last executing test programs: 4.335653491s ago: executing program 2 (id=137): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @local}, 0x10) listen(r1, 0x8) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004040000e27f000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000380), 0x5, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000000), &(0x7f0000000440)=""/12, 0x2}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x4a, 0x98, 0x2, 0x11, @remote, @loopback, 0x8000, 0x700, 0x800, 0x2}}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x7fff, 0x0, r4, 0x3, '\x00', r5, r6, 0x1, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0xe, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000284a4a622fb564500004e23e3f58e76110165f450c71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd70000000000000000200000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x6, 0x7a}, 0xffffffffffffff18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711239000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r10}, 0x18) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001040)}, 0x24048050) 3.675059157s ago: executing program 4 (id=146): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 3.499703707s ago: executing program 4 (id=149): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x14) 3.386016571s ago: executing program 2 (id=150): r0 = socket$kcm(0x10, 0x2, 0x4) writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000240)="57056c2138a496ddfc6523f0223adef63d6f8c5dfb1247b48e2b95cda627f5575e16d7ea97caf53fdba8342e8d5cc7fbe27d14730caffc7bf1537c17ac7386a1103b0911b5e6061381f1105cb218dd4a0c8890962e73a8e744a7fae1aaea9059b0c3373bb0f8fa780b1df6e5dd35938e0c1387835756beeba93f75ab413c1e17be9ff8f008705e9fb6be1b48941e938306e3a01f8fe789308cb503c6d97e589f2f11f0ef1227a5d16a6a65ebaa22be68ac55f06cfb555d7ae73bf3cfbdc35dd81affa69779699896aaaa8303ba9c35d3bb4f827d7c081660f7329c9106b8f02a0c21f739cb8d6db4323d7e97573abd3d742351ca8187270c514437315e13c4455acd6cebdeaaf97dd9738545cbc176727d9c6dd14417454b13d1e1f4e5109f0b23ae0778a38033f56291a46719ff786b28c9c4b878a4abae5791e56f29384f0869d788fe8c63df2cb898aba0308d94d32631cb3ffa87ea3e706445b9d9474e1f92de0738ec246908e40e8f537dca38e65eaf835b96919b703974ec466c30e34a68969010bcbc56425b836f402d9ac33679a94179b2ceceaa110d3a103120118f94665f32af4c989c1c8c597dc3c829ab0a5512143cadeea7c5d9373e9cfd300d5c6e5191bb425dd4484b5810531e2bd2cd4423e1afa78f994c9224d5381372c855a40ed3ab761ee4107fc412470fa478df69ec94b4fdb7420a8cb3a6c81df24e2dae0e4a7ed5ce173c03ad1337bfccebc124082429b4295dfbbb39fb87b10e0be7e20004cf051abdeaf55ac3c9f87bf6ae466b0896a880bf0039e1b95e344876ed708a6476a0878c20f68d0fafa3503cff349c1f2884e99b452ad69982a7cfebd8935203e49064e6a3935467f3b83e8c8f1e3b024b33d8f73479dc367b732297fd35991b268bd076196ea37aa2332bc6c77d0a9dc0b8374796d89a1cb3b43bd37183baf760b8e24f9c2269ed290e6a1d1824fd8da55833dc44166e03685421d96f4190c30d3626fac4bcbe15732f8c3c20e3f2a9e8792d0614bdf7994c7235ea71c5352c520d47465868dab9f3cb9678abf6c49ebb34a6aa9914469e91a0afd48ad058ffbb5ace22ac70785ec887869fa41d1a099fdc4fb6532fd36bd69597e6ea68bb818dc14bd3087ebef398bc84ca5b69607d0ce66511f08787617cb9238817a67f3796035db3fd7fd038f41b71bc993f3b0bec9eadd8d05728eb2274e8ab0a6c207bc92202c20fcb70a15af81a4c884565971b2adc78b885873a7793c3613a9796df837f293b88d8e1f535f4df4a60c2ed12bfd1392707feddccb2f23c959d507b96009fe5f0e04178cba9478761053dc3b57e4af652b3e1db4335772efcfb1f5ce9b20f6018ebd46aeccea13a7f89f29d2655a8a75f6eb1032a465779f4d3b1f4ae653ebc898a84fe243310a8af93b33fe7fb20b8585393780bd9045b2bdf0b2873ea54d1c237f3920966ba4bba299de594acaa0194fbe4af145bf994e30df5afd54cfcb19701ab4026890267652b0e496a291d5b98662d53f7060a84da6f693d0bf32aca7691b499cf70203202f1043a34344e45673fb1269856e66a9f6ba889bae0bbb5eadc7e6a5fabef5faacf1390492ff37ffd7e48c7f7526904022e884a349c35e8c66e12485033f38972a7a69f2d88033e29746a913f297d6bccbbea2763b2475e591e940e8d70022e3bca396fa31be93b2b1bb7dbfa73783360f55841a845e3309ae60849cffb7303be1b3722a81c8b079592c70ae65ff03838b4230dc4b2251ec0cd122ba65e721e4172dd4fb5679c86526124a0b2d96ee31a324eab9f9fdd6f557abd80a11a4322734fdc99cecb1e3116d9a5f7fa5e8894bbfcb961f2cbd2a4c650bafa2344e835b5c7ff9e974f7a03c555f8458d99beecd92a603a9b787063b30041e647c29d8230d13308f83f99d5648ad7532a6f20f4bcd34a03f68e0370f2d8b70fee20dd850ebd85b228963071081aafe941f443d549128a951e0b7bc7877c3d3b5fb4d7335f6b8f06571a0146d84df573c50a577ca11927dd3530e5b63ca945a2865b9a3a050bf7f5130260202fb04680300159ae39a8eab439c51dac4af68b5835f38dc5bba55aef5cd2215be91f6d43c062bfd53e55b117a52745c7906d73bc40db3e3b98faa235cd95eb4d26bfabdfdd989a07bb91ed7450544c8d6694d9f049fa61d0e957f50329ea963023375600b51949401e93acc54cde2c361cea4491c59b99081dad99e0b69b7232137753e4417bbddd0867bbae03d60b038d49541d799d426d808c6a4836bb31c8b746794dbf4c1ec8623bfaa7f34c115b0d571de1bae5bbdb1d59b8dfafa08f976cd787cc6ae7b4c093036c5bfe2547c872b45bd672445ba800575cf5be3b67132db4cf34416a39b2a2c9a99af982e578d78de7c4e4e53d596da5545b1283764df6edcfddf96cc63aa5ae95b1d6ceb74bfcad1ba62c1f61047d4c3834e42d451a2b92be82ab9ef78ff444f08f8b91bbe8c9fb68be76b4ec317de4f4de9fa9666f3bfaffb3e5be460bf6832106e815f3456bbbcd394fe0c6d6d2f501918f3a8f77a81d6fd463c22dc1c542999e480c1a30162b8026fb291d075b55b654e2d7e5c2c9e3f52af0b6d3d1bd40bb5e93dbba32ff26a3f943b399ff4fe6b67115a05c5d65b2ea07f6e8815da0ce380ae8132b864374c61b68036e92183ed5c972127d2735b24e173f437976d7d7baaaaa814455e826d1ab10521d6a8793a104aa78280d1e6bf9e970313034d36192f76e2f9e1a146f9a17f6dfec6a84d5d1a2da92584903afe1123305daf92cb8a84aea15f46826aefcbefdd6f2d4f72b60be47073fc065ac965c9a6ff5aa1608e1574060f4cd9668cd1d3783d156fb834a47aa8dd89336be6f2dc9ce308d4ba5c22a0f8560a219809d850e80f84c17ed793508483522f6b23cfe3ba98e007ebcaa3b57ade7d96e3376a4c8f087e9672031f5716a68034f846f4189bafe5b5c0d6d5c7c289f752f3c9f36052ff16ccb5f7589f37e29e0f1ab058092ddbb54903c5b07c5622dc3f23fa2340158b86bb496d161f47e444ebd9a747c34b1438c25c40421a79f489a11794313b3d84b962471b870461cb358cd3b0b1326cd2f26d24341a5dab57cb65773887287b39fb1c13ea9c8b39ff756618dbc5a6315a74fa57e7cc5efebee65a020909bf7eee0f752e49757ea79ad6040ad7a67a6b29686d864865ee38fcfb274c18308a0f617f60273fea092a7732182669c0e8771357420a51d44c98f05b0201d83541207279e329f01d4ae85d25790e85e96f2d4bb9efaac9e4f03bf9431d01158681e9cad0c4cb7f08f689dc7126c2cb62243bf807b2d57b0bd872c5331ffb843e6f575ec7c4051ec0c06e297da6f2fef85f44c3ae8f0ed655e9ee7c4949cbee4556159b48d4a92ceea4155dad5e1611305f62e197ead4d341a6e0fae5b7a3ec070a551b99fe2dc19e6f98c61127d07a334ca87a908d7dfcf4b4c004fb37e70354ec6bfcd7e0d89b457453713e169417a7f5a09103f7ff94891dcde263bcb28a9245dd1a7bf8d7b47efd76d132417ef37cfdf7065b8ce0d8f42d92fcf958612598abac31d1d197a6831d70c9cee1d6eaaf43ad12aeb57956b6ccf31c288911d7d93ee74dbb94af147f8d721d9085f012fb75aed005457dae9ebe9a2eef8058da75c6ce5a9b2c95a6ae6574380fade666ef2d71347c4142e0e30ef5c6a5e7a394aeea514167cff779e5a4b60bf89f06fe50db426023821037bfb926685b05b0db5fe05ec9851d669226ea7d30aba47d8bc1ffeef593349f4cd2597282f48095706dbf67e18819fdf43a585d713fedfe97f492ba4ad16ac4f39950e9801914e1c3da963bcf475684d69c3c975e1405f84f1c72b81145dbb68907aba73fa06200c757bd71374c5d5515b3d0f212de3d540a4ddd6a15ecd84919dee8f2007259d5b03eaa72a078929867ed65f8d889cd191257f58eaeaef615b1f43e753c3f361a6e031a7d982ec29005e1e0bc78723164d77e1a895c38138c7b736e4c5867928ef9d26a63ae45339ee32d46496022ea67ff44d0f026b811750b94d7526f5f4bb616f0ee8ef09493712cfa1d8637eecc51648d25fda8936211dbb68ea5110e0a774c4f814dcc535d722d7298164bd1699b9a3a8d3c08b92fd75b9262e3b05dacca041dabcacfca6ea3a8436c25f3a9b75c079499b77fa45d84f9ccad1d80913b623d075bf1820ee67995c3f78a67371c13ea231f59da4e463ceab07aa8e0a7dff44d95221e00f5ef08952d1cf9449db6734116baaf19221130a6bca4dbe7ca72196b0492f904040aa9d78967af132842c418fcd725133df69f9d1cad6ae40060d06dfeb3f2569f77915b2657afb352c34db253b3ab71802e672923bfd3103524bbf72d5b2505551fc80b68ea3f7ea9e6960bf7c970bf3b360c9310b04342c8940ff09ae112c2085fb8081915a121413626655a9e013da61dfa27e9fd29aeb100a43aa36463a94d3286815928ac45a70e2d62b1ee515301c10c10dc1cc6f5dc3a341160f8e7c7354ed685b1069ae35e3403a9219ee037010d5f96b73932cbeb4d5bfae1e5eb1f4f9bd77aae72b9162fa829c30849cc25042f1e295eea6fe57ce7e763ca81e8eee7a4e863c52dbb4485256bc64d8427a135853beafeaf9ffdd52326e0f08eac273310056aff1a160bd5b91a1e0dceddca6ed8fe333862f7c8280a16aeaf28966c69b2cd2bc9b3fb8efa08afece0b6d5383245f098f6dd874015538aa56fd4faf7cee5342afa25c2a15d992f09d4976111ddae3996e46aeaa1c87f96c4b66a79e941c3ade9f90998cd1fd1b657f6298fc1c82e01bc368e51d0676b94397fd82620003623dc18a665abd025d812452cc0abbcd9adf9ffa58103d82607ffdd159ca686a0b43967258cf9e0442978e2512fafe8aa4a7b6d1375fa3f145b0497b08f84da723a49a43d7121984cb1d910df9e7e8151779df95383c71096e4794456061f72864c80c16536415f088221f0f68a920ecef08ac6a8ee08e15f2979720853e20fd93d7f5714a349b5312acb7aa7fe5074b819d2181c9ab73747f61169ff50eca0d86ec22ac2ca2ee44bf439ce08f2d4b2a69d8da662a4a36efe46451efec7cb273aeb2da5f01215069894a1600efe1d190f8bf0cfc60d8d1376f4339ccd9b651c7785b30e937e02e49c88839bdb7da7dfd150ca9763fda93de03fb51be8702f3959793803e631a4a3a51de7fd2b49b65e775f478bebc69ac09c2d056d7a3225cb84d516d42f142afa7e31ffc94dd4c7dc9333c4f9aa68458de044c46a052337ffa0a263810e34c7205579b59298fe3592c4aa2436cdec32223c87654d8488eba107e2d0c6a5992ac53e09a657a5a917e08e97289d886b127b8329e31ad8cdcfe0e544b191619c4c4cf4f85b18523f54ff6f7fe4b889e08e97012c0cb165c73dec5c32c854c122ca5f610afe5b2614550bbf01bdac9ab84716dbbfbebba6e7ea899b0a52bb61b729c8cab483d946affd505315d9dd45fdf7383d7995300c36213d1e6a8b0ae5d1e3462d8502027a87fa3e1abace25f66ba61cfb3b37ac2247e75aad0d1a7e92e2e7a1eddd207be110b26539f270058b3657083e5a7dcce813189b8292596d4e9d2423ff95f19cce8c0fc3f52bc971cec0ecaa8132f85a4337169b7a8d3cde8277881734483aedf9d6eb55f16ce8e1d2ee9c22b49ee98dc8c90e7bb6a0b2caac69cc580a5edc820e3045b55f01e27657b97150cd3de6cbf44c2fc8a4b80e5e2a824b56950c1c344a78b67a2b5", 0x1000}, {&(0x7f0000001240)="75bcb50a7f9900b97e709d729a9142229bb88db58ea4cec5fd4489f63ea3c2be888435133ea5f44614596eb483fc322e2dc075f98fda0b54648f6b98a15c10b996aa878e244368c2d38afd68dd26cee7", 0x50}], 0x2) recvmsg(r0, &(0x7f0000001500)={&(0x7f0000001300)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001380)=""/239, 0xef}, {&(0x7f0000001480)=""/53, 0x35}], 0x2}, 0x10121) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = accept4(r0, &(0x7f00000001c0)=@vsock, &(0x7f0000000040)=0x80, 0x100800) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f00000000c0)={@local, @empty, 0x1, "656397fdc002779ee189e2d4126b56a322bd001d04008b0bd65014f71b49fd81", 0x9, 0x0, 0xfffffff9, 0x7}, 0x3c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f00000000c0)=0x9, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001580)) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x3c}}, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000200)=0x80000000, 0x4) sendto$inet6(r3, &(0x7f0000000340)="cf", 0x1, 0x20008005, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="4fb880e781fd", 0x6, 0x0, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 3.385485959s ago: executing program 0 (id=151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.220052432s ago: executing program 4 (id=152): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0xb, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.137257123s ago: executing program 0 (id=153): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x100000fe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket(0x28, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$PROG_LOAD(0x1c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r2}, &(0x7f0000000800), &(0x7f0000000940)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000780)=ANY=[], 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000100), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000400000d020000c24563568f5f7e0010"], &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0xa, 0x7ff, 0x0, @void, @value}, 0x28) sendmmsg$inet6(r8, &(0x7f0000003a00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x1c3, &(0x7f0000000240)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x3}}, {@ipv4={0x800, @generic={{0x2e, 0x4, 0x2, 0x1, 0x1ad, 0x67, 0x0, 0x0, 0x2e, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x16, 0x3, [{0x6, 0x10, "55440f53c1e41cb2b14a57b909a4"}]}, @rr={0x7, 0xf, 0x6d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010101]}, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x8, [{@multicast2, 0x1}]}, @noop, @generic={0x7, 0x5, "44b8e5"}, @lsrr={0x83, 0x1b, 0xe2, [@empty, @multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote]}, @timestamp_addr={0x44, 0x44, 0xa6, 0x1, 0x3, [{@loopback}, {@rand_addr=0x64010102, 0x10001}, {@empty, 0xfffffff9}, {@broadcast, 0x5}, {@loopback, 0xf087}, {@multicast2, 0x2}, {@loopback, 0xf}, {@rand_addr=0x64010100}]}, @rr={0x7, 0xb, 0x63, [@broadcast, @remote]}]}}, "537b508c4a2639ecadb9f27c8bda870146477e699256f82bdab237f54c49d053d5bcdb0a10fc64dd71f14810b43f54aeea9a6d4f7de5b17519d9b05004268704245a01ac66028918bf2625d3e7270cccd0cc19acef08a19628a24341be71d20d3b864164c20383d8f4056cbf3f9ac7d0e5282de4babc72fac09406969cb728ea679f25462aceffe0282bc6ef6f3cdc9e9df1f1660a69d29c11d44b178961c4bbff67f7193aebc80685b252d3bf5a1be28065995ec9223e7c1bd59506b5e17c784f96d395d69935d43b93976e732e0307470840eed786ec33caf89075b67aa7d0a75d6ec2b3275c1d0dff76be708e32682c725260fe"}}}}, &(0x7f0000000000)={0x1, 0x4, [0xc4b, 0x4f, 0x254, 0x255]}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000006000000000000000000001811000079abf9396f3ae5673ee5fa2f4ea0d86e402bb0ed42e59aef6ae128f69bee9ebe860fd187f7c18d720bdfc38e07c234620c14b249a8f6c2b09dd28ea2351c0df4dfb5092788970f83c5e2aa202dbecfec77b3aa71ceea44ca4fb7a8c4e7d19be017df428a709d002c17bde4349aecb31c93da761ea979e06a8ef4dc8c3ee1d83acbde04b8221a23e0ec1e2909ef59249d28022248e9c14cc1492a1bcc79", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bca900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) 2.964045064s ago: executing program 4 (id=154): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2b, 0x1, 0x1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="aa4e10dfd285f66200000000000000000a000001080005400500009a0c04048008000140000000050c00048008000140000007390c00048008000140000000090800054000000000865c05d0e2347a5d7b12d153feee050add648d76640e2200e0afee6d040221588e3d350d8dc3c3698d0e0000000000005be2b6151589707b1104b765bb4462d4dcab25a5d3aa9c9766620f1b98f734ccce3203ce04e70a69cc1b11fb9abe17a86a98543d5f716fd8406a324d2278509da45b1aa158e5880a474850b9dfbb24471b995e392aebc634298b60de69a22574e37f1e1ebc1e948456f2cc0e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000400), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$rds(r4, &(0x7f0000000700)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) write$cgroup_devices(r11, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c9801288363"], 0xffdd) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x50, 0xb, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x4800) 2.817823815s ago: executing program 0 (id=156): socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async, rerun: 32) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000006000000000000001f00008000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000040000000000063014000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000040)) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32], 0x90}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8850}, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) (async, rerun: 64) sendmsg(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0) (async, rerun: 64) socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x9c, &(0x7f0000000c40)=""/156, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r9, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d720800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) 2.528857697s ago: executing program 0 (id=157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000700000000000000000095000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x2000000b, 0xfffffff6, 0x40, 0x3, {0x9f, 0x0, 0x101, 0x4, 0x7}, {0x1, 0x2, 0x81, 0x5, 0x3, 0x6cf212f}, 0x0, 0x101, 0x9000000}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x800) close(0x3) 2.388015328s ago: executing program 2 (id=159): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 2.172611844s ago: executing program 2 (id=161): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)='\x00', 0xa}], 0x1}, 0x4c093) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/229, 0xe5}], 0x1}, 0x2) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24008010}, 0x4000094) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000040)=0x80000001, 0x4) close(r0) 1.924137231s ago: executing program 3 (id=162): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x8bd51000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100627269646765000018000280090014"], 0x48}}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009e40)=@ipv6_newrule={0x38, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80}, [@FRA_DST={0x14, 0x1, @private0}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x7}]}, 0x38}}, 0x40040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(r7, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r5, 0x0) 1.465940016s ago: executing program 4 (id=165): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000000000e000000200000000000000000000000000000000000000000000ffffac1414bb00000000000000000a"], 0xb8}, 0x1, 0x0, 0x300000000000000}, 0x0) 1.405813117s ago: executing program 0 (id=166): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000280)=@null) listen(0xffffffffffffffff, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e0801ac1404000056e6c296e39891be1907bf0000b1abe239"], 0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000040)={0x7, 'veth0_to_team\x00', {0xae4f}, 0xce8}) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0xfffffffffffffd5f, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.350745443s ago: executing program 3 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) write(r2, &(0x7f0000000000)="cd9b", 0x2) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00'}) 1.276260977s ago: executing program 4 (id=168): unshare(0x6a040000) (async, rerun: 32) unshare(0x10000000) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value, @void, @void, @value}, 0x50) 1.132632266s ago: executing program 1 (id=169): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000002c0)=0xf) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003000)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}, [@generic="76ae529d48"]}, 0x1c}}, 0x20008040) bind$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x28, 0x0, &(0x7f0000001a00)="000000000000000022385ba988a88dc288a8", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.015598827s ago: executing program 1 (id=170): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000050007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 799.490472ms ago: executing program 3 (id=171): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) unshare(0x22020400) r0 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000009000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000008000"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000100)=0xffff, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000980)=[{&(0x7f0000000340)="a4", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) unshare(0x20000400) r7 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r7, 0x0, 0x0, 0x40800) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 797.270309ms ago: executing program 1 (id=172): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 688.783258ms ago: executing program 1 (id=173): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027"], 0x6c}}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket(0x1d, 0x2, 0x6) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async, rerun: 64) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 64) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x44}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x10, 0x2, 0x88, 0x9c4}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) (async) r6 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000040)=""/98, 0x1}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x10, &(0x7f0000000540)=ANY=[@ANYRES64=r3, @ANYRES64=r4, @ANYBLOB="00b7040000080000008500000049000000950000000000000064921b64ca71563f523127006c7bd13a824300f9aa8593b70d06206732fcd608d3a4e810eaf1ff010000000000008905d5926bc748690000ca60798f59b0fa4104c55c4dd6f60821572725eec6fe5c231f77510e42bbb67f58184eca2199fa00dcd4b8bb5434092a276360c4d3906b54271a939a0fab6b3638b98ed2"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) 679.994009ms ago: executing program 3 (id=174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000840)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 488.395404ms ago: executing program 2 (id=175): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140020001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 483.851299ms ago: executing program 3 (id=176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0x0, 0xfff8}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000c0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000240), 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0xc5, '\x00', r3, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 431.998413ms ago: executing program 1 (id=177): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast}) r1 = accept4(r0, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000140)=0x80, 0xc0000) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, &(0x7f0000000800)=[{0x10, 0x0, 0x0, "87da5621599e74efb94a93988d62be265d339d5375995d25f2fd8f46cdd717611e5d8685699653b15f885a9175ebb39531661a90c8bf6824c652fdfa2f0a6e89c2d2b9a15044f02e08e0de050f5859d8d9938cd90383051f855706653505709568ed0354aa6e89aa90222bf369f05dcc1f2b694293b959e42bdf97589000f1550537e859"}, {0x40, 0x118, 0xe, "a82b000000000000df9dc593e07551ab3ae674f6e9ad56dd3d2ed11267b5a619b46c7c6cbfb78302b089be0547166f14"}, {0xe8, 0x107, 0x0, "64cc4efb8ffc0f1789c3f3d3c60a0da9c506383eaf8fd169d41d5d42d2219055bd954ac67216411353f21a1b8bb2ec14ff99e45f5e614640eea1212c84ba464ce2c5a7cc25fa2ebdd5509f99a83309ddf8e4787cfa8673bb9cbd1a3ed3365e4764b790323f7f2a063d1e9044778b24ed252a286c072e1d10216d77008dc60adb96c9779d0f1f143b5492c02a6117c992ee7f5185a90309fcfd17396aeacd44c91f326e51db67a5d675f3ba6ddcb1466e12b7de02a21f386ef636a88444ba8100a80460f84527e0c34c965657a8076d9429"}, {0x9c, 0x10c, 0x6, "58be3effebbf273197acd5d95ca55e02dfd30faebf75334647af60aec6ec57ebfc3f64636a8737f93beee34e884d5fd77ce96de1ab5aaa8d0bc0f240ee0e881db63530b6540fbe54a8fc8b0ea054321721c91285976720161fd8d400bb074bcae5e845441ed2a9695a475b6f0fa9df765d6ef41e5560caa078b9d0d8b5c701bf6c0c99c435ec0d85703ac7de937b42d1f96b342278ad41eec0b4aae2a056a06d04d19e521b325d98f41ff229f8973744044e"}, {0x0, 0x3690b6170d09c2a, 0x80000001, "ce94bc340250990000f7bae1551b97e2ee000000000000000000000000004d61afa605df32a47d83dfccf4b1ab71dbb416c21d6e39d791a4658acea98f507c13fa5fc727f9cb7876439e974622fe4ca0caf02d8148fcf815edda7783e9ceec8be015833da5aeac0639f5be2ae26350e067e36fa237e148f3d9e29f9224934058eba45b599d87d0599ba89bc7c979b65fcb6e2abd1541a39cfcf1be15f389c0f1b8c373b30502c7fed4ba712b1ff1e69decff92bbf93b5fe0ca1ac4bcff4b9afc027fb30491e36c728abeccca05477fc6ad915ed50546710e75de9e6fc99131c57b5106250c5c57b0623573ecda13b8e71dbfb1cc5570c8998ad4205e771f9334fa0e114798f4b4a330d7217637c7120f801527012f2b2eafd11f4c490a9bc91108"}], 0x200}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r2, 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x400c080) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newtfilter={0x6c, 0x2c, 0xa16, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x1fff1, 0xa}, {0x16, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x40, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x6, 0x4, 0xf9, 0x9}, {0xb, 0x6, 0x5, 0x6}, {0x9, 0xe, 0x5, 0x5}, {0x5, 0x6, 0x0, 0x1}, {0x5, 0x0, 0x0, 0xfffffbfc}]}}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40008e0}, 0x200400d4) connect$rxrpc(r6, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, 0x24) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000540)={0x0, {{0x29, 0x0, 0x43000000, @private0, 0x8}}}, 0x88) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x81}, &(0x7f0000000040)=0x8) unshare(0x26020480) unshare(0x22020600) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) accept4$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14, 0x800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x7fffffff, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 368.140029ms ago: executing program 0 (id=178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0xa, 0x3, 0x3a) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="ac352ae365311a30bc8fcd433493d7e43b836fda8a485493071a8c12f803c16753ebee0d6828782b40a5a24fdf93945175c80a0f487d45c7e68581aed1", 0x3d}, {&(0x7f0000000700)="eea4bed286504e6b5801524dd4ed6125433d52454740a695055f264cb5d436eb8ede0fdc159495d5e30afa70be3e8e3a981d2a4799fbf3b55cffffffffffffffffa9eb6a6ec9ab24b3c438a6f408ba3e25a6b69f2b44be03eb114ab1bece1d41d4e6c5ba3fdc63f1f89628044d9f0000000054f13586fe50d6559497a75fe5bb077a0df3d8c67f123d93aeb474a53540d3d16b7d54132543d9558df07e9cbe90ddba9e440020c93f0314ca1e335f39ee83e0572b04651fd0863ba300000000000000", 0xc2}, {&(0x7f00000003c0)='\'', 0x1}], 0x3}, 0x0) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xd0, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x518, 0x1408, 0x1408, 0x12d0, 0x12d0, 0x12d0, 0x1568, 0x1568, 0x1568, 0x1568, 0x1568, 0x6, 0x0, {[{{@ipv6={@loopback, @local, [0x100fffe00, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xffffff00], 'netpci0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x4, 0x8, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6f}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x10, @ipv4=@remote, 0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x9, 0xb, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003"], 0x104}}, 0x40000) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000600)) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000800)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@null, @default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x58, &(0x7f0000007200)}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000051000000000000000800a0018010000756c6c2500000000002020207b1af8ff00000000bfa1001d1900000007010000f8ffffffb702000008000000b70300000000080085000000c80000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x7, 0x80, &(0x7f0000000b80)=""/128, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 319.708844ms ago: executing program 2 (id=179): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001bd800"/28], 0x48) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, r3, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2, '\x00', r3, r4, 0x3, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r5, 0x0, 0x0}, 0x10) 77.048333ms ago: executing program 3 (id=180): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002000ffff2abd7000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e000108001b"], 0x40}, 0x1, 0x0, 0x0, 0x4844}, 0x0) sendmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000140)="a78160f55ce592654a08ff6da3c8d50a285de5e40e261f21e9e946aeea46ee3d24b8d9b42c6221b9b8b26789fb73d04facc7fa7feb827ef3f563669721b9181a96a167db7054404bc73f3106a4bc702cdf681c974f357cba598f5cd2ba5445ea3843dcef56367b9a671712b2ccc90129ab4ae131f84993c41c8c96a99745f7aac8407480464b158fb2e93fb948e0092c7df758f8f109af0a3b6bee2154412ef3713371d3315f67e8924b04df96cdde3b9487597f841b1d68db455409edcbed46d424680e5e9092c3da3db3f7b15c08", 0xcf}, {&(0x7f0000000240)="f8341ac6b9b99bfa98901f08d321de65bac61b80a1bab3d5c5b7fd9a3686d1ef2d1f3db122ce066f2e94e7a616c3957ac8797de88499abee86ef7bf754e9c21eaa9eea23d973abfe4f05760a2aedd27769505891670ffdebeea84941c329e1d69425c05f81af0cb55e4f30be101301f8bad05257311ac7ba371759a1e843f98178a10c5e2b01b79ed511962185d7471bc1caaa3532bfe115c895923351736125006b31dd7b0982f34a1a092ac9c9a230f01b02fdca24d117fb19b741e2dc11c1c834", 0xc2}], 0x2, &(0x7f00000000c0)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x30, 0x8180}, 0x40880) 0s ago: executing program 1 (id=181): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000008000000040000000000000d000000158302cda539a9a05ea68282cea4ce82847d96d7600e7f0b7d871250a5682450fd6794d666256b8c7e0130dd08354abe5b6d5e94c236b8876cd29502fe81400fac45079a8228fabb519363b323b21b8e4d3c96387ad92753746bec8ead15735cd7fbc1c28d3cc11a5e932473d2a79b90122aafbbe7f9eea677564c9e1c007ae6a07f69ad3300941d6154", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000100)=0x9, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred], 0x42}, 0x10043) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000040)={r7, 0x1}, &(0x7f0000000080)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f00000012c0)={'netpci0\x00', {0x2, 0x0, @private}}) socket$inet6(0xa, 0x5, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r9, @ANYRES64=0x0, @ANYRESHEX=r9], 0x20) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0xdc, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8000}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0xfeffff, 0x380, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000001000000080002000300000008000100030000003400048092fd935e0500000005000300070000080500030005000000050003000600000405000300060000040500030007000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1fffe}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts. [ 83.983666][ T5827] cgroup: Unknown subsys name 'net' [ 84.134424][ T5827] cgroup: Unknown subsys name 'cpuset' [ 84.144257][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.840224][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.732162][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.750160][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.757981][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.766009][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.774917][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.782162][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.810246][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.820757][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.849829][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.857644][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.866740][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.874899][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.885651][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.915418][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.924643][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.944757][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.961642][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.971029][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.980813][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.988638][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.004631][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.015056][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.023117][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.033690][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.042082][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.487891][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 90.756543][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 90.787519][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 90.901274][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 90.929930][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.937676][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.945611][ T5846] bridge_slave_0: entered allmulticast mode [ 90.953554][ T5846] bridge_slave_0: entered promiscuous mode [ 91.015888][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.023964][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.032678][ T5846] bridge_slave_1: entered allmulticast mode [ 91.040230][ T5846] bridge_slave_1: entered promiscuous mode [ 91.161185][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.171776][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 91.217688][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.264250][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.271849][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.279237][ T5850] bridge_slave_0: entered allmulticast mode [ 91.287534][ T5850] bridge_slave_0: entered promiscuous mode [ 91.349914][ T5846] team0: Port device team_slave_0 added [ 91.370327][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.377513][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.385336][ T5850] bridge_slave_1: entered allmulticast mode [ 91.392706][ T5850] bridge_slave_1: entered promiscuous mode [ 91.412392][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.420310][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.427567][ T5837] bridge_slave_0: entered allmulticast mode [ 91.435349][ T5837] bridge_slave_0: entered promiscuous mode [ 91.443364][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.451053][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.458269][ T5851] bridge_slave_0: entered allmulticast mode [ 91.467301][ T5851] bridge_slave_0: entered promiscuous mode [ 91.477378][ T5846] team0: Port device team_slave_1 added [ 91.545132][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.552487][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.559762][ T5837] bridge_slave_1: entered allmulticast mode [ 91.567110][ T5837] bridge_slave_1: entered promiscuous mode [ 91.574358][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.584362][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.591696][ T5851] bridge_slave_1: entered allmulticast mode [ 91.599041][ T5851] bridge_slave_1: entered promiscuous mode [ 91.647982][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.685844][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.693005][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.719307][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.750843][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.777362][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.787912][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.795202][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.821333][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.889487][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.902899][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.914646][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.922230][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.929437][ T5842] bridge_slave_0: entered allmulticast mode [ 91.937454][ T5842] bridge_slave_0: entered promiscuous mode [ 91.947749][ T5850] team0: Port device team_slave_0 added [ 91.956415][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.970560][ T5843] Bluetooth: hci0: command tx timeout [ 91.970564][ T5848] Bluetooth: hci2: command tx timeout [ 91.970848][ T55] Bluetooth: hci1: command tx timeout [ 92.034218][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.042512][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.049875][ T55] Bluetooth: hci3: command tx timeout [ 92.050221][ T5842] bridge_slave_1: entered allmulticast mode [ 92.064200][ T5842] bridge_slave_1: entered promiscuous mode [ 92.068683][ T24] cfg80211: failed to load regulatory.db [ 92.081119][ T5850] team0: Port device team_slave_1 added [ 92.104849][ T5837] team0: Port device team_slave_0 added [ 92.114337][ T5851] team0: Port device team_slave_0 added [ 92.124086][ T5851] team0: Port device team_slave_1 added [ 92.139934][ T55] Bluetooth: hci4: command tx timeout [ 92.156156][ T5846] hsr_slave_0: entered promiscuous mode [ 92.163164][ T5846] hsr_slave_1: entered promiscuous mode [ 92.217105][ T5837] team0: Port device team_slave_1 added [ 92.267974][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.278168][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.307393][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.347026][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.354186][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.380177][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.393268][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.400328][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.427126][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.441356][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.454415][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.464461][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.471507][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.497467][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.522459][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.529452][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.556851][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.622529][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.630479][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.656641][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.679044][ T5842] team0: Port device team_slave_0 added [ 92.688405][ T5842] team0: Port device team_slave_1 added [ 92.832046][ T5850] hsr_slave_0: entered promiscuous mode [ 92.838580][ T5850] hsr_slave_1: entered promiscuous mode [ 92.845528][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.854503][ T5850] Cannot create hsr debugfs directory [ 92.903473][ T5851] hsr_slave_0: entered promiscuous mode [ 92.910552][ T5851] hsr_slave_1: entered promiscuous mode [ 92.916785][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.925505][ T5851] Cannot create hsr debugfs directory [ 92.932736][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.939826][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.965768][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.012786][ T5837] hsr_slave_0: entered promiscuous mode [ 93.019281][ T5837] hsr_slave_1: entered promiscuous mode [ 93.026157][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.034045][ T5837] Cannot create hsr debugfs directory [ 93.040921][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.047900][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.074842][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.372624][ T5842] hsr_slave_0: entered promiscuous mode [ 93.379031][ T5842] hsr_slave_1: entered promiscuous mode [ 93.385525][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.393199][ T5842] Cannot create hsr debugfs directory [ 93.613661][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.628887][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.662926][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.698102][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.804265][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.816924][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.829044][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.848156][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.975935][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.987477][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.999370][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.015304][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.050949][ T55] Bluetooth: hci2: command tx timeout [ 94.056444][ T55] Bluetooth: hci1: command tx timeout [ 94.057767][ T5848] Bluetooth: hci0: command tx timeout [ 94.131140][ T5848] Bluetooth: hci3: command tx timeout [ 94.152114][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.176214][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.202999][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.210538][ T5848] Bluetooth: hci4: command tx timeout [ 94.225255][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.249765][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.285107][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.323863][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.331218][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.370800][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.384882][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.392063][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.446546][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.459166][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.472467][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.498840][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.536445][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.557169][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.629550][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.636784][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.676949][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.684309][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.792370][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.907074][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.924227][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.956878][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.964081][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.003674][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.011013][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.029100][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.053503][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.079360][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.086620][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.107509][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.127996][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.135232][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.232350][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.267444][ T3432] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.274678][ T3432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.316192][ T3432] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.323479][ T3432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.356786][ T5846] veth0_vlan: entered promiscuous mode [ 95.402088][ T5846] veth1_vlan: entered promiscuous mode [ 95.416142][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.491923][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.566115][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.655170][ T5846] veth0_macvtap: entered promiscuous mode [ 95.722205][ T5846] veth1_macvtap: entered promiscuous mode [ 95.824151][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.852991][ T5850] veth0_vlan: entered promiscuous mode [ 95.885763][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.917600][ T5850] veth1_vlan: entered promiscuous mode [ 95.945302][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.963840][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.994461][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.005062][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.014813][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.026670][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.130300][ T5848] Bluetooth: hci0: command tx timeout [ 96.132298][ T55] Bluetooth: hci1: command tx timeout [ 96.135761][ T5848] Bluetooth: hci2: command tx timeout [ 96.173719][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.194305][ T5850] veth0_macvtap: entered promiscuous mode [ 96.212631][ T5848] Bluetooth: hci3: command tx timeout [ 96.216614][ T5850] veth1_macvtap: entered promiscuous mode [ 96.246081][ T5851] veth0_vlan: entered promiscuous mode [ 96.293665][ T5848] Bluetooth: hci4: command tx timeout [ 96.321410][ T5851] veth1_vlan: entered promiscuous mode [ 96.368018][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.384312][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.397067][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.435937][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.447273][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.462499][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.487076][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.497126][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.518712][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.528782][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.538131][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.547910][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.563964][ T5842] veth0_vlan: entered promiscuous mode [ 96.623297][ T5842] veth1_vlan: entered promiscuous mode [ 96.647545][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.666857][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.704549][ T5851] veth0_macvtap: entered promiscuous mode [ 96.748072][ T5851] veth1_macvtap: entered promiscuous mode [ 96.781374][ T5837] veth0_vlan: entered promiscuous mode [ 96.822735][ T5842] veth0_macvtap: entered promiscuous mode [ 96.860828][ T3432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.868778][ T3432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.888206][ T5842] veth1_macvtap: entered promiscuous mode [ 96.896182][ T5837] veth1_vlan: entered promiscuous mode [ 96.896365][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.937214][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.953428][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.963568][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.978074][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.992904][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.005650][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.017337][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.028945][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.039894][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.051966][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.116907][ T5920] syz.3.4: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 97.122338][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.141074][ T5920] CPU: 0 UID: 0 PID: 5920 Comm: syz.3.4 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 97.141104][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.141122][ T5920] Call Trace: [ 97.141131][ T5920] [ 97.141139][ T5920] dump_stack_lvl+0x241/0x360 [ 97.141186][ T5920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.141216][ T5920] ? __pfx__printk+0x10/0x10 [ 97.141244][ T5920] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 97.141276][ T5920] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 97.141305][ T5920] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 97.141337][ T5920] warn_alloc+0x27c/0x410 [ 97.141359][ T5920] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 97.141392][ T5920] ? __pfx_warn_alloc+0x10/0x10 [ 97.141414][ T5920] ? kasan_save_track+0x3f/0x80 [ 97.141435][ T5920] ? __kasan_kmalloc+0x9d/0xb0 [ 97.141461][ T5920] ? xsk_setsockopt+0x449/0x840 [ 97.141490][ T5920] ? do_sock_setsockopt+0x3b1/0x710 [ 97.141513][ T5920] ? __x64_sys_setsockopt+0x1ee/0x280 [ 97.141547][ T5920] ? do_syscall_64+0xf3/0x230 [ 97.141569][ T5920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.141624][ T5920] __vmalloc_node_range_noprof+0x128/0x1390 [ 97.141690][ T5920] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 97.141728][ T5920] ? __kasan_kmalloc+0x9d/0xb0 [ 97.141758][ T5920] vmalloc_user_noprof+0x74/0x80 [ 97.141791][ T5920] ? xskq_create+0xb6/0x170 [ 97.141809][ T5920] xskq_create+0xb6/0x170 [ 97.141831][ T5920] xsk_init_queue+0xa1/0x100 [ 97.141866][ T5920] xsk_setsockopt+0x449/0x840 [ 97.141900][ T5920] ? __pfx_xsk_setsockopt+0x10/0x10 [ 97.141930][ T5920] ? __lock_acquire+0xad5/0xd80 [ 97.141950][ T5920] ? __pfx_aa_sk_perm+0x10/0x10 [ 97.141981][ T5920] ? aa_sock_opt_perm+0x79/0x120 [ 97.142015][ T5920] ? __pfx_xsk_setsockopt+0x10/0x10 [ 97.142045][ T5920] do_sock_setsockopt+0x3b1/0x710 [ 97.142078][ T5920] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 97.142101][ T5920] ? __fget_files+0x2a/0x420 [ 97.142137][ T5920] ? __fget_files+0x39d/0x420 [ 97.142166][ T5920] ? __fget_files+0x2a/0x420 [ 97.142204][ T5920] __x64_sys_setsockopt+0x1ee/0x280 [ 97.142237][ T5920] do_syscall_64+0xf3/0x230 [ 97.142260][ T5920] ? clear_bhb_loop+0x45/0xa0 [ 97.142286][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.142311][ T5920] RIP: 0033:0x7f453238e169 [ 97.142335][ T5920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.142349][ T5920] RSP: 002b:00007f453324c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 97.142369][ T5920] RAX: ffffffffffffffda RBX: 00007f45325b5fa0 RCX: 00007f453238e169 [ 97.142382][ T5920] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 97.142393][ T5920] RBP: 00007f4532410a68 R08: 0000000000000004 R09: 0000000000000000 [ 97.142403][ T5920] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.142414][ T5920] R13: 0000000000000000 R14: 00007f45325b5fa0 R15: 00007ffc8e634378 [ 97.142439][ T5920] [ 97.142452][ T5920] Mem-Info: [ 97.164757][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.164799][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.164829][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.476296][ T5920] active_anon:4705 inactive_anon:0 isolated_anon:0 [ 97.476296][ T5920] active_file:505 inactive_file:38303 isolated_file:0 [ 97.476296][ T5920] unevictable:768 dirty:1389 writeback:0 [ 97.476296][ T5920] slab_reclaimable:9274 slab_unreclaimable:94128 [ 97.476296][ T5920] mapped:28208 shmem:1422 pagetables:661 [ 97.476296][ T5920] sec_pagetables:0 bounce:0 [ 97.476296][ T5920] kernel_misc_reclaimable:0 [ 97.476296][ T5920] free:1353797 free_pcp:593 free_cma:0 [ 97.494281][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.532886][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.543868][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.554770][ T5920] Node 0 active_anon:18820kB inactive_anon:0kB active_file:2020kB inactive_file:153140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112832kB dirty:5548kB writeback:0kB shmem:4152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10412kB pagetables:2644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 97.589349][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.596150][ T5920] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 97.599316][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.635603][ T5920] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 97.643100][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.674116][ T5920] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 97.686076][ T5920] Node 0 DMA32 free:1488504kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:18812kB inactive_anon:0kB active_file:2020kB inactive_file:153048kB unevictable:1536kB writepending:5544kB present:3129332kB managed:2547412kB mlocked:0kB bounce:0kB free_pcp:944kB local_pcp:180kB free_cma:0kB [ 97.691871][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.717483][ T5920] lowmem_reserve[]: 0 0 0 0 0 [ 97.732854][ T5837] veth0_macvtap: entered promiscuous mode [ 97.736840][ T5920] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 97.758524][ T5837] veth1_macvtap: entered promiscuous mode [ 97.775137][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.792870][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.796741][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.813855][ T5920] lowmem_reserve[]: 0 0 0 0 0 [ 97.816013][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.818829][ T5920] Node 1 Normal free:3913260kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:312kB local_pcp:32kB free_cma:0kB [ 97.859243][ T5920] lowmem_reserve[]: 0 0 0 0 0 [ 97.861890][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.864626][ T5920] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 97.878752][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.888254][ T5920] Node 0 DMA32: 2*4kB (UE) 1*8kB (U) 40*16kB (M) 72*32kB (UM) 37*64kB (UM) 14*128kB (M) 9*256kB (UME) 8*512kB (UM) 2*1024kB (M) 4*2048kB (ME) 357*4096kB (M) = 1486032kB [ 97.905870][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.922914][ T5920] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 97.930729][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.949030][ T5920] Node 1 Normal: 151*4kB (UE) 46*8kB (UM) 38*16kB (UME) 232*32kB (UME) 96*64kB (UME) 30*128kB (UME) 12*256kB (UME) 8*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 947*4096kB (M) = 3913260kB [ 97.949265][ T5920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.949284][ T5920] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 97.949303][ T5920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.968177][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.008244][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.024042][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.041952][ T5920] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.052190][ T5920] 40273 total pagecache pages [ 98.057029][ T5920] 0 pages in swap cache [ 98.061625][ T5920] Free swap = 124996kB [ 98.065824][ T5920] Total swap = 124996kB [ 98.071004][ T5920] 2097051 pages RAM [ 98.074866][ T5920] 0 pages HighMem/MovableOnly [ 98.079959][ T5920] 428540 pages reserved [ 98.084533][ T5920] 0 pages cma reserved [ 98.091809][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.116618][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.140030][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.163118][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.173541][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.190884][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.213816][ T5848] Bluetooth: hci2: command tx timeout [ 98.220920][ T5848] Bluetooth: hci1: command tx timeout [ 98.221569][ T55] Bluetooth: hci0: command tx timeout [ 98.228431][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.245211][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.258414][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.268586][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.280051][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.290340][ T55] Bluetooth: hci3: command tx timeout [ 98.292235][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.307016][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.317336][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.330929][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.343139][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.370566][ T55] Bluetooth: hci4: command tx timeout [ 98.373175][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.403502][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.450045][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.458855][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.487667][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.505157][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.515948][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.524825][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.646891][ T5927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8'. [ 98.687051][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 98.746676][ T5930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 98.785184][ T5017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.828276][ T5017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.873753][ T5017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.891438][ T5017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.985586][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.014984][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.027324][ T5937] netlink: 'syz.3.11': attribute type 2 has an invalid length. [ 99.086383][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.118055][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.228843][ T3432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.270515][ T3432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.312580][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 99.322845][ T5935] netlink: 'syz.2.10': attribute type 11 has an invalid length. [ 99.326278][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.332024][ T5935] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10'. [ 99.371390][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.895681][ T5953] tun0: tun_chr_ioctl cmd 1074025677 [ 99.940105][ T5953] tun0: linktype set to 786 [ 99.966686][ T5962] Bluetooth: MGMT ver 1.23 [ 100.131594][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 100.175765][ T5971] TCP: TCP_TX_DELAY enabled [ 100.944089][ T5984] : entered promiscuous mode [ 100.976509][ T5984] netlink: 156 bytes leftover after parsing attributes in process `syz.3.17'. [ 101.001582][ T5998] pim6reg: entered allmulticast mode [ 101.022480][ T5994] Bluetooth: MGMT ver 1.23 [ 101.079342][ T5994] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.088056][ T6000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19'. [ 101.138783][ T6000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19'. [ 101.404410][ T5993] pim6reg: left allmulticast mode [ 101.902934][ T6025] netlink: 'syz.4.24': attribute type 9 has an invalid length. [ 102.050867][ T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 102.058776][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.256085][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 102.435304][ T6020] xfrm0 speed is unknown, defaulting to 1000 [ 102.536047][ T6020] xfrm0 speed is unknown, defaulting to 1000 [ 102.590896][ T6020] xfrm0 speed is unknown, defaulting to 1000 [ 102.692326][ T6020] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.759315][ T6020] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 102.790930][ T6037] netlink: 'syz.0.28': attribute type 1 has an invalid length. [ 102.809460][ T6036] netlink: 'syz.0.28': attribute type 1 has an invalid length. [ 102.953764][ T6020] xfrm0 speed is unknown, defaulting to 1000 [ 103.020510][ T6020] xfrm0 speed is unknown, defaulting to 1000 [ 103.059663][ T6020] xfrm0 speed is unknown, defaulting to 1000 [ 103.105718][ T6039] xfrm0 speed is unknown, defaulting to 1000 [ 103.122965][ T6041] xfrm0 speed is unknown, defaulting to 1000 [ 103.206905][ T6020] xfrm0 speed is unknown, defaulting to 1000 [ 103.247635][ T6020] xfrm0 speed is unknown, defaulting to 1000 [ 103.673009][ T6069] netlink: 'syz.3.36': attribute type 27 has an invalid length. [ 103.793823][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 103.871901][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.880746][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.924427][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 104.020467][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.041742][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.272865][ T6069] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.282570][ T6069] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.310286][ T6069] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.319327][ T6069] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.452217][ T6064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.461718][ T6064] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.476190][ T6064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.535094][ T49] xfrm0 speed is unknown, defaulting to 1000 [ 104.542169][ T49] syz1: Port: 1 Link DOWN [ 105.079262][ T6099] netlink: 44 bytes leftover after parsing attributes in process `syz.0.42'. [ 105.187877][ T6104] x_tables: duplicate underflow at hook 2 [ 106.427904][ T6116] x_tables: ip_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 106.761938][ T6125] tipc: Can't bind to reserved service type 1 [ 106.809914][ T6129] siw: device registration error -23 [ 107.158049][ T6146] netlink: 900 bytes leftover after parsing attributes in process `syz.3.54'. [ 107.283789][ T6155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.52'. [ 107.367073][ T6152] syz.0.56 uses obsolete (PF_INET,SOCK_PACKET) [ 107.441993][ T6156] sctp: [Deprecated]: syz.0.56 (pid 6156) Use of int in maxseg socket option. [ 107.441993][ T6156] Use struct sctp_assoc_value instead [ 107.567883][ T6165] netlink: 124 bytes leftover after parsing attributes in process `syz.3.59'. [ 107.734714][ T6172] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.761405][ T6168] Zero length message leads to an empty skb [ 107.775192][ T6170] netlink: 40 bytes leftover after parsing attributes in process `syz.4.60'. [ 107.903312][ T6179] netlink: 'syz.2.61': attribute type 16 has an invalid length. [ 107.911557][ T6179] netlink: 'syz.2.61': attribute type 17 has an invalid length. [ 108.448643][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.457447][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.073700][ T6219] netlink: 'syz.1.71': attribute type 39 has an invalid length. [ 109.395030][ T6179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.509066][ T6179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.870345][ T6179] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.879460][ T6179] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.888518][ T6179] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.900234][ T6179] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.966608][ T6198] netlink: 84 bytes leftover after parsing attributes in process `syz.4.66'. [ 110.128922][ T6203] xfrm0 speed is unknown, defaulting to 1000 [ 110.702435][ T6249] netlink: 60 bytes leftover after parsing attributes in process `syz.2.78'. [ 110.975245][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 111.007076][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.83'. [ 111.118619][ T6261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.213225][ T6261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.222281][ T6261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.227657][ T6271] netlink: 'syz.1.85': attribute type 5 has an invalid length. [ 111.233450][ T6261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.274757][ T6261] geneve2: entered promiscuous mode [ 111.286239][ T6261] geneve2: entered allmulticast mode [ 111.588200][ T6286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.89'. [ 111.602308][ T6282] netlink: 136 bytes leftover after parsing attributes in process `syz.3.88'. [ 111.662318][ T6282] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 111.944115][ T6300] FAULT_INJECTION: forcing a failure. [ 111.944115][ T6300] name failslab, interval 1, probability 0, space 0, times 1 [ 112.004753][ T6300] CPU: 1 UID: 0 PID: 6300 Comm: syz.3.93 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 112.004782][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.004793][ T6300] Call Trace: [ 112.004800][ T6300] [ 112.004807][ T6300] dump_stack_lvl+0x241/0x360 [ 112.004838][ T6300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.004863][ T6300] ? __pfx__printk+0x10/0x10 [ 112.004916][ T6300] ? __pfx___might_resched+0x10/0x10 [ 112.004941][ T6300] should_fail_ex+0x424/0x570 [ 112.004967][ T6300] should_failslab+0xac/0x100 [ 112.004999][ T6300] kmem_cache_alloc_noprof+0x78/0x390 [ 112.005021][ T6300] ? skb_clone+0x20c/0x390 [ 112.005048][ T6300] skb_clone+0x20c/0x390 [ 112.005073][ T6300] nfnetlink_rcv+0x52b/0x28f0 [ 112.005098][ T6300] ? __dev_queue_xmit+0x2f9/0x3f60 [ 112.005126][ T6300] ? __dev_queue_xmit+0x2f9/0x3f60 [ 112.005147][ T6300] ? __dev_queue_xmit+0x2f9/0x3f60 [ 112.005171][ T6300] ? __dev_queue_xmit+0x1780/0x3f60 [ 112.005191][ T6300] ? kasan_save_track+0x3f/0x80 [ 112.005208][ T6300] ? __kasan_slab_alloc+0x66/0x80 [ 112.005232][ T6300] ? do_syscall_64+0xf3/0x230 [ 112.005255][ T6300] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 112.005297][ T6300] ? ref_tracker_free+0x63e/0x7e0 [ 112.005320][ T6300] ? __asan_memcpy+0x40/0x70 [ 112.005336][ T6300] ? __pfx_ref_tracker_free+0x10/0x10 [ 112.005356][ T6300] ? __skb_clone+0x5c/0x6d0 [ 112.005390][ T6300] ? skb_clone+0x240/0x390 [ 112.005420][ T6300] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.005440][ T6300] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.005458][ T6300] netlink_unicast+0x7f8/0x9a0 [ 112.005491][ T6300] ? __pfx_netlink_unicast+0x10/0x10 [ 112.005518][ T6300] ? skb_put+0x114/0x1f0 [ 112.005540][ T6300] netlink_sendmsg+0x8c3/0xcd0 [ 112.005568][ T6300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.005589][ T6300] ? aa_sock_msg_perm+0x91/0x160 [ 112.005618][ T6300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.005633][ T6300] __sock_sendmsg+0x221/0x270 [ 112.005662][ T6300] ____sys_sendmsg+0x523/0x860 [ 112.005690][ T6300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.005709][ T6300] ? __fget_files+0x2a/0x420 [ 112.005737][ T6300] ? __fget_files+0x2a/0x420 [ 112.005769][ T6300] __sys_sendmsg+0x271/0x360 [ 112.005795][ T6300] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.005858][ T6300] ? do_syscall_64+0xb6/0x230 [ 112.005879][ T6300] do_syscall_64+0xf3/0x230 [ 112.005898][ T6300] ? clear_bhb_loop+0x45/0xa0 [ 112.005918][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.005934][ T6300] RIP: 0033:0x7f453238e169 [ 112.005948][ T6300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.005961][ T6300] RSP: 002b:00007f453324c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.005985][ T6300] RAX: ffffffffffffffda RBX: 00007f45325b5fa0 RCX: 00007f453238e169 [ 112.005997][ T6300] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 112.006007][ T6300] RBP: 00007f453324c090 R08: 0000000000000000 R09: 0000000000000000 [ 112.006018][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.006027][ T6300] R13: 0000000000000000 R14: 00007f45325b5fa0 R15: 00007ffc8e634378 [ 112.006051][ T6300] [ 112.468428][ T6318] x_tables: duplicate underflow at hook 3 [ 113.042815][ T6320] : entered promiscuous mode [ 113.057472][ T6321] netlink: 156 bytes leftover after parsing attributes in process `syz.1.100'. [ 113.303848][ T6342] batadv_slave_1: entered promiscuous mode [ 113.364173][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'. [ 113.387432][ T6339] xfrm0 speed is unknown, defaulting to 1000 [ 113.431272][ T6351] FAULT_INJECTION: forcing a failure. [ 113.431272][ T6351] name failslab, interval 1, probability 0, space 0, times 0 [ 113.490291][ T6351] CPU: 0 UID: 0 PID: 6351 Comm: syz.1.111 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 113.490323][ T6351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.490335][ T6351] Call Trace: [ 113.490344][ T6351] [ 113.490353][ T6351] dump_stack_lvl+0x241/0x360 [ 113.490391][ T6351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.490420][ T6351] ? __pfx__printk+0x10/0x10 [ 113.490453][ T6351] ? __pfx___might_resched+0x10/0x10 [ 113.490485][ T6351] should_fail_ex+0x424/0x570 [ 113.490517][ T6351] should_failslab+0xac/0x100 [ 113.490547][ T6351] __kmalloc_cache_noprof+0x73/0x370 [ 113.490574][ T6351] ? nfnetlink_rcv+0x1037/0x28f0 [ 113.490606][ T6351] nfnetlink_rcv+0x1037/0x28f0 [ 113.490670][ T6351] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 113.490752][ T6351] ? skb_clone+0x240/0x390 [ 113.490794][ T6351] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.490819][ T6351] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.490842][ T6351] netlink_unicast+0x7f8/0x9a0 [ 113.490883][ T6351] ? __pfx_netlink_unicast+0x10/0x10 [ 113.490917][ T6351] ? skb_put+0x114/0x1f0 [ 113.490944][ T6351] netlink_sendmsg+0x8c3/0xcd0 [ 113.490977][ T6351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.491003][ T6351] ? aa_sock_msg_perm+0x91/0x160 [ 113.491038][ T6351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.491057][ T6351] __sock_sendmsg+0x221/0x270 [ 113.491102][ T6351] ____sys_sendmsg+0x523/0x860 [ 113.491138][ T6351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.491162][ T6351] ? __fget_files+0x2a/0x420 [ 113.491196][ T6351] ? __fget_files+0x2a/0x420 [ 113.491237][ T6351] __sys_sendmsg+0x271/0x360 [ 113.491269][ T6351] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.491351][ T6351] ? do_syscall_64+0xb6/0x230 [ 113.491378][ T6351] do_syscall_64+0xf3/0x230 [ 113.491402][ T6351] ? clear_bhb_loop+0x45/0xa0 [ 113.491427][ T6351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.491447][ T6351] RIP: 0033:0x7fe82cf8e169 [ 113.491465][ T6351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.491481][ T6351] RSP: 002b:00007fe82de3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.491503][ T6351] RAX: ffffffffffffffda RBX: 00007fe82d1b5fa0 RCX: 00007fe82cf8e169 [ 113.491517][ T6351] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 113.491529][ T6351] RBP: 00007fe82de3e090 R08: 0000000000000000 R09: 0000000000000000 [ 113.491541][ T6351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.491553][ T6351] R13: 0000000000000000 R14: 00007fe82d1b5fa0 R15: 00007ffd672c93c8 [ 113.491584][ T6351] [ 113.907634][ T6357] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 113.941987][ T6355] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 113.976461][ T6355] netlink: 'syz.0.113': attribute type 2 has an invalid length. [ 114.040553][ T6361] 8021q: VLANs not supported on vxcan0 [ 114.573033][ T6379] : entered promiscuous mode [ 114.812209][ T6389] syzkaller1: entered promiscuous mode [ 114.823733][ T6389] syzkaller1: entered allmulticast mode [ 114.835262][ T6394] FAULT_INJECTION: forcing a failure. [ 114.835262][ T6394] name failslab, interval 1, probability 0, space 0, times 0 [ 114.853956][ T6394] CPU: 0 UID: 0 PID: 6394 Comm: syz.4.126 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 114.853990][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.854003][ T6394] Call Trace: [ 114.854011][ T6394] [ 114.854020][ T6394] dump_stack_lvl+0x241/0x360 [ 114.854057][ T6394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.854087][ T6394] ? __pfx__printk+0x10/0x10 [ 114.854121][ T6394] ? __pfx___might_resched+0x10/0x10 [ 114.854153][ T6394] should_fail_ex+0x424/0x570 [ 114.854185][ T6394] should_failslab+0xac/0x100 [ 114.854216][ T6394] __kmalloc_noprof+0xdf/0x4d0 [ 114.854243][ T6394] ? nla_strdup+0x9e/0x140 [ 114.854270][ T6394] ? __kasan_kmalloc+0x9d/0xb0 [ 114.854294][ T6394] nla_strdup+0x9e/0x140 [ 114.854324][ T6394] nf_tables_newtable+0x5c0/0x1e80 [ 114.854342][ T6394] ? __lock_acquire+0xad5/0xd80 [ 114.854368][ T6394] ? __pfx_nf_tables_newtable+0x10/0x10 [ 114.854397][ T6394] ? __nla_parse+0x40/0x60 [ 114.854426][ T6394] nfnetlink_rcv+0x12eb/0x28f0 [ 114.854483][ T6394] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 114.854554][ T6394] ? skb_clone+0x240/0x390 [ 114.854589][ T6394] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.854611][ T6394] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.854633][ T6394] netlink_unicast+0x7f8/0x9a0 [ 114.854670][ T6394] ? __pfx_netlink_unicast+0x10/0x10 [ 114.854713][ T6394] ? skb_put+0x114/0x1f0 [ 114.854739][ T6394] netlink_sendmsg+0x8c3/0xcd0 [ 114.854774][ T6394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.854799][ T6394] ? aa_sock_msg_perm+0x91/0x160 [ 114.854834][ T6394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.854853][ T6394] __sock_sendmsg+0x221/0x270 [ 114.854888][ T6394] ____sys_sendmsg+0x523/0x860 [ 114.854923][ T6394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.854947][ T6394] ? __fget_files+0x2a/0x420 [ 114.854978][ T6394] ? __fget_files+0x2a/0x420 [ 114.855015][ T6394] __sys_sendmsg+0x271/0x360 [ 114.855045][ T6394] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.855126][ T6394] ? do_syscall_64+0xb6/0x230 [ 114.855153][ T6394] do_syscall_64+0xf3/0x230 [ 114.855174][ T6394] ? clear_bhb_loop+0x45/0xa0 [ 114.855197][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.855216][ T6394] RIP: 0033:0x7f332b98e169 [ 114.855234][ T6394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.855249][ T6394] RSP: 002b:00007f332c88d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.855267][ T6394] RAX: ffffffffffffffda RBX: 00007f332bbb5fa0 RCX: 00007f332b98e169 [ 114.855279][ T6394] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 114.855290][ T6394] RBP: 00007f332c88d090 R08: 0000000000000000 R09: 0000000000000000 [ 114.855302][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.855314][ T6394] R13: 0000000000000000 R14: 00007f332bbb5fa0 R15: 00007ffea2c503c8 [ 114.855346][ T6394] [ 115.161065][ T6397] siw: device registration error -23 [ 115.333960][ T6402] netlink: 432 bytes leftover after parsing attributes in process `syz.4.129'. [ 115.433357][ T6405] netlink: 108 bytes leftover after parsing attributes in process `syz.0.130'. [ 115.506868][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 115.705538][ T6419] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.134'. [ 116.001629][ T6431] netlink: 'syz.3.140': attribute type 4 has an invalid length. [ 116.031637][ T6431] netlink: 'syz.3.140': attribute type 4 has an invalid length. [ 116.378969][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 116.410462][ T6445] netlink: 72 bytes leftover after parsing attributes in process `syz.0.143'. [ 116.483445][ T6444] hsr_slave_1 (unregistering): left promiscuous mode [ 116.593160][ T6447] xfrm0 speed is unknown, defaulting to 1000 [ 116.875819][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 116.920882][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 117.160987][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 117.497475][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 117.619355][ T6491] bridge_slave_1: left allmulticast mode [ 117.659650][ T6491] bridge_slave_1: left promiscuous mode [ 117.700128][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.840924][ T6491] bridge_slave_0: left allmulticast mode [ 117.846717][ T6491] bridge_slave_0: left promiscuous mode [ 117.945077][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.015210][ T6551] bridge_slave_0: left allmulticast mode [ 119.017529][ T6557] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.063627][ T6551] bridge_slave_0: left promiscuous mode [ 119.090105][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.108422][ T6551] bridge_slave_1: left allmulticast mode [ 119.130740][ T6551] bridge_slave_1: left promiscuous mode [ 119.145371][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.196109][ T6551] bond0: (slave bond_slave_0): Releasing backup interface [ 119.239900][ T6551] bond0: (slave bond_slave_1): Releasing backup interface [ 119.293091][ T6551] team0: Port device team_slave_0 removed [ 119.312535][ T6551] team0: Port device team_slave_1 removed [ 119.342883][ T6551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.392144][ T6551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.422706][ T6551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.461216][ T6551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.694456][ T6554] xfrm0 speed is unknown, defaulting to 1000 [ 119.883066][ T6581] bridge_slave_1: left allmulticast mode [ 119.888793][ T6581] bridge_slave_1: left promiscuous mode [ 119.897988][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.912918][ T6581] bridge_slave_0: left allmulticast mode [ 119.918773][ T6581] bridge_slave_0: left promiscuous mode [ 119.927686][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.026259][ T6587] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 120.204008][ T6554] ------------[ cut here ]------------ [ 120.210339][ T6554] WARNING: CPU: 1 PID: 6554 at ./include/net/netdev_lock.h:17 netdev_nl_dev_fill+0x6bc/0x860 [ 120.221109][ T6554] Modules linked in: [ 120.225300][ T6554] CPU: 1 UID: 0 PID: 6554 Comm: syz.4.168 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 120.238354][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.249432][ T6554] RIP: 0010:netdev_nl_dev_fill+0x6bc/0x860 [ 120.255820][ T6554] Code: 1c 24 44 29 eb 4c 89 e8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 4a 01 00 00 41 89 5d 00 31 c0 e9 4d fe ff ff e8 85 ec c3 f7 90 <0f> 0b 90 e9 2c fa ff ff e8 77 ec c3 f7 90 0f 0b 90 42 80 3c 3b 00 [ 120.276406][ T6554] RSP: 0018:ffffc9001a8775e0 EFLAGS: 00010293 [ 120.282711][ T6554] RAX: ffffffff89ff68eb RBX: 0000000000000000 RCX: ffff888032df8000 [ 120.291372][ T6554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.299396][ T6554] RBP: ffffc9001a877710 R08: ffffffff89ff630c R09: 1ffff1100ba975dc [ 120.307694][ T6554] R10: dffffc0000000000 R11: ffffed100ba975dd R12: ffff88803593a000 [ 120.315912][ T6554] R13: ffff888033505140 R14: ffff888033505140 R15: ffffc9001a877760 [ 120.324537][ T6554] FS: 00007f332c88d6c0(0000) GS:ffff8881250a5000(0000) knlGS:0000000000000000 [ 120.333587][ T6554] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.341337][ T6554] CR2: 00007fe82dce56c0 CR3: 000000002f358000 CR4: 00000000003526f0 [ 120.349371][ T6554] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.358940][ T6554] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.367886][ T6554] Call Trace: [ 120.371914][ T6554] [ 120.374976][ T6554] ? __build_skb_around+0x247/0x3d0 [ 120.380271][ T6554] ? __pfx_netdev_nl_dev_fill+0x10/0x10 [ 120.385862][ T6554] ? __alloc_skb+0x298/0x480 [ 120.390548][ T6554] ? __pfx___alloc_skb+0x10/0x10 [ 120.395569][ T6554] netdev_genl_dev_notify+0x1fb/0x450 [ 120.401063][ T6554] ? __pfx_netdev_genl_dev_notify+0x10/0x10 [ 120.404610][ T6604] __nla_validate_parse: 5 callbacks suppressed [ 120.404632][ T6604] netlink: 48 bytes leftover after parsing attributes in process `syz.1.181'. [ 120.407003][ T6554] ? dev_map_notification+0x967/0x9a0 [ 120.427612][ T6554] ? dev_map_notification+0x71/0x9a0 [ 120.433016][ T6554] ? ip_vs_dst_event+0x508/0x6a0 [ 120.438018][ T6554] netdev_genl_netdevice_event+0x81/0xa0 [ 120.444834][ T6554] notifier_call_chain+0x1a5/0x3f0 [ 120.451060][ T6554] unregister_netdevice_many_notify+0x1572/0x2500 [ 120.457574][ T6554] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 120.464522][ T6554] ? net_generic+0x1f/0x240 [ 120.469101][ T6554] ops_undo_list+0x35e/0x8b0 [ 120.473815][ T6554] ? __pfx_ops_undo_list+0x10/0x10 [ 120.478982][ T6554] ? ops_init+0x451/0x5b0 [ 120.483855][ T6554] setup_net+0x46f/0x540 [ 120.488301][ T6554] ? __pfx_setup_net+0x10/0x10 [ 120.493231][ T6554] ? debug_mutex_init+0x38/0x70 [ 120.498161][ T6554] copy_net_ns+0x33f/0x570 [ 120.502709][ T6554] create_new_namespaces+0x425/0x7b0 [ 120.508068][ T6554] unshare_nsproxy_namespaces+0x124/0x180 [ 120.513901][ T6554] ksys_unshare+0x5e2/0xad0 [ 120.518473][ T6554] ? __pfx_ksys_unshare+0x10/0x10 [ 120.523682][ T6554] __x64_sys_unshare+0x38/0x40 [ 120.528512][ T6554] do_syscall_64+0xf3/0x230 [ 120.533495][ T6554] ? clear_bhb_loop+0x45/0xa0 [ 120.538244][ T6554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.545301][ T6554] RIP: 0033:0x7f332b98e169 [ 120.550730][ T6554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.570445][ T6554] RSP: 002b:00007f332c88d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 120.578919][ T6554] RAX: ffffffffffffffda RBX: 00007f332bbb5fa0 RCX: 00007f332b98e169 [ 120.587021][ T6554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 120.595113][ T6554] RBP: 00007f332ba10a68 R08: 0000000000000000 R09: 0000000000000000 [ 120.603269][ T6554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.611393][ T6554] R13: 0000000000000001 R14: 00007f332bbb5fa0 R15: 00007ffea2c503c8 [ 120.619444][ T6554] [ 120.622581][ T6554] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.630009][ T6554] CPU: 1 UID: 0 PID: 6554 Comm: syz.4.168 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 120.642057][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.652145][ T6554] Call Trace: [ 120.655450][ T6554] [ 120.658395][ T6554] dump_stack_lvl+0x241/0x360 [ 120.663113][ T6554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.668331][ T6554] ? __pfx__printk+0x10/0x10 [ 120.672947][ T6554] ? vscnprintf+0x5d/0x90 [ 120.677298][ T6554] panic+0x349/0x880 [ 120.681217][ T6554] ? __warn+0x174/0x4d0 [ 120.685389][ T6554] ? __pfx_panic+0x10/0x10 [ 120.690038][ T6554] __warn+0x344/0x4d0 [ 120.694043][ T6554] ? netdev_nl_dev_fill+0x6bc/0x860 [ 120.699304][ T6554] report_bug+0x2b3/0x500 [ 120.703651][ T6554] ? netdev_nl_dev_fill+0x6bc/0x860 [ 120.708948][ T6554] ? netdev_nl_dev_fill+0x6bc/0x860 [ 120.714419][ T6554] ? netdev_nl_dev_fill+0x6be/0x860 [ 120.719633][ T6554] handle_bug+0x89/0x170 [ 120.723890][ T6554] exc_invalid_op+0x1a/0x50 [ 120.728498][ T6554] asm_exc_invalid_op+0x1a/0x20 [ 120.733392][ T6554] RIP: 0010:netdev_nl_dev_fill+0x6bc/0x860 [ 120.739308][ T6554] Code: 1c 24 44 29 eb 4c 89 e8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 4a 01 00 00 41 89 5d 00 31 c0 e9 4d fe ff ff e8 85 ec c3 f7 90 <0f> 0b 90 e9 2c fa ff ff e8 77 ec c3 f7 90 0f 0b 90 42 80 3c 3b 00 [ 120.759019][ T6554] RSP: 0018:ffffc9001a8775e0 EFLAGS: 00010293 [ 120.765110][ T6554] RAX: ffffffff89ff68eb RBX: 0000000000000000 RCX: ffff888032df8000 [ 120.773142][ T6554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.781166][ T6554] RBP: ffffc9001a877710 R08: ffffffff89ff630c R09: 1ffff1100ba975dc [ 120.789171][ T6554] R10: dffffc0000000000 R11: ffffed100ba975dd R12: ffff88803593a000 [ 120.797363][ T6554] R13: ffff888033505140 R14: ffff888033505140 R15: ffffc9001a877760 [ 120.805482][ T6554] ? netdev_nl_dev_fill+0xdc/0x860 [ 120.810624][ T6554] ? netdev_nl_dev_fill+0x6bb/0x860 [ 120.815844][ T6554] ? __build_skb_around+0x247/0x3d0 [ 120.821060][ T6554] ? __pfx_netdev_nl_dev_fill+0x10/0x10 [ 120.826619][ T6554] ? __alloc_skb+0x298/0x480 [ 120.831226][ T6554] ? __pfx___alloc_skb+0x10/0x10 [ 120.836187][ T6554] netdev_genl_dev_notify+0x1fb/0x450 [ 120.841576][ T6554] ? __pfx_netdev_genl_dev_notify+0x10/0x10 [ 120.847517][ T6554] ? dev_map_notification+0x967/0x9a0 [ 120.852964][ T6554] ? dev_map_notification+0x71/0x9a0 [ 120.858280][ T6554] ? ip_vs_dst_event+0x508/0x6a0 [ 120.863340][ T6554] netdev_genl_netdevice_event+0x81/0xa0 [ 120.869017][ T6554] notifier_call_chain+0x1a5/0x3f0 [ 120.874181][ T6554] unregister_netdevice_many_notify+0x1572/0x2500 [ 120.880659][ T6554] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 120.887478][ T6554] ? net_generic+0x1f/0x240 [ 120.892052][ T6554] ops_undo_list+0x35e/0x8b0 [ 120.896799][ T6554] ? __pfx_ops_undo_list+0x10/0x10 [ 120.902027][ T6554] ? ops_init+0x451/0x5b0 [ 120.906659][ T6554] setup_net+0x46f/0x540 [ 120.910925][ T6554] ? __pfx_setup_net+0x10/0x10 [ 120.915742][ T6554] ? debug_mutex_init+0x38/0x70 [ 120.920629][ T6554] copy_net_ns+0x33f/0x570 [ 120.925068][ T6554] create_new_namespaces+0x425/0x7b0 [ 120.930400][ T6554] unshare_nsproxy_namespaces+0x124/0x180 [ 120.936216][ T6554] ksys_unshare+0x5e2/0xad0 [ 120.940769][ T6554] ? __pfx_ksys_unshare+0x10/0x10 [ 120.945831][ T6554] __x64_sys_unshare+0x38/0x40 [ 120.950634][ T6554] do_syscall_64+0xf3/0x230 [ 120.955183][ T6554] ? clear_bhb_loop+0x45/0xa0 [ 120.959890][ T6554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.965860][ T6554] RIP: 0033:0x7f332b98e169 [ 120.970321][ T6554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.989955][ T6554] RSP: 002b:00007f332c88d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 120.998479][ T6554] RAX: ffffffffffffffda RBX: 00007f332bbb5fa0 RCX: 00007f332b98e169 [ 121.006460][ T6554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 121.014466][ T6554] RBP: 00007f332ba10a68 R08: 0000000000000000 R09: 0000000000000000 [ 121.022486][ T6554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.030491][ T6554] R13: 0000000000000001 R14: 00007f332bbb5fa0 R15: 00007ffea2c503c8 [ 121.038497][ T6554] [ 121.041800][ T6554] Kernel Offset: disabled [ 121.046128][ T6554] Rebooting in 86400 seconds..