last executing test programs: 4.326970647s ago: executing program 2 (id=887): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/1078], 0x420}}, 0x40040) (fail_nth: 2) 3.866067089s ago: executing program 2 (id=891): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) unshare(0x6a060000) 2.27692865s ago: executing program 1 (id=915): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x21, [0x8, 0x1, 0x2, 0xc, 0x9, 0xf94, 0x4000f1, 0x37, 0x409, 0x6, 0x1, 0x6, 0x1, 0x5, 0x7f, 0x2, 0x80000000, 0x2, 0x0, 0x9, 0x8, 0x5, 0x7, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x3, 0x4107a2b1, 0x358827d1, 0x6, 0x2, 0x1, 0x80000001, 0xc0010, 0x9c, 0x4, 0x2, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x4928, 0x3, 0xffffffff, 0x7, 0x4, 0x5, 0x80000004, 0x0, 0x9733, 0x6, 0x80000001, 0x8, 0x9fd8, 0x5, 0x9, 0x8, 0x8, 0x4, 0x101, 0x9, 0x71, 0x0, 0x6, 0x0, 0x3, 0x5, 0x165, 0x9, 0x6, 0x4, 0x9, 0x8, 0x40, 0x6, 0x5, 0x7, 0x0, 0x3, 0x2, 0x2, 0x0, 0xa, 0xffffffff, 0x471, 0x4, 0x0, 0x7, 0x3, 0x6, 0x1000, 0x3, 0x2, 0xb, 0xffff, 0x80, 0x4, 0x4, 0x2, 0x40, 0xb, 0xfffffffd, 0x5, 0x7, 0x4, 0x2, 0x2, 0x0, 0x7, 0x5, 0x8000, 0x1, 0xa, 0x200ffff, 0xa5, 0x2, 0x9]}}) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ieee802154, &(0x7f00000000c0)=0x80, 0x80800) sendmsg$nl_route(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001e000126bd7000fedbdf250700000000", @ANYRES32=0x0, @ANYBLOB="00000400080009"], 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x21, [0x8, 0x1, 0x2, 0xc, 0x9, 0xf94, 0x4000f1, 0x37, 0x409, 0x6, 0x1, 0x6, 0x1, 0x5, 0x7f, 0x2, 0x80000000, 0x2, 0x0, 0x9, 0x8, 0x5, 0x7, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x3, 0x4107a2b1, 0x358827d1, 0x6, 0x2, 0x1, 0x80000001, 0xc0010, 0x9c, 0x4, 0x2, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x4928, 0x3, 0xffffffff, 0x7, 0x4, 0x5, 0x80000004, 0x0, 0x9733, 0x6, 0x80000001, 0x8, 0x9fd8, 0x5, 0x9, 0x8, 0x8, 0x4, 0x101, 0x9, 0x71, 0x0, 0x6, 0x0, 0x3, 0x5, 0x165, 0x9, 0x6, 0x4, 0x9, 0x8, 0x40, 0x6, 0x5, 0x7, 0x0, 0x3, 0x2, 0x2, 0x0, 0xa, 0xffffffff, 0x471, 0x4, 0x0, 0x7, 0x3, 0x6, 0x1000, 0x3, 0x2, 0xb, 0xffff, 0x80, 0x4, 0x4, 0x2, 0x40, 0xb, 0xfffffffd, 0x5, 0x7, 0x4, 0x2, 0x2, 0x0, 0x7, 0x5, 0x8000, 0x1, 0xa, 0x200ffff, 0xa5, 0x2, 0x9]}}) (async) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ieee802154, &(0x7f00000000c0)=0x80, 0x80800) (async) sendmsg$nl_route(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001e000126bd7000fedbdf250700000000", @ANYRES32=0x0, @ANYBLOB="00000400080009"], 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) (async) 2.038088386s ago: executing program 1 (id=918): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r3 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) 1.954460269s ago: executing program 1 (id=919): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000010) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xffffffe4}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r4, 0x0, 0x14, 0x0, &(0x7f0000000f80)=0xfffffffffffffe5c) r5 = socket$kcm(0xa, 0x3, 0x3a) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r7, &(0x7f0000000b40), 0x0, 0x4, 0xffffffff) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.934762956s ago: executing program 2 (id=921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004"], 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x36d}], 0x1, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000200000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200000000000000e3ffffffffffffff"], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.785057107s ago: executing program 4 (id=922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 1.784393415s ago: executing program 2 (id=923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x20004168}, 0x0) 1.722329371s ago: executing program 0 (id=924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400f0da82805f", @ANYRES16=r1, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf250100"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r4, 0x8b2c, &(0x7f0000000040)) 1.690778034s ago: executing program 4 (id=925): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="b7000000f8000000bfa300000000000007030000f4ffffff620af0fff8ffffff71a4f0ff000000002d100200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000e10000009f000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d66a77ac8daab82167606068067500c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923030000000000000014e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049ef6a989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270fa3d0ee281eaa11ad47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42e54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65807ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x72040000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x48}}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f00000002c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ffff00000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r8, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pwritev(r6, &(0x7f0000001a00)=[{&(0x7f0000000600)="24ba8d4416efcb4768e949522f47331d4548861502149843b0606505ad3255eb63568e3c6147e90cc21f78d2323128c8d375102a2bcdb5cd78e7f3d6ff64da1b49a467badc8e4f6d699c789929cf02ca9c7165d13c7f7b8be98dcf5a0eb01a3df3e9bdfde437d11f4f599ad8bb03bf63efc4183d44de47eaf11ec43172db7ef524be9203ad39a624829527f8c30773b6", 0x90}], 0x1, 0x5e, 0xdc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) 1.618002202s ago: executing program 1 (id=926): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x2, 0x3, 0xd4, 0x5, 0x3, 0x5, 0x8, 0x4, 0x6, 0xe, 0x2, 0x9, 0xfc, 0x4}, 0xe) recvfrom$rxrpc(r0, &(0x7f00000004c0)=""/190, 0xbe, 0x0, &(0x7f0000000240)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xdcb2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0x4, 0x760cda05bcf95fa0}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x5, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800}, 0x50) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xc, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x5, 0x100, @void}}}}}}}}}, 0x46) socket$nl_generic(0x10, 0x3, 0x10) 1.568163377s ago: executing program 2 (id=927): unshare(0x26020480) unshare(0x700) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r6, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000280)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r7, 0x80111500, &(0x7f0000006380)) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000005280)) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x800000003, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000008500000087000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 1.48580902s ago: executing program 3 (id=928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r2) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xe, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002300)={'wlan1\x00'}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x10000, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000007c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20) sendmsg$inet(r9, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendto$packet(r5, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f4", 0x26, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r8, 0x1, 0x62}, 0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000001c00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000c00)={r13, "bff4678338cdeac2bddd8f5f460de415"}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000001c0)={r13, "243d83c0dab7a8d1f64ae6be422c452b"}) 1.441168477s ago: executing program 0 (id=929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000004c9cbc73112fda93667e262216149ac332a0fd516f5fa3ffd861919e53fd6e1a31e12a95ac6c466d5432c1fc743c56cf3b668adce1b557a2e40c249dc90c994b5fd036ccf25f58b23", @ANYRES16=r7, @ANYBLOB="0100ffffffff000000000c000000140003800400040008000200ff7f000004000100180001801400020076657468305f746f5f626f6e64000000"], 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, 0x0, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f00000007c0)=""/255, 0xff, 0x0, 0x0, 0x0) listen(r5, 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0xbbab, 0x4, 0x8001, 0x10, 0x4, 0xfffffff9, 0x5}, 0x9c) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="08010000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000014000480050603000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x40000}, {0xfbfffffa}]}}) 1.23005144s ago: executing program 4 (id=930): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r3 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) 1.22977967s ago: executing program 2 (id=931): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) unshare(0x6a060000) 1.140705375s ago: executing program 4 (id=932): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001000000648a63ff"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe5e, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.052216417s ago: executing program 3 (id=933): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) (fail_nth: 3) 1.037925263s ago: executing program 1 (id=934): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x6, 0x7f, 0x10}, 0x50) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@broadcast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @broadcast, @broadcast, @broadcast, @loopback}}}}, &(0x7f0000000440)={0x0, 0x2, [0xaeb, 0x44c, 0xdfc, 0xea2]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000a40)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xac5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44044) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) ioctl(r6, 0x0, &(0x7f00000005c0)="d15dc3fdb4c4976147980c4fde4281327c52e81b59e8ccdedb4acd4d3374f2ba88ab57f171d7774d53df3283d1a055897007f69325bb305393a5aafd53719a961e7eb3993b8d75b396053a29b2ae65b243e667649dd27343835be2fa20b2e91b4c13bb6ee144cdd1a5f7273219a8143952a3f7387dc1f3f2589d9024ec0b45846b19daa7a75821224874168eb951accdbaa5ee44ff941eda5bad8cdb7777a302be0aba6ced477496d5e1090f5cb0cd0c596ad44f85837abf2694b5daaaa5ca1309c67391a5351389e51f4540cab8e1e63d8f") r10 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba00001b2cc32b38d3740000ffffffefffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r11, 0x104, 0x5, 0x0, &(0x7f0000000180)) write$cgroup_devices(r9, 0x0, 0xffdd) 666.670348ms ago: executing program 3 (id=935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 512.028771ms ago: executing program 3 (id=936): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000010) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xffffffe4}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r4, 0x0, 0x14, 0x0, &(0x7f0000000f80)=0xfffffffffffffe5c) r5 = socket$kcm(0xa, 0x3, 0x3a) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r7, &(0x7f0000000b40), 0x0, 0x4, 0xffffffff) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 455.988861ms ago: executing program 0 (id=937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20004168}, 0x0) 357.327515ms ago: executing program 3 (id=938): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd610000e500122f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be"], 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1], 0x40}, 0x1, 0x0, 0x0, 0x40008c5}, 0xc010) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd610000e500122f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be"], 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1], 0x40}, 0x1, 0x0, 0x0, 0x40008c5}, 0xc010) (async) 334.294133ms ago: executing program 0 (id=939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (fail_nth: 3) 280.766738ms ago: executing program 4 (id=940): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x8800) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) close(r1) 147.586431ms ago: executing program 3 (id=941): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000021000000000800000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 147.358592ms ago: executing program 0 (id=942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000009e680)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000010000060066008e880000520033"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 146.901356ms ago: executing program 4 (id=943): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0xffffffff, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r4, 0x0, 0x0, 0x80800) (async) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) 80.608917ms ago: executing program 1 (id=944): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x2, 0x3, 0xd4, 0x5, 0x3, 0x5, 0x8, 0x4, 0x6, 0xe, 0x2, 0x9, 0xfc, 0x4}, 0xe) recvfrom$rxrpc(r0, &(0x7f00000004c0)=""/190, 0xbe, 0x0, &(0x7f0000000240)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xdcb2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0x4, 0x760cda05bcf95fa0}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x5, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800}, 0x50) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xc, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x5, 0x100, @void}}}}}}}}}, 0x46) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=945): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251f0000000a0001"], 0x20}, 0x1, 0x0, 0x0, 0x4c010}, 0x4) (fail_nth: 3) kernel console output (not intermixed with test programs): up: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.204073][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.891508][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.921324][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.940023][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.948268][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.956453][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.965062][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.973225][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.980701][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.987907][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.997435][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.008025][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.008390][ T5881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.016613][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.026442][ T5881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.030026][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.044352][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.053641][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.061716][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.069585][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.079553][ T5884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.088165][ T5884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.098577][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.107379][ T5882] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.115366][ T5882] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.123774][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.750721][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 88.853492][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 88.968323][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 89.003137][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 89.131041][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 89.169924][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.177135][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.185923][ T5873] bridge_slave_0: entered allmulticast mode [ 89.194166][ T5873] bridge_slave_0: entered promiscuous mode [ 89.236791][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.244142][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.251608][ T5873] bridge_slave_1: entered allmulticast mode [ 89.259164][ T5873] bridge_slave_1: entered promiscuous mode [ 89.281761][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.289112][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.296254][ T5863] bridge_slave_0: entered allmulticast mode [ 89.303851][ T5863] bridge_slave_0: entered promiscuous mode [ 89.387673][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.394901][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.402467][ T5863] bridge_slave_1: entered allmulticast mode [ 89.410762][ T5863] bridge_slave_1: entered promiscuous mode [ 89.446262][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.459295][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.506137][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.515513][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.522967][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.530818][ T5871] bridge_slave_0: entered allmulticast mode [ 89.538240][ T5871] bridge_slave_0: entered promiscuous mode [ 89.548096][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.556059][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.563993][ T5871] bridge_slave_1: entered allmulticast mode [ 89.571380][ T5871] bridge_slave_1: entered promiscuous mode [ 89.597144][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.604469][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.611832][ T5869] bridge_slave_0: entered allmulticast mode [ 89.619843][ T5869] bridge_slave_0: entered promiscuous mode [ 89.629665][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.673533][ T5873] team0: Port device team_slave_0 added [ 89.693995][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.701230][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.709849][ T5869] bridge_slave_1: entered allmulticast mode [ 89.717132][ T5869] bridge_slave_1: entered promiscuous mode [ 89.754521][ T5873] team0: Port device team_slave_1 added [ 89.803243][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.815288][ T5863] team0: Port device team_slave_0 added [ 89.865611][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.876777][ T5863] team0: Port device team_slave_1 added [ 89.911174][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.918377][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.926143][ T5862] bridge_slave_0: entered allmulticast mode [ 89.934065][ T5862] bridge_slave_0: entered promiscuous mode [ 89.943392][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.950669][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.957881][ T5862] bridge_slave_1: entered allmulticast mode [ 89.966464][ T5862] bridge_slave_1: entered promiscuous mode [ 89.975614][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.989302][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.030626][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.037616][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.063659][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.077244][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.084277][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.110843][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.123595][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.130611][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.156562][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.173225][ T5864] Bluetooth: hci0: command tx timeout [ 90.173536][ T5867] Bluetooth: hci1: command tx timeout [ 90.179429][ T5864] Bluetooth: hci4: command tx timeout [ 90.184706][ T5868] Bluetooth: hci2: command tx timeout [ 90.248596][ T5868] Bluetooth: hci3: command tx timeout [ 90.253115][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.261524][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.287524][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.321901][ T5869] team0: Port device team_slave_0 added [ 90.330927][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.342741][ T5871] team0: Port device team_slave_0 added [ 90.351897][ T5871] team0: Port device team_slave_1 added [ 90.369544][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.396265][ T5869] team0: Port device team_slave_1 added [ 90.502749][ T5862] team0: Port device team_slave_0 added [ 90.512334][ T5862] team0: Port device team_slave_1 added [ 90.532531][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.540081][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.567033][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.579970][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.586958][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.612937][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.644107][ T5863] hsr_slave_0: entered promiscuous mode [ 90.650777][ T5863] hsr_slave_1: entered promiscuous mode [ 90.684254][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.691525][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.717827][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.738028][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.745275][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.775956][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.794223][ T5873] hsr_slave_0: entered promiscuous mode [ 90.801896][ T5873] hsr_slave_1: entered promiscuous mode [ 90.808263][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 90.814601][ T5873] Cannot create hsr debugfs directory [ 90.825219][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.841451][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.867968][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.931716][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.939070][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.965177][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.054688][ T5869] hsr_slave_0: entered promiscuous mode [ 91.061678][ T5869] hsr_slave_1: entered promiscuous mode [ 91.067851][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 91.073805][ T5869] Cannot create hsr debugfs directory [ 91.183376][ T5871] hsr_slave_0: entered promiscuous mode [ 91.189819][ T5871] hsr_slave_1: entered promiscuous mode [ 91.195997][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 91.202677][ T5871] Cannot create hsr debugfs directory [ 91.306457][ T5862] hsr_slave_0: entered promiscuous mode [ 91.314117][ T5862] hsr_slave_1: entered promiscuous mode [ 91.325607][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 91.332345][ T5862] Cannot create hsr debugfs directory [ 91.794465][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.807451][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.836091][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.852705][ T983] cfg80211: failed to load regulatory.db [ 91.864906][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.943521][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.954737][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.967346][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.977709][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.070173][ T5869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.094844][ T5869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.107883][ T5869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.142249][ T5869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.194254][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.228878][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.241173][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.250329][ T5868] Bluetooth: hci2: command tx timeout [ 92.250499][ T5867] Bluetooth: hci1: command tx timeout [ 92.255778][ T5882] Bluetooth: hci0: command tx timeout [ 92.266816][ T5864] Bluetooth: hci4: command tx timeout [ 92.282894][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.331476][ T5864] Bluetooth: hci3: command tx timeout [ 92.392515][ T5871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.421491][ T5871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.435923][ T5871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.447572][ T5871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.567886][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.587691][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.620739][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.652775][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.660143][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.679467][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.686623][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.706577][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.739577][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.746711][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.758103][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.765290][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.809235][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.832810][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.933503][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.946632][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.953804][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.967884][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.009834][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.016980][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.030514][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.037851][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.055762][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.066305][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.073483][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.236097][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.316107][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.323338][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.341553][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.348795][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.676729][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.767357][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.893755][ T5863] veth0_vlan: entered promiscuous mode [ 93.971056][ T5863] veth1_vlan: entered promiscuous mode [ 94.034755][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.044079][ T5873] veth0_vlan: entered promiscuous mode [ 94.065841][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.142479][ T5873] veth1_vlan: entered promiscuous mode [ 94.156497][ T5863] veth0_macvtap: entered promiscuous mode [ 94.183031][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.216760][ T5863] veth1_macvtap: entered promiscuous mode [ 94.295290][ T5862] veth0_vlan: entered promiscuous mode [ 94.314876][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.328809][ T5864] Bluetooth: hci4: command tx timeout [ 94.335471][ T5864] Bluetooth: hci2: command tx timeout [ 94.341076][ T5868] Bluetooth: hci0: command tx timeout [ 94.341121][ T5868] Bluetooth: hci1: command tx timeout [ 94.362774][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.398710][ T1331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.408136][ T1331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.419605][ T5864] Bluetooth: hci3: command tx timeout [ 94.435820][ T5862] veth1_vlan: entered promiscuous mode [ 94.465264][ T1331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.482948][ T1331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.502308][ T5873] veth0_macvtap: entered promiscuous mode [ 94.527016][ T5873] veth1_macvtap: entered promiscuous mode [ 94.565787][ T5871] veth0_vlan: entered promiscuous mode [ 94.606157][ T5871] veth1_vlan: entered promiscuous mode [ 94.624199][ T5862] veth0_macvtap: entered promiscuous mode [ 94.649746][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.703800][ T5862] veth1_macvtap: entered promiscuous mode [ 94.716457][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.746725][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.766457][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.768391][ T1331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.786848][ T1331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.807774][ T5869] veth0_vlan: entered promiscuous mode [ 94.819692][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.830444][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.884689][ T5871] veth0_macvtap: entered promiscuous mode [ 94.897496][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.922157][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.933888][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.945874][ T5871] veth1_macvtap: entered promiscuous mode [ 94.971656][ T5869] veth1_vlan: entered promiscuous mode [ 94.981838][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.031362][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.040404][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.048253][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.092505][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.110393][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.127266][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.137596][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.191231][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.240167][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.260591][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.273860][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.316954][ T1331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.381303][ T1331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.395020][ T1331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.436000][ T5990] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 95.436272][ T5869] veth0_macvtap: entered promiscuous mode [ 95.454106][ T1331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.473407][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.483775][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.493182][ T5869] veth1_macvtap: entered promiscuous mode [ 95.586962][ T5992] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 95.599923][ T5992] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 95.625749][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.664715][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.694619][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.742311][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.788592][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.789429][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.803539][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.815594][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.966744][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.995035][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.252052][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.267804][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.270616][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.295646][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.410193][ T5864] Bluetooth: hci2: command tx timeout [ 96.418653][ T5864] Bluetooth: hci1: command tx timeout [ 96.424098][ T5864] Bluetooth: hci0: command tx timeout [ 96.427277][ T5882] Bluetooth: hci4: command tx timeout [ 96.489432][ T5868] Bluetooth: hci3: command tx timeout [ 96.516326][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.580499][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.973458][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 97.116585][ T6026] Zero length message leads to an empty skb [ 97.135084][ T6024] IPVS: Error joining to the multicast group [ 97.198748][ T6032] warning: `syz.3.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.358299][ T6038] netlink: 104 bytes leftover after parsing attributes in process `syz.4.25'. [ 97.918386][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 97.927620][ T6061] IPVS: Error joining to the multicast group [ 97.950176][ T6062] netlink: 204 bytes leftover after parsing attributes in process `syz.4.30'. [ 97.984743][ T6062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.30'. [ 98.257303][ T3469] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.685824][ T6079] netlink: 104 bytes leftover after parsing attributes in process `syz.0.40'. [ 99.216344][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 99.269249][ T6091] IPVS: Error joining to the multicast group [ 99.697599][ T6106] netlink: 44 bytes leftover after parsing attributes in process `syz.3.52'. [ 100.150026][ T6123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.185503][ T6129] netlink: 56 bytes leftover after parsing attributes in process `syz.0.58'. [ 100.217592][ T6123] bond0: (slave rose0): Enslaving as an active interface with an up link [ 100.946350][ T6159] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.275827][ T6168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.73'. [ 101.847301][ T6183] syzkaller0: entered promiscuous mode [ 101.871097][ T6183] syzkaller0: entered allmulticast mode [ 102.363601][ T6208] __nla_validate_parse: 1 callbacks suppressed [ 102.363621][ T6208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.87'. [ 102.405115][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.87'. [ 102.437244][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 102.472868][ T6213] netlink: 'syz.4.87': attribute type 10 has an invalid length. [ 102.856958][ T6213] team0: Port device netdevsim0 added [ 103.209647][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 103.238735][ T6235] netlink: 84 bytes leftover after parsing attributes in process `syz.2.95'. [ 103.263179][ T6241] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 103.282248][ T6241] netlink: 'syz.0.96': attribute type 1 has an invalid length. [ 103.348245][ T6245] netlink: 'syz.2.95': attribute type 21 has an invalid length. [ 103.365327][ T6246] netlink: 'syz.1.98': attribute type 10 has an invalid length. [ 103.439632][ T6246] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 103.475499][ T6246] team0: Failed to send options change via netlink (err -105) [ 103.551569][ T6246] team0: Port device netdevsim0 added [ 103.624152][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'. [ 103.796901][ T6261] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 103.810462][ T6261] netlink: 'syz.2.102': attribute type 1 has an invalid length. [ 103.993560][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.107'. [ 104.474589][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 104.508976][ T6285] netlink: 84 bytes leftover after parsing attributes in process `syz.3.110'. [ 104.558002][ T6282] netlink: 'syz.3.110': attribute type 21 has an invalid length. [ 104.693625][ T6291] netlink: 40 bytes leftover after parsing attributes in process `syz.4.112'. [ 104.917125][ T6303] netlink: 'syz.0.113': attribute type 4 has an invalid length. [ 105.411933][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.420813][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.621443][ T6313] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.629277][ T6313] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.641782][ T6330] netlink: 'syz.0.126': attribute type 21 has an invalid length. [ 105.856897][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.885046][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.119865][ T149] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.151812][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.228701][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.238391][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.529686][ T6359] Bluetooth: MGMT ver 1.23 [ 106.676142][ T6362] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 106.705643][ T6362] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 107.165784][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.173794][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.346874][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.363875][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.597477][ T6390] __nla_validate_parse: 32 callbacks suppressed [ 107.597497][ T6390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.153'. [ 107.627051][ T6390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.153'. [ 107.709341][ T6390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.153'. [ 107.801383][ T6390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.153'. [ 107.856330][ T6390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.153'. [ 107.883204][ T6390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.153'. [ 107.896822][ T6390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.153'. [ 107.907924][ T6390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.153'. [ 107.924611][ T6390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.153'. [ 107.951257][ T6390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.153'. [ 107.969643][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.029529][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.055678][ T6402] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 108.064944][ T6402] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 108.113165][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.154212][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.663951][ T6426] netlink: 'syz.3.168': attribute type 10 has an invalid length. [ 108.698794][ T6426] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 108.741146][ T6426] team0: Port device netdevsim0 added [ 110.604437][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 110.870170][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.881696][ T5923] IPVS: starting estimator thread 0... [ 110.978680][ T6519] IPVS: using max 25 ests per chain, 60000 per kthread [ 111.018063][ T6518] tipc: Started in network mode [ 111.023460][ T6518] tipc: Node identity ac1414aa, cluster identity 4711 [ 111.031512][ T6518] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 111.040827][ T6518] tipc: Enabled bearer , priority 10 [ 111.169719][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 111.211671][ T6532] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 111.308523][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 111.458870][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 111.598629][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 111.738680][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 111.878643][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 112.018605][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 112.188732][ T5923] tipc: Node number set to 2886997162 [ 112.278737][ T6578] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 112.308501][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 112.578495][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 112.927954][ T6606] bridge0: entered allmulticast mode [ 112.970686][ T6607] __nla_validate_parse: 108 callbacks suppressed [ 112.970706][ T6607] netlink: 1 bytes leftover after parsing attributes in process `syz.1.237'. [ 113.068626][ T6614] netlink: 104 bytes leftover after parsing attributes in process `syz.0.240'. [ 113.086999][ T6600] pim6reg: entered allmulticast mode [ 113.106045][ T6591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.234'. [ 113.343517][ T6623] netlink: 204 bytes leftover after parsing attributes in process `syz.4.239'. [ 113.394024][ T6623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.239'. [ 113.667794][ T6630] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 113.864990][ T6639] FAULT_INJECTION: forcing a failure. [ 113.864990][ T6639] name failslab, interval 1, probability 0, space 0, times 1 [ 113.921973][ T6641] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.937091][ T6639] CPU: 0 UID: 0 PID: 6639 Comm: syz.3.245 Not tainted syzkaller #0 PREEMPT(full) [ 113.937117][ T6639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.937137][ T6639] Call Trace: [ 113.937145][ T6639] [ 113.937154][ T6639] dump_stack_lvl+0x189/0x250 [ 113.937188][ T6639] ? __pfx____ratelimit+0x10/0x10 [ 113.937210][ T6639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.937234][ T6639] ? __pfx__printk+0x10/0x10 [ 113.937270][ T6639] ? __pfx___might_resched+0x10/0x10 [ 113.937295][ T6639] should_fail_ex+0x414/0x560 [ 113.937336][ T6639] should_failslab+0xa8/0x100 [ 113.937368][ T6639] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 113.937398][ T6639] ? __alloc_skb+0x112/0x2d0 [ 113.937424][ T6639] __alloc_skb+0x112/0x2d0 [ 113.937449][ T6639] netlink_sendmsg+0x5c6/0xb30 [ 113.937492][ T6639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.937516][ T6639] ? aa_sock_msg_perm+0xf1/0x1d0 [ 113.937537][ T6639] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 113.937558][ T6639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.937580][ T6639] __sock_sendmsg+0x219/0x270 [ 113.937611][ T6639] ____sys_sendmsg+0x505/0x830 [ 113.937641][ T6639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.937674][ T6639] ? import_iovec+0x74/0xa0 [ 113.937701][ T6639] ___sys_sendmsg+0x21f/0x2a0 [ 113.937726][ T6639] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.937808][ T6639] ? __fget_files+0x2a/0x420 [ 113.937825][ T6639] ? __fget_files+0x3a0/0x420 [ 113.937855][ T6639] __x64_sys_sendmsg+0x19b/0x260 [ 113.937882][ T6639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.937917][ T6639] ? __pfx_ksys_write+0x10/0x10 [ 113.937941][ T6639] ? rcu_is_watching+0x15/0xb0 [ 113.937968][ T6639] ? do_syscall_64+0xbe/0x3b0 [ 113.937994][ T6639] do_syscall_64+0xfa/0x3b0 [ 113.938015][ T6639] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.938034][ T6639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.938054][ T6639] ? clear_bhb_loop+0x60/0xb0 [ 113.938079][ T6639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.938098][ T6639] RIP: 0033:0x7f3a2a78ebe9 [ 113.938122][ T6639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.938139][ T6639] RSP: 002b:00007f3a2b61a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.938160][ T6639] RAX: ffffffffffffffda RBX: 00007f3a2a9c5fa0 RCX: 00007f3a2a78ebe9 [ 113.938175][ T6639] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 113.938187][ T6639] RBP: 00007f3a2b61a090 R08: 0000000000000000 R09: 0000000000000000 [ 113.938199][ T6639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.938211][ T6639] R13: 00007f3a2a9c6038 R14: 00007f3a2a9c5fa0 R15: 00007ffdfe9ab7a8 [ 113.938243][ T6639] [ 114.519942][ T6661] FAULT_INJECTION: forcing a failure. [ 114.519942][ T6661] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.569530][ T6661] CPU: 0 UID: 0 PID: 6661 Comm: syz.1.255 Not tainted syzkaller #0 PREEMPT(full) [ 114.569559][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.569570][ T6661] Call Trace: [ 114.569578][ T6661] [ 114.569586][ T6661] dump_stack_lvl+0x189/0x250 [ 114.569616][ T6661] ? __pfx____ratelimit+0x10/0x10 [ 114.569637][ T6661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.569662][ T6661] ? __pfx__printk+0x10/0x10 [ 114.569706][ T6661] should_fail_ex+0x414/0x560 [ 114.569737][ T6661] _copy_from_user+0x2d/0xb0 [ 114.569763][ T6661] __copy_msghdr+0x3c5/0x5b0 [ 114.569792][ T6661] ___sys_sendmsg+0x1a5/0x2a0 [ 114.569817][ T6661] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.569888][ T6661] ? __fget_files+0x2a/0x420 [ 114.569905][ T6661] ? __fget_files+0x3a0/0x420 [ 114.569934][ T6661] __x64_sys_sendmsg+0x19b/0x260 [ 114.569961][ T6661] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.569996][ T6661] ? __pfx_ksys_write+0x10/0x10 [ 114.570020][ T6661] ? rcu_is_watching+0x15/0xb0 [ 114.570046][ T6661] ? do_syscall_64+0xbe/0x3b0 [ 114.570072][ T6661] do_syscall_64+0xfa/0x3b0 [ 114.570092][ T6661] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.570111][ T6661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.570130][ T6661] ? clear_bhb_loop+0x60/0xb0 [ 114.570155][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.570175][ T6661] RIP: 0033:0x7f4be3d8ebe9 [ 114.570193][ T6661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.570209][ T6661] RSP: 002b:00007f4be4c2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.570230][ T6661] RAX: ffffffffffffffda RBX: 00007f4be3fc5fa0 RCX: 00007f4be3d8ebe9 [ 114.570244][ T6661] RDX: 000000000000d0a0 RSI: 0000200000000440 RDI: 0000000000000003 [ 114.570257][ T6661] RBP: 00007f4be4c2b090 R08: 0000000000000000 R09: 0000000000000000 [ 114.570277][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.570288][ T6661] R13: 00007f4be3fc6038 R14: 00007f4be3fc5fa0 R15: 00007ffd3ba7fc78 [ 114.570319][ T6661] [ 115.214149][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.261'. [ 115.358526][ T6690] FAULT_INJECTION: forcing a failure. [ 115.358526][ T6690] name failslab, interval 1, probability 0, space 0, times 0 [ 115.373604][ T6690] CPU: 1 UID: 0 PID: 6690 Comm: syz.0.264 Not tainted syzkaller #0 PREEMPT(full) [ 115.373631][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.373643][ T6690] Call Trace: [ 115.373651][ T6690] [ 115.373660][ T6690] dump_stack_lvl+0x189/0x250 [ 115.373690][ T6690] ? __pfx____ratelimit+0x10/0x10 [ 115.373712][ T6690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.373736][ T6690] ? __pfx__printk+0x10/0x10 [ 115.373771][ T6690] ? __pfx___might_resched+0x10/0x10 [ 115.373795][ T6690] should_fail_ex+0x414/0x560 [ 115.373828][ T6690] should_failslab+0xa8/0x100 [ 115.373860][ T6690] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 115.373888][ T6690] ? __alloc_skb+0x112/0x2d0 [ 115.373914][ T6690] __alloc_skb+0x112/0x2d0 [ 115.373939][ T6690] netlink_sendmsg+0x5c6/0xb30 [ 115.373972][ T6690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.373996][ T6690] ? aa_sock_msg_perm+0xf1/0x1d0 [ 115.374016][ T6690] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.374038][ T6690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.374060][ T6690] __sock_sendmsg+0x219/0x270 [ 115.374093][ T6690] ____sys_sendmsg+0x505/0x830 [ 115.374123][ T6690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.374190][ T6690] ? import_iovec+0x74/0xa0 [ 115.374218][ T6690] ___sys_sendmsg+0x21f/0x2a0 [ 115.374244][ T6690] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.374303][ T6690] ? __fget_files+0x2a/0x420 [ 115.374320][ T6690] ? __fget_files+0x3a0/0x420 [ 115.374348][ T6690] __x64_sys_sendmsg+0x19b/0x260 [ 115.374374][ T6690] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.374414][ T6690] ? __pfx_ksys_write+0x10/0x10 [ 115.374438][ T6690] ? rcu_is_watching+0x15/0xb0 [ 115.374463][ T6690] ? do_syscall_64+0xbe/0x3b0 [ 115.374489][ T6690] do_syscall_64+0xfa/0x3b0 [ 115.374508][ T6690] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.374527][ T6690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.374547][ T6690] ? clear_bhb_loop+0x60/0xb0 [ 115.374571][ T6690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.374589][ T6690] RIP: 0033:0x7fb7a518ebe9 [ 115.374607][ T6690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.374623][ T6690] RSP: 002b:00007fb7a33f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.374644][ T6690] RAX: ffffffffffffffda RBX: 00007fb7a53c5fa0 RCX: 00007fb7a518ebe9 [ 115.374658][ T6690] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000005 [ 115.374670][ T6690] RBP: 00007fb7a33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 115.374682][ T6690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.374693][ T6690] R13: 00007fb7a53c6038 R14: 00007fb7a53c5fa0 R15: 00007ffda66a3308 [ 115.374724][ T6690] [ 116.258493][ C1] net_ratelimit: 3 callbacks suppressed [ 116.258512][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 116.483482][ T6725] FAULT_INJECTION: forcing a failure. [ 116.483482][ T6725] name failslab, interval 1, probability 0, space 0, times 0 [ 116.563659][ T6725] CPU: 0 UID: 0 PID: 6725 Comm: syz.2.276 Not tainted syzkaller #0 PREEMPT(full) [ 116.563686][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.563698][ T6725] Call Trace: [ 116.563706][ T6725] [ 116.563715][ T6725] dump_stack_lvl+0x189/0x250 [ 116.563744][ T6725] ? __pfx____ratelimit+0x10/0x10 [ 116.563763][ T6725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.563787][ T6725] ? __pfx__printk+0x10/0x10 [ 116.563821][ T6725] ? __pfx___might_resched+0x10/0x10 [ 116.563845][ T6725] should_fail_ex+0x414/0x560 [ 116.563877][ T6725] should_failslab+0xa8/0x100 [ 116.563908][ T6725] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 116.563935][ T6725] ? __alloc_skb+0x112/0x2d0 [ 116.563959][ T6725] __alloc_skb+0x112/0x2d0 [ 116.563983][ T6725] netlink_sendmsg+0x5c6/0xb30 [ 116.564014][ T6725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.564038][ T6725] ? aa_sock_msg_perm+0xf1/0x1d0 [ 116.564059][ T6725] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.564080][ T6725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.564108][ T6725] __sock_sendmsg+0x219/0x270 [ 116.564139][ T6725] ____sys_sendmsg+0x505/0x830 [ 116.564168][ T6725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.564201][ T6725] ? import_iovec+0x74/0xa0 [ 116.564228][ T6725] ___sys_sendmsg+0x21f/0x2a0 [ 116.564254][ T6725] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.564316][ T6725] ? __fget_files+0x2a/0x420 [ 116.564332][ T6725] ? __fget_files+0x3a0/0x420 [ 116.564360][ T6725] __x64_sys_sendmsg+0x19b/0x260 [ 116.564387][ T6725] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.564420][ T6725] ? __pfx_ksys_write+0x10/0x10 [ 116.564444][ T6725] ? rcu_is_watching+0x15/0xb0 [ 116.564469][ T6725] ? do_syscall_64+0xbe/0x3b0 [ 116.564494][ T6725] do_syscall_64+0xfa/0x3b0 [ 116.564513][ T6725] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.564532][ T6725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.564551][ T6725] ? clear_bhb_loop+0x60/0xb0 [ 116.564575][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.564594][ T6725] RIP: 0033:0x7f938b58ebe9 [ 116.564610][ T6725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.564626][ T6725] RSP: 002b:00007f938c33a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.564646][ T6725] RAX: ffffffffffffffda RBX: 00007f938b7c5fa0 RCX: 00007f938b58ebe9 [ 116.564660][ T6725] RDX: 0000000000040084 RSI: 0000200000000080 RDI: 0000000000000003 [ 116.564672][ T6725] RBP: 00007f938c33a090 R08: 0000000000000000 R09: 0000000000000000 [ 116.564683][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.564694][ T6725] R13: 00007f938b7c6038 R14: 00007f938b7c5fa0 R15: 00007ffcf0221d08 [ 116.564725][ T6725] [ 116.917697][ T6740] netlink: 'syz.0.281': attribute type 10 has an invalid length. [ 116.959820][ T6743] netlink: 'syz.3.280': attribute type 1 has an invalid length. [ 117.124938][ T6743] netlink: 224 bytes leftover after parsing attributes in process `syz.3.280'. [ 117.286719][ T6740] team0: Device ipvlan1 failed to register rx_handler [ 117.298476][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 118.215766][ T6795] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.301'. [ 118.328593][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 118.424844][ T6804] FAULT_INJECTION: forcing a failure. [ 118.424844][ T6804] name failslab, interval 1, probability 0, space 0, times 0 [ 118.452278][ T6804] CPU: 0 UID: 0 PID: 6804 Comm: syz.0.305 Not tainted syzkaller #0 PREEMPT(full) [ 118.452307][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.452319][ T6804] Call Trace: [ 118.452328][ T6804] [ 118.452337][ T6804] dump_stack_lvl+0x189/0x250 [ 118.452368][ T6804] ? __pfx____ratelimit+0x10/0x10 [ 118.452390][ T6804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.452415][ T6804] ? __pfx__printk+0x10/0x10 [ 118.452452][ T6804] ? __pfx___might_resched+0x10/0x10 [ 118.452470][ T6804] ? fs_reclaim_acquire+0x7d/0x100 [ 118.452508][ T6804] should_fail_ex+0x414/0x560 [ 118.452542][ T6804] should_failslab+0xa8/0x100 [ 118.452574][ T6804] __kmalloc_noprof+0xcb/0x4f0 [ 118.452601][ T6804] ? bpf_test_init+0xc2/0x170 [ 118.452625][ T6804] bpf_test_init+0xc2/0x170 [ 118.452649][ T6804] bpf_prog_test_run_xdp+0x37c/0x1000 [ 118.452688][ T6804] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 118.452715][ T6804] ? __fget_files+0x2a/0x420 [ 118.452739][ T6804] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 118.452762][ T6804] bpf_prog_test_run+0x2c7/0x340 [ 118.452796][ T6804] __sys_bpf+0x581/0x870 [ 118.452827][ T6804] ? __pfx___sys_bpf+0x10/0x10 [ 118.452869][ T6804] ? ksys_write+0x22a/0x250 [ 118.452900][ T6804] ? __pfx_ksys_write+0x10/0x10 [ 118.452925][ T6804] ? rcu_is_watching+0x15/0xb0 [ 118.452954][ T6804] __x64_sys_bpf+0x7c/0x90 [ 118.452980][ T6804] do_syscall_64+0xfa/0x3b0 [ 118.453002][ T6804] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.453022][ T6804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.453042][ T6804] ? clear_bhb_loop+0x60/0xb0 [ 118.453067][ T6804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.453086][ T6804] RIP: 0033:0x7fb7a518ebe9 [ 118.453105][ T6804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.453126][ T6804] RSP: 002b:00007fb7a33f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.453143][ T6804] RAX: ffffffffffffffda RBX: 00007fb7a53c5fa0 RCX: 00007fb7a518ebe9 [ 118.453155][ T6804] RDX: 000000000000001e RSI: 0000200000000000 RDI: 000000000000000a [ 118.453165][ T6804] RBP: 00007fb7a33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 118.453174][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.453183][ T6804] R13: 00007fb7a53c6038 R14: 00007fb7a53c5fa0 R15: 00007ffda66a3308 [ 118.453209][ T6804] [ 119.356305][ T6831] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.369474][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 119.473014][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 119.758079][ T6834] bridge_slave_1: left allmulticast mode [ 119.760615][ T6852] netlink: 56 bytes leftover after parsing attributes in process `syz.3.318'. [ 119.783967][ T6834] bridge_slave_1: left promiscuous mode [ 119.808450][ T6834] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.893446][ T6834] bridge_slave_0: left allmulticast mode [ 119.911354][ T6834] bridge_slave_0: left promiscuous mode [ 119.942434][ T6834] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.077781][ T6834] bridge0 (unregistering): left allmulticast mode [ 120.408580][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 120.824129][ T6883] veth3: entered promiscuous mode [ 121.448516][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 121.659465][ T6918] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 121.681206][ T6918] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 121.939704][ T6927] netlink: 60 bytes leftover after parsing attributes in process `syz.4.344'. [ 122.001345][ T6928] netlink: 60 bytes leftover after parsing attributes in process `syz.4.344'. [ 122.164830][ T6945] FAULT_INJECTION: forcing a failure. [ 122.164830][ T6945] name failslab, interval 1, probability 0, space 0, times 0 [ 122.213487][ T6945] CPU: 1 UID: 0 PID: 6945 Comm: syz.3.349 Not tainted syzkaller #0 PREEMPT(full) [ 122.213515][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.213547][ T6945] Call Trace: [ 122.213556][ T6945] [ 122.213565][ T6945] dump_stack_lvl+0x189/0x250 [ 122.213603][ T6945] ? __pfx____ratelimit+0x10/0x10 [ 122.213624][ T6945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.213648][ T6945] ? __pfx__printk+0x10/0x10 [ 122.213683][ T6945] ? __pfx___might_resched+0x10/0x10 [ 122.213708][ T6945] should_fail_ex+0x414/0x560 [ 122.213741][ T6945] should_failslab+0xa8/0x100 [ 122.213774][ T6945] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 122.213808][ T6945] ? __alloc_skb+0x112/0x2d0 [ 122.213834][ T6945] __alloc_skb+0x112/0x2d0 [ 122.213859][ T6945] netlink_sendmsg+0x5c6/0xb30 [ 122.213892][ T6945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.213917][ T6945] ? aa_sock_msg_perm+0xf1/0x1d0 [ 122.213938][ T6945] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.213960][ T6945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.213982][ T6945] __sock_sendmsg+0x219/0x270 [ 122.214015][ T6945] ____sys_sendmsg+0x505/0x830 [ 122.214046][ T6945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.214080][ T6945] ? import_iovec+0x74/0xa0 [ 122.214108][ T6945] ___sys_sendmsg+0x21f/0x2a0 [ 122.214134][ T6945] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.214197][ T6945] ? __fget_files+0x2a/0x420 [ 122.214213][ T6945] ? __fget_files+0x3a0/0x420 [ 122.214242][ T6945] __x64_sys_sendmsg+0x19b/0x260 [ 122.214269][ T6945] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.214303][ T6945] ? __pfx_ksys_write+0x10/0x10 [ 122.214336][ T6945] ? do_syscall_64+0xbe/0x3b0 [ 122.214361][ T6945] do_syscall_64+0xfa/0x3b0 [ 122.214382][ T6945] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.214401][ T6945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.214420][ T6945] ? clear_bhb_loop+0x60/0xb0 [ 122.214444][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.214464][ T6945] RIP: 0033:0x7f3a2a78ebe9 [ 122.214487][ T6945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.214504][ T6945] RSP: 002b:00007f3a2b61a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.214530][ T6945] RAX: ffffffffffffffda RBX: 00007f3a2a9c5fa0 RCX: 00007f3a2a78ebe9 [ 122.214544][ T6945] RDX: 0000000000048002 RSI: 0000200000000080 RDI: 0000000000000003 [ 122.214557][ T6945] RBP: 00007f3a2b61a090 R08: 0000000000000000 R09: 0000000000000000 [ 122.214568][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.214580][ T6945] R13: 00007f3a2a9c6038 R14: 00007f3a2a9c5fa0 R15: 00007ffdfe9ab7a8 [ 122.214613][ T6945] [ 122.263287][ T6946] netlink: 56 bytes leftover after parsing attributes in process `syz.2.350'. [ 122.361981][ T6949] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.353'. [ 122.466394][ T6950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.352'. [ 122.498621][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 122.619690][ T6950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.352'. [ 122.698670][ T6950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.352'. [ 122.807213][ T6964] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 122.843352][ T6964] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 123.417708][ T6993] __nla_validate_parse: 23 callbacks suppressed [ 123.417730][ T6993] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.367'. [ 123.520479][ T6997] syzkaller0: create flow: hash 682851067 index 1 [ 123.528641][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 123.695888][ T7008] netlink: 204 bytes leftover after parsing attributes in process `syz.0.370'. [ 123.723750][ T7008] netlink: 72 bytes leftover after parsing attributes in process `syz.0.370'. [ 123.743118][ T7008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.370'. [ 123.817108][ T37] syzkaller0: tun_net_xmit 76 [ 123.824051][ T37] syzkaller0: tun_net_xmit 48 [ 123.838712][ T5923] syzkaller0: tun_net_xmit 76 [ 123.864421][ T5985] syzkaller0: tun_net_xmit 76 [ 123.883516][ T6991] syzkaller0: delete flow: hash 682851067 index 1 [ 123.936158][ T7014] FAULT_INJECTION: forcing a failure. [ 123.936158][ T7014] name failslab, interval 1, probability 0, space 0, times 0 [ 123.954125][ T7014] CPU: 0 UID: 0 PID: 7014 Comm: syz.0.373 Not tainted syzkaller #0 PREEMPT(full) [ 123.954152][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.954165][ T7014] Call Trace: [ 123.954172][ T7014] [ 123.954181][ T7014] dump_stack_lvl+0x189/0x250 [ 123.954211][ T7014] ? __pfx____ratelimit+0x10/0x10 [ 123.954232][ T7014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.954256][ T7014] ? __pfx__printk+0x10/0x10 [ 123.954291][ T7014] ? __pfx___might_resched+0x10/0x10 [ 123.954316][ T7014] should_fail_ex+0x414/0x560 [ 123.954349][ T7014] should_failslab+0xa8/0x100 [ 123.954380][ T7014] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 123.954409][ T7014] ? __alloc_skb+0x112/0x2d0 [ 123.954434][ T7014] __alloc_skb+0x112/0x2d0 [ 123.954468][ T7014] netlink_sendmsg+0x5c6/0xb30 [ 123.954499][ T7014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.954523][ T7014] ? aa_sock_msg_perm+0xf1/0x1d0 [ 123.954544][ T7014] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 123.954566][ T7014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.954587][ T7014] __sock_sendmsg+0x219/0x270 [ 123.954614][ T7014] ____sys_sendmsg+0x505/0x830 [ 123.954640][ T7014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.954667][ T7014] ? import_iovec+0x74/0xa0 [ 123.954692][ T7014] ___sys_sendmsg+0x21f/0x2a0 [ 123.954716][ T7014] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.954771][ T7014] ? __fget_files+0x2a/0x420 [ 123.954786][ T7014] ? __fget_files+0x3a0/0x420 [ 123.954812][ T7014] __x64_sys_sendmsg+0x19b/0x260 [ 123.954838][ T7014] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.954869][ T7014] ? __pfx_ksys_write+0x10/0x10 [ 123.954893][ T7014] ? rcu_is_watching+0x15/0xb0 [ 123.954919][ T7014] ? do_syscall_64+0xbe/0x3b0 [ 123.954944][ T7014] do_syscall_64+0xfa/0x3b0 [ 123.954963][ T7014] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.954982][ T7014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.955001][ T7014] ? clear_bhb_loop+0x60/0xb0 [ 123.955025][ T7014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.955043][ T7014] RIP: 0033:0x7fb7a518ebe9 [ 123.955061][ T7014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.955077][ T7014] RSP: 002b:00007fb7a33f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.955103][ T7014] RAX: ffffffffffffffda RBX: 00007fb7a53c5fa0 RCX: 00007fb7a518ebe9 [ 123.955117][ T7014] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 123.955128][ T7014] RBP: 00007fb7a33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 123.955140][ T7014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.955151][ T7014] R13: 00007fb7a53c6038 R14: 00007fb7a53c5fa0 R15: 00007ffda66a3308 [ 123.955183][ T7014] [ 124.570542][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 124.576851][ T7025] netlink: 104 bytes leftover after parsing attributes in process `syz.4.376'. [ 125.608700][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 125.784524][ T7041] netlink: 204 bytes leftover after parsing attributes in process `syz.3.383'. [ 125.797353][ T7041] netlink: 72 bytes leftover after parsing attributes in process `syz.3.383'. [ 125.807118][ T7041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.383'. [ 125.987819][ T7046] netlink: 32 bytes leftover after parsing attributes in process `syz.4.384'. [ 126.004344][ T7048] netlink: 'syz.3.386': attribute type 2 has an invalid length. [ 126.013210][ T7048] netlink: 260 bytes leftover after parsing attributes in process `syz.3.386'. [ 126.658524][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 127.329559][ T7083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.677073][ T7111] netlink: 'syz.4.404': attribute type 4 has an invalid length. [ 127.689810][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 128.728577][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 128.878196][ T7157] __nla_validate_parse: 8 callbacks suppressed [ 128.878215][ T7157] netlink: 204 bytes leftover after parsing attributes in process `syz.2.423'. [ 128.950461][ T7157] netlink: 72 bytes leftover after parsing attributes in process `syz.2.423'. [ 128.982047][ T7157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.423'. [ 129.728565][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 129.768588][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 129.824168][ T7176] bridge0: entered promiscuous mode [ 129.866771][ T7176] bridge0: left promiscuous mode [ 129.981659][ T7186] netlink: 56 bytes leftover after parsing attributes in process `syz.2.434'. [ 130.363542][ T7205] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 130.373142][ T7205] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 130.489422][ T7208] FAULT_INJECTION: forcing a failure. [ 130.489422][ T7208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.503795][ T7209] FAULT_INJECTION: forcing a failure. [ 130.503795][ T7209] name failslab, interval 1, probability 0, space 0, times 0 [ 130.505855][ T7208] CPU: 0 UID: 0 PID: 7208 Comm: syz.0.445 Not tainted syzkaller #0 PREEMPT(full) [ 130.505884][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.505897][ T7208] Call Trace: [ 130.505906][ T7208] [ 130.505918][ T7208] dump_stack_lvl+0x189/0x250 [ 130.505950][ T7208] ? __pfx____ratelimit+0x10/0x10 [ 130.505975][ T7208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.506003][ T7208] ? __pfx__printk+0x10/0x10 [ 130.506050][ T7208] should_fail_ex+0x414/0x560 [ 130.506095][ T7208] _copy_from_user+0x2d/0xb0 [ 130.506123][ T7208] sctp_setsockopt+0x19f/0x1200 [ 130.506150][ T7208] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 130.506190][ T7208] do_sock_setsockopt+0x17c/0x1b0 [ 130.506220][ T7208] __x64_sys_setsockopt+0x13f/0x1b0 [ 130.506253][ T7208] do_syscall_64+0xfa/0x3b0 [ 130.506276][ T7208] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.506297][ T7208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.506320][ T7208] ? clear_bhb_loop+0x60/0xb0 [ 130.506348][ T7208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.506369][ T7208] RIP: 0033:0x7fb7a518ebe9 [ 130.506389][ T7208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.506408][ T7208] RSP: 002b:00007fb7a33f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.506433][ T7208] RAX: ffffffffffffffda RBX: 00007fb7a53c5fa0 RCX: 00007fb7a518ebe9 [ 130.506449][ T7208] RDX: 0000000000000023 RSI: 0000000000000084 RDI: 0000000000000004 [ 130.506462][ T7208] RBP: 00007fb7a33f6090 R08: 0000000000000008 R09: 0000000000000000 [ 130.506476][ T7208] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 130.506489][ T7208] R13: 00007fb7a53c6038 R14: 00007fb7a53c5fa0 R15: 00007ffda66a3308 [ 130.506526][ T7208] [ 130.697330][ T7209] CPU: 0 UID: 0 PID: 7209 Comm: syz.1.444 Not tainted syzkaller #0 PREEMPT(full) [ 130.697357][ T7209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.697369][ T7209] Call Trace: [ 130.697377][ T7209] [ 130.697386][ T7209] dump_stack_lvl+0x189/0x250 [ 130.697415][ T7209] ? __pfx____ratelimit+0x10/0x10 [ 130.697436][ T7209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.697460][ T7209] ? __pfx__printk+0x10/0x10 [ 130.697493][ T7209] ? __pfx___might_resched+0x10/0x10 [ 130.697512][ T7209] should_fail_ex+0x414/0x560 [ 130.697540][ T7209] should_failslab+0xa8/0x100 [ 130.697565][ T7209] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 130.697588][ T7209] ? __alloc_skb+0x112/0x2d0 [ 130.697608][ T7209] __alloc_skb+0x112/0x2d0 [ 130.697627][ T7209] netlink_sendmsg+0x5c6/0xb30 [ 130.697653][ T7209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.697672][ T7209] ? aa_sock_msg_perm+0xf1/0x1d0 [ 130.697690][ T7209] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 130.697708][ T7209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.697726][ T7209] __sock_sendmsg+0x219/0x270 [ 130.697753][ T7209] ____sys_sendmsg+0x505/0x830 [ 130.697777][ T7209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.697805][ T7209] ? import_iovec+0x74/0xa0 [ 130.697837][ T7209] ___sys_sendmsg+0x21f/0x2a0 [ 130.697857][ T7209] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.697906][ T7209] ? __fget_files+0x2a/0x420 [ 130.697920][ T7209] ? __fget_files+0x3a0/0x420 [ 130.697942][ T7209] __x64_sys_sendmsg+0x19b/0x260 [ 130.697963][ T7209] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.697989][ T7209] ? __pfx_ksys_write+0x10/0x10 [ 130.698009][ T7209] ? rcu_is_watching+0x15/0xb0 [ 130.698030][ T7209] ? do_syscall_64+0xbe/0x3b0 [ 130.698059][ T7209] do_syscall_64+0xfa/0x3b0 [ 130.698081][ T7209] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.698098][ T7209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.698115][ T7209] ? clear_bhb_loop+0x60/0xb0 [ 130.698136][ T7209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.698152][ T7209] RIP: 0033:0x7f4be3d8ebe9 [ 130.698169][ T7209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.698182][ T7209] RSP: 002b:00007f4be4c2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.698198][ T7209] RAX: ffffffffffffffda RBX: 00007f4be3fc5fa0 RCX: 00007f4be3d8ebe9 [ 130.698210][ T7209] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 130.698220][ T7209] RBP: 00007f4be4c2b090 R08: 0000000000000000 R09: 0000000000000000 [ 130.698230][ T7209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.698239][ T7209] R13: 00007f4be3fc6038 R14: 00007f4be3fc5fa0 R15: 00007ffd3ba7fc78 [ 130.698267][ T7209] [ 130.848531][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 131.251158][ T7222] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 131.268594][ T7222] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 131.342620][ T7222] team0: Port device netdevsim0 added [ 131.519930][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.456'. [ 131.606985][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.456'. [ 131.616681][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.643558][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.655964][ T7237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.457'. [ 131.673177][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.732179][ T7239] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 131.928580][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 132.021233][ T7237] nbd: socks must be embedded in a SOCK_ITEM attr [ 132.392834][ T7267] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.469'. [ 132.645215][ T7275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.473'. [ 132.815429][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.821829][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.979108][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 133.505240][ T7310] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 133.554232][ T7310] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 133.567317][ T7315] FAULT_INJECTION: forcing a failure. [ 133.567317][ T7315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.604250][ T7315] CPU: 0 UID: 0 PID: 7315 Comm: syz.4.487 Not tainted syzkaller #0 PREEMPT(full) [ 133.604277][ T7315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.604288][ T7315] Call Trace: [ 133.604295][ T7315] [ 133.604304][ T7315] dump_stack_lvl+0x189/0x250 [ 133.604333][ T7315] ? __pfx____ratelimit+0x10/0x10 [ 133.604352][ T7315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.604376][ T7315] ? __pfx__printk+0x10/0x10 [ 133.604415][ T7315] should_fail_ex+0x414/0x560 [ 133.604448][ T7315] _copy_to_user+0x31/0xb0 [ 133.604474][ T7315] simple_read_from_buffer+0xe1/0x170 [ 133.604516][ T7315] proc_fail_nth_read+0x1b3/0x220 [ 133.604542][ T7315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.604567][ T7315] ? rw_verify_area+0x2a6/0x4d0 [ 133.604591][ T7315] ? __lock_acquire+0xab9/0xd20 [ 133.604618][ T7315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.604642][ T7315] vfs_read+0x1fd/0xa30 [ 133.604665][ T7315] ? fdget_pos+0x247/0x320 [ 133.604688][ T7315] ? __pfx___mutex_lock+0x10/0x10 [ 133.604709][ T7315] ? __pfx_vfs_read+0x10/0x10 [ 133.604735][ T7315] ? __fget_files+0x2a/0x420 [ 133.604756][ T7315] ? __fget_files+0x3a0/0x420 [ 133.604772][ T7315] ? __fget_files+0x2a/0x420 [ 133.604799][ T7315] ksys_read+0x145/0x250 [ 133.604827][ T7315] ? __pfx_ksys_read+0x10/0x10 [ 133.604852][ T7315] ? rcu_is_watching+0x15/0xb0 [ 133.604872][ T7315] ? trace_sys_enter+0x25/0x100 [ 133.604908][ T7315] do_syscall_64+0xfa/0x3b0 [ 133.604927][ T7315] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.604946][ T7315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.604965][ T7315] ? clear_bhb_loop+0x60/0xb0 [ 133.604989][ T7315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.605007][ T7315] RIP: 0033:0x7f5fdb58d5fc [ 133.605025][ T7315] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 133.605041][ T7315] RSP: 002b:00007f5fdc3fe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.605060][ T7315] RAX: ffffffffffffffda RBX: 00007f5fdb7c5fa0 RCX: 00007f5fdb58d5fc [ 133.605074][ T7315] RDX: 000000000000000f RSI: 00007f5fdc3fe0a0 RDI: 0000000000000006 [ 133.605086][ T7315] RBP: 00007f5fdc3fe090 R08: 0000000000000000 R09: 0000000000000000 [ 133.605104][ T7315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.605115][ T7315] R13: 00007f5fdb7c6038 R14: 00007f5fdb7c5fa0 R15: 00007ffe1eda8858 [ 133.605148][ T7315] [ 133.614838][ T7310] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 133.881713][ T7320] __nla_validate_parse: 1 callbacks suppressed [ 133.881732][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 133.940006][ T7324] netlink: 'syz.4.490': attribute type 1 has an invalid length. [ 133.965296][ T7310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.008514][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 134.028072][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 134.106748][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 134.494017][ T7338] netlink: 36 bytes leftover after parsing attributes in process `syz.3.494'. [ 134.502620][ T7343] netlink: 388 bytes leftover after parsing attributes in process `syz.0.496'. [ 134.854246][ T7353] FAULT_INJECTION: forcing a failure. [ 134.854246][ T7353] name failslab, interval 1, probability 0, space 0, times 0 [ 134.920112][ T7353] CPU: 1 UID: 0 PID: 7353 Comm: syz.0.501 Not tainted syzkaller #0 PREEMPT(full) [ 134.920141][ T7353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.920153][ T7353] Call Trace: [ 134.920161][ T7353] [ 134.920170][ T7353] dump_stack_lvl+0x189/0x250 [ 134.920202][ T7353] ? __pfx____ratelimit+0x10/0x10 [ 134.920223][ T7353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.920248][ T7353] ? __pfx__printk+0x10/0x10 [ 134.920283][ T7353] ? __pfx___might_resched+0x10/0x10 [ 134.920308][ T7353] should_fail_ex+0x414/0x560 [ 134.920342][ T7353] should_failslab+0xa8/0x100 [ 134.920374][ T7353] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 134.920403][ T7353] ? __alloc_skb+0x112/0x2d0 [ 134.920428][ T7353] __alloc_skb+0x112/0x2d0 [ 134.920454][ T7353] netlink_sendmsg+0x5c6/0xb30 [ 134.920487][ T7353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.920511][ T7353] ? aa_sock_msg_perm+0xf1/0x1d0 [ 134.920533][ T7353] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.920555][ T7353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.920577][ T7353] __sock_sendmsg+0x219/0x270 [ 134.920610][ T7353] ____sys_sendmsg+0x505/0x830 [ 134.920646][ T7353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.920680][ T7353] ? import_iovec+0x74/0xa0 [ 134.920708][ T7353] ___sys_sendmsg+0x21f/0x2a0 [ 134.920734][ T7353] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.920797][ T7353] ? __fget_files+0x2a/0x420 [ 134.920814][ T7353] ? __fget_files+0x3a0/0x420 [ 134.920843][ T7353] __x64_sys_sendmsg+0x19b/0x260 [ 134.920870][ T7353] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.920905][ T7353] ? __pfx_ksys_write+0x10/0x10 [ 134.920930][ T7353] ? rcu_is_watching+0x15/0xb0 [ 134.920956][ T7353] ? do_syscall_64+0xbe/0x3b0 [ 134.920982][ T7353] do_syscall_64+0xfa/0x3b0 [ 134.921002][ T7353] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.921022][ T7353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.921042][ T7353] ? clear_bhb_loop+0x60/0xb0 [ 134.921067][ T7353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.921086][ T7353] RIP: 0033:0x7fb7a518ebe9 [ 134.921104][ T7353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.921120][ T7353] RSP: 002b:00007fb7a33f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.921142][ T7353] RAX: ffffffffffffffda RBX: 00007fb7a53c5fa0 RCX: 00007fb7a518ebe9 [ 134.921156][ T7353] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 134.921168][ T7353] RBP: 00007fb7a33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 134.921180][ T7353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.921192][ T7353] R13: 00007fb7a53c6038 R14: 00007fb7a53c5fa0 R15: 00007ffda66a3308 [ 134.921225][ T7353] [ 135.193949][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 135.270726][ T7359] tipc: Enabling of bearer rejected, failed to enable media [ 135.410125][ T7369] netlink: 388 bytes leftover after parsing attributes in process `syz.4.507'. [ 135.507993][ T7373] netlink: 'syz.1.505': attribute type 1 has an invalid length. [ 135.546226][ T7373] netlink: 172 bytes leftover after parsing attributes in process `syz.1.505'. [ 136.052397][ T7393] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 136.101534][ T7393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.515'. [ 136.248726][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 136.340552][ T7405] netlink: 388 bytes leftover after parsing attributes in process `syz.1.520'. [ 136.867686][ T7429] netlink: 60 bytes leftover after parsing attributes in process `syz.3.529'. [ 137.085727][ T7440] netlink: 'syz.3.533': attribute type 1 has an invalid length. [ 137.298681][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 137.737070][ T7463] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 138.328642][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 138.990983][ T7494] __nla_validate_parse: 6 callbacks suppressed [ 138.991002][ T7494] netlink: 388 bytes leftover after parsing attributes in process `syz.3.547'. [ 139.007779][ T7496] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.546'. [ 139.192556][ T7496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.546'. [ 139.368481][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 139.852229][ T7529] netlink: 204 bytes leftover after parsing attributes in process `syz.4.554'. [ 139.960726][ T7529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.554'. [ 140.336870][ T7532] syzkaller1: entered allmulticast mode [ 140.408601][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 140.606841][ T7538] syzkaller0: entered allmulticast mode [ 141.269074][ T7561] netlink: 388 bytes leftover after parsing attributes in process `syz.4.560'. [ 141.458659][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 141.506772][ T7565] FAULT_INJECTION: forcing a failure. [ 141.506772][ T7565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.590521][ T7565] CPU: 0 UID: 0 PID: 7565 Comm: syz.4.561 Not tainted syzkaller #0 PREEMPT(full) [ 141.590549][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.590561][ T7565] Call Trace: [ 141.590569][ T7565] [ 141.590577][ T7565] dump_stack_lvl+0x189/0x250 [ 141.590607][ T7565] ? __pfx____ratelimit+0x10/0x10 [ 141.590627][ T7565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.590651][ T7565] ? __pfx__printk+0x10/0x10 [ 141.590678][ T7565] ? __might_fault+0xb0/0x130 [ 141.590719][ T7565] should_fail_ex+0x414/0x560 [ 141.590752][ T7565] _copy_from_user+0x2d/0xb0 [ 141.590776][ T7565] ___sys_sendmsg+0x158/0x2a0 [ 141.590803][ T7565] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.590871][ T7565] ? __fget_files+0x2a/0x420 [ 141.590888][ T7565] ? __fget_files+0x3a0/0x420 [ 141.590916][ T7565] __x64_sys_sendmsg+0x19b/0x260 [ 141.590944][ T7565] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.590978][ T7565] ? __pfx_ksys_write+0x10/0x10 [ 141.591002][ T7565] ? rcu_is_watching+0x15/0xb0 [ 141.591035][ T7565] ? do_syscall_64+0xbe/0x3b0 [ 141.591061][ T7565] do_syscall_64+0xfa/0x3b0 [ 141.591082][ T7565] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.591101][ T7565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.591122][ T7565] ? clear_bhb_loop+0x60/0xb0 [ 141.591146][ T7565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.591166][ T7565] RIP: 0033:0x7f5fdb58ebe9 [ 141.591184][ T7565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.591200][ T7565] RSP: 002b:00007f5fdc3fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.591221][ T7565] RAX: ffffffffffffffda RBX: 00007f5fdb7c5fa0 RCX: 00007f5fdb58ebe9 [ 141.591235][ T7565] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 141.591247][ T7565] RBP: 00007f5fdc3fe090 R08: 0000000000000000 R09: 0000000000000000 [ 141.591259][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.591271][ T7565] R13: 00007f5fdb7c6038 R14: 00007f5fdb7c5fa0 R15: 00007ffe1eda8858 [ 141.591302][ T7565] [ 142.205628][ T7576] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 142.269524][ T7576] netlink: 'syz.2.563': attribute type 1 has an invalid length. [ 142.488472][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 142.564831][ T7586] netlink: 'syz.4.569': attribute type 1 has an invalid length. [ 142.726805][ T7586] bond1 (unregistering): Released all slaves [ 142.742305][ T7593] netlink: 388 bytes leftover after parsing attributes in process `syz.0.571'. [ 142.973177][ T7597] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 142.999159][ T7597] netlink: 'syz.0.573': attribute type 1 has an invalid length. [ 143.056574][ T7601] netlink: 'syz.2.574': attribute type 29 has an invalid length. [ 143.148780][ T7604] netlink: 'syz.2.574': attribute type 29 has an invalid length. [ 143.232606][ T7599] bridge_slave_0: left allmulticast mode [ 143.253547][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 143.273596][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'. [ 143.275261][ T7599] bridge_slave_0: left promiscuous mode [ 143.322169][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.351388][ T7599] bridge_slave_1: left allmulticast mode [ 143.360054][ T7599] bridge_slave_1: left promiscuous mode [ 143.374888][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.410749][ T7599] bond0: (slave bond_slave_0): Releasing backup interface [ 143.526102][ T7599] bond0: (slave bond_slave_1): Releasing backup interface [ 143.538464][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 143.556960][ T7599] team0: Port device team_slave_0 removed [ 143.600976][ T7599] team0: Port device team_slave_1 removed [ 143.607820][ T7599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.624940][ T7599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.644214][ T7599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.659481][ T7599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.713687][ T7599] team0: Port device netdevsim0 removed [ 143.753245][ T7615] tipc: Started in network mode [ 143.760402][ T7615] tipc: Node identity , cluster identity 4711 [ 143.766665][ T7615] tipc: Failed to obtain node identity [ 143.774813][ T7615] tipc: Enabling of bearer rejected, failed to enable media [ 144.146943][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.580'. [ 144.282599][ T7634] netlink: 388 bytes leftover after parsing attributes in process `syz.2.583'. [ 144.356258][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.580'. [ 144.555088][ T7640] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 144.568559][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 144.681860][ T7640] netlink: 'syz.2.585': attribute type 1 has an invalid length. [ 144.729542][ T7649] netlink: 256 bytes leftover after parsing attributes in process `syz.1.588'. [ 144.769760][ T7649] netlink: 48 bytes leftover after parsing attributes in process `syz.1.588'. [ 144.783524][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 144.944255][ T7653] wlan1 speed is unknown, defaulting to 1000 [ 145.265331][ T7660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.294703][ T7653] wlan1 speed is unknown, defaulting to 1000 [ 145.406917][ T7653] wlan1 speed is unknown, defaulting to 1000 [ 145.608637][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 145.692503][ T7674] netlink: 380 bytes leftover after parsing attributes in process `syz.2.595'. [ 145.909717][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 145.997684][ T7686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.600'. [ 146.090378][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 146.130272][ T7688] netlink: 'syz.2.599': attribute type 4 has an invalid length. [ 146.633747][ T7653] infiniband syz0: set down [ 146.640282][ T44] wlan1 speed is unknown, defaulting to 1000 [ 146.658591][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 146.697762][ T7653] infiniband syz0: added wlan1 [ 146.751529][ T7653] syz0: rxe_create_cq: returned err = -12 [ 146.801428][ T7653] infiniband syz0: Couldn't create ib_mad CQ [ 146.840962][ T7653] infiniband syz0: Couldn't open port 1 [ 146.862964][ T7715] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 146.962459][ T7653] RDS/IB: syz0: added [ 146.967028][ T7653] smc: adding ib device syz0 with port count 1 [ 147.006233][ T7653] smc: ib device syz0 port 1 has pnetid [ 147.014232][ T9] wlan1 speed is unknown, defaulting to 1000 [ 147.029263][ T7653] wlan1 speed is unknown, defaulting to 1000 [ 147.688497][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 147.824921][ T7734] wlan1 speed is unknown, defaulting to 1000 [ 147.933491][ T7742] netlink: 'syz.2.617': attribute type 4 has an invalid length. [ 147.989821][ T7742] netlink: 'syz.2.617': attribute type 4 has an invalid length. [ 148.498096][ T7732] wlan1 speed is unknown, defaulting to 1000 [ 148.504927][ C1] vcan0: j1939_session_tx_dat: 0xffff888051266000: queue data error: -100 [ 148.578908][ T7749] bridge_slave_1: left allmulticast mode [ 148.597019][ T7749] bridge_slave_1: left promiscuous mode [ 148.625527][ T7749] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.653012][ T7749] bridge_slave_0: left allmulticast mode [ 148.678477][ T7749] bridge_slave_0: left promiscuous mode [ 148.694489][ T7749] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.728606][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 148.854354][ T7653] wlan1 speed is unknown, defaulting to 1000 [ 149.043361][ T7752] netlink: 'syz.2.619': attribute type 4 has an invalid length. [ 149.294140][ T7653] wlan1 speed is unknown, defaulting to 1000 [ 149.395797][ T7760] __nla_validate_parse: 6 callbacks suppressed [ 149.395817][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 149.516293][ T7653] wlan1 speed is unknown, defaulting to 1000 [ 149.698947][ T7653] wlan1 speed is unknown, defaulting to 1000 [ 149.769317][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 149.875181][ T7653] wlan1 speed is unknown, defaulting to 1000 [ 150.132323][ T7762] netlink: 380 bytes leftover after parsing attributes in process `syz.1.622'. [ 150.214845][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 150.644805][ T7773] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 150.808491][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 151.134938][ T7787] wlan1 speed is unknown, defaulting to 1000 [ 151.293680][ T7792] netlink: 388 bytes leftover after parsing attributes in process `syz.3.633'. [ 151.809924][ T7808] netlink: 'syz.0.641': attribute type 10 has an invalid length. [ 151.845762][ T7813] FAULT_INJECTION: forcing a failure. [ 151.845762][ T7813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.858934][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 151.875687][ T7813] CPU: 0 UID: 0 PID: 7813 Comm: syz.3.642 Not tainted syzkaller #0 PREEMPT(full) [ 151.875713][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.875724][ T7813] Call Trace: [ 151.875737][ T7813] [ 151.875746][ T7813] dump_stack_lvl+0x189/0x250 [ 151.875775][ T7813] ? __pfx____ratelimit+0x10/0x10 [ 151.875796][ T7813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.875819][ T7813] ? __pfx__printk+0x10/0x10 [ 151.875861][ T7813] should_fail_ex+0x414/0x560 [ 151.875891][ T7813] _copy_to_user+0x31/0xb0 [ 151.875917][ T7813] do_ipv6_getsockopt+0x106f/0x2300 [ 151.875949][ T7813] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 151.875970][ T7813] ? aa_label_sk_perm+0x4cd/0x630 [ 151.876003][ T7813] ? __lock_acquire+0xab9/0xd20 [ 151.876033][ T7813] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 151.876089][ T7813] ? __lock_acquire+0xab9/0xd20 [ 151.876125][ T7813] ipv6_getsockopt+0xbd/0x290 [ 151.876153][ T7813] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 151.876172][ T7813] ? sock_common_getsockopt+0x2d/0xb0 [ 151.876195][ T7813] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 151.876219][ T7813] do_sock_getsockopt+0x372/0x450 [ 151.876240][ T7813] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 151.876256][ T7813] ? write_ibpb+0x30/0x40 [ 151.876271][ T7813] ? __fget_files+0x3a0/0x420 [ 151.876284][ T7813] ? __fget_files+0x2a/0x420 [ 151.876304][ T7813] __x64_sys_getsockopt+0x1a5/0x250 [ 151.876321][ T7813] ? write_ibpb+0x30/0x40 [ 151.876338][ T7813] ? write_ibpb+0x30/0x40 [ 151.876357][ T7813] do_syscall_64+0xfa/0x3b0 [ 151.876372][ T7813] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.876387][ T7813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.876402][ T7813] ? clear_bhb_loop+0x60/0xb0 [ 151.876421][ T7813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.876435][ T7813] RIP: 0033:0x7f3a2a78ebe9 [ 151.876450][ T7813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.876463][ T7813] RSP: 002b:00007f3a2b61a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 151.876480][ T7813] RAX: ffffffffffffffda RBX: 00007f3a2a9c5fa0 RCX: 00007f3a2a78ebe9 [ 151.876491][ T7813] RDX: 0000000000000002 RSI: 0000000000000029 RDI: 0000000000000003 [ 151.876499][ T7813] RBP: 00007f3a2b61a090 R08: 0000200000000240 R09: 0000000000000000 [ 151.876509][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.876518][ T7813] R13: 00007f3a2a9c6038 R14: 00007f3a2a9c5fa0 R15: 00007ffdfe9ab7a8 [ 151.876543][ T7813] [ 151.885152][ T7808] netlink: 2 bytes leftover after parsing attributes in process `syz.0.641'. [ 152.154983][ T7800] wlan1 speed is unknown, defaulting to 1000 [ 152.163326][ T5868] Bluetooth: hci4: link tx timeout [ 152.171710][ T5868] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.182565][ T5868] Bluetooth: hci4: link tx timeout [ 152.187725][ T5868] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.195944][ T5868] Bluetooth: hci4: link tx timeout [ 152.201260][ T5868] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.209049][ T5868] Bluetooth: hci4: link tx timeout [ 152.214224][ T5868] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.222003][ T5868] Bluetooth: hci4: link tx timeout [ 152.226471][ T7808] team0: entered promiscuous mode [ 152.227134][ T5868] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.240106][ T5868] Bluetooth: hci4: link tx timeout [ 152.245252][ T5868] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.253330][ T7808] team_slave_0: entered promiscuous mode [ 152.259740][ T7808] team_slave_1: entered promiscuous mode [ 152.266956][ T7808] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.512653][ T7827] netlink: 'syz.3.644': attribute type 1 has an invalid length. [ 152.559426][ T7825] FAULT_INJECTION: forcing a failure. [ 152.559426][ T7825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.590601][ T7825] CPU: 1 UID: 0 PID: 7825 Comm: syz.0.645 Not tainted syzkaller #0 PREEMPT(full) [ 152.590631][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.590643][ T7825] Call Trace: [ 152.590651][ T7825] [ 152.590660][ T7825] dump_stack_lvl+0x189/0x250 [ 152.590691][ T7825] ? __pfx____ratelimit+0x10/0x10 [ 152.590712][ T7825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.590736][ T7825] ? __pfx__printk+0x10/0x10 [ 152.590785][ T7825] ? __might_fault+0xb0/0x130 [ 152.590825][ T7825] should_fail_ex+0x414/0x560 [ 152.590859][ T7825] _copy_from_user+0x2d/0xb0 [ 152.590885][ T7825] hidp_sock_ioctl+0x257/0x560 [ 152.590909][ T7825] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 152.590978][ T7825] ? do_vfs_ioctl+0xbe8/0x1430 [ 152.591017][ T7825] sock_do_ioctl+0xd9/0x300 [ 152.591049][ T7825] ? __pfx_sock_do_ioctl+0x10/0x10 [ 152.591075][ T7825] ? __lock_acquire+0xab9/0xd20 [ 152.591130][ T7825] sock_ioctl+0x576/0x790 [ 152.591160][ T7825] ? __pfx_sock_ioctl+0x10/0x10 [ 152.591187][ T7825] ? __fget_files+0x2a/0x420 [ 152.591204][ T7825] ? __fget_files+0x3a0/0x420 [ 152.591220][ T7825] ? __fget_files+0x2a/0x420 [ 152.591241][ T7825] ? bpf_lsm_file_ioctl+0x9/0x20 [ 152.591267][ T7825] ? __pfx_sock_ioctl+0x10/0x10 [ 152.591294][ T7825] __se_sys_ioctl+0xf9/0x170 [ 152.591322][ T7825] do_syscall_64+0xfa/0x3b0 [ 152.591342][ T7825] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.591362][ T7825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.591382][ T7825] ? clear_bhb_loop+0x60/0xb0 [ 152.591407][ T7825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.591427][ T7825] RIP: 0033:0x7fb7a518ebe9 [ 152.591445][ T7825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.591461][ T7825] RSP: 002b:00007fb7a33f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.591482][ T7825] RAX: ffffffffffffffda RBX: 00007fb7a53c5fa0 RCX: 00007fb7a518ebe9 [ 152.591497][ T7825] RDX: 0000200000000340 RSI: 00000000400448c8 RDI: 0000000000000005 [ 152.591510][ T7825] RBP: 00007fb7a33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 152.591522][ T7825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.591533][ T7825] R13: 00007fb7a53c6038 R14: 00007fb7a53c5fa0 R15: 00007ffda66a3308 [ 152.591567][ T7825] [ 152.882659][ T7823] bond1 (unregistering): Released all slaves [ 152.888780][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 152.950548][ T7835] netlink: 388 bytes leftover after parsing attributes in process `syz.0.647'. [ 153.188529][ T7842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.646'. [ 153.303298][ T7848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.649'. [ 153.929526][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 154.014911][ T7870] netlink: 132 bytes leftover after parsing attributes in process `syz.3.654'. [ 154.056576][ T7870] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 154.241792][ T7880] netlink: 388 bytes leftover after parsing attributes in process `syz.0.658'. [ 154.251066][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 154.455997][ T7890] __nla_validate_parse: 1 callbacks suppressed [ 154.456018][ T7890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.661'. [ 154.708655][ T7896] netlink: 32 bytes leftover after parsing attributes in process `syz.4.662'. [ 154.805089][ T7905] netlink: 'syz.4.662': attribute type 4 has an invalid length. [ 154.968836][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 155.214389][ T7916] wlan1 speed is unknown, defaulting to 1000 [ 155.494019][ T7932] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 155.607372][ T7932] bond1: (slave gretap1): making interface the new active one [ 155.616171][ T7932] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 155.643865][ T7932] vlan2: entered allmulticast mode [ 155.653868][ T7932] bond1: entered allmulticast mode [ 155.659098][ T7932] gretap1: entered allmulticast mode [ 155.666233][ T7932] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 155.916424][ T7942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.674'. [ 156.008642][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 156.122137][ T7947] netlink: 32 bytes leftover after parsing attributes in process `syz.2.676'. [ 156.244658][ T7949] netlink: 'syz.2.676': attribute type 4 has an invalid length. [ 156.254001][ T7951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.677'. [ 156.504211][ T7955] netlink: 'syz.2.678': attribute type 3 has an invalid length. [ 156.532127][ T7935] delete_channel: no stack [ 156.559724][ T7955] netlink: 132 bytes leftover after parsing attributes in process `syz.2.678'. [ 156.711838][ T7961] FAULT_INJECTION: forcing a failure. [ 156.711838][ T7961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.769052][ T7963] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.682'. [ 156.779106][ T7961] CPU: 1 UID: 0 PID: 7961 Comm: syz.3.681 Not tainted syzkaller #0 PREEMPT(full) [ 156.779134][ T7961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.779146][ T7961] Call Trace: [ 156.779154][ T7961] [ 156.779162][ T7961] dump_stack_lvl+0x189/0x250 [ 156.779192][ T7961] ? __pfx____ratelimit+0x10/0x10 [ 156.779213][ T7961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.779237][ T7961] ? __pfx__printk+0x10/0x10 [ 156.779280][ T7961] should_fail_ex+0x414/0x560 [ 156.779312][ T7961] _copy_to_user+0x31/0xb0 [ 156.779338][ T7961] simple_read_from_buffer+0xe1/0x170 [ 156.779372][ T7961] proc_fail_nth_read+0x1b3/0x220 [ 156.779400][ T7961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.779426][ T7961] ? rw_verify_area+0x2a6/0x4d0 [ 156.779449][ T7961] ? __lock_acquire+0xab9/0xd20 [ 156.779475][ T7961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.779499][ T7961] vfs_read+0x1fd/0xa30 [ 156.779523][ T7961] ? fdget_pos+0x247/0x320 [ 156.779545][ T7961] ? __pfx___mutex_lock+0x10/0x10 [ 156.779566][ T7961] ? __pfx_vfs_read+0x10/0x10 [ 156.779593][ T7961] ? __fget_files+0x2a/0x420 [ 156.779615][ T7961] ? __fget_files+0x3a0/0x420 [ 156.779630][ T7961] ? __fget_files+0x2a/0x420 [ 156.779663][ T7961] ksys_read+0x145/0x250 [ 156.779690][ T7961] ? __pfx_ksys_read+0x10/0x10 [ 156.779715][ T7961] ? rcu_is_watching+0x15/0xb0 [ 156.779735][ T7961] ? trace_sys_enter+0x25/0x100 [ 156.779771][ T7961] do_syscall_64+0xfa/0x3b0 [ 156.779791][ T7961] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.779810][ T7961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.779829][ T7961] ? clear_bhb_loop+0x60/0xb0 [ 156.779853][ T7961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.779872][ T7961] RIP: 0033:0x7f3a2a78d5fc [ 156.779889][ T7961] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 156.779921][ T7961] RSP: 002b:00007f3a2b61a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.779942][ T7961] RAX: ffffffffffffffda RBX: 00007f3a2a9c5fa0 RCX: 00007f3a2a78d5fc [ 156.779956][ T7961] RDX: 000000000000000f RSI: 00007f3a2b61a0a0 RDI: 0000000000000005 [ 156.779968][ T7961] RBP: 00007f3a2b61a090 R08: 0000000000000000 R09: 0000000000000000 [ 156.779981][ T7961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.779992][ T7961] R13: 00007f3a2a9c6038 R14: 00007f3a2a9c5fa0 R15: 00007ffdfe9ab7a8 [ 156.780027][ T7961] [ 157.051560][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 157.289318][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 157.299760][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.685'. [ 157.581455][ T7980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.691'. [ 157.606942][ T7982] netlink: 36 bytes leftover after parsing attributes in process `syz.1.690'. [ 157.680622][ T7989] FAULT_INJECTION: forcing a failure. [ 157.680622][ T7989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.728296][ T7989] CPU: 0 UID: 0 PID: 7989 Comm: syz.0.693 Not tainted syzkaller #0 PREEMPT(full) [ 157.728324][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.728336][ T7989] Call Trace: [ 157.728344][ T7989] [ 157.728353][ T7989] dump_stack_lvl+0x189/0x250 [ 157.728388][ T7989] ? __pfx____ratelimit+0x10/0x10 [ 157.728408][ T7989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.728433][ T7989] ? __pfx__printk+0x10/0x10 [ 157.728461][ T7989] ? __might_fault+0xb0/0x130 [ 157.728501][ T7989] should_fail_ex+0x414/0x560 [ 157.728535][ T7989] _copy_from_user+0x2d/0xb0 [ 157.728560][ T7989] ____sys_sendmsg+0x2fe/0x830 [ 157.728591][ T7989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.728633][ T7989] ? import_iovec+0x74/0xa0 [ 157.728662][ T7989] ___sys_sendmsg+0x21f/0x2a0 [ 157.728688][ T7989] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.728753][ T7989] ? __fget_files+0x2a/0x420 [ 157.728770][ T7989] ? __fget_files+0x3a0/0x420 [ 157.728800][ T7989] __x64_sys_sendmsg+0x19b/0x260 [ 157.728828][ T7989] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.728863][ T7989] ? __pfx_ksys_write+0x10/0x10 [ 157.728887][ T7989] ? rcu_is_watching+0x15/0xb0 [ 157.728914][ T7989] ? do_syscall_64+0xbe/0x3b0 [ 157.728940][ T7989] do_syscall_64+0xfa/0x3b0 [ 157.728960][ T7989] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.728980][ T7989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.729000][ T7989] ? clear_bhb_loop+0x60/0xb0 [ 157.729025][ T7989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.729045][ T7989] RIP: 0033:0x7fb7a518ebe9 [ 157.729064][ T7989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.729081][ T7989] RSP: 002b:00007fb7a33f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.729102][ T7989] RAX: ffffffffffffffda RBX: 00007fb7a53c5fa0 RCX: 00007fb7a518ebe9 [ 157.729117][ T7989] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 157.729129][ T7989] RBP: 00007fb7a33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.729141][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.729152][ T7989] R13: 00007fb7a53c6038 R14: 00007fb7a53c5fa0 R15: 00007ffda66a3308 [ 157.729186][ T7989] [ 157.740806][ T7990] team_slave_0: entered promiscuous mode [ 157.954860][ T7990] team_slave_1: entered promiscuous mode [ 158.050922][ T7990] macvtap1: entered promiscuous mode [ 158.056491][ T7990] team0: entered promiscuous mode [ 158.077789][ T7990] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 158.088468][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 158.160212][ T7990] macvtap1: entered allmulticast mode [ 158.209619][ T7990] team0: entered allmulticast mode [ 158.214828][ T7990] team_slave_0: entered allmulticast mode [ 158.242732][ T7990] team_slave_1: entered allmulticast mode [ 158.251749][ T7990] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 158.450793][ T7996] team0: left allmulticast mode [ 158.463980][ T7996] team_slave_0: left allmulticast mode [ 158.470372][ T7996] team_slave_1: left allmulticast mode [ 158.475926][ T7996] team0: left promiscuous mode [ 158.489116][ T7996] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 158.496639][ T7996] team_slave_0: left promiscuous mode [ 158.502321][ T7996] team_slave_1: left promiscuous mode [ 158.613543][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.624068][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.690851][ T8009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.007287][ T8028] netlink: 'syz.2.704': attribute type 4 has an invalid length. [ 159.128594][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 159.567188][ T8052] netlink: 'syz.0.711': attribute type 1 has an invalid length. [ 159.768046][ T8052] bond2 (unregistering): Released all slaves [ 159.865368][ T8066] wlan1 speed is unknown, defaulting to 1000 [ 159.887237][ T8069] __nla_validate_parse: 9 callbacks suppressed [ 159.887258][ T8069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.716'. [ 160.168453][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 160.456783][ T8079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.719'. [ 160.473006][ T8082] netlink: 32 bytes leftover after parsing attributes in process `syz.1.720'. [ 160.507392][ T8079] netlink: 108 bytes leftover after parsing attributes in process `syz.3.719'. [ 160.517829][ T8079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.719'. [ 160.792732][ T8088] netlink: 'syz.1.720': attribute type 4 has an invalid length. [ 161.147884][ T8107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.729'. [ 161.208473][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 161.710920][ T8130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.735'. [ 161.960629][ T8138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.739'. [ 162.101878][ T8143] wlan1 speed is unknown, defaulting to 1000 [ 162.235148][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.743'. [ 162.248594][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 162.545340][ T8163] FAULT_INJECTION: forcing a failure. [ 162.545340][ T8163] name failslab, interval 1, probability 0, space 0, times 0 [ 162.625744][ T8163] CPU: 0 UID: 0 PID: 8163 Comm: syz.2.748 Not tainted syzkaller #0 PREEMPT(full) [ 162.625770][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.625781][ T8163] Call Trace: [ 162.625789][ T8163] [ 162.625797][ T8163] dump_stack_lvl+0x189/0x250 [ 162.625825][ T8163] ? __pfx____ratelimit+0x10/0x10 [ 162.625845][ T8163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.625868][ T8163] ? __pfx__printk+0x10/0x10 [ 162.625902][ T8163] ? __pfx___might_resched+0x10/0x10 [ 162.625926][ T8163] ? fs_reclaim_acquire+0x7d/0x100 [ 162.625961][ T8163] should_fail_ex+0x414/0x560 [ 162.625992][ T8163] should_failslab+0xa8/0x100 [ 162.626021][ T8163] __kmalloc_cache_noprof+0x70/0x3d0 [ 162.626046][ T8163] ? bpf_raw_tp_link_attach+0x24e/0x6c0 [ 162.626070][ T8163] bpf_raw_tp_link_attach+0x24e/0x6c0 [ 162.626095][ T8163] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 162.626126][ T8163] ? __fget_files+0x2a/0x420 [ 162.626153][ T8163] bpf_raw_tracepoint_open+0x1b2/0x220 [ 162.626184][ T8163] __sys_bpf+0x75a/0x870 [ 162.626212][ T8163] ? __pfx___sys_bpf+0x10/0x10 [ 162.626250][ T8163] ? ksys_write+0x22a/0x250 [ 162.626278][ T8163] ? __pfx_ksys_write+0x10/0x10 [ 162.626300][ T8163] ? rcu_is_watching+0x15/0xb0 [ 162.626327][ T8163] __x64_sys_bpf+0x7c/0x90 [ 162.626350][ T8163] do_syscall_64+0xfa/0x3b0 [ 162.626369][ T8163] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.626388][ T8163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.626407][ T8163] ? clear_bhb_loop+0x60/0xb0 [ 162.626430][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.626448][ T8163] RIP: 0033:0x7f938b58ebe9 [ 162.626465][ T8163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.626481][ T8163] RSP: 002b:00007f938c33a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.626501][ T8163] RAX: ffffffffffffffda RBX: 00007f938b7c5fa0 RCX: 00007f938b58ebe9 [ 162.626514][ T8163] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 162.626526][ T8163] RBP: 00007f938c33a090 R08: 0000000000000000 R09: 0000000000000000 [ 162.626537][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.626548][ T8163] R13: 00007f938b7c6038 R14: 00007f938b7c5fa0 R15: 00007ffcf0221d08 [ 162.626579][ T8163] [ 162.667921][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 163.288489][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 163.529814][ T8168] wlan1 speed is unknown, defaulting to 1000 [ 164.074804][ T8210] FAULT_INJECTION: forcing a failure. [ 164.074804][ T8210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.138499][ T8210] CPU: 0 UID: 0 PID: 8210 Comm: syz.4.760 Not tainted syzkaller #0 PREEMPT(full) [ 164.138526][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.138538][ T8210] Call Trace: [ 164.138546][ T8210] [ 164.138554][ T8210] dump_stack_lvl+0x189/0x250 [ 164.138583][ T8210] ? __pfx____ratelimit+0x10/0x10 [ 164.138603][ T8210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.138625][ T8210] ? __pfx__printk+0x10/0x10 [ 164.138667][ T8210] should_fail_ex+0x414/0x560 [ 164.138698][ T8210] _copy_from_user+0x2d/0xb0 [ 164.138720][ T8210] bpf_test_init+0xf8/0x170 [ 164.138739][ T8210] bpf_prog_test_run_skb+0x1e9/0x1560 [ 164.138753][ T8210] ? __fget_files+0x2a/0x420 [ 164.138770][ T8210] ? __fget_files+0x2a/0x420 [ 164.138792][ T8210] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 164.138808][ T8210] bpf_prog_test_run+0x2c7/0x340 [ 164.138834][ T8210] __sys_bpf+0x581/0x870 [ 164.138856][ T8210] ? __pfx___sys_bpf+0x10/0x10 [ 164.138887][ T8210] ? ksys_write+0x22a/0x250 [ 164.138910][ T8210] ? __pfx_ksys_write+0x10/0x10 [ 164.138929][ T8210] ? rcu_is_watching+0x15/0xb0 [ 164.138950][ T8210] __x64_sys_bpf+0x7c/0x90 [ 164.138970][ T8210] do_syscall_64+0xfa/0x3b0 [ 164.138986][ T8210] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.139001][ T8210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.139016][ T8210] ? clear_bhb_loop+0x60/0xb0 [ 164.139043][ T8210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.139058][ T8210] RIP: 0033:0x7f5fdb58ebe9 [ 164.139072][ T8210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.139085][ T8210] RSP: 002b:00007f5fdc3fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.139101][ T8210] RAX: ffffffffffffffda RBX: 00007f5fdb7c5fa0 RCX: 00007f5fdb58ebe9 [ 164.139112][ T8210] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 164.139122][ T8210] RBP: 00007f5fdc3fe090 R08: 0000000000000000 R09: 0000000000000000 [ 164.139131][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.139140][ T8210] R13: 00007f5fdb7c6038 R14: 00007f5fdb7c5fa0 R15: 00007ffe1eda8858 [ 164.139165][ T8210] [ 164.193266][ T8209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.331345][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 164.686706][ T8219] netlink: 'syz.3.763': attribute type 4 has an invalid length. [ 165.368495][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 165.580135][ T8247] syzkaller0: create flow: hash 682851067 index 1 [ 165.724878][ T8245] syzkaller0: entered promiscuous mode [ 165.773307][ T8245] syzkaller0: entered allmulticast mode [ 166.030442][ T13] syzkaller0: tun_net_xmit 48 [ 166.036278][ T8259] netlink: 'syz.0.777': attribute type 4 has an invalid length. [ 166.232378][ T8244] syzkaller0: delete flow: hash 682851067 index 1 [ 166.408481][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 167.458473][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 167.832225][ T8283] wlan1 speed is unknown, defaulting to 1000 [ 168.055582][ T8297] __nla_validate_parse: 2 callbacks suppressed [ 168.055601][ T8297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.789'. [ 168.095967][ T8300] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:18 [ 168.131154][ T8288] bond2: entered promiscuous mode [ 168.155191][ T8300] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.165500][ T8288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.225734][ T8295] netlink: 'syz.0.787': attribute type 4 has an invalid length. [ 168.266816][ T8288] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 168.345343][ T8306] netlink: 'syz.1.792': attribute type 1 has an invalid length. [ 168.355349][ T8306] netlink: 'syz.1.792': attribute type 1 has an invalid length. [ 168.488564][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 168.520577][ T8293] wlan1 speed is unknown, defaulting to 1000 [ 168.658741][ T8311] netlink: 'syz.1.792': attribute type 1 has an invalid length. [ 168.823122][ T8311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.898130][ T8322] FAULT_INJECTION: forcing a failure. [ 168.898130][ T8322] name failslab, interval 1, probability 0, space 0, times 0 [ 168.911061][ T8322] CPU: 1 UID: 0 PID: 8322 Comm: syz.2.796 Not tainted syzkaller #0 PREEMPT(full) [ 168.911087][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.911098][ T8322] Call Trace: [ 168.911106][ T8322] [ 168.911114][ T8322] dump_stack_lvl+0x189/0x250 [ 168.911144][ T8322] ? __pfx____ratelimit+0x10/0x10 [ 168.911164][ T8322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.911188][ T8322] ? __pfx__printk+0x10/0x10 [ 168.911221][ T8322] ? __pfx___might_resched+0x10/0x10 [ 168.911245][ T8322] should_fail_ex+0x414/0x560 [ 168.911277][ T8322] should_failslab+0xa8/0x100 [ 168.911306][ T8322] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 168.911334][ T8322] ? __alloc_skb+0x112/0x2d0 [ 168.911359][ T8322] __alloc_skb+0x112/0x2d0 [ 168.911384][ T8322] netlink_sendmsg+0x5c6/0xb30 [ 168.911415][ T8322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.911439][ T8322] ? aa_sock_msg_perm+0xf1/0x1d0 [ 168.911460][ T8322] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.911481][ T8322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.911502][ T8322] __sock_sendmsg+0x219/0x270 [ 168.911533][ T8322] ____sys_sendmsg+0x505/0x830 [ 168.911562][ T8322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.911602][ T8322] ? import_iovec+0x74/0xa0 [ 168.911630][ T8322] ___sys_sendmsg+0x21f/0x2a0 [ 168.911655][ T8322] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.911717][ T8322] ? __fget_files+0x2a/0x420 [ 168.911733][ T8322] ? __fget_files+0x3a0/0x420 [ 168.911762][ T8322] __x64_sys_sendmsg+0x19b/0x260 [ 168.911788][ T8322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.911821][ T8322] ? __pfx_ksys_write+0x10/0x10 [ 168.911845][ T8322] ? rcu_is_watching+0x15/0xb0 [ 168.911876][ T8322] ? do_syscall_64+0xbe/0x3b0 [ 168.911902][ T8322] do_syscall_64+0xfa/0x3b0 [ 168.911921][ T8322] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.911939][ T8322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.911958][ T8322] ? clear_bhb_loop+0x60/0xb0 [ 168.911982][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.912020][ T8322] RIP: 0033:0x7f938b58ebe9 [ 168.912038][ T8322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.912054][ T8322] RSP: 002b:00007f938c33a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.912076][ T8322] RAX: ffffffffffffffda RBX: 00007f938b7c5fa0 RCX: 00007f938b58ebe9 [ 168.912090][ T8322] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000017 [ 168.912102][ T8322] RBP: 00007f938c33a090 R08: 0000000000000000 R09: 0000000000000000 [ 168.912114][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.912125][ T8322] R13: 00007f938b7c6038 R14: 00007f938b7c5fa0 R15: 00007ffcf0221d08 [ 168.912159][ T8322] [ 169.306106][ T8318] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 169.331650][ T8306] vlan2: entered allmulticast mode [ 169.336863][ T8306] veth1: entered allmulticast mode [ 169.343371][ T8306] veth1: entered promiscuous mode [ 169.349452][ T8306] veth1: left promiscuous mode [ 169.357607][ T8306] bond1: (slave vlan2): making interface the new active one [ 169.374175][ T8306] veth1: entered promiscuous mode [ 169.380924][ T8306] vlan2: entered promiscuous mode [ 169.386583][ T8306] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 169.406218][ T8299] wlan1 speed is unknown, defaulting to 1000 [ 169.528479][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 170.568810][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 170.623007][ T8341] netlink: 'syz.4.801': attribute type 1 has an invalid length. [ 170.631600][ T8342] FAULT_INJECTION: forcing a failure. [ 170.631600][ T8342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.654955][ T8341] netlink: 144 bytes leftover after parsing attributes in process `syz.4.801'. [ 170.666629][ T8342] CPU: 1 UID: 0 PID: 8342 Comm: syz.2.803 Not tainted syzkaller #0 PREEMPT(full) [ 170.666654][ T8342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.666664][ T8342] Call Trace: [ 170.666672][ T8342] [ 170.666679][ T8342] dump_stack_lvl+0x189/0x250 [ 170.666708][ T8342] ? __pfx____ratelimit+0x10/0x10 [ 170.666728][ T8342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.666751][ T8342] ? __pfx__printk+0x10/0x10 [ 170.666778][ T8342] ? __might_fault+0xb0/0x130 [ 170.666815][ T8342] should_fail_ex+0x414/0x560 [ 170.666847][ T8342] _copy_from_user+0x2d/0xb0 [ 170.666871][ T8342] ___sys_recvmsg+0x12e/0x510 [ 170.666901][ T8342] ? __pfx____sys_recvmsg+0x10/0x10 [ 170.666952][ T8342] ? __fget_files+0x3a0/0x420 [ 170.666980][ T8342] do_recvmmsg+0x307/0x770 [ 170.667014][ T8342] ? __pfx_do_recvmmsg+0x10/0x10 [ 170.667051][ T8342] ? _copy_from_user+0x94/0xb0 [ 170.667090][ T8342] __x64_sys_recvmmsg+0x1af/0x240 [ 170.667118][ T8342] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 170.667140][ T8342] ? rcu_is_watching+0x15/0xb0 [ 170.667166][ T8342] ? do_syscall_64+0xbe/0x3b0 [ 170.667191][ T8342] do_syscall_64+0xfa/0x3b0 [ 170.667210][ T8342] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.667229][ T8342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.667248][ T8342] ? clear_bhb_loop+0x60/0xb0 [ 170.667271][ T8342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.667290][ T8342] RIP: 0033:0x7f938b58ebe9 [ 170.667307][ T8342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.667323][ T8342] RSP: 002b:00007f938c33a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 170.667343][ T8342] RAX: ffffffffffffffda RBX: 00007f938b7c5fa0 RCX: 00007f938b58ebe9 [ 170.667357][ T8342] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 170.667370][ T8342] RBP: 00007f938c33a090 R08: 0000200000003700 R09: 0000000000000000 [ 170.667389][ T8342] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 170.667401][ T8342] R13: 00007f938b7c6038 R14: 00007f938b7c5fa0 R15: 00007ffcf0221d08 [ 170.667433][ T8342] [ 170.881067][ T8341] netlink: 36 bytes leftover after parsing attributes in process `syz.4.801'. [ 170.912607][ T8346] netlink: 32 bytes leftover after parsing attributes in process `syz.3.804'. [ 171.091930][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.801'. [ 171.156146][ T8350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.805'. [ 171.174344][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.806'. [ 171.288335][ T8349] netlink: 'syz.3.804': attribute type 4 has an invalid length. [ 171.608589][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 171.683679][ T8377] netlink: 176 bytes leftover after parsing attributes in process `syz.4.810'. [ 171.708270][ T8376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.811'. [ 171.816789][ T8387] netlink: 1760 bytes leftover after parsing attributes in process `syz.4.810'. [ 171.881969][ T8380] wlan1 speed is unknown, defaulting to 1000 [ 172.658459][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 172.874602][ T8413] macvtap1: entered promiscuous mode [ 172.895709][ T8413] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 173.544857][ T8435] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 173.599558][ T8432] netlink: 'syz.1.825': attribute type 1 has an invalid length. [ 173.688458][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 174.516932][ T8471] __nla_validate_parse: 3 callbacks suppressed [ 174.516951][ T8471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.842'. [ 174.557368][ T8471] netlink: 32 bytes leftover after parsing attributes in process `syz.4.842'. [ 174.728556][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 175.008656][ T8496] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 175.181370][ T8500] wlan1 speed is unknown, defaulting to 1000 [ 175.536382][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.851'. [ 175.768598][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 176.066807][ T8513] wlan1 speed is unknown, defaulting to 1000 [ 176.182958][ T8525] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 176.239609][ T8525] netlink: 'syz.2.858': attribute type 1 has an invalid length. [ 176.303545][ T8532] netlink: 132 bytes leftover after parsing attributes in process `syz.3.860'. [ 176.366309][ T8533] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 176.386478][ T8534] netlink: 11 bytes leftover after parsing attributes in process `syz.0.859'. [ 176.408127][ T8536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.861'. [ 176.543114][ T8541] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 176.750413][ T8546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.865'. [ 176.808511][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 177.178166][ T8573] netlink: 40 bytes leftover after parsing attributes in process `syz.2.872'. [ 177.380397][ T8577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.873'. [ 177.440863][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 177.848679][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 178.483365][ T8615] netlink: 'syz.1.883': attribute type 1 has an invalid length. [ 178.714039][ T8625] FAULT_INJECTION: forcing a failure. [ 178.714039][ T8625] name failslab, interval 1, probability 0, space 0, times 0 [ 178.737133][ T8625] CPU: 1 UID: 0 PID: 8625 Comm: syz.2.887 Not tainted syzkaller #0 PREEMPT(full) [ 178.737161][ T8625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.737173][ T8625] Call Trace: [ 178.737181][ T8625] [ 178.737190][ T8625] dump_stack_lvl+0x189/0x250 [ 178.737220][ T8625] ? __pfx____ratelimit+0x10/0x10 [ 178.737241][ T8625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.737265][ T8625] ? __pfx__printk+0x10/0x10 [ 178.737300][ T8625] ? __pfx___might_resched+0x10/0x10 [ 178.737325][ T8625] should_fail_ex+0x414/0x560 [ 178.737357][ T8625] should_failslab+0xa8/0x100 [ 178.737388][ T8625] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 178.737416][ T8625] ? __alloc_skb+0x112/0x2d0 [ 178.737449][ T8625] __alloc_skb+0x112/0x2d0 [ 178.737474][ T8625] netlink_sendmsg+0x5c6/0xb30 [ 178.737506][ T8625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.737534][ T8625] ? aa_sock_msg_perm+0xf1/0x1d0 [ 178.737555][ T8625] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.737576][ T8625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.737597][ T8625] __sock_sendmsg+0x219/0x270 [ 178.737630][ T8625] ____sys_sendmsg+0x505/0x830 [ 178.737661][ T8625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.737694][ T8625] ? import_iovec+0x74/0xa0 [ 178.737722][ T8625] ___sys_sendmsg+0x21f/0x2a0 [ 178.737749][ T8625] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.737813][ T8625] ? __fget_files+0x2a/0x420 [ 178.737830][ T8625] ? __fget_files+0x3a0/0x420 [ 178.737859][ T8625] __x64_sys_sendmsg+0x19b/0x260 [ 178.737887][ T8625] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.737922][ T8625] ? __pfx_ksys_write+0x10/0x10 [ 178.737946][ T8625] ? rcu_is_watching+0x15/0xb0 [ 178.737972][ T8625] ? do_syscall_64+0xbe/0x3b0 [ 178.737998][ T8625] do_syscall_64+0xfa/0x3b0 [ 178.738018][ T8625] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.738038][ T8625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.738058][ T8625] ? clear_bhb_loop+0x60/0xb0 [ 178.738083][ T8625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.738102][ T8625] RIP: 0033:0x7f938b58ebe9 [ 178.738120][ T8625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.738137][ T8625] RSP: 002b:00007f938c33a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.738158][ T8625] RAX: ffffffffffffffda RBX: 00007f938b7c5fa0 RCX: 00007f938b58ebe9 [ 178.738173][ T8625] RDX: 0000000000040040 RSI: 00002000000004c0 RDI: 0000000000000003 [ 178.738186][ T8625] RBP: 00007f938c33a090 R08: 0000000000000000 R09: 0000000000000000 [ 178.738198][ T8625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.738210][ T8625] R13: 00007f938b7c6038 R14: 00007f938b7c5fa0 R15: 00007ffcf0221d08 [ 178.738243][ T8625] [ 179.003664][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 179.157042][ T8632] wlan1 speed is unknown, defaulting to 1000 [ 179.540820][ T8648] netlink: 'syz.0.895': attribute type 4 has an invalid length. [ 179.769007][ T8653] __nla_validate_parse: 6 callbacks suppressed [ 179.769026][ T8653] netlink: 48 bytes leftover after parsing attributes in process `syz.0.900'. [ 179.810936][ T30] audit: type=1800 audit(1756845921.379:2): pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.899" name="memory.events" dev="tmpfs" ino=827 res=0 errno=0 [ 179.894474][ T30] audit: type=1804 audit(1756845921.389:3): pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.899" name="/newroot/161/memory.events" dev="tmpfs" ino=827 res=1 errno=0 [ 180.008448][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 180.456259][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'. [ 180.535317][ T8678] netlink: 32 bytes leftover after parsing attributes in process `syz.1.911'. [ 180.595858][ T8682] netlink: 'syz.1.911': attribute type 4 has an invalid length. [ 180.807489][ T8687] pim6reg1: entered promiscuous mode [ 180.826053][ T8687] pim6reg1: entered allmulticast mode [ 180.835632][ T8689] netlink: 32 bytes leftover after parsing attributes in process `syz.1.915'. [ 181.041210][ T8695] netlink: 32 bytes leftover after parsing attributes in process `syz.3.914'. [ 181.054027][ T36] vlan2: left promiscuous mode [ 181.058537][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 181.145596][ T8695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.162918][ T8695] team0: Port device bond2 added [ 181.362939][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'. [ 181.398800][ T8715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.924'. [ 181.550531][ T8724] netlink: 36 bytes leftover after parsing attributes in process `syz.2.927'. [ 181.596516][ T8724] netlink: 36 bytes leftover after parsing attributes in process `syz.2.927'. [ 181.807511][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.929'. [ 181.935070][ T8739] wlan1 speed is unknown, defaulting to 1000 [ 182.088631][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 182.189669][ T8744] FAULT_INJECTION: forcing a failure. [ 182.189669][ T8744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.203044][ T8744] CPU: 1 UID: 0 PID: 8744 Comm: syz.3.933 Not tainted syzkaller #0 PREEMPT(full) [ 182.203070][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.203082][ T8744] Call Trace: [ 182.203090][ T8744] [ 182.203098][ T8744] dump_stack_lvl+0x189/0x250 [ 182.203127][ T8744] ? __pfx____ratelimit+0x10/0x10 [ 182.203148][ T8744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.203171][ T8744] ? __pfx__printk+0x10/0x10 [ 182.203213][ T8744] should_fail_ex+0x414/0x560 [ 182.203245][ T8744] _copy_from_user+0x2d/0xb0 [ 182.203268][ T8744] bpf_test_init+0xf8/0x170 [ 182.203292][ T8744] bpf_prog_test_run_skb+0x1e9/0x1560 [ 182.203309][ T8744] ? __fget_files+0x2a/0x420 [ 182.203330][ T8744] ? __fget_files+0x2a/0x420 [ 182.203362][ T8744] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 182.203383][ T8744] bpf_prog_test_run+0x2c7/0x340 [ 182.203416][ T8744] __sys_bpf+0x581/0x870 [ 182.203443][ T8744] ? __pfx___sys_bpf+0x10/0x10 [ 182.203482][ T8744] ? ksys_write+0x22a/0x250 [ 182.203511][ T8744] ? __pfx_ksys_write+0x10/0x10 [ 182.203533][ T8744] ? rcu_is_watching+0x15/0xb0 [ 182.203561][ T8744] __x64_sys_bpf+0x7c/0x90 [ 182.203584][ T8744] do_syscall_64+0xfa/0x3b0 [ 182.203604][ T8744] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.203623][ T8744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.203641][ T8744] ? clear_bhb_loop+0x60/0xb0 [ 182.203665][ T8744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.203683][ T8744] RIP: 0033:0x7f3a2a78ebe9 [ 182.203700][ T8744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.203716][ T8744] RSP: 002b:00007f3a2b61a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.203736][ T8744] RAX: ffffffffffffffda RBX: 00007f3a2a9c5fa0 RCX: 00007f3a2a78ebe9 [ 182.203750][ T8744] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 182.203762][ T8744] RBP: 00007f3a2b61a090 R08: 0000000000000000 R09: 0000000000000000 [ 182.203773][ T8744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.203784][ T8744] R13: 00007f3a2a9c6038 R14: 00007f3a2a9c5fa0 R15: 00007ffdfe9ab7a8 [ 182.203827][ T8744] [ 182.220836][ T8742] bridge0: port 3(batadv1) entered blocking state [ 182.454541][ T8742] bridge0: port 3(batadv1) entered disabled state [ 182.461382][ T8742] batadv1: entered allmulticast mode [ 182.513380][ T8742] batadv1: entered promiscuous mode [ 182.688669][ T149] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 182.698210][ T149] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 182.979087][ T8768] ------------[ cut here ]------------ [ 182.985375][ T8768] refcount_t: addition on 0; use-after-free. [ 183.009139][ T8768] WARNING: CPU: 0 PID: 8768 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 183.018647][ T8768] Modules linked in: [ 183.022744][ T8768] CPU: 0 UID: 0 PID: 8768 Comm: syz.4.943 Not tainted syzkaller #0 PREEMPT(full) [ 183.032335][ T8768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.042697][ T8768] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 183.049014][ T8768] Code: 00 00 e8 b9 95 f7 fc 5b 41 5e e9 41 15 b5 06 cc e8 ab 95 f7 fc c6 05 2e 68 c5 0a 01 90 48 c7 c7 00 b3 e2 8b e8 37 34 bb fc 90 <0f> 0b 90 90 eb d7 e8 8b 95 f7 fc c6 05 0f 68 c5 0a 01 90 48 c7 c7 [ 183.068759][ T8768] RSP: 0018:ffffc9000482fd48 EFLAGS: 00010246 [ 183.074875][ T8768] RAX: 857b7d515471ba00 RBX: 0000000000000002 RCX: ffff88802507bc00 [ 183.083373][ T8768] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 183.092019][ T8768] RBP: ffffc9000482fe48 R08: 0000000000000003 R09: 0000000000000004 [ 183.100244][ T8768] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: 1ffff1100f3d8205 [ 183.108258][ T8768] R13: 1ffff92000905fb4 R14: ffff888075d478c8 R15: dffffc0000000000 [ 183.116477][ T8768] FS: 00007f5fdc3fe6c0(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 183.125508][ T8768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.132529][ T8768] CR2: 00007ffda66a1de8 CR3: 0000000032bec000 CR4: 00000000003526f0 [ 183.138477][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 183.140635][ T8768] Call Trace: [ 183.150785][ T8768] [ 183.153740][ T8768] ax25_setsockopt+0xabb/0xc20 [ 183.158736][ T8768] ? __pfx_ax25_setsockopt+0x10/0x10 [ 183.164150][ T8768] ? __fget_files+0x2a/0x420 [ 183.168881][ T8768] ? aa_sock_opt_perm+0xff/0x1b0 [ 183.173855][ T8768] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 183.179674][ T8768] ? __pfx_ax25_setsockopt+0x10/0x10 [ 183.185014][ T8768] do_sock_setsockopt+0x17c/0x1b0 [ 183.190357][ T8768] __x64_sys_setsockopt+0x13f/0x1b0 [ 183.195654][ T8768] do_syscall_64+0xfa/0x3b0 [ 183.200305][ T8768] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.205536][ T8768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.211817][ T8768] ? clear_bhb_loop+0x60/0xb0 [ 183.216542][ T8768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.222557][ T8768] RIP: 0033:0x7f5fdb58ebe9 [ 183.227022][ T8768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.246787][ T8768] RSP: 002b:00007f5fdc3fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.255292][ T8768] RAX: ffffffffffffffda RBX: 00007f5fdb7c5fa0 RCX: 00007f5fdb58ebe9 [ 183.263359][ T8768] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000008 [ 183.271441][ T8768] RBP: 00007f5fdb611e19 R08: 0000000000000010 R09: 0000000000000000 [ 183.279554][ T8768] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 183.287747][ T8768] R13: 00007f5fdb7c6038 R14: 00007f5fdb7c5fa0 R15: 00007ffe1eda8858 [ 183.296874][ T8768] [ 183.300065][ T8768] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 183.307401][ T8768] CPU: 0 UID: 0 PID: 8768 Comm: syz.4.943 Not tainted syzkaller #0 PREEMPT(full) [ 183.316623][ T8768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.326706][ T8768] Call Trace: [ 183.329997][ T8768] [ 183.332932][ T8768] dump_stack_lvl+0x99/0x250 [ 183.337555][ T8768] ? __asan_memcpy+0x40/0x70 [ 183.342164][ T8768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.347382][ T8768] ? __pfx__printk+0x10/0x10 [ 183.352008][ T8768] vpanic+0x281/0x750 [ 183.356008][ T8768] ? __pfx__printk+0x10/0x10 [ 183.360621][ T8768] ? __pfx_vpanic+0x10/0x10 [ 183.365144][ T8768] ? is_bpf_text_address+0x26/0x2b0 [ 183.370369][ T8768] panic+0xb9/0xc0 [ 183.374111][ T8768] ? __pfx_panic+0x10/0x10 [ 183.378566][ T8768] __warn+0x31b/0x4b0 [ 183.382555][ T8768] ? refcount_warn_saturate+0xfa/0x1d0 [ 183.388047][ T8768] ? refcount_warn_saturate+0xfa/0x1d0 [ 183.393529][ T8768] report_bug+0x2be/0x4f0 [ 183.397896][ T8768] ? refcount_warn_saturate+0xfa/0x1d0 [ 183.403365][ T8768] ? refcount_warn_saturate+0xfa/0x1d0 [ 183.408844][ T8768] ? refcount_warn_saturate+0xfc/0x1d0 [ 183.414324][ T8768] handle_bug+0x84/0x160 [ 183.418577][ T8768] exc_invalid_op+0x1a/0x50 [ 183.423087][ T8768] asm_exc_invalid_op+0x1a/0x20 [ 183.427937][ T8768] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 183.434047][ T8768] Code: 00 00 e8 b9 95 f7 fc 5b 41 5e e9 41 15 b5 06 cc e8 ab 95 f7 fc c6 05 2e 68 c5 0a 01 90 48 c7 c7 00 b3 e2 8b e8 37 34 bb fc 90 <0f> 0b 90 90 eb d7 e8 8b 95 f7 fc c6 05 0f 68 c5 0a 01 90 48 c7 c7 [ 183.453657][ T8768] RSP: 0018:ffffc9000482fd48 EFLAGS: 00010246 [ 183.459732][ T8768] RAX: 857b7d515471ba00 RBX: 0000000000000002 RCX: ffff88802507bc00 [ 183.467732][ T8768] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 183.475735][ T8768] RBP: ffffc9000482fe48 R08: 0000000000000003 R09: 0000000000000004 [ 183.483739][ T8768] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: 1ffff1100f3d8205 [ 183.491822][ T8768] R13: 1ffff92000905fb4 R14: ffff888075d478c8 R15: dffffc0000000000 [ 183.499827][ T8768] ? refcount_warn_saturate+0xf9/0x1d0 [ 183.505304][ T8768] ax25_setsockopt+0xabb/0xc20 [ 183.510102][ T8768] ? __pfx_ax25_setsockopt+0x10/0x10 [ 183.515406][ T8768] ? __fget_files+0x2a/0x420 [ 183.519998][ T8768] ? aa_sock_opt_perm+0xff/0x1b0 [ 183.524942][ T8768] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 183.530495][ T8768] ? __pfx_ax25_setsockopt+0x10/0x10 [ 183.535792][ T8768] do_sock_setsockopt+0x17c/0x1b0 [ 183.540830][ T8768] __x64_sys_setsockopt+0x13f/0x1b0 [ 183.546043][ T8768] do_syscall_64+0xfa/0x3b0 [ 183.550555][ T8768] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.555756][ T8768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.561824][ T8768] ? clear_bhb_loop+0x60/0xb0 [ 183.566507][ T8768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.572404][ T8768] RIP: 0033:0x7f5fdb58ebe9 [ 183.576833][ T8768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.596448][ T8768] RSP: 002b:00007f5fdc3fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.604875][ T8768] RAX: ffffffffffffffda RBX: 00007f5fdb7c5fa0 RCX: 00007f5fdb58ebe9 [ 183.612853][ T8768] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000008 [ 183.620829][ T8768] RBP: 00007f5fdb611e19 R08: 0000000000000010 R09: 0000000000000000 [ 183.628806][ T8768] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 183.636782][ T8768] R13: 00007f5fdb7c6038 R14: 00007f5fdb7c5fa0 R15: 00007ffe1eda8858 [ 183.644783][ T8768] [ 183.648127][ T8768] Kernel Offset: disabled [ 183.652452][ T8768] Rebooting in 86400 seconds..