last executing test programs: 3.284653367s ago: executing program 2 (id=1697): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0xb}, {}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x8000ffa4, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x81) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x9408f9ce2610ee65, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x81000000}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14040800}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r8, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000dd000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1d"}]}], {0x14}}, 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYBLOB="40640efa32d7be77accf9f5b7c5b818a75ce2a4092b765b3e9b0278cad3907857f255c088c8d92572048bf7fa5687363ef87", @ANYRES16=r8, @ANYRES16=r5], 0x1000f) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) 2.979096629s ago: executing program 3 (id=1701): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.704573183s ago: executing program 3 (id=1703): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40012032, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 2.693904572s ago: executing program 1 (id=1704): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x40da0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 2.338664049s ago: executing program 1 (id=1706): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x0, 0xea}, @mpls={[], @ipv6=@gre_packet={0x1, 0x6, "189d16", 0xf98, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "d52e2c4fe684731a85e42e6d47a052c7947096f24ba6083900c578ac3c9e804815cd391892c33f9170705df0b80664e7d92948081d6752f5dae5d2aac4172b67a6f57de9bd770e4f99359b6737269747215ccc05965f8d0fd4b7f3fcbf47aaeb96a8ad69ae3824df3a92accafdd6f660f8e2553626a16408938ceaeb27c999380adc91371092573a0dddc4adf1f472d0ee4eb5688ef2b51c41eb978e9bff6088eb60e79fd3cb42f2242e3cbcec3fec2b67285a9ed1756e211c5cbf310d1f9bc06d92511a35f294fec81bde39affbbfcdd7cd6b09be6c17d4cf1181ac934cc6986b4ce795c68b2d5b46ab1ca3108068ac697777641ab2d8ce465ffddf9890682af7ebf3fda143423802f6370b3c794df31ebaf69c75cc6666fe409e4e6a10eb3c5a65af2332a5a31fced54a968165f3784e74132f4bdf736cc22ecc9b7d66ea5772930cc27c797c60ae52a3af64a161f11b3129be23d77d2c9ecffcf33cb0e8a96cdeb2307f3dfb4ac32673a0bd2e44440728431d8c7402f783401398612117a55198a7ecc80e139c8490acce19c66b6d1c7d6e599d3ab7d55d66b48719905215d61c364dd44fe5c5fb2c473fec59f3a24ac8a28ce2f7ce491c79cdf15ff75773dca32c6cd138cb23854ddd301115d97e9fb78dcaf1268c37c4d2dedb3f8b6614e902aca20351cec98c787c0df41bdbe63d24f3f15401f1cf47e6080dc4abf072f4490eb2df8aa3177674914f7623f8e1c11393621b2f0d418154223f005a484b9888c293f4be3c0593fe861e282b7ce817d0657edc907e2c940bc0bbf181733663f29ea5c20619c413faf2a6bba8d243489077b7be8fdcc506b2361d27fb07371f48800f4397f20211cc3d44948e787d1902d1fdd68777fc0f3cd3af3e3e765a114141d6e1cb057368e130cb9fc508f0cf99a0c4541b04ee81573a71e6452d126399662bd0ac89500af9ceecadb0d77472a221ccad615eba7cef2906869745894bf73250c406d608dbc943cac755574f5632da520d35415eaf6f3804f9ab4de45a31ee9d5c48619915887fd0cfb25b54639e6b3b95b86d0fb42307180c55a4c64724c3c7bd96f415fe83a3f44cb1d7579b4ee8e0274dabbf7336a69f6f11e46674132dc955af2ed65d5f8ed23abf281f18049181ff0b920b1614ab196aefc3e834fe652b090aebc4d7b1aed03b592edcaddb56b9589ad5602311da8a3624d2c92f3c8e19fa00c8debc3ebd739675ee25f116e4f6dcaafdf143b01ba85480cad2e2c92504a37aa646d15ad2541531b7c4ce25718db55537c8a1347dad32891d7a83dc5b1c3dd07bb24024079f13483748438c578a034ed9272007ed0a9c965a435324d3a10aa8ac21e0ef8fe735cbdb4db28e15bec4c7fd5a48ef62a5ebdffba9e8fd1fa36120d2c5ef5c3e52ca64186961c98a8cd8131dbf00c90f996122c7327199ec3f8a7a7e693cfb62f472fff8ee8fe9b0a5be8cdf118fcb7503eca424b4fbc7bbb919f270310d5066b7b54990831e01dd1fefe1e7f2a83c3acd5da1d41122c5a795d2cdd41e8493219f3546d6010c28f0b92dfbda33abdfbe737c2ccb2326bc8d3643fbb24bd5b56050ae2f0593ddc39ea94808424932de7ebdcedfc187aeb3a9d9b418af90efc9ce43d3d168e2a34748029422a63b519215c3d689671ab76dca3394cf194bc293db395604cd650bfb941aac1996826477412f9a1a7f5691c39c9b21f551eaf45e4b8299141474462522aa2882a5bb5db39fce25ac25ed8ef364f789ca3a653b79bb016bf4cfcb4288c173be650f531d2ace2598f8767b03c8f45b39626428b8cfb5bd4938963ad5936599a1e934fa596502e88bb78843e6c13a75ac9494bbdad2953d5844f37be6d619c8ef5a5120a046555f62022debb40d9f3a67517bfd7a280c0a80b8f638b08d003c4e3fdd89428bab2ef5d90d1d25d0f0ad502210d8b64ed40a24538467710f9db483efbb25817b55d062929679a70a8cf35977de9fa8c0b0b87df6ffd98b4035a8e44724c6a59ae3393397b99de00873520c7fe67eec0063511c046615f60e2623ce69303d5c9d1e115d28cdfca299148e1a74f852c122ead8a48940706c76ba78451fe6949a1006a00264e7f73d6b29c524cfc877163008b4ffdd71f412ff811a4cc092dc9ab927ed8b886f53a79ea5ff4439184f7824c9e16dcf41ba085a52f8a9128a8530a6d95254a37cea5ea83470424d0b15eae94c38b467053bd2fb7ffe3ca9eeddab3c78801c54eddb7805797be9c220407cdf991fc47b6c8fb43e99774e85107bc68ac16d2c48eb67d19ccc8bb7cca91985a4801e2deec79c07d676ae3930349fa32c51c0ae49077f2e2dc9b7a7f420c976e8330a19f316b47b842a7cd4416986dce38e0e5a5208219e33d50775b965a859c63a187f0998c6c6d0c2a14de6b2915eab74df7de8278dd283446a1e80b405f2bdedcd4162bcabbf40435d975dbd2a313fdfb9b76510ee24164f6f91f4b0d65d6954d9716b468a3e866dbde7cb0b1a0a2cf4de3e67f82861dd3315ea650b556f75f27df158ee7a4e3bb85219dbbc7cc6ba5364fbed26d27ea4f674eefbfc7ee37c2872666818c20f80525df2e70969c989b772e4d955932e37f308c8770f2a56663ee375eb1f30643a7937e1f8153e6a4b0432173bf66f57a99ad3d9b3aec84a7c470aa6c282c0fb37366e75ebc6027f888d0bd5b632ad5e414c2243ceec0f723969aa04a2c4ed5548f5b911f815c10fcb47960d47decac21abf91cd4f3ee4aee9ed0ec7518ab9ae9f7023475343a83405f52ff18c27bd96b67e13c35ebe69e032b59833014f999c6f38c75adaa53680488d505fd7dc63b54c349dd475fd66ebe2f85db0b63f9c2f59be34b6b5ba557040a287702b082693b2d87a3dce49f81b6d7d10e3a47dee378800017e1aa268f28e874fa5bf54901462cad3c6112d7d9fb192f8ed3c5d9348381d3b93d48f978eea1c2ad64d60552e3846762dba5e2099d13eb74f55cd6793af523fc95b53a9e37e53c96be43ec7ce0a3abd71f9478d62342c720158f5ffcaaaa144e56338de6e24ce9cae22ade0682fa778bc8001b0ebcbc04173dbf104a9dd4088cc31ac974bebba85fef17e3df3cfc3de7b323992a0a9ea0c117ad793095c920d17decb056e6f571956b2b85c567a2b27eff06dc84db423221eb9292e940d64b844f7fd629531f264e23a817ec66526dfbc7aa31c1eb452a743768c58e8e0c908de3efcd94a7af052afb8d7decf046134ed1c5d131caa59229109f1cff756532560ef60a8a38f4dfaf90a314f717bf31f81331f9525e05bc8b1626a14d157c06130843c5ebc7e6a4a5efd2b82a998a7ae3043abed00e2c38d951cd89fdb9bf52d4238d5684c8db07c1f487e2f45c6c43ca4d5b0c31ed5fb45215a5e8d02875c53982d760e48b698285f282b73a3c11e8f3fe2e21c5b97963505c6e5bc61ba8c9a60c5e9ca3aa33ea41bc86e203c9ce60900db5c03fe8ace2f711e21e3786c06a4d79170a4dda5db024707e92e3ca32f6cc0c6a71681b67afddcd872b4948ce8a013b6f3ec50dabff9d950678770e02fa7873007709cffdcf607a728d6c6bc1f38d8d13cb3e7664a60ee22404e73a87196581d22aac23788b7a33a72857d4028a88731c4911911da4bafb8c78885766917831f5940da592880fc49a4cdbfa9434ef92769a0ddb231bba08ec6206005f594d62deb2741b4dc1b019e9a5adc67cc5d63ea991b2ea36a34b89e436b51b41532fb8c30f0d6c99e93219c36b5b845c84357473da351a525a10576ea72f0cc5b2365c6ab15bfdbaf8564bdbc74abc1fcb264ce79710677c16d82651c13f4a731b954bfe6839b795a8efae83002cf8edcb06453853f8152533a13afe5f0edb229789e1f1fd3d80917dd5b3c07b4d8dee714cff9a4163b4f52292089b9dbe33c05a5201466deb7111c33d4cb551165b169fcd933c8525b5684dbe885e41ba68a9b9a6b1263dd5cd2725bdac5b54aaa05b589752422911a1951df6a5c97c800a9671899f4f911453c34f805d9e75b95ea2eae0f8182ef72ccbd0abb7dc76a33e689ffc99c438854305975312ce6af00290ed3d2d20735a131078cd4d97c6a5f3d9cba79c1feb5c587c6fb3daa6d3ac1a4d976225b34d37f24c4979e52eca731ab654a7677dd6284ac6ed703708abbcab02d8ba7a12567942a250d838f3f650c536f2df60fbc7a53ca05578a5b04f8afe9d473f22a2832114cf679d6791775c894cb80851516a4157c977594723de7784a06c2a6142d678a7131760686b0aa75f76d27f6b215ffadd28458f005451a9670d6656b0adea181f5b537fc42eb91ae4bba69d83537c6dd2a85f6f90a695c87ad2f722bdcb6418238d4b963c4f4f2eed971764f1c3ba34895172eb8dc102b55e9497ace8ce04aec05350e496c60583cc591b6de16f21eee4ec3c5b1e3548d26531f61d1054f2bee9f904897717b595772c067f1f57dc96d2ae9aac6465ffaaa87e623eb3e5218c7a0d376b30432f2b12bbc5d957b9c0e2ca7a4c0e04320ac5074f95e71df18bb15b5670e65ca90eac0bf4504b993c9661c704527ab1ee91ccdd9b1d3178f2bea1dbefebef6cdc655acc51bd000221afefbafe017160c2ed0bb91d722c8c3b8674a3a1e9deb7fe42db4d36d6b885129ed4239f79534c2fb5b6c72a9d2f570231b776e3f07bd0d183ac1c82a2b24518d7a1bdc83b0202c45bb208afb1fbc5d75b818306499a6dffb570fb125cd914aaf8f4a9a1630f66a78cdd0d5ee416ff43276f39bbf37b871b8f4675a8e6a8e356a985b083909d99e7dc509a5c16beaa7694d747329ac4b96fffa18c2ee8b7335e2acfd61fa6a0e4dbb255f0dfc358b138798e3bf0a53075e0f5fa3119f7f18e54f9854fb99d84f9b60c7dde0d9cbdf186b0edbeab2603da8ad5493da74c2fbb5686deb6f2a983a4c799114cf9318d7c0c86b9823fc19002888485a69932a951645f172e4b93c68630888fa863b3e2c34f69922bf477f6a03b35f7b21db4e9aa5263c13b811210d763aafdde25f150daeb9be1768477b25742707afdb9f9fe2b1ea77e57cc6c963c105c723963b1c554c839ec611555a2938a20e50ec0a8134d3018a35b0a6f90be3c773a11573cbe2bfb239007c111cb6a615eec43efce5f485f4df4978f3"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x787c], "778f1b2157ea5e748b44ce74fe0eecef21a220a0b21138c87d937035086d3f9526946f19b8847f7a76a978"}, {0x8, 0x88be, 0x2, {{0x5, 0x1, 0x6, 0x0, 0x0, 0x2, 0x2, 0x3}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x0, {{0x7, 0x2, 0x80, 0x1, 0x0, 0x3, 0x6, 0x6}, 0x2, {0x8, 0xd8b, 0x2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "b0d36515ca4f6fdbd7614b5c8950651a67e36204edabd309b3d0ddcb9e93f51e0c100d625afb3eefa2304663951f7f34bebd576c4e064488f51a8e01c5e2ed2bc864df1eb76a3634490086491262a7d72dc7efd7ef3e53282bebf3f42cfd809053465c623d765966c81d99375cb3584a35bfbde81f1f1e8cf9ffc7a45bd9a61ccacb4e61f869af0e1144becd64bfacf921ebad0c464afb9a120cb83c014047c46b22d1ea0d8976aa9b4c8eea2d7a4dee542c8bd243a1633ef94b94d305d945666385af4f8e04446cbc98a8b503310bc4b14f58f56bbb5ff7035f6f29"}}}}}}, 0xfce) 2.245940599s ago: executing program 4 (id=1707): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x80000000000005, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x30) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000340)=[{&(0x7f0000000000)="fb1c04", 0x3}, {&(0x7f0000000040)="55a1aea5", 0x4}, {0x0}, {&(0x7f00000001c0)="6817f4d1", 0x4}, {&(0x7f0000000240)="df78", 0x2}, {&(0x7f0000000300)="a079534fa2", 0x5}], 0x6, 0x7) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) 2.238050758s ago: executing program 2 (id=1708): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.097326928s ago: executing program 4 (id=1709): r0 = socket(0x2a, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) shutdown(r1, 0x0) write(r1, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x80000002, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@deltaction={0x14, 0x31, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x8004) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@acquire={0x1ac, 0x17, 0x301, 0x0, 0x0, {{@in=@broadcast}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1}, {{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in=@empty}]}]}, 0x1ac}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x6, 0x3, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4004) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x20000400) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xfff3}}, @TCA_U32_SEL={0x34, 0x5, {0xb, 0x0, 0x2, 0xffff, 0xfffc, 0x8, 0x1, 0x6, [{0xff, 0x40, 0x6, 0x9}, {0x6, 0x6, 0x1, 0xfffffff7}]}}]}}]}, 0x6c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2d, 'freezer'}, {0x2b, 'rdma'}, {0x2b, 'rdma'}, {0x2d, 'net'}, {0x2b, 'net_prio'}, {0x2d, 'memory'}, {0x2d, 'perf_event'}, {0x2d, 'freezer'}, {0x2d, 'rdma'}]}, 0x47) 1.94380873s ago: executing program 4 (id=1710): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000500)=ANY=[], 0x0) 1.817272942s ago: executing program 4 (id=1711): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet6(0xa, 0x40000080806, 0x0) socket$kcm(0xa, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x15, &(0x7f000005ffe4)={0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x27}, 0x128}, 0x1c) 1.816407383s ago: executing program 2 (id=1712): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) unshare(0x28000600) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x2a8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x10}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004000000ff0f0000070000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x5}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.656971545s ago: executing program 3 (id=1714): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/189, 0xbd}], 0x1}, 0x2) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x14, 0x2, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x200480c0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 1.34957533s ago: executing program 3 (id=1717): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="f8134487c8b45ffe6da8050378ef165c", 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@setneightbl={0x14, 0x43, 0x1, 0x70bd29, 0x25dfdbfc, {0x2}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r2, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x401) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) shutdown(r2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000040)=0xf) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x8}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x2, 0x0}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r1) listen(r1, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 1.245769378s ago: executing program 0 (id=1718): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x80000000000005, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x30) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000340)=[{&(0x7f0000000000)="fb1c04", 0x3}, {&(0x7f0000000040)="55a1aea5", 0x4}, {&(0x7f0000000100)="819d17", 0x3}, {&(0x7f00000001c0)="6817f4d1", 0x4}, {&(0x7f0000000300)="a079534fa2", 0x5}], 0x5, 0x7) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r7, 0xf0ad304769ba0eca, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r9}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4c080) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1.128859452s ago: executing program 0 (id=1719): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x80000000000005, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x30) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000340)=[{&(0x7f0000000000)="fb1c04", 0x3}, {&(0x7f0000000040)="55a1aea5", 0x4}, {0x0}, {&(0x7f00000001c0)="6817f4d1", 0x4}, {&(0x7f0000000240)="df78", 0x2}, {&(0x7f0000000300)="a079534fa2", 0x5}], 0x6, 0x7) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) 1.098261299s ago: executing program 1 (id=1720): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x44880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45040}, 0x0) 1.016952534s ago: executing program 0 (id=1721): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xef1f, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 988.255925ms ago: executing program 0 (id=1722): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mmap(&(0x7f000075a000/0x2000)=nil, 0x2000, 0x0, 0x2011, r2, 0xc6e54000) 909.541412ms ago: executing program 2 (id=1723): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="7c0000001000030500"/20, @ANYRES32, @ANYBLOB="15010000000000004c00128009000100626f6e64000000003c000280050001000200000008000a0000000000050001000200000005000c00020000003c000e000200000008000f003e0b000005001b000500000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="15e368697874269faa66679082"], 0x7c}}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) unshare(0x480) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @multicast2}, &(0x7f0000000480)=0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000fdffbfff0000000000000008182b0000", @ANYRES32=0x1, @ANYBLOB="000000000300000018010000696c6c2500000000002020207b1af8ff000000fdbfa100000000060007010000f8ffffffb702000008000000b70300000200000085000000060000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xf6, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0xa) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x47, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000020601080000666300000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, 0xffffffffffffffff, 0xffffffffffffc000) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000018000100000000000000000002000000000000050000020006001500070000000c0016800800060003000000"], 0x30}}, 0x4000050) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000207010000f8ffffffb7029b6408000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 860.972699ms ago: executing program 0 (id=1724): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000037c0)='/', 0x1}], 0x1}}], 0x1, 0x4044891) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/94, 0x5e}], 0x1}, 0x91a}], 0x1, 0x20, 0x0) 720.532519ms ago: executing program 2 (id=1725): getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)=""/40, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000014000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000000020000000000000000000600000000000000000000000000000000000000000000000000000000000000ad57d36dd2ac14140000000000000000000000000005000600000000000a00000200000000ff0200000000000000000000000000010000000000000000a2d99497b698caecd416914ea871998bc5f411289408272530d80bc3466f1840d2bfb5d8957ee3931e5d"], 0xa0}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001120088be"], 0xfdef) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) 713.158296ms ago: executing program 1 (id=1726): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000800)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 370.416942ms ago: executing program 1 (id=1727): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1f872d1e998adc36, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0xf, 0xc}, {0xe, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x91) 369.828979ms ago: executing program 3 (id=1728): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x909, 0x20000000, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="80", 0x1}], 0x1, 0x0, 0x30}}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x61) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 272.694776ms ago: executing program 2 (id=1729): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x24000045) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x1}) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000580)={0x6, 'veth0_to_team\x00', {}, 0x5}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)}, 0x100) connect$packet(r3, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) shutdown(r3, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'veth0_vlan\x00', {0x4}, 0xfff7}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x280c82, 0x0) write$tun(r4, &(0x7f00000006c0)={@val={0x0, 0x88f7}, @val={0x2, 0x0, 0x4, 0x10, 0xa1, 0xff}, @x25={0x1, 0x0, 0xdb, "d4c955a52598a4a2d7b5c94a3a135de1a09efb35a632f43b20aef4cb57d22a8ec62dbb1af0d1afb1d2fcc8428fd2ac2076431670844961a92df7551649d89bc09c09ad7f4b7d163969ac1cf0"}}, 0x5d) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000ffdbdf251800000008000300", @ANYRES32=r9, @ANYBLOB="0800308004000180cc1c9b2fd81825db9b1b362e8f07ca7d4cf738a3904219f980421c5ab9db277de7f56a8d112cbf6b9771375b620feab527d0d68170d43850cd8d9ccd36fe9c9bd35f599e7404121d7f250ba854a69a71a9305635670c97730075f2eaebce4f0785f5fdbcb678bb63f3fe5587e339ac7cb1728dfdbeaae8bbaf99a5614c7ac97ec407b8648a4e22ab5b58a976e2d7910c368ffcc16149496662f0e17e001099d0ccd7b13aead0aa488548919a4ba89f62e9af0906cef895b252"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x810) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x38, 0x2, 0x3, 0x201, 0x0, 0x0, {0xe, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xc}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040044}, 0x8040) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a0000000000440007"], 0x90}}, 0x0) 232.077353ms ago: executing program 3 (id=1730): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060"], 0xffe) 217.48771ms ago: executing program 4 (id=1731): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) 116.733843ms ago: executing program 1 (id=1732): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 90.929013ms ago: executing program 4 (id=1733): r0 = socket(0x2a, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) write(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x80000002, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@deltaction={0x14, 0x31, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x8004) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@acquire={0x1ac, 0x17, 0x301, 0x0, 0x0, {{@in=@broadcast}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1}, {{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in=@empty}]}]}, 0x1ac}}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x6, 0x3, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4004) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x20000400) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xfff3}}, @TCA_U32_SEL={0x34, 0x5, {0xb, 0x0, 0x2, 0xffff, 0xfffc, 0x8, 0x1, 0x6, [{0xff, 0x40, 0x6, 0x9}, {0x6, 0x6, 0x1, 0xfffffff7}]}}]}}]}, 0x6c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2d, 'freezer'}, {0x2b, 'rdma'}, {0x2b, 'rdma'}, {0x2d, 'net'}, {0x2b, 'net_prio'}, {0x2d, 'memory'}, {0x2d, 'perf_event'}, {0x2d, 'freezer'}, {0x2d, 'rdma'}]}, 0x47) 0s ago: executing program 0 (id=1734): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) kernel console output (not intermixed with test programs): nk: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 115.800571][ T6359] erspan0: left promiscuous mode [ 115.934828][ T6359] ip_vti0: left promiscuous mode [ 115.951378][ T6359] ip6_vti0: left promiscuous mode [ 115.975355][ T6359] sit0: left promiscuous mode [ 116.033245][ T6359] ip6tnl0: left promiscuous mode [ 116.055142][ T6359] ip6gre0: left promiscuous mode [ 116.071899][ T6359] syz_tun: left promiscuous mode [ 116.095705][ T6359] ip6gretap0: left promiscuous mode [ 116.123185][ T6359] bridge0: left promiscuous mode [ 116.135879][ T6359] vcan0: left promiscuous mode [ 116.141603][ T6359] bond0: left promiscuous mode [ 116.162814][ T6359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.181450][ T6359] team0: left promiscuous mode [ 116.188351][ T6359] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.196549][ T6359] dummy0: left promiscuous mode [ 116.203634][ T6359] nlmon0: left promiscuous mode [ 116.210730][ T6359] caif0: left promiscuous mode [ 116.219629][ T6359] net_ratelimit: 12 callbacks suppressed [ 116.219647][ T6359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.352979][ T6421] xt_hashlimit: invalid rate [ 116.727838][ T6426] syz_tun: entered allmulticast mode [ 116.759576][ T6420] syz_tun: left allmulticast mode [ 117.161738][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.92'. [ 117.241191][ T6451] netlink: 32 bytes leftover after parsing attributes in process `syz.0.95'. [ 117.251283][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 117.308050][ T6454] netlink: 152 bytes leftover after parsing attributes in process `syz.1.93'. [ 117.516481][ T6442] syzkaller0: entered promiscuous mode [ 117.534088][ T6442] syzkaller0: entered allmulticast mode [ 117.619558][ T6456] pimreg: entered allmulticast mode [ 117.806288][ T6458] netlink: 52 bytes leftover after parsing attributes in process `syz.2.96'. [ 118.362599][ T6468] netlink: 44 bytes leftover after parsing attributes in process `syz.4.98'. [ 118.425720][ T6469] Driver unsupported XDP return value 0 on prog (id 67) dev N/A, expect packet loss! [ 118.545347][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 119.784980][ T6441] pimreg: left allmulticast mode [ 119.818445][ T6460] batman_adv: batadv0: Adding interface: dummy0 [ 119.827450][ T6460] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.854183][ T6460] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 120.087969][ T6480] ip6t_srh: unknown srh invflags 4000 [ 120.111465][ T6471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.127877][ T6471] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.152848][ T6471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.247142][ T6477] syz_tun: entered allmulticast mode [ 120.267892][ T6477] syz_tun: left allmulticast mode [ 120.284023][ T6484] IPVS: Scheduler module ip_vs_sip not found [ 120.494794][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 120.539071][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 120.567490][ T6491] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 120.607788][ T6495] xt_hashlimit: invalid rate [ 120.657414][ T6495] syz_tun: entered allmulticast mode [ 120.669015][ T6497] netlink: 88 bytes leftover after parsing attributes in process `syz.2.105'. [ 120.672891][ T6494] syz_tun: left allmulticast mode [ 120.697518][ T6500] ip6tnl2: entered promiscuous mode [ 120.703080][ T6500] ip6tnl2: entered allmulticast mode [ 120.713449][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.105'. [ 120.750099][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 120.796773][ T6503] xt_hashlimit: invalid rate [ 120.851591][ T6503] syz_tun: entered allmulticast mode [ 120.906275][ T6502] syz_tun: left allmulticast mode [ 121.568979][ T6513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 121.586686][ T6513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.656863][ T6513] vlan2: entered promiscuous mode [ 121.706708][ T6513] dummy0: entered promiscuous mode [ 121.754273][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 121.766528][ T6526] openvswitch: netlink: Message has 3 unknown bytes. [ 121.800205][ T6526] netlink: 'syz.0.113': attribute type 10 has an invalid length. [ 121.850597][ T6518] netlink: 256 bytes leftover after parsing attributes in process `syz.2.110'. [ 121.888211][ T6526] team0: Port device wlan1 added [ 121.954708][ T6533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.114'. [ 122.037831][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.114'. [ 122.047364][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 122.181498][ T6536] lo speed is unknown, defaulting to 1000 [ 122.228178][ T6536] lo speed is unknown, defaulting to 1000 [ 122.257002][ T6536] lo speed is unknown, defaulting to 1000 [ 122.343799][ T6538] GUP no longer grows the stack in syz.2.115 (6538): 200000006000-20000000a000 (200000005000) [ 122.381467][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: syz.2.115 Not tainted 6.14.0-rc6-syzkaller-01366-g6855b9be9cf7 #0 [ 122.381499][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.381512][ T6538] Call Trace: [ 122.381520][ T6538] [ 122.381529][ T6538] dump_stack_lvl+0x241/0x360 [ 122.381562][ T6538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.381587][ T6538] ? __pfx__printk+0x10/0x10 [ 122.381605][ T6538] ? find_vma+0xf9/0x170 [ 122.381640][ T6538] __get_user_pages+0x3b07/0x4140 [ 122.381674][ T6538] ? mark_lock+0x9a/0x360 [ 122.381725][ T6538] ? __pfx___get_user_pages+0x10/0x10 [ 122.381745][ T6538] ? __gup_longterm_locked+0xd2f/0x17f0 [ 122.381770][ T6538] ? __pfx_down_read_killable+0x10/0x10 [ 122.381810][ T6538] ? __pfx_lock_acquire+0x10/0x10 [ 122.381842][ T6538] ? try_get_folio+0xf1/0x6f0 [ 122.381865][ T6538] ? __pfx_lock_release+0x10/0x10 [ 122.381905][ T6538] __gup_longterm_locked+0xe64/0x17f0 [ 122.381941][ T6538] ? mark_lock+0x9a/0x360 [ 122.381967][ T6538] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 122.382000][ T6538] ? __pfx___gup_longterm_locked+0x10/0x10 [ 122.382025][ T6538] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 122.382073][ T6538] ? gup_fast_fallback+0x207e/0x29c0 [ 122.382100][ T6538] gup_fast_fallback+0x2266/0x29c0 [ 122.382160][ T6538] ? __pfx_gup_fast_fallback+0x10/0x10 [ 122.382222][ T6538] ? __mutex_trylock_common+0x183/0x2e0 [ 122.382247][ T6538] ? __pfx___might_resched+0x10/0x10 [ 122.382275][ T6538] ? is_valid_gup_args+0x124/0x200 [ 122.382301][ T6538] get_user_pages_fast+0xcc/0x160 [ 122.382328][ T6538] ? __pfx_get_user_pages_fast+0x10/0x10 [ 122.382349][ T6538] ? rcu_is_watching+0x15/0xb0 [ 122.382374][ T6538] ? trace_contention_end+0x3c/0x120 [ 122.382400][ T6538] ? __mutex_lock+0x397/0x1010 [ 122.382435][ T6538] __iov_iter_get_pages_alloc+0x3b4/0x8e0 [ 122.382477][ T6538] ? __se_sys_vmsplice+0x4b7/0x14a0 [ 122.382513][ T6538] iov_iter_get_pages2+0xcf/0x130 [ 122.382547][ T6538] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 122.382589][ T6538] __se_sys_vmsplice+0x739/0x14a0 [ 122.382618][ T6538] ? plist_del+0x3f1/0x410 [ 122.382669][ T6538] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 122.382703][ T6538] ? __pfx_futex_wake+0x10/0x10 [ 122.382787][ T6538] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 122.382829][ T6538] ? do_syscall_64+0x100/0x230 [ 122.382863][ T6538] ? do_syscall_64+0xb6/0x230 [ 122.382896][ T6538] do_syscall_64+0xf3/0x230 [ 122.382925][ T6538] ? clear_bhb_loop+0x35/0x90 [ 122.382956][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.382985][ T6538] RIP: 0033:0x7f5bf278d169 [ 122.383005][ T6538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.383022][ T6538] RSP: 002b:00007f5bf357a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 122.383050][ T6538] RAX: ffffffffffffffda RBX: 00007f5bf29a5fa0 RCX: 00007f5bf278d169 [ 122.383065][ T6538] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e [ 122.383078][ T6538] RBP: 00007f5bf280e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 122.383091][ T6538] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 122.383103][ T6538] R13: 0000000000000000 R14: 00007f5bf29a5fa0 R15: 00007fff11576c38 [ 122.383134][ T6538] [ 122.475027][ T10] lo speed is unknown, defaulting to 1000 [ 122.538628][ T6536] infiniband syz0: set down [ 122.733239][ T6536] infiniband syz0: added lo [ 122.805479][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 123.069808][ T6536] RDS/IB: syz0: added [ 123.090398][ T6536] smc: adding ib device syz0 with port count 1 [ 123.097932][ T6536] smc: ib device syz0 port 1 has pnetid [ 123.622425][ T6550] xt_hashlimit: size too large, truncated to 1048576 [ 124.074087][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 124.100334][ T6520] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 124.218257][ T6563] xt_l2tp: unknown flags: 10 [ 124.607730][ T6566] xt_hashlimit: invalid rate [ 125.146970][ T6545] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.165467][ T3390] lo speed is unknown, defaulting to 1000 [ 125.178238][ T6557] bridge0: port 1(gretap0) entered blocking state [ 125.187134][ T6557] bridge0: port 1(gretap0) entered disabled state [ 125.195396][ T6557] gretap0: entered allmulticast mode [ 125.201870][ T6557] gretap0: entered promiscuous mode [ 125.212324][ T6559] gretap0: left allmulticast mode [ 125.218422][ T6559] gretap0: left promiscuous mode [ 125.226830][ T6559] bridge0: port 1(gretap0) entered disabled state [ 125.248564][ T6567] syz_tun: entered allmulticast mode [ 125.256893][ T6536] lo speed is unknown, defaulting to 1000 [ 125.281475][ T6545] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.348559][ T6565] syz_tun: left allmulticast mode [ 125.400202][ T6545] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.518399][ T6570] __nla_validate_parse: 1 callbacks suppressed [ 125.518419][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.123'. [ 125.570811][ T6545] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.644388][ T6574] netlink: 'syz.2.122': attribute type 4 has an invalid length. [ 125.668490][ T6536] lo speed is unknown, defaulting to 1000 [ 125.737353][ T6545] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.775552][ T6545] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.806402][ T6545] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.915383][ T6545] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.965975][ T6582] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 125.973049][ T6581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.125'. [ 126.021148][ T6579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.126'. [ 126.038183][ T6536] lo speed is unknown, defaulting to 1000 [ 126.059144][ T6579] syz.0.126 (6579) used greatest stack depth: 17368 bytes left [ 126.067303][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 126.143797][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 126.246750][ T6592] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 126.498810][ T6536] lo speed is unknown, defaulting to 1000 [ 126.513924][ T6592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.987013][ T6593] lo speed is unknown, defaulting to 1000 [ 127.112541][ T6605] lo speed is unknown, defaulting to 1000 [ 127.732670][ T6617] xt_hashlimit: invalid rate [ 127.762281][ T6607] netlink: 312 bytes leftover after parsing attributes in process `syz.2.131'. [ 127.781060][ T6617] syz_tun: entered allmulticast mode [ 127.796918][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 127.835122][ T6536] lo speed is unknown, defaulting to 1000 [ 128.064080][ T6616] syz_tun: left allmulticast mode [ 128.538107][ T6629] xt_hashlimit: invalid rate [ 128.570580][ T6632] netlink: 36 bytes leftover after parsing attributes in process `syz.4.135'. [ 128.597051][ T6624] lo speed is unknown, defaulting to 1000 [ 128.597221][ T6629] syz_tun: entered allmulticast mode [ 128.612788][ T6626] syz_tun: left allmulticast mode [ 129.217214][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 130.014217][ T6630] lo speed is unknown, defaulting to 1000 [ 130.433775][ T6658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.143'. [ 130.954351][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 131.815873][ T6664] xt_hashlimit: invalid rate [ 133.270531][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.682472][ T6652] lo speed is unknown, defaulting to 1000 [ 133.723957][ T6665] syz_tun: entered allmulticast mode [ 133.729631][ T6665] syz_tun: left allmulticast mode [ 133.965501][ T6672] netlink: 'syz.2.147': attribute type 5 has an invalid length. [ 134.208357][ T6669] lo speed is unknown, defaulting to 1000 [ 134.409996][ T6676] xt_hashlimit: invalid rate [ 134.454524][ T6676] syz_tun: entered allmulticast mode [ 134.536400][ T6675] syz_tun: left allmulticast mode [ 135.012691][ T6687] xt_hashlimit: invalid rate [ 135.021777][ T6687] syz_tun: entered allmulticast mode [ 135.032240][ T6686] syz_tun: left allmulticast mode [ 135.436343][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 135.478839][ T6697] tipc: Enabled bearer , priority 0 [ 135.550932][ T6698] IPVS: Scheduler module ip_vs_sip not found [ 135.559900][ T6698] IPVS: length: 24 != 16106127384 [ 135.801561][ T6695] tipc: Resetting bearer [ 135.810187][ T6695] tipc: Resetting bearer [ 136.580903][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.157'. [ 136.668244][ T6718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.158'. [ 136.700345][ T6718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.158'. [ 136.710996][ T6718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.158'. [ 136.733947][ T6718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.158'. [ 136.956135][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 138.149292][ T6695] tipc: Disabling bearer [ 138.177673][ T6712] lo speed is unknown, defaulting to 1000 [ 138.280350][ T6722] xt_hashlimit: invalid rate [ 138.298313][ T6722] syz_tun: entered allmulticast mode [ 138.328334][ T6721] syz_tun: left allmulticast mode [ 138.569795][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 138.714416][ T6736] tipc: Can't bind to reserved service type 1 [ 138.734694][ T6709] lo speed is unknown, defaulting to 1000 [ 138.836075][ T6741] xt_hashlimit: invalid rate [ 138.917734][ T6743] syz_tun: entered allmulticast mode [ 138.929383][ T6740] syz_tun: left allmulticast mode [ 139.083929][ T6746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.163'. [ 139.170149][ T6749] netlink: 'syz.0.166': attribute type 29 has an invalid length. [ 139.389626][ T6749] netlink: 'syz.0.166': attribute type 29 has an invalid length. [ 139.455187][ T6734] lo speed is unknown, defaulting to 1000 [ 139.469416][ T6753] IPv6: sit1: Disabled Multicast RS [ 139.476580][ T6753] sit1: entered allmulticast mode [ 139.577964][ T6756] xt_hashlimit: invalid rate [ 139.690210][ T6758] syz_tun: entered allmulticast mode [ 139.700411][ T6755] syz_tun: left allmulticast mode [ 139.713704][ T6760] warn_alloc: 1 callbacks suppressed [ 139.713722][ T6760] syz.0.168: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 139.735212][ T6760] CPU: 0 UID: 0 PID: 6760 Comm: syz.0.168 Not tainted 6.14.0-rc6-syzkaller-01366-g6855b9be9cf7 #0 [ 139.735242][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.735255][ T6760] Call Trace: [ 139.735263][ T6760] [ 139.735272][ T6760] dump_stack_lvl+0x241/0x360 [ 139.735307][ T6760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.735333][ T6760] ? __pfx__printk+0x10/0x10 [ 139.735359][ T6760] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 139.735389][ T6760] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 139.735421][ T6760] warn_alloc+0x278/0x410 [ 139.735447][ T6760] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 139.735471][ T6760] ? __pfx_warn_alloc+0x10/0x10 [ 139.735495][ T6760] ? kasan_save_track+0x3f/0x80 [ 139.735518][ T6760] ? __kasan_kmalloc+0x98/0xb0 [ 139.735545][ T6760] ? xsk_setsockopt+0x4aa/0x810 [ 139.735564][ T6760] ? do_sock_setsockopt+0x3af/0x720 [ 139.735587][ T6760] ? __x64_sys_setsockopt+0x1ee/0x280 [ 139.735609][ T6760] ? do_syscall_64+0xf3/0x230 [ 139.735638][ T6760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.735678][ T6760] __vmalloc_node_range_noprof+0x126/0x1380 [ 139.735731][ T6760] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 139.735760][ T6760] ? __kasan_kmalloc+0x98/0xb0 [ 139.735792][ T6760] vmalloc_user_noprof+0x74/0x80 [ 139.735814][ T6760] ? xskq_create+0xb6/0x170 [ 139.735836][ T6760] xskq_create+0xb6/0x170 [ 139.735860][ T6760] xsk_init_queue+0xa1/0x100 [ 139.735885][ T6760] xsk_setsockopt+0x4aa/0x810 [ 139.735910][ T6760] ? __pfx_xsk_setsockopt+0x10/0x10 [ 139.735932][ T6760] ? __pfx_aa_sk_perm+0x10/0x10 [ 139.735981][ T6760] ? aa_sock_opt_perm+0x79/0x120 [ 139.736021][ T6760] ? __pfx_xsk_setsockopt+0x10/0x10 [ 139.736040][ T6760] do_sock_setsockopt+0x3af/0x720 [ 139.736071][ T6760] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 139.736111][ T6760] ? __fget_files+0x395/0x410 [ 139.736143][ T6760] ? __fget_files+0x2a/0x410 [ 139.736185][ T6760] __x64_sys_setsockopt+0x1ee/0x280 [ 139.736218][ T6760] do_syscall_64+0xf3/0x230 [ 139.736248][ T6760] ? clear_bhb_loop+0x35/0x90 [ 139.736282][ T6760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.736311][ T6760] RIP: 0033:0x7ff01fd8d169 [ 139.736330][ T6760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.736348][ T6760] RSP: 002b:00007ff020c35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 139.736371][ T6760] RAX: ffffffffffffffda RBX: 00007ff01ffa5fa0 RCX: 00007ff01fd8d169 [ 139.736386][ T6760] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 139.736399][ T6760] RBP: 00007ff01fe0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 139.736412][ T6760] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.736425][ T6760] R13: 0000000000000000 R14: 00007ff01ffa5fa0 R15: 00007ffc6c7d6678 [ 139.736457][ T6760] [ 139.736467][ T6760] Mem-Info: [ 140.029809][ T6760] active_anon:9756 inactive_anon:0 isolated_anon:0 [ 140.029809][ T6760] active_file:1406 inactive_file:38318 isolated_file:0 [ 140.029809][ T6760] unevictable:768 dirty:391 writeback:0 [ 140.029809][ T6760] slab_reclaimable:10013 slab_unreclaimable:104730 [ 140.029809][ T6760] mapped:39520 shmem:5151 pagetables:992 [ 140.029809][ T6760] sec_pagetables:0 bounce:0 [ 140.029809][ T6760] kernel_misc_reclaimable:0 [ 140.029809][ T6760] free:1332848 free_pcp:278 free_cma:0 [ 140.075440][ T6760] Node 0 active_anon:39224kB inactive_anon:0kB active_file:5624kB inactive_file:153200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158080kB dirty:1564kB writeback:0kB shmem:19068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11100kB pagetables:3968kB sec_pagetables:0kB all_unreclaimable? no [ 140.108104][ T6760] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 140.138644][ T6760] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.165939][ T6760] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 140.171807][ T6760] Node 0 DMA32 free:1415212kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:39284kB inactive_anon:0kB active_file:5624kB inactive_file:152884kB unevictable:1536kB writepending:1564kB present:3129332kB managed:2549704kB mlocked:0kB bounce:0kB free_pcp:1000kB local_pcp:32kB free_cma:0kB [ 140.210224][ T6760] lowmem_reserve[]: 0 0 0 0 0 [ 140.218719][ T6760] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 140.256070][ T6760] lowmem_reserve[]: 0 0 0 0 0 [ 140.260934][ T6760] Node 1 Normal free:3900820kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 140.293632][ T6760] lowmem_reserve[]: 0 0 0 0 0 [ 140.298611][ T6760] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 140.312521][ T6760] Node 0 DMA32: 3*4kB (UME) 6*8kB (E) 6*16kB (UME) 32*32kB (UME) 132*64kB (UME) 69*128kB (UME) 63*256kB (UME) 23*512kB (UM) 21*1024kB (UME) 15*2048kB (UME) 321*4096kB (UM) = 1413404kB [ 140.332979][ T6760] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 140.344809][ T6760] Node 1 Normal: 241*4kB (UE) 62*8kB (UME) 44*16kB (UME) 228*32kB (UME) 109*64kB (UME) 33*128kB (UME) 17*256kB (UME) 8*512kB (UME) 5*1024kB (UM) 4*2048kB (UE) 942*4096kB (M) = 3900852kB [ 140.363783][ T6760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.373584][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 140.380111][ T6760] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 140.389691][ T6760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.399456][ T6760] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 140.408893][ T6760] 45213 total pagecache pages [ 140.413724][ T6760] 0 pages in swap cache [ 140.418008][ T6760] Free swap = 124996kB [ 140.422215][ T6760] Total swap = 124996kB [ 140.427310][ T6760] 2097051 pages RAM [ 140.431179][ T6760] 0 pages HighMem/MovableOnly [ 140.436018][ T6760] 427903 pages reserved [ 140.440299][ T6760] 0 pages cma reserved [ 140.992233][ T6783] tipc: Enabled bearer , priority 0 [ 141.073800][ T6779] tipc: Resetting bearer [ 141.086139][ T6775] tipc: Resetting bearer [ 141.106306][ T6775] tipc: Resetting bearer [ 142.388175][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 142.433646][ T6770] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 142.531694][ T6786] Bluetooth: MGMT ver 1.23 [ 142.900112][ T6775] tipc: Disabling bearer [ 143.057202][ T6791] xt_hashlimit: invalid rate [ 143.083331][ T6791] syz_tun: entered allmulticast mode [ 143.096465][ T6789] syz_tun: left allmulticast mode [ 143.662154][ T6798] xt_CT: No such helper "pptp" [ 143.751376][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 143.818257][ T6808] netlink: 48 bytes leftover after parsing attributes in process `syz.4.176'. [ 143.945448][ T6815] netlink: 'syz.3.177': attribute type 7 has an invalid length. [ 143.955816][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 143.960942][ T6807] bridge_slave_1: left allmulticast mode [ 143.977766][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.988353][ T6807] bridge_slave_0: left allmulticast mode [ 143.996990][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.047096][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.176'. [ 144.181684][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.179'. [ 144.253042][ T6820] syzkaller0: entered promiscuous mode [ 144.258947][ T6820] syzkaller0: entered allmulticast mode [ 144.279655][ T6812] syzkaller1: entered promiscuous mode [ 144.293701][ T6812] syzkaller1: entered allmulticast mode [ 145.449907][ T6842] xt_CT: No such helper "snmp" [ 145.479952][ T6843] Bluetooth: MGMT ver 1.23 [ 146.846537][ T6831] lo speed is unknown, defaulting to 1000 [ 147.325718][ T6840] lo speed is unknown, defaulting to 1000 [ 147.750436][ T6851] lo speed is unknown, defaulting to 1000 [ 147.924275][ T6859] smc: removing ib device syz0 [ 148.166346][ T6871] netlink: 148 bytes leftover after parsing attributes in process `syz.2.188'. [ 148.181506][ T6871] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 148.241382][ T6871] netlink: 'syz.2.188': attribute type 2 has an invalid length. [ 148.791389][ T6875] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 149.080179][ T6878] tun0: tun_chr_ioctl cmd 1074025675 [ 149.103356][ T6878] tun0: persist enabled [ 149.172779][ T6884] tun0: tun_chr_ioctl cmd 1074025675 [ 149.203569][ T6884] tun0: persist disabled [ 149.232788][ T6884] netlink: 68 bytes leftover after parsing attributes in process `syz.3.190'. [ 149.258008][ T6883] macvtap1: entered promiscuous mode [ 149.283864][ T6883] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 149.304301][ T6883] macvtap1: entered allmulticast mode [ 149.309761][ T6883] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 149.398687][ T6883] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 149.424691][ T6883] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 150.484866][ T6913] xt_l2tp: unknown flags: 10 [ 150.846709][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.196'. [ 151.023269][ T6925] team0 (unregistering): Port device team_slave_0 removed [ 151.037146][ T6925] team0 (unregistering): Port device team_slave_1 removed [ 151.073372][ T6925] team0 (unregistering): Port device wlan1 removed [ 152.159556][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'. [ 152.249227][ T6945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.202'. [ 152.456197][ T6953] xt_hashlimit: invalid rate [ 152.577086][ T6953] syz_tun: entered allmulticast mode [ 152.588427][ T6956] batman_adv: batadv0: Interface deactivated: dummy0 [ 152.596664][ T6956] batman_adv: batadv0: Removing interface: dummy0 [ 152.610387][ T6956] bridge_slave_0: left allmulticast mode [ 152.616441][ T6956] bridge_slave_0: left promiscuous mode [ 152.622613][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.632194][ T6957] netlink: 'syz.0.204': attribute type 10 has an invalid length. [ 152.686464][ T6956] bond0: (slave bond_slave_0): Releasing backup interface [ 152.698946][ T6956] bond0: (slave bond_slave_1): Releasing backup interface [ 152.711122][ T6956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.722788][ T6956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.756455][ T6956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.764440][ T6956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.807369][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 152.847665][ T6957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.860342][ T6957] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 152.883781][ T6952] syz_tun: left allmulticast mode [ 153.490423][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 153.603818][ T6981] netlink: 'syz.4.207': attribute type 27 has an invalid length. [ 154.588252][ T6983] Set syz1 is full, maxelem 65536 reached [ 154.769529][ T6984] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.779033][ T6984] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.788827][ T6984] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.803708][ T6984] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.089855][ T6986] Set syz1 is full, maxelem 65536 reached [ 155.170152][ T6989] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 155.391954][ T6992] IPVS: Scheduler module ip_vs_sip not found [ 155.400037][ T6996] IPVS: length: 24 != 16106127384 [ 155.452410][ T6989] vlan0: left promiscuous mode [ 155.474144][ T6989] vlan0: entered allmulticast mode [ 155.516295][ T6989] veth0_vlan: entered allmulticast mode [ 155.547071][ T7000] batman_adv: batadv0: Removing interface: dummy0 [ 155.581779][ T7005] SET target dimension over the limit! [ 155.614283][ T7000] vlan2: entered allmulticast mode [ 155.619840][ T7000] macsec0: entered allmulticast mode [ 155.937353][ T7018] xt_hashlimit: invalid rate [ 156.029623][ T7018] syz_tun: entered allmulticast mode [ 156.070276][ T7017] syz_tun: left allmulticast mode [ 156.100048][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 156.221560][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.219'. [ 156.276427][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 156.296006][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 156.463910][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 156.472833][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 156.676533][ T7031] No such timeout policy "syz0" [ 156.781648][ T7032] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.804299][ T7032] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 157.000838][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 157.062496][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 157.319552][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'. [ 157.388930][ T30] audit: type=1107 audit(1742484433.204:2): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Àï' [ 157.474247][ T7052] xt_hashlimit: invalid rate [ 157.489389][ T7052] syz_tun: entered allmulticast mode [ 157.520238][ T7049] wireguard0: entered promiscuous mode [ 157.533115][ T7049] wireguard0: entered allmulticast mode [ 157.649571][ T7051] syz_tun: left allmulticast mode [ 157.749570][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.228'. [ 158.241518][ T7072] wireguard0: entered promiscuous mode [ 158.247485][ T7072] wireguard0: entered allmulticast mode [ 158.545894][ T7075] xt_bpf: check failed: parse error [ 158.944014][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 160.480460][ T7109] netlink: 'syz.3.239': attribute type 4 has an invalid length. [ 160.589648][ T7114] xt_hashlimit: invalid rate [ 160.608664][ T7114] syz_tun: entered allmulticast mode [ 160.619010][ T7110] syz_tun: left allmulticast mode [ 160.669178][ T7115] ipt_REJECT: TCP_RESET invalid for non-tcp [ 161.056716][ T7115] lo: entered allmulticast mode [ 161.084923][ T7115] lo: left allmulticast mode [ 161.324593][ T7130] xt_hashlimit: invalid rate [ 161.562010][ T7136] __nla_validate_parse: 6 callbacks suppressed [ 161.562031][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 161.577431][ T7136] netlink: 32 bytes leftover after parsing attributes in process `syz.3.246'. [ 161.749465][ T7138] batadv0: left promiscuous mode [ 161.770464][ T7138] vxcan0: left promiscuous mode [ 161.777405][ T7138] vxcan1: left promiscuous mode [ 161.783199][ T7138] veth0: left promiscuous mode [ 161.793794][ T7138] veth1: left promiscuous mode [ 161.811098][ T7138] wg0: left promiscuous mode [ 161.819901][ T7138] wg1: left promiscuous mode [ 161.860749][ T7138] wg2: left promiscuous mode [ 161.865983][ T7138] veth0_to_bridge: left promiscuous mode [ 161.871983][ T7138] bridge_slave_0: left promiscuous mode [ 161.910350][ T7149] xt_hashlimit: invalid rate [ 161.980696][ T7138] veth1_to_bridge: left promiscuous mode [ 161.986695][ T7138] bridge_slave_1: left promiscuous mode [ 161.992603][ T7138] veth0_to_bond: left promiscuous mode [ 161.999864][ T7138] bond_slave_0: left promiscuous mode [ 162.006941][ T7138] veth1_to_bond: left promiscuous mode [ 162.024387][ T7138] bond_slave_1: left promiscuous mode [ 162.030128][ T7138] veth0_to_team: left promiscuous mode [ 162.036574][ T7138] team_slave_0: left promiscuous mode [ 162.042369][ T7138] veth1_to_team: left promiscuous mode [ 162.049179][ T7138] team_slave_1: left promiscuous mode [ 162.055344][ T7138] veth0_to_batadv: left promiscuous mode [ 162.061177][ T7138] batadv_slave_0: left promiscuous mode [ 162.067497][ T7138] veth1_to_batadv: left promiscuous mode [ 162.073844][ T7138] batadv_slave_1: left promiscuous mode [ 162.079835][ T7138] xfrm0: left promiscuous mode [ 162.085409][ T7138] veth0_to_hsr: left promiscuous mode [ 162.091327][ T7138] veth1_to_hsr: left promiscuous mode [ 162.097491][ T7138] hsr0: left promiscuous mode [ 162.102480][ T7138] veth1_virt_wifi: left promiscuous mode [ 162.122812][ T7138] veth0_virt_wifi: left promiscuous mode [ 162.185569][ T7138] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 162.192979][ T7138] vlan0: left allmulticast mode [ 162.253776][ T7138] veth0_vlan: left allmulticast mode [ 162.311545][ T7046] Set syz1 is full, maxelem 65536 reached [ 162.317687][ T7138] vlan1: left promiscuous mode [ 162.322785][ T7138] macvlan0: left promiscuous mode [ 162.433941][ T7138] macvlan1: left promiscuous mode [ 162.439235][ T7138] ipvlan0: left promiscuous mode [ 162.555888][ T7138] macvtap0: left promiscuous mode [ 162.561067][ T7138] macsec0: left promiscuous mode [ 162.596317][ T7138] geneve0: left promiscuous mode [ 162.637934][ T7138] geneve1: left promiscuous mode [ 162.690433][ T7138] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 162.723998][ T7138] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 162.753989][ T7138] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 162.761203][ T7138] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 162.793196][ T7138] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 162.819197][ T7143] xt_hashlimit: size too large, truncated to 1048576 [ 162.936304][ T7152] syz_tun: entered allmulticast mode [ 162.942275][ T7152] syz_tun: left allmulticast mode [ 163.020014][ T7170] netlink: 44 bytes leftover after parsing attributes in process `syz.0.252'. [ 163.423698][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 163.451821][ T7177] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.460464][ T7177] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.470181][ T7177] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.479550][ T7177] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.510608][ T7180] xt_hashlimit: invalid rate [ 163.532213][ T7180] syz_tun: entered allmulticast mode [ 163.539600][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.254'. [ 163.621133][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.255'. [ 163.627925][ T7179] syz_tun: left allmulticast mode [ 164.681638][ T7211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.263'. [ 164.746948][ T7200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.261'. [ 164.832878][ T7214] netlink: 'syz.0.264': attribute type 10 has an invalid length. [ 164.939582][ T7219] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 164.953877][ T7219] netlink: 224 bytes leftover after parsing attributes in process `syz.0.264'. [ 164.965016][ T7219] netlink: 48 bytes leftover after parsing attributes in process `syz.0.264'. [ 165.840859][ T7233] netlink: zone id is out of range [ 165.931507][ T7233] netlink: zone id is out of range [ 165.982310][ T7233] netlink: zone id is out of range [ 166.006435][ T7233] netlink: zone id is out of range [ 166.014975][ T7239] xt_l2tp: unknown flags: 10 [ 166.047979][ T7233] netlink: zone id is out of range [ 166.063573][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 166.078581][ T7233] netlink: zone id is out of range [ 166.210708][ T7233] netlink: zone id is out of range [ 166.253008][ T7233] netlink: set zone limit has 8 unknown bytes [ 167.000687][ T7253] netlink: 44 bytes leftover after parsing attributes in process `syz.3.272'. [ 167.599683][ T7259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.613042][ T7259] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.635511][ T7259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.661756][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'. [ 167.693263][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 167.752518][ T7278] lo speed is unknown, defaulting to 1000 [ 167.766439][ T7278] lo speed is unknown, defaulting to 1000 [ 167.775068][ T7278] lo speed is unknown, defaulting to 1000 [ 167.790143][ T7278] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 167.938613][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 167.955063][ T7283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.276'. [ 167.995167][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.276'. [ 168.210900][ T7278] lo speed is unknown, defaulting to 1000 [ 168.864799][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 168.902471][ T7278] lo speed is unknown, defaulting to 1000 [ 168.953278][ T7278] lo speed is unknown, defaulting to 1000 [ 169.020991][ T7278] lo speed is unknown, defaulting to 1000 [ 169.092803][ T7278] lo speed is unknown, defaulting to 1000 [ 169.252768][ T3390] IPVS: starting estimator thread 0... [ 169.354755][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 169.413019][ T7308] IPVS: using max 19 ests per chain, 45600 per kthread [ 169.425121][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 169.466118][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.474023][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.021251][ T7293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.067826][ T7293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.289483][ T7293] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.299316][ T7293] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.319343][ T7293] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.335382][ T7293] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.454613][ T7278] lo speed is unknown, defaulting to 1000 [ 170.569828][ T7304] bridge0: port 3(gretap0) entered blocking state [ 170.576696][ T7304] bridge0: port 3(gretap0) entered disabled state [ 170.583378][ T7304] gretap0: entered allmulticast mode [ 170.615111][ T7304] gretap0: entered promiscuous mode [ 170.655676][ T7316] gretap0: left allmulticast mode [ 170.661522][ T7316] gretap0: left promiscuous mode [ 170.669083][ T7316] bridge0: port 3(gretap0) entered disabled state [ 170.906938][ T7328] bond0: (slave bridge0): Releasing backup interface [ 170.960415][ T7328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.980284][ T7329] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 171.121302][ T7336] netlink: 'syz.4.284': attribute type 29 has an invalid length. [ 171.241636][ T7347] xt_hashlimit: invalid rate [ 171.400161][ T7351] syz_tun: entered allmulticast mode [ 171.413891][ T7353] netlink: 'syz.4.284': attribute type 29 has an invalid length. [ 171.444132][ T7346] syz_tun: left allmulticast mode [ 171.524056][ T7357] netlink: 'syz.3.288': attribute type 5 has an invalid length. [ 171.763193][ T7359] lo speed is unknown, defaulting to 1000 [ 171.946691][ T7336] IPv6: sit1: Disabled Multicast RS [ 171.964680][ T7336] sit1: entered allmulticast mode [ 172.419981][ T7374] lo speed is unknown, defaulting to 1000 [ 172.476943][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'. [ 172.504621][ T7381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.292'. [ 172.587321][ T7386] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.294'. [ 172.597157][ T7386] openvswitch: netlink: Message has 8 unknown bytes. [ 172.697789][ T7386] tipc: Enabling of bearer rejected, already enabled [ 172.707736][ T7386] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 172.787014][ T7389] netlink: 'syz.0.296': attribute type 1 has an invalid length. [ 172.848901][ T7392] netlink: 3 bytes leftover after parsing attributes in process `syz.0.296'. [ 172.863984][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 172.978145][ T7397] netlink: 48 bytes leftover after parsing attributes in process `syz.0.296'. [ 173.141117][ T7389] bond1: entered promiscuous mode [ 173.147185][ T7389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.165537][ T7392] batadv1: entered promiscuous mode [ 173.174155][ T7392] batadv1: entered allmulticast mode [ 173.181141][ T7392] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 173.198813][ T7392] bond1: (slave batadv1): making interface the new active one [ 173.210353][ T7392] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 173.756035][ T7410] netlink: 'syz.0.300': attribute type 5 has an invalid length. [ 174.073953][ T7414] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.083082][ T7414] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.099495][ T7414] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.099997][ T7320] IPVS: starting estimator thread 0... [ 174.109220][ T7414] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.172427][ T7414] bond1: left promiscuous mode [ 174.186752][ T7414] batadv1: left promiscuous mode [ 174.191777][ T7414] batadv1: left allmulticast mode [ 174.245523][ T7416] IPVS: using max 21 ests per chain, 50400 per kthread [ 175.213378][ T7429] IPVS: length: 78 != 8 [ 175.743716][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 175.961461][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 176.039879][ T7450] netlink: 'syz.0.311': attribute type 5 has an invalid length. [ 176.075003][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 176.115215][ T7451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.308'. [ 176.173771][ T7440] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 176.356709][ T7455] lo speed is unknown, defaulting to 1000 [ 177.268534][ T7468] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 177.491631][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 177.576903][ T7474] bridge_slave_1: left allmulticast mode [ 177.583023][ T7474] bridge_slave_1: left promiscuous mode [ 177.583735][ T7475] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 177.622581][ T7474] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.694906][ T7471] netlink: 48 bytes leftover after parsing attributes in process `syz.3.316'. [ 177.706678][ T7474] bridge_slave_0: left allmulticast mode [ 177.754800][ T7474] bridge_slave_0: left promiscuous mode [ 177.761387][ T7474] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.149880][ T7481] lo speed is unknown, defaulting to 1000 [ 178.161267][ T7497] lo speed is unknown, defaulting to 1000 [ 178.223826][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 178.393262][ T7501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.322'. [ 179.425396][ T7490] lo speed is unknown, defaulting to 1000 [ 179.531719][ T7511] netlink: 'syz.0.326': attribute type 5 has an invalid length. [ 179.876898][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 179.914090][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 179.922948][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 179.941238][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 179.975351][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 180.016396][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 180.029075][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 180.304010][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 182.737994][ T7543] lo: entered promiscuous mode [ 182.742947][ T7543] tunl0: entered promiscuous mode [ 182.748374][ T7543] gre0: entered promiscuous mode [ 182.753931][ T7543] gretap0: entered promiscuous mode [ 182.759300][ T7543] erspan0: entered promiscuous mode [ 182.764807][ T7543] ip_vti0: entered promiscuous mode [ 182.770229][ T7543] ip6_vti0: entered promiscuous mode [ 182.777174][ T7543] sit0: entered promiscuous mode [ 182.782353][ T7543] ip6tnl0: entered promiscuous mode [ 182.791404][ T7543] ip6gre0: entered promiscuous mode [ 182.796889][ T7543] syz_tun: entered promiscuous mode [ 182.802476][ T7543] ip6gretap0: entered promiscuous mode [ 182.808271][ T7543] bond0: entered promiscuous mode [ 182.813582][ T7543] bond_slave_0: entered promiscuous mode [ 182.819523][ T7543] bond_slave_1: entered promiscuous mode [ 182.828034][ T7543] team0: entered promiscuous mode [ 182.846390][ T7543] team_slave_0: entered promiscuous mode [ 182.852246][ T7543] team_slave_1: entered promiscuous mode [ 182.881508][ T7543] dummy0: entered promiscuous mode [ 182.889884][ T7543] nlmon0: entered promiscuous mode [ 182.895813][ T7543] caif0: entered promiscuous mode [ 182.901168][ T7543] batadv0: entered promiscuous mode [ 182.908059][ T7543] vxcan0: entered promiscuous mode [ 182.915039][ T7543] vxcan1: entered promiscuous mode [ 182.925015][ T7543] veth0: entered promiscuous mode [ 182.930836][ T7543] veth1: entered promiscuous mode [ 182.941882][ T7543] wg0: entered promiscuous mode [ 182.947658][ T7543] wg1: entered promiscuous mode [ 182.952726][ T7543] wg2: entered promiscuous mode [ 182.961832][ T7543] veth0_to_bridge: entered promiscuous mode [ 182.968133][ T7543] bridge_slave_0: entered promiscuous mode [ 182.974574][ T7543] veth1_to_bridge: entered promiscuous mode [ 182.983756][ T7543] bridge_slave_1: entered promiscuous mode [ 182.999932][ T7543] veth0_to_bond: entered promiscuous mode [ 183.010178][ T7543] veth1_to_bond: entered promiscuous mode [ 183.021315][ T7543] veth0_to_team: entered promiscuous mode [ 183.032245][ T7552] __nla_validate_parse: 66 callbacks suppressed [ 183.032263][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 183.045854][ T7543] veth1_to_team: entered promiscuous mode [ 183.064588][ T7543] veth0_to_batadv: entered promiscuous mode [ 183.070730][ T7543] batadv_slave_0: entered promiscuous mode [ 183.082225][ T7543] veth1_to_batadv: entered promiscuous mode [ 183.089389][ T7543] batadv_slave_1: entered promiscuous mode [ 183.095531][ T7543] xfrm0: entered promiscuous mode [ 183.100717][ T7543] veth0_to_hsr: entered promiscuous mode [ 183.106893][ T7543] veth1_to_hsr: entered promiscuous mode [ 183.112726][ T7543] hsr0: entered promiscuous mode [ 183.118792][ T7543] veth1_virt_wifi: entered promiscuous mode [ 183.124970][ T7543] veth0_virt_wifi: entered promiscuous mode [ 183.131033][ T7543] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 183.138769][ T7543] vlan0: entered promiscuous mode [ 183.144355][ T7543] vlan1: entered promiscuous mode [ 183.149613][ T7543] macvlan0: entered promiscuous mode [ 183.155170][ T7543] macvlan1: entered promiscuous mode [ 183.160629][ T7543] ipvlan0: entered promiscuous mode [ 183.166339][ T7543] macvtap0: entered promiscuous mode [ 183.171742][ T7543] macsec0: entered promiscuous mode [ 183.177391][ T7543] geneve0: entered promiscuous mode [ 183.182812][ T7543] geneve1: entered promiscuous mode [ 183.189377][ T7543] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 183.196899][ T7543] bond1: entered promiscuous mode [ 183.202109][ T7543] netdevsim netdevsim4 eth0: entered promiscuous mode [ 183.209177][ T7543] netdevsim netdevsim4 eth1: entered promiscuous mode [ 183.216535][ T7543] netdevsim netdevsim4 eth2: entered promiscuous mode [ 183.223663][ T7543] netdevsim netdevsim4 eth3: entered promiscuous mode [ 183.440669][ T7556] xt_hashlimit: invalid rate [ 183.449872][ T7556] syz_tun: entered allmulticast mode [ 183.508965][ T7555] syz_tun: left allmulticast mode [ 183.807099][ T7568] sctp: [Deprecated]: syz.4.335 (pid 7568) Use of int in max_burst socket option. [ 183.807099][ T7568] Use struct sctp_assoc_value instead [ 183.927892][ T7564] lo speed is unknown, defaulting to 1000 [ 184.038772][ T7564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.340'. [ 184.058937][ T7564] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 184.107063][ T7568] netlink: 'syz.4.335': attribute type 10 has an invalid length. [ 184.123981][ T7576] syzkaller1: entered promiscuous mode [ 184.187140][ T7576] syzkaller1: entered allmulticast mode [ 184.262218][ T7568] team0: Device veth0_vlan failed to register rx_handler [ 184.697855][ T7578] lo speed is unknown, defaulting to 1000 [ 185.184542][ T7591] IPVS: Unknown mcast interface: vcan0 [ 185.242436][ T7587] lo speed is unknown, defaulting to 1000 [ 185.750497][ T7602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.774765][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 188.763840][ T7624] lo speed is unknown, defaulting to 1000 [ 189.171506][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.356'. [ 189.448853][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 189.912394][ T7665] lo speed is unknown, defaulting to 1000 [ 190.037007][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 190.185740][ T7669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.359'. [ 194.235860][ T7714] lo: entered promiscuous mode [ 194.244533][ T7714] tunl0: entered promiscuous mode [ 194.249794][ T7714] gre0: entered promiscuous mode [ 194.268846][ T7714] gretap0: entered promiscuous mode [ 194.279440][ T7714] erspan0: entered promiscuous mode [ 194.289428][ T7714] ip_vti0: entered promiscuous mode [ 194.309341][ T7714] ip6_vti0: entered promiscuous mode [ 194.318608][ T7714] sit0: entered promiscuous mode [ 194.347583][ T7714] ip6tnl0: entered promiscuous mode [ 194.352992][ T7714] ip6gre0: entered promiscuous mode [ 194.371675][ T7714] syz_tun: entered promiscuous mode [ 194.383397][ T7714] ip6gretap0: entered promiscuous mode [ 194.394154][ T7714] bridge0: entered promiscuous mode [ 194.401407][ T7714] bond0: entered promiscuous mode [ 194.407333][ T7714] team0: entered promiscuous mode [ 194.412680][ T7714] nlmon0: entered promiscuous mode [ 194.423324][ T7714] caif0: entered promiscuous mode [ 194.433766][ T7714] batadv0: entered promiscuous mode [ 194.449851][ T7714] vxcan0: entered promiscuous mode [ 194.463815][ T7714] vxcan1: entered promiscuous mode [ 194.474188][ T7714] veth0: entered promiscuous mode [ 194.484302][ T7714] veth1: entered promiscuous mode [ 194.492414][ T7714] wg0: entered promiscuous mode [ 194.505428][ T7714] wg1: entered promiscuous mode [ 194.519438][ T7714] wg2: entered promiscuous mode [ 194.526551][ T7714] veth0_to_bridge: entered promiscuous mode [ 194.532870][ T7714] bridge_slave_0: entered promiscuous mode [ 194.548987][ T7714] veth1_to_bridge: entered promiscuous mode [ 194.560438][ T7714] bridge_slave_1: entered promiscuous mode [ 194.580405][ T7714] veth0_to_bond: entered promiscuous mode [ 194.588809][ T7714] bond_slave_0: entered promiscuous mode [ 194.601784][ T7714] veth1_to_bond: entered promiscuous mode [ 194.610251][ T7714] bond_slave_1: entered promiscuous mode [ 194.625250][ T7714] veth0_to_team: entered promiscuous mode [ 194.631363][ T7714] team_slave_0: entered promiscuous mode [ 194.644053][ T7714] veth1_to_team: entered promiscuous mode [ 194.651679][ T7714] team_slave_1: entered promiscuous mode [ 194.666990][ T7714] veth0_to_batadv: entered promiscuous mode [ 194.673416][ T7714] batadv_slave_0: entered promiscuous mode [ 194.680282][ T7714] veth1_to_batadv: entered promiscuous mode [ 194.687089][ T7714] batadv_slave_1: entered promiscuous mode [ 194.694124][ T7714] xfrm0: entered promiscuous mode [ 194.699779][ T7714] veth0_to_hsr: entered promiscuous mode [ 194.706341][ T7714] veth1_to_hsr: entered promiscuous mode [ 194.712713][ T7714] hsr0: entered promiscuous mode [ 194.719026][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.729066][ T7714] veth1_virt_wifi: entered promiscuous mode [ 194.735584][ T7714] veth0_virt_wifi: entered promiscuous mode [ 194.741900][ T7714] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 194.749958][ T7714] vlan0: entered promiscuous mode [ 194.755665][ T7714] vlan1: entered promiscuous mode [ 194.761400][ T7714] macvlan0: entered promiscuous mode [ 194.767245][ T7714] macvlan1: entered promiscuous mode [ 194.773054][ T7714] ipvlan0: entered promiscuous mode [ 194.778904][ T7714] ipvlan1: entered promiscuous mode [ 194.789208][ T7714] macvtap0: entered promiscuous mode [ 194.795131][ T7714] macsec0: entered promiscuous mode [ 194.801064][ T7714] geneve0: entered promiscuous mode [ 194.807137][ T7714] geneve1: entered promiscuous mode [ 194.813044][ T7714] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 194.831476][ T7714] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 194.841856][ T7714] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 194.850089][ T7714] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 194.858597][ T7714] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 194.866385][ T7714] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 194.875033][ T7714] ip6erspan0: entered promiscuous mode [ 194.880969][ T7714] mac80211_hwsim hwsim14 wlan2: entered promiscuous mode [ 195.045602][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 195.094283][ T7730] netlink: 32 bytes leftover after parsing attributes in process `syz.2.370'. [ 195.166254][ T7730] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 195.194863][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'. [ 195.224453][ T7730] gretap1: entered promiscuous mode [ 195.267957][ T7732] lo speed is unknown, defaulting to 1000 [ 195.281527][ T7730] netlink: 'syz.2.370': attribute type 10 has an invalid length. [ 195.414947][ T7730] macvlan0: entered allmulticast mode [ 195.421302][ T7730] veth1_vlan: entered allmulticast mode [ 195.431980][ T7730] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 195.466829][ T7736] netlink: 'syz.3.372': attribute type 29 has an invalid length. [ 195.642992][ T7742] netlink: 'syz.3.372': attribute type 29 has an invalid length. [ 195.891706][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 195.964757][ T7742] IPv6: sit1: Disabled Multicast RS [ 195.970837][ T7742] sit1: entered allmulticast mode [ 196.441487][ T7758] lo speed is unknown, defaulting to 1000 [ 196.625085][ T7765] netlink: 64 bytes leftover after parsing attributes in process `syz.3.376'. [ 196.641313][ T7766] netlink: 44 bytes leftover after parsing attributes in process `syz.1.377'. [ 197.057863][ T7763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.067074][ T7763] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.082019][ T7763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.731160][ T7778] tipc: Started in network mode [ 197.755202][ T7778] tipc: Node identity 9ad043f62d06, cluster identity 4711 [ 197.762622][ T7778] tipc: Enabled bearer , priority 0 [ 197.815224][ T7777] tipc: Resetting bearer [ 197.943629][ T7777] tipc: Resetting bearer [ 198.220085][ T7789] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 198.330705][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 198.805823][ T7272] tipc: Node number set to 3084272630 [ 200.370618][ T7777] tipc: Disabling bearer [ 200.479368][ T7797] syzkaller1: entered promiscuous mode [ 200.491711][ T7797] syzkaller1: entered allmulticast mode [ 200.586963][ T7811] lo speed is unknown, defaulting to 1000 [ 200.946809][ T7817] lo speed is unknown, defaulting to 1000 [ 201.502067][ T7827] team0 (unregistering): Port device team_slave_0 removed [ 201.524321][ T7827] team0 (unregistering): Port device team_slave_1 removed [ 201.870846][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 202.155769][ T7843] lo speed is unknown, defaulting to 1000 [ 202.359611][ T7848] lo speed is unknown, defaulting to 1000 [ 202.431650][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 202.660331][ T7861] netlink: 'syz.3.396': attribute type 21 has an invalid length. [ 202.685523][ T7860] pimreg0: tun_chr_ioctl cmd 1074025677 [ 202.691310][ T7860] pimreg0: linktype set to 65534 [ 202.710412][ T7861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.396'. [ 202.790244][ T7835] IPVS: length: 78 != 8 [ 203.200036][ T7874] lo speed is unknown, defaulting to 1000 [ 203.434901][ T7874] netlink: 16 bytes leftover after parsing attributes in process `syz.0.398'. [ 204.371780][ T7881] xt_hashlimit: invalid rate [ 204.823909][ T7881] syz_tun: entered allmulticast mode [ 205.461822][ T7887] netlink: 'syz.1.400': attribute type 29 has an invalid length. [ 205.560301][ T7887] netlink: 'syz.1.400': attribute type 29 has an invalid length. [ 206.174251][ T7887] IPv6: sit1: Disabled Multicast RS [ 206.191252][ T7887] sit1: entered allmulticast mode [ 206.294191][ T7913] sctp: [Deprecated]: syz.4.404 (pid 7913) Use of int in max_burst socket option deprecated. [ 206.294191][ T7913] Use struct sctp_assoc_value instead [ 206.450767][ T7929] netlink: 60 bytes leftover after parsing attributes in process `syz.3.405'. [ 206.650001][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 206.666950][ T7909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.837136][ T7936] xt_hashlimit: invalid rate [ 206.896826][ T7936] syz_tun: entered allmulticast mode [ 206.920911][ T7935] syz_tun: left allmulticast mode [ 207.036750][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 207.042936][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 207.052188][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 207.122110][ T7941] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 207.472998][ T7952] lo speed is unknown, defaulting to 1000 [ 207.861767][ T7950] lo speed is unknown, defaulting to 1000 [ 207.932451][ T7958] lo speed is unknown, defaulting to 1000 [ 208.229767][ T7972] macvtap1: entered promiscuous mode [ 208.238897][ T7972] macvtap1: entered allmulticast mode [ 208.297023][ T7972] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 208.402083][ T7980] ipt_ECN: cannot use operation on non-tcp rule [ 208.411248][ T7972] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 208.815324][ T7984] lo speed is unknown, defaulting to 1000 [ 209.256842][ T7996] lo speed is unknown, defaulting to 1000 [ 209.310257][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 209.332484][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'. [ 209.384204][ T7994] netlink: 'syz.1.415': attribute type 1 has an invalid length. [ 209.392467][ T7994] netlink: 228 bytes leftover after parsing attributes in process `syz.1.415'. [ 209.466063][ T8008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 209.517471][ T8010] netlink: 'syz.3.427': attribute type 5 has an invalid length. [ 209.572676][ T7950] lo speed is unknown, defaulting to 1000 [ 210.268360][ T7984] lo speed is unknown, defaulting to 1000 [ 210.430013][ T8024] 8021q: VLANs not supported on tunl0 [ 210.491539][ T7984] lo: entered promiscuous mode [ 210.500484][ T7984] tunl0: entered promiscuous mode [ 210.507877][ T7984] gre0: entered promiscuous mode [ 210.520928][ T7984] gretap0: entered promiscuous mode [ 210.593672][ T7984] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 212.580931][ T8043] lo: entered promiscuous mode [ 212.586033][ T8043] tunl0: entered promiscuous mode [ 212.591441][ T8043] gre0: entered promiscuous mode [ 212.596638][ T8043] gretap0: entered promiscuous mode [ 212.602161][ T8043] erspan0: entered promiscuous mode [ 212.607731][ T8043] ip_vti0: entered promiscuous mode [ 212.613367][ T8043] ip6_vti0: entered promiscuous mode [ 212.619050][ T8043] sit0: entered promiscuous mode [ 212.624575][ T8043] ip6tnl0: entered promiscuous mode [ 212.630041][ T8043] ip6gre0: entered promiscuous mode [ 212.635567][ T8043] syz_tun: entered promiscuous mode [ 212.640982][ T8043] ip6gretap0: entered promiscuous mode [ 212.646747][ T8043] bond0: entered promiscuous mode [ 212.651829][ T8043] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 212.659297][ T8043] dummy0: entered promiscuous mode [ 212.664675][ T8043] nlmon0: entered promiscuous mode [ 212.670079][ T8043] caif0: entered promiscuous mode [ 212.675390][ T8043] batadv0: entered promiscuous mode [ 212.683667][ T8043] vxcan0: entered promiscuous mode [ 212.688969][ T8043] vxcan1: entered promiscuous mode [ 212.694415][ T8043] veth0: entered promiscuous mode [ 212.699663][ T8043] veth1: entered promiscuous mode [ 212.705104][ T8043] wg0: entered promiscuous mode [ 212.710171][ T8043] wg1: entered promiscuous mode [ 212.715338][ T8043] wg2: entered promiscuous mode [ 212.720398][ T8043] veth0_to_bridge: entered promiscuous mode [ 212.726593][ T8043] bridge_slave_0: entered promiscuous mode [ 212.732610][ T8043] veth0_to_bond: entered promiscuous mode [ 212.738763][ T8043] bond_slave_0: entered promiscuous mode [ 212.744735][ T8043] veth1_to_bond: entered promiscuous mode [ 212.750728][ T8043] bond_slave_1: entered promiscuous mode [ 212.756672][ T8043] veth0_to_team: entered promiscuous mode [ 212.762679][ T8043] team_slave_0: entered promiscuous mode [ 212.768629][ T8043] veth1_to_team: entered promiscuous mode [ 212.774682][ T8043] team_slave_1: entered promiscuous mode [ 212.780497][ T8043] veth0_to_batadv: entered promiscuous mode [ 212.786652][ T8043] batadv_slave_0: entered promiscuous mode [ 212.792671][ T8043] veth1_to_batadv: entered promiscuous mode [ 212.798828][ T8043] batadv_slave_1: entered promiscuous mode [ 212.804981][ T8043] xfrm0: entered promiscuous mode [ 212.810283][ T8043] veth0_to_hsr: entered promiscuous mode [ 212.816346][ T8043] veth1_to_hsr: entered promiscuous mode [ 212.822275][ T8043] hsr0: entered promiscuous mode [ 212.827497][ T8043] veth1_virt_wifi: entered promiscuous mode [ 212.833656][ T8043] veth0_virt_wifi: entered promiscuous mode [ 212.839746][ T8043] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 212.847453][ T8043] vlan0: entered promiscuous mode [ 212.852763][ T8043] vlan1: entered promiscuous mode [ 212.858327][ T8043] macvlan0: entered promiscuous mode [ 212.863893][ T8043] macvlan1: entered promiscuous mode [ 212.869680][ T8043] ipvlan0: entered promiscuous mode [ 212.875217][ T8043] ipvlan1: entered promiscuous mode [ 212.881243][ T8043] macvtap0: entered promiscuous mode [ 212.886822][ T8043] macsec0: entered promiscuous mode [ 212.892307][ T8043] geneve0: entered promiscuous mode [ 212.897781][ T8043] geneve1: entered promiscuous mode [ 212.903253][ T8043] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 212.910598][ T8043] ip6tnl1: entered promiscuous mode [ 212.916247][ T8043] veth2: entered promiscuous mode [ 212.921460][ T8043] veth3: entered promiscuous mode [ 212.926799][ T8043] syztnl0: entered promiscuous mode [ 212.932233][ T8043] bridge1: entered promiscuous mode [ 212.937740][ T8043] macvlan2: entered promiscuous mode [ 212.943250][ T8043] bond1: entered promiscuous mode [ 212.948623][ T8043] batadv1: entered promiscuous mode [ 212.954424][ T8043] ip6erspan0: entered promiscuous mode [ 212.960066][ T8043] vlan4: entered promiscuous mode [ 212.965743][ T8043] netdevsim netdevsim0 eth0: entered promiscuous mode [ 212.972717][ T8043] netdevsim netdevsim0 eth1: entered promiscuous mode [ 212.979763][ T8043] netdevsim netdevsim0 eth2: entered promiscuous mode [ 212.986802][ T8043] netdevsim netdevsim0 eth3: entered promiscuous mode [ 212.993888][ T8043] veth4: entered promiscuous mode [ 212.999121][ T8043] veth5: entered promiscuous mode [ 213.085582][ T8049] lo speed is unknown, defaulting to 1000 [ 213.651949][ T8069] lo speed is unknown, defaulting to 1000 [ 213.797335][ T8069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.444'. [ 213.825161][ T8069] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 213.837796][ T8069] netlink: 830 bytes leftover after parsing attributes in process `syz.0.444'. [ 214.145545][ T8074] Cannot find del_set index 2416 as target [ 214.422186][ T8084] netlink: 'syz.2.447': attribute type 5 has an invalid length. [ 214.487768][ T8090] netlink: 'syz.0.451': attribute type 5 has an invalid length. [ 214.544569][ T8047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.436'. [ 214.763588][ T8047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.960440][ T8100] netlink: 44 bytes leftover after parsing attributes in process `syz.3.453'. [ 215.115798][ T8107] trusted_key: syz.0.457 sent an empty control message without MSG_MORE. [ 215.238983][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 215.432764][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.450762][ T8111] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.475327][ T8111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.508310][ T8114] bridge0: entered promiscuous mode [ 215.514776][ T8114] bridge0: entered allmulticast mode [ 216.215116][ T8133] lo speed is unknown, defaulting to 1000 [ 216.509817][ T8147] netlink: 'syz.3.467': attribute type 5 has an invalid length. [ 216.625635][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 216.810790][ T8156] lo speed is unknown, defaulting to 1000 [ 217.103604][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 217.860233][ T8185] netlink: 830 bytes leftover after parsing attributes in process `syz.3.478'. [ 218.131423][ T8191] lo speed is unknown, defaulting to 1000 [ 218.180984][ T8200] netlink: 'syz.2.481': attribute type 5 has an invalid length. [ 218.214366][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 218.301804][ T8206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.479'. [ 218.659934][ T8213] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 219.080894][ T8220] netlink: 48 bytes leftover after parsing attributes in process `syz.2.486'. [ 219.287656][ T8227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.489'. [ 219.345805][ T8227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.489'. [ 219.540977][ T8240] netlink: 'syz.3.489': attribute type 2 has an invalid length. [ 219.689050][ T8245] lo speed is unknown, defaulting to 1000 [ 219.859509][ T8252] __nla_validate_parse: 2 callbacks suppressed [ 219.859529][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 219.981027][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 220.127084][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.494'. [ 220.411414][ T8269] netlink: 'syz.3.497': attribute type 5 has an invalid length. [ 221.086654][ T8284] netlink: 'syz.3.504': attribute type 5 has an invalid length. [ 221.118571][ T8279] bridge0: left allmulticast mode [ 221.124336][ T8279] bond2: entered promiscuous mode [ 221.269109][ T8287] lo speed is unknown, defaulting to 1000 [ 221.304302][ T8291] netlink: 'syz.0.506': attribute type 1 has an invalid length. [ 221.372284][ T8291] bond3: entered promiscuous mode [ 221.382628][ T8291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.424520][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 221.460422][ T8291] netlink: 3 bytes leftover after parsing attributes in process `syz.0.506'. [ 221.476614][ T8291] batadv2: entered allmulticast mode [ 221.483671][ T8291] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 221.492229][ T8291] bond3: (slave batadv2): making interface the new active one [ 221.499847][ T8291] batadv2: entered promiscuous mode [ 221.506153][ T8291] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 221.517953][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.507'. [ 221.784347][ T8307] netlink: 'syz.2.509': attribute type 5 has an invalid length. [ 222.133634][ T8316] netlink: 'syz.0.514': attribute type 21 has an invalid length. [ 222.141682][ T8316] netlink: 128 bytes leftover after parsing attributes in process `syz.0.514'. [ 222.152764][ T8316] netlink: 'syz.0.514': attribute type 5 has an invalid length. [ 222.160504][ T8316] netlink: 'syz.0.514': attribute type 6 has an invalid length. [ 222.168370][ T8316] netlink: 3 bytes leftover after parsing attributes in process `syz.0.514'. [ 222.181264][ T8316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.514'. [ 222.195608][ T8316] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.203993][ T8316] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.212228][ T8316] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.220952][ T8316] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.309050][ T8322] netlink: 'syz.3.515': attribute type 5 has an invalid length. [ 222.352059][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 222.408526][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'. [ 222.434245][ T8320] netlink: 'syz.2.513': attribute type 1 has an invalid length. [ 222.504563][ T8320] nbd: socks must be embedded in a SOCK_ITEM attr [ 222.534227][ T8320] block nbd1: shutting down sockets [ 223.163388][ T8342] lo speed is unknown, defaulting to 1000 [ 223.539799][ T8350] lo speed is unknown, defaulting to 1000 [ 224.488692][ T8378] lo: left promiscuous mode [ 224.537924][ T8378] tunl0: left promiscuous mode [ 224.552375][ T8378] gre0: left promiscuous mode [ 224.606641][ T8378] gretap0: left promiscuous mode [ 224.645336][ T8378] erspan0: left promiscuous mode [ 224.670612][ T8378] ip_vti0: left promiscuous mode [ 224.714647][ T8378] ip6_vti0: left promiscuous mode [ 224.753558][ T8378] sit0: left promiscuous mode [ 224.789095][ T8378] ip6tnl0: left promiscuous mode [ 224.805655][ T8378] ip6gre0: left promiscuous mode [ 224.812149][ T8378] syz_tun: left promiscuous mode [ 224.828100][ T8378] ip6gretap0: left promiscuous mode [ 224.842906][ T8378] bond0: left promiscuous mode [ 224.859021][ T8378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.870974][ T8378] dummy0: left promiscuous mode [ 224.887779][ T8378] nlmon0: left promiscuous mode [ 224.900175][ T8378] caif0: left promiscuous mode [ 224.909545][ T8378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.354311][ T8399] validate_nla: 1 callbacks suppressed [ 225.354333][ T8399] netlink: 'syz.3.534': attribute type 5 has an invalid length. [ 225.977899][ T8416] netlink: 'syz.0.542': attribute type 10 has an invalid length. [ 226.298228][ T8421] __nla_validate_parse: 5 callbacks suppressed [ 226.298251][ T8421] netlink: 44 bytes leftover after parsing attributes in process `syz.2.544'. [ 226.315104][ T8419] lo: entered promiscuous mode [ 226.338540][ T8419] tunl0: entered promiscuous mode [ 226.368191][ T8419] gre0: entered promiscuous mode [ 226.415174][ T8419] gretap0: entered promiscuous mode [ 226.600818][ T8419] erspan0: entered promiscuous mode [ 226.619879][ T8419] ip_vti0: entered promiscuous mode [ 226.653262][ T8419] ip6_vti0: entered promiscuous mode [ 226.715377][ T8419] sit0: entered promiscuous mode [ 226.810770][ T8419] ip6tnl0: entered promiscuous mode [ 226.896814][ T8435] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.948019][ T8419] ip6gre0: entered promiscuous mode [ 226.993787][ T8419] syz_tun: entered promiscuous mode [ 227.005303][ T8419] ip6gretap0: entered promiscuous mode [ 227.032219][ T8419] vcan0: entered promiscuous mode [ 227.057190][ T8419] bond0: entered promiscuous mode [ 227.062304][ T8419] bond_slave_0: entered promiscuous mode [ 227.098276][ T8419] bond_slave_1: entered promiscuous mode [ 227.142662][ T8419] team0: entered promiscuous mode [ 227.163838][ T8419] team_slave_0: entered promiscuous mode [ 227.171252][ T8419] team_slave_1: entered promiscuous mode [ 227.177598][ T8419] macvlan2: entered promiscuous mode [ 227.192059][ T8419] dummy0: entered promiscuous mode [ 227.207425][ T8419] nlmon0: entered promiscuous mode [ 227.224937][ T8419] caif0: entered promiscuous mode [ 227.236054][ T8419] batadv0: entered promiscuous mode [ 227.241991][ T8419] vxcan0: entered promiscuous mode [ 227.247672][ T8419] vxcan1: entered promiscuous mode [ 227.252972][ T8419] veth0: entered promiscuous mode [ 227.258688][ T8419] veth1: entered promiscuous mode [ 227.264253][ T8419] wg0: entered promiscuous mode [ 227.269596][ T8419] wg1: entered promiscuous mode [ 227.275035][ T8419] wg2: entered promiscuous mode [ 227.280275][ T8419] veth0_to_bridge: entered promiscuous mode [ 227.286426][ T8419] bridge_slave_0: entered promiscuous mode [ 227.292857][ T8419] veth1_to_bridge: entered promiscuous mode [ 227.299698][ T8419] bridge_slave_1: entered promiscuous mode [ 227.305993][ T8419] veth0_to_bond: entered promiscuous mode [ 227.312006][ T8419] veth1_to_bond: entered promiscuous mode [ 227.318164][ T8419] veth0_to_team: entered promiscuous mode [ 227.324287][ T8419] veth1_to_team: entered promiscuous mode [ 227.330259][ T8419] veth0_to_batadv: entered promiscuous mode [ 227.338446][ T8419] batadv_slave_0: entered promiscuous mode [ 227.345705][ T8419] veth1_to_batadv: entered promiscuous mode [ 227.360253][ T8419] batadv_slave_1: entered promiscuous mode [ 227.366898][ T8419] xfrm0: entered promiscuous mode [ 227.372096][ T8419] veth0_to_hsr: entered promiscuous mode [ 227.383594][ T8419] veth1_to_hsr: entered promiscuous mode [ 227.389446][ T8419] hsr0: entered promiscuous mode [ 227.395554][ T8419] veth1_virt_wifi: entered promiscuous mode [ 227.401724][ T8419] veth0_virt_wifi: entered promiscuous mode [ 227.407967][ T8419] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 227.416942][ T8419] vlan0: entered promiscuous mode [ 227.422262][ T8419] macvlan0: entered promiscuous mode [ 227.433850][ T8419] macvlan1: entered promiscuous mode [ 227.439346][ T8419] ipvlan0: entered promiscuous mode [ 227.450175][ T8419] ipvlan1: entered promiscuous mode [ 227.457085][ T8419] macvtap0: entered promiscuous mode [ 227.462513][ T8419] macsec0: entered promiscuous mode [ 227.473034][ T8419] geneve0: entered promiscuous mode [ 227.479744][ T8419] geneve1: entered promiscuous mode [ 227.490344][ T8419] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 227.498525][ T8419] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 227.511317][ T8419] syztnl2: entered promiscuous mode [ 227.517799][ T8419] bridge1: entered promiscuous mode [ 227.523128][ T8419] bridge2: entered promiscuous mode [ 227.533694][ T8419] netdevsim netdevsim3 eth0: entered promiscuous mode [ 227.540634][ T8419] netdevsim netdevsim3 eth1: entered promiscuous mode [ 227.552474][ T8419] netdevsim netdevsim3 eth2: entered promiscuous mode [ 227.559754][ T8419] netdevsim netdevsim3 eth3: entered promiscuous mode [ 227.566889][ T8419] ip6erspan0: entered promiscuous mode [ 227.572612][ T8419] : entered promiscuous mode [ 227.577727][ T8419] vlan4: entered promiscuous mode [ 227.593181][ T8424] veth1_vlan: left allmulticast mode [ 227.640253][ T8425] lo: left promiscuous mode [ 227.658164][ T8425] tunl0: left promiscuous mode [ 227.665685][ T8425] gre0: left promiscuous mode [ 227.673634][ T8425] gretap0: left promiscuous mode [ 227.680526][ T8425] erspan0: left promiscuous mode [ 227.686005][ T8440] netlink: 'syz.3.549': attribute type 2 has an invalid length. [ 227.687601][ T8425] ip_vti0: left promiscuous mode [ 227.700241][ T8425] ip6_vti0: left promiscuous mode [ 227.707191][ T8425] sit0: left promiscuous mode [ 227.716494][ T8425] ip6tnl0: left promiscuous mode [ 227.723084][ T8425] ip6gre0: left promiscuous mode [ 227.730966][ T8425] syz_tun: left promiscuous mode [ 227.738494][ T8425] ip6gretap0: left promiscuous mode [ 227.745931][ T8425] bridge0: left promiscuous mode [ 227.751876][ T8425] bond0: left promiscuous mode [ 227.759697][ T8425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.767894][ T8425] team0: left promiscuous mode [ 227.773181][ T8425] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.782359][ T8425] nlmon0: left promiscuous mode [ 227.788741][ T8425] caif0: left promiscuous mode [ 227.793696][ T8425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.862038][ T7320] lo speed is unknown, defaulting to 1000 [ 227.863909][ T8440] netlink: 830 bytes leftover after parsing attributes in process `syz.3.549'. [ 228.098498][ T8446] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 228.190051][ T8451] lo speed is unknown, defaulting to 1000 [ 228.411278][ T8463] xt_hashlimit: invalid rate [ 231.026641][ T8488] batadv2: left allmulticast mode [ 231.054589][ T8488] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.064791][ T8488] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.073845][ T8488] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.084011][ T8488] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.114132][ T8488] geneve2: entered promiscuous mode [ 231.421624][ T8495] lo speed is unknown, defaulting to 1000 [ 231.492384][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 231.614106][ T8511] lo speed is unknown, defaulting to 1000 [ 231.687916][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 232.257798][ T8530] xt_l2tp: unknown flags: 10 [ 232.269582][ T8532] siw: device registration error -23 [ 232.367779][ T8495] lo speed is unknown, defaulting to 1000 [ 232.879718][ T8495] netlink: 'syz.4.560': attribute type 1 has an invalid length. [ 232.924718][ T8495] netlink: 228 bytes leftover after parsing attributes in process `syz.4.560'. [ 233.419385][ T8557] xt_hashlimit: invalid rate [ 233.926745][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 235.581092][ T8555] lo: entered promiscuous mode [ 235.587764][ T8555] tunl0: entered promiscuous mode [ 235.594320][ T8555] gre0: entered promiscuous mode [ 235.602615][ T8555] gretap0: entered promiscuous mode [ 235.610177][ T8555] erspan0: entered promiscuous mode [ 235.618131][ T8555] ip_vti0: entered promiscuous mode [ 235.635051][ T8555] ip6_vti0: entered promiscuous mode [ 235.643348][ T8555] sit0: entered promiscuous mode [ 235.680275][ T8555] ip6tnl0: entered promiscuous mode [ 235.690700][ T8555] ip6gre0: entered promiscuous mode [ 235.702363][ T8555] syz_tun: entered promiscuous mode [ 235.710639][ T8555] ip6gretap0: entered promiscuous mode [ 235.718747][ T8555] bridge0: entered promiscuous mode [ 235.725967][ T8555] bond0: entered promiscuous mode [ 235.731165][ T8555] bond_slave_0: entered promiscuous mode [ 235.737636][ T8555] bond_slave_1: entered promiscuous mode [ 235.746142][ T8555] team0: entered promiscuous mode [ 235.751446][ T8555] team_slave_0: entered promiscuous mode [ 235.758357][ T8555] team_slave_1: entered promiscuous mode [ 235.765642][ T8555] dummy0: entered promiscuous mode [ 235.773563][ T8555] nlmon0: entered promiscuous mode [ 235.780552][ T8555] caif0: entered promiscuous mode [ 235.785867][ T8555] batadv0: entered promiscuous mode [ 235.791218][ T8555] vxcan0: entered promiscuous mode [ 235.796824][ T8555] vxcan1: entered promiscuous mode [ 235.802122][ T8555] veth0: entered promiscuous mode [ 235.807364][ T8555] veth1: entered promiscuous mode [ 235.812592][ T8555] wg0: entered promiscuous mode [ 235.817820][ T8555] wg1: entered promiscuous mode [ 235.822809][ T8555] wg2: entered promiscuous mode [ 235.827925][ T8555] veth0_to_bridge: entered promiscuous mode [ 235.834388][ T8555] veth1_to_bridge: entered promiscuous mode [ 235.840802][ T8555] veth0_to_bond: entered promiscuous mode [ 235.846891][ T8555] veth1_to_bond: entered promiscuous mode [ 235.852843][ T8555] veth0_to_team: entered promiscuous mode [ 235.859029][ T8555] veth1_to_team: entered promiscuous mode [ 235.865210][ T8555] veth0_to_batadv: entered promiscuous mode [ 235.871274][ T8555] batadv_slave_0: entered promiscuous mode [ 235.877469][ T8555] veth1_to_batadv: entered promiscuous mode [ 235.883638][ T8555] batadv_slave_1: entered promiscuous mode [ 235.889604][ T8555] xfrm0: entered promiscuous mode [ 235.895018][ T8555] veth0_to_hsr: entered promiscuous mode [ 235.900892][ T8555] veth1_to_hsr: entered promiscuous mode [ 235.907345][ T8555] hsr0: entered promiscuous mode [ 235.912431][ T8555] veth1_virt_wifi: entered promiscuous mode [ 235.918640][ T8555] veth0_virt_wifi: entered promiscuous mode [ 235.924786][ T8555] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 235.932264][ T8555] vlan0: entered promiscuous mode [ 235.937682][ T8555] vlan1: entered promiscuous mode [ 235.942926][ T8555] macvlan0: entered promiscuous mode [ 235.948460][ T8555] macvlan1: entered promiscuous mode [ 235.954086][ T8555] ipvlan0: entered promiscuous mode [ 235.959435][ T8555] ipvlan1: entered promiscuous mode [ 235.965101][ T8555] macvtap0: entered promiscuous mode [ 235.970697][ T8555] macsec0: entered promiscuous mode [ 235.976275][ T8555] geneve0: entered promiscuous mode [ 235.981629][ T8555] geneve1: entered promiscuous mode [ 235.987386][ T8555] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 235.994586][ T8555] bridge1: entered promiscuous mode [ 235.999981][ T8555] vlan0004: entered promiscuous mode [ 236.005594][ T8555] netdevsim netdevsim1 eth0: entered promiscuous mode [ 236.012530][ T8555] netdevsim netdevsim1 eth1: entered promiscuous mode [ 236.019677][ T8555] netdevsim netdevsim1 eth2: entered promiscuous mode [ 236.027080][ T8555] netdevsim netdevsim1 eth3: entered promiscuous mode [ 236.034490][ T8555] macvlan2: entered promiscuous mode [ 236.040289][ T8557] syz_tun: entered allmulticast mode [ 236.582882][ T8595] netlink: 'syz.0.585': attribute type 5 has an invalid length. [ 236.762413][ T8602] xt_hashlimit: invalid rate [ 236.786193][ T8597] lo speed is unknown, defaulting to 1000 [ 237.250270][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.587'. [ 237.572809][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 237.864698][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 237.883027][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.595'. [ 240.104866][ T8645] lo speed is unknown, defaulting to 1000 [ 240.252220][ T8653] netlink: 'syz.2.598': attribute type 5 has an invalid length. [ 240.515704][ T8658] xt_hashlimit: invalid rate [ 241.065499][ T8673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 241.241359][ T8684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.605'. [ 241.325591][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 241.427508][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'. [ 242.044601][ T8705] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 242.136055][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'. [ 242.182015][ T8699] lo speed is unknown, defaulting to 1000 [ 242.501776][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'. [ 243.107412][ T8730] lo speed is unknown, defaulting to 1000 [ 244.143964][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 244.287761][ T8749] lo speed is unknown, defaulting to 1000 [ 244.559327][ T8766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.632'. [ 244.973357][ T8775] lo speed is unknown, defaulting to 1000 [ 245.400551][ T8780] netlink: 'syz.1.637': attribute type 5 has an invalid length. [ 245.619808][ T8788] xt_hashlimit: invalid rate [ 245.904875][ T8804] netlink: 64 bytes leftover after parsing attributes in process `syz.0.642'. [ 246.377247][ T8809] lo speed is unknown, defaulting to 1000 [ 246.448676][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 246.597020][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.648'. [ 246.708266][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 246.779746][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.650'. [ 246.837118][ T8830] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 246.851859][ T8826] tc_dump_action: action bad kind [ 246.925852][ T8832] netlink: 'syz.1.651': attribute type 1 has an invalid length. [ 247.133029][ T8841] xt_hashlimit: invalid rate [ 247.173797][ T8845] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 247.347587][ T8838] lo speed is unknown, defaulting to 1000 [ 247.376197][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 247.658319][ T8862] lo speed is unknown, defaulting to 1000 [ 247.737064][ T8863] lo speed is unknown, defaulting to 1000 [ 247.942838][ T8872] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 248.159895][ T8869] lo speed is unknown, defaulting to 1000 [ 249.046317][ T8898] lo speed is unknown, defaulting to 1000 [ 249.324739][ T8903] syz_tun: entered allmulticast mode [ 249.374656][ T8902] xt_hashlimit: invalid rate [ 249.453694][ T8898] lo speed is unknown, defaulting to 1000 [ 249.531127][ T8899] syz_tun: left allmulticast mode [ 249.734512][ T8905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.753771][ T8905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.409534][ T8908] lo speed is unknown, defaulting to 1000 [ 250.556278][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 250.753203][ T8935] xt_hashlimit: invalid rate [ 251.343096][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 251.461909][ T8954] lo speed is unknown, defaulting to 1000 [ 251.997203][ T8968] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.838477][ T8993] netlink: 'syz.2.702': attribute type 5 has an invalid length. [ 253.061088][ T8999] netlink: 'syz.3.703': attribute type 5 has an invalid length. [ 253.267039][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'. [ 253.683149][ T9016] xt_CT: No such helper "netbios-ns" [ 253.725006][ T9021] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 253.952504][ T9033] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.060211][ T9031] lo speed is unknown, defaulting to 1000 [ 254.072944][ T9039] netlink: 'syz.4.717': attribute type 5 has an invalid length. [ 254.242936][ T9046] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 254.332634][ T9051] netlink: 'syz.0.720': attribute type 5 has an invalid length. [ 254.549774][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 255.396243][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 255.613622][ T9088] netlink: 'syz.1.732': attribute type 5 has an invalid length. [ 255.656295][ T9087] netdevsim netdevsim3 eth0: entered promiscuous mode [ 255.674289][ T9087] netdevsim netdevsim3 eth1: entered promiscuous mode [ 255.833950][ T9087] netdevsim netdevsim3 eth2: entered promiscuous mode [ 255.844389][ T9087] netdevsim netdevsim3 eth3: entered promiscuous mode [ 255.872526][ T9087] veth2: entered promiscuous mode [ 255.957932][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 255.986057][ T9087] veth3: entered promiscuous mode [ 256.086955][ T9102] openvswitch: netlink: Message has 16 unknown bytes. [ 256.113743][ T9102] openvswitch: netlink: Actions may not be safe on all matching packets [ 256.155778][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.198660][ T9105] xt_hashlimit: invalid rate [ 256.316164][ T9111] No such timeout policy "syz0" [ 256.439417][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.741'. [ 256.452611][ T9107] lo speed is unknown, defaulting to 1000 [ 256.758360][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.745'. [ 256.827971][ T9130] netlink: 64 bytes leftover after parsing attributes in process `syz.2.742'. [ 257.343660][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 257.437445][ T9143] xt_hashlimit: invalid rate [ 257.446958][ T9143] syz_tun: entered allmulticast mode [ 257.513370][ T9142] syz_tun: left allmulticast mode [ 257.596179][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'. [ 257.716304][ T9153] netlink: 'syz.4.751': attribute type 5 has an invalid length. [ 257.762113][ T9158] openvswitch: netlink: Flow actions attr not present in new flow. [ 258.128952][ T9164] lo speed is unknown, defaulting to 1000 [ 258.217503][ T9170] @ÿ: renamed from bond_slave_0 [ 258.321791][ T9163] IPVS: length: 78 != 8 [ 258.441690][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'. [ 259.041249][ T9200] netlink: 'syz.2.769': attribute type 5 has an invalid length. [ 259.153699][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'. [ 259.235049][ T9212] netlink: 44 bytes leftover after parsing attributes in process `syz.3.772'. [ 259.430161][ T9215] ieee802154 phy0 wpan0: encryption failed: -90 [ 259.553213][ T9217] lo: left promiscuous mode [ 259.609236][ T9217] tunl0: left promiscuous mode [ 259.673216][ T9217] gre0: left promiscuous mode [ 259.712081][ T9217] gretap0: left promiscuous mode [ 259.729256][ T9217] erspan0: left promiscuous mode [ 259.736198][ T9217] ip_vti0: left promiscuous mode [ 259.754459][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 259.765643][ T9217] ip6_vti0: left promiscuous mode [ 259.875405][ T9217] sit0: left promiscuous mode [ 259.879467][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 259.937827][ T9217] ip6tnl0: left promiscuous mode [ 259.975506][ T9217] ip6gre0: left promiscuous mode [ 259.982942][ T9217] syz_tun: left promiscuous mode [ 259.994321][ T9217] ip6gretap0: left promiscuous mode [ 260.011701][ T9217] bond0: left promiscuous mode [ 260.041874][ T9217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.100766][ T9217] team0: left promiscuous mode [ 260.125657][ T9217] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.148404][ T9217] dummy0: left promiscuous mode [ 260.174951][ T9217] nlmon0: left promiscuous mode [ 260.234707][ T9217] caif0: left promiscuous mode [ 260.260679][ T9217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.290393][ T9241] netlink: 'syz.4.783': attribute type 5 has an invalid length. [ 260.361406][ T9244] syz_tun: entered allmulticast mode [ 260.371745][ T9243] syz_tun: left allmulticast mode [ 260.467508][ T9247] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 260.882400][ T9267] netlink: 'syz.3.792': attribute type 5 has an invalid length. [ 261.116753][ T9280] __nla_validate_parse: 1 callbacks suppressed [ 261.116774][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'. [ 261.151907][ T9279] netlink: zone id is out of range [ 261.159839][ T9279] netlink: zone id is out of range [ 261.175392][ T9279] netlink: zone id is out of range [ 261.181865][ T9279] netlink: zone id is out of range [ 261.187337][ T9279] netlink: zone id is out of range [ 261.192598][ T9279] netlink: set zone limit has 4 unknown bytes [ 261.543886][ T9292] netlink: 'syz.3.804': attribute type 2 has an invalid length. [ 261.589254][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.804'. [ 261.885451][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 262.070585][ T9308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.809'. [ 262.110643][ T9309] netlink: 64 bytes leftover after parsing attributes in process `syz.0.810'. [ 262.366626][ T9294] lo speed is unknown, defaulting to 1000 [ 262.441170][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 263.734651][ T9358] xt_l2tp: unknown flags: 10 [ 263.774796][ T9356] lo: entered promiscuous mode [ 263.813893][ T9356] tunl0: entered promiscuous mode [ 263.859091][ T9356] gre0: entered promiscuous mode [ 264.006167][ T9356] gretap0: entered promiscuous mode [ 264.098907][ T9356] erspan0: entered promiscuous mode [ 264.138488][ T9356] ip_vti0: entered promiscuous mode [ 264.152742][ T9356] ip6_vti0: entered promiscuous mode [ 264.175929][ T9356] sit0: entered promiscuous mode [ 264.259174][ T9356] ip6tnl0: entered promiscuous mode [ 264.269704][ T9356] ip6gre0: entered promiscuous mode [ 264.292899][ T9356] syz_tun: entered promiscuous mode [ 264.303307][ T9356] ip6gretap0: entered promiscuous mode [ 264.321494][ T9356] bridge0: entered promiscuous mode [ 264.328996][ T9356] bond0: entered promiscuous mode [ 264.341592][ T9356] team0: entered promiscuous mode [ 264.350637][ T9356] nlmon0: entered promiscuous mode [ 264.358170][ T9356] caif0: entered promiscuous mode [ 264.368678][ T9356] macvlan0: left allmulticast mode [ 264.376286][ T9356] netdevsim netdevsim2 eth0: entered promiscuous mode [ 264.384001][ T9356] netdevsim netdevsim2 eth1: entered promiscuous mode [ 264.391202][ T9356] netdevsim netdevsim2 eth2: entered promiscuous mode [ 264.399276][ T9356] netdevsim netdevsim2 eth3: entered promiscuous mode [ 264.406959][ T9356] veth2: entered promiscuous mode [ 264.412557][ T9356] veth3: entered promiscuous mode [ 264.419022][ T9356] veth4: entered promiscuous mode [ 264.427210][ T9356] veth5: entered promiscuous mode [ 264.437317][ T9356] vlan0004: entered promiscuous mode [ 264.443100][ T5921] lo speed is unknown, defaulting to 1000 [ 264.711348][ T9386] netlink: 'syz.0.839': attribute type 3 has an invalid length. [ 265.119609][ T9404] netlink: 'syz.2.845': attribute type 5 has an invalid length. [ 265.598863][ T9425] syz_tun: entered allmulticast mode [ 265.704109][ T9423] syz_tun: left allmulticast mode [ 265.909551][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'. [ 265.941406][ T9444] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.459185][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'. [ 266.642484][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 266.729662][ T9472] netlink: 'syz.0.872': attribute type 5 has an invalid length. [ 266.940821][ T9477] netlink: 'syz.4.873': attribute type 5 has an invalid length. [ 267.037623][ T9483] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 267.504280][ T9496] netlink: 'syz.2.881': attribute type 10 has an invalid length. [ 267.580947][ T9496] hsr0: left promiscuous mode [ 267.604089][ T9496] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 267.741430][ T9510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.888'. [ 267.874422][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 267.960652][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'. [ 267.978244][ T9525] netlink: 34 bytes leftover after parsing attributes in process `syz.0.893'. [ 268.527218][ T9545] netlink: 'syz.4.900': attribute type 5 has an invalid length. [ 269.415603][ T9578] netlink: 64 bytes leftover after parsing attributes in process `syz.0.908'. [ 270.145594][ T9600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.920'. [ 270.154857][ T9600] netlink: 40 bytes leftover after parsing attributes in process `syz.0.920'. [ 270.381991][ T9611] netlink: 'syz.3.921': attribute type 9 has an invalid length. [ 270.777710][ T9632] netlink: 64 bytes leftover after parsing attributes in process `syz.0.931'. [ 271.059181][ T9636] lo: entered promiscuous mode [ 271.150393][ T9636] tunl0: entered promiscuous mode [ 271.175123][ T9636] gre0: entered promiscuous mode [ 271.201339][ T9636] gretap0: entered promiscuous mode [ 271.379686][ T9636] erspan0: entered promiscuous mode [ 271.406178][ T9636] ip_vti0: entered promiscuous mode [ 271.449471][ T9636] ip6_vti0: entered promiscuous mode [ 271.499643][ T9636] sit0: entered promiscuous mode [ 271.542846][ T9636] ip6tnl0: entered promiscuous mode [ 271.854225][ T9636] ip6gre0: entered promiscuous mode [ 271.882183][ T9662] netlink: 'syz.0.944': attribute type 5 has an invalid length. [ 271.920698][ T9636] syz_tun: entered promiscuous mode [ 271.984665][ T9636] ip6gretap0: entered promiscuous mode [ 272.059645][ T9636] bond0: entered promiscuous mode [ 272.152924][ T9636] team0: entered promiscuous mode [ 272.202181][ T9636] dummy0: entered promiscuous mode [ 272.259482][ T9636] nlmon0: entered promiscuous mode [ 272.294305][ T9636] caif0: entered promiscuous mode [ 272.324799][ T9636] syztnl0: entered promiscuous mode [ 272.341365][ T9636] bridge0: entered promiscuous mode [ 272.814445][ T9690] xt_hashlimit: invalid rate [ 272.840562][ T9690] syz_tun: entered allmulticast mode [ 272.853293][ T9689] syz_tun: left allmulticast mode [ 272.863667][ T9682] lo speed is unknown, defaulting to 1000 [ 272.919540][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 272.970138][ T9696] netlink: 204 bytes leftover after parsing attributes in process `syz.1.950'. [ 273.008032][ T9696] netlink: 460 bytes leftover after parsing attributes in process `syz.1.950'. [ 273.350528][ T9714] syz_tun: entered allmulticast mode [ 273.363371][ T9713] syz_tun: left allmulticast mode [ 273.442480][ T9720] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 273.905287][ T9741] netlink: 32 bytes leftover after parsing attributes in process `syz.3.964'. [ 274.372503][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 274.860816][ T9787] lo speed is unknown, defaulting to 1000 [ 275.203565][ T9787] lo speed is unknown, defaulting to 1000 [ 275.330457][ T9787] netlink: 'syz.0.983': attribute type 1 has an invalid length. [ 275.338986][ T9787] netlink: 228 bytes leftover after parsing attributes in process `syz.0.983'. [ 275.650521][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'. [ 276.564253][ T9845] lo speed is unknown, defaulting to 1000 [ 276.848254][ T9853] xt_hashlimit: invalid rate [ 277.216127][ T9865] xt_l2tp: unknown flags: 10 [ 277.309321][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'. [ 277.351047][ T9870] netlink: 'syz.2.1015': attribute type 5 has an invalid length. [ 277.459635][ T9875] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.621939][ T9880] xt_hashlimit: invalid rate [ 277.660809][ T9880] syz_tun: entered allmulticast mode [ 277.668009][ T9879] syz_tun: left allmulticast mode [ 277.916390][ T9885] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 278.168077][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 278.313247][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'. [ 278.427656][ T9904] netlink: 'syz.3.1028': attribute type 5 has an invalid length. [ 278.727954][ T9914] xt_hashlimit: invalid rate [ 278.759218][ T9914] syz_tun: entered allmulticast mode [ 278.772086][ T9911] syz_tun: left allmulticast mode [ 279.078183][ T9925] xt_l2tp: unknown flags: 10 [ 279.286761][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 279.356557][ T9941] lo speed is unknown, defaulting to 1000 [ 279.515528][ T9946] syz_tun: entered allmulticast mode [ 279.565747][ T9945] syz_tun: left allmulticast mode [ 279.766869][ T9953] netlink: 'syz.0.1047': attribute type 5 has an invalid length. [ 280.026997][ T9961] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.035864][ T9961] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.044296][ T9961] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.052524][ T9961] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.129182][ T9968] syz_tun: entered allmulticast mode [ 280.142771][ T9967] syz_tun: left allmulticast mode [ 280.389331][ T9980] netlink: 'syz.1.1053': attribute type 5 has an invalid length. [ 280.459200][ T9974] ip6gre1: entered promiscuous mode [ 281.004795][ T9998] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1059'. [ 281.054133][T10000] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1058'. [ 281.220716][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'. [ 284.002248][T10034] syz_tun: entered allmulticast mode [ 284.044987][T10032] syz_tun: left allmulticast mode [ 284.170849][T10041] lo speed is unknown, defaulting to 1000 [ 284.518150][T10049] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 285.018684][T10073] ax25_connect(): syz.0.1084 uses autobind, please contact jreuter@yaina.de [ 285.075443][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 285.263887][T10084] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1086'. [ 288.120084][T10116] syz_tun: entered allmulticast mode [ 288.128785][T10115] syz_tun: left allmulticast mode [ 288.298510][T10125] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1104'. [ 288.309137][T10125] netem: unknown loss type 13 [ 288.315852][T10125] netem: change failed [ 288.390916][T10129] xt_l2tp: unknown flags: 10 [ 288.646774][T10135] xt_hashlimit: invalid rate [ 288.747802][T10135] syz_tun: entered allmulticast mode [ 288.856995][T10134] syz_tun: left allmulticast mode [ 288.990006][T10143] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21 [ 289.298695][T10153] syz_tun: entered allmulticast mode [ 289.307346][T10151] syz_tun: left allmulticast mode [ 289.587806][T10170] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1115'. [ 290.253966][T10189] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.331373][T10191] netlink: 'syz.0.1127': attribute type 5 has an invalid length. [ 290.538253][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'. [ 290.949341][T10212] netlink: 'syz.2.1136': attribute type 8 has an invalid length. [ 291.030219][T10214] xt_l2tp: unknown flags: 10 [ 291.403335][T10222] macvtap1: entered promiscuous mode [ 291.443301][T10222] macvtap1: entered allmulticast mode [ 291.465995][T10222] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 291.531178][T10222] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 291.606231][T10235] netlink: 63 bytes leftover after parsing attributes in process `syz.0.1142'. [ 291.746670][T10239] ip6erspan0: entered promiscuous mode [ 291.771828][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'. [ 291.814532][T10239] geneve2: entered promiscuous mode [ 291.826312][T10239] syztnl1: entered promiscuous mode [ 291.853282][T10244] netlink: 'syz.0.1145': attribute type 4 has an invalid length. [ 291.943773][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1146'. [ 292.173324][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1150'. [ 292.245076][T10257] xt_hashlimit: invalid rate [ 292.657403][T10272] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1155'. [ 293.219218][T10288] lo speed is unknown, defaulting to 1000 [ 293.416833][T10294] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input22 [ 293.645976][T10305] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1163'. [ 293.703594][T10305] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1163'. [ 293.766538][T10310] IPv6: NLM_F_REPLACE set, but no existing node found! [ 293.837573][T10313] xt_hashlimit: invalid rate [ 293.847648][T10313] syz_tun: entered allmulticast mode [ 293.859578][T10312] syz_tun: left allmulticast mode [ 293.964200][T10315] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input23 [ 294.276411][T10328] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1172'. [ 294.571471][T10336] lo speed is unknown, defaulting to 1000 [ 295.159049][T10353] xt_hashlimit: invalid rate [ 295.224681][T10356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1181'. [ 295.664168][T10357] veth6: entered promiscuous mode [ 295.670948][T10357] veth7: entered promiscuous mode [ 295.677589][T10357] netdevsim netdevsim0 eth0: entered promiscuous mode [ 295.686302][T10357] netdevsim netdevsim0 eth1: entered promiscuous mode [ 295.693797][T10357] netdevsim netdevsim0 eth2: entered promiscuous mode [ 295.703785][T10357] netdevsim netdevsim0 eth3: entered promiscuous mode [ 295.710793][T10357] syztnl2: entered promiscuous mode [ 295.717194][T10357] bridge2: entered promiscuous mode [ 295.890524][T10376] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input24 [ 296.058221][T10381] netlink: 'syz.4.1188': attribute type 5 has an invalid length. [ 296.240356][T10393] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1190'. [ 296.374802][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'. [ 297.197017][T10424] xt_l2tp: unknown flags: 10 [ 297.524199][T10429] lo speed is unknown, defaulting to 1000 [ 298.772369][T10467] xt_l2tp: unknown flags: 10 [ 299.364582][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 299.713244][T10488] xt_hashlimit: invalid rate [ 299.721097][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1216'. [ 299.797142][T10486] lo speed is unknown, defaulting to 1000 [ 300.072872][T10499] xt_hashlimit: invalid rate [ 300.098326][T10499] syz_tun: entered allmulticast mode [ 300.353326][T10509] netem: change failed [ 300.674879][T10521] xt_hashlimit: invalid rate [ 300.977089][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'. [ 301.086988][T10538] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1230'. [ 301.344118][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 301.432071][T10543] lo speed is unknown, defaulting to 1000 [ 301.439076][T10544] xt_hashlimit: invalid rate [ 301.941828][T10564] xt_hashlimit: invalid rate [ 301.982404][T10561] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1239'. [ 302.880073][T10584] xt_hashlimit: invalid rate [ 302.884920][T10567] lo speed is unknown, defaulting to 1000 [ 302.898202][T10584] syz_tun: entered allmulticast mode [ 302.907951][T10583] syz_tun: left allmulticast mode [ 302.929406][T10581] tun0: tun_chr_ioctl cmd 1074025677 [ 302.956483][T10581] tun0: linktype set to 776 [ 303.459755][T10609] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1252'. [ 303.883945][T10611] xt_hashlimit: invalid rate [ 303.895950][T10611] syz_tun: entered allmulticast mode [ 303.904619][T10610] syz_tun: left allmulticast mode [ 304.047457][T10617] xt_hashlimit: invalid rate [ 304.058842][T10617] syz_tun: entered allmulticast mode [ 304.076311][T10616] syz_tun: left allmulticast mode [ 304.179160][T10619] netlink: 'syz.3.1258': attribute type 5 has an invalid length. [ 304.293119][T10623] xt_l2tp: unknown flags: 10 [ 304.482761][T10633] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input25 [ 304.536100][T10635] netlink: 'syz.1.1264': attribute type 5 has an invalid length. [ 304.821623][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'. [ 304.831085][T10647] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1268'. [ 305.286426][T10666] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1275'. [ 305.341553][T10667] xt_hashlimit: invalid rate [ 305.583928][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'. [ 305.731615][T10679] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input26 [ 306.157525][T10696] xt_hashlimit: invalid rate [ 306.505536][T10710] netlink: 'syz.3.1288': attribute type 5 has an invalid length. [ 306.825385][T10720] xt_l2tp: unknown flags: 10 [ 306.848323][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 307.137460][T10734] macvtap1: entered promiscuous mode [ 307.142928][T10734] macvtap1: entered allmulticast mode [ 307.183896][T10734] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 307.196524][T10734] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 307.227175][T10740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1296'. [ 307.971490][T10773] tap0: tun_chr_ioctl cmd 2148553947 [ 308.093616][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1308'. [ 308.572499][T10793] xt_hashlimit: invalid rate [ 308.940513][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1323'. [ 309.030315][T10807] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1325'. [ 309.182752][T10814] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input27 [ 309.775222][T10838] xt_l2tp: unknown flags: 10 [ 310.269169][T10853] lo speed is unknown, defaulting to 1000 [ 310.443323][T10858] lo speed is unknown, defaulting to 1000 [ 310.829588][T10878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1349'. [ 310.951219][T10882] netlink: 'syz.0.1350': attribute type 5 has an invalid length. [ 311.032787][T10886] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1351'. [ 311.182927][T10891] xt_l2tp: unknown flags: 10 [ 311.297739][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1352'. [ 311.479974][T10900] netlink: 'syz.0.1355': attribute type 1 has an invalid length. [ 311.491844][T10900] netlink: 'syz.0.1355': attribute type 1 has an invalid length. [ 311.761523][T10903] lo speed is unknown, defaulting to 1000 [ 312.344658][T10925] netlink: 'syz.0.1363': attribute type 5 has an invalid length. [ 312.612805][T10929] xt_hashlimit: invalid rate [ 312.651137][T10929] syz_tun: entered allmulticast mode [ 312.662290][T10932] xt_hashlimit: invalid rate [ 313.664108][T10957] lo: entered promiscuous mode [ 313.678726][T10957] tunl0: entered promiscuous mode [ 313.712816][T10957] gre0: entered promiscuous mode [ 313.771644][T10957] gretap0: entered promiscuous mode [ 313.826263][T10962] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input28 [ 313.850661][T10957] erspan0: entered promiscuous mode [ 313.880725][T10957] ip_vti0: entered promiscuous mode [ 313.913249][T10957] ip6_vti0: entered promiscuous mode [ 313.964213][T10957] sit0: entered promiscuous mode [ 314.036489][T10957] ip6tnl0: entered promiscuous mode [ 314.195703][T10957] ip6gre0: entered promiscuous mode [ 314.236616][T10957] syz_tun: entered promiscuous mode [ 314.274341][T10957] ip6gretap0: entered promiscuous mode [ 314.321462][T10957] bond0: entered promiscuous mode [ 314.365168][T10957] dummy0: entered promiscuous mode [ 314.379630][T10957] nlmon0: entered promiscuous mode [ 314.402917][T10957] caif0: entered promiscuous mode [ 314.425323][T10957] netdevsim netdevsim4 eth0: entered promiscuous mode [ 314.433635][T10957] netdevsim netdevsim4 eth1: entered promiscuous mode [ 314.441110][T10957] netdevsim netdevsim4 eth2: entered promiscuous mode [ 314.449262][T10957] netdevsim netdevsim4 eth3: entered promiscuous mode [ 314.456827][T10957] syztnl2: entered promiscuous mode [ 314.491857][T10957] ip6erspan0: entered promiscuous mode [ 314.503195][T10957] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.512656][T10957] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.521454][T10957] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.530304][T10957] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.542152][T10957] vxlan0: entered promiscuous mode [ 314.565207][T10957] veth2: entered promiscuous mode [ 314.575669][T10957] veth3: entered promiscuous mode [ 314.605615][T10974] macvtap1: entered promiscuous mode [ 314.642664][T10974] macvtap1: entered allmulticast mode [ 314.654657][T10974] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 314.766639][T10974] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 314.849057][T10987] lo speed is unknown, defaulting to 1000 [ 315.007246][T10994] xt_hashlimit: invalid rate [ 315.698008][T11015] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.630062][T11018] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input29 [ 317.219386][T11028] xt_l2tp: unknown flags: 10 [ 317.586496][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.287789][T11033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1403'. [ 318.436280][T11008] lo speed is unknown, defaulting to 1000 [ 318.935929][T11044] macvtap1: entered promiscuous mode [ 318.941581][T11044] macvtap1: entered allmulticast mode [ 318.999303][T11044] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 319.074330][T11044] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 319.804320][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'. [ 322.418089][T11105] syzkaller1: entered promiscuous mode [ 322.423863][T11105] syzkaller1: entered allmulticast mode [ 322.508700][T11102] lo speed is unknown, defaulting to 1000 [ 323.564809][T11142] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1440'. [ 323.603945][T11142] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1440'. [ 323.910038][T11152] lo speed is unknown, defaulting to 1000 [ 324.221069][T11161] macvtap1: entered promiscuous mode [ 324.244191][T11161] macvtap1: entered allmulticast mode [ 324.262930][T11161] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 324.326564][T11161] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 324.550506][T11178] lo speed is unknown, defaulting to 1000 [ 324.904511][T11195] lo speed is unknown, defaulting to 1000 [ 325.237904][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'. [ 325.607736][T11215] xt_hashlimit: invalid rate [ 325.800905][T11221] lo speed is unknown, defaulting to 1000 [ 326.401875][T11243] sctp: [Deprecated]: syz.0.1476 (pid 11243) Use of int in maxseg socket option. [ 326.401875][T11243] Use struct sctp_assoc_value instead [ 326.531718][T11241] lo speed is unknown, defaulting to 1000 [ 326.701537][T11252] lo speed is unknown, defaulting to 1000 [ 326.922479][T11256] lo speed is unknown, defaulting to 1000 [ 327.030839][T11264] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input30 [ 327.274856][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1482'. [ 327.399671][T11275] lo speed is unknown, defaulting to 1000 [ 328.402390][T11298] lo speed is unknown, defaulting to 1000 [ 328.587037][T11304] bond0: (slave wlan1): Releasing backup interface [ 328.626258][T11304] bond1: (slave batadv1): Releasing active interface [ 328.641886][T11304] bond3: (slave batadv2): Releasing active interface [ 329.401326][T11336] xt_hashlimit: invalid rate [ 329.443729][T11336] syz_tun: entered allmulticast mode [ 329.479945][T11334] syz_tun: left allmulticast mode [ 329.906478][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1509'. [ 330.176598][T11352] lo speed is unknown, defaulting to 1000 [ 330.416563][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'. [ 330.996889][T11386] xt_hashlimit: invalid rate [ 331.416505][T11400] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input31 [ 331.606535][ T5848] Bluetooth: hci4: link tx timeout [ 331.612057][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 332.692449][T11439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1543'. [ 333.664310][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 333.681512][T11467] xt_hashlimit: invalid rate [ 333.806803][T11469] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input32 [ 333.893108][T11473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1557'. [ 334.220307][T11486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1563'. [ 334.233629][T11486] netlink: 'syz.0.1563': attribute type 7 has an invalid length. [ 334.243847][T11486] netlink: 'syz.0.1563': attribute type 8 has an invalid length. [ 334.251847][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1563'. [ 334.692874][T11503] xt_hashlimit: invalid rate [ 334.790157][T11498] lo speed is unknown, defaulting to 1000 [ 335.318621][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'. [ 335.418318][T11527] macvtap1: entered promiscuous mode [ 335.434340][T11527] macvtap1: entered allmulticast mode [ 335.442490][T11527] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 335.485850][T11527] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 335.785862][T11550] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1581'. [ 335.848792][T11550] syz_tun (unregistering): left allmulticast mode [ 336.245413][T11562] lo speed is unknown, defaulting to 1000 [ 336.270010][T11564] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input33 [ 336.730913][T11577] veth8: entered promiscuous mode [ 336.749562][T11577] veth9: entered promiscuous mode [ 337.423606][T11607] nbd: nbd0 already in use [ 337.429031][T11607] block nbd0: NBD_DISCONNECT [ 337.434038][T11607] block nbd0: Send disconnect failed -32 [ 337.440176][T11607] block nbd0: shutting down sockets [ 337.592295][T11605] lo speed is unknown, defaulting to 1000 [ 337.945838][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'. [ 338.161824][T11630] xt_hashlimit: invalid rate [ 338.210649][T11630] syz_tun: entered allmulticast mode [ 338.306441][T11628] syz_tun: left allmulticast mode [ 338.741520][T11638] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input34 [ 338.834448][T11643] netlink: 'syz.3.1614': attribute type 5 has an invalid length. [ 339.293168][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 340.191582][T11671] lo speed is unknown, defaulting to 1000 [ 340.282802][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1622'. [ 340.548222][T11682] xt_hashlimit: invalid rate [ 340.873656][T11694] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input35 [ 340.888628][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1625'. [ 341.092359][T11704] xt_l2tp: unknown flags: 10 [ 341.501008][T11707] macvtap1: entered promiscuous mode [ 341.522244][T11707] macvtap1: entered allmulticast mode [ 341.556192][T11707] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 341.647751][T11707] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 342.211650][T11744] lo speed is unknown, defaulting to 1000 [ 344.057449][T11796] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1658'. [ 344.065559][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1659'. [ 344.113067][T11795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.120953][T11796] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1658'. [ 344.554872][T11806] macvtap1: entered promiscuous mode [ 344.561123][T11806] macvtap1: entered allmulticast mode [ 344.568123][T11806] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 344.587050][T11806] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 344.672251][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1667'. [ 344.703255][T11813] lo speed is unknown, defaulting to 1000 [ 345.654754][T11842] hsr0: entered promiscuous mode [ 345.661034][T11842] syztnl2: entered promiscuous mode [ 345.668089][T11842] veth6: entered promiscuous mode [ 345.675104][T11842] veth7: entered promiscuous mode [ 345.681596][T11842] bond1: entered promiscuous mode [ 345.869608][T11848] vlan2: entered allmulticast mode [ 345.876192][T11848] veth0_to_batadv: entered allmulticast mode [ 345.950378][T11848] vlan2: entered allmulticast mode [ 346.197658][T11859] ipip0: entered promiscuous mode [ 346.515078][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1685'. [ 347.045175][T11884] netlink: 44378 bytes leftover after parsing attributes in process `syz.2.1690'. [ 347.316074][T11889] xt_hashlimit: invalid rate [ 347.365614][T11889] lo: entered allmulticast mode [ 347.406456][T11888] lo: left allmulticast mode [ 347.416207][T11891] netlink: 2000 bytes leftover after parsing attributes in process `syz.4.1694'. [ 347.738956][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1697'. [ 347.811105][T11910] netlink: 'syz.1.1700': attribute type 5 has an invalid length. [ 348.219629][T11920] netlink: 'syz.1.1704': attribute type 1 has an invalid length. [ 348.241907][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1705'. [ 348.271447][T11920] bond1: entered promiscuous mode [ 348.290692][T11920] bond1: entered allmulticast mode [ 348.309301][T11925] batadv1: entered promiscuous mode [ 348.322836][T11925] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 348.336911][T11925] bond1: (slave batadv1): making interface the new active one [ 348.363630][T11925] batadv1: entered allmulticast mode [ 348.370256][T11925] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 348.656933][T11932] xt_hashlimit: invalid rate [ 348.666539][T11932] syz_tun: entered allmulticast mode [ 348.685737][T11931] syz_tun: left allmulticast mode [ 349.084160][T11940] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1713'. [ 349.178483][T11947] netlink: 'syz.0.1715': attribute type 5 has an invalid length. [ 349.190470][T11945] xt_l2tp: unknown flags: 10 [ 349.603782][T11962] xt_hashlimit: invalid rate [ 349.728025][T11965] xt_hashlimit: invalid rate [ 350.732302][T11994] lo speed is unknown, defaulting to 1000 [ 350.767507][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 350.863005][ T5210] udevd[5210]: worker [5844] terminated by signal 33 (Unknown signal 33) [ 350.947870][T12003] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input36 [ 350.972310][T12001] 8021q: VLANs not supported on bond0 [ 351.844370][ T5839] syz_tun (unregistering): left allmulticast mode [ 352.054347][ T5845] syz_tun (unregistering): left allmulticast mode [ 352.783813][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 352.817138][ T7921] ------------[ cut here ]------------ [ 352.823115][ T7921] refcount_t: underflow; use-after-free. [ 352.829407][ T7921] WARNING: CPU: 1 PID: 7921 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 352.838943][ T7921] Modules linked in: [ 352.842886][ T7921] CPU: 1 UID: 0 PID: 7921 Comm: kbnepd bnep0 Not tainted 6.14.0-rc6-syzkaller-01366-g6855b9be9cf7 #0 [ 352.853924][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 352.864174][ T7921] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 352.870461][ T7921] Code: 40 b5 80 8c e8 57 07 8c fc 90 0f 0b 90 90 eb 99 e8 0b 4b cc fc c6 05 67 97 31 0b 01 90 48 c7 c7 a0 b5 80 8c e8 37 07 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 e8 4a cc fc c6 05 41 97 31 0b 01 90 [ 352.891061][ T7921] RSP: 0018:ffffc9000c90f700 EFLAGS: 00010246 [ 352.897329][ T7921] RAX: 592905d4f07e5c00 RBX: ffff888023789c78 RCX: ffff88805be49e00 [ 352.905460][ T7921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.913596][ T7921] RBP: 0000000000000003 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c [ 352.921576][ T7921] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff888023789c60 [ 352.929714][ T7921] R13: 1ffff110046f138c R14: ffff888023789c60 R15: ffffffff8638ea10 [ 352.937852][ T7921] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 352.947162][ T7921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.953842][ T7921] CR2: 000000110c3c5315 CR3: 0000000034aac000 CR4: 00000000003526f0 [ 352.961878][ T7921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.970176][ T7921] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.978215][ T7921] Call Trace: [ 352.981503][ T7921] [ 352.984487][ T7921] ? __warn+0x165/0x4d0 [ 352.988651][ T7921] ? refcount_warn_saturate+0x15a/0x1d0 [ 352.994292][ T7921] ? report_bug+0x2b3/0x500 [ 352.999683][ T7921] ? refcount_warn_saturate+0x15a/0x1d0 [ 353.005350][ T7921] ? handle_bug+0x60/0x90 [ 353.009745][ T7921] ? exc_invalid_op+0x1a/0x50 [ 353.014559][ T7921] ? asm_exc_invalid_op+0x1a/0x20 [ 353.019640][ T7921] ? __pfx_klist_children_put+0x10/0x10 [ 353.025318][ T7921] ? __warn_printk+0x292/0x360 [ 353.030108][ T7921] ? refcount_warn_saturate+0x15a/0x1d0 [ 353.035776][ T7921] klist_dec_and_del+0x3ec/0x3f0 [ 353.040774][ T7921] ? __pfx_klist_children_put+0x10/0x10 [ 353.046468][ T7921] klist_del+0xa7/0x110 [ 353.050646][ T7921] device_del+0x2c9/0x9b0 [ 353.055060][ T7921] ? __pfx_device_del+0x10/0x10 [ 353.059918][ T7921] ? netdev_unregister_kobject+0x178/0x250 [ 353.065846][ T7921] unregister_netdevice_many_notify+0x1f2e/0x24f0 [ 353.072316][ T7921] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 353.079243][ T7921] ? trace_contention_end+0x3c/0x120 [ 353.084623][ T7921] ? __mutex_lock+0x397/0x1010 [ 353.089421][ T7921] ? rtnl_net_dev_lock+0x271/0x320 [ 353.094661][ T7921] ? __pfx___mutex_lock+0x10/0x10 [ 353.099739][ T7921] ? __pfx_lock_release+0x10/0x10 [ 353.105016][ T7921] unregister_netdevice_queue+0x303/0x370 [ 353.111007][ T7921] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 353.117460][ T7921] ? rtnl_net_dev_lock+0x37/0x320 [ 353.122512][ T7921] ? rtnl_net_dev_lock+0x302/0x320 [ 353.127835][ T7921] ? rtnl_net_dev_lock+0x37/0x320 [ 353.132881][ T7921] unregister_netdev+0x1f/0x60 [ 353.137712][ T7921] bnep_session+0x2e4e/0x3040 [ 353.142469][ T7921] ? __pfx_bnep_session+0x10/0x10 [ 353.147695][ T7921] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 353.153778][ T7921] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 353.160145][ T7921] ? __pfx_woken_wake_function+0x10/0x10 [ 353.165982][ T7921] ? __kthread_parkme+0x169/0x1d0 [ 353.171047][ T7921] ? __pfx_bnep_session+0x10/0x10 [ 353.176138][ T7921] kthread+0x7a9/0x920 [ 353.180216][ T7921] ? __pfx_kthread+0x10/0x10 [ 353.184988][ T7921] ? __pfx_bnep_session+0x10/0x10 [ 353.190125][ T7921] ? __pfx_kthread+0x10/0x10 [ 353.194800][ T7921] ? __pfx_kthread+0x10/0x10 [ 353.199411][ T7921] ? __pfx_kthread+0x10/0x10 [ 353.204107][ T7921] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.209363][ T7921] ? lockdep_hardirqs_on+0x99/0x150 [ 353.214802][ T7921] ? __pfx_kthread+0x10/0x10 [ 353.219519][ T7921] ret_from_fork+0x4b/0x80 [ 353.224040][ T7921] ? __pfx_kthread+0x10/0x10 [ 353.228642][ T7921] ret_from_fork_asm+0x1a/0x30 [ 353.233480][ T7921] [ 353.236519][ T7921] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 353.243813][ T7921] CPU: 1 UID: 0 PID: 7921 Comm: kbnepd bnep0 Not tainted 6.14.0-rc6-syzkaller-01366-g6855b9be9cf7 #0 [ 353.254854][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 353.264908][ T7921] Call Trace: [ 353.268273][ T7921] [ 353.271205][ T7921] dump_stack_lvl+0x241/0x360 [ 353.275888][ T7921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.281195][ T7921] ? __pfx__printk+0x10/0x10 [ 353.285802][ T7921] ? _printk+0xd5/0x120 [ 353.289976][ T7921] ? __init_begin+0x41000/0x41000 [ 353.295098][ T7921] ? vscnprintf+0x5d/0x90 [ 353.299432][ T7921] panic+0x349/0x880 [ 353.303388][ T7921] ? __warn+0x174/0x4d0 [ 353.307585][ T7921] ? __pfx_panic+0x10/0x10 [ 353.312046][ T7921] ? ret_from_fork_asm+0x1a/0x30 [ 353.317006][ T7921] __warn+0x344/0x4d0 [ 353.321027][ T7921] ? refcount_warn_saturate+0x15a/0x1d0 [ 353.326710][ T7921] report_bug+0x2b3/0x500 [ 353.331083][ T7921] ? refcount_warn_saturate+0x15a/0x1d0 [ 353.336657][ T7921] handle_bug+0x60/0x90 [ 353.340844][ T7921] exc_invalid_op+0x1a/0x50 [ 353.345390][ T7921] asm_exc_invalid_op+0x1a/0x20 [ 353.350285][ T7921] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 353.356547][ T7921] Code: 40 b5 80 8c e8 57 07 8c fc 90 0f 0b 90 90 eb 99 e8 0b 4b cc fc c6 05 67 97 31 0b 01 90 48 c7 c7 a0 b5 80 8c e8 37 07 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 e8 4a cc fc c6 05 41 97 31 0b 01 90 [ 353.376450][ T7921] RSP: 0018:ffffc9000c90f700 EFLAGS: 00010246 [ 353.382556][ T7921] RAX: 592905d4f07e5c00 RBX: ffff888023789c78 RCX: ffff88805be49e00 [ 353.390538][ T7921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 353.398624][ T7921] RBP: 0000000000000003 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c [ 353.406602][ T7921] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff888023789c60 [ 353.415274][ T7921] R13: 1ffff110046f138c R14: ffff888023789c60 R15: ffffffff8638ea10 [ 353.423284][ T7921] ? __pfx_klist_children_put+0x10/0x10 [ 353.428894][ T7921] ? __warn_printk+0x292/0x360 [ 353.433702][ T7921] klist_dec_and_del+0x3ec/0x3f0 [ 353.438823][ T7921] ? __pfx_klist_children_put+0x10/0x10 [ 353.444390][ T7921] klist_del+0xa7/0x110 [ 353.448562][ T7921] device_del+0x2c9/0x9b0 [ 353.452905][ T7921] ? __pfx_device_del+0x10/0x10 [ 353.457890][ T7921] ? netdev_unregister_kobject+0x178/0x250 [ 353.464328][ T7921] unregister_netdevice_many_notify+0x1f2e/0x24f0 [ 353.470783][ T7921] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 353.477986][ T7921] ? trace_contention_end+0x3c/0x120 [ 353.483282][ T7921] ? __mutex_lock+0x397/0x1010 [ 353.488057][ T7921] ? rtnl_net_dev_lock+0x271/0x320 [ 353.493182][ T7921] ? __pfx___mutex_lock+0x10/0x10 [ 353.498226][ T7921] ? __pfx_lock_release+0x10/0x10 [ 353.503262][ T7921] unregister_netdevice_queue+0x303/0x370 [ 353.508989][ T7921] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 353.515268][ T7921] ? rtnl_net_dev_lock+0x37/0x320 [ 353.520309][ T7921] ? rtnl_net_dev_lock+0x302/0x320 [ 353.525416][ T7921] ? rtnl_net_dev_lock+0x37/0x320 [ 353.530461][ T7921] unregister_netdev+0x1f/0x60 [ 353.535320][ T7921] bnep_session+0x2e4e/0x3040 [ 353.540041][ T7921] ? __pfx_bnep_session+0x10/0x10 [ 353.545160][ T7921] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 353.551152][ T7921] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 353.557486][ T7921] ? __pfx_woken_wake_function+0x10/0x10 [ 353.563129][ T7921] ? __kthread_parkme+0x169/0x1d0 [ 353.568162][ T7921] ? __pfx_bnep_session+0x10/0x10 [ 353.573189][ T7921] kthread+0x7a9/0x920 [ 353.577254][ T7921] ? __pfx_kthread+0x10/0x10 [ 353.582126][ T7921] ? __pfx_bnep_session+0x10/0x10 [ 353.587241][ T7921] ? __pfx_kthread+0x10/0x10 [ 353.591886][ T7921] ? __pfx_kthread+0x10/0x10 [ 353.596590][ T7921] ? __pfx_kthread+0x10/0x10 [ 353.601182][ T7921] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.606662][ T7921] ? lockdep_hardirqs_on+0x99/0x150 [ 353.611865][ T7921] ? __pfx_kthread+0x10/0x10 [ 353.616464][ T7921] ret_from_fork+0x4b/0x80 [ 353.620903][ T7921] ? __pfx_kthread+0x10/0x10 [ 353.625586][ T7921] ret_from_fork_asm+0x1a/0x30 [ 353.630470][ T7921] [ 354.740362][ T7921] Shutting down cpus with NMI [ 354.745414][ T7921] Kernel Offset: disabled [ 354.749927][ T7921] Rebooting in 86400 seconds..