 8296 Comm: syz.1.661 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 136.800083][ T8296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.800093][ T8296] Call Trace: [ 136.800099][ T8296] [ 136.800106][ T8296] dump_stack_lvl+0x241/0x360 [ 136.800132][ T8296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.800149][ T8296] ? __pfx__printk+0x10/0x10 [ 136.800178][ T8296] should_fail_ex+0x40a/0x550 [ 136.800204][ T8296] should_failslab+0xac/0x100 [ 136.800225][ T8296] ? skb_clone+0x20c/0x390 [ 136.800240][ T8296] kmem_cache_alloc_noprof+0x70/0x380 [ 136.800271][ T8296] skb_clone+0x20c/0x390 [ 136.800289][ T8296] __netlink_deliver_tap+0x3c4/0x7f0 [ 136.800318][ T8296] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.800335][ T8296] netlink_deliver_tap+0x19d/0x1b0 [ 136.800354][ T8296] netlink_unicast+0x7c4/0x990 [ 136.800378][ T8296] ? __pfx_netlink_unicast+0x10/0x10 [ 136.800392][ T8296] ? __virt_addr_valid+0x45f/0x530 [ 136.800409][ T8296] ? __phys_addr_symbol+0x2f/0x70 [ 136.800423][ T8296] ? __check_object_size+0x47a/0x730 [ 136.800447][ T8296] netlink_sendmsg+0x8de/0xcb0 [ 136.800473][ T8296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.800495][ T8296] ? aa_sock_msg_perm+0x91/0x160 [ 136.800521][ T8296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.800537][ T8296] __sock_sendmsg+0x221/0x270 [ 136.800559][ T8296] ____sys_sendmsg+0x53a/0x860 [ 136.800590][ T8296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.800609][ T8296] ? __fget_files+0x2a/0x410 [ 136.800632][ T8296] ? __fget_files+0x2a/0x410 [ 136.800662][ T8296] __sys_sendmsg+0x269/0x350 [ 136.800690][ T8296] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.800725][ T8296] ? do_sys_openat2+0x17a/0x1d0 [ 136.800766][ T8296] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.800791][ T8296] ? do_syscall_64+0x100/0x230 [ 136.800809][ T8296] ? do_syscall_64+0xb6/0x230 [ 136.800827][ T8296] do_syscall_64+0xf3/0x230 [ 136.800842][ T8296] ? clear_bhb_loop+0x35/0x90 [ 136.800866][ T8296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.800886][ T8296] RIP: 0033:0x7f4d01f8d169 [ 136.800900][ T8296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.800913][ T8296] RSP: 002b:00007f4d02d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.800931][ T8296] RAX: ffffffffffffffda RBX: 00007f4d021a5fa0 RCX: 00007f4d01f8d169 [ 136.800942][ T8296] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000006 [ 136.800951][ T8296] RBP: 00007f4d02d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 136.800960][ T8296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.800968][ T8296] R13: 0000000000000000 R14: 00007f4d021a5fa0 R15: 00007ffc0b08cf28 [ 136.800995][ T8296] [ 137.326518][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 137.339953][ T8306] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 137.415625][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 137.491328][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.667'. [ 137.695844][ T8326] netlink: 2 bytes leftover after parsing attributes in process `syz.2.667'. [ 137.835035][ T8333] batadv_slave_0: entered promiscuous mode [ 137.872833][ T8329] batadv_slave_0: left promiscuous mode [ 137.882658][ T29] audit: type=1107 audit(1741181771.808:5): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Àï' [ 137.895117][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 138.008503][ T25] IPVS: starting estimator thread 0... [ 138.125652][ T8350] IPVS: using max 21 ests per chain, 50400 per kthread [ 138.201639][ T8359] FAULT_INJECTION: forcing a failure. [ 138.201639][ T8359] name failslab, interval 1, probability 0, space 0, times 0 [ 138.214755][ T8359] CPU: 0 UID: 0 PID: 8359 Comm: syz.2.677 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 138.214776][ T8359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.214785][ T8359] Call Trace: [ 138.214791][ T8359] [ 138.214798][ T8359] dump_stack_lvl+0x241/0x360 [ 138.214821][ T8359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.214837][ T8359] ? __pfx__printk+0x10/0x10 [ 138.214863][ T8359] should_fail_ex+0x40a/0x550 [ 138.214888][ T8359] should_failslab+0xac/0x100 [ 138.214909][ T8359] ? skb_clone+0x20c/0x390 [ 138.214921][ T8359] kmem_cache_alloc_noprof+0x70/0x380 [ 138.214947][ T8359] skb_clone+0x20c/0x390 [ 138.214960][ T8359] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 138.214981][ T8359] dev_queue_xmit_nit+0x249/0xca0 [ 138.215002][ T8359] ? dev_queue_xmit_nit+0x2b/0xca0 [ 138.215022][ T8359] ? validate_xmit_skb+0x9b8/0xff0 [ 138.215049][ T8359] dev_hard_start_xmit+0x15f/0x7d0 [ 138.215073][ T8359] ? __pfx_validate_xmit_skb+0x10/0x10 [ 138.215106][ T8359] __dev_queue_xmit+0x1b73/0x3f40 [ 138.215123][ T8359] ? kasan_save_track+0x51/0x80 [ 138.215145][ T8359] ? ____sys_sendmsg+0x53a/0x860 [ 138.215174][ T8359] ? __dev_queue_xmit+0x2f4/0x3f40 [ 138.215194][ T8359] ? __pfx___dev_queue_xmit+0x10/0x10 [ 138.215225][ T8359] ? __copy_skb_header+0xa7/0x5a0 [ 138.215240][ T8359] ? __asan_memcpy+0x40/0x70 [ 138.215256][ T8359] ? __skb_clone+0x5c/0x6c0 [ 138.215276][ T8359] ? __skb_clone+0x454/0x6c0 [ 138.215299][ T8359] ? skb_clone+0x240/0x390 [ 138.215319][ T8359] __netlink_deliver_tap+0x561/0x7f0 [ 138.215350][ T8359] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.215367][ T8359] netlink_deliver_tap+0x19d/0x1b0 [ 138.215386][ T8359] netlink_unicast+0x7c4/0x990 [ 138.215411][ T8359] ? __pfx_netlink_unicast+0x10/0x10 [ 138.215425][ T8359] ? __virt_addr_valid+0x45f/0x530 [ 138.215441][ T8359] ? __phys_addr_symbol+0x2f/0x70 [ 138.215453][ T8359] ? __check_object_size+0x47a/0x730 [ 138.215483][ T8359] netlink_sendmsg+0x8de/0xcb0 [ 138.215513][ T8359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.215535][ T8359] ? aa_sock_msg_perm+0x91/0x160 [ 138.215563][ T8359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.215578][ T8359] __sock_sendmsg+0x221/0x270 [ 138.215599][ T8359] ____sys_sendmsg+0x53a/0x860 [ 138.215629][ T8359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.215650][ T8359] ? __fget_files+0x2a/0x410 [ 138.215674][ T8359] ? __fget_files+0x2a/0x410 [ 138.215703][ T8359] __sys_sendmsg+0x269/0x350 [ 138.215731][ T8359] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.215768][ T8359] ? do_sys_openat2+0x17a/0x1d0 [ 138.215817][ T8359] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.215841][ T8359] ? do_syscall_64+0x100/0x230 [ 138.215860][ T8359] ? do_syscall_64+0xb6/0x230 [ 138.215878][ T8359] do_syscall_64+0xf3/0x230 [ 138.215893][ T8359] ? clear_bhb_loop+0x35/0x90 [ 138.215917][ T8359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.215936][ T8359] RIP: 0033:0x7f2badf8d169 [ 138.215951][ T8359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.215964][ T8359] RSP: 002b:00007f2baeddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.215982][ T8359] RAX: ffffffffffffffda RBX: 00007f2bae1a5fa0 RCX: 00007f2badf8d169 [ 138.215993][ T8359] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000006 [ 138.216002][ T8359] RBP: 00007f2baeddb090 R08: 0000000000000000 R09: 0000000000000000 [ 138.216011][ T8359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.216020][ T8359] R13: 0000000000000000 R14: 00007f2bae1a5fa0 R15: 00007ffe68f6fb88 [ 138.216048][ T8359] [ 139.122622][ T8374] openvswitch: netlink: Missing valid actions attribute. [ 139.129714][ T8374] openvswitch: netlink: Actions may not be safe on all matching packets [ 139.695807][ T8406] dccp_invalid_packet: invalid packet type [ 140.052991][ T8437] __nla_validate_parse: 7 callbacks suppressed [ 140.053011][ T8437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.704'. [ 140.087885][ T8442] netlink: 104 bytes leftover after parsing attributes in process `syz.4.702'. [ 140.142662][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 140.297331][ T8449] netlink: 60 bytes leftover after parsing attributes in process `syz.1.707'. [ 140.336501][ T8449] openvswitch: netlink: Tunnel attr 228 out of range max 16 [ 140.732508][ T8476] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 140.742479][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 140.787030][ T8477] netlink: 52 bytes leftover after parsing attributes in process `syz.0.714'. [ 141.158038][ T8485] xt_TCPMSS: Only works on TCP SYN packets [ 141.269847][ T8487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.719'. [ 141.580823][ T8499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.724'. [ 141.600290][ T8499] sit0: entered promiscuous mode [ 141.651882][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 141.741484][ T8509] IPVS: length: 157 != 8 [ 142.095076][ T8516] IPv6: addrconf: prefix option has invalid lifetime [ 142.113952][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.731'. [ 142.419834][ T8541] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.427259][ T8541] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.488247][ T8541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.501017][ T8541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.558545][ T8541] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.567200][ T8541] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.576499][ T8541] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.585029][ T8541] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.625676][ T8541] gtp0: left promiscuous mode [ 142.631082][ T8541] gtp0: left allmulticast mode [ 143.419246][ T8564] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 143.866157][ T8574] netlink: 'syz.3.749': attribute type 10 has an invalid length. [ 143.879846][ T8574] openvswitch: netlink: Flow key attr not present in new flow. [ 144.101660][ T8590] netlink: 'syz.3.753': attribute type 13 has an invalid length. [ 144.140319][ T8590] lo: entered promiscuous mode [ 144.145221][ T8590] lo: entered allmulticast mode [ 144.158249][ T8590] tunl0: entered promiscuous mode [ 144.181472][ T8590] tunl0: entered allmulticast mode [ 144.190818][ T8590] gre0: entered promiscuous mode [ 144.202707][ T8590] gre0: entered allmulticast mode [ 144.208109][ T8590] gretap0: entered promiscuous mode [ 144.213860][ T8590] gretap0: entered allmulticast mode [ 144.219473][ T8590] gretap0: refused to change device tx_queue_len [ 144.226474][ T8590] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 144.317391][ T8599] pim6reg1: entered promiscuous mode [ 144.339852][ T8599] pim6reg1: entered allmulticast mode [ 144.715534][ T8615] openvswitch: netlink: Message has 1247 unknown bytes. [ 144.723292][ T8615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.840692][ T8619] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 144.864388][ T8619] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 145.090616][ T8633] IPVS: set_ctl: invalid protocol: 33 172.20.20.52:20004 [ 145.408035][ T8643] __nla_validate_parse: 14 callbacks suppressed [ 145.408053][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.770'. [ 145.465733][ T8651] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.815389][ T8667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.777'. [ 145.997466][ T8672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.779'. [ 146.008580][ T8672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.779'. [ 146.019892][ T8672] netlink: 32 bytes leftover after parsing attributes in process `syz.3.779'. [ 146.073837][ T8674] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 146.095361][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.778'. [ 146.416061][ T8685] tipc: Started in network mode [ 146.421693][ T8685] tipc: Node identity ac14140f, cluster identity 4711 [ 146.447531][ T8685] tipc: New replicast peer: 255.255.255.255 [ 146.463556][ T8685] tipc: Enabled bearer , priority 10 [ 146.678743][ T8694] atomic_op ffff888012186198 conn xmit_atomic 0000000000000000 [ 146.689737][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.785'. [ 146.999264][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'. [ 147.020528][ T8702] tipc: Enabling of bearer rejected, failed to enable media [ 147.059605][ T8705] vlan4: entered promiscuous mode [ 147.100222][ T8705] team0: entered promiscuous mode [ 147.105316][ T8705] team_slave_0: entered promiscuous mode [ 147.132505][ T8705] team_slave_1: entered promiscuous mode [ 147.207617][ T8705] team0: left promiscuous mode [ 147.213358][ T8705] team_slave_0: left promiscuous mode [ 147.227077][ T8705] team_slave_1: left promiscuous mode [ 147.352807][ T5886] IPVS: starting estimator thread 0... [ 147.470596][ T8719] IPVS: using max 20 ests per chain, 48000 per kthread [ 147.581923][ T3077] tipc: Node number set to 2886997007 [ 147.705448][ T8734] netlink: 'syz.3.799': attribute type 29 has an invalid length. [ 147.732578][ T8734] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 148.086134][ T8748] tipc: Can't bind to reserved service type 2 [ 148.134023][ T8750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.805'. [ 148.319548][ T8758] netlink: 84 bytes leftover after parsing attributes in process `syz.4.809'. [ 148.374758][ T8758] netem: invalid attributes len -16 [ 148.395706][ T8758] netem: change failed [ 148.442861][ T8759] netlink: 'syz.4.809': attribute type 10 has an invalid length. [ 148.981566][ T8768] netlink: 'syz.4.811': attribute type 11 has an invalid length. [ 149.211693][ T8780] delete_channel: no stack [ 149.330310][ T5886] IPVS: starting estimator thread 0... [ 149.427626][ T8792] IPVS: using max 23 ests per chain, 55200 per kthread [ 149.569950][ T8805] bridge_slave_0: left allmulticast mode [ 149.576323][ T8805] bridge_slave_0: left promiscuous mode [ 149.582287][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.601249][ T8801] netlink: 'syz.2.822': attribute type 10 has an invalid length. [ 149.622804][ T8805] bridge_slave_1: left allmulticast mode [ 149.635564][ T8805] bridge_slave_1: left promiscuous mode [ 149.641487][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.650471][ T5838] Bluetooth: hci0: command 0x0401 tx timeout [ 149.664918][ T8805] bond0: (slave bond_slave_0): Releasing backup interface [ 149.705491][ T8805] bond0: (slave bond_slave_1): Releasing backup interface [ 149.771149][ T8805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.809338][ T8805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.897923][ T8801] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 149.919403][ T8822] ÿÿÿÿÿÿ: renamed from vlan1 [ 149.972537][ T8829] netlink: 'syz.1.828': attribute type 2 has an invalid length. [ 150.004002][ T8829] : entered promiscuous mode [ 150.048011][ T8830] dummy0: entered promiscuous mode [ 150.104770][ T8830] dummy0: left promiscuous mode [ 150.153456][ T8832] netlink: 'syz.2.829': attribute type 10 has an invalid length. [ 150.171520][ T8833] netlink: 'syz.2.829': attribute type 10 has an invalid length. [ 150.215611][ T8847] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 150.394760][ T8854] xt_hashlimit: size too large, truncated to 1048576 [ 150.517792][ T8858] __nla_validate_parse: 10 callbacks suppressed [ 150.517813][ T8858] netlink: 104 bytes leftover after parsing attributes in process `syz.2.835'. [ 150.874042][ T8866] netlink: 36 bytes leftover after parsing attributes in process `syz.2.836'. [ 150.974602][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.837'. [ 151.025703][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 151.074770][ T8872] netlink: 'syz.1.838': attribute type 21 has an invalid length. [ 151.176817][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 151.201618][ T8878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.840'. [ 151.291751][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 151.308075][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 151.431817][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 151.551329][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.846'. [ 151.743579][ T8904] pimreg: entered allmulticast mode [ 151.761555][ T8904] pimreg: left allmulticast mode [ 152.215333][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 152.633361][ T8913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.859637][ T8926] ip6tnl1: entered promiscuous mode [ 153.049882][ T8937] netlink: 'syz.2.860': attribute type 4 has an invalid length. [ 153.816504][ T8976] pim6reg: entered allmulticast mode [ 153.823596][ T8976] pim6reg: left allmulticast mode [ 154.151613][ T9000] Cannot find del_set index 4 as target [ 155.021849][ T9041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.429184][ T9071] netlink: 'syz.3.894': attribute type 3 has an invalid length. [ 155.604846][ T9082] __nla_validate_parse: 18 callbacks suppressed [ 155.604863][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 155.822721][ T9101] netlink: 36 bytes leftover after parsing attributes in process `syz.0.902'. [ 155.833249][ T9101] netlink: 'syz.0.902': attribute type 2 has an invalid length. [ 155.904481][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'. [ 156.149599][ T9109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.904'. [ 156.343566][ T9117] netlink: 'syz.0.907': attribute type 1 has an invalid length. [ 156.362171][ T9117] netlink: 'syz.0.907': attribute type 4 has an invalid length. [ 156.370952][ T9117] netlink: 15363 bytes leftover after parsing attributes in process `syz.0.907'. [ 156.625503][ T9129] team0: Device gtp0 is of different type [ 156.761601][ T9137] IPVS: Error connecting to the multicast addr [ 157.201279][ T9154] netlink: 'syz.4.921': attribute type 4 has an invalid length. [ 157.574048][ T9183] netlink: 104 bytes leftover after parsing attributes in process `syz.1.929'. [ 157.754187][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.933'. [ 157.825417][ T9197] netlink: 'syz.1.933': attribute type 39 has an invalid length. [ 158.424072][ T9214] netlink: 'syz.0.938': attribute type 10 has an invalid length. [ 158.519255][ T9214] veth0_vlan: left promiscuous mode [ 158.594530][ T9214] veth0_vlan: entered promiscuous mode [ 158.718818][ T9214] team0: Device veth0_vlan failed to register rx_handler [ 159.046829][ T9247] xt_addrtype: ipv6 does not support BROADCAST matching [ 159.262104][ T9262] netlink: 'syz.1.946': attribute type 1 has an invalid length. [ 159.280038][ T9262] netlink: 244 bytes leftover after parsing attributes in process `syz.1.946'. [ 159.289945][ T9265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.949'. [ 159.465217][ T9275] netlink: 'syz.0.950': attribute type 1 has an invalid length. [ 159.480334][ T9275] nbd: couldn't find a device at index 20 [ 159.989958][ T9312] netlink: 256 bytes leftover after parsing attributes in process `syz.2.963'. [ 160.023793][ T9312] unsupported nlmsg_type 40 [ 160.036737][ T9312] Driver unsupported XDP return value 0 on prog (id 379) dev N/A, expect packet loss! [ 160.051925][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 160.461642][ T9328] wg1: entered promiscuous mode [ 160.466647][ T9328] wg1: entered allmulticast mode [ 160.830026][ T9352] __nla_validate_parse: 1 callbacks suppressed [ 160.830044][ T9352] netlink: 92 bytes leftover after parsing attributes in process `syz.1.975'. [ 160.858733][ T9347] sctp: [Deprecated]: syz.0.972 (pid 9347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.858733][ T9347] Use struct sctp_sack_info instead [ 160.946124][ T9358] netlink: 56 bytes leftover after parsing attributes in process `syz.0.972'. [ 161.134346][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 161.159728][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.208002][ T9366] bridge_slave_1 (unregistering): left allmulticast mode [ 161.215329][ T9366] bridge_slave_1 (unregistering): left promiscuous mode [ 161.223287][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.303059][ T9371] can: request_module (can-proto-3) failed. [ 161.425330][ T9381] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 161.902411][ T9398] netlink: 104 bytes leftover after parsing attributes in process `syz.2.987'. [ 162.215351][ T9407] FAULT_INJECTION: forcing a failure. [ 162.215351][ T9407] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 162.260402][ T9407] CPU: 0 UID: 0 PID: 9407 Comm: syz.3.991 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 162.260429][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.260440][ T9407] Call Trace: [ 162.260446][ T9407] [ 162.260454][ T9407] dump_stack_lvl+0x241/0x360 [ 162.260480][ T9407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.260497][ T9407] ? __pfx__printk+0x10/0x10 [ 162.260513][ T9407] ? __lock_acquire+0x1397/0x2100 [ 162.260541][ T9407] should_fail_ex+0x40a/0x550 [ 162.260569][ T9407] prepare_alloc_pages+0x1da/0x5b0 [ 162.260594][ T9407] __alloc_frozen_pages_noprof+0x16f/0x710 [ 162.260616][ T9407] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 162.260655][ T9407] alloc_pages_mpol+0x311/0x660 [ 162.260681][ T9407] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 162.260711][ T9407] vma_alloc_folio_noprof+0x12b/0x260 [ 162.260734][ T9407] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 162.260758][ T9407] ? do_raw_spin_unlock+0x13c/0x8b0 [ 162.260782][ T9407] folio_prealloc+0x2e/0x170 [ 162.260801][ T9407] do_wp_page+0x1253/0x49b0 [ 162.260838][ T9407] ? __pfx_do_wp_page+0x10/0x10 [ 162.260875][ T9407] ? __pfx_lock_acquire+0x10/0x10 [ 162.260895][ T9407] ? rcu_is_watching+0x15/0xb0 [ 162.260915][ T9407] ? do_raw_spin_lock+0x14f/0x370 [ 162.260934][ T9407] ? __pfx____pte_offset_map+0x10/0x10 [ 162.260973][ T9407] __handle_mm_fault+0x24d5/0x70f0 [ 162.261023][ T9407] ? __pfx___handle_mm_fault+0x10/0x10 [ 162.261058][ T9407] ? mt_find+0x2a9/0x920 [ 162.261082][ T9407] ? __pfx_lock_release+0x10/0x10 [ 162.261114][ T9407] ? mt_find+0x2a9/0x920 [ 162.261138][ T9407] ? mt_find+0x6c8/0x920 [ 162.261168][ T9407] ? __pfx_mt_find+0x10/0x10 [ 162.261208][ T9407] ? find_vma+0xf9/0x170 [ 162.261230][ T9407] ? __pfx_find_vma+0x10/0x10 [ 162.261254][ T9407] handle_mm_fault+0x3e5/0x8d0 [ 162.261286][ T9407] exc_page_fault+0x2b9/0x8b0 [ 162.261314][ T9407] asm_exc_page_fault+0x26/0x30 [ 162.261334][ T9407] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 162.261354][ T9407] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 162.261367][ T9407] RSP: 0018:ffffc9000ba2fb68 EFLAGS: 00050202 [ 162.261383][ T9407] RAX: ffffffff84f54a01 RBX: 000040000002180c RCX: 000000000001080c [ 162.261395][ T9407] RDX: 0000000000000000 RSI: ffff88805104f8cf RDI: 0000400000011000 [ 162.261406][ T9407] RBP: ffffc9000ba2fd00 R08: 0000000000000002 R09: ffffed100a20c01b [ 162.261417][ T9407] R10: dffffc0000000000 R11: ffffed100a20c01b R12: 00000000000200cc [ 162.261429][ T9407] R13: 00007ffffffff000 R14: ffff88805104000f R15: 0000400000001740 [ 162.261448][ T9407] ? _copy_to_user+0x51/0xb0 [ 162.261475][ T9407] _copy_to_user+0x8b/0xb0 [ 162.261496][ T9407] generic_map_lookup_batch+0x98a/0xf20 [ 162.261515][ T9407] ? __pfx_lock_release+0x10/0x10 [ 162.261552][ T9407] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 162.261568][ T9407] ? __fget_files+0x395/0x410 [ 162.261588][ T9407] ? __fget_files+0x2a/0x410 [ 162.261612][ T9407] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 162.261631][ T9407] bpf_map_do_batch+0x288/0x660 [ 162.261656][ T9407] __sys_bpf+0x653/0x820 [ 162.261679][ T9407] ? __pfx___sys_bpf+0x10/0x10 [ 162.261713][ T9407] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 162.261737][ T9407] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 162.261766][ T9407] ? do_syscall_64+0x100/0x230 [ 162.261785][ T9407] __x64_sys_bpf+0x7c/0x90 [ 162.261805][ T9407] do_syscall_64+0xf3/0x230 [ 162.261820][ T9407] ? clear_bhb_loop+0x35/0x90 [ 162.261843][ T9407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.261868][ T9407] RIP: 0033:0x7f4a7a38d169 [ 162.261882][ T9407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.261895][ T9407] RSP: 002b:00007f4a7b21d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.261910][ T9407] RAX: ffffffffffffffda RBX: 00007f4a7a5a5fa0 RCX: 00007f4a7a38d169 [ 162.261922][ T9407] RDX: 0000000000000038 RSI: 0000400000000700 RDI: 0000000000000018 [ 162.261932][ T9407] RBP: 00007f4a7b21d090 R08: 0000000000000000 R09: 0000000000000000 [ 162.261943][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.261952][ T9407] R13: 0000000000000000 R14: 00007f4a7a5a5fa0 R15: 00007ffe96558568 [ 162.261979][ T9407] [ 162.338247][ T9390] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 162.830531][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'. [ 162.999954][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1002'. [ 163.324291][ T9456] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.412569][ T9461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.518712][ T9468] ipt_REJECT: TCP_RESET invalid for non-tcp [ 163.567673][ T9456] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.806669][ T9467] sit0: left promiscuous mode [ 164.018357][ T9467] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.217107][ T9467] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 164.279112][ T9456] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.345588][ T9479] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1015'. [ 164.365311][ T9456] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.512132][ T9456] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.551938][ T9456] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.560557][ T9485] FAULT_INJECTION: forcing a failure. [ 164.560557][ T9485] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 164.586028][ T9456] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.594409][ T9485] CPU: 0 UID: 0 PID: 9485 Comm: syz.1.1017 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 164.594431][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.594441][ T9485] Call Trace: [ 164.594446][ T9485] [ 164.594453][ T9485] dump_stack_lvl+0x241/0x360 [ 164.594478][ T9485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.594495][ T9485] ? __pfx__printk+0x10/0x10 [ 164.594512][ T9485] ? __lock_acquire+0x1397/0x2100 [ 164.594541][ T9485] should_fail_ex+0x40a/0x550 [ 164.594568][ T9485] prepare_alloc_pages+0x1da/0x5b0 [ 164.594595][ T9485] __alloc_frozen_pages_noprof+0x16f/0x710 [ 164.594616][ T9485] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 164.594653][ T9485] alloc_pages_mpol+0x311/0x660 [ 164.594679][ T9485] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 164.594708][ T9485] vma_alloc_folio_noprof+0x12b/0x260 [ 164.594732][ T9485] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 164.594755][ T9485] ? do_raw_spin_unlock+0x13c/0x8b0 [ 164.594786][ T9485] folio_prealloc+0x2e/0x170 [ 164.594803][ T9485] do_wp_page+0x1253/0x49b0 [ 164.594838][ T9485] ? __pfx_do_wp_page+0x10/0x10 [ 164.594865][ T9485] ? __pfx_lock_acquire+0x10/0x10 [ 164.594884][ T9485] ? rcu_is_watching+0x15/0xb0 [ 164.594905][ T9485] ? do_raw_spin_lock+0x14f/0x370 [ 164.594924][ T9485] ? __pfx____pte_offset_map+0x10/0x10 [ 164.594959][ T9485] __handle_mm_fault+0x24d5/0x70f0 [ 164.595004][ T9485] ? __pfx___handle_mm_fault+0x10/0x10 [ 164.595038][ T9485] ? mt_find+0x2a9/0x920 [ 164.595061][ T9485] ? __pfx_lock_release+0x10/0x10 [ 164.595095][ T9485] ? mt_find+0x2a9/0x920 [ 164.595118][ T9485] ? mt_find+0x6c8/0x920 [ 164.595147][ T9485] ? __pfx_mt_find+0x10/0x10 [ 164.595186][ T9485] ? find_vma+0xf9/0x170 [ 164.595206][ T9485] ? __pfx_find_vma+0x10/0x10 [ 164.595230][ T9485] handle_mm_fault+0x3e5/0x8d0 [ 164.595260][ T9485] exc_page_fault+0x2b9/0x8b0 [ 164.595285][ T9485] asm_exc_page_fault+0x26/0x30 [ 164.595303][ T9485] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 164.595323][ T9485] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 164.595336][ T9485] RSP: 0018:ffffc9000c21fb68 EFLAGS: 00050202 [ 164.595351][ T9485] RAX: ffffffff84f54a01 RBX: 000040000002180c RCX: 000000000000f80c [ 164.595362][ T9485] RDX: 0000000000000000 RSI: ffff888055c508cf RDI: 0000400000012000 [ 164.595372][ T9485] RBP: ffffc9000c21fd00 R08: 0000000000000002 R09: ffffed100ab8c01b [ 164.595382][ T9485] R10: dffffc0000000000 R11: ffffed100ab8c01b R12: 00000000000200cc [ 164.595392][ T9485] R13: 00007ffffffff000 R14: ffff888055c4000f R15: 0000400000001740 [ 164.595408][ T9485] ? _copy_to_user+0x51/0xb0 [ 164.595431][ T9485] _copy_to_user+0x8b/0xb0 [ 164.595451][ T9485] generic_map_lookup_batch+0x98a/0xf20 [ 164.595469][ T9485] ? __pfx_lock_release+0x10/0x10 [ 164.595504][ T9485] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 164.595519][ T9485] ? __fget_files+0x395/0x410 [ 164.595538][ T9485] ? __fget_files+0x2a/0x410 [ 164.595563][ T9485] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 164.595582][ T9485] bpf_map_do_batch+0x288/0x660 [ 164.595608][ T9485] __sys_bpf+0x653/0x820 [ 164.595629][ T9485] ? __pfx___sys_bpf+0x10/0x10 [ 164.595661][ T9485] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 164.595686][ T9485] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.595710][ T9485] ? do_syscall_64+0x100/0x230 [ 164.595728][ T9485] __x64_sys_bpf+0x7c/0x90 [ 164.595748][ T9485] do_syscall_64+0xf3/0x230 [ 164.595771][ T9485] ? clear_bhb_loop+0x35/0x90 [ 164.595795][ T9485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.595815][ T9485] RIP: 0033:0x7f4d01f8d169 [ 164.595830][ T9485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.595843][ T9485] RSP: 002b:00007f4d02d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.595859][ T9485] RAX: ffffffffffffffda RBX: 00007f4d021a5fa0 RCX: 00007f4d01f8d169 [ 164.595871][ T9485] RDX: 0000000000000038 RSI: 0000400000000700 RDI: 0000000000000018 [ 164.595881][ T9485] RBP: 00007f4d02d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 164.595890][ T9485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.595899][ T9485] R13: 0000000000000000 R14: 00007f4d021a5fa0 R15: 00007ffc0b08cf28 [ 164.595924][ T9485] [ 164.624326][ T9456] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.253522][ T9501] netlink: 'syz.4.1022': attribute type 49 has an invalid length. [ 165.365283][ T9510] ÿÿÿÿÿÿ: renamed from vlan1 [ 165.426853][ T9512] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 165.464148][ T9515] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.1027'. [ 165.478426][ T9515] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.1027'. [ 165.546410][ T9523] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.1027'. [ 165.702653][ T5838] Bluetooth: hci4: link tx timeout [ 165.708825][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.718950][ T5838] Bluetooth: hci4: link tx timeout [ 165.724382][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.847536][ T9533] __nla_validate_parse: 1 callbacks suppressed [ 165.847553][ T9533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1031'. [ 165.866889][ T9533] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1031'. [ 165.875965][ T9533] netlink: 'syz.1.1031': attribute type 1 has an invalid length. [ 165.946457][ T9536] netlink: 'syz.1.1032': attribute type 11 has an invalid length. [ 166.188371][ T9547] FAULT_INJECTION: forcing a failure. [ 166.188371][ T9547] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.203483][ T9547] CPU: 1 UID: 0 PID: 9547 Comm: syz.4.1036 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 166.203508][ T9547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.203518][ T9547] Call Trace: [ 166.203525][ T9547] [ 166.203531][ T9547] dump_stack_lvl+0x241/0x360 [ 166.203557][ T9547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.203574][ T9547] ? __pfx__printk+0x10/0x10 [ 166.203590][ T9547] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 166.203621][ T9547] should_fail_ex+0x40a/0x550 [ 166.203646][ T9547] prepare_alloc_pages+0x1da/0x5b0 [ 166.203671][ T9547] __alloc_frozen_pages_noprof+0x16f/0x710 [ 166.203692][ T9547] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 166.203730][ T9547] alloc_pages_mpol+0x311/0x660 [ 166.203756][ T9547] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 166.203786][ T9547] vma_alloc_folio_noprof+0x12b/0x260 [ 166.203809][ T9547] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 166.203829][ T9547] ? do_raw_spin_unlock+0x13c/0x8b0 [ 166.203854][ T9547] folio_prealloc+0x2e/0x170 [ 166.203871][ T9547] do_wp_page+0x1253/0x49b0 [ 166.203904][ T9547] ? __pfx_do_wp_page+0x10/0x10 [ 166.203935][ T9547] ? __pfx_lock_acquire+0x10/0x10 [ 166.203955][ T9547] ? rcu_is_watching+0x15/0xb0 [ 166.203975][ T9547] ? do_raw_spin_lock+0x14f/0x370 [ 166.203994][ T9547] ? __pfx____pte_offset_map+0x10/0x10 [ 166.204033][ T9547] __handle_mm_fault+0x24d5/0x70f0 [ 166.204083][ T9547] ? __pfx___handle_mm_fault+0x10/0x10 [ 166.204117][ T9547] ? mt_find+0x2a9/0x920 [ 166.204140][ T9547] ? __pfx_lock_release+0x10/0x10 [ 166.204174][ T9547] ? mt_find+0x2a9/0x920 [ 166.204197][ T9547] ? mt_find+0x6c8/0x920 [ 166.204228][ T9547] ? __pfx_mt_find+0x10/0x10 [ 166.204269][ T9547] ? find_vma+0xf9/0x170 [ 166.204290][ T9547] ? __pfx_find_vma+0x10/0x10 [ 166.204314][ T9547] handle_mm_fault+0x3e5/0x8d0 [ 166.204346][ T9547] exc_page_fault+0x2b9/0x8b0 [ 166.204374][ T9547] asm_exc_page_fault+0x26/0x30 [ 166.204395][ T9547] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 166.204420][ T9547] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 166.204434][ T9547] RSP: 0018:ffffc9000bf47b68 EFLAGS: 00050202 [ 166.204449][ T9547] RAX: ffffffff84f54a01 RBX: 000040000002180c RCX: 000000000000e80c [ 166.204461][ T9547] RDX: 0000000000000000 RSI: ffff88804b9918cf RDI: 0000400000013000 [ 166.204473][ T9547] RBP: ffffc9000bf47d00 R08: 0000000000000002 R09: ffffed100973401b [ 166.204484][ T9547] R10: dffffc0000000000 R11: ffffed100973401b R12: 00000000000200cc [ 166.204495][ T9547] R13: 00007ffffffff000 R14: ffff88804b98000f R15: 0000400000001740 [ 166.204514][ T9547] ? _copy_to_user+0x51/0xb0 [ 166.204541][ T9547] _copy_to_user+0x8b/0xb0 [ 166.204562][ T9547] generic_map_lookup_batch+0x98a/0xf20 [ 166.204580][ T9547] ? __pfx_lock_release+0x10/0x10 [ 166.204618][ T9547] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 166.204634][ T9547] ? __fget_files+0x395/0x410 [ 166.204654][ T9547] ? __fget_files+0x2a/0x410 [ 166.204680][ T9547] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 166.204700][ T9547] bpf_map_do_batch+0x288/0x660 [ 166.204727][ T9547] __sys_bpf+0x653/0x820 [ 166.204750][ T9547] ? __pfx___sys_bpf+0x10/0x10 [ 166.204782][ T9547] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 166.204807][ T9547] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 166.204831][ T9547] ? do_syscall_64+0x100/0x230 [ 166.204849][ T9547] __x64_sys_bpf+0x7c/0x90 [ 166.204868][ T9547] do_syscall_64+0xf3/0x230 [ 166.204882][ T9547] ? clear_bhb_loop+0x35/0x90 [ 166.204905][ T9547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.204925][ T9547] RIP: 0033:0x7faa0cf8d169 [ 166.204939][ T9547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.204953][ T9547] RSP: 002b:00007faa0de38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.204969][ T9547] RAX: ffffffffffffffda RBX: 00007faa0d1a5fa0 RCX: 00007faa0cf8d169 [ 166.204981][ T9547] RDX: 0000000000000038 RSI: 0000400000000700 RDI: 0000000000000018 [ 166.204992][ T9547] RBP: 00007faa0de38090 R08: 0000000000000000 R09: 0000000000000000 [ 166.205002][ T9547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.205012][ T9547] R13: 0000000000000000 R14: 00007faa0d1a5fa0 R15: 00007fff680f7c78 [ 166.205040][ T9547] [ 166.234213][ T9550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1037'. [ 166.341536][ T9556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1037'. [ 166.371645][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 166.838205][ T9559] syz.1.1039 uses old SIOCAX25GETINFO [ 167.425826][ T9576] vlan3: entered promiscuous mode [ 167.447779][ T9576] bond0: entered promiscuous mode [ 167.457356][ T9576] bond_slave_0: entered promiscuous mode [ 167.487914][ T9576] bond_slave_1: entered promiscuous mode [ 167.539477][ T9576] bond0: left promiscuous mode [ 167.576770][ T9576] bond_slave_0: left promiscuous mode [ 167.591733][ T9576] bond_slave_1: left promiscuous mode [ 167.621500][ T9566] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 167.814522][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 167.995538][ T9566] netlink: 'syz.2.1041': attribute type 1 has an invalid length. [ 168.024567][ T9595] sctp: [Deprecated]: syz.0.1051 (pid 9595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.024567][ T9595] Use struct sctp_sack_info instead [ 168.113794][ T9566] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1041'. [ 168.387691][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 168.474417][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1058'. [ 168.593696][ T9626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1061'. [ 168.624064][ T9626] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1061'. [ 168.898222][ T9634] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 169.713252][ T9661] netlink: 'syz.3.1073': attribute type 1 has an invalid length. [ 169.816527][ T9669] netlink: 'syz.1.1075': attribute type 6 has an invalid length. [ 170.158971][ T9685] xt_l2tp: invalid flags combination: c [ 170.337810][ T9697] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 170.656153][ T9717] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 171.862663][ T9786] batadv_slave_1: entered promiscuous mode [ 171.885817][ T9784] batadv_slave_1: left promiscuous mode [ 172.794248][ T9843] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 172.936042][ T9852] __nla_validate_parse: 6 callbacks suppressed [ 172.936061][ T9852] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1134'. [ 173.229215][ T9860] sctp: [Deprecated]: syz.0.1138 (pid 9860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.229215][ T9860] Use struct sctp_sack_info instead [ 173.337285][ T9864] bond0: entered promiscuous mode [ 173.346226][ T9864] batadv0: entered promiscuous mode [ 173.355039][ T9864] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 173.388506][ T9867] sctp: [Deprecated]: syz.4.1139 (pid 9867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.388506][ T9867] Use struct sctp_sack_info instead [ 173.426113][ T9864] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 173.463158][ T9871] tipc: Started in network mode [ 173.468260][ T9871] tipc: Node identity 6, cluster identity 4711 [ 173.475301][ T9871] tipc: Node number set to 6 [ 173.631446][ T9881] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1140'. [ 173.757878][ T9886] netlink: 'syz.2.1147': attribute type 32 has an invalid length. [ 173.779497][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 173.931834][ T9894] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 173.977079][ T9893] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1149'. [ 174.004905][ T9897] pim6reg: entered allmulticast mode [ 174.165880][ T9911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1153'. [ 174.306986][ T9924] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1159'. [ 174.416670][ T9929] netlink: 'syz.0.1158': attribute type 4 has an invalid length. [ 174.456077][ T9929] netlink: 'syz.0.1158': attribute type 4 has an invalid length. [ 175.322966][ T9961] FAULT_INJECTION: forcing a failure. [ 175.322966][ T9961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.369732][ T9961] CPU: 1 UID: 0 PID: 9961 Comm: syz.2.1170 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 175.369759][ T9961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.369767][ T9961] Call Trace: [ 175.369772][ T9961] [ 175.369778][ T9961] dump_stack_lvl+0x241/0x360 [ 175.369802][ T9961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.369816][ T9961] ? __pfx__printk+0x10/0x10 [ 175.369831][ T9961] ? __pfx_lock_release+0x10/0x10 [ 175.369855][ T9961] should_fail_ex+0x40a/0x550 [ 175.369876][ T9961] _copy_from_user+0x2d/0xb0 [ 175.369892][ T9961] __sys_bpf+0x1be/0x820 [ 175.369913][ T9961] ? __pfx___sys_bpf+0x10/0x10 [ 175.369942][ T9961] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 175.369965][ T9961] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.369986][ T9961] ? do_syscall_64+0x100/0x230 [ 175.370004][ T9961] __x64_sys_bpf+0x7c/0x90 [ 175.370023][ T9961] do_syscall_64+0xf3/0x230 [ 175.370036][ T9961] ? clear_bhb_loop+0x35/0x90 [ 175.370057][ T9961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.370079][ T9961] RIP: 0033:0x7f2badf8d169 [ 175.370094][ T9961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.370107][ T9961] RSP: 002b:00007f2baeddb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.370123][ T9961] RAX: ffffffffffffffda RBX: 00007f2bae1a5fa0 RCX: 00007f2badf8d169 [ 175.370134][ T9961] RDX: 0000000000000048 RSI: 0000400000000100 RDI: 0000000000000000 [ 175.370143][ T9961] RBP: 00007f2baeddb090 R08: 0000000000000000 R09: 0000000000000000 [ 175.370153][ T9961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.370161][ T9961] R13: 0000000000000001 R14: 00007f2bae1a5fa0 R15: 00007ffe68f6fb88 [ 175.370185][ T9961] [ 175.678110][ T9972] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1173'. [ 175.718746][ T9975] sctp: [Deprecated]: syz.4.1175 (pid 9975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.718746][ T9975] Use struct sctp_sack_info instead [ 175.719052][ T9973] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1172'. [ 175.815309][ T9984] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1177'. [ 175.831290][ T9984] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1177'. [ 175.867868][ T9984] netlink: 'syz.3.1177': attribute type 6 has an invalid length. [ 175.876885][ T9984] netlink: 'syz.3.1177': attribute type 5 has an invalid length. [ 176.295912][T10011] IPv6: NLM_F_CREATE should be specified when creating new route [ 176.320245][T10011] IPv6: Can't replace route, no match found [ 176.869169][T10045] sctp: [Deprecated]: syz.3.1191 (pid 10045) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.869169][T10045] Use struct sctp_sack_info instead [ 178.705559][T10070] set match dimension is over the limit! [ 178.747854][T10070] __nla_validate_parse: 3 callbacks suppressed [ 178.747873][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 178.817332][T10076] trusted_key: syz.1.1198 sent an empty control message without MSG_MORE. [ 178.881961][T10080] netlink: 'syz.4.1200': attribute type 24 has an invalid length. [ 178.892552][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 178.897370][T10082] FAULT_INJECTION: forcing a failure. [ 178.897370][T10082] name failslab, interval 1, probability 0, space 0, times 0 [ 178.920783][T10082] CPU: 1 UID: 0 PID: 10082 Comm: syz.0.1201 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 178.920810][T10082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 178.920820][T10082] Call Trace: [ 178.920827][T10082] [ 178.920834][T10082] dump_stack_lvl+0x241/0x360 [ 178.920869][T10082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.920887][T10082] ? __pfx__printk+0x10/0x10 [ 178.920905][T10082] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 178.920927][T10082] ? __pfx___might_resched+0x10/0x10 [ 178.920952][T10082] should_fail_ex+0x40a/0x550 [ 178.920978][T10082] should_failslab+0xac/0x100 [ 178.921000][T10082] ? __d_alloc+0x31/0x740 [ 178.921014][T10082] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 178.921040][T10082] __d_alloc+0x31/0x740 [ 178.921060][T10082] d_alloc_pseudo+0x1f/0xb0 [ 178.921076][T10082] alloc_file_pseudo+0x141/0x320 [ 178.921103][T10082] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 178.921137][T10082] anon_inode_getfd+0xce/0x1e0 [ 178.921161][T10082] map_create+0xe1f/0x11c0 [ 178.921190][T10082] __sys_bpf+0x6d3/0x820 [ 178.921213][T10082] ? __pfx___sys_bpf+0x10/0x10 [ 178.921245][T10082] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 178.921270][T10082] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 178.921294][T10082] ? do_syscall_64+0x100/0x230 [ 178.921313][T10082] __x64_sys_bpf+0x7c/0x90 [ 178.921334][T10082] do_syscall_64+0xf3/0x230 [ 178.921349][T10082] ? clear_bhb_loop+0x35/0x90 [ 178.921373][T10082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.921393][T10082] RIP: 0033:0x7f627798d169 [ 178.921411][T10082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.921434][T10082] RSP: 002b:00007f627882b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.921458][T10082] RAX: ffffffffffffffda RBX: 00007f6277ba5fa0 RCX: 00007f627798d169 [ 178.921470][T10082] RDX: 0000000000000048 RSI: 0000400000000100 RDI: 0000000000000000 [ 178.921481][T10082] RBP: 00007f627882b090 R08: 0000000000000000 R09: 0000000000000000 [ 178.921491][T10082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.921501][T10082] R13: 0000000000000001 R14: 00007f6277ba5fa0 R15: 00007ffc1cbc3cc8 [ 178.921529][T10082] [ 179.259023][T10089] netlink: 'syz.1.1204': attribute type 1 has an invalid length. [ 179.283257][T10089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.468641][T10107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1208'. [ 179.503996][T10107] bond3: entered promiscuous mode [ 179.509736][T10107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.799776][T10118] sctp: [Deprecated]: syz.0.1206 (pid 10118) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.799776][T10118] Use struct sctp_sack_info instead [ 179.899186][T10107] bond3 (unregistering): Released all slaves [ 180.240836][T10154] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1217'. [ 180.333732][T10160] bridge4: entered allmulticast mode [ 180.378621][T10155] ================================================================== [ 180.386737][T10155] BUG: KASAN: slab-use-after-free in hci_sock_get_cookie+0x49/0x50 [ 180.394658][T10155] Read of size 4 at addr ffff88805dd8b5b8 by task syz.1.1215/10155 [ 180.402561][T10155] [ 180.404875][T10155] CPU: 1 UID: 0 PID: 10155 Comm: syz.1.1215 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 180.404893][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.404902][T10155] Call Trace: [ 180.404907][T10155] [ 180.404914][T10155] dump_stack_lvl+0x241/0x360 [ 180.404934][T10155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.404948][T10155] ? __pfx__printk+0x10/0x10 [ 180.404961][T10155] ? _printk+0xd5/0x120 [ 180.404973][T10155] ? __virt_addr_valid+0x183/0x530 [ 180.404986][T10155] ? __virt_addr_valid+0x183/0x530 [ 180.404999][T10155] print_report+0x16e/0x5b0 [ 180.405015][T10155] ? __virt_addr_valid+0x183/0x530 [ 180.405031][T10155] ? __virt_addr_valid+0x183/0x530 [ 180.405042][T10155] ? __virt_addr_valid+0x45f/0x530 [ 180.405053][T10155] ? __phys_addr+0xba/0x170 [ 180.405071][T10155] ? hci_sock_get_cookie+0x49/0x50 [ 180.405091][T10155] kasan_report+0x143/0x180 [ 180.405107][T10155] ? hci_sock_get_cookie+0x49/0x50 [ 180.405128][T10155] hci_sock_get_cookie+0x49/0x50 [ 180.405145][T10155] mgmt_cmd_status+0x1be/0x4d0 [ 180.405165][T10155] cmd_complete_rsp+0x114/0x180 [ 180.405185][T10155] mgmt_pending_foreach+0xd1/0x130 [ 180.405203][T10155] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 180.405222][T10155] __mgmt_power_off+0x189/0x440 [ 180.405241][T10155] ? __pfx___mgmt_power_off+0x10/0x10 [ 180.405262][T10155] ? __mutex_trylock_common+0x183/0x2e0 [ 180.405277][T10155] ? __pfx___might_resched+0x10/0x10 [ 180.405295][T10155] ? __pfx___mutex_trylock_common+0x10/0x10 [ 180.405310][T10155] ? rcu_is_watching+0x15/0xb0 [ 180.405323][T10155] ? trace_contention_end+0x3c/0x120 [ 180.405337][T10155] ? __mutex_lock+0x397/0x1010 [ 180.405358][T10155] ? __mutex_unlock_slowpath+0x227/0x800 [ 180.405378][T10155] ? hci_dev_close_sync+0x60d/0x1260 [ 180.405394][T10155] ? _raw_spin_lock_irq+0xdf/0x120 [ 180.405410][T10155] ? __pfx___mutex_lock+0x10/0x10 [ 180.405429][T10155] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 180.405449][T10155] ? _raw_spin_unlock_irq+0x2e/0x50 [ 180.405465][T10155] ? drain_workqueue+0x2d3/0x3a0 [ 180.405483][T10155] ? hci_discovery_set_state+0x57/0x180 [ 180.405502][T10155] hci_dev_close_sync+0x6ff/0x1260 [ 180.405519][T10155] ? __pfx_enable_work+0x10/0x10 [ 180.405538][T10155] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 180.405559][T10155] hci_dev_close+0x112/0x210 [ 180.405577][T10155] sock_do_ioctl+0x158/0x460 [ 180.405594][T10155] ? __pfx_sock_do_ioctl+0x10/0x10 [ 180.405614][T10155] sock_ioctl+0x626/0x8e0 [ 180.405628][T10155] ? __pfx_sock_ioctl+0x10/0x10 [ 180.405641][T10155] ? __fget_files+0x2a/0x410 [ 180.405660][T10155] ? __fget_files+0x2a/0x410 [ 180.405679][T10155] ? __pfx_sock_ioctl+0x10/0x10 [ 180.405693][T10155] __se_sys_ioctl+0xf5/0x170 [ 180.405708][T10155] do_syscall_64+0xf3/0x230 [ 180.405720][T10155] ? clear_bhb_loop+0x35/0x90 [ 180.405738][T10155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.405755][T10155] RIP: 0033:0x7f4d01f8d169 [ 180.405768][T10155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.405780][T10155] RSP: 002b:00007f4d02d2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.405795][T10155] RAX: ffffffffffffffda RBX: 00007f4d021a6080 RCX: 00007f4d01f8d169 [ 180.405822][T10155] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000008 [ 180.405832][T10155] RBP: 00007f4d0200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 180.405841][T10155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.405850][T10155] R13: 0000000000000000 R14: 00007f4d021a6080 R15: 00007ffc0b08cf28 [ 180.405865][T10155] [ 180.405871][T10155] [ 180.761184][T10155] Allocated by task 8730: [ 180.765584][T10155] kasan_save_track+0x3f/0x80 [ 180.770255][T10155] __kasan_kmalloc+0x98/0xb0 [ 180.774834][T10155] __kmalloc_noprof+0x285/0x4c0 [ 180.779671][T10155] sk_prot_alloc+0xe0/0x210 [ 180.784170][T10155] sk_alloc+0x3e/0x370 [ 180.788236][T10155] bt_sock_alloc+0x3c/0x340 [ 180.792729][T10155] hci_sock_create+0xa1/0x190 [ 180.797395][T10155] bt_sock_create+0x161/0x230 [ 180.802058][T10155] __sock_create+0x4c0/0xa30 [ 180.806635][T10155] __sys_socket+0x150/0x3c0 [ 180.811128][T10155] __x64_sys_socket+0x7a/0x90 [ 180.815813][T10155] do_syscall_64+0xf3/0x230 [ 180.820321][T10155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.826218][T10155] [ 180.828529][T10155] Freed by task 10161: [ 180.832582][T10155] kasan_save_track+0x3f/0x80 [ 180.837266][T10155] kasan_save_free_info+0x40/0x50 [ 180.842284][T10155] __kasan_slab_free+0x59/0x70 [ 180.847033][T10155] kfree+0x196/0x430 [ 180.850914][T10155] __sk_destruct+0x50c/0x690 [ 180.855496][T10155] mgmt_pending_remove+0x13e/0x1a0 [ 180.860685][T10155] mgmt_pending_foreach+0xd1/0x130 [ 180.865792][T10155] mgmt_index_removed+0x133/0x390 [ 180.870811][T10155] hci_sock_bind+0xd70/0x12d0 [ 180.875483][T10155] __sys_bind+0x1e4/0x290 [ 180.879820][T10155] __x64_sys_bind+0x7a/0x90 [ 180.884334][T10155] do_syscall_64+0xf3/0x230 [ 180.888926][T10155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.894821][T10155] [ 180.897139][T10155] The buggy address belongs to the object at ffff88805dd8b000 [ 180.897139][T10155] which belongs to the cache kmalloc-2k of size 2048 [ 180.911191][T10155] The buggy address is located 1464 bytes inside of [ 180.911191][T10155] freed 2048-byte region [ffff88805dd8b000, ffff88805dd8b800) [ 180.925146][T10155] [ 180.927459][T10155] The buggy address belongs to the physical page: [ 180.933867][T10155] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5dd88 [ 180.943053][T10155] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 180.951534][T10155] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 180.959075][T10155] page_type: f5(slab) [ 180.963041][T10155] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 180.971882][T10155] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 180.980462][T10155] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 180.989146][T10155] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 180.997815][T10155] head: 00fff00000000003 ffffea0001776201 ffffffffffffffff 0000000000000000 [ 181.006472][T10155] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 181.015125][T10155] page dumped because: kasan: bad access detected [ 181.021710][T10155] page_owner tracks the page as allocated [ 181.027408][T10155] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5206, tgid 5206 (udevd), ts 64304946548, free_ts 17148063584 [ 181.048596][T10155] post_alloc_hook+0x1f4/0x240 [ 181.053532][T10155] get_page_from_freelist+0x365c/0x37a0 [ 181.059066][T10155] __alloc_frozen_pages_noprof+0x292/0x710 [ 181.064950][T10155] alloc_pages_mpol+0x311/0x660 [ 181.069788][T10155] allocate_slab+0x8f/0x3a0 [ 181.074275][T10155] ___slab_alloc+0xc27/0x14a0 [ 181.078941][T10155] __slab_alloc+0x58/0xa0 [ 181.083347][T10155] __kmalloc_noprof+0x2e6/0x4c0 [ 181.088192][T10155] sk_prot_alloc+0xe0/0x210 [ 181.092687][T10155] sk_alloc+0x3e/0x370 [ 181.096747][T10155] __netlink_create+0x65/0x260 [ 181.101512][T10155] netlink_create+0x3ab/0x560 [ 181.106286][T10155] __sock_create+0x4c0/0xa30 [ 181.110873][T10155] __sys_socket+0x150/0x3c0 [ 181.115373][T10155] __x64_sys_socket+0x7a/0x90 [ 181.120074][T10155] do_syscall_64+0xf3/0x230 [ 181.124609][T10155] page last free pid 1 tgid 1 stack trace: [ 181.130417][T10155] free_frozen_pages+0xe0d/0x10e0 [ 181.135467][T10155] free_contig_range+0x14c/0x430 [ 181.140416][T10155] destroy_args+0x94/0x4b0 [ 181.144821][T10155] debug_vm_pgtable+0x551/0x590 [ 181.149657][T10155] do_one_initcall+0x248/0x930 [ 181.154497][T10155] do_initcall_level+0x157/0x210 [ 181.159421][T10155] do_initcalls+0x71/0xd0 [ 181.163735][T10155] kernel_init_freeable+0x435/0x5d0 [ 181.168948][T10155] kernel_init+0x1d/0x2b0 [ 181.173276][T10155] ret_from_fork+0x4b/0x80 [ 181.177686][T10155] ret_from_fork_asm+0x1a/0x30 [ 181.182450][T10155] [ 181.184763][T10155] Memory state around the buggy address: [ 181.191049][T10155] ffff88805dd8b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.199458][T10155] ffff88805dd8b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.207518][T10155] >ffff88805dd8b580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.216008][T10155] ^ [ 181.221977][T10155] ffff88805dd8b600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.230022][T10155] ffff88805dd8b680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.238069][T10155] ================================================================== [ 181.258784][T10155] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 181.266016][T10155] CPU: 0 UID: 0 PID: 10155 Comm: syz.1.1215 Not tainted 6.14.0-rc4-syzkaller-01091-gf252f23ab657 #0 [ 181.276786][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.287030][T10155] Call Trace: [ 181.290409][T10155] [ 181.293429][T10155] dump_stack_lvl+0x241/0x360 [ 181.298197][T10155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.303401][T10155] ? __pfx__printk+0x10/0x10 [ 181.307997][T10155] ? preempt_schedule+0xe1/0xf0 [ 181.312877][T10155] ? vscnprintf+0x5d/0x90 [ 181.317218][T10155] panic+0x349/0x880 [ 181.321122][T10155] ? check_panic_on_warn+0x21/0xb0 [ 181.326237][T10155] ? __pfx_panic+0x10/0x10 [ 181.330658][T10155] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 181.336648][T10155] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 181.342996][T10155] ? print_report+0x519/0x5b0 [ 181.347674][T10155] check_panic_on_warn+0x86/0xb0 [ 181.352607][T10155] ? hci_sock_get_cookie+0x49/0x50 [ 181.357707][T10155] end_report+0x77/0x160 [ 181.361947][T10155] kasan_report+0x154/0x180 [ 181.366441][T10155] ? hci_sock_get_cookie+0x49/0x50 [ 181.371548][T10155] hci_sock_get_cookie+0x49/0x50 [ 181.376483][T10155] mgmt_cmd_status+0x1be/0x4d0 [ 181.381241][T10155] cmd_complete_rsp+0x114/0x180 [ 181.386085][T10155] mgmt_pending_foreach+0xd1/0x130 [ 181.391195][T10155] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 181.396709][T10155] __mgmt_power_off+0x189/0x440 [ 181.401555][T10155] ? __pfx___mgmt_power_off+0x10/0x10 [ 181.407010][T10155] ? __mutex_trylock_common+0x183/0x2e0 [ 181.412547][T10155] ? __pfx___might_resched+0x10/0x10 [ 181.417823][T10155] ? __pfx___mutex_trylock_common+0x10/0x10 [ 181.423703][T10155] ? rcu_is_watching+0x15/0xb0 [ 181.428466][T10155] ? trace_contention_end+0x3c/0x120 [ 181.433738][T10155] ? __mutex_lock+0x397/0x1010 [ 181.438506][T10155] ? __mutex_unlock_slowpath+0x227/0x800 [ 181.444134][T10155] ? hci_dev_close_sync+0x60d/0x1260 [ 181.449409][T10155] ? _raw_spin_lock_irq+0xdf/0x120 [ 181.454511][T10155] ? __pfx___mutex_lock+0x10/0x10 [ 181.459529][T10155] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 181.465506][T10155] ? _raw_spin_unlock_irq+0x2e/0x50 [ 181.470698][T10155] ? drain_workqueue+0x2d3/0x3a0 [ 181.475898][T10155] ? hci_discovery_set_state+0x57/0x180 [ 181.481441][T10155] hci_dev_close_sync+0x6ff/0x1260 [ 181.486545][T10155] ? __pfx_enable_work+0x10/0x10 [ 181.491476][T10155] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 181.497047][T10155] hci_dev_close+0x112/0x210 [ 181.501632][T10155] sock_do_ioctl+0x158/0x460 [ 181.506213][T10155] ? __pfx_sock_do_ioctl+0x10/0x10 [ 181.511331][T10155] sock_ioctl+0x626/0x8e0 [ 181.515648][T10155] ? __pfx_sock_ioctl+0x10/0x10 [ 181.520484][T10155] ? __fget_files+0x2a/0x410 [ 181.525078][T10155] ? __fget_files+0x2a/0x410 [ 181.529678][T10155] ? __pfx_sock_ioctl+0x10/0x10 [ 181.534517][T10155] __se_sys_ioctl+0xf5/0x170 [ 181.539096][T10155] do_syscall_64+0xf3/0x230 [ 181.543585][T10155] ? clear_bhb_loop+0x35/0x90 [ 181.548255][T10155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.554142][T10155] RIP: 0033:0x7f4d01f8d169 [ 181.558548][T10155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.578234][T10155] RSP: 002b:00007f4d02d2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.586653][T10155] RAX: ffffffffffffffda RBX: 00007f4d021a6080 RCX: 00007f4d01f8d169 [ 181.594614][T10155] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000008 [ 181.602571][T10155] RBP: 00007f4d0200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 181.610532][T10155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.618488][T10155] R13: 0000000000000000 R14: 00007f4d021a6080 R15: 00007ffc0b08cf28 [ 181.626453][T10155] [ 181.629716][T10155] Kernel Offset: disabled [ 181.634021][T10155] Rebooting in 86400 seconds..