last executing test programs: 2.80374494s ago: executing program 4 (id=4207): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x80, 0x30, 0x53b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_simple={0x57, 0x1, 0x0, 0x0, {{0xb}, {0x3c}, {0x4, 0x6, "1fa3371410d152a2221c5dc564"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x44081}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}}, 0x10) 2.779021106s ago: executing program 3 (id=4208): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@delneigh={0x38, 0x1d, 0x20, 0x70bd2d, 0x25dfdbfd, {0x1c, 0x0, 0x0, r2, 0x0, 0x6d, 0x6}, [@NDA_LLADDR={0xa, 0x2, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_NH_ID={0x8, 0xd, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4000094) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400410000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a31000000000900010073797a3000004100090003"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmmsg$unix(r0, &(0x7f0000000040), 0x400000000000203, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000005c0)=0x4, 0x4) 2.744661143s ago: executing program 1 (id=4209): syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="8000000080000000000100010000ef7165dc109e5cdb989052acb213a7803111f9981d6402dae4eb85094e6341ed5cf7aaba64e110889564f83fd886f35685428f4cf2980a94efb6c40de41d40118f842df0d35bb05b43f1a3651c4673c0088f1b699db3189d9577ca3809358b10b40567ba57b76a284b4944200815238e644af4b0a357a2056a5f452904f943c43993391e91a8256050a6a96d6f72b0351e33ece533ad6bd619b323a2c36f47658ae23b7a3434ff6baab3b5d73f3cb5d461da92396e0d305d061cd91134479222c9a3bff62c3ead3a8b771f00"/227], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0xd, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x26, 0x808, 0x3) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000c9c000/0x4000)=nil, 0x4000, 0x4000000, 0x11, r2, 0x180000000) socket$packet(0x11, 0x3c0d0a600da636de, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f00000002c0)=0x4800, 0x4) r3 = socket(0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private0}]}, &(0x7f0000000440)=0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) r7 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r7, &(0x7f00000004c0)={&(0x7f0000000500)={0xa, 0xa, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000005c0)="671723d7c6012c", 0x7}, {&(0x7f0000000140)="9efe80000000000000dfe52c1f51218206f5abfd2a00"/31, 0x1f}], 0x1000000000000318}, 0x20008b88) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000640)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRESHEX=r7, @ANYRES32=r6], 0x2bc}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0xa, 0x4e22, 0x20, @dev={0xfe, 0x80, '\x00', 0x2}, 0xfffffffc}, 0x1b) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x6, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r9, 0x0, 0xe, 0x0, &(0x7f0000000dc0)="63eced8e46dc3f01000000000000", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmsg(r10, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x2) sendmmsg(r0, &(0x7f0000000f40), 0x0, 0x9200000000000000) bind$tipc(r1, 0x0, 0x0) 2.522992603s ago: executing program 4 (id=4211): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00f80000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r2}, 0x2) 2.22259677s ago: executing program 2 (id=4214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001a00)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="80551aa3bba0be2a9eabdfeaae377f702fe4345a3e5853e0de83554353ccf11dc16925d08fac00c51b9daf38307804425d7820e0b778df863c87055245dbb8a106c5e7f9a42ce785bd2dc8e7d96b9ab89b742a08d3a0f50977147e0d330d71fbcb43", 0x62}, {&(0x7f0000000480)="aaf36a2fc04e175673c9fba44fed740ab05bff5d01cb4c76013ab8fe769a0873c09e92786c7f754f72acc1f8a2d9f63b3b193d21e6099895c6884d761f27fa54902ea160624c8493afda4214b3d06855eae375eb0dafd6105cd52153767a0819e6202b754f7396078b43663b36f9e2564d569a8ef84b9b9294d056f8cc913e81ab3bf3ff309ccb7c99147796cf75db809869371a298714ac85f145348aa5496339b80e9df2f412972e4defa9d9e902416e005b05837ec7eb7eceb6903898fc9227784a149213d6de231e7f22d154f59e8c4ce7c8800956335a95c732615aae7b258da13b8f477726e615da8026408953987e", 0xf2}, {&(0x7f0000000580)="bfe021b69c163e71fc155cc98e6b9be1a2c32ab786cc4bdd583f173666b726e4264aa61a668d733a6a512d", 0x2b}, {&(0x7f00000005c0)="d237c4aa4cc5f89ffef70edb5191e730d4ed7a36b8e01dd6cd0e6a34c0f14d1ae6bded5fcad30fa52c96d3e946239e625d67d6d8377946b83ad8c531e4d3c8199546a526d6d289eee17e0e8b16d24f3e4ce85de9145575d0ae5ed1fce6f59c3dad03a5b6c0f82eef9b9d207bad06fc7a1e266ebd0c2a8c94854f3dfbc7dc0224d0f27fe3d77fdb1a4fb6de609779fd2c9f62254e7462e75b27197ddc293b9edcdd37d21776d3bee2261ecef2c95afc33a790f8993c14ac2152f8ae63f91e9006722db858fe162851bb30b7d0dc66086a72b48ba7", 0xd4}, {&(0x7f00000006c0)="952f9acafb2a12c21c0164166d18a026cbfb72cc3b6dafaa6deef024f58f1bd4473671aee8eb18fc8255d61c56c3ab5dc405941b22c90c7e2a5bd88a09850467fe65e6f1b3083916", 0x48}], 0x5, &(0x7f00000007c0)=[@iv={0xb8, 0x117, 0x2, 0xa1, "5398b84bf8173ed4b5fac52f65cb206c3bcedae91b8ec5933a8ecd22ab7e2c4c0174ea07274dcfe13fd2251b61921b27108b88657c87824cb564c7abcc5ead5cc0166e7288540d37ff33bd23b79c3b7d4946a50fc397750bdca85ddc6bab026ce66ca04856b893e6aa52ed317fc88f3faca12f90c9bef746b8a5737c13f82ddab8c9239121fbd32a7fd62cd429d364ac472ab7aeb85d4f9d044efc63445b753350"}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}], 0xe8, 0x4000000}, {0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000008c0)="1b099574a55c66c622d51c3bf16f199c0b692a6dc8a0802b01ece756b604946f5f63e6fabfff01c60318ae9bf7198a664d7438ffc5025e2c50b058728f266043964857adbab9a24fb0ef9bdee725a56f444b86909bd01d7df60a3e6ad72a480d7307632095a6d128f5d8f3081ab8415ba6fcfaf1b5b249f625", 0x79}, {&(0x7f0000000940)="e72572787ac8cf14a55ddf0cdee01fb0897f7457d91333e639b52602168d7997e47cddbc15ff851a197b1016660e8def723be2acde98a93e05c4b243e37bb29fa6790d879c67aec4e733d6a59e62c99b82ae9f55d5c995f7f25bdafd0d8250897781631de2c9c6bc83307ae0935dda36c655ce330b569a7f6d23d201679fbfe511922fc29b0afe88279caedd19e5", 0x8e}, {&(0x7f0000000a00)="13bac1119507c2140881b53b85bd77630bedf5c64707064bff7297a2d4abc97dd5d28638b95f19a14ff89b0217c5d0edefc8ee606c053e72f3bbb72b66d8a92ebfde3020fc50c11f6e454a1efd38310e82f0a199560da391ffe68b96963009654af6847b22b1d00f86cbc6b711ad3b3e8b672947bef87d478cce9fb9d0a478947b4095428746f96f7de7e892e3471e166f71275f1229d944d78a7ba46a2631e3dc931b90cafa4a497e46", 0xaa}, {&(0x7f0000000ac0)="dd68d88ecaa74018267761b143df90e5ef9da7cec6dd68dc39d4df49c6f1cdafed5100fe3521a18a2e5ca3beb98759ce98befc00d67155e1fc84e03accb55edda37f4689ed433ee7fff75bd8ced56e4e0b602d684ac2a9455cebb9a6653e1cc586e99b73d2b208c93b7a3e2800ae90f34ee0098507c01f461d34db74d2d743e9ff6277353322243d085b7de6aa6dce53a308c1b5c3f6eac3c3af6d6c3521961bc135", 0xa2}], 0x4, &(0x7f0000000bc0)=[@assoc={0x18, 0x117, 0x4, 0x23ec}, @op={0x18}, @op={0x18}], 0x48, 0x20000000}, {0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c40)="f9b956e7611c71d0114dcedf65ad", 0xe}], 0x1, &(0x7f0000000cc0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xc0, 0x117, 0x2, 0xa6, "b91f501243339ef5bed7dd993400b312cd98d82dc22f43bcdfb572e6a2c5a962548085e2d4fe5b2cea0722f4eb8ff11ba73c0a76aaf8201ae970a43b0adc29aaa868274374d7c31a4741a538f0df32be56a5d2ec6077d074550f34d5716812c9c0d015d3657d3ad9bceb70dbfc16fff05132c4ebcc16bb2836cbdce82605bc0e1cb15021eeb2d93befe729570a441f904c04a0e56008983ac9a77c9dc12dd618260e30e07cc6"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0xe1}], 0x120, 0x40040}, {0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000e00)="b59bf0775f01e94bea4c1b494e0650256b4941504a8f417786fea03c6fedddb39c358e1ce54311ca0fd5b5a9cebc22466abde080f210477b", 0x38}, {&(0x7f0000000e40)="ac50e6a4359a941db75121a3bd2fb13b5de48529bb71f37c25dfd42e5b546ff85dec95115fd0b2335d790c808934c58fedeb17b6ec3a4852b06529d4c4fb16bde25e4eb7b1e9838844312e9cb85168f84a6239cbbb085303af89c8ec32605d19a7e8881a0a77e7419bb5215eaeb53f9c44653a3c04495acef44db66a2645954622d3d5a253a4a585d077e4036087b7ffeeac9740be9580a01858c4632ce98ee58219b48d376106ce5c6a32abfa64eb909f7fdcc99e78c638ddf9cb866ae2dc300bb344d89d664fa589", 0xc9}, {&(0x7f0000000f40)="b5184e4d25566019ee651ee6b320a55ed50590b15a66148c3ac0df1bf35814cabbb6aeff4fcc633bbebc213c4e3c2b6145a584a88cedb7bb85bd9ff103a42f18a2f8a46a377ba38aadf74f5813a215e4532b9ce65df400475e42002c766094452579dba4607c27ce3b00f7d12f673dd056cd47f1776468049e", 0x79}], 0x3, &(0x7f0000001000)=[@iv={0xe0, 0x117, 0x2, 0xc7, "4645940c638bc1c4fb5b06b2753de2b0ec5b38f821179b747cff59fd12db8d23fcede5732ab280164a4a4e33c6f70e9bc4245717941cca470e3a607544d51741a2fa18613c832c49809a74bf8ff674b3efdf8a32606815ef0b1881afc7e1be91b4435ea7e48a5406140407d55cdd9140a4130c2dac60b5524247d95183244ed4c79c69d32d63cf9f10ef588e857166904c7f72266aff76774fcbc7a00ecddd78afa3f495ddb6fa4c7595d2fba9c370f6d6f892ced40d80addf022028c525d9222e02a9fbda0fc1"}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x60, 0x117, 0x2, 0x48, "8c7d4409db4048e7c7b7158c61ce9f47e535634426b3a883517705a10ccc231a18134d5ada6a708e14b6737907e02c83f1bf3487ae6f5cdbb4f4b9de4204065db9b47265f996ef23"}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x188, 0x44044881}, {0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000011c0)="e7057f3381334883b325aaffec069d11d5439ad1e3fb691efd03c024116b4148827dc2a1e1ab136b855f51a9abc315a0784fcd136e118beb497112fff0ee5952a972119bf1578ba1a846d1dab9fa0d31b0f6013872f3b594de5ffd5569f0d43771151696b736e44c68b9669141a59832da17f76a8783d79ca05814f51bf13ae3226e54e9494b58c85906bef15f8d11dfda078d539aa83ed0e38db056f61804dc6f6de3de5df7415e2e9be85c7461665f51a14c4af07fe793c377aa8cd05dc27a2369e4778918968cacdd50e2d4bfad65d410de77f00c6c0f4dde5823d1813aa970943457fc13f1e647", 0xe9}, {&(0x7f00000012c0)="43d999b8f3d14a06e42372ee1f4d8385f5e1f82d013f4d3e16cc7612cdb2f87dd4e5f340da5f69e7381f2d7c855cbd7145329ba97561045ecd3f011c933ae571116ca4396a9a18371de005117e61ed74a698a988ca2acfe45db95fbfb2417faec3144671e7c53d59aa2bb800e67e5e127cb3126e6e33224bb80c687423d4d3b044487b0797da2a06a1cfb894144978f84684034017656cfd7f8c8bacf97eea54992ffd68908223a72c9124aa4b7d5492b8fcf7e40d3dd72d638901cd5654f340a3768b2b466ee45a2d28bfe26cfc78610b1856fb3d079b98c08551e3", 0xdc}, {&(0x7f00000013c0)="a162c8ef904f30e991578b39bf52d2b67310d769a93fe3d1ea4f714a70177d5bbb0f5fa38336eed93e333c5bd8aeff4d993d1279e09d29358e2c98cbf54096532492c1051245148ca718813c042684257185b51176319a93f096a87b083179159cb44a38f96229d36a58642f24865b996cdf2d79198f7038dc670bd3db346f10a9f3f7f58758e072605a78b5e24ff2450ed3bdfe2e7666f9be8cf3ae6b26907d4a191ac5e7b208040646212a6577e4f9e41c8691fd845a7b0cb1b43b3df466f223bb5b247b8fe478db0e0b78d51e0b7dda43f382a6dba21e14ffb732cdf11c580d8dc62ea7da0e", 0xe7}, {&(0x7f00000014c0)="191ee02d53aa5d3178adfc405d059b901275279cd38db906a44a30133472231b", 0x20}, {&(0x7f0000001500)="3b507c03929cac11ffa41a33ddb05493c610c3150121b743b0cd376c938e412efec7d452d4133c12f119cc3636759b8a74965bc1fba471ca81e974250e142b8e6cea232382543b287b2a8c16c0af0de9e17766fa31321ae586101184fd02b7c9e7899de71deff3a98e9780d07d4a4a775b9438dd4579e56cead9771d00dafaf229b7f5058aeb25f6c6a51e882dd08a8294477019f3c6fed98ee04e32deba7034c8e302c37db4c33a49b767d245473dbe9f5d550a51c1bffb989d9199ecb6c5b99ee1da99bc64e3efa65fc8d5946eca2b169eb941ef8a65696c18fcc840b7b8184b4f2fd5c19f359cdafd592d55888e42b500", 0xf2}], 0x5, 0x0, 0x0, 0x484d5}, {0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001680)="224c47c4025aa0111ba37c12f806c48187fa9bf6945c9782f20878c85f3e8281d574f95ff5580786ecf867d951a0aed21c8234ab60f76715548b85ec71e48b5965bce3a1f96f60bb97eb77d19adb59c958fa60f54872cf474345ac47c1722a9767d6b30dd922f876a82d76efbf5a82951f68a4b5cbcf3a897cdc87c68ffd6a0b534d370969d4b107bab9f5cf043d307322d1e4da", 0x94}, {&(0x7f0000001740)="addd7fb60db5ae26631c21c036756bc41939ca3537cada4e6bd07af9a5bf92fa29af8ace91b2eb3bcf18c0224e4950191d5bac8dfeeeb9dccf66d788bbef23dfa9c89a49ef8787e7a5df049f4f80ee0526aee5207537aa049f5377155ba6869bf06338872e628574460e5b40fc287c6226ee01e809b437e0e0b2374bfef6cf4cbd69283043419fe1d2f6d01bb4147589ea2d4f3af0765c7fe08670050bd41df4db", 0xa1}, {&(0x7f0000001800)="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", 0xfe}], 0x3, &(0x7f0000001940)=[@iv={0x48, 0x117, 0x2, 0x33, "ea442ddb4eb25f8e09a6e7e408f08518341436ef4510e9c4595ca78aae27d618067cba5d9cee959e5013fbc0e4a04d5f13219b"}, @iv={0x60, 0x117, 0x2, 0x4b, "cef9639f945f78ff055539b85dfd0281b0e9838739447aba105bf8ef3ef1d6af486f90b1318dd0c18e10de517b0a0756770e4c15e586850343b41c3be59b1759606aee70f70c5f182bf6a3"}, @assoc={0x18, 0x117, 0x4, 0x2}], 0xc0, 0x20}], 0x6, 0x4000004) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x0, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r6, @ANYBLOB="10005a800c00018006000900"], 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x810) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x10, 0x4, &(0x7f0000001c40)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000001c80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x48) unshare(0x400) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001d00)={r7, r8, 0x7, 0x0, @val=@perf_event={0x9}}, 0x18) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r5, 0x412, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x879, 0x18}}}}, [@NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x6, 0x7}}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x791}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2400c814}, 0x80) 2.196468309s ago: executing program 3 (id=4215): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000340)={0x6, 0x6, 0x84}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000200)=""/222, 0x0, 0x8}, 0x78) getsockopt$MRT(r1, 0x0, 0xce, &(0x7f0000000000), &(0x7f0000000300)=0x4) 2.108823724s ago: executing program 2 (id=4216): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000034f0e61000000000000000007000000bb7f1a007600feff0000200095000000000000b0"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000200)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x2b, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 2.027388499s ago: executing program 2 (id=4218): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0xf9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0xfffffffd, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200"], 0x48) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@updsa={0x14c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'xcbc(aes)\x00'}, 0x80, 0x0, "97a2c2df58bf2babea45840d4da5d432"}}]}, 0x14c}}, 0x0) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x401}}, 0x24) pipe(&(0x7f0000000000)) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0x23, 0x2, [{0x6, 0xd, "5e000000ff000000f58700"}, {0x0, 0x5, "0404a6"}, {0x0, 0xb, "00060200b71ef91964"}]}, @rr={0x7, 0xb, 0x7, [@rand_addr=0x64010101, @multicast1]}]}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x67, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.94013419s ago: executing program 4 (id=4219): syz_emit_ethernet(0x1e, &(0x7f0000000000)={@local, @remote, @void, {@can={0xc, {{0x4, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "0b0daad7c95330b8"}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x13, &(0x7f0000000780)=ANY=[], 0x0, 0xd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r1, r3, 0x25, 0x0, @void}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00), 0x0, 0xf1, &(0x7f0000000c40), 0x0, 0x0, 0x0, &(0x7f0000000c80), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d00)={'ip6_vti0\x00', &(0x7f0000000d40)={'syztnl0\x00', 0x0, 0x29, 0xfc, 0x8, 0x0, 0x11, @empty, @empty, 0x7, 0xd255a65a9b875be1, 0x200, 0x200}}) r5 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="010000"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x2400c000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r5, &(0x7f0000000ec0), 0x0, 0x830, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8004) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4098884, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000fc0)=ANY=[@ANYBLOB="ffffffffffff0000000000008100230086dd60f4e30000683a01fe8000000000000000000000000000bbff02000000000000000000000000000104009078000000066cf6cd53ffff3c01fe800000000000000000000000000035fe8000000000000000000000000000aa2f0500000000000004b195cfa59dbe2aba01070708000000020001020084018707180000000304038a0e7fffffffffffffff0200"/169], 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x61, 0x10}, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x2, 0xc}, &(0x7f0000000100)=0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000400000002", @ANYRES32], 0x50) 1.733596586s ago: executing program 1 (id=4221): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x8, 0x70bd2b, 0x10001, {{}, {}, {0x8, 0x11, 0xc803}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10000040}, 0x840) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_cmd={0x2, 0x2, 0x8, 0xa4b9, 0x12, 0xc, 0x2, 0x4, 0x3, 0x40, 0x689, 0x40001000, 0x8, 0x8, 0xff, 0x0, [0x24, 0x6]}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r2, 0x40305829, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000340)='macvlan0\x00', 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080006000600080014000000239351eabac9d0eb768b09450a0014006600000b04907864010101ffffffff0000"], 0x22) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000002c0)={'macvlan0\x00', @remote}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000280)=@get={0x1, &(0x7f0000000400)=""/4096, 0x2}) accept4$unix(r0, 0x0, &(0x7f0000000000), 0x80800) 1.65521682s ago: executing program 0 (id=4222): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}}, &(0x7f0000000940)=""/19, 0x2e, 0x13, 0x1, 0x38}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='vxcan1\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x88, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x8080) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048040) close(0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008ca2170e4"], 0x48) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) 1.57144332s ago: executing program 2 (id=4223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c30000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000321, 0xe, 0x0, &(0x7f0000000000)="007f1f000000bb44bff5cc105117", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.485281665s ago: executing program 4 (id=4224): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000040)=@ethtool_stats}) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1808000005200102000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000880)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.453956305s ago: executing program 2 (id=4225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010011, 0x0, 0x0) ioctl$OCFS2_IOC_INFO(r2, 0x80106f05, &(0x7f0000008040)={&(0x7f0000007e80)=[&(0x7f0000000740)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x7}, &(0x7f0000000880)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f00000008c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000000900)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x8}, &(0x7f0000000a40)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000000a80)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000000ac0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x100000000}}, &(0x7f0000000b00)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000000b40)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000000b80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x7}, &(0x7f0000000cc0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000001}}, &(0x7f0000000d00)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f0000000d40)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000000d80)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000000dc0)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f0000000e00)=@uuid={{0x4f32494e, 0x5, 0x10, 0x25cd3802f3ca77f4}}, &(0x7f0000000e40)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x180000000}}, &(0x7f0000000e80)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f00000022c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x7b, 0x6}, {0x3ff, 0x6}, {0x7, 0x8000}, {0x101, 0x8000000000000001}, {0x80000000, 0x4}, {0x9, 0x5}, {0x0, 0xfffffffffffffffa}, {0x9, 0x8}, {0x100000000, 0x10}, {0x7, 0x1}, {0x2}, {0x3, 0x1}, {0x6, 0x5}, {0xffffffffffffffff, 0x9}, {0xc2, 0x7b}, {0x7fff, 0x8aa3}, {0xfffffffffffffff7, 0x4}, {0x4, 0x5}, {0x8000, 0xffffffffffff8000}, {0x7, 0x3}, {0x5, 0x5a4b}, {0x8}, {0x10000, 0x4}, {0xd, 0x2}, {0xffffffffffffff86, 0xffff}, {0x6, 0x7}, {0x17, 0xf}, {0x2, 0x5}, {0x4, 0xfff}, {0x5, 0x5}, {0x5}, {0x12efbdbe, 0x6}, {0x4, 0x6}, {0xe, 0xc}, {0xff, 0x5}, {0x9, 0xfffffffe00000000}, {0x1}, {0x401, 0x45a}, {0x9, 0x8}, {0x4, 0x7f}, {0x6}, {0xffffffffffffff1a, 0x2}, {0x7, 0x6}, {0xe26e7dc, 0x400}, {0x3, 0x6}, {0x9, 0x97c00000000000}, {0x1, 0x1}, {0x100000000, 0x1}, {0x8000000000000000, 0x101}, {0x2, 0x5}, {0x1, 0x3}, {0x5, 0x1}, {0x5b, 0x1}, {0x35d9, 0x6}, {0x80000001, 0x9}, {0x514b}, {0x9, 0x8}, {0x2, 0x1}, {0x5e0000000000000, 0x7}, {0x6, 0x9}, {0xbd, 0x56abb775}, {0x8, 0xfffffffffffffffa}, {0x6, 0xb066}, {0x81, 0x200000}, {0xefb, 0xfffffffffffff91c}, {0xffffffffffffffff, 0x7}, {0xffffffff, 0x4}, {0x0, 0x5}, {0x9, 0x2}, {0x66, 0x6}, {0x8, 0x7ff}, {0x7, 0xffffffffffff8000}, {0x3, 0x9}, {0x630, 0x8}, {0x1, 0xa}, {0x38000000, 0x2}, {0x6d94, 0x1}, {0x1c00000, 0x5}, {0x4, 0x8}, {0x6, 0xffffffff}, {0x200}, {0x6, 0x1}, {0x8, 0x7df}, {0x4, 0x4}, {0x3a495440, 0x9}, {0x73b, 0xfffffffffffffff9}, {0x9, 0x32}, {0x80000001, 0x7}, {0x8, 0x2}, {0x5, 0x6}, {0x6, 0xb}, {0x0, 0x8}, {0x8, 0xd107}, {0x7, 0x3}, {0x8, 0x1}, {0x7f, 0x9}, {0x6000000000, 0x6}, {0xffff}, {0x51f7, 0x80000000}, {0x8, 0x1}, {0x2c, 0x1}, {0x2, 0xffffffffffffffbd}, {0x40, 0x4}, {0x7}, {0x2, 0x6}, {0x9}, {0x7, 0xfffffffffffffff9}, {0x1}, {0x1, 0xf}, {0xb, 0x4}, {0x7, 0x8}, {0x5, 0x3}, {0x9, 0x6}, {0x2, 0xfffffffffffffff8}, {0x7, 0x7}, {0x50000000000}, {0x2, 0x8856}, {0x7, 0x5}, {0x5, 0x8}, {0x9, 0x10000}, {0x41bd, 0x3}, {0x80, 0x5}, {0x1, 0x5}, {0x4, 0x7}, {0x9, 0x4}, {0x83ea, 0x11}, {0x6, 0x5}, {0x9}, {0x6, 0x4}, {0xb, 0x1ff}, {0x7, 0x6}, {0x5, 0xffffffff}, {0x10000, 0x8000000000000000}, {0x6, 0x8}, {0x4, 0x4}, {0x8001, 0x3}, {0x6, 0xe}, {0x44, 0x5}, {0x4, 0x7}, {0x6, 0x3}, {0x1, 0x6}, {0x5, 0x2}, {0x2, 0x9}, {0x6c, 0x2}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0x8}, {0x1983, 0x88}, {0x3, 0xa}, {0x2, 0x4}, {0x9, 0x5}, {0x3, 0x1}, {0xffffffffffffffff, 0x5}, {0x7}, {0x1ff, 0x1}, {0x0, 0xe}, {0x401, 0xffffffffffff26bd}, {0x10000, 0xd}, {0x10001, 0x5}, {0x3, 0x3}, {0x1000, 0x2}, {0x4}, {0x5, 0x13160000}, {0x101, 0x6}, {0x1ff, 0x1}, {0xbe48, 0xfffffffffffffffa}, {0x7, 0x9}, {0xa, 0x80000001}, {0x3, 0x7}, {0xff, 0x2}, {0x9, 0x40}, {0xffffffff, 0x7fffffffffffffff}, {0x3, 0xffffffff}, {0x6, 0x9}, {0x200, 0x6}, {0x7, 0x6}, {0xfffffffffffffff9, 0x4}, {0x1000, 0x1}, {0x80000000}, {0xf, 0x2a}, {0x6, 0x9}, {0x7, 0x6e590c12}, {0x8, 0x1}, {0x0, 0x9}, {0x3a5, 0x40}, {0x4, 0x7398512b}, {0x6b4f, 0x5}, {0x8, 0x2}, {0x309203de, 0x687c}, {0x2, 0x20000000000000}, {0xffffffffffffffa7, 0xf}, {0x0, 0x3}, {0x0, 0x101}, {0x6f, 0x2}, {0x7, 0xfffffffffffffff9}, {0x8, 0xfffffffffffffffe}, {0x11, 0xd87}, {0x101, 0x53e}, {0x9, 0x1}, {0x8, 0xff}, {0xb6bf, 0x8}, {0x1, 0x4}, {0x879, 0x6}, {0x36, 0x3}, {0xfffffffffffffff9, 0x40}, {0xd18, 0x6}, {0x7f, 0x81}, {0xd6, 0x7}, {0x0, 0x1}, {0x8, 0x7ff}, {0x80000001}, {0x4, 0x5}, {0xc64}, {0xffffffffffff0000}, {0x1, 0x7}, {0x9, 0xd5dd}, {0x89b, 0x9c4}, {0xfffffffffffffffa, 0x7}, {0x8, 0x8}, {0x1, 0x1}, {0xf6}, {0x100000000, 0x7}, {0x3, 0x8}, {0x800, 0x10000}, {0x5, 0x1}, {0x6, 0x10001}, {0x4, 0x6}, {0x1, 0xffffffff}, {0x2b9, 0x3}, {0x3}, {0x7, 0x2}, {0x7, 0x6}, {0x10, 0x80}, {0x0, 0xffffffffffffff54}, {0x7, 0x100000000}, {0x0, 0x3}, {0x9, 0x4}, {0x5}, {0x7, 0x7}, {0x9, 0x6}, {0x35, 0x1}, {0x97f, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x9}, {0x6, 0x9}, {0xfffffffffffff5d0, 0x8}, {0x3, 0xfe00}, {0xc09, 0x1}, {0x7f, 0x1}, {0x638, 0x80}, {0x9, 0x9}, {0xdaed, 0xaf8}, {0x1, 0x5d}, {0x7, 0xc}, {0x2}, {0xfffffffffffffffa}]}, &(0x7f0000003300)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000003340)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000003380)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x8a94}, &(0x7f00000034c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x140000001}}, &(0x7f0000003500)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000003540)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000003580)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000001}, [{0x6c, 0x5600}, {0xffff}, {0x0, 0x9}, {0xffff, 0x3f2edccc}, {0xcd, 0x9}, {0x0, 0x4}, {0xd3a, 0x3ff}, {0x1, 0x5}, {0xfffffffffffffffe, 0x8}, {0x9, 0xfdc6}, {0x6, 0xfffffffffffffeff}, {0x200, 0x80}, {0x2, 0x8}, {0x1000, 0x6}, {0x6, 0x800}, {0x2, 0x5bde}, {0xb1aa, 0x10}, {0x8, 0x80}, {0x2, 0xb}, {0x0, 0x1}, {0x9, 0x4}, {0x7fffffff, 0x6}, {0x6, 0xae9}, {0x7fffffff, 0x437}, {0x2}, {0x0, 0x8}, {0x5, 0x9}, {0x14000, 0x6}, {0xffffffffffff49b2, 0x3}, {0x6, 0xb}, {0x7}, {0x9, 0x10000}, {0x3, 0x4}, {0x8, 0x8}, {0x5, 0x7}, {0x9, 0xa4}, {0x8}, {0x4, 0xffffffffffffffff}, {0x3, 0x1}, {0x7, 0x7}, {0x8, 0x8}, {0x5e6, 0x3}, {0x8, 0x1}, {0x100}, {0x9, 0x7ff}, {0x8, 0x2}, {0x0, 0xd}, {0xfffffffffffffffd, 0x1}, {0x7, 0x4}, {0x0, 0xffffffffffff8001}, {0x5, 0x80000001}, {0x5, 0x1000}, {0x1, 0x3}, {0x6, 0x2}, {0x6, 0x1}, {0x8, 0x8}, {0x5, 0x2}, {0x3, 0x101}, {0x6, 0xfffffffffffffff7}, {0x1, 0x7fff}, {0xc0, 0x1b}, {0x3, 0x10001}, {0xf49, 0xe}, {0x8001, 0x5}, {0x9, 0x8000000000000001}, {0x6, 0xffff}, {0x8, 0xd}, {0x2, 0x7}, {0x6, 0xfffffffffffffff7}, {0xf, 0x10001}, {0x80, 0x2}, {0x4, 0x740}, {0x3, 0xfffffffffffff001}, {0x0, 0x6}, {0xb2, 0x8}, {0x9, 0x80}, {0x9, 0x2}, {0x10000, 0x238}, {0x5, 0x9}, {0x9, 0x8}, {0x8000000000000000, 0x7a}, {0xb5, 0xfff}, {0x8, 0x9252}, {0x7, 0x5}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x80000000}, {0xfffffffffffff5b1, 0x3}, {0x1ff, 0xd}, {0x3, 0x599}, {0x5}, {0x0, 0x7}, {0x7fff, 0x1}, {0x7fffffff, 0x8df}, {0x4, 0x80}, {0x10001, 0x5}, {0x100, 0x7fff}, {0x0, 0x1}, {0xffff, 0x1}, {0x0, 0xa1}, {0x3a6567e3, 0xe}, {0x7, 0x3}, {0x151, 0x101}, {0x9, 0x3ff}, {0xbc64, 0x87}, {0xfff, 0x3}, {0x8, 0x69e0}, {0x62d, 0x8000}, {0x8, 0x8b3}, {0x3, 0x4}, {0x8000, 0x18480000000000}, {0xa, 0x5}, {0x1, 0x26d}, {0x10, 0x80000001}, {0x2b, 0x400}, {0x1, 0x100000000}, {0x9, 0x2}, {0x6, 0x1}, {0x1, 0x2}, {0x1, 0x7086}, {0x7, 0x401}, {0x8001, 0x8}, {0x0, 0xf}, {0x0, 0x8}, {0x9, 0x1}, {0x9, 0x8}, {0x8001, 0x80000000}, {0xfffffffffffffff1, 0xaef}, {0x98, 0x7}, {0x5, 0xf14000000000000}, {0x8}, {0x4, 0x1}, {0x7, 0x92cc}, {0xe, 0x7}, {0x8000, 0x6}, {0x4, 0x2}, {0x10, 0x8}, {0xe}, {0x1000, 0x9}, {0x5, 0x6}, {0xdeb4, 0x10000}, {0x0, 0x2}, {0x10001, 0x3}, {0x3, 0x7}, {0x3, 0xd}, {0x0, 0x2}, {0x6, 0xe7e}, {0x4, 0x7}, {0x8000000000000000, 0x8001}, {0x3, 0x80000000}, {0x8, 0x1}, {0x2, 0xa9b8}, {0x7, 0x8}, {0x0, 0x5}, {0x5, 0xfa}, {0x6, 0x410}, {0x2, 0x3029}, {0x7, 0x9}, {0x7be, 0xb0c7}, {0x8001, 0x1}, {0x1, 0x60000000000}, {0x5, 0x1}, {0xdf53669, 0x7}, {0x6, 0x8}, {0xb, 0x1c00000000000}, {0x11, 0x9}, {0xe, 0x2}, {0x635, 0xf11}, {0x8, 0x8}, {0x14726db9, 0x7}, {0x5, 0x7}, {0x12, 0x4}, {0x5, 0x3}, {0x100000001, 0xfffffffffffffffd}, {0x7fff, 0x7}, {0x3, 0x9}, {0x7, 0x2}, {0xfffffffffffffffa, 0x4}, {0x4, 0x9}, {0x80, 0x8}, {0xe, 0xffffffffffffffff}, {0xff, 0x1}, {0x5, 0x9}, {0x9d, 0x400}, {0x1000, 0x2}, {0x17279e51, 0x6}, {0x2, 0x80000000}, {0x0, 0x2}, {0x7fffffffffffffff, 0x7}, {0x45f, 0xac1}, {0xff, 0xffff}, {0xc66}, {0x1, 0x10001}, {0x6, 0xbe}, {0x6, 0x5}, {0x6, 0x6}, {0x1, 0x1}, {0x200, 0x9}, {0x1, 0x2}, {0x0, 0x3bc}, {0x6, 0x100000000}, {0x45f, 0x6}, {0x6, 0x10000}, {0x3}, {0x200, 0x8}, {0xf, 0xfffffffffffffffc}, {0x7}, {0x5, 0x7fffffffffffffff}, {0x6, 0x2c}, {0x8, 0x3}, {0x2, 0x40}, {0x8, 0x2ac}, {0x2, 0x8000000000000000}, {0x81, 0x8}, {0x7, 0x6}, {0x200, 0x227ffcaf}, {0x4, 0x10}, {0x100000001, 0x5c}, {0x80000001, 0x5}, {0x3, 0x80000000}, {0x2, 0x800}, {0x5, 0x4}, {0x8, 0xfffffffffffffffc}, {0x10000000, 0x6}, {0xc, 0x7}, {0x1, 0x7}, {0x0, 0x401}, {0x4fd6, 0x80000001}, {0x1, 0x3c00000000000}, {0x1e2d, 0x2}, {0x6, 0x7}, {0x7ff, 0x7ff}, {0x7f, 0x4}, {0x2, 0xc4c}, {0x8000000000000000, 0x60e1}, {0x62f, 0x5}, {0x89, 0x1}, {0x30, 0x4}, {0x80, 0x3}, {0x9, 0x9}, {0x5}, {0x5, 0x8}, {0x180000000, 0x8000000000000001}, {0x6, 0x8ca}, {0x2, 0x3}, {0x400, 0x5}, {0xd}, {0xfffffffffffffff7, 0x7}, {0x7ff, 0x7}, {0x2, 0x7}, {0xfffffffffffffffe, 0x8e03}, {0x2, 0x5}, {0x4b, 0xd}, {0x1, 0x4}, {0x8dbd, 0xe}]}, &(0x7f00000045c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000004600)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x60000000}, [{0x2, 0x8000000000000000}, {0x4, 0x10}, {0xff, 0x1}, {0x0, 0xc1}, {0x6038, 0x6}, {0x9, 0x7}, {0x400, 0x27aa}, {0x3}, {0x8001, 0x3}, {0x0, 0x5}, {0x9, 0x7}, {0xd9, 0x1}, {0x6, 0x5}, {0x1, 0x5929}, {0x6, 0x3}, {0x7, 0x5}, {0x4, 0x1ff}, {0xffffffffffff58b1, 0x5}, {0x9, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x36c6, 0xac2}, {0x67, 0x3}, {0xfff, 0xbea}, {0x9, 0x6}, {0x6, 0x3}, {0x5}, {0x8, 0xff}, {0x10001, 0xe}, {0x7, 0x7fffffff}, {0x5, 0x3}, {0x78a5, 0x8}, {0x7, 0x7}, {0x5, 0x7ff}, {0x7, 0x8}, {0x7f, 0x10001}, {0x8, 0x3}, {0x5, 0x2}, {0xe, 0xffffffffffffffff}, {0xc9a, 0x4}, {0x3, 0x7}, {0x6, 0x40}, {0x8, 0x7}, {0x2, 0x6}, {0x0, 0x6}, {0x8, 0xb}, {0xa9, 0xe}, {0x3, 0x3}, {0x7, 0x49c7}, {0x4, 0xee0}, {0x2, 0x7a7}, {0x5, 0x1}, {0x5, 0x40}, {0x7, 0x20b1}, {0x5, 0x9}, {0x9, 0xd43d}, {0xffffffffffff7feb, 0xfffffffffffffffc}, {0x460a, 0x4}, {0x0, 0x12000000}, {0x7, 0x2}, {0x156, 0xc}, {0x8, 0xc96}, {0x95c, 0xffff}, {0xfff, 0x1}, {0x8}, {0x2, 0xf6cb}, {0xd, 0x9}, {0xca, 0x8}, {0x4, 0x6}, {0x7fffffffffffffff, 0x1}, {0x8000000000000000, 0x5}, {0x8, 0x101}, {0x982, 0x1}, {0x4, 0x4}, {0x5, 0x2}, {0x2, 0x5}, {0x7, 0xffffffffffffffff}, {0x8000000000000001, 0x7}, {0x1, 0x98}, {0x0, 0x8}, {0xe25, 0x4}, {0x4, 0x5}, {0xffffffffffff0001, 0x7fff}, {0x6, 0xd3}, {0x9dd, 0x1}, {0x3, 0x5}, {0x3, 0x81a9}, {0x6, 0x91}, {0x1, 0x6}, {0x5, 0x5}, {0xfffffffffffffff8, 0xd01}, {0xb520, 0x800}, {0x7, 0x6}, {0x6, 0x8}, {0x3, 0x6}, {0x2b313755, 0x4}, {0x4, 0xfff}, {0xffffffffffff8001, 0x8000000000000000}, {0xf5, 0x1}, {0x1, 0xba6}, {0x5, 0x9c}, {0xe, 0x7}, {0x4bc}, {0x4, 0x6}, {0x8000000000000001, 0x9}, {0x3, 0x2}, {0x7, 0x9e}, {0x2, 0xfffffffffffffffb}, {0x7, 0x7b1}, {0x5b63, 0x1000}, {0x31d58d69}, {0x8000000000000001, 0x9}, {0x0, 0x819}, {0x8}, {0x2, 0xfffffffffffffffa}, {0x10000, 0x7}, {0x8}, {0x7}, {0xba6e, 0x1}, {0x5, 0x2}, {0x1, 0x2}, {0x7f, 0x3}, {0x4, 0x5}, {0x9, 0x10}, {0x2}, {0x9, 0x4}, {0x1, 0xf}, {0x6, 0x2fa56b15}, {0x2, 0xbf}, {0x4}, {0x10000, 0xbac}, {0x7}, {0x0, 0x2}, {0x2, 0x4}, {0x4e00, 0x101}, {0x0, 0x1}, {0x7fffffffffffffff, 0x9}, {0x3, 0x8}, {0x5, 0x3}, {0x100000001, 0x1}, {0x0, 0x1000}, {0x8000, 0x7}, {0x25b9, 0x3ff}, {0x6, 0x81ee}, {0xff, 0xc}, {0x698, 0x698}, {0x6, 0x2}, {0x7fffffffffffffff, 0xfffffffffffffff7}, {0x7f, 0x1ff}, {0x5, 0xd}, {0x0, 0x2}, {0x9, 0x2}, {0x9, 0x3}, {0x200, 0x6}, {0x1e, 0x8}, {0x0, 0x8}, {0x6, 0xfffffffffffffffd}, {0x2, 0x4}, {0x9, 0x7}, {0x0, 0x5}, {0x2, 0x5}, {0x8, 0xd}, {0xa7f}, {0x9, 0x9}, {0x3, 0x3}, {0x9e7b, 0x823}, {}, {0x0, 0xad}, {0x9, 0x6}, {0x8000000000000001, 0x6}, {0x0, 0x3740}, {0x4, 0x3ff}, {0xb, 0x5}, {0x7, 0x9c08}, {0xf, 0x3}, {0x7, 0x2acb}, {0x81, 0x11b9}, {0x80, 0xe1}, {0x0, 0x6}, {0x7, 0x7fff}, {0x2e2, 0x3992}, {0x284, 0xe}, {0x1}, {0x1, 0x8e}, {0x6, 0x6c8}, {0x5, 0x4}, {0x9fa5, 0x4}, {0x8, 0x100000001}, {0x81, 0x5}, {0x8, 0x73015d51}, {0x7, 0x3}, {0x3f68, 0x2}, {0x2, 0x5}, {0xe000000000000, 0x47}, {0x1, 0xa}, {0x6, 0x3ff}, {0x80000001, 0x1}, {0x80000000, 0x2}, {0x5, 0x7}, {0x7fffffff, 0x9}, {0x6, 0x9b5}, {0x7fffffffffffffff, 0x9}, {0x6ca, 0x3a1}, {0x9, 0x16}, {0x7, 0x3}, {0x7, 0x5}, {0x40, 0x4}, {0x5, 0xff}, {0x7a6, 0x9}, {0x3}, {0x5, 0x1}, {0x3, 0x800}, {0x100000001, 0x1}, {0x6, 0x3ff}, {0x5, 0xfff}, {0x1, 0x7}, {0x8000000000000000, 0xfff}, {0x2, 0x67b}, {0x1, 0x6000000000000000}, {0xc, 0xbc4}, {0x1, 0x7fff}, {0x906, 0x6}, {0x5, 0x200}, {0x6, 0x8}, {0x2, 0xe}, {0x6, 0xed88}, {0xd, 0x4}, {0x8000000000000001, 0x2c}, {0x8, 0xb59}, {0x4, 0x6}, {0x800, 0x1}, {0x7fff, 0xfffffffffffffffa}, {0x4, 0x9}, {0x6, 0xfff}, {0x4f81, 0x3}, {0x7fffffff, 0x5}, {0x9, 0x6}, {0x4, 0x4}, {0x8000000000000001, 0x6}, {0x6, 0xffffffffffffff7f}, {0xa78f, 0x286}, {0x5, 0x6}, {0x9d, 0x5}, {0x2, 0xffff}, {0x2, 0x7}, {0x7fff, 0x80000001}, {0x5, 0xdeae}, {0xfffffffffffffff7, 0x6}, {0x1}, {0x8001, 0x800}, {0x80, 0x7}, {0x5, 0x2}, {0x1ff, 0x6}, {0xffff, 0x2}, {0x80000000, 0x2}]}, &(0x7f0000005640)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000005680)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f00000056c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000005700)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000005740)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0xb}, &(0x7f0000005880)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x20000000}}, &(0x7f00000058c0)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000005940)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000005980)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0xfffffffffffff001, 0x7fffffffffffffff}, {0xfffffffffffffff3, 0x100000000}, {0x1000, 0x9}, {0xfffffffffffffff9, 0x6}, {0x2, 0x6}, {0x200, 0xffffffffffffffff}, {0x3ff, 0x5}, {0x5, 0x8}, {0x28000000000000, 0xffffffffffffff93}, {0x101, 0xaae}, {0x8, 0x40}, {0x8, 0xce}, {0x9, 0x1}, {0x6, 0x82}, {0x100000000, 0x100}, {0x5, 0x80000001}, {0xb, 0x6}, {0x4, 0x1}, {0xc928, 0x3}, {0xad, 0x3}, {0x101, 0xd}, {0x4, 0xe2e}, {0x8, 0x7}, {0xfc}, {0x100000001}, {0x6d, 0x7}, {0xfff}, {0x3, 0x6}, {0x8, 0xff}, {0x3, 0x9}, {0x1, 0xd024}, {0x3}, {0xaf78, 0x32}, {0x3e, 0xa54}, {0xb541, 0x6}, {0x1ff, 0xf5b000}, {0x5, 0xeaf}, {0x7, 0xe638}, {0xead4, 0x2}, {0x4, 0x3}, {0x7, 0x8}, {0xc1, 0x7}, {0xee1, 0x6}, {0x400, 0xa}, {0xae3, 0x4}, {0x7fffffffffffffff, 0x84}, {0x1ff, 0x5}, {0x5, 0x6}, {0x7f, 0x7fff}, {0x8, 0x2}, {0x87, 0xffffffffffff7ee7}, {0x7f, 0x40}, {0x0, 0x5c5}, {0x5, 0x7f}, {0x6, 0x80}, {0x9, 0x1242}, {0x7, 0x3}, {0x40, 0x1}, {0x9, 0x4}, {0x8000}, {0x7fffffffffffffff, 0x8}, {0xe9c2, 0x4}, {0x40, 0x8000000000000000}, {0x2, 0x8}, {0x6, 0x6}, {0x4, 0xad97}, {0x6, 0xfffc000000000000}, {0x0, 0x800}, {0x7, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x10, 0x3}, {0xd8, 0x417}, {0x80, 0x2}, {0x9, 0x8000}, {0x3, 0x3}, {0x5, 0x6}, {0x3, 0x9}, {0xb, 0x824}, {0x26, 0x9}, {0x40, 0x3}, {0xfff}, {0xd40f, 0x7}, {0xa6, 0xd2d}, {0x84, 0x1}, {0x9, 0x1}, {0x401, 0xf8}, {0x5, 0x2}, {0x1887, 0x1}, {0x9, 0x8000000000000001}, {0xc00000000000000, 0x8}, {0x7, 0x3}, {0x9cd, 0x1}, {0x3, 0xef}, {0xc7, 0xffffffff}, {0xb, 0x3}, {0x7, 0x8}, {0x200, 0x10}, {0x7, 0x7}, {0x2, 0x9229}, {0x8, 0x74}, {0x400, 0x6}, {0x342, 0x81}, {0x0, 0xc}, {0x2400000}, {0x3, 0x4}, {0xedb9, 0x5}, {0x7, 0x8}, {0x10, 0xffff}, {0xff, 0x1004000000000000}, {0x8, 0x8}, {0xfffffffffffffc00, 0xa}, {0x200, 0x2}, {0x1000000, 0x7fff}, {0x7, 0x5}, {0x1, 0x5ff6}, {0x1}, {0xfffffffffffffffa, 0x4}, {0x8001, 0x7f}, {0xb47, 0x8000}, {0x0, 0x3}, {0x5, 0x100000000}, {0xffff, 0x15}, {0x3, 0x3b}, {0x372, 0x9}, {0x0, 0x7fffffffffffffff}, {0xe15, 0x9}, {0x2, 0x2}, {0xff, 0x6}, {0xe15}, {0x3, 0x3}, {0x9}, {0x1, 0x3}, {0x0, 0xe0}, {0x2, 0x1678038b}, {0x9, 0x41c7}, {0x7, 0xfff}, {0x850, 0xffffffffffffa1d1}, {0x8, 0xfffffffffffffffd}, {0x2}, {0x0, 0x7}, {0x10, 0x8}, {0x173e0000, 0x40d}, {0xb5, 0x82c1}, {0x3, 0x5}, {0x1a, 0x9}, {0x7f, 0x8}, {0x1, 0x84}, {0x1, 0x1}, {0x5, 0x6}, {0x8, 0xc00}, {0x8, 0x2}, {0xffff, 0x9}, {0xffffffffffffffff, 0x6}, {0x9, 0x6}, {0x2, 0x7}, {0x421, 0x3}, {0x3b, 0x1}, {0x5, 0x100000001}, {0x9, 0x80010000000000}, {0x3ff, 0xcf}, {0x6, 0x5}, {0x0, 0x100}, {0x8, 0xfffffffffffff228}, {0xfffffffffffffffb, 0x7}, {0x3, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x1}, {0x9, 0x655}, {0x7, 0x6}, {0x8000000000000001, 0x7}, {0x2, 0x6}, {0xe449, 0x9}, {0xfc, 0x4}, {0x0, 0x80000000}, {0x3, 0xffffffffffffff89}, {0xb, 0x4}, {0x100000001, 0x7}, {0x0, 0xc3}, {0x8, 0xfffffffffffffffc}, {0xeb56f0f, 0x4}, {0x7, 0x400}, {0x0, 0x10001}, {0x3, 0x1}, {0x40, 0x398}, {0x40, 0x6}, {0xb226, 0x2}, {0x100000001, 0x2a3}, {0x7, 0xfffffffffffffffb}, {0xe9, 0x4}, {0x6, 0x5}, {0x1, 0xfffffffffffffff9}, {0x8, 0x1}, {0xb, 0x6}, {0xffffffff, 0xfffffffffffffffe}, {0x6cf1, 0x11}, {0x3, 0x2}, {0x0, 0x4f}, {0x5f3, 0x923}, {0x4, 0x8000000000000000}, {0x7, 0x7fffffffffffffff}, {0x6, 0x8}, {0x7f, 0x2}, {0x8, 0xfffffffffffffffb}, {0x5, 0x3b7a}, {0x8ee, 0x3}, {0x5, 0x5f}, {0xffffffffffffff01, 0x7fffffffffffffff}, {0x8, 0x5}, {0xffffffff, 0x10}, {0x3, 0x9}, {0x4, 0x2}, {0x5, 0x4}, {0x2, 0x2}, {0x100000000, 0xd8e}, {0x3}, {0x3, 0x5}, {0x400, 0x6}, {0xbf}, {0x7, 0x1}, {0xfffffffffffffffb, 0x1}, {0x0, 0xf7}, {0x8, 0x7}, {0xfff, 0x7f}, {0x401, 0x7a23}, {0x400, 0x9}, {0x7f, 0x5000}, {0x3, 0x7fffffffffffffff}, {0x1881, 0xffffffffffffff8a}, {0x98}, {0x10000, 0x8}, {0x7, 0xfff}, {0x7, 0x2}, {0x8c5, 0x100}, {0x6, 0x7}, {0xbe1d, 0xb}, {0x8}, {0x62a, 0xf2b}, {0xffffffffffffffff, 0x80}, {0x6, 0xc}, {0x1}, {0x10000, 0x8000}, {0x100000001, 0x80}, {0x4, 0x400}, {0x1b7, 0x8000000000000000}, {0x2, 0x3}, {0x7, 0x200}, {0x4, 0x5}, {0x7, 0x1}, {0x1, 0x4}, {0x3, 0x4000}, {0x7fffffffffffffff, 0xe00}, {0xfffffffffffffff7, 0x81}, {0x0, 0x7ff}, {0x3, 0x5}, {0x0, 0x2}]}, &(0x7f00000069c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000006a00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000001}}, &(0x7f0000006a40)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000006a80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x9, 0x1}, {0x4, 0x34e}, {0x2, 0x7}, {0x6}, {0xda9d, 0x1}, {0x10001, 0x2d}, {0xbf0, 0x400}, {0x4521, 0x10}, {0x230}, {0x6, 0x7fff}, {0x8000000000000000, 0x9}, {0x7, 0x7fffffff}, {0x5, 0x870000000000000}, {0x14d800000, 0x4}, {0xe, 0x4}, {0x766, 0x4}, {0xfff, 0x3ff}, {0x100000001, 0x151}, {0x101, 0x7}, {0x2da464c3, 0x8}, {0x1, 0x4}, {0xe0000000000000, 0x4}, {0x0, 0x5a}, {0x7fffffffffffffff, 0x5}, {0x3a1df2d2, 0x1}, {0x3, 0x4}, {0x9b, 0x9}, {0x96c, 0x8001}, {0x3, 0x7}, {0x10000, 0xd8b2}, {0x1, 0xfffffffffffffff8}, {0x149a347e}, {0x1, 0xa7}, {0x1ff, 0x72c}, {0xfffffffffffffff9, 0x9176}, {0x0, 0xd6}, {0x0, 0x7}, {0x5e74a4c7, 0x8000}, {0x6, 0x467}, {0x3ff, 0x7fffffff}, {0x2, 0xf}, {0x10000, 0x7}, {0x4, 0x2b2}, {0xc0f5, 0x200}, {0x4, 0xffffffffffff3fa6}, {0x7, 0x4}, {0x967, 0x5}, {0x2, 0x8000000000000000}, {0x8, 0x6b1}, {0x1, 0x81}, {0x4, 0x800}, {0x8, 0x61}, {0xfffffffffffffffc, 0x7fffffff}, {0x8001}, {0xb2f, 0x6}, {0x2, 0x8}, {0x1000, 0x8000000000000000}, {0x2679, 0x3}, {0xffffffffffffffff, 0x7}, {0x3c, 0x2}, {0x7, 0xf5d}, {0x7fffffffffffffff, 0xc}, {0xad8a, 0x4}, {0x5, 0x2}, {0x5, 0x7fffffff}, {0x1, 0x76f}, {0xe, 0x40}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x1000}, {0x7, 0x8}, {0x5, 0x3}, {0x81, 0xcc6}, {0x6, 0x9}, {0x3, 0x4}, {0x6b, 0x8924}, {0x6083}, {0x7, 0x3}, {0x9, 0x4}, {0x9, 0xa6}, {0x6, 0x1}, {0x100000001, 0xff}, {0x100000000, 0x8}, {0x401, 0x3}, {0x3, 0x2}, {0x3, 0x9}, {0x0, 0xb805}, {0x3ff, 0xa2f}, {0x0, 0x1}, {0x8, 0x20}, {0x0, 0x8}, {0x802, 0x7}, {0x3, 0xf568}, {0xf5, 0x3}, {0x4, 0x65cf}, {0x9, 0x6}, {0x7, 0xe1f1}, {0x0, 0x4}, {0x8000, 0x2}, {0x1, 0x1}, {0x400}, {0x3, 0x1}, {0x1, 0x5}, {0xff, 0x8}, {0x3, 0x8}, {0x2, 0x8000000000000001}, {0x3, 0x8}, {0xcd6, 0x1}, {0x0, 0x8}, {0x7f, 0x5}, {0xe97, 0x3}, {0x426, 0xfffffffffffff800}, {0x10000, 0xffffffffffff0e95}, {0x9, 0x83}, {0x18b, 0x6}, {0x7fff, 0xfff}, {0x1, 0x4}, {0x7, 0x81}, {0x3, 0xffffffffffffff1a}, {0x100000001, 0xfffffffffffffe9e}, {0xdc, 0x1000}, {0x5, 0x8}, {0xd, 0x7}, {0x1, 0x7}, {0x5, 0x5}, {0xd051, 0x1}, {0x7, 0x6}, {0x9}, {0x1, 0xfffffffffffffffb}, {0xfffffffffffffff9, 0xffffffffffffff7f}, {0xfffffffffffffffc, 0x6}, {0x4, 0x9}, {0x3, 0x9}, {0xe, 0x2}, {0x97ea, 0x34}, {0x2, 0x3077}, {0x6, 0x100000001}, {0x5, 0x3}, {0x6, 0xb}, {0xc, 0x6}, {0x2, 0x7}, {0x7fff, 0x8}, {0xe, 0xff}, {0x0, 0x8000000000000001}, {0x76ae, 0x2}, {0x4, 0x7}, {0x400, 0x1000}, {0x7, 0x7}, {0x8000000000000001, 0x8}, {0x80000000, 0xda6}, {0x1, 0x7}, {0x4, 0x8}, {0x2, 0x100000000}, {0x8, 0x8000000000000000}, {0x9}, {0x200, 0xfffffffffffffff7}, {0x5, 0xa9}, {0x4, 0xfff}, {0x4, 0x8000}, {0x200000, 0xfffffffffffffffa}, {0xe2, 0x200}, {0x3, 0x4}, {0x9, 0x1}, {0xffffffffffffb6f8, 0x100000000}, {0x1, 0x3}, {0x1911, 0x3}, {0x80, 0xcbe}, {0x2, 0x7}, {0xe57, 0x1}, {0xf, 0x62c}, {0xffffffffffffff00, 0x3}, {0xe71, 0x9}, {0x2e9}, {0xfffffffffffffffe, 0x6}, {0x4, 0x3}, {0x9, 0x3}, {0x8, 0x4}, {0x4, 0x100000000}, {0x8, 0x4}, {0x8, 0x1}, {0x80000000000, 0xe96}, {0x6}, {0x5b4f, 0x1}, {0x0, 0x4}, {0x3958a301, 0x4}, {0x1, 0x400}, {0x559, 0x7}, {0x0, 0x11}, {0x7, 0x34c}, {0x3, 0x6}, {0x6, 0xfffffffffffffffc}, {0x8, 0xfa2}, {0x6, 0x8}, {0x10000, 0x6}, {0x2, 0x82c}, {0x8, 0x6}, {0x1, 0x81}, {0xfffffffffffffffc, 0x1}, {0x3, 0x9}, {0xfffffffffffffffe, 0x612d5c7f}, {0x6, 0xcf01}, {0xbf, 0x1}, {0x5, 0xfff}, {0x4, 0x1}, {0x9, 0x4}, {0x7, 0x82bb}, {0x8000000000000001, 0x8}, {0x80000001, 0x1}, {0x5, 0x6}, {0x837, 0x4}, {0x8, 0x6}, {0x6, 0x9}, {0x6e, 0x6}, {0x8, 0x3}, {0x5, 0x7}, {0x2, 0x2}, {0x3, 0x40}, {0x401, 0x100000000}, {0xff, 0x3}, {0x7, 0x4}, {0x2, 0x6f}, {0x4, 0x1}, {0x200, 0x4}, {0x8, 0x10}, {0x6, 0xfffffffffffffe00}, {0x8, 0x4}, {0x7, 0xb8}, {0x7}, {0x9, 0xcd3}, {0x8, 0x8}, {0x1, 0x7fffffffffffffff}, {0x1, 0x8000000000000000}, {0x7fffffffffffffff, 0x80000001}, {0x2, 0x19}, {0x5, 0x6}, {0x4, 0x7}, {0xd, 0x2}, {0x180, 0x6}, {0x5, 0xbf4}, {0x0, 0x7}, {0x971b, 0xffffffffffff0bbb}, {0x4}, {0x6, 0x5}, {0x1, 0xfffffffffffffff9}, {0xf, 0x5}, {0x2, 0x6}, {0x3, 0x2}, {0xffff, 0x61d3}, {0x5}, {0x2}, {0x6d7b, 0x1}, {0x7, 0x7fff}, {0x4, 0x7f}, {0xb}, {0x4, 0x3}]}, &(0x7f0000007ac0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000007b00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000007b40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x7}, &(0x7f0000007c80)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000007d00)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000007d40)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000007d80)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000007dc0)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000007e00)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}], 0x32}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.363105392s ago: executing program 1 (id=4226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb8}}, 0x0) 1.212897045s ago: executing program 1 (id=4227): shutdown(0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0xb, &(0x7f0000000040)=""/193, &(0x7f0000000140)=0xc1) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000001d00000a00000008000200", @ANYRESOCT], 0x1c}}, 0x200040c4) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000008000001000000240007000000000000000000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) listen(r3, 0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000400)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="18387600", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000090) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)=ANY=[], 0xe0}], 0x1, 0x0, 0x0, 0x40000}, 0x48040) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="05000000040000aa010000000900000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="53688149550492e15f7476bc8fdd71", @ANYRESHEX=r1, @ANYRESDEC=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000007b00000018110000db4bf17f0ba4f7ee", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.053216675s ago: executing program 0 (id=4228): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000034f0e61000000000000000007000000bb7f1a007600feff000020009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000200)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x2b, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 907.53863ms ago: executing program 3 (id=4229): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000034f0e61000000000000000107000000bb7f1a007600feff000020009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000200)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x2b, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 754.665969ms ago: executing program 0 (id=4230): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280"], 0x24}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8010) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280"], 0x24}}, 0x0) (async) 624.718278ms ago: executing program 3 (id=4231): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000900)={'vlan1\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "29f7a7f8fbcd9619e4f09d118fc4b86d1202047ef7e508000000088d65626db0", "b00919211ebdeb1950fb886195af9afd3ed1be9698928db7fe1997231892ce9d", "744cd12cc1f03179141e5eb758e341e90cbb0f0d533b686a0608f1bb87129fbe", "c4a6b87c8da38550621c2ab91afc93e4cdf2b4d40a9ecc5a5d56b2ce97d174ad", "a24138e33af26b66193bba940e83883bcd27b19312e19ef0538a396580a39f13", "cf4783bd11e51ec74b4b509b", 0x2, 0x9, 0x3, 0x5, 0x7}}) 463.510917ms ago: executing program 0 (id=4232): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x60600) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) 458.531719ms ago: executing program 3 (id=4233): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x8165, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000b80)=@x25, &(0x7f0000000c00)=0x80) (async) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000ec0)={0x0, 0xfffffe98, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000000fffe0000000200000a00e08087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="140426bd7000fcdbdf2513000000050003000d00000005000300070000000c0400000003aaaaaaaaaaaa06000800ffff000006000800a0aa0000"], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x4080) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='$\x00'}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x68, r7, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x8c, r7, 0x5, 0x0, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0xfef1, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x8c}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind(r9, &(0x7f0000000800)=@generic={0x5, "226f1a2b857e0605e2d5fe5e979a5bafb045196240f0cbd0ba291c16111cee2f3e501c593598b99f713b38971ae0ee2d270c505f96ab780c54da80fd553c5985f491938dde0b1e81f28256c2da9d844489471e05adec5d43d3ecb901d41f67fb50eaa3114093e19fffbcf6936d4a8db37135e9a186d8c32bd3ddb724e28a"}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), 0xffffffffffffffff) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r10, &(0x7f0000000900)='hello\x00', 0x5, 0x0, &(0x7f0000000940)={0xa, 0x1f90, 0x0, @local}, 0x1c) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 448.966967ms ago: executing program 4 (id=4234): r0 = socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3}, 0x1c) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x2, 0x4) (async) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x2, 0x3, 0x3}, 0x10) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) unshare(0x26020480) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}}, 0x0) bind(r4, &(0x7f0000000180)=@hci={0x1f, 0x1, 0x3}, 0x80) (async) socket(0x28, 0x80000, 0x7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x0) 358.354769ms ago: executing program 0 (id=4235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000321, 0xe, 0x0, &(0x7f0000000000)="007f1f000000bb44bff5cc105117", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 175.338988ms ago: executing program 1 (id=4236): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000034f0e61000000000000000007000000bb7f1ab07600feff0000200095000b0000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000200)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x2b, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 133.822535ms ago: executing program 0 (id=4237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb8}}, 0x0) 118.159935ms ago: executing program 4 (id=4238): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0xffff, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}]}, &(0x7f0000000300)=0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xffffff9f}}, 0x4) setsockopt(r2, 0x84, 0x80, &(0x7f0000000340)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e21, 0x9, @mcast2, 0x6}}}, 0x84) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fcffffff320000001800018014000200"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000540)={0x3, 0x3, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000006c0)=[{&(0x7f0000000700)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 35.492327ms ago: executing program 2 (id=4239): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x60600) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 32) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75b, 0x7, 0x8, 0x7, 0xb], 0x0, 0x0}, 0x78) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x7c2}) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000200)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '*\x000', 0x1c, 0x2c, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, {[@dstopts={0x1}], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffe}}}}}}}, 0x0) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x13, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}, {0x85, 0x0, 0x0, 0x72}}, @printk={@lld, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5}}]}, &(0x7f0000000340)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 790.546µs ago: executing program 1 (id=4240): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x124, 0x40, 0x107, 0x70bd2c, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@typed={0x104, 0xf, 0x0, 0x0, @binary="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"}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x41, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) 0s ago: executing program 3 (id=4241): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000034f0e61000000000000000107000000bb7f1a007600feff000020009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000200)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x2b, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) kernel console output (not intermixed with test programs): 0][ T6466] bond6: (slave bridge7): failed to get link speed/duplex [ 444.255502][T20669] netlink: 'syz.2.3316': attribute type 1 has an invalid length. [ 444.255527][T20669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3316'. [ 444.258618][T20674] netlink: 'syz.1.3318': attribute type 3 has an invalid length. [ 444.258637][T20674] netlink: 'syz.1.3318': attribute type 2 has an invalid length. [ 444.277599][T20676] netlink: 'syz.1.3318': attribute type 3 has an invalid length. [ 444.277619][T20676] netlink: 'syz.1.3318': attribute type 2 has an invalid length. [ 444.325230][ T13] bond6: (slave bridge7): failed to get link speed/duplex [ 444.505925][ T13] IPVS: starting estimator thread 0... [ 444.592803][T20689] IPVS: using max 26 ests per chain, 62400 per kthread [ 444.694253][T20696] netlink: 'syz.2.3322': attribute type 1 has an invalid length. [ 444.702081][T20696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3322'. [ 444.724117][T20348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.837388][T20348] veth0_vlan: entered promiscuous mode [ 444.852158][T20348] veth1_vlan: entered promiscuous mode [ 444.900285][T20348] veth0_macvtap: entered promiscuous mode [ 444.920736][T20348] veth1_macvtap: entered promiscuous mode [ 444.985425][T20348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.986371][T20706] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 445.102841][T20348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.181107][T20701] syzkaller0: entered promiscuous mode [ 445.181132][T20701] syzkaller0: entered allmulticast mode [ 445.228920][ T6464] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.228997][ T6464] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.229033][ T6464] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.229070][ T6464] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.530484][ T6466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.530507][ T6466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.701111][T20737] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 445.711778][ T5973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.711799][ T5973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.470906][T20768] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3334'. [ 446.545183][T20770] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 446.865991][T20785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3339'. [ 446.915264][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3340'. [ 446.918122][T20786] netlink: 'syz.3.3340': attribute type 46 has an invalid length. [ 446.944639][T20787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3339'. [ 447.033486][T20792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3342'. [ 447.054667][ T5973] net_ratelimit: 17 callbacks suppressed [ 447.054689][ T5973] bond6: (slave bridge7): failed to get link speed/duplex [ 447.185286][ T13] bond6: (slave bridge7): failed to get link speed/duplex [ 447.293243][ T6466] bond6: (slave bridge7): failed to get link speed/duplex [ 447.361536][T20811] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 447.404219][ T6466] bond6: (slave bridge7): failed to get link speed/duplex [ 447.736388][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.751886][T20831] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3347'. [ 447.784075][ T13] bond6: (slave bridge7): failed to get link speed/duplex [ 447.894565][ T6466] bond6: (slave bridge7): failed to get link speed/duplex [ 448.003321][ T6464] bond6: (slave bridge7): failed to get link speed/duplex [ 448.068276][T20842] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 448.116167][ T6464] bond6: (slave bridge7): failed to get link speed/duplex [ 448.219242][T20848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3350'. [ 448.346138][T20858] netlink: 'syz.2.3352': attribute type 1 has an invalid length. [ 448.346161][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3352'. [ 448.398598][T20860] sctp: [Deprecated]: syz.0.3351 (pid 20860) Use of int in max_burst socket option. [ 448.398598][T20860] Use struct sctp_assoc_value instead [ 449.209463][T20894] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 449.339658][T20903] netlink: 'syz.2.3365': attribute type 1 has an invalid length. [ 449.339682][T20903] __nla_validate_parse: 3 callbacks suppressed [ 449.339694][T20903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3365'. [ 449.376493][T20903] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3365'. [ 449.734241][T20916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3368'. [ 449.926473][T20921] FAULT_INJECTION: forcing a failure. [ 449.926473][T20921] name failslab, interval 1, probability 0, space 0, times 0 [ 449.926505][T20921] CPU: 1 UID: 0 PID: 20921 Comm: syz.3.3370 Not tainted syzkaller #0 PREEMPT(full) [ 449.926528][T20921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 449.926550][T20921] Call Trace: [ 449.926558][T20921] [ 449.926567][T20921] dump_stack_lvl+0xe8/0x150 [ 449.926604][T20921] should_fail_ex+0x3eb/0x540 [ 449.926634][T20921] should_failslab+0xa8/0x100 [ 449.926664][T20921] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 449.926689][T20921] ? rcu_is_watching+0x16/0xb0 [ 449.926719][T20921] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 449.926744][T20921] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 449.926773][T20921] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 449.926802][T20921] krealloc_node_align_noprof+0x19a/0x390 [ 449.926828][T20921] ? rcu_is_watching+0x16/0xb0 [ 449.926861][T20921] kvrealloc_node_align_noprof+0x7b/0xf0 [ 449.926892][T20921] add_expr+0x42d/0x6e0 [ 449.926915][T20921] ? bpf_init_scev+0x167/0x460 [ 449.926944][T20921] bpf_init_scev+0x1a2/0x460 [ 449.926969][T20921] bpf_check+0x2fd8/0x34e0 [ 449.927002][T20921] ? ktime_get_with_offset+0x93/0x2d0 [ 449.927030][T20921] ? ktime_get_with_offset+0x93/0x2d0 [ 449.927058][T20921] ? __pfx_bpf_check+0x10/0x10 [ 449.927088][T20921] ? bpf_obj_name_cpy+0x194/0x1e0 [ 449.927136][T20921] bpf_prog_load+0x14da/0x1c60 [ 449.927169][T20921] ? __pfx_bpf_prog_load+0x10/0x10 [ 449.927206][T20921] ? __might_fault+0xaf/0x130 [ 449.927230][T20921] __sys_bpf+0xd86/0xe00 [ 449.927253][T20921] ? __pfx___sys_bpf+0x10/0x10 [ 449.927279][T20921] ? __fget_files+0x2a/0x420 [ 449.927313][T20921] ? ksys_write+0x242/0x270 [ 449.927337][T20921] ? __pfx_ksys_write+0x10/0x10 [ 449.927364][T20921] __x64_sys_bpf+0xba/0xd0 [ 449.927390][T20921] do_syscall_64+0x166/0x520 [ 449.927409][T20921] ? trace_irq_disable+0x3b/0x140 [ 449.927432][T20921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.927449][T20921] ? clear_bhb_loop+0x70/0xc0 [ 449.927469][T20921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.927486][T20921] RIP: 0033:0x7f9e8959f559 [ 449.927502][T20921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.927517][T20921] RSP: 002b:00007f9e8a3a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 449.927535][T20921] RAX: ffffffffffffffda RBX: 00007f9e89825fa0 RCX: 00007f9e8959f559 [ 449.927547][T20921] RDX: 0000000000000022 RSI: 00002000000000c0 RDI: 0000000000000005 [ 449.927558][T20921] RBP: 00007f9e8a3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 449.927576][T20921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 449.927587][T20921] R13: 00007f9e89826038 R14: 00007f9e89825fa0 R15: 00007ffc06fda038 [ 449.927616][T20921] [ 450.416312][T20942] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 450.744895][T20964] tc_dump_action: action bad kind [ 450.766983][T20964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3380'. [ 450.934289][T20967] syzkaller1: entered promiscuous mode [ 450.934324][T20967] syzkaller1: entered allmulticast mode [ 451.136293][T20975] netlink: 976 bytes leftover after parsing attributes in process `syz.4.3383'. [ 451.397354][T21010] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 451.427771][T21010] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 451.668146][T21021] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 451.878931][T21030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3394'. [ 451.899336][T21034] FAULT_INJECTION: forcing a failure. [ 451.899336][T21034] name failslab, interval 1, probability 0, space 0, times 0 [ 451.899366][T21034] CPU: 0 UID: 0 PID: 21034 Comm: syz.1.3396 Not tainted syzkaller #0 PREEMPT(full) [ 451.899388][T21034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 451.899401][T21034] Call Trace: [ 451.899409][T21034] [ 451.899419][T21034] dump_stack_lvl+0xe8/0x150 [ 451.899456][T21034] should_fail_ex+0x3eb/0x540 [ 451.899486][T21034] should_failslab+0xa8/0x100 [ 451.899516][T21034] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 451.899541][T21034] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 451.899565][T21034] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 451.899594][T21034] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 451.899622][T21034] krealloc_node_align_noprof+0x19a/0x390 [ 451.899647][T21034] ? rcu_is_watching+0x16/0xb0 [ 451.899684][T21034] kvrealloc_node_align_noprof+0x7b/0xf0 [ 451.899714][T21034] add_expr+0x2fd/0x6e0 [ 451.899736][T21034] ? __kvmalloc_node_noprof+0x340/0x820 [ 451.899761][T21034] ? bpf_init_scev+0x167/0x460 [ 451.899790][T21034] bpf_init_scev+0x1a2/0x460 [ 451.899816][T21034] bpf_check+0x2fd8/0x34e0 [ 451.899849][T21034] ? ktime_get_with_offset+0x93/0x2d0 [ 451.899876][T21034] ? ktime_get_with_offset+0x93/0x2d0 [ 451.899903][T21034] ? __pfx_bpf_check+0x10/0x10 [ 451.899927][T21034] ? bpf_obj_name_cpy+0x194/0x1e0 [ 451.899956][T21034] bpf_prog_load+0x14da/0x1c60 [ 451.899990][T21034] ? __pfx_bpf_prog_load+0x10/0x10 [ 451.900024][T21034] ? __might_fault+0xaf/0x130 [ 451.900051][T21034] __sys_bpf+0xd86/0xe00 [ 451.900076][T21034] ? __pfx___sys_bpf+0x10/0x10 [ 451.900105][T21034] ? __fget_files+0x2a/0x420 [ 451.900144][T21034] ? ksys_write+0x242/0x270 [ 451.900171][T21034] ? __pfx_ksys_write+0x10/0x10 [ 451.900202][T21034] __x64_sys_bpf+0xba/0xd0 [ 451.900245][T21034] do_syscall_64+0x166/0x520 [ 451.900267][T21034] ? trace_irq_disable+0x3b/0x140 [ 451.900293][T21034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.900314][T21034] ? clear_bhb_loop+0x70/0xc0 [ 451.900337][T21034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.900357][T21034] RIP: 0033:0x7f3163d9f559 [ 451.900380][T21034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.900398][T21034] RSP: 002b:00007f3164c1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.900425][T21034] RAX: ffffffffffffffda RBX: 00007f3164025fa0 RCX: 00007f3163d9f559 [ 451.900444][T21034] RDX: 0000000000000022 RSI: 00002000000000c0 RDI: 0000000000000005 [ 451.900457][T21034] RBP: 00007f3164c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 451.900468][T21034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 451.900481][T21034] R13: 00007f3164026038 R14: 00007f3164025fa0 R15: 00007ffe33ec9ff8 [ 451.900514][T21034] [ 451.958326][T21035] xt_NETMAP: bad MAP_IPS. [ 451.995293][T21030] bridge1: entered promiscuous mode [ 452.017356][T21036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3394'. [ 452.278241][T21041] Bluetooth: MGMT ver 1.23 [ 452.305579][ T6464] net_ratelimit: 30 callbacks suppressed [ 452.305599][ T6464] bond6: (slave bridge7): failed to get link speed/duplex [ 452.435444][ T6466] bond6: (slave bridge7): failed to get link speed/duplex [ 452.538729][T21048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3399'. [ 452.543286][ T6464] bond6: (slave bridge7): failed to get link speed/duplex [ 452.842233][ T6462] bond6: (slave bridge7): failed to get link speed/duplex [ 452.899266][T21067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3401'. [ 453.038949][T21072] netlink: 'syz.4.3401': attribute type 4 has an invalid length. [ 453.038972][T21072] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3401'. [ 453.075768][T21067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.110024][T21072] bond1 (unregistering): Released all slaves [ 453.257469][ T5973] bond6: (slave bridge7): failed to get link speed/duplex [ 453.373391][T21082] vlan2: entered promiscuous mode [ 453.373415][T21082] bridge0: entered promiscuous mode [ 453.376843][T21082] vlan2: entered allmulticast mode [ 453.376871][T21082] bridge0: entered allmulticast mode [ 453.437780][ T6464] bond6: (slave bridge7): failed to get link speed/duplex [ 453.495137][ T6464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.520468][T21091] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 453.545652][ T6462] bond6: (slave bridge7): failed to get link speed/duplex [ 453.571945][ T5644] Bluetooth: hci1: connection err: -111 [ 453.612266][T21094] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 453.620133][T21094] team0: Device ipvlan2 is already an upper device of the team interface [ 453.685119][ T5973] bond6: (slave bridge7): failed to get link speed/duplex [ 453.793765][ T5973] bond6: (slave bridge7): failed to get link speed/duplex [ 453.811794][T21107] FAULT_INJECTION: forcing a failure. [ 453.811794][T21107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.811823][T21107] CPU: 0 UID: 0 PID: 21107 Comm: syz.0.3408 Not tainted syzkaller #0 PREEMPT(full) [ 453.811845][T21107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 453.811858][T21107] Call Trace: [ 453.811866][T21107] [ 453.811875][T21107] dump_stack_lvl+0xe8/0x150 [ 453.811911][T21107] should_fail_ex+0x3eb/0x540 [ 453.811940][T21107] _copy_from_user+0x2d/0xb0 [ 453.811966][T21107] __sys_bpf+0x2e7/0xe00 [ 453.812005][T21107] ? __pfx___sys_bpf+0x10/0x10 [ 453.812035][T21107] ? __fget_files+0x2a/0x420 [ 453.812075][T21107] ? ksys_write+0x242/0x270 [ 453.812101][T21107] ? __pfx_ksys_write+0x10/0x10 [ 453.812127][T21107] __x64_sys_bpf+0xba/0xd0 [ 453.812157][T21107] do_syscall_64+0x166/0x520 [ 453.812178][T21107] ? trace_irq_disable+0x3b/0x140 [ 453.812203][T21107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.812223][T21107] ? clear_bhb_loop+0x70/0xc0 [ 453.812247][T21107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.812267][T21107] RIP: 0033:0x7f3b8939f559 [ 453.812285][T21107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.812303][T21107] RSP: 002b:00007f3b8a208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.812323][T21107] RAX: ffffffffffffffda RBX: 00007f3b89625fa0 RCX: 00007f3b8939f559 [ 453.812337][T21107] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 453.812349][T21107] RBP: 00007f3b8a208090 R08: 0000000000000000 R09: 0000000000000000 [ 453.812362][T21107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.812374][T21107] R13: 00007f3b89626038 R14: 00007f3b89625fa0 R15: 00007ffe8dc1e578 [ 453.812408][T21107] [ 454.036007][T21119] nbd: socks must be embedded in a SOCK_ITEM attr [ 454.162350][T21112] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.241276][T21119] block nbd1: shutting down sockets [ 454.293216][T18950] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 454.293465][ T5644] Bluetooth: hci3: command 0x0c1a tx timeout [ 454.729702][T21152] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 454.973715][T21165] FAULT_INJECTION: forcing a failure. [ 454.973715][T21165] name failslab, interval 1, probability 0, space 0, times 0 [ 454.973747][T21165] CPU: 1 UID: 0 PID: 21165 Comm: syz.0.3423 Not tainted syzkaller #0 PREEMPT(full) [ 454.973771][T21165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 454.973784][T21165] Call Trace: [ 454.973793][T21165] [ 454.973803][T21165] dump_stack_lvl+0xe8/0x150 [ 454.973838][T21165] should_fail_ex+0x3eb/0x540 [ 454.973867][T21165] should_failslab+0xa8/0x100 [ 454.973898][T21165] __kmalloc_noprof+0xf9/0x710 [ 454.973921][T21165] ? bpf_test_init+0x9f/0x150 [ 454.973943][T21165] ? bpf_test_init+0x9f/0x150 [ 454.973973][T21165] bpf_test_init+0x9f/0x150 [ 454.974003][T21165] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 454.974048][T21165] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 454.974084][T21165] ? __fget_files+0x2a/0x420 [ 454.974114][T21165] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 454.974144][T21165] bpf_prog_test_run+0x2c5/0x340 [ 454.974170][T21165] __sys_bpf+0xb1e/0xe00 [ 454.974197][T21165] ? __pfx___sys_bpf+0x10/0x10 [ 454.974227][T21165] ? __fget_files+0x2a/0x420 [ 454.974270][T21165] ? ksys_write+0x242/0x270 [ 454.974298][T21165] ? __pfx_ksys_write+0x10/0x10 [ 454.974330][T21165] __x64_sys_bpf+0xba/0xd0 [ 454.974363][T21165] do_syscall_64+0x166/0x520 [ 454.974387][T21165] ? trace_irq_disable+0x3b/0x140 [ 454.974414][T21165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.974445][T21165] ? clear_bhb_loop+0x70/0xc0 [ 454.974471][T21165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.974492][T21165] RIP: 0033:0x7f3b8939f559 [ 454.974511][T21165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.974528][T21165] RSP: 002b:00007f3b8a208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 454.974551][T21165] RAX: ffffffffffffffda RBX: 00007f3b89625fa0 RCX: 00007f3b8939f559 [ 454.974567][T21165] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 454.974579][T21165] RBP: 00007f3b8a208090 R08: 0000000000000000 R09: 0000000000000000 [ 454.974593][T21165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.974607][T21165] R13: 00007f3b89626038 R14: 00007f3b89625fa0 R15: 00007ffe8dc1e578 [ 454.974641][T21165] [ 455.170336][T21169] Cannot find set identified by id 0 to match [ 455.394636][T21178] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3427'. [ 457.808213][ T6466] net_ratelimit: 14 callbacks suppressed [ 457.808235][ T6466] bond6: (slave bridge7): failed to get link speed/duplex [ 457.916391][ T5973] bond6: (slave bridge7): failed to get link speed/duplex [ 458.030078][ T6466] bond6: (slave bridge7): failed to get link speed/duplex [ 458.114545][T21198] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 458.135603][ T5973] bond6: (slave bridge7): failed to get link speed/duplex [ 458.228403][T21200] netlink: 'syz.1.3434': attribute type 1 has an invalid length. [ 458.228429][T21200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3434'. [ 458.255871][ T6464] bond6: (slave bridge7): failed to get link speed/duplex [ 458.362510][T21206] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 458.364428][ T5973] bond6: (slave bridge7): failed to get link speed/duplex [ 458.474968][ T6466] bond6: (slave bridge7): failed to get link speed/duplex [ 458.498197][T21218] netlink: 400 bytes leftover after parsing attributes in process `syz.3.3436'. [ 458.574646][T21213] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 458.582882][ T6464] bond6: (slave bridge7): failed to get link speed/duplex [ 458.756635][ T6476] bond6: (slave bridge7): failed to get link speed/duplex [ 458.866129][ T6464] bond6: (slave bridge7): failed to get link speed/duplex [ 458.883867][T21237] xt_TCPMSS: Only works on TCP SYN packets [ 458.925084][T21240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3444'. [ 459.006810][T21242] ipt_ECN: cannot use operation on non-tcp rule [ 459.307828][T21255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3447'. [ 459.322200][T21255] netlink: 'syz.4.3447': attribute type 1 has an invalid length. [ 459.375298][T21255] bond1: entered promiscuous mode [ 459.375813][T21255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.399954][T21255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3447'. [ 459.400020][T21255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3447'. [ 459.465967][T21255] bond1: (slave bridge3): making interface the new active one [ 459.465992][T21255] bridge3: entered promiscuous mode [ 459.481359][T21255] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 459.547546][T21255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3447'. [ 459.547626][T21255] bond1: entered allmulticast mode [ 459.547643][T21255] bridge3: entered allmulticast mode [ 459.552440][T21256] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3447'. [ 459.666980][T21268] netlink: 'syz.0.3449': attribute type 1 has an invalid length. [ 459.667005][T21268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3449'. [ 460.007906][T21284] xt_hashlimit: size too large, truncated to 1048576 [ 460.007929][T21284] xt_hashlimit: max too large, truncated to 1048576 [ 460.010789][T21282] netlink: 'syz.4.3450': attribute type 1 has an invalid length. [ 460.010809][T21282] netlink: 'syz.4.3450': attribute type 2 has an invalid length. [ 460.921305][T21315] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3458'. [ 461.107665][ T5973] smc: removing ib device syz2 [ 461.342026][ T5973] smbdirect: ib_dev[syz2] removed [ 461.535615][T21321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3460'. [ 461.660675][T21324] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3460'. [ 461.930098][T21325] veth3: entered allmulticast mode [ 461.977704][T21325] bond0: (slave veth3): Enslaving as an active interface with an up link [ 462.320425][T21343] syzkaller1: entered promiscuous mode [ 462.322222][T21343] syzkaller1: entered allmulticast mode [ 462.452975][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 462.643528][T21363] netlink: 'syz.1.3468': attribute type 1 has an invalid length. [ 462.643551][T21363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3468'. [ 462.653942][T21363] FAULT_INJECTION: forcing a failure. [ 462.653942][T21363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.653971][T21363] CPU: 0 UID: 0 PID: 21363 Comm: syz.1.3468 Not tainted syzkaller #0 PREEMPT(full) [ 462.653992][T21363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 462.654005][T21363] Call Trace: [ 462.654013][T21363] [ 462.654021][T21363] dump_stack_lvl+0xe8/0x150 [ 462.654058][T21363] should_fail_ex+0x3eb/0x540 [ 462.654086][T21363] _copy_from_user+0x2d/0xb0 [ 462.654112][T21363] ___sys_sendmsg+0x1c6/0x360 [ 462.654132][T21363] ? __lock_acquire+0x747/0x2de0 [ 462.654171][T21363] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.654230][T21363] ? __fget_files+0x3a2/0x420 [ 462.654253][T21363] ? __fget_files+0x2a/0x420 [ 462.654284][T21363] __x64_sys_sendmsg+0x1b1/0x290 [ 462.654309][T21363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.654353][T21363] do_syscall_64+0x166/0x520 [ 462.654374][T21363] ? trace_irq_disable+0x3b/0x140 [ 462.654401][T21363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.654420][T21363] ? clear_bhb_loop+0x70/0xc0 [ 462.654445][T21363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.654464][T21363] RIP: 0033:0x7f3163d9f559 [ 462.654482][T21363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.654499][T21363] RSP: 002b:00007f3164c1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.654520][T21363] RAX: ffffffffffffffda RBX: 00007f3164025fa0 RCX: 00007f3163d9f559 [ 462.654535][T21363] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000a [ 462.654548][T21363] RBP: 00007f3164c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 462.654560][T21363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.654571][T21363] R13: 00007f3164026038 R14: 00007f3164025fa0 R15: 00007ffe33ec9ff8 [ 462.654610][T21363] [ 462.947077][T21367] team0: Device vxcan3 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port [ 462.985273][T21376] net_ratelimit: 29 callbacks suppressed [ 462.985303][T21376] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 463.075157][ T6464] bond6: (slave bridge7): failed to get link speed/duplex [ 463.185472][ T5978] bond6: (slave bridge7): failed to get link speed/duplex [ 463.263268][T21387] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3473'. [ 463.293687][ T6466] bond6: (slave bridge7): failed to get link speed/duplex [ 463.329309][T21387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3473'. [ 463.423454][ T5978] bond6: (slave bridge7): failed to get link speed/duplex [ 463.494277][T21393] vlan2: entered allmulticast mode [ 463.494302][T21393] bridge1: entered allmulticast mode [ 463.498531][T21387] bridge1: port 1(erspan0) entered blocking state [ 463.498691][T21387] bridge1: port 1(erspan0) entered disabled state [ 463.499566][T21387] erspan0: entered allmulticast mode [ 463.530677][T21387] erspan0: entered promiscuous mode [ 463.551796][T21387] bridge1: port 1(erspan0) entered blocking state [ 463.551948][T21387] bridge1: port 1(erspan0) entered forwarding state [ 463.569132][T21394] netlink: 'syz.4.3475': attribute type 4 has an invalid length. [ 463.595186][ T5978] bond6: (slave bridge7): failed to get link speed/duplex [ 463.685654][T21401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3477'. [ 463.703222][ T6464] bond6: (slave bridge7): failed to get link speed/duplex [ 463.751138][T21406] netlink: 'syz.4.3479': attribute type 1 has an invalid length. [ 463.837940][T21407] netlink: 'syz.4.3479': attribute type 1 has an invalid length. [ 463.961952][T21414] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 464.003254][ T5978] bond6: (slave bridge7): failed to get link speed/duplex [ 464.114165][ T5978] bond6: (slave bridge7): failed to get link speed/duplex [ 464.224222][ T6464] bond6: (slave bridge7): failed to get link speed/duplex [ 464.439209][T21433] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 464.711880][T21444] syzkaller0: entered promiscuous mode [ 464.711913][T21444] syzkaller0: entered allmulticast mode [ 464.749190][T21438] erspan0: left allmulticast mode [ 464.749216][T21438] erspan0: left promiscuous mode [ 464.749507][T21438] bridge1: port 1(erspan0) entered disabled state [ 464.871109][T21438] : (slave bond_slave_0): Releasing backup interface [ 464.930184][T21438] : (slave bond_slave_1): Releasing backup interface [ 465.008776][T21438] team0: Port device team_slave_0 removed [ 465.104861][T21438] team0: Port device team_slave_1 removed [ 465.105875][T21438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.105899][T21438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.139433][T21438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.139467][T21438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.162993][T21463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3488'. [ 465.163016][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3488'. [ 465.163042][T21463] netlink: 'syz.2.3488': attribute type 14 has an invalid length. [ 465.163056][T21463] netlink: 'syz.2.3488': attribute type 13 has an invalid length. [ 465.315113][T21467] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 465.630133][T21472] syzkaller0: entered promiscuous mode [ 465.630155][T21472] syzkaller0: entered allmulticast mode [ 465.655251][T21469] syzkaller0: entered promiscuous mode [ 465.655274][T21469] syzkaller0: entered allmulticast mode [ 465.676975][T21469] tipc: Started in network mode [ 465.677007][T21469] tipc: Node identity 82bc270ceacf, cluster identity 4711 [ 465.677166][T21469] tipc: Enabled bearer , priority 0 [ 465.678701][T21472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3492'. [ 465.780528][T21489] netlink: 'syz.3.3496': attribute type 3 has an invalid length. [ 465.905357][T21475] tipc: Resetting bearer [ 465.911231][T21468] tipc: Resetting bearer [ 465.948145][T21468] tipc: Disabling bearer [ 465.949964][T21499] __nla_validate_parse: 2 callbacks suppressed [ 465.949981][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3498'. [ 465.950264][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3498'. [ 466.011503][T21505] netlink: 'syz.2.3499': attribute type 1 has an invalid length. [ 466.011524][T21505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3499'. [ 466.034916][T21505] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3499'. [ 466.073362][T21506] pim6reg: entered allmulticast mode [ 466.111199][T21494] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3497'. [ 466.237263][T21494] hsr_slave_0 (unregistering): left promiscuous mode [ 466.344278][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3501'. [ 466.474796][T21526] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 466.480804][T21528] netlink: 'syz.0.3503': attribute type 10 has an invalid length. [ 466.481016][T21529] netlink: 'syz.0.3503': attribute type 10 has an invalid length. [ 466.530656][T21528] team0: Port device dummy0 added [ 466.589554][T21528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3503'. [ 466.589590][T21528] netlink: 'syz.0.3503': attribute type 10 has an invalid length. [ 466.589605][T21528] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3503'. [ 466.589730][T21527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3503'. [ 466.589751][T21527] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3503'. [ 466.741132][T21528] geneve2: entered promiscuous mode [ 466.741157][T21528] geneve2: entered allmulticast mode [ 466.929462][ T5296] veth0_macvtap: left promiscuous mode [ 467.197848][T21562] sctp: [Deprecated]: syz.3.3513 (pid 21562) Use of int in max_burst socket option. [ 467.197848][T21562] Use struct sctp_assoc_value instead [ 467.738483][T21595] bond2: entered promiscuous mode [ 467.744263][T21595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 468.001332][T21613] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 468.082687][ T5978] net_ratelimit: 25 callbacks suppressed [ 468.082708][ T5978] bond6: (slave bridge7): failed to get link speed/duplex [ 468.186460][T21617] FAULT_INJECTION: forcing a failure. [ 468.186460][T21617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.186492][T21617] CPU: 0 UID: 0 PID: 21617 Comm: syz.1.3526 Not tainted syzkaller #0 PREEMPT(full) [ 468.186519][T21617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 468.186532][T21617] Call Trace: [ 468.186540][T21617] [ 468.186556][T21617] dump_stack_lvl+0xe8/0x150 [ 468.186590][T21617] should_fail_ex+0x3eb/0x540 [ 468.186618][T21617] _copy_to_user+0x31/0xb0 [ 468.186643][T21617] bpf_test_finish+0x1cf/0x690 [ 468.186681][T21617] ? __pfx_bpf_test_finish+0x10/0x10 [ 468.186717][T21617] ? _copy_from_user+0x94/0xb0 [ 468.186743][T21617] ? bpf_test_init+0x113/0x150 [ 468.186771][T21617] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 468.186817][T21617] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 468.186851][T21617] ? __fget_files+0x2a/0x420 [ 468.186882][T21617] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 468.186912][T21617] bpf_prog_test_run+0x2c5/0x340 [ 468.186937][T21617] __sys_bpf+0xb1e/0xe00 [ 468.186966][T21617] ? __pfx___sys_bpf+0x10/0x10 [ 468.186998][T21617] ? __fget_files+0x2a/0x420 [ 468.187041][T21617] ? ksys_write+0x242/0x270 [ 468.187069][T21617] ? __pfx_ksys_write+0x10/0x10 [ 468.187101][T21617] __x64_sys_bpf+0xba/0xd0 [ 468.187134][T21617] do_syscall_64+0x166/0x520 [ 468.187157][T21617] ? trace_irq_disable+0x3b/0x140 [ 468.187183][T21617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.187204][T21617] ? clear_bhb_loop+0x70/0xc0 [ 468.187230][T21617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.187250][T21617] RIP: 0033:0x7f3163d9f559 [ 468.187270][T21617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.187288][T21617] RSP: 002b:00007f3164c1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.187309][T21617] RAX: ffffffffffffffda RBX: 00007f3164025fa0 RCX: 00007f3163d9f559 [ 468.187324][T21617] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 468.187337][T21617] RBP: 00007f3164c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 468.187351][T21617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.187362][T21617] R13: 00007f3164026038 R14: 00007f3164025fa0 R15: 00007ffe33ec9ff8 [ 468.187397][T21617] [ 468.336167][ T5978] bond6: (slave bridge7): failed to get link speed/duplex [ 468.460052][ T6466] bond6: (slave bridge7): failed to get link speed/duplex [ 468.574699][ T6476] bond6: (slave bridge7): failed to get link speed/duplex [ 468.609882][T21632] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0800 with DS=0x5 [ 468.685069][ T6466] bond6: (slave bridge7): failed to get link speed/duplex [ 468.794816][ T6466] bond6: (slave bridge7): failed to get link speed/duplex [ 468.871542][T21655] FAULT_INJECTION: forcing a failure. [ 468.871542][T21655] name failslab, interval 1, probability 0, space 0, times 0 [ 468.871573][T21655] CPU: 0 UID: 0 PID: 21655 Comm: syz.4.3533 Not tainted syzkaller #0 PREEMPT(full) [ 468.871595][T21655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 468.871607][T21655] Call Trace: [ 468.871625][T21655] [ 468.871634][T21655] dump_stack_lvl+0xe8/0x150 [ 468.871671][T21655] should_fail_ex+0x3eb/0x540 [ 468.871701][T21655] should_failslab+0xa8/0x100 [ 468.871730][T21655] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 468.871754][T21655] ? rcu_is_watching+0x16/0xb0 [ 468.871785][T21655] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 468.871809][T21655] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 468.871840][T21655] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 468.871869][T21655] krealloc_node_align_noprof+0x19a/0x390 [ 468.871902][T21655] kvrealloc_node_align_noprof+0x7b/0xf0 [ 468.871938][T21655] add_expr+0x2fd/0x6e0 [ 468.871982][T21655] bpf_compute_scev+0x1557/0x7520 [ 468.872031][T21655] ? bpf_init_scev+0x299/0x460 [ 468.872051][T21655] ? rcu_is_watching+0x16/0xb0 [ 468.872080][T21655] ? bpf_init_scev+0x299/0x460 [ 468.872099][T21655] ? trace_kmalloc+0x2a/0xf0 [ 468.872133][T21655] ? bpf_init_scev+0x299/0x460 [ 468.872153][T21655] ? __pfx_bpf_compute_scev+0x10/0x10 [ 468.872179][T21655] ? bpf_init_scev+0x2f7/0x460 [ 468.872203][T21655] bpf_check+0x2ff8/0x34e0 [ 468.872238][T21655] ? ktime_get_with_offset+0x93/0x2d0 [ 468.872266][T21655] ? ktime_get_with_offset+0x93/0x2d0 [ 468.872295][T21655] ? __pfx_bpf_check+0x10/0x10 [ 468.872320][T21655] ? bpf_obj_name_cpy+0x194/0x1e0 [ 468.872351][T21655] bpf_prog_load+0x14da/0x1c60 [ 468.872386][T21655] ? __pfx_bpf_prog_load+0x10/0x10 [ 468.872422][T21655] ? __might_fault+0xaf/0x130 [ 468.872452][T21655] __sys_bpf+0xd86/0xe00 [ 468.872478][T21655] ? __pfx___sys_bpf+0x10/0x10 [ 468.872504][T21655] ? __fget_files+0x2a/0x420 [ 468.872543][T21655] ? ksys_write+0x242/0x270 [ 468.872570][T21655] ? __pfx_ksys_write+0x10/0x10 [ 468.872598][T21655] __x64_sys_bpf+0xba/0xd0 [ 468.872627][T21655] do_syscall_64+0x166/0x520 [ 468.872650][T21655] ? trace_irq_disable+0x3b/0x140 [ 468.872676][T21655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.872697][T21655] ? clear_bhb_loop+0x70/0xc0 [ 468.872721][T21655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.872742][T21655] RIP: 0033:0x7f94ac39f559 [ 468.872761][T21655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.872779][T21655] RSP: 002b:00007f94ad198028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.872802][T21655] RAX: ffffffffffffffda RBX: 00007f94ac625fa0 RCX: 00007f94ac39f559 [ 468.872817][T21655] RDX: 0000000000000022 RSI: 00002000000000c0 RDI: 0000000000000005 [ 468.872831][T21655] RBP: 00007f94ad198090 R08: 0000000000000000 R09: 0000000000000000 [ 468.872844][T21655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.872856][T21655] R13: 00007f94ac626038 R14: 00007f94ac625fa0 R15: 00007fff912480b8 [ 468.872890][T21655] [ 468.913784][ T6464] bond6: (slave bridge7): failed to get link speed/duplex [ 469.023622][ T6476] bond6: (slave bridge7): failed to get link speed/duplex [ 469.164802][ T6476] bond6: (slave bridge7): failed to get link speed/duplex [ 469.319382][T21670] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 469.801154][T21695] xt_connbytes: Forcing CT accounting to be enabled [ 470.349044][T21725] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 470.992722][T21756] __nla_validate_parse: 17 callbacks suppressed [ 470.992742][T21756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3554'. [ 470.992756][T21756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3554'. [ 471.417384][ T6470] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 471.530615][T21784] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 471.632458][T21790] mac80211_hwsim hwsim26 ..ãc¤±: renamed from wlan1 [ 472.160415][T21823] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 472.277993][T21831] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 472.348931][T21829] syzkaller0: entered promiscuous mode [ 472.348953][T21829] syzkaller0: entered allmulticast mode [ 472.388194][T21834] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 472.532229][T21842] validate_nla: 3 callbacks suppressed [ 472.532249][T21842] netlink: 'syz.2.3575': attribute type 1 has an invalid length. [ 472.860315][T21855] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 473.193386][T21867] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 473.196840][T21779] net_ratelimit: 36 callbacks suppressed [ 473.196859][T21779] bond6: (slave bridge7): failed to get link speed/duplex [ 473.304751][ T5970] bond6: (slave bridge7): failed to get link speed/duplex [ 473.414734][T21779] bond6: (slave bridge7): failed to get link speed/duplex [ 473.524630][ T5970] bond6: (slave bridge7): failed to get link speed/duplex [ 473.634415][T21779] bond6: (slave bridge7): failed to get link speed/duplex [ 473.726258][ T6470] IPVS: starting estimator thread 0... [ 473.743730][ T1174] bond6: (slave bridge7): failed to get link speed/duplex [ 473.747512][T21879] IPVS: rr: UDP 127.0.0.1:20000 - no destination available [ 473.755797][T21892] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 473.823297][T21891] IPVS: using max 30 ests per chain, 72000 per kthread [ 473.854394][ T1174] bond6: (slave bridge7): failed to get link speed/duplex [ 473.858368][T21896] netlink: 'syz.4.3590': attribute type 1 has an invalid length. [ 473.858392][T21896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3590'. [ 473.963329][ T6470] bond6: (slave bridge7): failed to get link speed/duplex [ 473.996067][T21900] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3590'. [ 474.075126][ T1174] bond6: (slave bridge7): failed to get link speed/duplex [ 474.403576][T21918] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 475.111347][T21946] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 475.392866][T21958] netlink: 'syz.1.3604': attribute type 1 has an invalid length. [ 475.392891][T21958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3604'. [ 476.794033][T21973] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 477.173490][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 477.221382][T21987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3611'. [ 477.336585][ T5644] Bluetooth: hci3: command 0x0c1a tx timeout [ 477.448498][T21996] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 479.934716][T21983] syzkaller1: entered promiscuous mode [ 479.934741][T21983] syzkaller1: entered allmulticast mode [ 479.943212][ T5970] net_ratelimit: 22 callbacks suppressed [ 479.943231][ T5970] bond6: (slave bridge7): failed to get link speed/duplex [ 480.053344][T21779] bond6: (slave bridge7): failed to get link speed/duplex [ 480.145736][T22006] FAULT_INJECTION: forcing a failure. [ 480.145736][T22006] name failslab, interval 1, probability 0, space 0, times 0 [ 480.145766][T22006] CPU: 0 UID: 0 PID: 22006 Comm: syz.4.3618 Not tainted syzkaller #0 PREEMPT(full) [ 480.145787][T22006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 480.145800][T22006] Call Trace: [ 480.145807][T22006] [ 480.145816][T22006] dump_stack_lvl+0xe8/0x150 [ 480.145851][T22006] should_fail_ex+0x3eb/0x540 [ 480.145879][T22006] should_failslab+0xa8/0x100 [ 480.145909][T22006] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 480.145932][T22006] ? rcu_is_watching+0x16/0xb0 [ 480.145959][T22006] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 480.145981][T22006] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 480.146008][T22006] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 480.146035][T22006] krealloc_node_align_noprof+0x19a/0x390 [ 480.146065][T22006] kvrealloc_node_align_noprof+0x7b/0xf0 [ 480.146092][T22006] add_expr+0x2fd/0x6e0 [ 480.146126][T22006] bpf_compute_scev+0x1557/0x7520 [ 480.146170][T22006] ? bpf_init_scev+0x299/0x460 [ 480.146190][T22006] ? rcu_is_watching+0x16/0xb0 [ 480.146217][T22006] ? bpf_init_scev+0x299/0x460 [ 480.146235][T22006] ? trace_kmalloc+0x2a/0xf0 [ 480.146270][T22006] ? bpf_init_scev+0x299/0x460 [ 480.146290][T22006] ? __pfx_bpf_compute_scev+0x10/0x10 [ 480.146316][T22006] ? bpf_init_scev+0x2f7/0x460 [ 480.146340][T22006] bpf_check+0x2ff8/0x34e0 [ 480.146372][T22006] ? ktime_get_with_offset+0x93/0x2d0 [ 480.146398][T22006] ? ktime_get_with_offset+0x93/0x2d0 [ 480.146454][T22006] ? __pfx_bpf_check+0x10/0x10 [ 480.146478][T22006] ? bpf_obj_name_cpy+0x194/0x1e0 [ 480.146507][T22006] bpf_prog_load+0x14da/0x1c60 [ 480.146541][T22006] ? __pfx_bpf_prog_load+0x10/0x10 [ 480.146579][T22006] ? __might_fault+0xaf/0x130 [ 480.146607][T22006] __sys_bpf+0xd86/0xe00 [ 480.146634][T22006] ? __pfx___sys_bpf+0x10/0x10 [ 480.146662][T22006] ? __fget_files+0x2a/0x420 [ 480.146703][T22006] ? ksys_write+0x242/0x270 [ 480.146731][T22006] ? __pfx_ksys_write+0x10/0x10 [ 480.146762][T22006] __x64_sys_bpf+0xba/0xd0 [ 480.146793][T22006] do_syscall_64+0x166/0x520 [ 480.146815][T22006] ? trace_irq_disable+0x3b/0x140 [ 480.146840][T22006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.146860][T22006] ? clear_bhb_loop+0x70/0xc0 [ 480.146884][T22006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.146903][T22006] RIP: 0033:0x7f94ac39f559 [ 480.146922][T22006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.146940][T22006] RSP: 002b:00007f94ad198028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 480.146962][T22006] RAX: ffffffffffffffda RBX: 00007f94ac625fa0 RCX: 00007f94ac39f559 [ 480.146976][T22006] RDX: 0000000000000022 RSI: 00002000000000c0 RDI: 0000000000000005 [ 480.146990][T22006] RBP: 00007f94ad198090 R08: 0000000000000000 R09: 0000000000000000 [ 480.147003][T22006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 480.147015][T22006] R13: 00007f94ac626038 R14: 00007f94ac625fa0 R15: 00007fff912480b8 [ 480.147048][T22006] [ 480.174727][ T5970] bond6: (slave bridge7): failed to get link speed/duplex [ 480.284523][ T5978] bond6: (slave bridge7): failed to get link speed/duplex [ 480.327869][T22014] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3616'. [ 480.327892][T22014] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3616'. [ 480.603648][T21779] bond6: (slave bridge7): failed to get link speed/duplex [ 480.630565][T22026] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 480.713406][T21779] bond6: (slave bridge7): failed to get link speed/duplex [ 480.745742][T22027] netlink: 'syz.4.3620': attribute type 1 has an invalid length. [ 480.745765][T22027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3620'. [ 480.833317][ T6470] bond6: (slave bridge7): failed to get link speed/duplex [ 480.850760][T22035] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3620'. [ 480.934381][ T6470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.934582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.943151][ T5970] bond6: (slave bridge7): failed to get link speed/duplex [ 481.026264][T22041] Bluetooth: MGMT ver 1.23 [ 481.328784][T22061] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 481.670981][T22075] sctp: [Deprecated]: syz.4.3628 (pid 22075) Use of int in max_burst socket option deprecated. [ 481.670981][T22075] Use struct sctp_assoc_value instead [ 481.790158][T22080] FAULT_INJECTION: forcing a failure. [ 481.790158][T22080] name failslab, interval 1, probability 0, space 0, times 0 [ 481.790179][T22080] CPU: 0 UID: 0 PID: 22080 Comm: syz.1.3630 Not tainted syzkaller #0 PREEMPT(full) [ 481.790191][T22080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 481.790199][T22080] Call Trace: [ 481.790203][T22080] [ 481.790208][T22080] dump_stack_lvl+0xe8/0x150 [ 481.790230][T22080] should_fail_ex+0x3eb/0x540 [ 481.790247][T22080] should_failslab+0xa8/0x100 [ 481.790264][T22080] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 481.790281][T22080] ? rcu_is_watching+0x16/0xb0 [ 481.790298][T22080] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 481.790311][T22080] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 481.790326][T22080] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 481.790341][T22080] krealloc_node_align_noprof+0x19a/0x390 [ 481.790358][T22080] kvrealloc_node_align_noprof+0x7b/0xf0 [ 481.790374][T22080] add_expr+0x2fd/0x6e0 [ 481.790398][T22080] bpf_compute_scev+0x1557/0x7520 [ 481.790423][T22080] ? bpf_init_scev+0x299/0x460 [ 481.790433][T22080] ? rcu_is_watching+0x16/0xb0 [ 481.790448][T22080] ? bpf_init_scev+0x299/0x460 [ 481.790458][T22080] ? trace_kmalloc+0x2a/0xf0 [ 481.790475][T22080] ? bpf_init_scev+0x299/0x460 [ 481.790486][T22080] ? __pfx_bpf_compute_scev+0x10/0x10 [ 481.790499][T22080] ? bpf_init_scev+0x2f7/0x460 [ 481.790512][T22080] bpf_check+0x2ff8/0x34e0 [ 481.790530][T22080] ? ktime_get_with_offset+0x93/0x2d0 [ 481.790546][T22080] ? ktime_get_with_offset+0x93/0x2d0 [ 481.790571][T22080] ? __pfx_bpf_check+0x10/0x10 [ 481.790593][T22080] ? bpf_obj_name_cpy+0x194/0x1e0 [ 481.790619][T22080] bpf_prog_load+0x14da/0x1c60 [ 481.790645][T22080] ? __pfx_bpf_prog_load+0x10/0x10 [ 481.790664][T22080] ? __might_fault+0xaf/0x130 [ 481.790679][T22080] __sys_bpf+0xd86/0xe00 [ 481.790694][T22080] ? __pfx___sys_bpf+0x10/0x10 [ 481.790710][T22080] ? __fget_files+0x2a/0x420 [ 481.790733][T22080] ? ksys_write+0x242/0x270 [ 481.790748][T22080] ? __pfx_ksys_write+0x10/0x10 [ 481.790765][T22080] __x64_sys_bpf+0xba/0xd0 [ 481.790781][T22080] do_syscall_64+0x166/0x520 [ 481.790796][T22080] ? trace_irq_disable+0x3b/0x140 [ 481.790822][T22080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.790842][T22080] ? clear_bhb_loop+0x70/0xc0 [ 481.790867][T22080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.790884][T22080] RIP: 0033:0x7f3163d9f559 [ 481.790896][T22080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.790906][T22080] RSP: 002b:00007f3164c1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 481.790918][T22080] RAX: ffffffffffffffda RBX: 00007f3164025fa0 RCX: 00007f3163d9f559 [ 481.790927][T22080] RDX: 0000000000000022 RSI: 00002000000000c0 RDI: 0000000000000005 [ 481.790934][T22080] RBP: 00007f3164c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 481.790941][T22080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 481.790947][T22080] R13: 00007f3164026038 R14: 00007f3164025fa0 R15: 00007ffe33ec9ff8 [ 481.790965][T22080] [ 482.127129][T22089] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 482.256596][T22101] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3634'. [ 482.283863][T22101] syzkaller1: entered promiscuous mode [ 482.283908][T22101] syzkaller1: entered allmulticast mode [ 482.825271][T22121] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 483.025980][T22133] netlink: 'syz.2.3640': attribute type 1 has an invalid length. [ 483.026006][T22133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3640'. [ 483.093495][T18950] Bluetooth: hci2: command 0x0401 tx timeout [ 483.094927][ T5644] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 483.134096][T22137] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3640'. [ 483.461557][T22151] FAULT_INJECTION: forcing a failure. [ 483.461557][T22151] name failslab, interval 1, probability 0, space 0, times 0 [ 483.461587][T22151] CPU: 0 UID: 0 PID: 22151 Comm: syz.2.3643 Not tainted syzkaller #0 PREEMPT(full) [ 483.461610][T22151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 483.461623][T22151] Call Trace: [ 483.461631][T22151] [ 483.461639][T22151] dump_stack_lvl+0xe8/0x150 [ 483.461676][T22151] should_fail_ex+0x3eb/0x540 [ 483.461704][T22151] should_failslab+0xa8/0x100 [ 483.461735][T22151] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 483.461760][T22151] ? rcu_is_watching+0x16/0xb0 [ 483.461789][T22151] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 483.461812][T22151] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 483.461840][T22151] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 483.461868][T22151] krealloc_node_align_noprof+0x19a/0x390 [ 483.461898][T22151] kvrealloc_node_align_noprof+0x7b/0xf0 [ 483.461926][T22151] add_expr+0x2fd/0x6e0 [ 483.461959][T22151] bpf_compute_scev+0x1557/0x7520 [ 483.462004][T22151] ? bpf_init_scev+0x299/0x460 [ 483.462023][T22151] ? rcu_is_watching+0x16/0xb0 [ 483.462051][T22151] ? bpf_init_scev+0x299/0x460 [ 483.462070][T22151] ? trace_kmalloc+0x2a/0xf0 [ 483.462103][T22151] ? bpf_init_scev+0x299/0x460 [ 483.462123][T22151] ? __pfx_bpf_compute_scev+0x10/0x10 [ 483.462149][T22151] ? bpf_init_scev+0x2f7/0x460 [ 483.462173][T22151] bpf_check+0x2ff8/0x34e0 [ 483.462206][T22151] ? ktime_get_with_offset+0x93/0x2d0 [ 483.462233][T22151] ? ktime_get_with_offset+0x93/0x2d0 [ 483.462260][T22151] ? __pfx_bpf_check+0x10/0x10 [ 483.462287][T22151] ? bpf_obj_name_cpy+0x194/0x1e0 [ 483.462316][T22151] bpf_prog_load+0x14da/0x1c60 [ 483.462350][T22151] ? __pfx_bpf_prog_load+0x10/0x10 [ 483.462386][T22151] ? __might_fault+0xaf/0x130 [ 483.462415][T22151] __sys_bpf+0xd86/0xe00 [ 483.462443][T22151] ? __pfx___sys_bpf+0x10/0x10 [ 483.462475][T22151] ? __fget_files+0x2a/0x420 [ 483.462523][T22151] ? ksys_write+0x242/0x270 [ 483.462549][T22151] ? __pfx_ksys_write+0x10/0x10 [ 483.462578][T22151] __x64_sys_bpf+0xba/0xd0 [ 483.462608][T22151] do_syscall_64+0x166/0x520 [ 483.462630][T22151] ? trace_irq_disable+0x3b/0x140 [ 483.462656][T22151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.462677][T22151] ? clear_bhb_loop+0x70/0xc0 [ 483.462702][T22151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.462723][T22151] RIP: 0033:0x7fec6a79f559 [ 483.462742][T22151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.462761][T22151] RSP: 002b:00007fec6b617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 483.462782][T22151] RAX: ffffffffffffffda RBX: 00007fec6aa25fa0 RCX: 00007fec6a79f559 [ 483.462798][T22151] RDX: 0000000000000022 RSI: 00002000000000c0 RDI: 0000000000000005 [ 483.462811][T22151] RBP: 00007fec6b617090 R08: 0000000000000000 R09: 0000000000000000 [ 483.462824][T22151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.462837][T22151] R13: 00007fec6aa26038 R14: 00007fec6aa25fa0 R15: 00007fff7aaabaf8 [ 483.462871][T22151] [ 483.791414][T22156] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 483.846156][T22159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3646'. [ 483.907270][T22161] v: renamed from vlan1 (while UP) [ 483.975075][T22169] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 484.373573][T22183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3653'. [ 484.413617][T22188] FAULT_INJECTION: forcing a failure. [ 484.413617][T22188] name failslab, interval 1, probability 0, space 0, times 0 [ 484.413649][T22188] CPU: 1 UID: 0 PID: 22188 Comm: syz.0.3655 Not tainted syzkaller #0 PREEMPT(full) [ 484.413673][T22188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 484.413685][T22188] Call Trace: [ 484.413693][T22188] [ 484.413702][T22188] dump_stack_lvl+0xe8/0x150 [ 484.413739][T22188] should_fail_ex+0x3eb/0x540 [ 484.413768][T22188] should_failslab+0xa8/0x100 [ 484.413800][T22188] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 484.413825][T22188] ? rcu_is_watching+0x16/0xb0 [ 484.413856][T22188] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 484.413880][T22188] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 484.413909][T22188] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 484.413937][T22188] krealloc_node_align_noprof+0x19a/0x390 [ 484.413970][T22188] kvrealloc_node_align_noprof+0x7b/0xf0 [ 484.414001][T22188] add_expr+0x2fd/0x6e0 [ 484.414036][T22188] bpf_compute_scev+0x1557/0x7520 [ 484.414083][T22188] ? bpf_init_scev+0x299/0x460 [ 484.414103][T22188] ? rcu_is_watching+0x16/0xb0 [ 484.414130][T22188] ? bpf_init_scev+0x299/0x460 [ 484.414146][T22188] ? trace_kmalloc+0x2a/0xf0 [ 484.414177][T22188] ? bpf_init_scev+0x299/0x460 [ 484.414197][T22188] ? __pfx_bpf_compute_scev+0x10/0x10 [ 484.414223][T22188] ? bpf_init_scev+0x2f7/0x460 [ 484.414247][T22188] bpf_check+0x2ff8/0x34e0 [ 484.414282][T22188] ? ktime_get_with_offset+0x93/0x2d0 [ 484.414311][T22188] ? ktime_get_with_offset+0x93/0x2d0 [ 484.414339][T22188] ? __pfx_bpf_check+0x10/0x10 [ 484.414364][T22188] ? bpf_obj_name_cpy+0x194/0x1e0 [ 484.414392][T22188] bpf_prog_load+0x14da/0x1c60 [ 484.414424][T22188] ? __pfx_bpf_prog_load+0x10/0x10 [ 484.414466][T22188] ? __might_fault+0xaf/0x130 [ 484.414494][T22188] __sys_bpf+0xd86/0xe00 [ 484.414522][T22188] ? __pfx___sys_bpf+0x10/0x10 [ 484.414550][T22188] ? __fget_files+0x2a/0x420 [ 484.414589][T22188] ? ksys_write+0x242/0x270 [ 484.414616][T22188] ? __pfx_ksys_write+0x10/0x10 [ 484.414647][T22188] __x64_sys_bpf+0xba/0xd0 [ 484.414675][T22188] do_syscall_64+0x166/0x520 [ 484.414694][T22188] ? trace_irq_disable+0x3b/0x140 [ 484.414718][T22188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.414739][T22188] ? clear_bhb_loop+0x70/0xc0 [ 484.414761][T22188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.414779][T22188] RIP: 0033:0x7f3b8939f559 [ 484.414798][T22188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.414814][T22188] RSP: 002b:00007f3b8a208028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 484.414833][T22188] RAX: ffffffffffffffda RBX: 00007f3b89625fa0 RCX: 00007f3b8939f559 [ 484.414847][T22188] RDX: 0000000000000022 RSI: 00002000000000c0 RDI: 0000000000000005 [ 484.414860][T22188] RBP: 00007f3b8a208090 R08: 0000000000000000 R09: 0000000000000000 [ 484.414871][T22188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 484.414882][T22188] R13: 00007f3b89626038 R14: 00007f3b89625fa0 R15: 00007ffe8dc1e578 [ 484.414919][T22188] [ 484.774021][T22197] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 484.881537][T22194] block nbd1: server does not support multiple connections per device. [ 484.881922][T22194] block nbd1: shutting down sockets [ 485.087421][T22209] netlink: 'syz.0.3663': attribute type 4 has an invalid length. [ 485.303882][ T7454] net_ratelimit: 32 callbacks suppressed [ 485.303911][ T7454] bond6: (slave bridge7): failed to get link speed/duplex [ 485.372294][T22218] netlink: 'syz.3.3664': attribute type 1 has an invalid length. [ 485.372317][T22218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3664'. [ 485.423664][T22218] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3664'. [ 485.561166][T22224] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3666'. [ 486.152840][ T5978] bond6: (slave bridge7): failed to get link speed/duplex [ 486.266202][ T7454] bond6: (slave bridge7): failed to get link speed/duplex [ 486.373518][ T5978] bond6: (slave bridge7): failed to get link speed/duplex [ 486.374402][T22249] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 486.484822][ T7454] bond6: (slave bridge7): failed to get link speed/duplex [ 486.593442][ T6470] bond6: (slave bridge7): failed to get link speed/duplex [ 486.621641][T22263] netlink: 'syz.4.3677': attribute type 1 has an invalid length. [ 486.621739][T22263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3677'. [ 486.695304][T22268] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3677'. [ 486.705440][ T5970] bond6: (slave bridge7): failed to get link speed/duplex [ 486.775077][ T6470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.775470][ T6470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.775631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.527449][T22304] netlink: 'syz.2.3686': attribute type 1 has an invalid length. [ 487.527475][T22304] __nla_validate_parse: 2 callbacks suppressed [ 487.527487][T22304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3686'. [ 487.677504][T22307] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3686'. [ 487.744549][T22310] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 487.797943][T22311] Bluetooth: ISO socket layer initialized [ 488.211954][T22329] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 488.242047][T22333] tipc: Started in network mode [ 488.242067][T22333] tipc: Node identity , cluster identity 4711 [ 488.242082][T22333] tipc: Failed to obtain node identity [ 488.242106][T22333] tipc: Enabling of bearer rejected, failed to enable media [ 488.296241][T22333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'. [ 488.296280][T22333] netlink: 'syz.4.3692': attribute type 10 has an invalid length. [ 488.296296][T22333] netlink: 'syz.4.3692': attribute type 5 has an invalid length. [ 488.296309][T22333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3692'. [ 488.358116][T22333] geneve2: entered promiscuous mode [ 488.358140][T22333] geneve2: entered allmulticast mode [ 488.383688][T21779] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 43118 - 0 [ 488.393481][ T5970] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 43118 - 0 [ 488.393557][ T5970] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 43118 - 0 [ 488.393591][ T5970] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 43118 - 0 [ 488.722180][T22343] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3696'. [ 488.722205][T22343] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3696'. [ 488.791918][T22343] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3696'. [ 488.791944][T22343] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3696'. [ 489.802457][T22387] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 489.817088][T22389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3699'. [ 489.817110][T22389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3699'. [ 489.850013][T22392] netlink: 'syz.4.3703': attribute type 1 has an invalid length. [ 489.961345][T22404] netlink: 'syz.3.3704': attribute type 1 has an invalid length. [ 492.534688][T21779] net_ratelimit: 31 callbacks suppressed [ 492.534709][T21779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.535461][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.535648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.111768][T22429] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 493.353180][ T7454] bond6: (slave bridge7): failed to get link speed/duplex [ 493.462656][ T7454] bond6: (slave bridge7): failed to get link speed/duplex [ 493.551269][T22440] __nla_validate_parse: 3 callbacks suppressed [ 493.551289][T22440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3710'. [ 493.576829][ T5970] bond6: (slave bridge7): failed to get link speed/duplex [ 493.651984][T22457] x_tables: duplicate underflow at hook 3 [ 493.685772][ T1174] bond6: (slave bridge7): failed to get link speed/duplex [ 493.833544][ T1174] bond6: (slave bridge7): failed to get link speed/duplex [ 493.884406][T22463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.967658][ T7454] bond6: (slave bridge7): failed to get link speed/duplex [ 494.142778][T21779] bond6: (slave bridge7): failed to get link speed/duplex [ 494.220201][T22477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3721'. [ 494.221164][T22477] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3721'. [ 494.356237][T22483] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3723'. [ 494.356263][T22483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3723'. [ 494.356279][T22483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3723'. [ 494.392039][T22483] netlink: 'syz.0.3723': attribute type 1 has an invalid length. [ 494.455939][T22488] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3724'. [ 494.491169][T22483] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.609483][T22494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 494.701144][T22490] bond3: (slave veth3): Enslaving as an active interface with a down link [ 494.760210][T22494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3722'. [ 494.760235][T22494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3722'. [ 494.795613][T22513] netlink: 'syz.2.3727': attribute type 1 has an invalid length. [ 494.795637][T22513] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3727'. [ 494.797000][T22497] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 494.801471][T22497] bond3: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 494.927956][T22517] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 495.007933][T22494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.038394][T22494] bond1: (slave bond0): making interface the new active one [ 495.050547][T22494] bond1: (slave bond0): Enslaving as an active interface with an up link [ 495.418640][T22529] netlink: 'syz.3.3731': attribute type 1 has an invalid length. [ 495.998975][T22562] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 496.638253][T22589] netlink: 'syz.1.3746': attribute type 1 has an invalid length. [ 496.688403][T22589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.735322][T22589] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 496.737297][T22589] bond1: entered promiscuous mode [ 496.737320][T22589] bond1: entered allmulticast mode [ 497.532889][T22609] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 497.543933][T22609] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 497.616851][T21779] net_ratelimit: 23 callbacks suppressed [ 497.616873][T21779] bond6: (slave bridge7): failed to get link speed/duplex [ 497.642017][T22639] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 497.744223][ T7454] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.744276][ T7454] bond6: (slave bridge7): failed to get link speed/duplex [ 497.744321][ T7454] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.744356][ T7454] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.744390][ T7454] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.852673][ T7454] bond6: (slave bridge7): failed to get link speed/duplex [ 497.962937][T21779] bond6: (slave bridge7): failed to get link speed/duplex [ 498.051463][T22656] syzkaller0: entered promiscuous mode [ 498.051488][T22656] syzkaller0: entered allmulticast mode [ 498.093085][ T7454] bond6: (slave bridge7): failed to get link speed/duplex [ 498.271336][T22665] netlink: 'syz.0.3759': attribute type 1 has an invalid length. [ 498.294613][T21779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.294808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.295292][T21779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.599711][T22679] __nla_validate_parse: 13 callbacks suppressed [ 498.599736][T22679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3761'. [ 498.607079][ T5644] Bluetooth: hci3: link tx timeout [ 498.607099][ T5644] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.610986][T18950] Bluetooth: hci3: link tx timeout [ 498.611004][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.611086][T18950] Bluetooth: hci3: link tx timeout [ 498.611098][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.611122][T18950] Bluetooth: hci3: link tx timeout [ 498.611132][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.611220][T18950] Bluetooth: hci3: link tx timeout [ 498.611231][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.611289][T18950] Bluetooth: hci3: link tx timeout [ 498.611300][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.611323][T18950] Bluetooth: hci3: link tx timeout [ 498.611334][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.611407][T18950] Bluetooth: hci3: link tx timeout [ 498.611418][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.611441][T18950] Bluetooth: hci3: link tx timeout [ 498.611452][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.611474][T18950] Bluetooth: hci3: link tx timeout [ 498.611484][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.612790][T18950] Bluetooth: hci3: link tx timeout [ 498.612804][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.613079][T18950] Bluetooth: hci3: link tx timeout [ 498.613090][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.613187][T18950] Bluetooth: hci3: link tx timeout [ 498.613197][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.613289][T18950] Bluetooth: hci3: link tx timeout [ 498.613299][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.613389][T18950] Bluetooth: hci3: link tx timeout [ 498.613399][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.613490][T18950] Bluetooth: hci3: link tx timeout [ 498.613500][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.613597][T18950] Bluetooth: hci3: link tx timeout [ 498.613608][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.613698][T18950] Bluetooth: hci3: link tx timeout [ 498.613708][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.613798][T18950] Bluetooth: hci3: link tx timeout [ 498.613809][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.613899][T18950] Bluetooth: hci3: link tx timeout [ 498.613909][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.614015][T18950] Bluetooth: hci3: link tx timeout [ 498.614026][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.614116][T18950] Bluetooth: hci3: link tx timeout [ 498.614127][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.614216][T18950] Bluetooth: hci3: link tx timeout [ 498.614227][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.614316][T18950] Bluetooth: hci3: link tx timeout [ 498.614326][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.614414][T18950] Bluetooth: hci3: link tx timeout [ 498.614425][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.614541][T18950] Bluetooth: hci3: link tx timeout [ 498.614559][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.614655][T18950] Bluetooth: hci3: link tx timeout [ 498.614665][T18950] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 498.841341][T22682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3760'. [ 499.058844][T22684] netlink: 'syz.2.3760': attribute type 1 has an invalid length. [ 499.063113][ T1174] bond6: (slave bridge7): failed to get link speed/duplex [ 499.177290][T21779] bond6: (slave bridge7): failed to get link speed/duplex [ 499.428421][T22705] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 499.620039][T22719] netlink: 'syz.2.3771': attribute type 1 has an invalid length. [ 499.620064][T22719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3771'. [ 499.649855][T22719] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3771'. [ 499.662894][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3772'. [ 499.663220][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3772'. [ 499.663500][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3772'. [ 499.663767][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3772'. [ 499.663995][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3772'. [ 499.664225][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3772'. [ 499.898868][T22732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.912473][T22733] netlink: 'syz.3.3774': attribute type 1 has an invalid length. [ 500.209908][ T5970] IPVS: starting estimator thread 0... [ 500.293105][T22752] IPVS: using max 30 ests per chain, 72000 per kthread [ 500.425334][T22761] netlink: 'syz.2.3780': attribute type 1 has an invalid length. [ 500.612807][T18950] Bluetooth: hci3: command 0x0c1a tx timeout [ 500.764969][T22762] bond3: (slave geneve2): making interface the new active one [ 500.765452][T22762] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 500.776374][ T6470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 500.776501][ T6470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 500.776565][ T6470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 500.776600][ T6470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 501.057723][T22790] netlink: 'syz.3.3786': attribute type 1 has an invalid length. [ 501.075188][T22795] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 501.485316][T22813] netlink: 'syz.0.3791': attribute type 1 has an invalid length. [ 501.498068][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.078767][T22830] netlink: 'syz.4.3795': attribute type 1 has an invalid length. [ 502.817440][ T1174] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 502.817466][ T1174] bond2 (unregistering): (slave bridge2): the permanent HWaddr of slave - d6:97:7f:ca:07:6e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 502.817496][ T1174] bond2 (unregistering): (slave bridge3): making interface the new active one [ 502.871018][ T1174] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 502.928495][ T1174] bond6 (unregistering): (slave bridge7): Removing an active aggregator [ 502.929020][ T1174] bond6 (unregistering): (slave bridge7): Releasing backup interface [ 502.977930][ T1174] bond7 (unregistering): (slave bridge9): Releasing backup interface [ 503.012382][ T1174] bond8 (unregistering): (slave bridge12): Releasing backup interface [ 503.028561][ T1174] bond0 (unregistering): Released all slaves [ 503.037158][ T1174] bond1 (unregistering): Released all slaves [ 503.048721][ T1174] bond2 (unregistering): Released all slaves [ 503.060164][ T1174] bond3 (unregistering): Released all slaves [ 503.074570][ T1174] bond4 (unregistering): Released all slaves [ 503.089328][ T1174] bond5 (unregistering): Released all slaves [ 503.102098][ T1174] bond6 (unregistering): Released all slaves [ 503.117622][ T1174] bond7 (unregistering): Released all slaves [ 503.134309][ T1174] bond8 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 503.136679][ T1174] bond8 (unregistering): Released all slaves [ 503.327728][T22846] kthread_run failed with err -4 [ 503.334915][ T1174] tipc: Left network mode [ 503.413281][ T5978] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 503.415228][T22858] sctp: [Deprecated]: syz.0.3800 (pid 22858) Use of int in max_burst socket option. [ 503.415228][T22858] Use struct sctp_assoc_value instead [ 504.120545][T22887] FAULT_INJECTION: forcing a failure. [ 504.120545][T22887] name failslab, interval 1, probability 0, space 0, times 0 [ 504.120578][T22887] CPU: 0 UID: 0 PID: 22887 Comm: syz.2.3809 Not tainted syzkaller #0 PREEMPT(full) [ 504.120618][T22887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 504.120642][T22887] Call Trace: [ 504.120650][T22887] [ 504.120659][T22887] dump_stack_lvl+0xe8/0x150 [ 504.120695][T22887] should_fail_ex+0x3eb/0x540 [ 504.120725][T22887] should_failslab+0xa8/0x100 [ 504.120757][T22887] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 504.120782][T22887] ? rcu_is_watching+0x16/0xb0 [ 504.120815][T22887] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 504.120840][T22887] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 504.120870][T22887] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 504.120899][T22887] krealloc_node_align_noprof+0x19a/0x390 [ 504.120931][T22887] kvrealloc_node_align_noprof+0x7b/0xf0 [ 504.120960][T22887] add_expr+0x2fd/0x6e0 [ 504.120992][T22887] bpf_compute_scev+0x1557/0x7520 [ 504.121039][T22887] ? bpf_init_scev+0x299/0x460 [ 504.121059][T22887] ? rcu_is_watching+0x16/0xb0 [ 504.121088][T22887] ? bpf_init_scev+0x299/0x460 [ 504.121106][T22887] ? trace_kmalloc+0x2a/0xf0 [ 504.121139][T22887] ? bpf_init_scev+0x299/0x460 [ 504.121159][T22887] ? __pfx_bpf_compute_scev+0x10/0x10 [ 504.121186][T22887] ? bpf_init_scev+0x2f7/0x460 [ 504.121209][T22887] bpf_check+0x2ff8/0x34e0 [ 504.121243][T22887] ? ktime_get_with_offset+0x93/0x2d0 [ 504.121271][T22887] ? ktime_get_with_offset+0x93/0x2d0 [ 504.121299][T22887] ? __pfx_bpf_check+0x10/0x10 [ 504.121323][T22887] ? bpf_obj_name_cpy+0x194/0x1e0 [ 504.121354][T22887] bpf_prog_load+0x14da/0x1c60 [ 504.121387][T22887] ? __pfx_bpf_prog_load+0x10/0x10 [ 504.121425][T22887] ? __might_fault+0xaf/0x130 [ 504.121452][T22887] __sys_bpf+0xd86/0xe00 [ 504.121477][T22887] ? __pfx___sys_bpf+0x10/0x10 [ 504.121509][T22887] ? __fget_files+0x2a/0x420 [ 504.121549][T22887] ? ksys_write+0x242/0x270 [ 504.121573][T22887] ? __pfx_ksys_write+0x10/0x10 [ 504.121600][T22887] __x64_sys_bpf+0xba/0xd0 [ 504.121629][T22887] do_syscall_64+0x166/0x520 [ 504.121650][T22887] ? trace_irq_disable+0x3b/0x140 [ 504.121676][T22887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.121718][T22887] ? clear_bhb_loop+0x70/0xc0 [ 504.121742][T22887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.121761][T22887] RIP: 0033:0x7fec6a79f559 [ 504.121780][T22887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.121797][T22887] RSP: 002b:00007fec6b617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 504.121817][T22887] RAX: ffffffffffffffda RBX: 00007fec6aa25fa0 RCX: 00007fec6a79f559 [ 504.121832][T22887] RDX: 0000000000000022 RSI: 00002000000000c0 RDI: 0000000000000005 [ 504.121846][T22887] RBP: 00007fec6b617090 R08: 0000000000000000 R09: 0000000000000000 [ 504.121859][T22887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 504.121872][T22887] R13: 00007fec6aa26038 R14: 00007fec6aa25fa0 R15: 00007fff7aaabaf8 [ 504.121904][T22887] [ 504.523846][T22894] netlink: 'syz.2.3811': attribute type 1 has an invalid length. [ 504.523870][T22894] __nla_validate_parse: 38 callbacks suppressed [ 504.523883][T22894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3811'. [ 504.585238][T22901] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3811'. [ 504.641350][T22903] netlink: 'syz.1.3813': attribute type 4 has an invalid length. [ 505.069796][T22908] rxe_eth0 speed is unknown, defaulting to 1000 [ 505.128480][ T1174] hsr_slave_0: left promiscuous mode [ 505.141138][ T1174] hsr_slave_1: left promiscuous mode [ 505.286279][ T1174] veth0_to_team: left promiscuous mode [ 505.294083][ T1174] batadv_slave_1: left promiscuous mode [ 505.907888][T22946] netlink: 'syz.0.3824': attribute type 1 has an invalid length. [ 506.068877][T22934] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3821'. [ 506.117161][T22958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3824'. [ 506.556115][T22946] 8021q: adding VLAN 0 to HW filter on device bond5 [ 506.615677][T22951] bond5: (slave veth5): Enslaving as an active interface with a down link [ 506.639266][T22955] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 506.639421][T22955] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 506.770969][T22978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3829'. [ 507.079311][ T1174] IPVS: stop unused estimator thread 0... [ 507.934119][T23017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3838'. [ 507.934146][T23017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3838'. [ 507.966662][T23016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3838'. [ 507.966691][T23016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3838'. [ 507.967645][T23016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3838'. [ 508.019640][T22990] infiniband syz2: set down [ 508.019663][T22990] infiniband syz2: added ipvlan1 [ 508.046271][T22990] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 508.046313][T22990] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 508.046351][T22990] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 508.115552][T23021] tipc: Enabling of bearer rejected, failed to enable media [ 508.192172][T22990] RDS/IB: syz2: added [ 508.194607][T22990] smc: adding ib device syz2 with port count 1 [ 508.194632][T22990] smc: ib device syz2 port 1 has no pnetid [ 508.250356][T23026] netlink: 'syz.2.3840': attribute type 11 has an invalid length. [ 508.605673][T23036] bond2: option ad_user_port_key: invalid value (65535) [ 508.605701][T23036] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 508.634938][T23036] bond2 (unregistering): Released all slaves [ 509.015004][T23044] syzkaller0: entered promiscuous mode [ 509.015032][T23044] syzkaller0: entered allmulticast mode [ 509.379480][T23074] sctp: [Deprecated]: syz.3.3850 (pid 23074) Use of int in max_burst socket option deprecated. [ 509.379480][T23074] Use struct sctp_assoc_value instead [ 509.474675][T23076] netlink: 'syz.3.3850': attribute type 8 has an invalid length. [ 509.958943][T23084] netlink: 'syz.2.3854': attribute type 1 has an invalid length. [ 509.958966][T23084] __nla_validate_parse: 3 callbacks suppressed [ 509.958978][T23084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3854'. [ 510.072419][T23088] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3854'. [ 511.844000][T23092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3855'. [ 511.890100][T23092] macvtap1: entered promiscuous mode [ 511.890125][T23092] erspan0: entered promiscuous mode [ 511.890349][T23092] macvtap1: entered allmulticast mode [ 511.890364][T23092] erspan0: entered allmulticast mode [ 511.922089][T23097] xt_hashlimit: size too large, truncated to 1048576 [ 512.025930][T23103] xt_hashlimit: size too large, truncated to 1048576 [ 512.158479][T23103] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 512.390148][T23121] netlink: 'syz.2.3859': attribute type 1 has an invalid length. [ 512.390171][T23121] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3859'. [ 513.722276][T23161] sch_tbf: peakrate 8 is lower than or equals to rate 1025 ! [ 513.812834][ T5644] Bluetooth: hci2: command 0x0401 tx timeout [ 513.959348][T23169] dvmrp0: entered allmulticast mode [ 513.960742][T23169] dvmrp0: left allmulticast mode [ 514.164692][T23177] netlink: 'syz.0.3872': attribute type 6 has an invalid length. [ 514.164721][T23177] IPv6: NLM_F_CREATE should be specified when creating new route [ 514.266622][T23181] netlink: 'syz.3.3874': attribute type 11 has an invalid length. [ 514.397078][T23171] erspan0: left allmulticast mode [ 514.397103][T23171] erspan0: left promiscuous mode [ 514.462961][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.462995][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 514.463046][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.463072][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 514.463104][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.463129][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 514.463161][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.463186][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 514.463219][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.654922][T23189] net_ratelimit: 18 callbacks suppressed [ 514.654944][T23189] openvswitch: netlink: Multiple metadata blocks provided [ 514.729198][T23200] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3878'. [ 515.006207][ T5806] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 515.048092][T23210] bond0: entered promiscuous mode [ 515.048115][T23210] bond_slave_0: entered promiscuous mode [ 515.048408][T23210] bond_slave_1: entered promiscuous mode [ 515.070480][T23210] batadv0: entered promiscuous mode [ 515.116592][T23210] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 515.201466][T23210] bond0: left promiscuous mode [ 515.201493][T23210] bond_slave_0: left promiscuous mode [ 515.201725][T23210] bond_slave_1: left promiscuous mode [ 515.275528][ T7690] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 515.291315][T23210] batadv0: left promiscuous mode [ 515.814716][ T6470] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 515.869891][T23240] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 515.870144][T23240] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 515.870734][T23240] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 515.875432][T23219] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.987504][T23243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3886'. [ 516.000201][T23243] netlink: 'syz.1.3886': attribute type 1 has an invalid length. [ 516.026690][T23243] netlink: 'syz.1.3886': attribute type 1 has an invalid length. [ 516.089245][T23256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3886'. [ 516.089284][T23256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3886'. [ 516.096097][T23257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3887'. [ 516.099216][T23219] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.139620][T23245] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3887'. [ 516.139648][T23245] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3887'. [ 516.140371][T23248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3888'. [ 516.338840][T23219] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.486907][T23219] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.550716][T23280] sctp: [Deprecated]: syz.0.3893 (pid 23280) Use of int in max_burst socket option. [ 516.550716][T23280] Use struct sctp_assoc_value instead [ 516.714116][ T2260] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 516.924170][ T2260] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 516.954481][T23289] syz2: rxe_newlink: already configured on ipvlan1 [ 516.981613][T23293] netlink: 824 bytes leftover after parsing attributes in process `syz.4.3895'. [ 517.274450][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.274498][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.274532][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.274565][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.396119][T23306] dvmrp6: entered allmulticast mode [ 517.429162][T23307] netlink: 'syz.4.3898': attribute type 4 has an invalid length. [ 517.483588][T23317] netlink: 'syz.4.3898': attribute type 4 has an invalid length. [ 517.680093][T23323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3901'. [ 517.749788][T23320] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3902'. [ 518.786545][T23374] syzkaller0: entered promiscuous mode [ 518.786569][T23374] syzkaller0: entered allmulticast mode [ 518.824763][ T5970] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.825341][T23380] netlink: 'syz.0.3914': attribute type 1 has an invalid length. [ 518.825744][ T5970] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.825793][ T5970] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.825828][ T5970] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.020138][T23385] sctp: [Deprecated]: syz.0.3915 (pid 23385) Use of int in max_burst socket option. [ 519.020138][T23385] Use struct sctp_assoc_value instead [ 519.220578][T23392] macsec0: entered promiscuous mode [ 519.250355][T23392] veth1_macvtap: left promiscuous mode [ 519.288834][T23392] macsec0 (unregistering): left promiscuous mode [ 519.513562][T23400] netlink: 'syz.3.3920': attribute type 1 has an invalid length. [ 519.657625][T23400] bond2: entered promiscuous mode [ 519.658034][T23400] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.708590][T23407] ipvlan3: entered allmulticast mode [ 519.708614][T23407] bond2: entered allmulticast mode [ 519.708805][T23407] bond2: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 519.708825][T23407] bond2: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 519.708905][T23407] bond2: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 519.710693][T23407] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 519.807004][T23415] syz2: rxe_newlink: already configured on ipvlan1 [ 519.931215][T23410] team0: Port device dummy0 removed [ 519.949381][T23410] bridge_slave_0: left allmulticast mode [ 519.949405][T23410] bridge_slave_0: left promiscuous mode [ 519.949622][T23410] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.999676][T23410] bridge_slave_1: left allmulticast mode [ 519.999701][T23410] bridge_slave_1: left promiscuous mode [ 519.999936][T23410] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.026964][T23423] netlink: 'syz.2.3923': attribute type 1 has an invalid length. [ 520.075023][T23410] bond0: (slave bond_slave_0): Releasing backup interface [ 520.091664][T23410] bond_slave_0: left allmulticast mode [ 520.091693][T23410] bond_slave_0: left promiscuous mode [ 520.131392][T23431] SET target dimension over the limit! [ 520.138349][T23410] bond0: (slave bond_slave_1): Releasing backup interface [ 520.171023][T23410] bond_slave_1: left allmulticast mode [ 520.171046][T23410] bond_slave_1: left promiscuous mode [ 520.218587][T23410] team0: Port device team_slave_0 removed [ 520.252065][T23410] team0: Port device team_slave_1 removed [ 520.266458][T23410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.266485][T23410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.287463][T23410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.287486][T23410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.301976][T23410] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 520.371897][T23440] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 520.409185][ T5970] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 520.507463][ T12] bond1: (slave macvlan2): link status definitely down, disabling slave [ 520.749322][T23456] netlink: get zone limit has 4 unknown bytes [ 520.776928][T23448] warn_alloc: 1 callbacks suppressed [ 520.776947][T23448] syz.3.3928: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 520.777025][T23448] CPU: 1 UID: 0 PID: 23448 Comm: syz.3.3928 Not tainted syzkaller #0 PREEMPT(full) [ 520.777047][T23448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 520.777060][T23448] Call Trace: [ 520.777069][T23448] [ 520.777078][T23448] dump_stack_lvl+0xe8/0x150 [ 520.777118][T23448] warn_alloc+0x24d/0x270 [ 520.777142][T23448] ? stack_depot_save_flags+0x33/0x810 [ 520.777175][T23448] ? __pfx_warn_alloc+0x10/0x10 [ 520.777198][T23448] ? kasan_save_track+0x4f/0x80 [ 520.777223][T23448] ? __kasan_kmalloc+0x93/0xb0 [ 520.777249][T23448] ? xsk_init_queue+0x8a/0xe0 [ 520.777269][T23448] ? xsk_setsockopt+0x52a/0x960 [ 520.777288][T23448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.777320][T23448] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 520.777378][T23448] ? rcu_is_watching+0x16/0xb0 [ 520.777414][T23448] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 520.777436][T23448] ? __kmalloc_cache_noprof+0x31c/0x600 [ 520.777462][T23448] ? __kmalloc_cache_noprof+0x148/0x600 [ 520.777486][T23448] ? xskq_create+0x56/0x220 [ 520.777512][T23448] xskq_create+0x148/0x220 [ 520.777534][T23448] ? xsk_init_queue+0x8a/0xe0 [ 520.777558][T23448] xsk_init_queue+0x8a/0xe0 [ 520.777581][T23448] xsk_setsockopt+0x52a/0x960 [ 520.777606][T23448] ? __pfx_xsk_setsockopt+0x10/0x10 [ 520.777625][T23448] ? __pfx_aa_sk_perm+0x10/0x10 [ 520.777667][T23448] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 520.777694][T23448] ? __pfx_xsk_setsockopt+0x10/0x10 [ 520.777717][T23448] do_sock_setsockopt+0x17c/0x1b0 [ 520.777743][T23448] __x64_sys_setsockopt+0x13d/0x1b0 [ 520.777771][T23448] do_syscall_64+0x166/0x520 [ 520.777795][T23448] ? trace_irq_disable+0x3b/0x140 [ 520.777823][T23448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.777844][T23448] ? clear_bhb_loop+0x70/0xc0 [ 520.777869][T23448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.777890][T23448] RIP: 0033:0x7f9e8959f559 [ 520.777909][T23448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.777928][T23448] RSP: 002b:00007f9e8a3a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 520.777950][T23448] RAX: ffffffffffffffda RBX: 00007f9e89825fa0 RCX: 00007f9e8959f559 [ 520.777965][T23448] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 520.777977][T23448] RBP: 00007f9e89636b20 R08: 0000000000000004 R09: 0000000000000000 [ 520.777991][T23448] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 520.778005][T23448] R13: 00007f9e89826038 R14: 00007f9e89825fa0 R15: 00007ffc06fda038 [ 520.778040][T23448] [ 520.778049][T23448] Mem-Info: [ 520.778059][T23448] active_anon:9961 inactive_anon:0 isolated_anon:0 [ 520.778059][T23448] active_file:3 inactive_file:43779 isolated_file:0 [ 520.778059][T23448] unevictable:0 dirty:217 writeback:0 [ 520.778059][T23448] slab_reclaimable:11990 slab_unreclaimable:116666 [ 520.778059][T23448] mapped:29612 shmem:665 pagetables:3429 [ 520.778059][T23448] sec_pagetables:0 bounce:0 [ 520.778059][T23448] kernel_misc_reclaimable:0 [ 520.778059][T23448] free:1215915 free_pcp:10400 free_cma:0 [ 520.778116][T23448] Node 0 active_anon:39844kB inactive_anon:0kB active_file:12kB inactive_file:174916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118448kB dirty:868kB writeback:0kB shmem:2660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14940kB pagetables:13572kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 520.778174][T23448] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 520.778229][T23448] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 520.778290][T23448] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 520.778329][T23448] Node 0 DMA32 free:907132kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:39844kB inactive_anon:0kB active_file:12kB inactive_file:174916kB unevictable:0kB writepending:868kB zspages:0kB present:3129332kB managed:2523120kB mlocked:0kB bounce:0kB free_pcp:41596kB local_pcp:18856kB free_cma:0kB [ 520.778401][T23448] lowmem_reserve[]: 0 0 1 1 1 [ 520.824869][T23448] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 520.824935][T23448] lowmem_reserve[]: 0 0 0 0 0 [ 520.824972][T23448] Node 1 Normal free:3941148kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 520.825034][T23448] lowmem_reserve[]: 0 0 0 0 0 [ 520.825069][T23448] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 520.825184][T23448] Node 0 DMA32: 1799*4kB (UM) 994*8kB (UM) 952*16kB (UME) 2698*32kB (UME) 977*64kB (UME) 544*128kB (UME) 239*256kB (UME) 98*512kB (UM) 146*1024kB (U) 14*2048kB (UME) 90*4096kB (UM) = 907052kB [ 520.825343][T23448] Node 0 Normal: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 520.825501][T23448] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 10*16kB (UM) 7*32kB (UM) 10*64kB (UM) 4*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941148kB [ 520.825667][T23448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 520.825686][T23448] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 520.825703][T23448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 520.825720][T23448] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 520.825737][T23448] 44443 total pagecache pages [ 520.825746][T23448] 0 pages in swap cache [ 520.825754][T23448] Free swap = 124996kB [ 520.825762][T23448] Total swap = 124996kB [ 520.825772][T23448] 2097051 pages RAM [ 520.825780][T23448] 0 pages HighMem/MovableOnly [ 520.825788][T23448] 434240 pages reserved [ 520.825797][T23448] 0 pages cma reserved [ 521.148444][T23469] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 521.246724][T23469] __nla_validate_parse: 11 callbacks suppressed [ 521.246744][T23469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3928'. [ 521.248879][T23473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3930'. [ 521.579707][T23479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3935'. [ 521.591173][T23479] netlink: 'syz.2.3935': attribute type 2 has an invalid length. [ 521.659548][T23485] netlink: 'syz.1.3936': attribute type 1 has an invalid length. [ 521.659572][T23485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3936'. [ 521.688385][T23485] netlink: 'syz.1.3936': attribute type 1 has an invalid length. [ 521.688415][T23485] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3936'. [ 521.926598][T23500] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 521.973563][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 522.158246][T23506] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 522.219349][T23491] syzkaller1: entered promiscuous mode [ 522.219374][T23491] syzkaller1: entered allmulticast mode [ 522.236804][T23514] netlink: 'syz.1.3942': attribute type 1 has an invalid length. [ 522.236827][T23514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3942'. [ 522.260038][T23514] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3942'. [ 522.502047][T23524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3946'. [ 524.052713][T23504] Bluetooth: hci1: command 0x0406 tx timeout [ 526.461913][T23688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3947'. [ 526.519774][T23695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3948'. [ 526.536213][T23699] netlink: 'syz.4.3951': attribute type 1 has an invalid length. [ 526.536236][T23699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3951'. [ 526.618720][T23699] netlink: 'syz.4.3951': attribute type 1 has an invalid length. [ 526.618753][T23699] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3951'. [ 526.744643][T23710] macsec1: entered promiscuous mode [ 526.900395][T23715] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 527.025961][T23721] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 527.138647][T23730] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 527.376821][T23744] netlink: 'syz.0.3961': attribute type 1 has an invalid length. [ 527.376845][T23744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3961'. [ 527.401909][T23744] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3961'. [ 527.476472][T23749] netlink: 'syz.3.3963': attribute type 1 has an invalid length. [ 527.476494][T23749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'. [ 527.485675][T23749] netlink: 'syz.3.3963': attribute type 11 has an invalid length. [ 528.065999][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3970'. [ 528.130323][T23783] 8021q: adding VLAN 0 to HW filter on device bond4 [ 528.244960][T23784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3971'. [ 528.464652][T23801] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3973'. [ 528.825207][T23819] netlink: 'syz.2.3977': attribute type 12 has an invalid length. [ 529.561086][T23839] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 529.868949][T23849] netlink: 'syz.1.3986': attribute type 1 has an invalid length. [ 529.937605][T23856] sit0: entered promiscuous mode [ 529.961486][T23856] netlink: 'syz.0.3987': attribute type 1 has an invalid length. [ 530.140180][T23867] gre1: entered promiscuous mode [ 530.243178][T23872] syz2: rxe_newlink: already configured on ipvlan1 [ 530.276702][ T30] audit: type=1800 audit(1793344123.466:19): pid=23881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3992" name="memory.events" dev="tmpfs" ino=642 res=0 errno=-22 [ 530.277699][ T30] audit: type=1804 audit(1793344123.466:20): pid=23881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3992" name="/newroot/123/memory.events" dev="tmpfs" ino=642 res=1 errno=0 [ 530.324683][T23881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.633284][T23881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.056265][T23902] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 531.423553][T23934] netlink: 'syz.3.4001': attribute type 1 has an invalid length. [ 532.521939][T23972] __nla_validate_parse: 12 callbacks suppressed [ 532.521963][T23972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4002'. [ 532.591904][T23972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4002'. [ 532.591931][T23972] netlink: 'syz.4.4002': attribute type 2 has an invalid length. [ 532.591945][T23972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4002'. [ 532.877068][T23984] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 533.119472][T23991] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 533.489796][T24024] netlink: 'syz.2.4013': attribute type 1 has an invalid length. [ 533.489821][T24024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4013'. [ 533.546427][T24035] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4013'. [ 533.868417][T24056] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 533.935055][T24071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4015'. [ 533.936069][T24072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4015'. [ 533.936643][T24072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4015'. [ 534.038291][T24081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.498156][T24007] workqueue: Failed to create a rescuer kthread for wq "nfc19_nci_cmd_wq": -EINTR [ 534.781458][T24113] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 534.826548][T24094] team0 (unregistering): Port device team_slave_0 removed [ 534.881724][T24094] team0 (unregistering): Port device team_slave_1 removed [ 534.982089][T24123] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 535.399147][T24120] rxe_eth0 speed is unknown, defaulting to 1000 [ 535.413637][ T7454] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 535.432975][T24131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4022'. [ 535.509009][T24135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4022'. [ 535.781445][T24147] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 535.884602][T24153] bridge0: port 3(syz_tun) entered blocking state [ 535.884860][T24153] bridge0: port 3(syz_tun) entered disabled state [ 535.885184][T24153] syz_tun: entered allmulticast mode [ 535.926057][T24153] syz_tun: left allmulticast mode [ 536.020679][T24153] sctp: [Deprecated]: syz.3.4030 (pid 24153) Use of int in max_burst socket option. [ 536.020679][T24153] Use struct sctp_assoc_value instead [ 536.347831][T24164] sit0: entered promiscuous mode [ 536.382027][T24167] netlink: 'syz.3.4034': attribute type 1 has an invalid length. [ 536.650970][T24177] netlink: 'syz.0.4037': attribute type 1 has an invalid length. [ 536.744448][T24177] bond6: entered promiscuous mode [ 536.744862][T24177] 8021q: adding VLAN 0 to HW filter on device bond6 [ 536.812275][T24184] 8021q: adding VLAN 0 to HW filter on device bond6 [ 536.812887][T24184] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 536.812910][T24184] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 536.868354][T24184] bond6: (slave gre1): making interface the new active one [ 536.868379][T24184] gre1: entered promiscuous mode [ 536.886627][T24184] bond6: (slave gre1): Enslaving as an active interface with an up link [ 536.927465][T24177] bond6 (unregistering): (slave gre1): Releasing backup interface [ 536.927496][T24177] gre1: left promiscuous mode [ 536.958548][T24177] bond6 (unregistering): Released all slaves [ 536.965583][T24194] netlink: 'syz.1.4040': attribute type 1 has an invalid length. [ 537.146233][T24191] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (32769) ! [ 537.275355][T24196] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 537.618298][T24215] __nla_validate_parse: 8 callbacks suppressed [ 537.618316][T24215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4043'. [ 537.797706][T24221] 0ªX¹¦Dö»: left allmulticast mode [ 537.819642][T24221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4048'. [ 537.977097][T24233] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4051'. [ 537.995232][T24233] ip_tables: iptables: counters copy to user failed while replacing table [ 538.067531][T24238] netlink: 'syz.3.4052': attribute type 1 has an invalid length. [ 538.067554][T24238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4052'. [ 538.070101][T24238] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4052'. [ 538.181185][T24242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4053'. [ 538.242317][T24242] bond5: entered promiscuous mode [ 538.242338][T24242] bond5: entered allmulticast mode [ 538.294246][T24251] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 538.455275][T24247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4054'. [ 538.685511][T24269] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 538.686107][T24269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4060'. [ 538.691698][T24268] syzkaller0: entered promiscuous mode [ 538.691719][T24268] syzkaller0: entered allmulticast mode [ 538.742413][T24268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4059'. [ 539.240818][T24289] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 539.740865][T24315] netlink: 'syz.0.4073': attribute type 1 has an invalid length. [ 539.740889][T24315] netlink: 'syz.0.4073': attribute type 2 has an invalid length. [ 540.150436][T24332] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 540.771734][ T5296] veth0_vlan: left promiscuous mode [ 540.875663][ T5784] veth0_vlan: entered promiscuous mode [ 541.780703][T24378] sctp: [Deprecated]: syz.2.4086 (pid 24378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 541.780703][T24378] Use struct sctp_sack_info instead [ 541.850538][T24389] sctp: [Deprecated]: syz.2.4086 (pid 24389) Use of int in max_burst socket option. [ 541.850538][T24389] Use struct sctp_assoc_value instead [ 541.857854][T24395] syz2: rxe_newlink: already configured on ipvlan1 [ 542.063470][T24399] syzkaller1: entered promiscuous mode [ 542.063493][T24399] syzkaller1: entered allmulticast mode [ 542.452938][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 542.577980][T24427] syz2: rxe_newlink: already configured on ipvlan1 [ 542.698721][T24432] tipc: Trying to set illegal importance in message [ 542.698745][T24432] tipc: Trying to set illegal importance in message [ 542.698759][T24432] tipc: Trying to set illegal importance in message [ 542.698772][T24432] tipc: Trying to set illegal importance in message [ 542.698786][T24432] tipc: Trying to set illegal importance in message [ 542.698799][T24432] tipc: Trying to set illegal importance in message [ 542.698813][T24432] tipc: Trying to set illegal importance in message [ 542.698826][T24432] tipc: Trying to set illegal importance in message [ 542.698840][T24432] tipc: Trying to set illegal importance in message [ 542.698898][T24432] tipc: Trying to set illegal importance in message [ 542.698913][T24432] tipc: Trying to set illegal importance in message [ 542.698926][T24432] tipc: Trying to set illegal importance in message [ 542.698939][T24432] tipc: Trying to set illegal importance in message [ 542.698954][T24432] tipc: Trying to set illegal importance in message [ 542.698968][T24432] tipc: Trying to set illegal importance in message [ 542.698981][T24432] tipc: Trying to set illegal importance in message [ 542.698995][T24432] tipc: Trying to set illegal importance in message [ 542.699009][T24432] tipc: Trying to set illegal importance in message [ 542.699023][T24432] tipc: Trying to set illegal importance in message [ 542.699037][T24432] tipc: Trying to set illegal importance in message [ 542.699051][T24432] tipc: Trying to set illegal importance in message [ 542.699064][T24432] tipc: Trying to set illegal importance in message [ 542.699078][T24432] tipc: Trying to set illegal importance in message [ 542.699091][T24432] tipc: Trying to set illegal importance in message [ 542.699105][T24432] tipc: Trying to set illegal importance in message [ 542.699118][T24432] tipc: Trying to set illegal importance in message [ 542.699132][T24432] tipc: Trying to set illegal importance in message [ 542.699144][T24432] tipc: Trying to set illegal importance in message [ 542.699157][T24432] tipc: Trying to set illegal importance in message [ 542.699171][T24432] tipc: Trying to set illegal importance in message [ 542.699193][T24432] tipc: Trying to set illegal importance in message [ 542.699205][T24432] tipc: Trying to set illegal importance in message [ 542.699218][T24432] tipc: Trying to set illegal importance in message [ 542.785604][T24435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4105'. [ 543.587497][T24351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.287071][T24508] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 546.339680][T24438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.430936][T24515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4114'. [ 546.711434][T24526] x_tables: duplicate underflow at hook 2 [ 546.906723][T24532] IPVS: length: 24 != 51905382744 [ 547.455569][T24563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4124'. [ 547.631477][T24572] netlink: 'syz.2.4128': attribute type 12 has an invalid length. [ 547.631502][T24572] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4128'. [ 547.809873][T24575] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 548.105446][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4136'. [ 548.130228][T24595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4135'. [ 548.245272][T24603] bond3: option lacp_active: invalid value (5) [ 548.269507][T24603] bond3 (unregistering): Released all slaves [ 548.470134][T24613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4138'. [ 548.537183][T24626] ip_tables: iptables: counters copy to user failed while replacing table [ 548.631581][T24631] netlink: 'syz.1.4145': attribute type 1 has an invalid length. [ 548.631616][T24631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4145'. [ 548.651833][T24631] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4145'. [ 549.365937][T24675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4155'. [ 549.712722][T24688] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (32769) ! [ 549.830486][T24689] netlink: 'syz.0.4157': attribute type 1 has an invalid length. [ 549.830508][T24689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4157'. [ 549.870188][T24689] netlink: 'syz.0.4157': attribute type 3 has an invalid length. [ 549.870209][T24689] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4157'. [ 550.035894][T24701] netlink: 'syz.0.4161': attribute type 1 has an invalid length. [ 550.183216][T24703] netlink: 'syz.2.4163': attribute type 30 has an invalid length. [ 550.209121][ T6470] IPVS: starting estimator thread 0... [ 550.234344][T24714] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 550.293379][T24717] IPVS: using max 25 ests per chain, 60000 per kthread [ 550.875526][T24744] netlink: 'syz.4.4170': attribute type 5 has an invalid length. [ 550.927863][T24745] netlink: 'syz.4.4170': attribute type 5 has an invalid length. [ 551.347331][T24757] netlink: 'syz.0.4171': attribute type 1 has an invalid length. [ 551.347356][T24757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4171'. [ 551.374813][T24757] netlink: 'syz.0.4171': attribute type 3 has an invalid length. [ 551.374849][T24757] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4171'. [ 551.839989][T24779] lo: entered allmulticast mode [ 551.966848][T24789] sit0: left promiscuous mode [ 552.742832][T24777] lo: left allmulticast mode [ 552.752077][T24820] Cannot find add_set index 34 as target [ 552.886629][T24825] validate_nla: 1 callbacks suppressed [ 552.886649][T24825] netlink: 'syz.2.4183': attribute type 1 has an invalid length. [ 553.045893][T24802] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 553.045919][T24802] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 553.084705][T24802] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 553.084730][T24802] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 553.228369][T24841] __nla_validate_parse: 4 callbacks suppressed [ 553.228391][T24841] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4188'. [ 553.282068][T24802] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 553.282103][T24802] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 553.297240][T24842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4189'. [ 553.511102][T24852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.529131][T24852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.542413][T24852] bond0 (unregistering): (slave team0): Releasing backup interface [ 553.561437][T24852] bond0 (unregistering): Released all slaves [ 553.613406][T11380] bridge0: entered promiscuous mode [ 554.102349][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102387][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102414][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102439][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102465][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102614][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102640][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102665][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102691][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102716][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102741][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102765][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102790][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102815][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102839][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102865][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102890][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102915][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102940][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102965][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.102989][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103014][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103039][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103064][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103089][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103114][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103139][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103164][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103187][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103212][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103237][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103261][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103286][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103310][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103335][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103359][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103384][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103408][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103433][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103457][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103490][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103515][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103540][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103565][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103589][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103614][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103638][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103663][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103687][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103711][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103735][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103760][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103784][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103808][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.103833][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.233911][T24900] sctp: [Deprecated]: syz.1.4203 (pid 24900) Use of int in max_burst socket option. [ 554.233911][T24900] Use struct sctp_assoc_value instead [ 554.297923][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.297977][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.298003][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.298027][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.298051][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.298074][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.298098][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.298121][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.298145][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.298170][T24883] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 554.403924][T24894] netlink: 28796 bytes leftover after parsing attributes in process `syz.0.4200'. [ 554.837581][T24911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4206'. [ 557.136023][T24910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4206'. [ 557.237965][T24917] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4207'. [ 557.237989][T24917] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4207'. [ 557.238006][T24917] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4207'. [ 557.238021][T24917] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4207'. [ 557.240244][T24917] nbd1: detected capacity change from 0 to 63 [ 557.255750][ T5644] block nbd1: Receive control failed (result -32) [ 557.260453][ T5986] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.260486][ T5986] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.309784][ T2001] block nbd1: Dead connection, failed to find a fallback [ 557.309815][ T2001] block nbd1: shutting down sockets [ 557.309915][ T2001] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 557.310014][ T2001] Buffer I/O error on dev nbd1, logical block 0, async page read [ 557.311196][ T2001] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 557.311225][ T2001] Buffer I/O error on dev nbd1, logical block 1, async page read [ 557.312452][ T2001] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 557.313187][ T2001] Buffer I/O error on dev nbd1, logical block 2, async page read [ 557.314226][ T2001] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 557.314253][ T2001] Buffer I/O error on dev nbd1, logical block 3, async page read [ 557.314660][ T2001] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 557.314687][ T2001] Buffer I/O error on dev nbd1, logical block 0, async page read [ 557.315526][ T2001] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 557.315551][ T2001] Buffer I/O error on dev nbd1, logical block 1, async page read [ 557.326393][ T2001] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 557.326425][ T2001] Buffer I/O error on dev nbd1, logical block 2, async page read [ 557.326442][ T2001] Buffer I/O error on dev nbd1, logical block 3, async page read [ 557.327977][ T2001] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 557.328005][ T2001] Buffer I/O error on dev nbd1, logical block 0, async page read [ 557.328021][ T2001] Buffer I/O error on dev nbd1, logical block 1, async page read [ 557.328166][ T2001] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 557.328317][ T2001] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 557.330637][T24921] ldm_validate_partition_table(): Disk read failed. [ 557.331181][T24921] Dev nbd1: unable to read RDB block 0 [ 557.336625][T24921] nbd1: unable to read partition table [ 557.466889][T24921] ldm_validate_partition_table(): Disk read failed. [ 557.468269][T24921] Dev nbd1: unable to read RDB block 0 [ 557.478115][T24921] nbd1: unable to read partition table [ 558.007808][T24954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4218'. [ 559.272204][T25003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4230'. [ 559.298132][T25006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4230'. [ 559.641409][T25023] ieee802154 phy1 wpan1: encryption failed: -22 [ 559.717984][T25022] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4233'. [ 559.910584][T25038] [ 559.912949][T25038] ====================================================== [ 559.919988][T25038] WARNING: possible circular locking dependency detected [ 559.927031][T25038] syzkaller #0 Not tainted [ 559.931463][T25038] ------------------------------------------------------ [ 559.938489][T25038] syz.2.4239/25038 is trying to acquire lock: [ 559.944568][T25038] ffff88804c89c770 (&vma_lock->rw_sema){++++}-{4:4}, at: hugetlb_vma_lock_free+0xb7/0x1a0 [ 559.946629][T25044] ip6gretap0: entered promiscuous mode [ 559.948719][T25044] batadv0: entered promiscuous mode [ 559.956231][T25044] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4238'. [ 559.956322][T25044] 0·: renamed from hsr0 (while UP) [ 559.979095][T25038] [ 559.979095][T25038] but task is already holding lock: [ 559.986465][T25038] ffff88805348b688 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: hugetlbfs_file_mmap+0x2de/0x630 [ 559.997109][T25038] [ 559.997109][T25038] which lock already depends on the new lock. [ 559.997109][T25038] [ 560.007507][T25038] [ 560.007507][T25038] the existing dependency chain (in reverse order) is: [ 560.016512][T25038] [ 560.016512][T25038] -> #9 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}: [ 560.025197][T25038] down_write+0x91/0x200 [ 560.029967][T25038] hugetlbfs_file_mmap+0x2de/0x630 [ 560.035594][T25038] mmap_region+0x1d5e/0x2840 [ 560.040704][T25038] do_mmap+0xe0a/0x1300 [ 560.045377][T25038] vm_mmap_pgoff+0x27a/0x520 [ 560.050480][T25038] ksys_mmap_pgoff+0x57d/0x760 [ 560.055768][T25038] do_syscall_64+0x166/0x520 [ 560.060879][T25038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.067287][T25038] [ 560.067287][T25038] -> #8 (&mm->mmap_lock){++++}-{4:4}: [ 560.074837][T25038] __might_fault+0xcb/0x130 [ 560.079955][T25038] _copy_from_user+0x28/0xb0 [ 560.085077][T25038] csum_and_copy_from_iter_full+0x210/0x2000 [ 560.091580][T25038] ip_generic_getfrag+0x149/0x2d0 [ 560.097125][T25038] __ip6_append_data+0x3b26/0x40c0 [ 560.102763][T25038] ip6_append_data+0x108/0x270 [ 560.108049][T25038] rawv6_sendmsg+0x1298/0x18c0 [ 560.113331][T25038] sock_sendmsg_nosec+0x10f/0x190 [ 560.118872][T25038] ____sys_sendmsg+0x54e/0x850 [ 560.124153][T25038] ___sys_sendmsg+0x2a5/0x360 [ 560.129343][T25038] __x64_sys_sendmsg+0x1b1/0x290 [ 560.134792][T25038] do_syscall_64+0x166/0x520 [ 560.139897][T25038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.146308][T25038] [ 560.146308][T25038] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 560.154033][T25038] lock_sock_nested+0x41/0x100 [ 560.159315][T25038] inet_shutdown+0x6a/0x390 [ 560.164333][T25038] nbd_mark_nsock_dead+0x2cb/0x550 [ 560.169960][T25038] sock_shutdown+0x15e/0x260 [ 560.175063][T25038] nbd_clear_sock+0x24/0x170 [ 560.180168][T25038] nbd_config_put+0x477/0x7e0 [ 560.185358][T25038] nbd_genl_connect+0x19b8/0x1cd0 [ 560.190900][T25038] genl_family_rcv_msg_doit+0x233/0x340 [ 560.196968][T25038] genl_rcv_msg+0x614/0x7a0 [ 560.201986][T25038] netlink_rcv_skb+0x226/0x4a0 [ 560.207267][T25038] genl_rcv+0x28/0x40 [ 560.211764][T25038] netlink_unicast+0x8ef/0xa80 [ 560.217080][T25038] netlink_sendmsg+0x7f0/0xb20 [ 560.222362][T25038] sock_sendmsg_nosec+0x14e/0x190 [ 560.227905][T25038] ____sys_sendmsg+0x54e/0x850 [ 560.233184][T25038] ___sys_sendmsg+0x2a5/0x360 [ 560.238373][T25038] __x64_sys_sendmsg+0x1b1/0x290 [ 560.243823][T25038] do_syscall_64+0x166/0x520 [ 560.248925][T25038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.255422][T25038] [ 560.255422][T25038] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 560.263062][T25038] __mutex_lock+0x197/0x15a0 [ 560.268170][T25038] nbd_queue_rq+0x373/0xff0 [ 560.273188][T25038] blk_mq_dispatch_rq_list+0x499/0x1990 [ 560.279253][T25038] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 560.286095][T25038] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 560.292587][T25038] blk_mq_run_work_fn+0x167/0x2f0 [ 560.298146][T25038] process_scheduled_works+0xc3d/0x1630 [ 560.304214][T25038] worker_thread+0xa47/0xfb0 [ 560.309324][T25038] kthread+0x38b/0x480 [ 560.313907][T25038] ret_from_fork+0x514/0xb70 [ 560.319009][T25038] ret_from_fork_asm+0x1a/0x30 [ 560.324291][T25038] [ 560.324291][T25038] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 560.331496][T25038] __mutex_lock+0x197/0x15a0 [ 560.336606][T25038] nbd_queue_rq+0xc1/0xff0 [ 560.341535][T25038] blk_mq_dispatch_rq_list+0x499/0x1990 [ 560.347604][T25038] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 560.354448][T25038] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 560.360939][T25038] blk_mq_run_work_fn+0x167/0x2f0 [ 560.366488][T25038] process_scheduled_works+0xc3d/0x1630 [ 560.372570][T25038] worker_thread+0xa47/0xfb0 [ 560.377710][T25038] kthread+0x38b/0x480 [ 560.382301][T25038] ret_from_fork+0x514/0xb70 [ 560.387415][T25038] ret_from_fork_asm+0x1a/0x30 [ 560.392693][T25038] [ 560.392693][T25038] -> #4 (set->srcu){.+.+}-{0:0}: [ 560.399809][T25038] __synchronize_srcu+0xca/0x2f0 [ 560.405263][T25038] elevator_switch+0x1e8/0x7b0 [ 560.410547][T25038] elevator_change+0x2fa/0x480 [ 560.415835][T25038] elevator_set_default+0x375/0x440 [ 560.421555][T25038] blk_register_queue+0x404/0x4f0 [ 560.427093][T25038] __add_disk+0x6b8/0xdb0 [ 560.431943][T25038] add_disk_fwnode+0x100/0x3a0 [ 560.437219][T25038] nbd_dev_add+0x733/0xb60 [ 560.442211][T25038] nbd_init+0x168/0x1f0 [ 560.446880][T25038] do_one_initcall+0x250/0x870 [ 560.452170][T25038] do_initcall_level+0x10a/0x1a0 [ 560.457623][T25038] do_initcalls+0x59/0xa0 [ 560.462465][T25038] kernel_init_freeable+0x29d/0x3e0 [ 560.468181][T25038] kernel_init+0x22/0x1d0 [ 560.473030][T25038] ret_from_fork+0x514/0xb70 [ 560.478141][T25038] ret_from_fork_asm+0x1a/0x30 [ 560.483418][T25038] [ 560.483418][T25038] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 560.491229][T25038] __mutex_lock+0x197/0x15a0 [ 560.496333][T25038] elevator_change+0x1af/0x480 [ 560.501621][T25038] elevator_set_none+0xb5/0x140 [ 560.506990][T25038] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 560.513338][T25038] nbd_start_device+0x189/0xb30 [ 560.518702][T25038] nbd_genl_connect+0x167d/0x1cd0 [ 560.524246][T25038] genl_family_rcv_msg_doit+0x233/0x340 [ 560.530306][T25038] genl_rcv_msg+0x614/0x7a0 [ 560.535317][T25038] netlink_rcv_skb+0x226/0x4a0 [ 560.540595][T25038] genl_rcv+0x28/0x40 [ 560.545085][T25038] netlink_unicast+0x8ef/0xa80 [ 560.550364][T25038] netlink_sendmsg+0x7f0/0xb20 [ 560.555647][T25038] sock_sendmsg_nosec+0x14e/0x190 [ 560.561187][T25038] ____sys_sendmsg+0x54e/0x850 [ 560.566461][T25038] ___sys_sendmsg+0x2a5/0x360 [ 560.571647][T25038] __x64_sys_sendmsg+0x1b1/0x290 [ 560.577095][T25038] do_syscall_64+0x166/0x520 [ 560.582204][T25038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.588606][T25038] [ 560.588606][T25038] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 560.597201][T25038] blk_alloc_queue+0x544/0x690 [ 560.602484][T25038] __blk_mq_alloc_disk+0x194/0x390 [ 560.608108][T25038] nbd_dev_add+0x494/0xb60 [ 560.613035][T25038] nbd_init+0x168/0x1f0 [ 560.617702][T25038] do_one_initcall+0x250/0x870 [ 560.622977][T25038] do_initcall_level+0x10a/0x1a0 [ 560.628427][T25038] do_initcalls+0x59/0xa0 [ 560.633269][T25038] kernel_init_freeable+0x29d/0x3e0 [ 560.638980][T25038] kernel_init+0x22/0x1d0 [ 560.643829][T25038] ret_from_fork+0x514/0xb70 [ 560.648934][T25038] ret_from_fork_asm+0x1a/0x30 [ 560.654212][T25038] [ 560.654212][T25038] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 560.661416][T25038] fs_reclaim_acquire+0x71/0x100 [ 560.666870][T25038] __kmalloc_cache_noprof+0x61/0x600 [ 560.672669][T25038] allocate_file_region_entries+0x217/0x610 [ 560.679077][T25038] __vma_reservation_common+0x79f/0x950 [ 560.685138][T25038] alloc_hugetlb_folio+0x2a2/0x900 [ 560.690764][T25038] hugetlb_no_page+0xe45/0x1780 [ 560.696134][T25038] hugetlb_fault+0x65f/0x1450 [ 560.701331][T25038] handle_mm_fault+0x24fc/0x3750 [ 560.706792][T25038] __get_user_pages+0x1670/0x2750 [ 560.712341][T25038] populate_vma_page_range+0x311/0x3f0 [ 560.718320][T25038] __mm_populate+0x25f/0x390 [ 560.723426][T25038] vm_mmap_pgoff+0x36e/0x520 [ 560.728536][T25038] ksys_mmap_pgoff+0x57d/0x760 [ 560.733823][T25038] do_syscall_64+0x166/0x520 [ 560.738927][T25038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.745331][T25038] [ 560.745331][T25038] -> #0 (&vma_lock->rw_sema){++++}-{4:4}: [ 560.753229][T25038] __lock_acquire+0x164c/0x2de0 [ 560.758595][T25038] lock_acquire+0x115/0x350 [ 560.763612][T25038] down_write+0x91/0x200 [ 560.768368][T25038] hugetlb_vma_lock_free+0xb7/0x1a0 [ 560.774082][T25038] hugetlb_reserve_pages+0xcdd/0x1160 [ 560.779967][T25038] hugetlbfs_file_mmap+0x475/0x630 [ 560.785598][T25038] mmap_region+0x1d5e/0x2840 [ 560.790708][T25038] do_mmap+0xe0a/0x1300 [ 560.795400][T25038] vm_mmap_pgoff+0x27a/0x520 [ 560.800504][T25038] ksys_mmap_pgoff+0x57d/0x760 [ 560.805786][T25038] do_syscall_64+0x166/0x520 [ 560.810889][T25038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.817291][T25038] [ 560.817291][T25038] other info that might help us debug this: [ 560.817291][T25038] [ 560.827506][T25038] Chain exists of: [ 560.827506][T25038] &vma_lock->rw_sema --> &mm->mmap_lock --> &sb->s_type->i_mutex_key#24 [ 560.827506][T25038] [ 560.841750][T25038] Possible unsafe locking scenario: [ 560.841750][T25038] [ 560.849185][T25038] CPU0 CPU1 [ 560.854538][T25038] ---- ---- [ 560.859891][T25038] lock(&sb->s_type->i_mutex_key#24); [ 560.865348][T25038] lock(&mm->mmap_lock); [ 560.872192][T25038] lock(&sb->s_type->i_mutex_key#24); [ 560.880161][T25038] lock(&vma_lock->rw_sema); [ 560.884830][T25038] [ 560.884830][T25038] *** DEADLOCK *** [ 560.884830][T25038] [ 560.892957][T25038] locks held by syz.2.4239/25038: 2, last CPU#0: [ 560.899268][T25038] #0: ffff8880308bb440 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 560.908661][T25038] #1: ffff88805348b688 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: hugetlbfs_file_mmap+0x2de/0x630 [ 560.919722][T25038] [ 560.919722][T25038] stack backtrace: [ 560.925612][T25038] CPU: 0 UID: 0 PID: 25038 Comm: syz.2.4239 Not tainted syzkaller #0 PREEMPT(full) [ 560.934981][T25038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 560.945042][T25038] Call Trace: [ 560.948326][T25038] [ 560.951253][T25038] dump_stack_lvl+0xe8/0x150 [ 560.955852][T25038] print_circular_bug+0x2e2/0x300 [ 560.960885][T25038] check_noncircular+0x12f/0x150 [ 560.965828][T25038] __lock_acquire+0x164c/0x2de0 [ 560.970682][T25038] ? __lock_acquire+0x747/0x2de0 [ 560.975631][T25038] lock_acquire+0x115/0x350 [ 560.980147][T25038] ? hugetlb_vma_lock_free+0xb7/0x1a0 [ 560.985522][T25038] down_write+0x91/0x200 [ 560.989773][T25038] ? hugetlb_vma_lock_free+0xb7/0x1a0 [ 560.995141][T25038] ? __pfx_down_write+0x10/0x10 [ 560.999991][T25038] ? css_put+0x57/0x290 [ 561.004145][T25038] ? css_put+0x57/0x290 [ 561.008297][T25038] hugetlb_vma_lock_free+0xb7/0x1a0 [ 561.013490][T25038] hugetlb_reserve_pages+0xcdd/0x1160 [ 561.018861][T25038] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 561.024657][T25038] ? down_write+0x166/0x200 [ 561.029159][T25038] ? touch_atime+0xf1/0x670 [ 561.033659][T25038] ? mas_preallocate+0x557/0x840 [ 561.038597][T25038] hugetlbfs_file_mmap+0x475/0x630 [ 561.043712][T25038] ? __pfx_hugetlbfs_file_mmap+0x10/0x10 [ 561.049346][T25038] ? vma_set_pgoff+0x163/0x290 [ 561.054111][T25038] ? vma_set_range+0x136/0x2a0 [ 561.058872][T25038] mmap_region+0x1d5e/0x2840 [ 561.063473][T25038] ? __pfx_mmap_region+0x10/0x10 [ 561.068409][T25038] ? __lock_acquire+0x747/0x2de0 [ 561.073345][T25038] ? __lock_acquire+0x747/0x2de0 [ 561.078285][T25038] ? __lock_acquire+0x747/0x2de0 [ 561.083229][T25038] ? lock_acquire+0x115/0x350 [ 561.087921][T25038] ? lock_acquire+0x115/0x350 [ 561.092627][T25038] ? apparmor_capable+0x126/0x170 [ 561.097650][T25038] ? bpf_lsm_capable+0x9/0x20 [ 561.102324][T25038] ? security_capable+0x7e/0x2c0 [ 561.107285][T25038] ? shmem_mapping+0xd/0x50 [ 561.111794][T25038] ? memfd_check_seals_mmap+0x16f/0x220 [ 561.117345][T25038] do_mmap+0xe0a/0x1300 [ 561.121507][T25038] ? __pfx_do_mmap+0x10/0x10 [ 561.126101][T25038] ? vm_mmap_pgoff+0x1ed/0x520 [ 561.130858][T25038] ? down_write_killable+0x179/0x230 [ 561.136140][T25038] ? __pfx_down_write_killable+0x10/0x10 [ 561.141769][T25038] ? apparmor_mmap_file+0x2e7/0x390 [ 561.146969][T25038] vm_mmap_pgoff+0x27a/0x520 [ 561.151560][T25038] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 561.156674][T25038] ? hugetlb_file_setup+0x42c/0x630 [ 561.161868][T25038] ksys_mmap_pgoff+0x57d/0x760 [ 561.166635][T25038] do_syscall_64+0x166/0x520 [ 561.171221][T25038] ? trace_irq_disable+0x3b/0x140 [ 561.176243][T25038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.182305][T25038] ? clear_bhb_loop+0x70/0xc0 [ 561.186976][T25038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.192866][T25038] RIP: 0033:0x7fec6a79f559 [ 561.197281][T25038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.216880][T25038] RSP: 002b:00007fec6b617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 561.225291][T25038] RAX: ffffffffffffffda RBX: 00007fec6aa25fa0 RCX: 00007fec6a79f559 [ 561.233268][T25038] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 561.241248][T25038] RBP: 00007fec6a836b20 R08: ffffffffffffffff R09: 0000000000000000 [ 561.249217][T25038] R10: 0000000000042073 R11: 0000000000000246 R12: 0000000000000000 [ 561.257199][T25038] R13: 00007fec6aa26038 R14: 00007fec6aa25fa0 R15: 00007fff7aaabaf8 [ 561.265180][T25038] [ 561.292196][T25044] 0·: entered allmulticast mode [ 561.292219][T25044] hsr_slave_0: entered allmulticast mode [ 561.292236][T25044] hsr_slave_1: entered allmulticast mode [ 561.292892][T25044] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 561.384267][T25054] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 562.935582][ T1317] ieee802154 phy1 wpan1: encryption failed: -22