last executing test programs: 3.590223629s ago: executing program 3 (id=2072): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0xb, 0x669f, 0x300, 0x1daf6}, 0xfffffd62) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a6303005901080006040001aaaaaaaa030aac1414bbaaaaaaaaaa00ac1414bb000000"], 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@delqdisc={0x34, 0x25, 0x200, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0x4}, {0x4, 0xd}, {0x0, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_RATE={0x6, 0x5, {0xd, 0x1}}]}, 0x34}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000080)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'osf\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f000000ba80)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a200000000c0a01030000000000000000070000070900020073797a300000000078000000120a030a000000000000000001000004640004800c000240000000000000000308000540000000010c000240000000000000000e0c000240fffffffffffffffe08000340000000050c00024000000000000000090c00024000000000800000000c000140000000000000064f080003400000d751f8000000180a01020000000000000000000000040900010073797a31000000000c00054000000000000000040c00038008000140000000000900010073797a30000000000900020073797a3000000000a80003800800014000000000080002400000e20408000240000000057c0003801400010076657468305f746f5f626174616476001400010076657468315f6d6163767461700000001400010073797a6b616c6c6572300000000000001400010076657468315f6d61637674617000000014000100626f6e645f736c6176655f30000000001400010076657468315f6d616376746170000000080001400000000008000140000000001c000000120a01020000000000000000020000000800034000000001c85900000e0a01080000000000000000010000090900010073797a3100000000080004400000000308000440000000020900010073797a30000000008c590380d02300800c00044000000000000000050422028088000100baa3449b7f8bc77d0b1f7680334272f82c2ff41703d9919162af1d61dd88825ffafe82f3ad4ab8ecfc38fc4103ba050cb8a2be9dbb0b80a750757ce8cf5c61f51fcc78c6396c839d44f709d028a20b39b2067d61f02dbced88e6a044469d772b40eca316e94a1d310e385f2cbcf9cd3c9054da09af4726db1e7ffea66d701142bd8780113f00010023f3840433aac42ddbf01769aba08d88fad6654598b32659106ac9300a35f1e8a0e631101a8890883d4d595215a20234756364cef1c5a250fc360a004600010036d199b12b791273790883325bf5b06f7fd2aec05b4b8806d668b993d5d3417bfb5bcea2ea6b444a91eb4b757a12025194ef858379b3974162ee61a42c3f352b576b00000410010075da92ede7139534c3a705a79e6a17f6f4e0207241575dd5757083fa8b129635549b2fe12def85d7d8543be5e97a862d0bed636dbcc205a76e71f7fadcc77466a5d0c0e6c6c36507842ea6e323ca85d03ff7a8c837551731dfc378efe0408d34c277aab0e090310f2aee888aed6b1f46558d2f6d3e918eab2cf6c7abf6d9a5a3029430baaca7e836540daf99fc716c56b04eb4a9f07d7e1cad5796022b3a788fbce042a461dbecc0895962d758320447d948da4f39c4342c7f825a861afa2420d6d22d97c306eb3532d9107a420540c0106cff279c78fd21f379c271ee745124770b40e234abb679a3d0d03bd5ed6eed2e42e7d4ec8fb411b35ac6044746d06bc7d912c0b7a9efdf2fb68dfecafb6dbf7d6cfd7660dcb43784f45a4e4d281f0360bb46df15f7b974f63376d83a3b89aea2945d0c28ea83f224102e90afd47f48755e89801792b448f487a37cb57f0c0fe630983ef2e639e63bc6a09f0f53bf9cd31889392ae672790e6845d7eadfc280e20c3096ad198c7212e4f39543902abc01610dd6beb30d767a8858bccbc3516bdc6e18cdfea4b1b95ff718e84c03efcd46de0aa132d61ec3634bcfc24318de8e7807fe74b2993b187d83279f68ac0d0ef7216fb56eb8c3da99f0939d44a17a36a4c1e989f7fe29dfb9370dbb3f6fe130d779179fb42572d386391175984884bceda71575d41c4c9cabb4eb58cb5d2bbb4781578ad620041776824b8ba698430776522bd83643ec25b1c867b978dd6ee7c8019e586b114c340a32b4b699d62ef66c194e1cb35772b5d0c5d561447e861a99ed0ad71e2b3b17e1a993a7444616e236d703b5bf4dbe0cb4ebeeab3b29cd82ea781e7f51881afd8d406e3f09274ab37df38bca9087bce8e99262d1e98114171c11ee5d8633f165c74dc9dc10c9bd35a965ceca98c35a7ce8728334843f29f73c9c55df9064ac35e805da3cb3d1d32ec4eea642f64907fe86db3baf03d04ca00623b8df04e4a96507060e140b87f2639b278ead46fc64efd1609c8976e9447ccad47b9531e0357eec69d00a2cabc6927e8c22071d3341202b1c3c3db010d7419c304c7751c0ddd5f50e8b448bcfa5050421d0904f0a4c8499d1096685cbb819d9a3eaeedf21781effc143a9bfb89d7f54c7283bd169323fadcca4a22aeafba601acfb83c769d11686a000ab4fb26bb45d81c1f667d33cef72a7aedbee14b2debb4897ba5faf2dedc241eab9a6a9e94aeee7ee7e5b05bf9ef1e88fbc67292baa6ec4d3a0c14afcb21b606b9d0d732fb6ab791e16480a261675f5de78b18f11339432e5e65d4d0c4f038bee39b4904f0f27d4db47c5ca4be7fc88a4ea90726ea7464d28d02869c21667ccb2268ec5512ead36ba65f89156bb4afa9c51a53543f4c5a9fd4c605472de78291d674dc85521ebe3a17a39e29a947505511d0d1b780c70892d54de3cf6a46bfadf7f558e9f50489ba5ff118cd95a591cadf3f099dd9d2673d63e4912e5e6742d6e4d07ff015cdac22de2ed090132550d7d8219a0e875f86b67dd60433db879bf413debafa6e94d1722cf9f14067cca72f9cc097a6eb336b40b98166beab372bd335474311b2831e721cdfd4bd5deb629fb62961590b14c8d405a90a73ac9d1a69e2892962097c4bde086f83400cc77f1c1af1b938ec9a4b6513c41832207c0099d22bfc871470a97e8a5331b5ac03bf23729628113398845542ccfe0c8d8286bc7ae12db26eb9bd217b958e451aca8ca9e9ca7a3dd6e409b934099e9f71d0914d7ac1a626bed5993739610bbd05a51fc5ea1a776bf92be40c232dee518829a4f4205efe1493dfb16cc249ee53a7d80a6aae250a22fa673007aa9e3baf2e0606731b87be3fc79c4b4201d3bad02b74710b6e5374c7ccb3056585ec22387ed9b2617aa2edf3267021b738510a26469d5b6fdf14ec2f0431a9a8e73907ce9fc8a56b6859cae7f72d406455ba363ef84847b24b81f2c4bf5cc1bd600ef7669d5a0fad3ba1b3494e47975c811c3c2e7e7967649c9138e3c2243c040a8f0c94a876d789d10628648eb4b66acb80f7e7394af6ee58b3771a62d90a151475460081c0225abddd24ccc012077c4af318f7fb9c0b7272fd83d8594b06e73d90454976d0c1467ab0fd75989e85eb1db4bbf006c13e88d893c2c95ff203e7ad0e41d0ad4e63f351232f686e766998888fd2acd150b3e3ad2785d88908b24e7f48d61fca24932cc39a8a2d1dcdc2d66733b39753ddbfcb9d6eebfd8c122c2018071ad8c7ae1647704ae8c6e67afd2d091405db7fcf2ed4425c6a7eba2f12f7051c10746cf63b4365380ed1339dfbf999f0069d74219374aa71e794ca6e5ab458e6d894964b1f3c92bb8208826b8f9fdc40af0a8bfe21d7cec5a03aa8d50e0522955007b61a7d7b33478ba778a396590e0bcf64515f96644a68bd03a7e9f57fec324fa32e552e3c259bd5399d714b16f4f922a3fbf46fe8842f263fe188f61d155576c59505f5fe0bac5f8d5495290f56b0d05210f5fcdc3823e9da1fe3f3a9bf35f6dc7c076b00a4c51ad74a09709e3aeeb3ede46c61d699894452f0e2dbac55868c502f580d2ed4dad9e492463a3de40d9de0da56ce7cf74dc85111277706e005d32577f51b2a9d43959ac31559659123c4208dd773f051e7a6e1f2ca87104af7759df514c35f233060fe4e7b9bd530f37fc84c7760e9786f5af93863959697c5af34a37aa4af0c58b1bf3105b05c8803c6f40917468d8007834ecb97d1057c0e791de44e5fac7abcb8c6baca9c36663cbb9695017a4c901f768fe9124c8d9205da6f2d06bb0ece0550b420e85e4b2a226147eb661769be286094966f3ebb25ec5fcffdfb919b8a3768748778d587294173f53efc6a828f348021a180a9239e534588c8e87fcde26098688ec64ebf3ab72d301772e5b3b42bdf7db0441e850380ff45be06c72fb3ce460475085f26af7e7e77ec3ada702c68b3333f992d67ce295714c19b9d392de4c360ef970294cb9bf5d9f6a67de3ce500cf59cd70d0663d2f4716ef1dac523815015585c630f901d9446eea9087076b918fa06f0ba1b2e170349ecefa43473f29c78b70b4a0cca4b6cf3025346321de8463dc15d25c863a2ec8ea21f5ec6c868de69c9b8b4ea2981d9e8ed132291f8d52b72f5ddb1915276a1289cd054ef74aef0aa1dd51bd67da8a34e90b08b5570b5aa1b128baca73202b707830aa2aa254030e30015ff1afbc4f6ebbe2fd360612a720149858e081c89592a0fbc779dda1aec08c547e9a73f6dc7a6d86f4cca26af74304284363ae17a5a4b9545af1b5f99657cfefb6b138e3634eb3a1def4b4ee9fe279d6b15747c2634038de228d62c8be607d858a88418ae8b680abe77d55d17ced344d340c1dab26871d161a722b8d92746ff0d6547e527c0d8ddd0d8645e77d441083408c8862c6dc3aefbd7ed4b509dab30312e9e18cc07dd90ab6c9b823c53ad903e023a12ad70d4f82d8dd375b38319532ab2b6ec27c37a66161fa0be7f4ac13440d90fd19f1fdf0db06255d269d369fe91a2f294d24efd9ffdb9cd4edf98391db36ba39c1ced46c9356f87be2264db10c2d834baf8f6c01ec98822b1a88f0c8ad11b7b1964e2db3a1dcc4e1d29f13cdbd5cbe434c81fee3b8a0917bd409ac52b11c58bbd09dce4ad836e1adf87539518a0df505d52b245b1acaf6d43b02dfbdc3da6810fde0632e6dbb97982b75e75a072f24eb5f01b72ffe874b81aacad9798718c46e76e2744408a8c5a35e5705d9993827b88f7f28fe4b7156b4e8846d79b1d9268d8e47d7eef94f08c22948c5949675ab847049459fe797bf445fe93dd446da8fcc77fd0c9692dd49a8045ad333492c2cdd60877678b76114c3372a91fe050212699d0a9326c30eb33320e84a32da750692d75e60e781620e90eeb53ea6aa8acc119981c2bdd34323dcfdb485f3457c035ef091fff9a1f678d7004503638469b4bd79787a8df6d90409b801248c54fbb34fce35dcfee5cbfc523389cf70a8d771e6ad5e0acce80698db6bdeab89a36e8332450486d9528e8dec079927610c5480153145a35405446d4ad74a33e01db489255f6c9b452ba3c1aa404c8a80b2e8b0ed80f1a2b3f77864ec306b572df7218bbb4af14ffa39d54b2f9aa15c2e1cfce73e5e34387c583d27504a40545d2f62110af0dcfb79cdee04f7610cc19c46edbd6de8b08124c275f98803bf66c25fce1b19b42d7eb87d0f331a24f18e21685649d803e8a48c93298ca156ac9a81d5598165e5ab97703449549ab065f9cd7366fd6858b4984fa50037c399c96942b9946c58d1165acd739cfb47a1388d88d4691d2d35fee181d17e2dd30f31da350fb0d8773ab01edceef1e5ecfd65156999e4f9cd41cc26b8040a2922f06a29b98ad800be0a9c380aa885db85d5ee6f87c05da8450019711a304b097012554b348f8fa030a59d4790ed886f88d3c713e0f1d46620738c1f3d22f0849349531948dc712bfc6e7fd45a5388f439f6dcbd084950dc5c58183b28301a8243a5d4f3e63b1202bc6a828f52474f1162532afe173897730fea530a68346487306d4967c9cb6bd91c6fa0e080ab0ef7a352dd38eddb243d92fc2972876043b291722aca27598f0ed9572ce7f0feeade7526c4254b5afce70facbd9991c03d0b7de275fa8f431fea6eb29e5380e6654597acd69eb01c4961e356deadecabbc45ffa1756cd7b401467eb4ac7698e2e64265fea030e03822197581ced7e1eba22405d44898efdea076d12ba1b3a81a129a17d82f11d34357e99a40cd5a0b4dcb61d9395ae2b503c4bc98d7ff131210a82209b616b9cf9d444d19a8202b3e6af2912889f85467dca5243455508b05091e43b71d19c3c2204d57d95b794bbd61eb635f18a2656076cd832261dff28eb7be078adccc36ff3bbc2833020ed79597b499e8ad860a1cccc2bdd27b8699360bf60ec77cf8c919b17b58590e1153d7f910fb270ea90b300f67df87834b24ac5cab734d33ce58e72441ce6c0d8fa9402d263a29b67b2155ae6b06d7eba837667fc5346d8aa411407c018dd21e34c216f6dfed49571299fd7e38621511d4972afbded669f12f96d42dfed94a6659390ac16f8798119821053ab987ff20193f0b2a3f3dd56bcd150c55dc09cf85c3f059a852d634e14271ca68b0b0bbb09a9acda849120311c7e3b61e21f1f296b881e5913e7c313b904bc97f75bc88cac7fc1a304fde8f8e9e61ed4cd57265017c08900f3241332246d24e9b210c62769383f3423d71394d882926be1f13843cd2f923dac02e1ae02700c68fdbedced1499fc41d073c6cb0c066fcf132e3305f9bc3bb268f8a581a9640a58bdd78c7d9e36ca760ed49f203ccb25480ecc337a0bf7455c7dfee192227b593f926fd38ef9ce2f08f3e898d53b4925aed217af12bf6106cca06f5a2b7f16edcac551dfc73ffb56d25ee8340268f007521bbca5f3f845bf76eae704993bb57f0633cd731764e4938f4a0e5ae5c37e37c0121c834bdbaaaff4836bd204b655d592b404abb6dd944d7bfeee9830a7ff28e13c994079a5d86468aed49b4787d9e97b764a0a69f0d5064cbd3a37ad26c7184eb99eb3d56a2a8e8bc5455b2d7268e3f8dc3a69d06b52423a2a9491963331a16a685bb4c2fd09fd1bea416aa932f3d2dea7bb7ea844fe409cbfccae43099f69e0adcf595eefc8709b6ae2fc665042842a115673880eaa0cdda6947a771de5961f3e3b7d34024a0cd93c44c6294692d2822040e2417934e2b13ce69cbe55827f1500400028004100100135dd05e1daaf3f677c52c1c62d8ce719a800b205804af2c0ec6d7ae7e201592ea31c00fdc01434eab6331b8a3e1fca418eba27b3132a8e4c01f8e765e2ec99b297d8c92e708f9b4dcf42029c47da447c45ca6d95bb91369f030f03ab7ac374096a47d71c676dfa6db3188822461573ae40f51cc9691ae0700d81712d4536bb512f471ab3d73990c5695aed327fa2ac080ed32e41b96932c61f70ecc7579de2b5cd5fd82c756416ce7ca9e471bd1a8287276e65c4fdc6d4ea305357548472e06757c627613c764bf5ceb16b759953dbe65c6f27418137b68b4887ab0ff1b9d69ee442cf48200452d67c418e30b04fd9aeabe90eb4835884af710b628ec42e849f2e61eb7cc3df02b48e68b4e80e195d7f67a59c19000da53923b8052acec31e808db2696fed0cb880f7a6e379cc812195f9c8641fba039e30d1fb8f89792fa1ecccd7f9ca22f6a9781a2101db5e7bc1d4fbcd879b462f924abed60ea30ba1f5b393339522f78b58668a59d15283bec5ed096199e2d91d61e2b3729f73195aaebf53bffb5086dc2255549100cb2b901c7edf67073cd05a756c60195f609e41a7526dd475e2466520105a5cfcdbb5ffce8aa4e63114b5b5ddbca6e102935648521a6100e9ec1ef830c5bf46a0149ecc20072e7004d10ff04bb6205d3d30cae4815e4f3068038bfb1821dd8ac1d594935009c085bd27a3e4d75fe0696d68822af91ca27ec7a6700200c9adb1a8225b62719e3e9852993c1d2de27d0ef42fdb0a8fadc1ebdfbd7f8395a3d32085bbcf394a2c6623c1a79b5a40cadaf4801fce92aa7838cc4a9450ac450775b4bccc7005ee077f4bfcfbefc2eb15eb21cb546dc1dcf7b201af523a85970ead709c3c3fe2cb9dc45539157dfa5c44d40541c353eced68f91a6f69f70e081825cefcdd92e39c2d698b731e7b1518345e3c06e3a7c542b457988587bc6ba844be72a5a74ae2cdfd2ccb7a21738cf4331f5e0867af2a0928d27bf2a882a02390c53f0358a8c9e6930f7dca52f70f683e573063e54b4a1d4f5e3923dc0a90b5b5110d8facd376fc80217d72217cbeb12792ba52196377491d59a8a2229bbaa343f9d4db1a8304a2108b1843b56d44ec312d05162ca53bd9c95456099f0f8812fc93e8848d73b6e0dc1cf93d50f5260ede3b8e30776595d82e7f356be1bbfe30bd0c5925305f983146513780ddfce55bb602d84370fb04a50c796ab8b0cae287798ea019c97dbb41449d5e2abf6fefbebac6b2ab5aff4e7349403dc51622367b43ebb77f0e448572d7316d3a296d854eda03b54865fd44c069056345a605249d32555007555f69aa3e71ef33cbb74eb6571acd15b14930966120b1fe71bcdbe38e9ce0a08c267507128a7c6ecbc5e492d70364a22ca357894a530ade512f2954bcdf57fb9f7567c8fca6557604368ffd25ce607e2dfe7ac95a64976fc886accf1b848f9608192201fdf39acd67e879775a350c683162e51f032174f452bd9e1aab77cd19a4e8c542f8495937098f5b3e4359c1195f71f505300c74fcb94c0d47dc68fd53d51ab5af98a43c6d1fd6934e111679c1a75b58a4e3c528ddf0dffdaf0977bb0a9ee36c92d3a4dc03e4ddf8c5048872cff4d3fd6903306d0b9a32f58391eb4c6e7a94497ae96d11e55060630156487bc73da0fefdbb938bf18ac5a29cb49eb071c87bdb4c3fa4f25f2578f04a886420b465273c615c4011317e414e5d53d7b6f955a404de5ab669d77c6c0910c783deb4046903ee002cf9d665d9cdfcb896003235004f84f2d5d6194966475db2f8d64ba364b81c10953bed226fdec4ab987417b900bc67e625eec8d3457adfde698cf73532125ae479f63340081c1a3c893855110b59882e80fbc7fb5225cc61ebeba254ff060491216d35419a45105f40e97decc66e8536bd8e9669680d24ea96cb16c75c53c2f941566f08ca79e747f5f19454bc0d79200c08de4b35cc3edc0e9dd7afdabd35f739ae6b037cf0f568ed0d0043abb4c975fc6dcdf0c041c3cf101bc3c4006c67fa1ed8f3915ea1201daf7dbc26d5e2354ee32459fe7021689f9cd2317ccd20e7c5aa5db32a07f069c9288dea222068710eaa6ad0915e000914068311f8a4175e2e987b7009a2e74d0c7f02ecf889ebeb1f6d571333fb1898006dee762f79d0a88a561b7c1e7df379b302f03b9b1d0ef68dffc90794712635ef78be3560f9a71d98a8145075af39096ccf1a092dba3924e550d8c1f934aae32d913b65086884a3eb295f4ce724b6d2abb9d78b27ccc7f2baf697616bc1976adecfcf176c679fc8f9de1d472d063718b97a2cd33ff95e41c6940ebe478241d41c445e22f739db009a94f06b9be95077a6991842c0752da57f4070b7fa6ebb344f3a066c7238b0f4d5faf92719fe181e3ccc73e0de79a0050c267bf8ca249cb236877125178f7ac60a67c11529ec1f2ae05a977114e960049ca1ae428112dcf4e24bf872be2f897bb17ba6051386e191e46064fda6322ef0cb307ddbe06cb43d858846408de787a77e9b6ee1e8e687cd36c0efa6e20ac6004d8cb540e50eb87bddd3c76562d77e5b36af314758d2ce7a0da66203d975d801c3f28f80bc7ecff08d3b732e7221983951df274e9bb73153892dc3706547ed7779b142a8b33e7269db71f57aefefd8d887f6d3c9d14a9642f352d7781828df85eed896e09ca7d6058236716205524442bbbcc74ec6539c7e5d54996f2e50c1f991866cfbbdb1b5b253924b7d31d689bed6ec75b2423f7f0a7538a7f322e0cde7a25481529f172302a507e33b3d324ca946528584c3441bd4a8381bc5d114f8aac213461c5af61afb297e22474bd21f574e4b0cb1bf721835e1ff4c3c2e72f90f781f39a6c5555ab0a20024390e029a191f94340f2a819cc1ecf3347d16602cc69aa2e55d520a4f276a18f25c7412f29bbaab3fdf58d57881a45bcdf985cb587d05a18fd29558ebe28090b85ab7f0c4069a3f728933a3cbcc6f80287bb86e0cb7a6a8e26b49a45f31b16793f2fa35f077cd853d6116a6a8357cdbbd9097fed656d850fe783af77085bba1884871cf36682e03390c9fc5a142d4ac4f9f1c4e872993947ec0836146ba1f98b9a1d7a2f4ad22e0d344207494517c2b1d7339f9c934b57e5de183e99a5dca4440145ab2b9b7b5bfabbe58c63fdc7cc1db23349b74133d4510dd0705182829065b130fac25834fc27ee1f5ab6dc18441b0f2bc69879e97bef2f7107ab6576fe85bce74df77cefa61464394ed73977d25f102b2be07a64f9b8d0e33c743c3496e284bfc9136373e6bb81f4971353f71f18a1735d4178f3d58edc0e225da6acd9cce8c191f4709f8bba6936976eac042f58e5e9cd6e19f37080b52f5e7d15144a5c0a66330058b43159adb41d17195f2911e860db0464df472d6127fdf22760934312068065a1d061998474b09718e2c1da551be59c10a6abd83e58b6fb62e7e47cab1c0b487d8f8cae31a87b4b4cfe7e3092ef9b52a6e5e6599867292de6fd371a5fd5302d2513b99483f2c2a2c8da0a1bc683d3a4898904ca038563edbb212fe33e07578ee3fd00483d730a373757cc2758963c1a5b719bcce3c93ab6db153dfbee2c936285e7b1d7145269f753b9017db8ebf32c71a238bb3d56ac7e0189f60612e34ff574df8c51040524fabfc0b6523f960e54c084a84780305646c5eada438d5f9552b55da4a0aad42fa6bbc6a19c8fd0f021ebf1922527bf8c4279cd0772e8c6126e001337b1735e482a9ce548912d7169006a02e3872ecd590f8dbaef4fd9299005bf0e934422ef7e850c6d1d73dc6ebb0835fce85fc3da026ebf22ed4786d5282505b49dd36c789473c25aea6c3732fcd6c3e71eb262ccee6e676378be5f354ea3ce7e39bc6a03d2ad84b3b81123dfc3969bab22a017326acafd82f28ea3e2773a2669bc959400df771a05e528d502efc9271d45ed50738776d930e26645d3c586ec8a7ecf0eea1280ce9ec6142e8ec927aeddcd8fef52ec0ed4f7fd02c364168fa7cd9df3a1c9baaa46cea7a8395c9b902948309a217556a67c502568823a596788bdab9667dbe6325f0905e96e54f70e3c304cd311b17f951dba4c5e84dcc76d119105f75e7596c5ba4b2c179d13a78dd2f9cc0795afd2855f32c7cd51f785cc7350be657cc5e0ac07add391c3366a09f8959c6f53454d2532e63a05356d632ba7c0b652955a48af73ee7ad3315344411876355302caf6a9880cb7f5d26a33558bf440cb677fe307ce9175601f3b3ab28216ab9ae468f5fa0e18f6ca18a4446567fd45a715c8c983acbf5d48a9887e87e0d142faed4afb415fff829044e04a6c59b4cb7695cbbfd47458617455e1256b6cd3e316373817f87d06b826ea5fbcee3a67715082b2f5b5e9de13c3869708a018ac98a17805b775cb75b1e5af90ea7f8d2a916e0d2bac8efe48777dfebf54b5d923898f5fa291c2489c04f41501b67df6ee0860267ba9d34e1f38044978083910494d434e0bf4984fb0513efbec091b6d5f4ad10cb9a9924516850663604b45501c983e95d20ca696e2f061f1588920669d35464483eb09ebd383c9d5258f4e1d3ae5de11219dc17c7a60639943c244545027a8b14af5928fd09ee5663b6a9d586f7c6f99c08f71c2bee14e89af40fac0165bce8a62ed02672b8bd339d4ad79614f5c0881183789a59a07e31ed2ad843b7da5ae7381bebd9c496bb9c341b70d5477672d42833a2737ec16c0aaa384f4eaa58f4e1909e59cac3617dc05adf6589a5c078983ec7cf337dc6db6a5fdd12f09d4412da1587dd17bb09e86e89e5a129cd317e2e295a186bfe0afbc51c446403f57f39879722260600fb13383df28655ac47df8b313897dca4c21fc696007b006ad3def0d08b63a66f6598a9b977d33649ef96c46636026e26b7e0840bcc8d403fcb3001a7c056bb09ccb5fb5e867c651b37047f8c41909c3373107a69d93a0e023324453a8e7580da992fd7740d1943d2157bd5884d055c5569df0dcec08deee16d4f9357a6c971e9650a485f4b9398f5d86af13d7881fe8a131c0419c00543a17a1f163cac7aa77206d38376214c6fb70d0a7796a2b46ca543f3e24f69643029543cead268b09b8ad4d36fbe556070a964073b60f04f4b4a3012f814a125d55df041c524d7029b39525163f2484b1014ccf2e779d99dcd0fd41e267320bb4c66749adaea16916de2055049d762fb213236e2bd0916b9f6618369b933fcd63cccc1400aaa8c8735cdd0fa8937200205c9f4eb6f4c47e81b017dc081b85160b5df60c0797f3f25f6f5ae97cc79571a1f88c8b13a2ac3e4d08b590e1616c665db4591397c2a1976828fb3c7b7fafd6a3ea2d668050484036095ee78eea815c3ef488f264760216156b4a5d0150273158fb86556acb412003790ff741fc0e141fd6c5a4ca32ffe073f36c6b07e6d0eb1e8f20f5b313008c4425d883067cf9a66917231982f26efdba166939a67a8f94efb27f05dc8e3c974ec799fbd6e63ce0171d6664cad6a4116b1f3f763a042ec473acb1e7863489d616c3ba7943e9eda9c02fa6fa43b0355a36263cb705241f40602c2e958b31e9c9a103f5e100a8226a1a58a3728735b62d17d67df53b49899768c0d45598ed269b004fc994b5a564a10af59eccf00e7196f9324e9ec4a77698b3de75d9ee9c3979b13f1e173a400dd6b1f8eb250585c50c9e5dbae813c089d1c0223251c7aa4b1f61b44af8a6dc875fdd51271d74890682a62d62e9832568b4c1dceef438c8d728f981e9529ebe18fb3455ae3c00028008000340000000040800034000000002080003400000000408000340000000030900020073797a30000000000900020073797a31000000005a000100fbd4b6e4183e80cb9f767074a31578a25ec3fa0d5000b7d70482fe8b4ea34b50fc344e3630f3b0a5fdb4a530004e73aedc7c258a657adcfbbb6243f56ffc43b1bcf2824e502bdde5fe2975b09817289639aae2bad7ad00004b000100c4f0a7e55d4f4e9574e0d3d92916a256c5cd448da84e67f7743006f6b32a5e1a28228790054f58d29522b5b070c0ead56617f697f06572b793557b538eed9d8d3632fb7073be7c0048000b80100001800b0001006c6f6f6b7570000018000180080001006c6f67000c00028008000640000000090c00018008000100636d7000100001800a0001007265646972000000740102802800028008000180fffffffc08000340000000020900020073797a300000000008000340000000017b00010082d2b7667858e688c322121e8101b64bdc415a27ba376fa94c66cbc84a8240e2ab97928fc30bf56b90aa15c2fa4c8b7f490bba1c4a271119c51547db1563eecca8a5ca213012b1a44ad0939e2f4b2531bc7312090fb7c9c183ea454951087d7ae8de75a3af7955253713578db0b4537159a7524db395cb00200002800900020073797a320000000008000180fffffffe08000180fffffffc0c00028008000180fffffffb28000280080003400000000408000180fffffffe0900020073797a31000000000800034000000002140002800800034000000003080003400000000462000100c4e0586d293065677060b59c2f9c165a195f0d74c338f930178fcbd71529489e933388839f6446929341b4fd9380277edcda8afc60fa8e64d384cb5cb1a5752f12fdb57ebc3830f13aa9bb8904a66da847e9d99e77d912af9c3a35a386530000700a00802c0202802c00028008000180fffffffc08000340000000020900020073797a32000000000900020073797a3100000000fa0001000d69db1e8b7410877a09c789f3661063dbf6a278917bc901903bb2a570858657a6c2129e2355fbecd73f71628bb57d715b088226a753c1055c3e62288d1d94d235f82fb163c4c6a6ff0a7baa19679715fd3f0bd81f5418e8f4b719f7dd7d37539b7b10c6eb96774687de1aee0c1efcd9dac62c6d23a65a22ddd40f622955d24447006830e561a99e431e5065ece15766336ac4807941a47d2cbb11d9b8e7fc35dfcecdba02a11361ee0578720ff32248b1c7667dcd4b767e56880c15395df7e3076d045abe312348ba9c6d0e002fa7dcd67a17fd94166252431b0b8d7fb11b85a1c4cb2c955ad26fdc6ba2593805881f470a2b730971000054000280080003400000000208000180fffffffd0900020073797a320000000008000340000000010800034000000001080003400000000208000180fffffffd08000180fffffffd0900020073797a3100000000ab000100a80788fbdafd8cbb2ffd8ac03f674af3a1a3f66fa30181fe084489423f8f8c28df65f0816ef3f9c1ea0d2e2a70e7209aa605136042bf381c9f4ead23d3ffc85d3543610298f1cbaf27f7b186c4dce9d46828a14b862f0ca2f71fa710c0b14f3e11a25c8b6445aa1627fc2951aab12d5ff5fa486cceedda9f29e0f5723941cc4e5dc7e86289b02bfd23aa2fcbbe36f0da2471574f5b835aabd66495da632334f854b035bf180170004002018073000100696b3b3c0deba940aa6bee93d33019f928a1d91f7a9a2152dc4fcf99d08606858bd0176a397738b79ac7af0bf1510bbc3b3a7769335cde1be0cdd1de3debdc0e05efe82762b7e958ab227c9ac861d796b8deffc6913e552200fd13dc23f8331d171076e3c416ae950eee9c350ac38400b7000100276e8dcae1e802a12a4b3460dc59ad655b4c9f8aa08679694642f9c619bd812260aabce28059cc2e7ac0fa0a0702a36d75c98e8fc68304e8c1f3bd40893f3d49037f7557fbac3bc11629a719a2134360982245f9022b71de9a839c546b4aa2fc3dc87fb339ba39aafc33bf7087a6a70091e9040295ff28fb71536616d47c16943363bd61caba32f0effbf6c396ae1e7ae3bc4a7914387705a0b201e6e8c2c349222507388d735b972dee4b1c715c758d889a5000d10001001a1de7de143375c6f6e9d21f6973d71ee7658faa17e20c8d94e4a40015dc0ab0f44dbbdd294f0545b0b0d10fe2afff42cd413fe61ef02b5916fd84f185b0090a0b2a22d1adb2e7d82a2245290d9375d44d2f5d4d406b2fc9baabbbf603b1f6c67a13d32c5ccf1c22e408107b24ea91a337abcf726463118d07b1c255c83273d68148f6e4058f5e9d73544fce2ecdf78a65ea2de48bc03c514809b7978a3863a17b192987950c044aa6507069ea4c0c849f96fc972b82bf9b8b76a286388296df3f94c10979715727889b8ac6720000003c0002800900020073797a320000000008000180ffffffff0900020073797a32000000000900020073797a30000000000900020073797a31000000000900090073797a3100000000040201804800028008000340000000040900020073797a30000000000900020073797a3000000000080003400000000408000180000000000900020073797a30000000000800034000000001c3000100a2b5df183cf6e31805998b4dacf34c548b56360f8f97fb393ce62a1f8fc5eaf434fee58091886ad4b673c70ee49b788dd5409cd2d47f03bb53bf87057a8f2b8d16ed4b6939ef8acf38f5a167b007aed531ec2aa7f399586cc7c9a50d338143eb0339917ca6d2e22dc23ee8aade13eaa09a2b63afd5dcf68235fb6850e931f0f6e354924f7d66afba184de369586df6fc5267fd56da4a9cc4ace7e620b618610dcb5baaf120da7ef0da4d8c3701ab067a5d3d209aa9abf9956b3cf156e7dae8003800028008000340000000020900020073797a30000000000900020073797a310000000008000180fffffffd0900020073797a31000000000d0001008c567f68338d6722920000003800028008000180fffffffe080003400000000208000180fffffffd08000180fffffffe0900020073797a320000000008000340000000015800028008000180fffffffd080003400000000208000340000000040900020073797a31000000000900020073797a3000000000080003400000000308000180fffffffb08000340000000020900020073797a320000000019000100e174f7cafb4dd8141e29dbea1a1ac3be2fc63d7f9f000000f00301801c0002800800018000000000080003400000000208000180fffffffc040002803c00028008000340000000010900020073797a300000000008000180fffffffb0900020073797a310000000008000180fffffffc080003400000000330000100fbc94b304a813b08a39e746f31bb1b181ed55d7b2f2fb6cfc62fd7a513ff89c7014455f0ba5e9e89c31362c301010100d7adce9828f1d437ebe90bc8e0094527e4bd5ede3bc62ba011eed886766247078a91d20c41c31b2e6c0f8e91db424bb1fbacb189858abb4a86cecd4fa7ec49ce3295196ddf4f64f99f6716d8d6966001ec3fcf28df2eef63c65dc5645d12d95798dc8588c3022ddd31b9851d110ac0918bf2c8f0f4aa5a6d3118f73cf56bf817b8dbb8f0eaca6d3f8ce1be7b814799c17ee82b59ddbb1770b478aa55688a0ac170ca984f2727a6f1a605a14e9fdf1e80c6d398918ff4b49933c50f3a1abfadc600ba594dc72faece70fcebdecc99ff4984a153520c10a973dfcab83926ca1d51b125191117e007fd3564d5e912edf249c713d063db2f0aa4e43c04684d00000055000100d63f8a103b50b80a8313cd208c0764034d005c7e3b597d9cdf8f087490d5423201aae0a09f6218355341d8bca8bd487862287ba6ea92c576ce206f65714fa1592428c2ad0d78fe44dcbc59986bd8947b6c000000c40001009b988f9997bcf475db5c92bf20808356b9f270b617100de47b92c4d9324687aa8f2edd755979f5c0ebfd752fa1913f4783fd5ba40dc9473086086f63d84ceb9001e113734f3c1819f21aab6dadf4335d82fda7baa8571b6a77ae309b1e70ecf4deb56cc8ba089be19657c05632333803f4b08d2544073b05a0ea288b14beaabebaf490e339d48a3ce4e306cdee4627b2fe47db9751b6f90a69ec25b909a7eec9eb6724295c58eb5b505d1a1d8886165baadd2ff2f68255388824da1cd932a73e3c0002800900020073797a300000000008000180fffffffd0900020073797a320000000008000180fffffffe0800018000000000080001800000000203010100f7adebd610d012b81b5a06577018a62ca35ea923571beb887ba2d4c07b7952541723be60326f5bdc3055b8bea2a2e0f0bc56e0079f55163c6a7128275425a74a7087317a285f0c972ae9a572405f609e6658d45c78b30268d77774753b7be741d2499ad17451f9c2df1081114034a0f23bb15e78502a7111efbf2c5946fb64d18b011bc3644c3040e91b863cfce2f3f68bb495caa1a069393c3c29a5b7bcb696c19f1d3ea3bfd10867d2e558c28092599013ccaaafad90178a4643aa222b83ece052ceb6bc4c2595c59ddcb8f63cae85505489eb4a2e921c76eff46fd4b82d311fe5804d7167b1375ff628dc83e5da31db4f114bb47ae47de63e5fa9752df400c0100080bc100a80280002800800018000000007080003400000000108000340000000030900020073797a3000000000041001001b431937fcca9a65cce45cd9d69a77f67fcb7233353ef226a3e8538482104ad4dacd7351c5063c384e9bf7710f3169b15744d492691a54ca0bec339527911f25af33b715e3a400fab9a0ee6519a54f07e66147baa3ac03abcf2e9b8e2950832d69fc66ee8de2b631a14a4db08b66bdd0afd1412f4d11720041cfb0217b3d732df8408a2b323c96a38b458453014b4504c2dbad368402eebf40d623eae1e4f3fcdd98aedb69479608e887ad5a28c9fa119c1137edd4c7752466f913f648dfd58d4ec6579458b93a7e654ba2109ab795d17d516b70e7c3a9ea64723e04a3f9d4e4cfd8ba5b5bf0ce6472318bf23a926d3ee8f2cb079279de7b0de3d6a155d725b6811b5e4c77d96c561ef41b7db72b8469634a7407e2795a402acc7a7e8d92fc80f577795d09450f04dfbf435adbf329f1017e2b1c751c2228c1ca3ecc328aabbc056f6793f29b8aafa73c41eb53c934ff166c89981c83fa16372411178c6ecbf75157e87834cc0c0f42fa18400069afe4cbcf553b4b0695b99a79c2c225c7e2a412811adc00c1636cc320e03132bb71132033f1e8a3826708b57b05b1ad4746a9d64dddc8fae84e1f002af1aa26ddc7e7f3694d44a60ae7004224c3d6ffe085b1a75eb1552b7886472dcdccf84e0a5f67e6deda233f0766ca96f092e5bbbde319bd5ea33a26a40fcf80290f1bbc9a3682691f2d4347a51e6181e92180610e4a9b7008d84c5504e18fb36cdaff7dd9bcffe85d6a70982b5351d405337a272c5878bab6a9b1997233ef503c79f1fd39d9b06034f937842f0dea9aaba9bfed3ac945e52e7e0701f3f2dbf3d94e5531c848571104672bf1b5e62e5fc545534bcfb44f422fa48563b7e8c6fb93fee8b203644ac3c48a1db727f2aff8957e9a514b3e89b13e211a42883fe45592ead2f38e793ae8e71383f7548c6f58f6b507c351e02146d748d58ca47d20a8a4e11e56fd4f2d0a1d088074fd941e4d9bb81bfaaa0a30e35a57da265d3c894b90d44f3dbcb03582e98dfe669e78c716deee4736c13757a8710a0c60d5abf2101a44933000c2a5f46b94283d156450a5a413f0ffb096131b18fb968bdeae07e82e434a495c20e7aca8f5ad13ca294789c66322de53660ac63ff1c229d2aab99d7616ce32bcfdd6c926279174435d98618e401cebd11da8891a9054275394801c269de4515b78b138b0361081df6effbeca7ba42c577fca736f50de055e0c04237b43fd7ecf38179ab73687ffbef8129375118b7aaf8459c23c229362c62bd26f3cef5a8e7a3c3f08dd5b973664b100af935e1d5c9e4b7fa9507a051f810433ac99e109d1f751f68dcf70655886bab444b9bb6d8c22f5a184f3953d4d800dd61865dcb985a98ed6003995a3e0bc16d6020d52f9162061c3b69cc58ec0ca0a3ce7f70f2103a8d5578b9959ae8fc7dd606e16cbf1db77aa98f3d1348f108b34647b974f3acec6978a7c685ca1a073def12cab05422acf0dc8465dfd20259912561456bfb12c3dbb4de9a16330ca909d40aa2f5bd18b15d5bb346d614e358312dec171a9fcb6215487c8b65ed7fa45b415693da7fff29cf7e8ba10fc8b14626f216c99c9f97de9576727dedfe90a59afe00a56f66a29d748f3ce4468d0f933ad484e0c670fc45360e58ebb74a6c370b1c67d19fbdd9457c0226e86e45d8a2940a4dafde98fe5a5f65c83117c6bbb05af63f9f1ed2cd8864794263255d31c404db54742a16e71f16db8650f104c644030056c97002d04c43340152153d72b1fa06c68ede04588905a4aaaca20bde24d3a63329dfed372e4c91b2fd46ee6520ce885054f3522ef2ba5b5b6fb52a98ca5a982ff34b249e4d8f77be4d44283feddfc298101fb43fedb0490b1d35c64be9e602834039df573639563bef4aec3067683ae5aeec38cd14ebbc927c9959f6399d4b782d561a9ac4d356f9fc34deab6a94d9c44ac87f15b1384a390afbe0f563eaaf9e7cfbba74ce3f41da619a109bbb4124c572025282627ad121af5d6dc1357cb0fd68f2952e1e1fbea001f109bf957f1cdec1bfd4d390c09f9d2a497663cf828fe6e55a216e6656f69cbd4ef81cac70ad2df3cee6bfc119de24b5cb955911453e02b59ce1c1df64b2ff587a273138f12a0425cf18ea841043b1d70b88a3cdc204fffc70a3ce4d30f049a24cf403ee780e6fd13a6d0cbc4db57eb9f3ac76d0dc02c3fc1bdc244e4cc2aa84b389f2a9a7cc2e7dced38f373aff8b47a77233f15b3ff37d4fb1163609ebb2c77621d2ec9da48204424a19d49bb20fc17a23d8be4d7f1c425e09e047be6ae9b5b58a62b98fd4f4ed10f2f7044d7b2d7fc65ed5d949a79484aefb1c068dbca018dd0e4a96894be4fa781e8e50831debe0a4a6b9959f4bd7cb2f1b03efce3e27f7c440b6025358d80808cdf733569c4a05ef60be1ad6d5b0a931af0ea30f5c30acf2facc9ac1a9598384e1fff3dcc9747abbdf9da79a71429d5a7184244046c26b32db2893f5da2ed9369926f7ddbd9eb692d66e4c4568fba3d3a85e5686372c202ce43b37c81fa4de957f0e2da2f931516908a45ee4a7ad8ea407e561258018941725608bac2086fe12f2fb3b19d3139b8989cdf5aa0e859e809f1fc27b3c4190752a343df811cec171a83a2beaa48854d34456a692c0de51e1797856764eaf56bfef449736adc40f948d0c9a9309caaed04e54bd51bfd83011bf40867bfbc861a7f64ca5abd1c7a438dee8dc5f88c9e5ef18e820991c9c1ed9cf54b7b6befd26ccd50e11c074fab3f3fc3fff9c60bac151ba7a535dcb763e229392da9a50888ee49adb42e4ab208918575036ed48572c8df86ea73a5026553e09b03f35b73b0e8b479aeedc6fe344efecd40f0561f62fc90400a554e333116e54a746b67dcf8fb0527bdd69143aab78a7492ee61351659680b3bdc7bf050efff3e555244fb6805985a5250c02ab6c7553c8ff4f4a35d4397046b5b9aee613dfd4c25fee192b8dc2cac2cf1fbe2454a76b2330063d035d2918e80642f81e4f754fe57b1c2446c558d722ceb5029208befe25b61bf50892f336b02099fa99dfebb8cb495d4d9e8e28c2e7fc79702d971390e67b85f7436fe3ebe797e59f5f07555f04e2b812504007b20585d51b10de58e3a3e069c680774aa5835b90ecc748cde433fe6a8616604bb4640a3842b897212997d055b7d05eddca6414fa793fcf74346dedf39d61342ac88ee7e31f4a9e73bc6a434d11a7dfa544ed3a2aa42b126ff3cca24d2d69ba608f0663fe2cfb3bdf55980dd2f083bef06e7d52b319cd7c4a875a587b26c05460531b7567113289f0ffe7c22e98ca626fe72d3f964eaff5ddf988194601b578bf52043c8fd8881cad06cca01d7ccfce64211708380b61f80d05c1b967325d20315450b015f7d6a3be736d98645d85bfce0d36077652813600a45f5b3624992fc863b25c4110f8acc2d6e3e52c70d92817f6b891fb0f0ebe36336361a7c797b88a2819efb9b460c0af8f8aef87307733845e689846a37d0257d14a1a3f091d40669f3cb9f954ec5bd5ca8ed7083524e6bea071b5ba1082ca4671b003dc1e2978452a701ff6b22d789e5d00cd66bd83505d12f928048f3e245dc87410f24a4874b4b366adbf15682f0e9ff36902f7eebb64eae2543f645b1dcf6220225e6b7f6849cbb1620dd392d5c3aace37a0d2434e4cdf0a45d58d767093a12f2d7969a745ba0ac609af89939fd2b2088d7b4c218e7cb007692fc2f9e671544d731ddd0c8020e00e702c62b6daaf4624b7dcc897f3b0e512187f1af6d697a3d891d82adddf456322321a11cef699d9a3aea57c08c2900f297c0b3734d8719536c1fe480e9be2eac5c8502f63b6195963799ebb14c0d1722e6ce7c7f3d600950aa713de05d01ab72d1daad8bc3bf08d87561f47ac107716bfd6b49324d8149113ec1496c35da9a6acfb25e7a7966b3ced360b1f8e0d543cc255af45b972d7933fc8dfc6fd8b125298ce33156d970801a8edd782b1831a481ef79a766e3603428e5def19583a7fd8e51aa6e7fb8c37573285ea3eba5d22ade0abdb3d93071a2188b1c512067e16dbc6fd65202bea3cfde47c3f21395c9a9734f0adda9bf393af5445bad4f6820d8313f5862b0ec94c19621073a18c0cfe9e32b199e9df0161f99e9fde9d1d0856cc6a8939b1a4e7c68f65f73a928d3dc672a2c880ca07acf011e2f9a05ae4b824a44bb9548343e1ef4e35444ece1672bd09f2fdd3b21760bbdb02caabfbdb462522323454be7bb2597e2d6ef4999dc3dd40ce93602c1ebcd05fd8cd8aa8676474397300f7bd4ff7aef876305cedbedb445238a80a3495edc9de9e94fda2c808257e1c7c1a101669025282c6f9470a81e97afaef71b027b568521be7f6f4d328225702185c86c234009219868313f016eaf18eaf2b39b241fdf76b0e9403a6ff7792bde75e08b631642aeeff7f486253810ff3cb7ca34489b2a10ee6b677a5fe0ff144e41615f9aa938708573da9906b6cefe75369e138ce3b6c4bc07be319d5d8aff040852ccf92ac20314f7211db69d751123006a0324898f5acef50d1e837489c7c52521469ea5ef8af6e35d1d961782c0d7b7c4e79b5362cc153215b4e3752bb7a1f509a9cc6a6e082df8343ef8c3b473ab15f5b850356220ff599d278d3370f82e8a52f22a89683fe8e39836b0773ada58e382c95c19cd5ca74885b89a1c61a1a98c76dfaaf472d483d401263a98a43eaf4441df6170e0cf9a6a4ff171539168895c82dec2832efa83b2f93054a3ee23dc6ab815ee6d5147e3e1d466199bd87ecb486d2d02d7eeb2d762e12010b2c39f86d2d177b8dc493e3bec67cd374b629ce36e0da3a5c8b6b8ee679780ab0362ef8df6a844c0ced11d4f76095e40044520a9e3b557d70256de225ff36304c83b94bdb7e2833e9c434e20651789fe2359e4e7760329a6f368d61ec009a2e72de7d8d2a2cfe17fd99b34e6a433c63e6f49c1193967b17b5cea84d3504bd583cd5957d04093f9bfec04570517ca05c465895c0746304335b82bc293a9817003f45e9d803a2bccc22ca797daed92e4b8fbbcf56fa118c1e750fc22a1932aece46abb907fe4aeeceb68a59f7f4292b5898cbbc883fb2bfc05f953b7bee3042c2f46607a9f8c1e6eacc781bad32d396f78973a1f32573eb78fddf5b54cb1bdc21b5ebe63ff6f92cc099fc0d801b18e62a368948b6128d33807dd0576add05c0feccffb1194fe7089fa2aea74375db4c903d17383745563cc84c9f06a8680b60accef1c2f135c7fda77b67907c86299625b7ef4190a9d434599804a324515eb3dc10e22969cb1aa4bc4d0045741863a6983e741361a3302698ab84921a7c03d3a7d0c6dbef7b84df4943221a68c9181e8320dcc5d60230d8d2482ef184e273480a33977ad5d714a54cdc413fab8a1c705e58cbc23c2a281ca72b1b79d7b370b28fb3abc93ad3488b4154a1c1254b6470e6210225c85888d7b575971d398b3818b793d0066de78b37b32681a53105b0a9160a03e8e04f27f48f71406699e6b63e9e7b2729303b5219ad05d3a9dfed26a57de7c0068ef754e3dc07c7443ad02d8c8fa48a744cfa20735a8e8ac9fe1fdc2cd637e37856d16dc320d28256d26318e096cf2f450ed2c6a513ad611d34b5ae7cfa5a56ee878808981b16669506aaa83aa151f1d7aecdc15fb22e3bf861eace3238924ab0604aa554f137a89f3bfd907e66ce5d7ce2cc378c3375cd59998b01e7d3ec22d17a2ad0f25f7eb1143057ff585b06ea28a1543a64b2968d10f7d66b0330c00028008000180fffffffd690001008ec6918400a30ee69d42aefd4a9745fcd5cd15e50311ffceef62a08bcadbbb67f39d18824d675bb077ea62b945f1039a07ad0ebce9345e2aadfc91cc0e86be3dbfc930bf41759eabe15730501ce4a3a7e2341b7608ebcd7fdb3028bf4ec1990c804c9e62390000001400028008000180fffffffb08000180fffffffe300200800c0005400000000100000000f4000b80b00001800a0001006d61746368000000a000028089000300081c022e64086d570a4d9321713e6a02f80c2713a9aa7fa3c0141cd828596d577bbcd0f284353f0475334f7afeefc15073a20ab7e0694b249090fd8d27c65b194ebbeb6d5bf24073218787dc70f3d9a59fe25103a487ad2758883fcb739a162569a47242c793bb11cdac60c14d8ddcb7f52bc79774037fc2c9fb0eb8ed2f8d5e7fe87a57050000000800024000000000080001006370750040000180070001007274000034000280080001400000000108000240000000030800014000000001080001400000000e080002400000000008000240000000012c0101802400028008000180ffffffff0900020073797a30000000000900020073797a32000000006000028008000340000000010900020073797a31000000000900020073797a310000000008000180ffffffff080003400000000408000180ffffffff080003400000000408000180ffffffff08000180fffffffc0900020073797a3100000000a2000100fb12b6011d6090db436ac1fda238ed45c15d83294af770211f74893c53ab228bfab9c3088c2d97eecd9865661dbfdb4b404cb5bedc98ad6e4330433a8d336b8e86c73e7cfd273d841ca5a19e4001644675aadb7769392c7b322e0abdf5cf0fa166f1664f5288599dc7d35814e8acbf487813a59373ca7effd1a992e64b9d3fd9ca7ed516adf1915276046afbbfe18a21f742731d4311ddc6d793ab8b28800000241100800800034000000000101102801c000280080003400000000308000180fffffffd08000340000000032c00028008000180fffffffd0900020073797a31000000000900020073797a3000000000080003400000000104100100e346011b2fda69a3d05c98067693e41eb70fd2d8825c8910fa60fc801bd3034cc598499b740e90c3aa2cb0c3558f505da11aa0c2349d592cd37cf851347fd87eb2cd2ed20d99b698bdca0c91bf57c9937816b967c0d3381a5b31eaa016f9676a8230c490c628251c72571f1b49bdc86cdeb428598793fcc143aab88c5a0bc2944fec58d8a10474aaf94c243009d05a0a3e827f93738df5038a6f6628febe9104f69446041f7475f414307c7926fcdb1cb9f68dee3e5132f8d789432d43f9bdcb24e531d5c161ea89f28782460fd94637402cd1756627bac4775670fab40b0171cf63b40c2a01dd24ba63aad576e9129c068b1eb7f3b0ff7304aee03143f657dc6cd86f891fe9912c6d0954b8da961f9fb03643caab045506a4c8defd04bf1c9d31f124aea14912e079c7eb2d6f7bce837a92912c42bc1da15960171d9e1796c0188f93c16d295b5eb29bb7626b7e9f26a8bb7084b2b6da2e3729e0ff6f3c67c63fa96d32f6a19d0cb95643a0a1345af846c59a858e6961126134b4a34593b5388dfd28b196db3e1f4c3d647b94e6385a831d84bd3fbfc44ff53a98daeee569087882b2c2ce00c060921137a5a5fbe5ce89133ae7a25f75d93a89da58f08f350797ec2598ab3420419a3e7aaa7d95811669ecb98aeaaa0da9d16a9b28d983a3c43711d5635cb1c5fa9d41d5451161fd92c446671e08eae26845b1a61ef2bafbef62dd1eca421b3114b792d2f79290b28c16c8a26de9fc94c0cc6454954c77946870c45271537d4e704f861991b11fee48fd2760550073fc95b6bdc59e1ead9d630f29ab287122a991cde29c4343db2e5240fdbc0682254e1502a3e7d7f778db826da9d6a05e1c59aa8ad02f5693545a1ed51282f08e7fb1976db6d65e73a58020918f610f941e2c0c3f12f80a3395f156532ec05c4ff008129c448e98fa6c65eb27b1ef9257f557821a02cb5832b778e11f32ea7396071b1b927cb14d9e0d6668ff4da40110c87be8315aa52415b9fc14bbbf46ad2ca7f563ec52cad5b53f2ad102c1c45a8f5f5507f6f69ba4f9348de247b7a548f051b55069046ad304a266f3270a4b86937ddef699c22bcd1aced6b5e6f0cc5d1b7514089dfbbf15f14f5cd772489e64ced48586484fab646e92afd4944239b8980e42c5c6bf81cd9db290beabb2338b56de97b6f860933b873049a3ee2ee19ed87196ae3fae14e0399bb79a2ab086dcf01351bc1e575bc26e16188cb8b07482a4b423fe7369cd3416aff18c10fac0243aa05f2b5f58e445da4228fbb222bba3ccb1c0856d562f9721c95609e6e6f02d86aa4ebaae53a7fa1699930ea69835a24931238fabfa023a95997eb88b8c65e1153314d572d61d5381f905ac2d99d3326a72dbdd1ce5fdeab7caf28a11e370dc886bc742a150ce5ebbee99adef867f031a53af4a418fd08989623d0665f97a7449b1b24761a1a910cee971ef0761f2eee609571980731a1c5d50d56da10c8977913cb7ae4717a53caa7365c5c32bd2890edc7e57f1e47784e71257e7e66aa595695d08df079c05922f9a45540413d13b753947dd689f7e85f58320ac810df823ba09854d4011a6a670ec28ce63cc1d70d884d41e2172eca73a027f88500a21c8fff22472848cfa7f5305f7efb37050c198363616e824f602f377a537245d4b2dc675438e68099a73724f1b9607a2ed7253d4bf515d962a9f73f21c00b87d3894bea2dbae5fdb51958fefb754ca0e7cf360c7cb818b483591f80119973c8fa96851967f1aef15f03180a82145b8d240bfcd907d638730e9c9cb21dac05fde19d6f971d5c94d0ce7024102445c394f6c107b64cd45c413ee481d3551703dac6303b661f18873259730d55964912ce7b9b51e87a0a30111ec5b7cd5456786888661e863e4744e8c8870b975f49e9e8bb396e71fae72e4716f0935968e6c5f4f9a64b95430e0a0936c9953cb38079c4d6a1498ce122248002797f6ccc39a160230ec445d0b1d6dccd75b3aead613cb8ac3bad641b8eb32065a9732e3c3a3a1e7fca69f30ec2f777b607e333c1b936506fc239e5c23833c7dead30e2aea45478e7ede85a591dda8b85898b58b7fd5b12d00dc49e1a04f182c106844817cc74e8b33b794c0f22ada708e0fd421fcccb9f8337519111cec711fac11fad6b2082ca800c66a1c4a2bb62f2a00635e2f8059948062071d0181c34f477c9cbfbbcfe89e3081448f3a3f1be267704223e17f0910decd76913f0e6e71104ffbc8e376759cc44220e6ca41f3d070a84a168334ee068ca0b597ae25031e1511d2f67c5a9818fffc489a670f138e813ef3a68695ce523d806d106eb054bbafcaea2939da1325c4fb50507d593aee3dd20a5b9187c5e88b3fc9c2b5fc01e450bf6d91d1bc7e701f2d18df21bf8837998a327738c7b7722272e0e70d54cef601550153e89da05e2ab62d24aa6495e2245bc036f84d1265fe57635ac3b2509560939b3514cfe0d2f5ffcf6e5425db12ac636d3c7030389e4ccbedcbd7da4fd1738187795821290425f9ea5d9f85f60b921e61156db9aa1a1a539b296ea7c2e1ce9df27f5fe7fe91293f05e3cb605d15e4d66c531485de659291480f10c68750745f725bba1d0fb3792f64f5ab2f235ea290f81d0e9c49b55c91d39e495171dd993cca24d7e21208dc85128a61fc32ea2157141652b5a904287b6115df2b2302d69f734516c3413155f3e25e99e2d6ebeb85234eba65c1cddbe383f0f37f6b274abaa74fc3180f4b4a74a2ad37038889550934622f6f483107074cc6520630f741ce20c0e4971651d6dbc610c7aee83b8f55213a5a85eb0b72c3844047f265bc7a1a2784d10e4f425143b56e77307e28f19a7e7149df59a38dcc41875a862c36aade4730df11173545ecfbdafa4e56af50a6bea30dbe272628c4560ee0dc02e0dea0484b5ab44729f8a0f82c0717601b7a842971551014fe6e7221a632e48d6d7d2958e81b6211121d27523b3aeb36166048806f2874154228924181e11c4ecf709d67aa253a44497cc6ae1eca00819cddfc9bf9a53077936be4a2130c254b7967bd16cfe63b53d9866d0a9b54fb0e8a7218c255c520d420ffcb85226d0753e73ae74d07c530028610fbca4d32e74fdcd095d02a84b21e9becff0c51d33a229e9b27ffb0bcc788482e4fa1b3d66594b2363474a656b2e954d243ec34c11b699705797f5a146eaab007c213029981e1a28e8476b90b96f7db811b056a6a7915cfe75e2c4f2ec75079d0a5ac6347e2bec6c0dc567ff7968339a726d3092fc944580552faa740ae1d51dc56e8007375be263b9fd740996d1946805bfabcde58acc0ae15b93d4135e30afe3ee175cb0ef639d0ea65c81854015ddd0af2291689bca997e7c1d99052793b3c13f0e006d728e0eed1b2d463d0555f9c17f01cc68ce24f3ad07cfae1a4c1a0d370c86e73693a3050d3112b55c5a0e66bcf7c1b62dc4b82eae4747d73d4d34d5064c031519066f67733045ba30ee55e18e39a139fa3c4e9199ab9a70d96bbfb20fe8a6d4d052544f5af3e526666ccb0c3906481dff9686a51aa7a8b6a98e43f48b4a285169807541c29c83ac0d63b86948ab3068105a92c5d36d43ad21be2425024c93d6ef3026ad81cc15cbe76f957811d6cfe6978daff94e09c3a170ee85a156e369bb71804d4ad268c542c2cb98f1561962ff3d83238406323a84fe8af6b8936c972ec5d809d5b2c87031c9bd970d640c63bfcf845a118181b45d93089474ad9e5ec786c380c50558bcf98b878a2009222d0bd09b80681361d0d88abfa4dff9544f83326a75cd46342d10bf6a33013f416fa5201d6b859a8bc2d8e66d7bd0dbd0bb70698f2accb6b539cf18917fbe091e5a24e9f60d694dedd2a96e8586125c60264142040a2e6b4945fd7842a26dfc3129792997f8d020c7f248dba40531ecd2cb97cee84da8314ff3fab3eb8e40bced60f8d6a7f423b69318e6ac25d4b825ed7e5edd0e27ac12d6058edf1b7cf425c769d7790919e91d8cc7e2446be27a623d14264fd2a10340987f2ed0163ba9d02a3f8b620af0a4d2c81a1c3d7dcc051286330b1d57bc0bdb71d2f3f46c431868fa034eb012c68fc877cb5ca6c14aa1683a30d1dbbbe057d6f9712dc5d69316d1de315b5bdc43d5e4afccb7db50a54f8e89395467b2ff4a65877b67aa2f17ba9fa512350e0e756728ea18407ee00a16ef46ae209483ba7a3bf71d5818fc4b5c8ffe72140c3428a948d44e4ee6ac5530ed072ec7a767f4ea846b341faeb47f57915e3c8f1f66f7a7362af76049924fd96a8318500cdcad0601338d4e92da0ab239be98e96c8706ebff79172137e8c0848ccff27a0f361f77540c5d49c5021752f1c727689b2bafb147bd56defa8ecd7cdcccac4a39dd5874ecf2a33e4f1f782b80ba4b03ccc687cbaae95f18bd240ab6f4087ba90bd75cc3416664277fe5d704b052ee4355b01d8f692f1f04a2289145650cc0f27ee6c0584bee33b2cc4c495c782810c85f8bb52e61aa9af21c4b77f9fa4b89a2dba917264eb9f29f836441fb58e18866e78b47057c900c79f2a0d7ab1736c3e80d17e4283f991be1fe05fd7e1342f67da4eea54bfbe044a050bd70e8eaeec608d79cf93e01f5cdd9d670cc5e630a12ff5327d0084c5543cecf539468abd0d16ef985343deb534ba6ca7ca37f1ada38387d78524781d41c63ac1ebad692e52ef2789743bd9139482fc2a7a6c992d6e4dc700c9f5d6526a5bbcf5b1473c32818696c955a0b0a9dbadf21acecc9adf645c5e222ad794cdf4b7ed2444164fe4c5219ec0a7eb90baed403043b64b79465014250f00b13665a4d005d44adfcf22eb1cb517d5c20657ebdfe101f1cb71cced44a0b98cfedd513c0782ebec6bb899c5e50ab008f05c6e0d97b0847f5582439c6fbbddc5df9fe68c6200d4f7964719bfca5bea39722875f83f0e635b940952a85740ad397bc9ffaf5c2a348b755a85424d22985468c357d1e1a86f3c452b72c3a21d52b72eddddebd993a7bc05ae79c6e7aa25262359fc7ccededd70e240dce15ef7d6eec5d27f393ca96c48382c5c8facccc37f28e3e9f2c355fe76b4ad515093b3691308c81ef883edc17e893d0b1ae8c4474e723c8993654604ea2b5c1ffb727d0644c802601fdf4616176575cc65652928f28beacca1dee58ed068b138725ce90f2f67e3212d01bfbc4bfe17796ef007870675f1fb3a4020264a7afb419974cf6f13e93edbc5da87ced9bf983b9090e27541dbce088421f8796da4775d4902b2722cc39ef15f9869f12fee9509fd2c2d31a9f9f5052804615e45429c76fdf4255cc33004196543619778b1e4d661d046acb2bd39ac3adc20efc952f8dc92c745deeb3b826d07f2a65fefdce9e40df15cafc41c197d06e30fd8c77194c6ff35605f967eed59c31cf8ec572156ad1a6130751971bf633d591c08442a6d5cc369fbb6173fe6e834f8ce2d0c05629ab1dd0d82fcf32825fc95eafa8664b9de3b0f1b4148d33890c5805a7f4a75e96a36ea0ad04a227d371b8c86114e0912184fed3caf4c6ba92b92dc9fd13c3997032899e55e4b097a77a4292c3928e52c86c735f0d17cdcc85c56f736d26d86ac7cc8303e240fc3931988b7f4559b749ffc97eeb20c4cd6a8c2c072463d8fbd883d7ee8c35a5ebd7e8c3290dc203da935e61e223c2de2df5f99d62dd9ab3d14648793b20cfa1fc987eff847455362e97ed11a0189d3aa900f76b4bcc70c5a82ebbec29c784ece48a99005b87625b5711f8653c9ce228f6302a6df06b8062400028008000180fffffffc08000180fffffffc08000180fffffffe08000180000000009b000100b7cadc670b723877263ccf30c4b1dad013fe8f3da6ff34dd80c6e6354265a1cfb45fa45dca628b51cac92ec1f9951ca2b773c4f9cf497b65a1c41bb0bcd730559befe8da1685ea8be796db03f966142872fa91eaabc266f1466f8b7c3f43b9665cc29dfb20fecaa6a7ee453682ec1224b3f8cfce0cbb10400561c117a59837a349a1a60016a641f6fa9968f8f2c141deab8ef14c281f550008000340000000030c010080e500064080161e12fa240f62fc76cbae78989397ad3635b0d2e035c0740fa4126c3a09296fa9a6144a7b1db380fa781c84692baa4064fd490b858848b6b8e3c9d5d85a29fb69f7066537d5ce4b07c1272a8fab4ae05757fa767b4276efc4ee8ba1489eaa703c56e85c1d8418997ff5e0ca57d7f60e68041894fbddb52645cbc152fb93d05791b5ecb8386c2cf9a3db6b5580df1090cd3dfab6d7290bc0d1c8fbbe198a94bd16e71be8843cc5a35e00ec8e392408e58c710f7c442c568bcdc5127b492bdc1c1c4595e735dd92f91681a56a4a3f3f7ee01d16cd288ff29e716311416336254100000008000340000000010900090073797a32000000000900090073797a3100000000d40400800c00054000000000000000080c00044000000000000000093400078011000100666c6f775f6f66666c6f6164000000001c0002800900010073797a32000000000900010073797a3100000000100007800b00010065787468647200000c010280240002800900020073797a320000000008000340000000030900020073797a3100000000e4000100843752d6581eb25137a0446712ecb2d9e6343ddfef3e923635314d562196f1c807e2704de7bb0e59e37037ddae14d713a3e88c39d5bf1789b538956550ac121760b73dc73b6394bddcc33f479d384bdcaa65810f0d11efa39276e367fbc98820930fc00cf6680fdabda237b4458b8ca6edfc0a128ccd3266e230a9d03ae77fd1e7b2fe0b54f2ac9e4722bd04384d2a987b6eedaba35a499467dd521f0057fd26db25dbfa96772d5824aeb314c066eddbff924b7555073be085c7f3ce8c30c88c517ba56565bc7444082b6ffed4cb91c2d4b6587e15baa1f945a0dcff06f59107440302808b0001005de62dae3c73ec07c0e93250b13215f837ada712dc69ac8f7b5d759535529f8f51b88c60c605949a4f4c24cc2beacb38f19d489d84ba1cf5b1ef9351fe703f5abcffc8aa3c432495f0485fd893c30f1b7742ac5ee3992c3043f1b888ec610f6190ce48b2774f358689cffd8bbf4d870e1f9ff432c257eddc71d3fc9d90eb302153a352b1e53d1800700002800900020073797a32000000000900020073797a300000000008000340000000030900020073797a31000000000900020073797a30000000000900020073797a310000000008000180fffffffc0900020073797a30000000000900020073797a310000000008000340000000043800028008000180fffffffd0900020073797a310000000008000340000000040800034000000002080003400000000308000340000000013000028008000340000000030800034000000003080003400000000208000340000000010900020073797a3000000000dc000100604ce619f46ddd64849e25b754b103689e64e5be0c76b26885f4c965dab233b1cfde9a2937afa10bdea7824fc25f92ef200c52ce19f794cccbaf6533d2c2398742ea951bb9c7ae660e159a452c4b6972475af45d47082e0487f06fe144bcf7db51ad730634ef471b1b5c44ed3ac45d6ed1861d52f247f1b487bf6c0fe87e91586dd9be0806f56b25e1e86871225ec9fdfb242cd763672b3f75a37481fce7d382def86aa3ad63c13962912884a9014c4ba33b0a895ecdd90f4d52380d33c0ae9ac675746a21f527015e9fbbb2967a1cd8d2a877363a8d63d288000100d7323239cbfda36037ee408677d462381b80781bb92df4c9153fa76afa080bc34344d80b6e6b240a3de151ee100c361f7f3abe8efa228ce1759d4eb7efd7ea69a93b164677c128b8052ec6fb89ffb7794284695c3f602ecb49f1580274ad3a8d98838d68aad78936ec46bb5f0164a3121df6860b94d25ede5d9eae6ded2d083b66e1b5f476000100f53f795c42541e87aa995feb556a75d1eb19e7033bc2d37d0ec6b9e0a9e0246288845cfdfb19a0e5fcc08aa3461f1cc5b1cd3142a4b6f70f1a45c84d792e195c97cc32f8e472e8d4e3cecca2ac0143b9e892f029a2cf34991d1983ebf90347878cb9a840bb2432bed0afe85a163ae0a65af500000c000540000000000000004f0c00054000000000000000020c00054000000000000000024401008040010a80540002800900020073797a30000000000900020073797a30000000000900020073797a320000000008000180fffffffc080003400000000208000180fffffffd08000180000000000900020073797a31000000003d0001001e91acd47c511def5df94967c897137e5fae60f1a3816ba37165c71855e35d80ea7e426d2489403c43e13dd42541df0ba405469ab2c54da9dc00000020000280080003400000000208000180fffffffc0900020073797a320000000016000100eeb72fbf34a0e2cf92db436bf4852bda4c1200006e0001000ea21056a832a14d07ae77b5db4e398157d50191f41d5e162d802aee003e05203a6b7633eab8cf46f8c890bf4d7da0978eb8ef4f815fc28ec26726d60edd2dd9a5dc814982a6ecdd88b7ec93ee0c07df88a7aee0800bd16891ac9257aef6464469f45be5f167bf5f672f0000100000800c000540000000000000000160000000060a010300000000000000000500000808000a40000000000c00034000000000000000050c000580080001400000001d08000a4000000003140005800800014000000002080002400000000308000b40000000010800094000000003d8010000090a010800000000000000000a0000000c00104000000000000000050c0010400000000000000005080003400000005020011280140001800e000100696d6d656469617465000000200001800c000100636f756e74657200100002800c000140fffffffffffff000e800018008000100636d7000dc00028008000140000000127c0003803800028008000180fffffffe08000340000000020900020073797a3000000000080003400000000308000180fffffffb080003400000000240000280080003400000000108000180ffffffff0900020073797a31000000000800034000000004080003400000000208000180ffffffff0800034000000004540003804f00010081a5f7b0db2c5b6d9512eda57664aad107be0959263ef93678e6e83342604e81e8861a7366d2c1c93c9677de22e15b3e77e0a893899eb508ad60acf25304475f2f0ad2b6f84a41020c3c650008000540000000347c001280340001800b0001006c6f6f6b7570000024000280080002400000000e080003400000000f0800034000000000080004400000000310000180090001007866726d0000000034002400028008000540000000010c0001400000000000000fff0c0001400000000000000004140000001100010000000000000000000700000a0000000000000000000000000000c3585c50f643feb3ceb5e26df845f3d4c1668719030871a6e3e7c461420c6fe187d9c30bafb32c8edadd113ce47fb5b6d86c977282651393237230667176876586c730e9d7bcb8"], 0x5dd4}, 0x1, 0x0, 0x0, 0x4004800}, 0xc804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005580)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r4, {0xc}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x35, 0x1, 0x3}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) listen(0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000e26100"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000380)) socket(0x6, 0x2, 0xc47) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 3.464605201s ago: executing program 1 (id=2074): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 7) 3.289117181s ago: executing program 2 (id=2076): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x408000, 0x0) (async) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xce14257bd7c804cd}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x18c, r0, 0x4, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4040}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xfc, r0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5e}, {0x6, 0x11, 0x7ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xef}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x696}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x6}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20044008}, 0x40080) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x1, 0x0, r2, 0x4, '\x00', r3, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@mcast1, 0x44, r3}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)="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", 0x1000, 0x1, &(0x7f0000001640)={0xa, 0x4e23, 0x81, @mcast1, 0x3}, 0x1c) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000016c0), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001700)=0x0) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000001a80)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001740)={0x2dc, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0xb4, 0x19, "33712fc2fb39fd120619be2e52ab919e380e3bc31a104415385677d0b330287144098b84ae8c51bf88b6605d61c85054069f82f5cbba1e84905e65a2def7a51a70a6c7803bf82254d14a62275f6a053143f7eb1e6f8ac1302b4ce97bfe11a9077ec758faa061b9d03c4a3582c9d08375cd203c44c779ddff0ea457dab2cc1205431abea9ba32526ea59b3a4e201f193a94e86047d80fbbcaa3839746337c7770f0e4c6f6bf5fc137770de00a9b3328f0"}, @NFC_ATTR_SE_APDU={0xc8, 0x19, "dda5189c4b06e98cc71cece274e805c80c14e98b0c708d18d6b625a091f065ba68507dc8e179f19c835ed25d60e5c4b8793cdf8611142f71cd9de1974191ea1e92cf61aa7226da95a901f1b59b1247fb5701835009d03d409037907ea2608f3d104983f9ada15dffa63194cf7d8971ac7ea5c04642dfd8c7606faac0e3f0b4344a5036d907130f2b8cae9635b29c98879ca5fce51d2ed4d13a5406a8d0f04b88b5f5309d49155822eb084644504d8556440026da199121cc2eb7097f324cab9e2418572b"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_SE_APDU={0x8d, 0x19, "ce2c5d44da0b9401a6531565367556113789908ffa8997bafe6e0fc535fb3eae0cc7f32795154530ac59058cff0d012afee4226bd6bc132659d43739c8ad44ff2ea1e63ecc057abc164f1022b774a5a36bc0f2134bd45644056ff9ece1ef93d4a4ec9444e12e1f475a4da4e10c4a1ea84972e9b5236c72f9c88dcce615dea20cc3ddf59e6c177689d7"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_APDU={0x1b, 0x19, "eecfa16ad16189d16639babeced3c532c39c2897cb5efe"}, @NFC_ATTR_SE_APDU={0x85, 0x19, "01589fe454328970816dc6356acc2a489bbc0feecc9bc1eac0231781076b5ec96b7c579daacdc14a3e72c09504e1d9fc5daccfb789e60cad0af2c33c8cc76f58ffcf02a7c2e0541c6c34c9bbb2930a97bab77aaaa5bdca08be4a19d0a73db61f7406587e7da464bf6db43caf0bd8ea495f37d3cd3cc73e933b021c7bf2d441d026"}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4054}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c00), r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x60, r8, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, 0xfffffffffffffffc, 0xc8d0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x5c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x5}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x5, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000025c0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002580)={&(0x7f0000001f40)={0x624, r9, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa6, 0xfa, "bef8e68e27958d0a2ca8cb47f203cce68782b587866fd4ec79a940739c801a2f464b6a824eb91fb59acbef3a1ec7d733c76f4fafff53b54a28ca0eccfa56c3b87c874ca36b6ccf8474e8c7dc2516c378801cd7deea8760325faa5797d035e4b1fec0e6fb8f56a6e5b01d904f1fc339cc9d47903894271e58244199bda330bf4bb0a6b9b9c12ad60e46979bc57ab147e9a03f417010d7d533596a4afbe803f5cebc91"}, @NL80211_ATTR_FILS_ERP_RRK={0x3e, 0xfc, "11b30fd3f4a39837db91f266f801694209398452b6a42844f20b4c2eab824c0497e71f4fde1090fa9eed232f9c6ec608e48d9e543091cad4f647"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '+'}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xf83e}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "ab987452c7af3c4e9140"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "228f41068bccb787c0db"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x5d, 0xfc, "270114340d451bdec1f0759a6ad4c03c76249d8b9b9e953f2a57133ce3674b53bb00f58783e1c2ec1ddda57454e7e5f33a07b41d4902d6c789574b76f8fe2656013e424ef0062806be440aa60f95f1605b545762b922324819"}, @NL80211_ATTR_FILS_ERP_REALM={0x96, 0xfa, "9cd3f9f314e59b2316cff2882f1bb749191c5b7b4e1f54807d19134d72fd6698e6ccd9e763df7dc135d84bd2c6600d59a722595df7ee46cd4d9a63ca9f2ee7a43ad57a50e181c064099ce8c34d5d42100cadf37f101f2d0eea472784db48394105c268e6190aa029440d86f40bb9506accc4b335fa5b9100b7fc77f360859f24fb6a2fb4ab093f9faade9dad2b27ca9b3266"}, @NL80211_ATTR_FILS_ERP_RRK={0x39, 0xfc, "9c1457a3f2a929b7356b23e13feb84283455a19788f18642ebe1ebc1a73a2934eea6990d2bd40499291ceb3eef9c4b593d241dfaee"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xe2, 0xfc, "c94f1798d7883fc11713e0cb82619c412876aba10f7c5b175c8080dcde87ae163b6ab068795ac425d656e15ce3aa0e761753ed218337431b7a8cc1e14bd24da95e0d6531e2c9484ce8973e95bd87c74bd3933d485a3e2a11eb7d8370c4b76148953e2719cda980b7785fce3fa3b1af03dc9f635d9cb926046ccb2f35726aa16e3aa501fec7401983990de9c9c56e1d561f66c4a9afc1d9cbc4e8788376d340bc4c630a7440f68aead975e27ab91e1a61356c440f8bf01a8c986131166162311eed137924fd9441d56f19d6e76112b7d8a39f3754ecf36833ec4716da6507"}, @NL80211_ATTR_FILS_ERP_RRK={0xca, 0xfc, "898632615ce7cefe2163cf1b1bb354c13301e8a0177e9914090bc20fa3060cae6333c89262c9429a757168178dc815d01eab2d285239a322d10d2e54c8e852cc7452e1b8cba7d9a7ddf2bcbc5c56487258eef42ef9969257818035aa14ad93177896742782c6e07ce24059d08a21fa830f883e9d34cd8b799c71a4114da95bc79fa6b4220f11d484af0705514fbd44e55dd7508f4c69c02a94fa1469250ee87dd9e000ec55ff68022f657e86095dbbd0f14f6f343ae227052541bd3cab9fe4ddbdfd34d6325d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xf}, @NL80211_ATTR_FILS_ERP_RRK={0x36, 0xfc, "1c04d3171509a702b9df73559048743c9b0691b243b2de511c150dc1e29f18802583dae123d705b2897f7c70ceb06c2e4dd9"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "1f4d7d91ebb2c6b393b2"}, @NL80211_ATTR_FILS_ERP_REALM={0x6e, 0xfa, "513927616d403b790344beb6cc4f43b1ea4c115fef5dfefca8cf020f7068c2642a28c19dd651096f0e45b24c19d9f01da76d0bdbd23f0d92bb929f99f6e59045ee0c651ac83392c0ae42c070d1f56eeab8347384eba26dff0254b91f2320a2b9d10b4f4956b014980ddb"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "43fbbe11"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x44, 0xfa, "bbff26be4022fd26e62ec5a3d4a2712cbd13306bb51cfc7a7917e0b3d57c0fdd946f8e9e9a399b57cc7978e48cec8c90d0e8e73e1ce70f1f54b5cd93fcbea6cc"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x40}, @NL80211_ATTR_FILS_ERP_RRK={0xf5, 0xfc, "a90b6056999a5afd14a3710d7133207d57e050e35526447bac0149ebf2f737423dca5b3941553c9298e5b1c4ad83086d0052e65516d7686b6094416db1cdb79297f22bf64153b3f9ce7152db6575dca3dfc868ae7e8de7cf0933e65dbb86dab30fa017501d90f58a1e68e4d515d65a94e9eab7a62e9f6d37b90d0cb41e62bab4a93a5278f0f4063147cca7c9b905cf14d8011d4eebfd06e7b5e4087473bcd1aceb3673d77d39779c8f54366a1b098d7bb5dac5bebe24b489b87d36cba4c8197a9703717fad3451f7bd788546240a4c86d9512aa90229437f415993c2f42f4d99fe8ef39d26d9d7d02458f2155531feda39"}]]}, 0x624}, 0x1, 0x0, 0x0, 0x48840}, 0x4008000) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002640), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000002780)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002740)={&(0x7f0000002680)={0xa4, r11, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crypt_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0xa4}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f00000027c0)={{{@in=@remote, @in=@multicast2, 0x4e24, 0xfff, 0x4e22, 0x0, 0x2, 0x30, 0x20, 0x52, r3, 0xee01}, {0x8, 0xf241, 0x9, 0x3, 0x4, 0xff, 0xfffffffffffffffb, 0x1}, {0x8, 0xd, 0x6, 0x38000000000000}, 0x4, 0x6e6bbb, 0x1, 0x0, 0x1, 0x3}, {{@in=@local, 0x4d6, 0x2b}, 0xa, @in6=@loopback, 0x3502, 0x2, 0x0, 0x0, 0xfff, 0x4, 0x7}}, 0xe8) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002900), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002940)={0x8c, r13, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4001}, 0x400d0) (async, rerun: 32) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r14, 0x84, 0x10, &(0x7f0000002b00)=@sack_info={0x0, 0x80000001, 0x10001}, 0xc) 3.216510258s ago: executing program 1 (id=2077): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) 3.096566576s ago: executing program 1 (id=2080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 3.095663863s ago: executing program 2 (id=2081): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x19}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x19}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) read(r1, &(0x7f0000000400)=""/209, 0xd1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000900)=""/224, 0xe0, 0x40, &(0x7f0000000300)={0xa, 0x4e23, 0x1ff, @mcast1, 0x7d36}, 0x1c) (async) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000900)=""/224, 0xe0, 0x40, &(0x7f0000000300)={0xa, 0x4e23, 0x1ff, @mcast1, 0x7d36}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) (async) ioctl$TUNSETTXFILTER(r4, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r6, 0x29, 0xd3, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) (async) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x31, &(0x7f0000000640)=r7, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x31, &(0x7f0000000100), 0x4) unshare(0x20040600) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0x17, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf48}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.835975783s ago: executing program 2 (id=2082): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x800, 0x3, 0x3, 0x6fc, 0x1}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) 2.815694129s ago: executing program 4 (id=2083): syz_emit_ethernet(0x1d5, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed04", 0x19f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "0000050000000000260004"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x0, 0xd, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba"}]}}}}}}, 0x0) (async) syz_emit_ethernet(0x1d5, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed04", 0x19f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "0000050000000000260004"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x0, 0xd, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba"}]}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1, 0x0, 0x1b}, 0x40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.703888886s ago: executing program 1 (id=2084): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)="89e7ee2c21fe62a3b47380c988ca4b5ed95f5ee4", 0x14}], 0x1) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0xffffffffffffff20, 0x200c0045, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0), 0x4) 2.537786775s ago: executing program 4 (id=2085): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4d, 0x6, 0x5, 0x2, 0xfc, 0x4, 0x0, 0x3, 0x94, 0x3f, [0x629, 0x5, 0x4, 0x513, 0xba7, 0x7, 0x800, 0xf7], [0x7, 0xffffff4e, 0xfffffffa, 0x7, 0x8]}}) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'vlan1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f00000009c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000cc0)={'ip6tnl0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x52, 0x9, 0x28, @ipv4={'\x00', '\xff\xff', @loopback}, @private0, 0x40, 0x10, 0xffffff42, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d80)={'ip6tnl0\x00', &(0x7f0000000d00)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0xc, 0x3ba6, 0x22, @private0, @loopback, 0x1, 0x20, 0x7fffffff, 0x2}}) (async, rerun: 32) r10 = socket(0x10, 0x3, 0x0) (rerun: 32) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffffd, 0x2, @TCA_ETF_PARMS={0x10}}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}]}, 0x5c}}, 0x0) (async) r13 = socket(0x10, 0x803, 0x0) (async) r14 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r15, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) (async) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r17, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) (async, rerun: 32) r21 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, r21, 0x809, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r20}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r19}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) (async, rerun: 64) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000000c0), 0xc, &(0x7f0000001a80)={&(0x7f0000001b00)=ANY=[@ANYBLOB="900c0000", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="780102804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040006000d0a85070000050045007f000000ff010908050000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400050000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000001000008000600", @ANYRES32=0x0, @ANYBLOB="080001fd2b2d4801c49f2292163c023f333072bb39fba138fece108cd4947c2dd72dc4ba3b1b1d9c5bd3bdd52c41aa49131028972402154603d35fabd19a29da581e27b00844f553fecabe745c61f5559c915c06727846c57b3190342d17a5a7d2774c3ccd2fecc4ecf95a32e8a8e8db7802f742f26113b1ade6be33807f82e859a894219c8c619d57b53a4f69c8309192", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000a00000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="fc000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004002a9a000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="bc0102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400f000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="8c010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=r8, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000024000400c0010303030000000d000fb5030000000500024000080000feff09f80002000008000100", @ANYRES32=r12, @ANYBLOB="7c00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r15, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=r19, @ANYBLOB="e400028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400150a000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004008040000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040005000000"], 0xc90}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async, rerun: 64) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000080)={r1}) 2.403692458s ago: executing program 3 (id=2086): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=ANY=[], 0x18}}], 0x1, 0x0) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0164e5f9f92dd04e74c58adf2f6400000000000000000067004000085170003c0000", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000800c400010000000800c30007000000"], 0x40}}, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 2.208930176s ago: executing program 4 (id=2087): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x39cf2000) (async) r0 = socket$rds(0x15, 0x5, 0x0) accept4(r0, 0x0, &(0x7f0000000100), 0x80000) (async) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000200)=""/62, 0x3e}, &(0x7f0000000240), 0x1}}], 0x30}, 0x0) (rerun: 32) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="a6da00000f14000027bd7000fddbdf2508000300020000000800030003000000080001000000000008000300030000000a00450069706f696200000009004500756d6164000000000d0045006f70615f766e6963000000001100450069625f6d756c74696361737400000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40884}, 0x4000) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 2.088361741s ago: executing program 4 (id=2088): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000200000200000008000300", @ANYRES32=r4], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x54, r3, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xfd}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040854}, 0x50040) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x2, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xe, 0x8, 0x5}, {0x3, 0x1, 0x4}}}]}]}]}}]}, 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f00000003c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x1000) write$tcp_mem(r9, &(0x7f00000003c0)={0x2, 0x20, 0xfffffffffffffffe, 0x20, 0x8}, 0x48) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.850210448s ago: executing program 0 (id=2089): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x2, [{0xbff, 0x4}, {0x400, 0x5}]}}) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xffffff7f, @remote}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.62638928s ago: executing program 2 (id=2090): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_FAMILY={0x5, 0xd, 0x23}, @GTPA_O_TEI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@get={0x100, 0x13, 0x400, 0x70bd29, 0x25dfdbfc, {{'drbg_nopr_hmac_sha512\x00'}}, [{0x8, 0x1, 0x5}, {0x8, 0x1, 0xbc14}, {0x8, 0x1, 0x80000001}, {0x8, 0x1, 0xffffff9f}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.516378791s ago: executing program 2 (id=2091): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0xfcfd}]}, @TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x98}}, 0x0) r5 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=@deltclass={0x180, 0x29, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff1}, {0x4, 0x9}, {0xfff3, 0x8}}, [@c_atm={{0x8}, {0x6c, 0x2, [@TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0xf, 0x3, "4e01515c9edf9929921764"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0xfff3}}, @TCA_ATM_HDR={0x28, 0x3, "c3d126a19e226b39d50882528d403f49e61cf15a748112f118326b541bece5020688e785"}, @TCA_ATM_HDR={0x6, 0x3, "7cbe"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0x2}}, @TCA_ATM_HDR={0xf, 0x3, "ad4201e232b83841de7634"}]}}, @c_atm={{0x8}, {0xe0, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0xf}}, @TCA_ATM_HDR={0x29, 0x3, "32b0aa56aea568e204aaf8064dcd73ceabfaf3d2711ca2886c5bbbb321fce31cb53b24e711"}, @TCA_ATM_HDR={0x35, 0x3, "3339a0b8f2b8561a23ab2de965f45d4b04171117174f2509c746eef9c2e7579472373bb4822a5c706d796919b31a2cc7be"}, @TCA_ATM_HDR={0x22, 0x3, "1169d9df2a482efa2f5e1e2b3868f8d5091cee07fda3e02ec1b6a392ed67"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0x8}}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x13, 0x3, "a4156a2635f8a6245313f10021d34b"}, @TCA_ATM_HDR={0x16, 0x3, "860c273641f45647509fb300c024dff80afb"}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000010}, 0x841) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000091f00"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000002400128009000100626f6e6400000000140002800500010002000000060018007f000000"], 0x44}}, 0x0) listen(r5, 0xdcc) 688.388054ms ago: executing program 3 (id=2092): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000001", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000500140001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 682.672534ms ago: executing program 0 (id=2093): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000802}, 0x4044010) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x7, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 556.477503ms ago: executing program 1 (id=2094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 555.875783ms ago: executing program 2 (id=2095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7e89c350f9320f2b96f54f1e19a136b67514574ba034fafd0267dff3e2b2775a93e72900d672fc9cbaa7ace727901a57781ed24e79af9bba940c1fb2c3f102950a060fabb74026786443513eaaede948d09259ae9b4d9b1908ea39fa8857e999b48b651651bf63d0b4ac70aa", @ANYBLOB="230b15b7082195639d4a70baeee73f0b1c9f064296e2071b000000000000", @ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4008814}, 0x40000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) close(r3) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec9700019811"], 0xfdef) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket(0x10, 0x3, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x7fff, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0xb, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x2, 0x44b0, 0x3, 0xad3, 0x7, 0x2}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x2000000000, 0x8, 0xff, 0x5, 0xfffffffffffeffff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x40400c1) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 555.362561ms ago: executing program 0 (id=2096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) 544.263671ms ago: executing program 4 (id=2097): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0x11}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) 509.211063ms ago: executing program 3 (id=2098): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) r1 = socket(0x15, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0xc8, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x1d}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x94, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x84, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x80, 0x6, "57690487d2bd9054b4f53506601db75f324ae01d270b756422e2911bdb5c29c1f659b0e4e207b77c4eb7f58506382fdf50dfdd6d4064564d2b96e26bd7f0281f855fe005f4888fd03762f6c81187dcebe687fd41e3e89d453a65b4cbb4bed5c1bdb40c9506b93bb213084dcded41375a13ab3f17dc0be96a45b6a384"}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) accept4$alg(r1, 0x0, 0x0, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 384.554789ms ago: executing program 0 (id=2099): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000006801088054000780080006006e000000080005000000000008000600000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000500946fa5"], 0x1a8}, 0x1, 0x0, 0x300000000000000, 0x20000000}, 0x0) 338.878705ms ago: executing program 4 (id=2100): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x800, 0x3, 0x3, 0x6fc, 0x1}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) 260.802252ms ago: executing program 3 (id=2101): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3d9f26bd7000fcdbdf253200000008000300", @ANYRES32=0x0, @ANYBLOB="000100008000"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x20000400) r2 = socket(0x10, 0x800, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x1, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa7eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 214.689849ms ago: executing program 0 (id=2102): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x12}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/229, 0xe5}, {&(0x7f0000004100)=""/4104, 0x1008}, {&(0x7f0000000340)=""/240, 0xf0}], 0xa}, 0x101}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0, 0x1a}, 0x409}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=""/130, 0x82}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4097, 0x1001}, {&(0x7f0000002a40)=""/4075, 0xfe0}, {&(0x7f00000004c0)=""/106, 0x6a}, {&(0x7f0000000100)=""/83, 0x53}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}], 0x8, 0x40010020, 0x0) 211.53904ms ago: executing program 1 (id=2103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006e0000009500000000000000d127464e793cb0d52691dc5269b0a41b65c87e3f277bbece06b54fa12838d5ab6b3264f81886dea4ce50f4e7b3e3f17747"], &(0x7f0000001600)='syzkaller\x00'}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x40040, 0x4840}}, 0x20}, 0x1, 0x2}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c0000001e00040026bd7000fddbdf25fe8000000000000000000000000000aa000004d20800ff000000000000000000000000000000000101010000000000000c001535000200000008344732628000ae7a0367b93196a8451c0fec79000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b40000000000000061117c0000000000060000f7000000009500000c80000000b0508294740bbdb52b811cad8b47a72ae64d5e9c193ddd6452f9087a994b041af8f6541381ecf5dc158c3dd7bffbb5e992cdbc34ca674949dfbe4c470e649a753801209d79f1d02e91a8db010b07e9d1be272b72019cae8f35eebf8a488cc6d1fcdc752393abdb0aaa77d544c4610bcb07c7157d1fc252bc655c0c415c0d8d6887a164af54930b6919d15462b2941be445d96b33cfe13b7621c0ac55331303c03916affe8d06bc15d7fc60908ee8e2c4647dc89efb"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000880)=[{{0x4, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x0, 0x0, 0x1}}], 0x18) bind$can_raw(r7, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xb, 0xffff}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r6, r5, 0x25, 0xe, @void}, 0x10) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000240), 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYRESDEC=r5, @ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="43baccc06c7d0f4afd9f96b17d6f22a3f1a486a01820de17a053293d90c6344ef82546a4bcc4367fd1868ec6e89b21d13c7df21b80e517aa44fb59b19d0c7ea2fd931fb70e20f49a7f643316047048e4c171768f4e56146ffbcafa2cc8524a0952aaaf25df45ced573b6819904b4db72f76814df1918ec045e2b05632cff728a42e4d09e847bd4159619f96eebd04644537078d6a205e78dd5d34b60de98982a2114d8e2bd460f20c3c283b787f1c42129b0b0fcfc28", @ANYRES8=r5, @ANYBLOB="946400be3ad7e74ba04c39bb4f8273967daf76fc710833da87671a2127c08f7ee2e2cfc8b92a1f8f7c2ecbe882127af9d625bd617bf90f8c77aca4cec58864214494bf98b5cf3bdc465e3281a3c86d38833ded1fd614a08ede10ae9a571f3c9eb1f7a65fc7063796f092a8a9bc879a17722f2a8196849d37aae484b19881ae1afcaeeea7407d0cc53a8372759b5707cf8995035497d908bbf1d6a0d95a1fb12185370f668049b89e4913d2ad7270fe6fb971912245211437a6f6510d1c15210e550308476ff04a21b06b392368a11e59dd6a44c8eed55a67adca30f060b3", @ANYRES64=r6, @ANYBLOB="1e8c96efc5fc3805e70eaecf76a2028863dee1f447d98ad68423102220ee9925d403aa4b90c43f89aa22f95bb12a775f01ea55ce43e11f00000000000000000000601cf47212b37fee75d1f9e2d26f89c95c163b77336e5e1a4181312494e076"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x55, 0x10, 0x0, 0x0, 0x0, 0x0, 0x63}, 0x94) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000200)={0x6, 0x22, 0xffff7fff, 0x7ff, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r10, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r10, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x8c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 539.026µs ago: executing program 0 (id=2104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f000000d2c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f000000d3c0)={0x0, 0x0, &(0x7f000000d380)={&(0x7f000000d300)={0x38, r1, 0x125, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x6, 0x400, 0xd, 0xffff, 0x5, 0x1, 0xc5]}}]}]}]}, 0x38}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 0s ago: executing program 3 (id=2105): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40100002}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x1406, 0x300, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x10040001) kernel console output (not intermixed with test programs): _pfx_netlink_rcv_skb+0x10/0x10 [ 85.752971][ T6318] ? down_read+0x1ad/0x2e0 [ 85.752997][ T6318] genl_rcv+0x28/0x40 [ 85.753019][ T6318] netlink_unicast+0x82c/0x9e0 [ 85.753057][ T6318] ? __pfx_netlink_unicast+0x10/0x10 [ 85.753086][ T6318] ? netlink_sendmsg+0x642/0xb30 [ 85.753104][ T6318] ? skb_put+0x11b/0x210 [ 85.753129][ T6318] netlink_sendmsg+0x805/0xb30 [ 85.753161][ T6318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.753185][ T6318] ? aa_sock_msg_perm+0xf1/0x1d0 [ 85.753206][ T6318] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 85.753227][ T6318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.753248][ T6318] __sock_sendmsg+0x21c/0x270 [ 85.753282][ T6318] ____sys_sendmsg+0x505/0x830 [ 85.753313][ T6318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.753347][ T6318] ? import_iovec+0x74/0xa0 [ 85.753376][ T6318] ___sys_sendmsg+0x21f/0x2a0 [ 85.753402][ T6318] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.753468][ T6318] ? __fget_files+0x2a/0x420 [ 85.753485][ T6318] ? __fget_files+0x3a0/0x420 [ 85.753512][ T6318] __x64_sys_sendmsg+0x19b/0x260 [ 85.753539][ T6318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 85.753572][ T6318] ? __pfx_ksys_write+0x10/0x10 [ 85.753595][ T6318] ? rcu_is_watching+0x15/0xb0 [ 85.753619][ T6318] ? do_syscall_64+0xbe/0x3b0 [ 85.753644][ T6318] do_syscall_64+0xfa/0x3b0 [ 85.753664][ T6318] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.753683][ T6318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.753700][ T6318] ? clear_bhb_loop+0x60/0xb0 [ 85.753723][ T6318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.753741][ T6318] RIP: 0033:0x7fb47c98eec9 [ 85.753757][ T6318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.753772][ T6318] RSP: 002b:00007fb47d8e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.753791][ T6318] RAX: ffffffffffffffda RBX: 00007fb47cbe5fa0 RCX: 00007fb47c98eec9 [ 85.753804][ T6318] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 85.753815][ T6318] RBP: 00007fb47d8e9090 R08: 0000000000000000 R09: 0000000000000000 [ 85.753826][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.753837][ T6318] R13: 00007fb47cbe6038 R14: 00007fb47cbe5fa0 R15: 00007ffed270a4c8 [ 85.753869][ T6318] [ 86.444389][ T6343] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.451330][ T6343] sock: sock_timestamping_bind_phc: sock not bind to device [ 86.459078][ T6343] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.681572][ T92] cfg80211: failed to load regulatory.db [ 87.344820][ T6387] Bluetooth: MGMT ver 1.23 [ 88.009504][ T6417] vlan2: entered promiscuous mode [ 88.039154][ T6417] bridge0: entered promiscuous mode [ 88.640386][ T6451] netlink: 'syz.0.132': attribute type 1 has an invalid length. [ 88.677617][ T6452] __nla_validate_parse: 14 callbacks suppressed [ 88.677634][ T6452] netlink: 88 bytes leftover after parsing attributes in process `syz.0.132'. [ 88.782139][ T6459] netlink: 'syz.3.134': attribute type 11 has an invalid length. [ 88.790669][ T6460] netlink: 'syz.3.134': attribute type 11 has an invalid length. [ 89.160338][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.137'. [ 89.226978][ T6476] netlink: 64 bytes leftover after parsing attributes in process `syz.2.139'. [ 89.237347][ T6465] netlink: 36 bytes leftover after parsing attributes in process `syz.0.137'. [ 89.436690][ T6484] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 89.442338][ T5880] Bluetooth: hci2: command 0x0401 tx timeout [ 89.445054][ T5875] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 89.685147][ T6487] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.707884][ T6487] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 90.899282][ T6518] netlink: 'syz.2.150': attribute type 5 has an invalid length. [ 91.038391][ T6523] netlink: 28 bytes leftover after parsing attributes in process `syz.3.152'. [ 91.082427][ T6523] netlink: 36 bytes leftover after parsing attributes in process `syz.3.152'. [ 91.205944][ T6544] netlink: 'syz.1.155': attribute type 11 has an invalid length. [ 91.526523][ T6561] netlink: 'syz.0.153': attribute type 16 has an invalid length. [ 91.626961][ T6561] netlink: 72 bytes leftover after parsing attributes in process `syz.0.153'. [ 91.661617][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.698404][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.208268][ T6589] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 92.267349][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 92.298335][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 92.438167][ T6598] netlink: 'syz.1.166': attribute type 13 has an invalid length. [ 92.510352][ T6598] netlink: 'syz.1.166': attribute type 58 has an invalid length. [ 92.535598][ T6598] netlink: 152 bytes leftover after parsing attributes in process `syz.1.166'. [ 93.704364][ T6656] __nla_validate_parse: 2 callbacks suppressed [ 93.704383][ T6656] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.181'. [ 93.895539][ T6667] netlink: 64 bytes leftover after parsing attributes in process `syz.2.183'. [ 94.190859][ T6677] tipc: Started in network mode [ 94.215637][ T6679] netlink: 'syz.4.187': attribute type 2 has an invalid length. [ 94.231902][ T6677] tipc: Node identity 8efcdf074e1b, cluster identity 4711 [ 94.258309][ T6677] tipc: Enabled bearer , priority 0 [ 94.271752][ T6679] netlink: 'syz.4.187': attribute type 1 has an invalid length. [ 94.296122][ T6684] syzkaller0: entered promiscuous mode [ 94.322736][ T6684] syzkaller0: entered allmulticast mode [ 94.358016][ T6683] pim6reg527: entered allmulticast mode [ 94.388337][ T6677] tipc: Resetting bearer [ 94.406908][ T6677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.186'. [ 94.554630][ T6676] tipc: Resetting bearer [ 94.631162][ T6676] tipc: Disabling bearer [ 94.817342][ T6702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 94.941984][ T6707] FAULT_INJECTION: forcing a failure. [ 94.941984][ T6707] name failslab, interval 1, probability 0, space 0, times 0 [ 94.965900][ T6707] CPU: 0 UID: 0 PID: 6707 Comm: syz.0.195 Not tainted syzkaller #0 PREEMPT(full) [ 94.965936][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.965947][ T6707] Call Trace: [ 94.965954][ T6707] [ 94.965963][ T6707] dump_stack_lvl+0x189/0x250 [ 94.965990][ T6707] ? __pfx____ratelimit+0x10/0x10 [ 94.966011][ T6707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.966032][ T6707] ? __pfx__printk+0x10/0x10 [ 94.966057][ T6707] ? __pfx___might_resched+0x10/0x10 [ 94.966073][ T6707] ? fs_reclaim_acquire+0x7d/0x100 [ 94.966094][ T6707] should_fail_ex+0x414/0x560 [ 94.966123][ T6707] should_failslab+0xa8/0x100 [ 94.966151][ T6707] __kmalloc_noprof+0xcb/0x4f0 [ 94.966176][ T6707] ? tomoyo_encode+0x28b/0x550 [ 94.966202][ T6707] tomoyo_encode+0x28b/0x550 [ 94.966228][ T6707] tomoyo_realpath_from_path+0x58d/0x5d0 [ 94.966251][ T6707] ? tomoyo_domain+0xd9/0x130 [ 94.966278][ T6707] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 94.966306][ T6707] tomoyo_path_number_perm+0x1e8/0x5a0 [ 94.966337][ T6707] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 94.966385][ T6707] ? __lock_acquire+0xab9/0xd20 [ 94.966430][ T6707] ? __fget_files+0x2a/0x420 [ 94.966449][ T6707] ? __fget_files+0x2a/0x420 [ 94.966464][ T6707] ? __fget_files+0x3a0/0x420 [ 94.966479][ T6707] ? __fget_files+0x2a/0x420 [ 94.966499][ T6707] security_file_ioctl+0xcb/0x2d0 [ 94.966527][ T6707] __se_sys_ioctl+0x47/0x170 [ 94.966562][ T6707] do_syscall_64+0xfa/0x3b0 [ 94.966582][ T6707] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.966601][ T6707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.966619][ T6707] ? clear_bhb_loop+0x60/0xb0 [ 94.966642][ T6707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.966660][ T6707] RIP: 0033:0x7fea4b38eec9 [ 94.966676][ T6707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.966692][ T6707] RSP: 002b:00007fea4c17c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.966712][ T6707] RAX: ffffffffffffffda RBX: 00007fea4b5e5fa0 RCX: 00007fea4b38eec9 [ 94.966726][ T6707] RDX: 0000000000000000 RSI: 00000000000089e4 RDI: 000000000000000a [ 94.966737][ T6707] RBP: 00007fea4c17c090 R08: 0000000000000000 R09: 0000000000000000 [ 94.966748][ T6707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.966758][ T6707] R13: 00007fea4b5e6038 R14: 00007fea4b5e5fa0 R15: 00007fff6464f3f8 [ 94.966789][ T6707] [ 95.214614][ T6707] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.439112][ T6710] team0: No ports can be present during mode change [ 95.600025][ T6727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.201'. [ 95.612760][ T6727] netlink: 272 bytes leftover after parsing attributes in process `syz.1.201'. [ 95.622586][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 95.761270][ T6732] netlink: 11 bytes leftover after parsing attributes in process `syz.2.204'. [ 95.832748][ T6732] netlink: 11 bytes leftover after parsing attributes in process `syz.2.204'. [ 95.860523][ T6737] netlink: 11 bytes leftover after parsing attributes in process `syz.2.204'. [ 95.955778][ T6732] bond0: entered promiscuous mode [ 95.964319][ T6732] bond_slave_0: entered promiscuous mode [ 95.982865][ T6732] bond_slave_1: entered promiscuous mode [ 96.017501][ T6732] bond0: left promiscuous mode [ 96.022478][ T6732] bond_slave_0: left promiscuous mode [ 96.028154][ T6732] bond_slave_1: left promiscuous mode [ 96.501949][ T6762] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 96.809672][ T6778] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 97.508158][ T6806] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 98.168704][ T6846] C: renamed from team_slave_0 (while UP) [ 98.247312][ T6846] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 98.362998][ T6846] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 99.014770][ T6885] __nla_validate_parse: 9 callbacks suppressed [ 99.014788][ T6885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.256'. [ 99.042687][ T6885] netlink: 272 bytes leftover after parsing attributes in process `syz.4.256'. [ 99.062460][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.256'. [ 99.418333][ T6906] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.264'. [ 99.524844][ T6906] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.264'. [ 99.787543][ T6925] netlink: 32 bytes leftover after parsing attributes in process `syz.3.269'. [ 99.972173][ T6925] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 100.056436][ T6925] bond2 (unregistering): Released all slaves [ 100.160967][ T6942] tipc: Started in network mode [ 100.172889][ T6942] tipc: Node identity ca33939fa983, cluster identity 4711 [ 100.185881][ T6942] tipc: Enabled bearer , priority 0 [ 100.221730][ T6936] tipc: Resetting bearer [ 100.592617][ T6953] bridge0: port 3(syz_tun) entered disabled state [ 100.599927][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.607279][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.658574][ T6945] syzkaller0: entered promiscuous mode [ 100.664334][ T6945] syzkaller0: entered allmulticast mode [ 100.746491][ T6935] tipc: Resetting bearer [ 100.843952][ T6935] tipc: Disabling bearer [ 100.886387][ T6972] netlink: 36 bytes leftover after parsing attributes in process `syz.4.279'. [ 100.934385][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 101.020616][ T6977] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 101.215334][ T6995] tipc: Started in network mode [ 101.231734][ T6995] tipc: Node identity 1, cluster identity 4711 [ 101.286385][ T6995] tipc: Node number set to 1 [ 101.393993][ T6995] sit0: entered promiscuous mode [ 101.428048][ T6995] netlink: 'syz.3.285': attribute type 1 has an invalid length. [ 101.511996][ T6995] netlink: 1 bytes leftover after parsing attributes in process `syz.3.285'. [ 101.940976][ T7027] netlink: 'syz.4.292': attribute type 3 has an invalid length. [ 101.965032][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 102.650059][ T7059] Unsupported ieee802154 address type: 0 [ 103.017014][ T7081] netlink: 'syz.0.310': attribute type 1 has an invalid length. [ 103.182806][ T7088] netlink: 'syz.2.312': attribute type 5 has an invalid length. [ 103.574071][ T1169] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.589830][ T1169] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.631232][ T1169] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.679447][ T1169] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.715375][ T7121] batadv0: entered promiscuous mode [ 103.722847][ T7121] bond0: entered promiscuous mode [ 103.728014][ T7121] bond_slave_0: entered promiscuous mode [ 103.736071][ T7121] bond_slave_1: entered promiscuous mode [ 103.745453][ T7121] hsr1: entered allmulticast mode [ 103.756727][ T7121] batadv0: entered allmulticast mode [ 103.762094][ T7121] bond0: entered allmulticast mode [ 103.775162][ T7121] bond_slave_0: entered allmulticast mode [ 103.781108][ T7121] bond_slave_1: entered allmulticast mode [ 103.790977][ T7121] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 103.903607][ T7127] FAULT_INJECTION: forcing a failure. [ 103.903607][ T7127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.949782][ T7127] CPU: 1 UID: 0 PID: 7127 Comm: syz.0.325 Not tainted syzkaller #0 PREEMPT(full) [ 103.949806][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.949817][ T7127] Call Trace: [ 103.949825][ T7127] [ 103.949834][ T7127] dump_stack_lvl+0x189/0x250 [ 103.949860][ T7127] ? __pfx____ratelimit+0x10/0x10 [ 103.949881][ T7127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.949903][ T7127] ? __pfx__printk+0x10/0x10 [ 103.949929][ T7127] ? __might_fault+0xb0/0x130 [ 103.949965][ T7127] should_fail_ex+0x414/0x560 [ 103.949998][ T7127] _copy_from_user+0x2d/0xb0 [ 103.950024][ T7127] ___sys_sendmsg+0x158/0x2a0 [ 103.950050][ T7127] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.950107][ T7127] ? __fget_files+0x2a/0x420 [ 103.950124][ T7127] ? __fget_files+0x3a0/0x420 [ 103.950152][ T7127] __x64_sys_sendmsg+0x19b/0x260 [ 103.950178][ T7127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 103.950213][ T7127] ? __pfx_ksys_write+0x10/0x10 [ 103.950235][ T7127] ? rcu_is_watching+0x15/0xb0 [ 103.950260][ T7127] ? do_syscall_64+0xbe/0x3b0 [ 103.950286][ T7127] do_syscall_64+0xfa/0x3b0 [ 103.950306][ T7127] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.950326][ T7127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.950345][ T7127] ? clear_bhb_loop+0x60/0xb0 [ 103.950368][ T7127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.950386][ T7127] RIP: 0033:0x7fea4b38eec9 [ 103.950403][ T7127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.950419][ T7127] RSP: 002b:00007fea4c17c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.950439][ T7127] RAX: ffffffffffffffda RBX: 00007fea4b5e5fa0 RCX: 00007fea4b38eec9 [ 103.950453][ T7127] RDX: 0000000000000840 RSI: 00002000000000c0 RDI: 0000000000000003 [ 103.950465][ T7127] RBP: 00007fea4c17c090 R08: 0000000000000000 R09: 0000000000000000 [ 103.950477][ T7127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.950488][ T7127] R13: 00007fea4b5e6038 R14: 00007fea4b5e5fa0 R15: 00007fff6464f3f8 [ 103.950518][ T7127] [ 104.000821][ T7130] netlink: 'syz.1.327': attribute type 5 has an invalid length. [ 104.085987][ T5875] Bluetooth: hci4: command tx timeout [ 104.328544][ T7145] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 104.730162][ T7163] __nla_validate_parse: 16 callbacks suppressed [ 104.730180][ T7163] netlink: 191164 bytes leftover after parsing attributes in process `syz.1.336'. [ 104.907207][ T7173] FAULT_INJECTION: forcing a failure. [ 104.907207][ T7173] name failslab, interval 1, probability 0, space 0, times 0 [ 104.925370][ T7173] CPU: 1 UID: 0 PID: 7173 Comm: syz.2.339 Not tainted syzkaller #0 PREEMPT(full) [ 104.925393][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.925404][ T7173] Call Trace: [ 104.925411][ T7173] [ 104.925418][ T7173] dump_stack_lvl+0x189/0x250 [ 104.925445][ T7173] ? __pfx____ratelimit+0x10/0x10 [ 104.925467][ T7173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.925488][ T7173] ? __pfx__printk+0x10/0x10 [ 104.925518][ T7173] ? __pfx___might_resched+0x10/0x10 [ 104.925541][ T7173] should_fail_ex+0x414/0x560 [ 104.925572][ T7173] should_failslab+0xa8/0x100 [ 104.925610][ T7173] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 104.925637][ T7173] ? __alloc_skb+0x112/0x2d0 [ 104.925662][ T7173] __alloc_skb+0x112/0x2d0 [ 104.925686][ T7173] netlink_sendmsg+0x5c6/0xb30 [ 104.925716][ T7173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.925740][ T7173] ? aa_sock_msg_perm+0xf1/0x1d0 [ 104.925760][ T7173] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 104.925779][ T7173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.925801][ T7173] __sock_sendmsg+0x21c/0x270 [ 104.925834][ T7173] ____sys_sendmsg+0x505/0x830 [ 104.925863][ T7173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.925898][ T7173] ? import_iovec+0x74/0xa0 [ 104.925927][ T7173] ___sys_sendmsg+0x21f/0x2a0 [ 104.925954][ T7173] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.926017][ T7173] ? __fget_files+0x2a/0x420 [ 104.926033][ T7173] ? __fget_files+0x3a0/0x420 [ 104.926062][ T7173] __x64_sys_sendmsg+0x19b/0x260 [ 104.926090][ T7173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.926125][ T7173] ? __pfx_ksys_write+0x10/0x10 [ 104.926148][ T7173] ? rcu_is_watching+0x15/0xb0 [ 104.926174][ T7173] ? do_syscall_64+0xbe/0x3b0 [ 104.926200][ T7173] do_syscall_64+0xfa/0x3b0 [ 104.926220][ T7173] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.926240][ T7173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.926259][ T7173] ? clear_bhb_loop+0x60/0xb0 [ 104.926283][ T7173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.926302][ T7173] RIP: 0033:0x7fc8af38eec9 [ 104.926319][ T7173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.926335][ T7173] RSP: 002b:00007fc8b02b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.926355][ T7173] RAX: ffffffffffffffda RBX: 00007fc8af5e5fa0 RCX: 00007fc8af38eec9 [ 104.926369][ T7173] RDX: 0000000000000840 RSI: 00002000000000c0 RDI: 0000000000000003 [ 104.926382][ T7173] RBP: 00007fc8b02b0090 R08: 0000000000000000 R09: 0000000000000000 [ 104.926393][ T7173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.926405][ T7173] R13: 00007fc8af5e6038 R14: 00007fc8af5e5fa0 R15: 00007ffd763d2418 [ 104.926435][ T7173] [ 105.539242][ T7185] sctp: failed to load transform for md5: -2 [ 105.777684][ T7208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.352'. [ 105.829402][ T7208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.352'. [ 105.916802][ T7215] netlink: 'syz.1.355': attribute type 2 has an invalid length. [ 105.942353][ T7215] netlink: 'syz.1.355': attribute type 1 has an invalid length. [ 106.059323][ T7215] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 106.157980][ T7226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.359'. [ 106.169394][ T7226] netlink: 272 bytes leftover after parsing attributes in process `syz.2.359'. [ 106.182521][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 106.288292][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.358'. [ 106.755061][ T7251] netlink: 'syz.4.367': attribute type 3 has an invalid length. [ 106.829381][ T7252] netlink: 36 bytes leftover after parsing attributes in process `syz.4.367'. [ 106.892886][ T7252] netlink: 36 bytes leftover after parsing attributes in process `syz.4.367'. [ 106.934234][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 106.949602][ T7257] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 106.970204][ T7257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.974891][ T7259] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 107.125339][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.143369][ T7272] netlink: 'syz.1.370': attribute type 24 has an invalid length. [ 109.297728][ T7364] netlink: zone id is out of range [ 109.305465][ T7364] netlink: zone id is out of range [ 109.310776][ T7364] netlink: zone id is out of range [ 109.319113][ T7364] netlink: zone id is out of range [ 109.327875][ T7364] netlink: zone id is out of range [ 109.374849][ T7364] netlink: zone id is out of range [ 109.983432][ T7391] FAULT_INJECTION: forcing a failure. [ 109.983432][ T7391] name failslab, interval 1, probability 0, space 0, times 0 [ 109.996289][ T7391] CPU: 1 UID: 0 PID: 7391 Comm: syz.2.405 Not tainted syzkaller #0 PREEMPT(full) [ 109.996313][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.996324][ T7391] Call Trace: [ 109.996333][ T7391] [ 109.996341][ T7391] dump_stack_lvl+0x189/0x250 [ 109.996369][ T7391] ? __pfx____ratelimit+0x10/0x10 [ 109.996390][ T7391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.996414][ T7391] ? __pfx__printk+0x10/0x10 [ 109.996448][ T7391] ? atomic_notifier_call_chain+0x26/0x180 [ 109.996475][ T7391] ? atomic_notifier_call_chain+0x26/0x180 [ 109.996499][ T7391] should_fail_ex+0x414/0x560 [ 109.996534][ T7391] should_failslab+0xa8/0x100 [ 109.996565][ T7391] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 109.996593][ T7391] ? __alloc_skb+0x112/0x2d0 [ 109.996619][ T7391] __alloc_skb+0x112/0x2d0 [ 109.996643][ T7391] fdb_notify+0xa6/0x160 [ 109.996674][ T7391] __br_fdb_add+0xbb7/0xcb0 [ 109.996701][ T7391] br_fdb_add+0x73a/0xc20 [ 109.996732][ T7391] ? __pfx_br_fdb_add+0x10/0x10 [ 109.996752][ T7391] ? __mutex_trylock_common+0x153/0x260 [ 109.996787][ T7391] rtnl_fdb_add+0x74d/0xa50 [ 109.996819][ T7391] ? __dev_queue_xmit+0x1d79/0x3b50 [ 109.996845][ T7391] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 109.996900][ T7391] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 109.996922][ T7391] rtnetlink_rcv_msg+0x77c/0xb70 [ 109.996947][ T7391] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 109.996967][ T7391] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 109.996986][ T7391] ? ref_tracker_free+0x63a/0x7d0 [ 109.997006][ T7391] ? __asan_memcpy+0x40/0x70 [ 109.997027][ T7391] ? __pfx_ref_tracker_free+0x10/0x10 [ 109.997044][ T7391] ? __skb_clone+0x63/0x7a0 [ 109.997079][ T7391] netlink_rcv_skb+0x208/0x470 [ 109.997111][ T7391] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 109.997134][ T7391] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.997168][ T7391] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.997198][ T7391] netlink_unicast+0x82c/0x9e0 [ 109.997238][ T7391] ? __pfx_netlink_unicast+0x10/0x10 [ 109.997270][ T7391] ? netlink_sendmsg+0x642/0xb30 [ 109.997289][ T7391] ? skb_put+0x11b/0x210 [ 109.997315][ T7391] netlink_sendmsg+0x805/0xb30 [ 109.997345][ T7391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.997369][ T7391] ? aa_sock_msg_perm+0xf1/0x1d0 [ 109.997390][ T7391] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.997411][ T7391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.997432][ T7391] __sock_sendmsg+0x21c/0x270 [ 109.997465][ T7391] ____sys_sendmsg+0x505/0x830 [ 109.997496][ T7391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.997531][ T7391] ? import_iovec+0x74/0xa0 [ 109.997561][ T7391] ___sys_sendmsg+0x21f/0x2a0 [ 109.997589][ T7391] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.997654][ T7391] ? __fget_files+0x2a/0x420 [ 109.997670][ T7391] ? __fget_files+0x3a0/0x420 [ 109.997700][ T7391] __x64_sys_sendmsg+0x19b/0x260 [ 109.997728][ T7391] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.997762][ T7391] ? __pfx_ksys_write+0x10/0x10 [ 109.997784][ T7391] ? rcu_is_watching+0x15/0xb0 [ 109.997809][ T7391] ? do_syscall_64+0xbe/0x3b0 [ 109.997836][ T7391] do_syscall_64+0xfa/0x3b0 [ 109.997856][ T7391] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.997877][ T7391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.997896][ T7391] ? clear_bhb_loop+0x60/0xb0 [ 109.997921][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.997939][ T7391] RIP: 0033:0x7fc8af38eec9 [ 109.997956][ T7391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.997973][ T7391] RSP: 002b:00007fc8b02b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.997993][ T7391] RAX: ffffffffffffffda RBX: 00007fc8af5e5fa0 RCX: 00007fc8af38eec9 [ 109.998007][ T7391] RDX: 0000000000000840 RSI: 00002000000000c0 RDI: 0000000000000003 [ 109.998020][ T7391] RBP: 00007fc8b02b0090 R08: 0000000000000000 R09: 0000000000000000 [ 109.998032][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.998043][ T7391] R13: 00007fc8af5e6038 R14: 00007fc8af5e5fa0 R15: 00007ffd763d2418 [ 109.998076][ T7391] [ 110.448017][ T7388] __nla_validate_parse: 8 callbacks suppressed [ 110.448034][ T7388] netlink: 112 bytes leftover after parsing attributes in process `syz.3.404'. [ 110.610658][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 110.677138][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 111.379135][ T7434] netlink: 112 bytes leftover after parsing attributes in process `syz.2.419'. [ 111.491919][ T7453] netlink: 44 bytes leftover after parsing attributes in process `syz.4.423'. [ 111.754840][ T7463] netlink: 'syz.2.426': attribute type 4 has an invalid length. [ 111.839799][ T7474] netlink: 'syz.0.430': attribute type 3 has an invalid length. [ 112.173901][ T7487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.434'. [ 112.296834][ T7497] netlink: 112 bytes leftover after parsing attributes in process `syz.3.436'. [ 112.365818][ T7504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.438'. [ 112.411912][ T7504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.438'. [ 112.440932][ T7503] netlink: 'syz.4.438': attribute type 21 has an invalid length. [ 112.474705][ T7507] netlink: 44 bytes leftover after parsing attributes in process `syz.1.439'. [ 112.739035][ T7526] tipc: Enabled bearer , priority 0 [ 112.778211][ T7522] syzkaller0: entered promiscuous mode [ 112.784024][ T7522] syzkaller0: entered allmulticast mode [ 112.814676][ T7523] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 112.843795][ T7523] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 112.986218][ T7522] tipc: Resetting bearer [ 113.042674][ T7522] tipc: Disabling bearer [ 113.408462][ T7557] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 113.597261][ T7564] veth0_to_bridge: entered promiscuous mode [ 113.925677][ T7579] bond2: option use_carrier: invalid value (4) [ 114.071096][ T7579] bond2 (unregistering): Released all slaves [ 114.217824][ T7561] veth0_to_bridge: left promiscuous mode [ 114.628879][ T7607] netlink: 'syz.2.470': attribute type 21 has an invalid length. [ 114.661607][ T7608] netlink: 'syz.3.471': attribute type 10 has an invalid length. [ 114.675004][ T7608] dummy0: entered promiscuous mode [ 114.683347][ T7608] bridge0: port 3(dummy0) entered blocking state [ 114.689974][ T7608] bridge0: port 3(dummy0) entered disabled state [ 114.697002][ T7608] dummy0: entered allmulticast mode [ 114.706795][ T7608] bridge0: port 3(dummy0) entered blocking state [ 114.713303][ T7608] bridge0: port 3(dummy0) entered forwarding state [ 114.795549][ T7616] vlan2: entered allmulticast mode [ 114.800695][ T7616] hsr0: entered allmulticast mode [ 114.821730][ T7616] hsr_slave_0: entered allmulticast mode [ 114.836522][ T7616] hsr_slave_1: entered allmulticast mode [ 114.862129][ T7618] Bluetooth: MGMT ver 1.23 [ 115.529414][ T7657] netlink: 'syz.3.488': attribute type 1 has an invalid length. [ 115.543833][ T7653] __nla_validate_parse: 10 callbacks suppressed [ 115.543850][ T7653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.487'. [ 115.713155][ T7662] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.726470][ T7662] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 115.737227][ T7662] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 115.786901][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 116.131208][ T7679] FAULT_INJECTION: forcing a failure. [ 116.131208][ T7679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.159946][ T7679] CPU: 0 UID: 0 PID: 7679 Comm: syz.2.493 Not tainted syzkaller #0 PREEMPT(full) [ 116.159970][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.159979][ T7679] Call Trace: [ 116.159986][ T7679] [ 116.159993][ T7679] dump_stack_lvl+0x189/0x250 [ 116.160020][ T7679] ? __pfx____ratelimit+0x10/0x10 [ 116.160041][ T7679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.160063][ T7679] ? __pfx__printk+0x10/0x10 [ 116.160090][ T7679] ? __might_fault+0xb0/0x130 [ 116.160128][ T7679] should_fail_ex+0x414/0x560 [ 116.160161][ T7679] _copy_from_user+0x2d/0xb0 [ 116.160188][ T7679] ___sys_sendmsg+0x158/0x2a0 [ 116.160216][ T7679] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.160278][ T7679] ? __fget_files+0x2a/0x420 [ 116.160295][ T7679] ? __fget_files+0x3a0/0x420 [ 116.160323][ T7679] __x64_sys_sendmsg+0x19b/0x260 [ 116.160351][ T7679] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.160386][ T7679] ? __pfx_ksys_write+0x10/0x10 [ 116.160410][ T7679] ? rcu_is_watching+0x15/0xb0 [ 116.160435][ T7679] ? do_syscall_64+0xbe/0x3b0 [ 116.160460][ T7679] do_syscall_64+0xfa/0x3b0 [ 116.160481][ T7679] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.160501][ T7679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.160519][ T7679] ? clear_bhb_loop+0x60/0xb0 [ 116.160542][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.160564][ T7679] RIP: 0033:0x7fc8af38eec9 [ 116.160581][ T7679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.160597][ T7679] RSP: 002b:00007fc8b02b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.160618][ T7679] RAX: ffffffffffffffda RBX: 00007fc8af5e5fa0 RCX: 00007fc8af38eec9 [ 116.160632][ T7679] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 116.160644][ T7679] RBP: 00007fc8b02b0090 R08: 0000000000000000 R09: 0000000000000000 [ 116.160656][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.160667][ T7679] R13: 00007fc8af5e6038 R14: 00007fc8af5e5fa0 R15: 00007ffd763d2418 [ 116.160698][ T7679] [ 116.165816][ T7689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.495'. [ 116.374759][ T7695] netlink: 44 bytes leftover after parsing attributes in process `syz.2.498'. [ 116.409925][ T7689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.495'. [ 116.872915][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.506'. [ 116.920179][ T7712] netlink: 68 bytes leftover after parsing attributes in process `syz.4.506'. [ 116.942358][ T7712] net_ratelimit: 224 callbacks suppressed [ 116.942373][ T7712] openvswitch: netlink: Flow key attr not present in new flow. [ 116.959625][ T7714] netlink: 40 bytes leftover after parsing attributes in process `syz.0.504'. [ 116.993745][ T7712] nbd: must specify at least one socket [ 117.088578][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.507'. [ 117.160784][ T7718] FAULT_INJECTION: forcing a failure. [ 117.160784][ T7718] name failslab, interval 1, probability 0, space 0, times 0 [ 117.195803][ T7718] CPU: 0 UID: 0 PID: 7718 Comm: syz.2.508 Not tainted syzkaller #0 PREEMPT(full) [ 117.195827][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.195839][ T7718] Call Trace: [ 117.195846][ T7718] [ 117.195854][ T7718] dump_stack_lvl+0x189/0x250 [ 117.195883][ T7718] ? __pfx____ratelimit+0x10/0x10 [ 117.195904][ T7718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.195927][ T7718] ? __pfx__printk+0x10/0x10 [ 117.195961][ T7718] ? __pfx___might_resched+0x10/0x10 [ 117.195984][ T7718] should_fail_ex+0x414/0x560 [ 117.196018][ T7718] should_failslab+0xa8/0x100 [ 117.196048][ T7718] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 117.196076][ T7718] ? __alloc_skb+0x112/0x2d0 [ 117.196102][ T7718] __alloc_skb+0x112/0x2d0 [ 117.196128][ T7718] netlink_sendmsg+0x5c6/0xb30 [ 117.196160][ T7718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.196185][ T7718] ? aa_sock_msg_perm+0xf1/0x1d0 [ 117.196206][ T7718] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.196228][ T7718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.196251][ T7718] __sock_sendmsg+0x21c/0x270 [ 117.196283][ T7718] ____sys_sendmsg+0x505/0x830 [ 117.196314][ T7718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.196349][ T7718] ? import_iovec+0x74/0xa0 [ 117.196378][ T7718] ___sys_sendmsg+0x21f/0x2a0 [ 117.196406][ T7718] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.196462][ T7718] ? __fget_files+0x2a/0x420 [ 117.196478][ T7718] ? __fget_files+0x3a0/0x420 [ 117.196507][ T7718] __x64_sys_sendmsg+0x19b/0x260 [ 117.196535][ T7718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.196570][ T7718] ? __pfx_ksys_write+0x10/0x10 [ 117.196593][ T7718] ? rcu_is_watching+0x15/0xb0 [ 117.196619][ T7718] ? do_syscall_64+0xbe/0x3b0 [ 117.196645][ T7718] do_syscall_64+0xfa/0x3b0 [ 117.196666][ T7718] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.196692][ T7718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.196711][ T7718] ? clear_bhb_loop+0x60/0xb0 [ 117.196735][ T7718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.196754][ T7718] RIP: 0033:0x7fc8af38eec9 [ 117.196771][ T7718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.196787][ T7718] RSP: 002b:00007fc8b02b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.196808][ T7718] RAX: ffffffffffffffda RBX: 00007fc8af5e5fa0 RCX: 00007fc8af38eec9 [ 117.196823][ T7718] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 117.196835][ T7718] RBP: 00007fc8b02b0090 R08: 0000000000000000 R09: 0000000000000000 [ 117.196847][ T7718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.196859][ T7718] R13: 00007fc8af5e6038 R14: 00007fc8af5e5fa0 R15: 00007ffd763d2418 [ 117.196890][ T7718] [ 118.242691][ T7759] trusted_key: syz.3.520 sent an empty control message without MSG_MORE. [ 118.308048][ T7767] netlink: 44 bytes leftover after parsing attributes in process `syz.2.521'. [ 118.709443][ T7779] syzkaller0: entered promiscuous mode [ 118.732528][ T7779] syzkaller0: entered allmulticast mode [ 118.747179][ T7779] xt_l2tp: v2 sid > 0xffff: 1114112 [ 118.755474][ T7779] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 121.315466][ T7905] __nla_validate_parse: 5 callbacks suppressed [ 121.315483][ T7905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.559'. [ 122.383149][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 122.967664][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 123.073802][ T7974] openvswitch: netlink: IP tunnel dst address not specified [ 123.106125][ T7970] tipc: Enabling of bearer rejected, failed to enable media [ 124.840089][ T8058] netlink: 'syz.4.592': attribute type 1 has an invalid length. [ 125.280506][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.596'. [ 125.293374][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.596'. [ 125.488015][ T8058] bond1: entered promiscuous mode [ 125.585397][ T8058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.617152][ T8072] ifb0: entered promiscuous mode [ 125.627119][ T8072] ifb0: left promiscuous mode [ 125.980589][ T8083] team0 (unregistering): Port device C removed [ 126.007917][ T8083] team0 (unregistering): Port device team_slave_1 removed [ 126.233947][ T8107] netlink: 'syz.0.603': attribute type 4 has an invalid length. [ 126.269901][ T8111] netlink: 'syz.2.606': attribute type 1 has an invalid length. [ 126.286470][ T8100] netlink: 'syz.4.604': attribute type 4 has an invalid length. [ 126.337511][ T8117] netlink: 'syz.3.607': attribute type 83 has an invalid length. [ 126.341866][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'. [ 126.529767][ T8111] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 126.701168][ T8111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.711800][ T8046] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 126.822826][ T8128] veth3: entered promiscuous mode [ 126.847187][ T8128] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 126.865115][ T36] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 127.159909][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 127.508059][ T8160] netlink: 7 bytes leftover after parsing attributes in process `syz.4.618'. [ 127.548952][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 127.592994][ T8166] netlink: 64 bytes leftover after parsing attributes in process `syz.2.622'. [ 127.617122][ T1153] bond0: (slave bridge0): link status definitely down, disabling slave [ 127.774111][ T8176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.887720][ T8184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.625'. [ 127.902738][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 127.957277][ T8188] netlink: 44 bytes leftover after parsing attributes in process `syz.2.626'. [ 128.161991][ T8196] netlink: 'syz.4.629': attribute type 9 has an invalid length. [ 128.232588][ T8199] netlink: 'syz.1.630': attribute type 1 has an invalid length. [ 128.295670][ T8192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.628'. [ 128.306302][ T8204] netlink: 44 bytes leftover after parsing attributes in process `syz.0.631'. [ 128.445031][ T8192] ifb0: entered promiscuous mode [ 128.507414][ T8192] ifb0: left promiscuous mode [ 128.576033][ T8206] bond2: (slave bridge1): making interface the new active one [ 128.586378][ T8206] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 129.712170][ T8283] netlink: 'syz.3.650': attribute type 10 has an invalid length. [ 129.729875][ T8276] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 129.750496][ T8283] netlink: 'syz.3.650': attribute type 17 has an invalid length. [ 129.767026][ T8276] bond2 (unregistering): Released all slaves [ 129.825661][ T8283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.405512][ T8313] bond2: Unable to set down delay as MII monitoring is disabled [ 130.438049][ T8313] bond2 (unregistering): Released all slaves [ 131.568296][ T8360] netlink: 'syz.1.672': attribute type 4 has an invalid length. [ 131.733323][ T8378] __nla_validate_parse: 19 callbacks suppressed [ 131.733474][ T8378] netlink: 312 bytes leftover after parsing attributes in process `syz.2.678'. [ 131.815708][ T8381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.680'. [ 131.819495][ T8375] netlink: 312 bytes leftover after parsing attributes in process `syz.2.678'. [ 131.825626][ T8384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.642379][ T8426] delete_channel: no stack [ 132.729891][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.742269][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.766006][ T8428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.840273][ T8430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.691'. [ 132.916321][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'. [ 133.251008][ T8456] netlink: 44 bytes leftover after parsing attributes in process `syz.1.696'. [ 133.274389][ T8457] sock: sock_timestamping_bind_phc: sock not bind to device [ 133.406586][ T8460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.699'. [ 133.547546][ T8467] netlink: 44 bytes leftover after parsing attributes in process `syz.2.702'. [ 133.581162][ T8470] xt_bpf: check failed: parse error [ 133.892937][ T8474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.705'. [ 133.902065][ T8474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.705'. [ 133.920186][ T8481] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 133.938641][ T8481] bond2 (unregistering): Released all slaves [ 134.128965][ T8493] tipc: Enabled bearer , priority 0 [ 134.152137][ T8493] syzkaller0: entered promiscuous mode [ 134.171300][ T8493] syzkaller0: entered allmulticast mode [ 134.197202][ T8493] tipc: Resetting bearer [ 134.299614][ T8496] tipc: Resetting bearer [ 134.337693][ T8496] tipc: Disabling bearer [ 135.455271][ T8564] netlink: 'syz.3.730': attribute type 15 has an invalid length. [ 135.609685][ T8569] netlink: 'syz.2.732': attribute type 10 has an invalid length. [ 135.621774][ T8569] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 135.633939][ T8569] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 135.661351][ T8569] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 135.941604][ T8589] openvswitch: netlink: Key 27 has unexpected len 28 expected 40 [ 136.251230][ T8608] netlink: 'syz.3.744': attribute type 2 has an invalid length. [ 136.642418][ T10] IPVS: starting estimator thread 0... [ 136.742351][ T8631] IPVS: using max 29 ests per chain, 69600 per kthread [ 136.811109][ T8638] raw_sendmsg: syz.1.752 forgot to set AF_INET. Fix it! [ 136.855528][ T8642] nbd: must specify a size in bytes for the device [ 136.896676][ T8642] __nla_validate_parse: 12 callbacks suppressed [ 136.896692][ T8642] netlink: 196 bytes leftover after parsing attributes in process `syz.1.752'. [ 137.086565][ T8657] FAULT_INJECTION: forcing a failure. [ 137.086565][ T8657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.127367][ T8657] CPU: 0 UID: 0 PID: 8657 Comm: syz.1.756 Not tainted syzkaller #0 PREEMPT(full) [ 137.127394][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.127405][ T8657] Call Trace: [ 137.127413][ T8657] [ 137.127421][ T8657] dump_stack_lvl+0x189/0x250 [ 137.127450][ T8657] ? __pfx____ratelimit+0x10/0x10 [ 137.127471][ T8657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.127493][ T8657] ? __pfx__printk+0x10/0x10 [ 137.127520][ T8657] ? __might_fault+0xb0/0x130 [ 137.127559][ T8657] should_fail_ex+0x414/0x560 [ 137.127592][ T8657] _copy_from_user+0x2d/0xb0 [ 137.127616][ T8657] ___sys_sendmsg+0x158/0x2a0 [ 137.127644][ T8657] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.127702][ T8657] ? __fget_files+0x2a/0x420 [ 137.127725][ T8657] ? __fget_files+0x3a0/0x420 [ 137.127754][ T8657] __x64_sys_sendmsg+0x19b/0x260 [ 137.127782][ T8657] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.127817][ T8657] ? __pfx_ksys_write+0x10/0x10 [ 137.127841][ T8657] ? rcu_is_watching+0x15/0xb0 [ 137.127866][ T8657] ? do_syscall_64+0xbe/0x3b0 [ 137.127893][ T8657] do_syscall_64+0xfa/0x3b0 [ 137.127914][ T8657] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.127934][ T8657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.127954][ T8657] ? clear_bhb_loop+0x60/0xb0 [ 137.127978][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.127997][ T8657] RIP: 0033:0x7f2c0c58eec9 [ 137.128014][ T8657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.128030][ T8657] RSP: 002b:00007f2c0a7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.128050][ T8657] RAX: ffffffffffffffda RBX: 00007f2c0c7e5fa0 RCX: 00007f2c0c58eec9 [ 137.128065][ T8657] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 137.128077][ T8657] RBP: 00007f2c0a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 137.128089][ T8657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.128101][ T8657] R13: 00007f2c0c7e6038 R14: 00007f2c0c7e5fa0 R15: 00007ffd814e6978 [ 137.128132][ T8657] [ 137.470482][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'. [ 137.545704][ T8663] netlink: 32 bytes leftover after parsing attributes in process `syz.2.759'. [ 137.555020][ T8666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.759'. [ 137.934304][ T8691] netlink: 56 bytes leftover after parsing attributes in process `syz.3.764'. [ 138.196682][ T8691] bond5 (unregistering): Released all slaves [ 138.960495][ T8718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.774'. [ 138.986975][ T8717] netlink: 252 bytes leftover after parsing attributes in process `syz.2.773'. [ 139.001506][ T8723] netlink: 388 bytes leftover after parsing attributes in process `syz.0.775'. [ 139.134705][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 139.314752][ T8736] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 139.349817][ T8740] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 139.575239][ T8760] FAULT_INJECTION: forcing a failure. [ 139.575239][ T8760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.686692][ T8768] sctp: [Deprecated]: syz.1.788 (pid 8768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.686692][ T8768] Use struct sctp_sack_info instead [ 139.704930][ T8760] CPU: 0 UID: 0 PID: 8760 Comm: syz.0.785 Not tainted syzkaller #0 PREEMPT(full) [ 139.704955][ T8760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.704966][ T8760] Call Trace: [ 139.704973][ T8760] [ 139.704980][ T8760] dump_stack_lvl+0x189/0x250 [ 139.705007][ T8760] ? __pfx____ratelimit+0x10/0x10 [ 139.705028][ T8760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.705051][ T8760] ? __pfx__printk+0x10/0x10 [ 139.705077][ T8760] ? __might_fault+0xb0/0x130 [ 139.705114][ T8760] should_fail_ex+0x414/0x560 [ 139.705148][ T8760] _copy_from_iter+0x1de/0x1790 [ 139.705175][ T8760] ? rcu_is_watching+0x15/0xb0 [ 139.705195][ T8760] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 139.705223][ T8760] ? __pfx__copy_from_iter+0x10/0x10 [ 139.705255][ T8760] ? __build_skb_around+0x257/0x3e0 [ 139.705281][ T8760] ? netlink_sendmsg+0x642/0xb30 [ 139.705301][ T8760] ? skb_put+0x11b/0x210 [ 139.705327][ T8760] netlink_sendmsg+0x6b2/0xb30 [ 139.705358][ T8760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.705383][ T8760] ? aa_sock_msg_perm+0xf1/0x1d0 [ 139.705405][ T8760] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.705427][ T8760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.705449][ T8760] __sock_sendmsg+0x21c/0x270 [ 139.705481][ T8760] ____sys_sendmsg+0x505/0x830 [ 139.705512][ T8760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.705547][ T8760] ? import_iovec+0x74/0xa0 [ 139.705576][ T8760] ___sys_sendmsg+0x21f/0x2a0 [ 139.705604][ T8760] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.705667][ T8760] ? __fget_files+0x2a/0x420 [ 139.705683][ T8760] ? __fget_files+0x3a0/0x420 [ 139.705712][ T8760] __x64_sys_sendmsg+0x19b/0x260 [ 139.705741][ T8760] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.705776][ T8760] ? __pfx_ksys_write+0x10/0x10 [ 139.705800][ T8760] ? rcu_is_watching+0x15/0xb0 [ 139.705826][ T8760] ? do_syscall_64+0xbe/0x3b0 [ 139.705852][ T8760] do_syscall_64+0xfa/0x3b0 [ 139.705873][ T8760] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.705893][ T8760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.705916][ T8760] ? clear_bhb_loop+0x60/0xb0 [ 139.705939][ T8760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.705958][ T8760] RIP: 0033:0x7fea4b38eec9 [ 139.705975][ T8760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.705991][ T8760] RSP: 002b:00007fea4c17c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.706010][ T8760] RAX: ffffffffffffffda RBX: 00007fea4b5e5fa0 RCX: 00007fea4b38eec9 [ 139.706024][ T8760] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 139.706036][ T8760] RBP: 00007fea4c17c090 R08: 0000000000000000 R09: 0000000000000000 [ 139.706048][ T8760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.706059][ T8760] R13: 00007fea4b5e6038 R14: 00007fea4b5e5fa0 R15: 00007fff6464f3f8 [ 139.706090][ T8760] [ 140.225521][ T8777] syzkaller1: entered promiscuous mode [ 140.231018][ T8777] syzkaller1: entered allmulticast mode [ 140.529570][ T8801] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 141.228225][ T8806] netlink: 252 bytes leftover after parsing attributes in process `syz.3.796'. [ 141.869204][ T8854] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 141.880962][ T8864] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 142.375700][ T8888] netlink: 252 bytes leftover after parsing attributes in process `syz.3.817'. [ 143.186305][ T8899] netlink: 'syz.2.818': attribute type 64 has an invalid length. [ 143.202322][ T8899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.818'. [ 143.243927][ T8900] netlink: 'syz.2.818': attribute type 64 has an invalid length. [ 143.252007][ T8900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.818'. [ 143.790200][ T8905] can: request_module (can-proto-5) failed. [ 144.599987][ T8955] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 144.750623][ T8958] netlink: 252 bytes leftover after parsing attributes in process `syz.4.833'. [ 144.924499][ T8960] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 144.942011][ T8960] bond2 (unregistering): Released all slaves [ 145.221592][ T8986] netlink: 48 bytes leftover after parsing attributes in process `syz.2.839'. [ 146.060970][ T8977] netlink: 48 bytes leftover after parsing attributes in process `syz.3.838'. [ 146.094766][ T8977] netlink: 48 bytes leftover after parsing attributes in process `syz.3.838'. [ 146.388625][ T8997] openvswitch: netlink: Duplicate or invalid key (type 0). [ 146.447752][ T8997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.982392][ T9032] netlink: 44 bytes leftover after parsing attributes in process `syz.1.849'. [ 147.099312][ T9037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.851'. [ 147.165528][ T9037] netlink: 272 bytes leftover after parsing attributes in process `syz.3.851'. [ 147.407229][ T9058] __nla_validate_parse: 1 callbacks suppressed [ 147.407246][ T9058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.855'. [ 147.910719][ T9080] netlink: 512 bytes leftover after parsing attributes in process `syz.2.864'. [ 148.018075][ T9084] netlink: 44 bytes leftover after parsing attributes in process `syz.4.866'. [ 148.148207][ T9088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.867'. [ 148.182452][ T9088] netlink: 272 bytes leftover after parsing attributes in process `syz.2.867'. [ 148.191446][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'. [ 148.966857][ T9122] netlink: 6 bytes leftover after parsing attributes in process `syz.0.877'. [ 149.026052][ T9122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.078611][ T9138] netlink: 44 bytes leftover after parsing attributes in process `syz.2.879'. [ 149.270024][ T9143] team0: No ports can be present during mode change [ 149.492558][ T9153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.881'. [ 149.542283][ T9153] netlink: 272 bytes leftover after parsing attributes in process `syz.0.881'. [ 149.634613][ T9157] openvswitch: netlink: Flow actions attr not present in new flow. [ 149.792399][ T9164] tc_dump_action: action bad kind [ 149.885074][ T9169] netlink: 'syz.3.890': attribute type 9 has an invalid length. [ 149.928817][ T9170] netlink: 'syz.3.890': attribute type 9 has an invalid length. [ 150.988469][ T9232] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 151.671560][ T9267] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 151.735030][ T9267] bond3 (unregistering): Released all slaves [ 151.891054][ T9278] netlink: 'syz.0.923': attribute type 1 has an invalid length. [ 152.464507][ T9312] __nla_validate_parse: 5 callbacks suppressed [ 152.464525][ T9312] netlink: 64 bytes leftover after parsing attributes in process `syz.3.934'. [ 152.516583][ T9311] netlink: 88 bytes leftover after parsing attributes in process `syz.2.933'. [ 152.834850][ T9330] netlink: 36 bytes leftover after parsing attributes in process `syz.3.938'. [ 152.837522][ T9325] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 152.897860][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 152.928318][ T9325] bond2 (unregistering): Released all slaves [ 153.377717][ T9356] !: renamed from bond_slave_0 (while UP) [ 153.402910][ T9361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.500359][ T9356] netlink: 56 bytes leftover after parsing attributes in process `syz.4.943'. [ 153.578179][ T9371] veth0_to_team: entered promiscuous mode [ 153.605997][ T9371] veth0_to_team: entered allmulticast mode [ 153.762643][ T9388] tipc: Enabling of bearer rejected, failed to enable media [ 153.820172][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.948'. [ 153.941383][ T9394] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20000 [ 154.121300][ T9399] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 154.193335][ T9399] bond2 (unregistering): Released all slaves [ 154.248192][ T9414] netlink: 'syz.1.957': attribute type 11 has an invalid length. [ 154.259441][ T9414] netlink: 224 bytes leftover after parsing attributes in process `syz.1.957'. [ 154.405244][ T9414] netlink: 'syz.1.957': attribute type 11 has an invalid length. [ 154.429434][ T9414] netlink: 224 bytes leftover after parsing attributes in process `syz.1.957'. [ 154.488104][ T9422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.958'. [ 154.495230][ T9421] netlink: 112 bytes leftover after parsing attributes in process `syz.2.961'. [ 154.525728][ T9421] netlink: 'syz.2.961': attribute type 21 has an invalid length. [ 154.530984][ T9426] sock: sock_timestamping_bind_phc: sock not bind to device [ 154.759755][ T9435] netlink: 'syz.3.963': attribute type 10 has an invalid length. [ 154.914121][ T9444] netlink: 'syz.1.967': attribute type 11 has an invalid length. [ 154.923556][ T9442] netlink: 'syz.4.966': attribute type 1 has an invalid length. [ 155.137074][ T9455] FAULT_INJECTION: forcing a failure. [ 155.137074][ T9455] name failslab, interval 1, probability 0, space 0, times 0 [ 155.204420][ T9455] CPU: 0 UID: 0 PID: 9455 Comm: syz.4.971 Not tainted syzkaller #0 PREEMPT(full) [ 155.204445][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 155.204457][ T9455] Call Trace: [ 155.204465][ T9455] [ 155.204474][ T9455] dump_stack_lvl+0x189/0x250 [ 155.204504][ T9455] ? __pfx____ratelimit+0x10/0x10 [ 155.204525][ T9455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.204548][ T9455] ? __pfx__printk+0x10/0x10 [ 155.204579][ T9455] ? __pfx___might_resched+0x10/0x10 [ 155.204597][ T9455] ? fs_reclaim_acquire+0x7d/0x100 [ 155.204620][ T9455] should_fail_ex+0x414/0x560 [ 155.204655][ T9455] should_failslab+0xa8/0x100 [ 155.204684][ T9455] __kmalloc_noprof+0xcb/0x4f0 [ 155.204709][ T9455] ? kfree+0x4d/0x440 [ 155.204729][ T9455] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 155.204755][ T9455] tomoyo_realpath_from_path+0xe3/0x5d0 [ 155.204778][ T9455] ? tomoyo_domain+0xd9/0x130 [ 155.204805][ T9455] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 155.204833][ T9455] tomoyo_path_number_perm+0x1e8/0x5a0 [ 155.204864][ T9455] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 155.204910][ T9455] ? __lock_acquire+0xab9/0xd20 [ 155.204959][ T9455] ? __fget_files+0x2a/0x420 [ 155.204986][ T9455] ? __fget_files+0x2a/0x420 [ 155.205002][ T9455] ? __fget_files+0x3a0/0x420 [ 155.205018][ T9455] ? __fget_files+0x2a/0x420 [ 155.205040][ T9455] security_file_ioctl+0xcb/0x2d0 [ 155.205068][ T9455] __se_sys_ioctl+0x47/0x170 [ 155.205095][ T9455] do_syscall_64+0xfa/0x3b0 [ 155.205116][ T9455] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.205136][ T9455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.205155][ T9455] ? clear_bhb_loop+0x60/0xb0 [ 155.205178][ T9455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.205197][ T9455] RIP: 0033:0x7fb47c98eec9 [ 155.205214][ T9455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.205230][ T9455] RSP: 002b:00007fb47d8e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.205250][ T9455] RAX: ffffffffffffffda RBX: 00007fb47cbe5fa0 RCX: 00007fb47c98eec9 [ 155.205264][ T9455] RDX: 0000200000000380 RSI: 00000000000089e2 RDI: 0000000000000004 [ 155.205277][ T9455] RBP: 00007fb47d8e9090 R08: 0000000000000000 R09: 0000000000000000 [ 155.205289][ T9455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.205299][ T9455] R13: 00007fb47cbe6038 R14: 00007fb47cbe5fa0 R15: 00007ffed270a4c8 [ 155.205331][ T9455] [ 155.205339][ T9455] ERROR: Out of memory at tomoyo_realpath_from_path. [ 155.550038][ T9470] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 156.193423][ T9510] FAULT_INJECTION: forcing a failure. [ 156.193423][ T9510] name failslab, interval 1, probability 0, space 0, times 0 [ 156.290357][ T9510] CPU: 0 UID: 0 PID: 9510 Comm: syz.3.986 Not tainted syzkaller #0 PREEMPT(full) [ 156.290380][ T9510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.290391][ T9510] Call Trace: [ 156.290399][ T9510] [ 156.290407][ T9510] dump_stack_lvl+0x189/0x250 [ 156.290434][ T9510] ? __pfx____ratelimit+0x10/0x10 [ 156.290455][ T9510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.290475][ T9510] ? __pfx__printk+0x10/0x10 [ 156.290505][ T9510] ? __pfx___might_resched+0x10/0x10 [ 156.290523][ T9510] ? fs_reclaim_acquire+0x7d/0x100 [ 156.290546][ T9510] should_fail_ex+0x414/0x560 [ 156.290579][ T9510] should_failslab+0xa8/0x100 [ 156.290608][ T9510] __kmalloc_noprof+0xcb/0x4f0 [ 156.290631][ T9510] ? tomoyo_encode+0x28b/0x550 [ 156.290656][ T9510] tomoyo_encode+0x28b/0x550 [ 156.290682][ T9510] tomoyo_realpath_from_path+0x58d/0x5d0 [ 156.290705][ T9510] ? tomoyo_domain+0xd9/0x130 [ 156.290732][ T9510] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 156.290761][ T9510] tomoyo_path_number_perm+0x1e8/0x5a0 [ 156.290792][ T9510] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 156.290837][ T9510] ? __lock_acquire+0xab9/0xd20 [ 156.290890][ T9510] ? __fget_files+0x2a/0x420 [ 156.290911][ T9510] ? __fget_files+0x2a/0x420 [ 156.290927][ T9510] ? __fget_files+0x3a0/0x420 [ 156.290943][ T9510] ? __fget_files+0x2a/0x420 [ 156.290963][ T9510] security_file_ioctl+0xcb/0x2d0 [ 156.290992][ T9510] __se_sys_ioctl+0x47/0x170 [ 156.291017][ T9510] do_syscall_64+0xfa/0x3b0 [ 156.291037][ T9510] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.291057][ T9510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.291076][ T9510] ? clear_bhb_loop+0x60/0xb0 [ 156.291099][ T9510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.291116][ T9510] RIP: 0033:0x7fa14898eec9 [ 156.291133][ T9510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.291148][ T9510] RSP: 002b:00007fa1497c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.291167][ T9510] RAX: ffffffffffffffda RBX: 00007fa148be5fa0 RCX: 00007fa14898eec9 [ 156.291180][ T9510] RDX: 0000200000000380 RSI: 00000000000089e2 RDI: 0000000000000004 [ 156.291191][ T9510] RBP: 00007fa1497c6090 R08: 0000000000000000 R09: 0000000000000000 [ 156.291202][ T9510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.291213][ T9510] R13: 00007fa148be6038 R14: 00007fa148be5fa0 R15: 00007ffec1607d28 [ 156.291242][ T9510] [ 156.533011][ T9510] ERROR: Out of memory at tomoyo_realpath_from_path. [ 156.676678][ T9530] netlink: 'syz.2.989': attribute type 21 has an invalid length. [ 157.368806][ T9564] FAULT_INJECTION: forcing a failure. [ 157.368806][ T9564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.397850][ T9564] CPU: 1 UID: 0 PID: 9564 Comm: syz.0.1000 Not tainted syzkaller #0 PREEMPT(full) [ 157.397875][ T9564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.397886][ T9564] Call Trace: [ 157.397894][ T9564] [ 157.397901][ T9564] dump_stack_lvl+0x189/0x250 [ 157.397930][ T9564] ? __pfx____ratelimit+0x10/0x10 [ 157.397950][ T9564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.397973][ T9564] ? __pfx__printk+0x10/0x10 [ 157.398001][ T9564] ? __might_fault+0xb0/0x130 [ 157.398039][ T9564] should_fail_ex+0x414/0x560 [ 157.398072][ T9564] _copy_from_user+0x2d/0xb0 [ 157.398098][ T9564] ax25_ioctl+0x8b2/0xca0 [ 157.398130][ T9564] ? __pfx_ax25_ioctl+0x10/0x10 [ 157.398158][ T9564] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 157.398187][ T9564] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 157.398218][ T9564] ? do_vfs_ioctl+0xbe8/0x1430 [ 157.398244][ T9564] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 157.398275][ T9564] sock_do_ioctl+0xdc/0x300 [ 157.398306][ T9564] ? __pfx_sock_do_ioctl+0x10/0x10 [ 157.398330][ T9564] ? __lock_acquire+0xab9/0xd20 [ 157.398374][ T9564] sock_ioctl+0x576/0x790 [ 157.398402][ T9564] ? __pfx_sock_ioctl+0x10/0x10 [ 157.398429][ T9564] ? __fget_files+0x2a/0x420 [ 157.398444][ T9564] ? __fget_files+0x3a0/0x420 [ 157.398460][ T9564] ? __fget_files+0x2a/0x420 [ 157.398480][ T9564] ? bpf_lsm_file_ioctl+0x9/0x20 [ 157.398504][ T9564] ? __pfx_sock_ioctl+0x10/0x10 [ 157.398536][ T9564] __se_sys_ioctl+0xf9/0x170 [ 157.398563][ T9564] do_syscall_64+0xfa/0x3b0 [ 157.398584][ T9564] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.398604][ T9564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.398622][ T9564] ? clear_bhb_loop+0x60/0xb0 [ 157.398646][ T9564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.398664][ T9564] RIP: 0033:0x7fea4b38eec9 [ 157.398680][ T9564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.398695][ T9564] RSP: 002b:00007fea4c17c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.398715][ T9564] RAX: ffffffffffffffda RBX: 00007fea4b5e5fa0 RCX: 00007fea4b38eec9 [ 157.398729][ T9564] RDX: 0000200000000380 RSI: 00000000000089e2 RDI: 0000000000000004 [ 157.398741][ T9564] RBP: 00007fea4c17c090 R08: 0000000000000000 R09: 0000000000000000 [ 157.398750][ T9564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.398762][ T9564] R13: 00007fea4b5e6038 R14: 00007fea4b5e5fa0 R15: 00007fff6464f3f8 [ 157.398792][ T9564] [ 157.906216][ T9574] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 158.036288][ T9580] __nla_validate_parse: 10 callbacks suppressed [ 158.036306][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1003'. [ 158.221728][ T9588] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1005'. [ 158.298908][ T9596] netlink: 'syz.3.1008': attribute type 1 has an invalid length. [ 158.320920][ T9596] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1008'. [ 158.443037][ T9609] netlink: 'syz.4.1010': attribute type 10 has an invalid length. [ 158.555193][ T9609] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 158.884507][ T9619] atomic_op ffff88806c6b6198 conn xmit_atomic 0000000000000000 [ 158.893424][ T9619] netlink: 'syz.2.1013': attribute type 1 has an invalid length. [ 159.235470][ T9640] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1019'. [ 160.368526][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 160.947178][ T9694] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1032'. [ 161.174930][ T9694] bond2 (unregistering): Released all slaves [ 161.224996][ T9702] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 161.640919][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 161.730929][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1039'. [ 162.531163][ T9760] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1047'. [ 162.845918][ T9775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1052'. [ 163.325376][ T9810] __nla_validate_parse: 3 callbacks suppressed [ 163.325376][ T9806] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1059'. [ 163.325393][ T9810] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1059'. [ 163.435799][ T9801] team0 (unregistering): Port device team_slave_0 removed [ 163.495576][ T9801] team0 (unregistering): Port device team_slave_1 removed [ 163.787408][ T9828] netlink: 'syz.3.1064': attribute type 8 has an invalid length. [ 163.904516][ T9835] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1066'. [ 163.963085][ T9837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1067'. [ 163.992820][ T9837] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1067'. [ 164.026785][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 164.255922][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 164.344617][ T9856] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1074'. [ 164.535170][ T9859] netlink: 'syz.4.1073': attribute type 2 has an invalid length. [ 164.577508][ T9859] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1073'. [ 164.619867][ T9859] nbd: must specify a device to reconfigure [ 164.757066][ T9876] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 164.802141][ T9876] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 165.062122][ T9888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1081'. [ 165.305529][ T9897] vlan2: entered promiscuous mode [ 165.320414][ T9897] bridge0: entered promiscuous mode [ 165.652928][ T9913] netlink: 'syz.1.1089': attribute type 6 has an invalid length. [ 165.770117][ T9919] dummy0: left allmulticast mode [ 165.797831][ T9919] bridge0: port 3(dummy0) entered disabled state [ 165.859218][ T9919] bridge_slave_0: left allmulticast mode [ 165.889005][ T9919] bridge_slave_0: left promiscuous mode [ 165.912621][ T9919] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.947570][ T9919] bridge_slave_1: left allmulticast mode [ 165.956268][ T9919] bridge_slave_1: left promiscuous mode [ 165.983343][ T9919] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.073145][ T9919] bond0: (slave bond_slave_0): Releasing backup interface [ 166.093801][ T9919] bond_slave_0: left promiscuous mode [ 166.099896][ T9919] bond_slave_0: left allmulticast mode [ 166.118517][ T9919] bond0: (slave bond_slave_1): Releasing backup interface [ 166.137562][ T9919] bond_slave_1: left promiscuous mode [ 166.156405][ T9919] bond_slave_1: left allmulticast mode [ 166.166140][ T9919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.191191][ T9919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.209444][ T9919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.218801][ T9919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.602923][ T9950] delete_channel: no stack [ 166.625569][ T9950] sit0: entered promiscuous mode [ 166.665903][ T9950] netlink: 'syz.4.1102': attribute type 1 has an invalid length. [ 166.949024][ T9967] openvswitch: netlink: Flow key attr not present in new flow. [ 167.318832][ T9991] tipc: Enabled bearer , priority 0 [ 167.600062][ T9991] syzkaller0: entered promiscuous mode [ 167.606096][ T9991] syzkaller0: entered allmulticast mode [ 167.613798][ T9991] tipc: Resetting bearer [ 167.659201][ T9987] tipc: Resetting bearer [ 168.069203][T10027] netlink: 'syz.2.1125': attribute type 83 has an invalid length. [ 168.394101][ T43] tipc: Node number set to 3236421383 [ 168.956373][ T9987] tipc: Disabling bearer [ 168.969754][T10029] netlink: 'syz.4.1126': attribute type 1 has an invalid length. [ 168.978019][T10029] __nla_validate_parse: 20 callbacks suppressed [ 168.978033][T10029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1126'. [ 169.262455][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'. [ 169.721822][T10068] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1138'. [ 169.890060][T10079] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1140'. [ 169.987106][T10088] netlink: 'syz.0.1140': attribute type 7 has an invalid length. [ 170.028753][T10088] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1140'. [ 170.065967][T10092] netlink: 212288 bytes leftover after parsing attributes in process `syz.4.1142'. [ 170.493734][T10119] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1148'. [ 170.779464][T10132] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1152'. [ 171.019181][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'. [ 171.044842][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'. [ 171.709700][T10181] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 172.046522][T10198] pimreg3: entered allmulticast mode [ 172.831983][T10248] netlink: 'syz.3.1184': attribute type 3 has an invalid length. [ 173.348091][T10267] mac80211_hwsim hwsim4 wlan1: default FDB implementation only supports local addresses [ 173.663543][T10248] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 173.799087][T10292] netlink: 'syz.2.1190': attribute type 25 has an invalid length. [ 173.862380][T10292] netlink: 'syz.2.1190': attribute type 28 has an invalid length. [ 174.110744][T10307] __nla_validate_parse: 8 callbacks suppressed [ 174.110761][T10307] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1197'. [ 174.146645][T10305] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1196'. [ 174.193075][T10305] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1196'. [ 174.345758][T10320] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1199'. [ 174.375174][T10311] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1196'. [ 174.651619][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1203'. [ 174.987312][T10353] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1207'. [ 175.108175][T10353] team0: Device vti0 is of different type [ 175.193510][T10363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1211'. [ 175.527406][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1215'. [ 176.172070][T10421] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1224'. [ 176.643526][T10441] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 176.821134][T10441] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.925077][T10450] bond3: (slave veth5): Enslaving as an active interface with a down link [ 177.024757][T10441] bond3: (slave veth0_to_bond): making interface the new active one [ 177.045329][T10441] veth0_to_bond: entered promiscuous mode [ 177.064003][T10441] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 177.093646][T10455] netlink: 'syz.4.1231': attribute type 14 has an invalid length. [ 177.116745][T10455] netlink: 'syz.4.1231': attribute type 14 has an invalid length. [ 177.157077][T10459] bond3: (slave veth7): Enslaving as an active interface with a down link [ 177.175153][ T5875] block nbd0: Receive control failed (result -32) [ 177.247370][T10473] netlink: 'syz.1.1234': attribute type 1 has an invalid length. [ 177.281421][T10473] bond4: entered promiscuous mode [ 177.287082][T10473] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.396428][T10480] netlink: 'syz.3.1235': attribute type 12 has an invalid length. [ 177.417670][T10480] netlink: 'syz.3.1235': attribute type 11 has an invalid length. [ 177.447274][T10475] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.462796][T10475] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 177.483004][T10475] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 177.508589][T10475] bond4: (slave wireguard0): making interface the new active one [ 177.521559][T10475] wireguard0: entered promiscuous mode [ 177.539642][T10475] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 177.940291][T10514] netlink: 'syz.0.1244': attribute type 10 has an invalid length. [ 178.281744][T10535] tipc: Enabled bearer , priority 0 [ 178.321758][T10535] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 178.394288][T10535] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 178.490521][T10535] tipc: Resetting bearer [ 179.188601][T10589] __nla_validate_parse: 8 callbacks suppressed [ 179.188619][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1263'. [ 179.209375][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1262'. [ 179.219738][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1262'. [ 179.298746][T10591] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 179.312899][T10591] bond5 (unregistering): Released all slaves [ 179.477060][T10606] netlink: 'syz.4.1265': attribute type 10 has an invalid length. [ 179.588361][T10606] team0: Device veth1_macvtap failed to register rx_handler [ 179.707549][T10619] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 179.969101][T10628] netlink: 'syz.2.1269': attribute type 1 has an invalid length. [ 179.989234][T10630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1270'. [ 180.012733][T10630] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1270'. [ 180.032097][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'. [ 180.046808][T10628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.052243][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1272'. [ 180.154761][T10643] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1273'. [ 180.194726][T10638] bond2: (slave veth5): Enslaving as an active interface with a down link [ 180.270005][T10638] bond2: (slave veth0_to_bond): making interface the new active one [ 180.307466][T10638] veth0_to_bond: entered promiscuous mode [ 180.321138][T10649] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 180.343130][T10638] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 188.153269][ T3518] veth0_to_bond: left promiscuous mode [ 191.392358][ T3518] veth0_to_bond: left promiscuous mode [ 194.176275][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.192630][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.245057][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 196.246901][ T5187] Bluetooth: hci2: command 0x0401 tx timeout [ 204.418986][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 226.965628][ T5187] Bluetooth: hci4: command 0x0406 tx timeout [ 237.185440][T10899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1279'. [ 237.339449][T10912] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1280'. [ 237.398850][T10918] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 237.480219][T10924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1284'. [ 237.491033][T10924] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1284'. [ 237.505672][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 237.636158][T10932] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1287'. [ 237.790249][T10939] netlink: 'syz.1.1289': attribute type 4 has an invalid length. [ 237.894951][T10942] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 237.903342][T10942] netlink: 'syz.4.1290': attribute type 2 has an invalid length. [ 237.933283][T10942] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1290'. [ 237.949497][T10944] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20002 [ 237.969041][T10942] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1290'. [ 238.027786][T10942] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1290'. [ 238.149332][T10963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1298'. [ 238.240453][T10963] bond5: option use_carrier: invalid value (4) [ 238.298340][T10963] bond5 (unregistering): Released all slaves [ 238.392745][T10976] Bluetooth: MGMT ver 1.23 [ 239.025637][T11011] Bluetooth: MGMT ver 1.23 [ 239.049694][T11011] smc: net device erspan0 applied user defined pnetid SYZ0 [ 240.038452][T11064] openvswitch: netlink: IP tunnel dst address not specified [ 240.097828][T11064] netlink: 'syz.1.1331': attribute type 5 has an invalid length. [ 240.150922][T11064] geneve2: entered promiscuous mode [ 240.183971][T11064] geneve2: entered allmulticast mode [ 240.211204][ T3518] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 240.241872][ T3518] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 240.331923][ T3518] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 240.406385][T11086] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20000 [ 255.606311][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.612919][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 301.386763][T11128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.443918][T11135] __nla_validate_parse: 14 callbacks suppressed [ 301.443934][T11135] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1347'. [ 301.766665][T11139] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 301.962923][T11159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1357'. [ 302.081705][T11167] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1362'. [ 302.092012][T11165] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1360'. [ 302.185123][T11171] dvmrp1: entered allmulticast mode [ 302.201646][T11169] netlink: 'syz.2.1361': attribute type 1 has an invalid length. [ 302.209152][T11175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1364'. [ 302.229903][T11174] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 302.294795][T11177] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1365'. [ 302.516112][T11185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.564847][T11185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.646550][T11195] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1368'. [ 302.832111][T11203] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1373'. [ 302.950470][T11213] netlink: 752 bytes leftover after parsing attributes in process `syz.4.1375'. [ 303.067209][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 303.211829][T11225] netlink: 'syz.0.1377': attribute type 1 has an invalid length. [ 304.084330][ T43] IPVS: starting estimator thread 0... [ 304.183349][T11268] IPVS: using max 26 ests per chain, 62400 per kthread [ 304.725221][T11299] netlink: 'syz.0.1398': attribute type 12 has an invalid length. [ 305.269712][T11326] vlan4: entered allmulticast mode [ 305.325414][T11326] hsr0: entered allmulticast mode [ 305.330661][T11326] hsr_slave_0: entered allmulticast mode [ 305.356288][T11326] hsr_slave_1: entered allmulticast mode [ 306.478410][T11403] __nla_validate_parse: 12 callbacks suppressed [ 306.478427][T11403] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1418'. [ 306.573607][T11403] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1418'. [ 306.890909][T11423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1424'. [ 306.922642][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1425'. [ 306.922749][T11423] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1424'. [ 306.945856][T11425] 8021q: VLANs not supported on ip6_vti0 [ 307.006876][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 307.065850][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 307.140399][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1429'. [ 307.229406][T11439] netlink: 'syz.1.1429': attribute type 20 has an invalid length. [ 307.323706][ T3518] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.345720][T11439] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 307.355093][ T3518] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.436531][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.666830][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1437'. [ 307.727232][T11470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.867777][T11489] netlink: 212288 bytes leftover after parsing attributes in process `syz.2.1440'. [ 307.909111][T11470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.348465][T11514] netlink: 'syz.0.1446': attribute type 2 has an invalid length. [ 308.371824][T11514] netlink: 'syz.0.1446': attribute type 2 has an invalid length. [ 308.502529][T11518] netlink: 'syz.2.1448': attribute type 1 has an invalid length. [ 308.535308][T11518] unsupported nlmsg_type 40 [ 308.590207][ T3518] tipc: Subscription rejected, illegal request [ 308.628381][T11524] team0: No ports can be present during mode change [ 309.187308][T11555] netlink: 'syz.1.1459': attribute type 1 has an invalid length. [ 309.196610][T11540] bridge0: port 3(veth0_to_bridge) entered blocking state [ 309.211993][T11540] bridge0: port 3(veth0_to_bridge) entered disabled state [ 309.226179][T11540] veth0_to_bridge: entered allmulticast mode [ 309.236568][T11540] veth0_to_bridge: entered promiscuous mode [ 309.474167][T11567] openvswitch: netlink: Flow key attr not present in new flow. [ 309.605626][T11577] netlink: 'syz.1.1466': attribute type 1 has an invalid length. [ 309.875146][T11572] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 309.887708][ T1153] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 309.912641][T11589] 8021q: adding VLAN 0 to HW filter on device bond5 [ 309.918120][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880566d6400: rx timeout, send abort [ 310.032320][ T993] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 310.043944][T11598] geneve2: entered promiscuous mode [ 310.051160][T11598] geneve2: entered allmulticast mode [ 311.558542][T11694] __nla_validate_parse: 17 callbacks suppressed [ 311.558560][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 312.161972][T11720] netlink: 'syz.1.1498': attribute type 1 has an invalid length. [ 312.184613][T11717] vlan2: entered allmulticast mode [ 312.189745][T11717] hsr0: entered allmulticast mode [ 312.216860][T11717] hsr_slave_0: entered allmulticast mode [ 312.228603][T11722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'. [ 312.253608][T11725] netlink: 212288 bytes leftover after parsing attributes in process `syz.3.1500'. [ 312.263087][T11717] hsr_slave_1: entered allmulticast mode [ 312.340999][T11717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'. [ 312.413037][T11731] FAULT_INJECTION: forcing a failure. [ 312.413037][T11731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.459342][T11717] 8021q: adding VLAN 0 to HW filter on device bond6 [ 312.497314][T11731] CPU: 1 UID: 0 PID: 11731 Comm: syz.4.1503 Not tainted syzkaller #0 PREEMPT(full) [ 312.497338][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 312.497359][T11731] Call Trace: [ 312.497368][T11731] [ 312.497376][T11731] dump_stack_lvl+0x189/0x250 [ 312.497405][T11731] ? __pfx____ratelimit+0x10/0x10 [ 312.497427][T11731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.497450][T11731] ? __pfx__printk+0x10/0x10 [ 312.497498][T11731] should_fail_ex+0x414/0x560 [ 312.497532][T11731] _copy_to_user+0x31/0xb0 [ 312.497560][T11731] simple_read_from_buffer+0xe1/0x170 [ 312.497593][T11731] proc_fail_nth_read+0x1b3/0x220 [ 312.497620][T11731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.497645][T11731] ? rw_verify_area+0x2a6/0x4d0 [ 312.497667][T11731] ? __lock_acquire+0xab9/0xd20 [ 312.497693][T11731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.497716][T11731] vfs_read+0x1fd/0xa30 [ 312.497739][T11731] ? fdget_pos+0x247/0x320 [ 312.497760][T11731] ? __pfx___mutex_lock+0x10/0x10 [ 312.497781][T11731] ? __pfx_vfs_read+0x10/0x10 [ 312.497807][T11731] ? __fget_files+0x2a/0x420 [ 312.497829][T11731] ? __fget_files+0x3a0/0x420 [ 312.497845][T11731] ? __fget_files+0x2a/0x420 [ 312.497872][T11731] ksys_read+0x145/0x250 [ 312.497899][T11731] ? __pfx_ksys_read+0x10/0x10 [ 312.497920][T11731] ? rcu_is_watching+0x15/0xb0 [ 312.497945][T11731] ? do_syscall_64+0xbe/0x3b0 [ 312.497971][T11731] do_syscall_64+0xfa/0x3b0 [ 312.497990][T11731] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.498010][T11731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.498029][T11731] ? clear_bhb_loop+0x60/0xb0 [ 312.498051][T11731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.498070][T11731] RIP: 0033:0x7fb47c98d8dc [ 312.498088][T11731] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 312.498104][T11731] RSP: 002b:00007fb47d8e9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.498123][T11731] RAX: ffffffffffffffda RBX: 00007fb47cbe5fa0 RCX: 00007fb47c98d8dc [ 312.498137][T11731] RDX: 000000000000000f RSI: 00007fb47d8e90a0 RDI: 0000000000000004 [ 312.498148][T11731] RBP: 00007fb47d8e9090 R08: 0000000000000000 R09: 0000000000000000 [ 312.498159][T11731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.498169][T11731] R13: 00007fb47cbe6038 R14: 00007fb47cbe5fa0 R15: 00007ffed270a4c8 [ 312.498201][T11731] [ 312.526440][T11736] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1505'. [ 312.727324][T11740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1506'. [ 312.881783][T11744] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1509'. [ 313.127128][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 313.586766][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 313.738561][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1520'. [ 313.865615][T11793] netlink: 'syz.1.1521': attribute type 10 has an invalid length. [ 313.875169][T11790] lo speed is unknown, defaulting to 1000 [ 313.899638][T11793] netlink: 'syz.1.1521': attribute type 17 has an invalid length. [ 313.911409][T11790] lo speed is unknown, defaulting to 1000 [ 313.963974][T11788] netlink: 'syz.2.1520': attribute type 10 has an invalid length. [ 314.109874][T11788] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 314.141884][T11790] lo speed is unknown, defaulting to 1000 [ 314.146012][T11793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.155804][T11790] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 314.245925][T11790] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 314.456937][T11790] lo speed is unknown, defaulting to 1000 [ 314.490586][T11790] lo speed is unknown, defaulting to 1000 [ 314.528325][T11790] lo speed is unknown, defaulting to 1000 [ 314.551801][T11790] lo speed is unknown, defaulting to 1000 [ 314.598181][T11790] lo speed is unknown, defaulting to 1000 [ 314.693353][T11836] netlink: 'syz.4.1529': attribute type 12 has an invalid length. [ 315.437594][T11874] netlink: 'syz.3.1543': attribute type 23 has an invalid length. [ 315.462648][T11876] netlink: 'syz.4.1544': attribute type 10 has an invalid length. [ 315.507259][T11876] team0: Device veth1_macvtap failed to register rx_handler [ 315.810823][T11897] 0{X: renamed from gretap0 (while UP) [ 315.830252][T11897] 0{X: entered allmulticast mode [ 315.842034][T11897] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 316.012150][T11903] chnl_net:caif_netlink_parms(): no params data found [ 316.432070][T11919] gretap0: entered promiscuous mode [ 316.443734][T11924] netlink: 'syz.0.1557': attribute type 10 has an invalid length. [ 316.514886][T11924] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 316.527004][T11924] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 316.558223][T11919] 0{X: renamed from gretap0 [ 316.567373][T11919] 0{X: left promiscuous mode [ 316.587812][T11919] 0{X: entered allmulticast mode [ 316.596698][T11938] __nla_validate_parse: 13 callbacks suppressed [ 316.596715][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'. [ 316.627037][T11919] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 316.688787][T11923] syzkaller0: create flow: hash 1338663707 index 1 [ 316.836537][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'. [ 317.025158][T11921] syzkaller0: delete flow: hash 1338663707 index 1 [ 317.049134][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.208827][T11961] netlink: 'syz.1.1562': attribute type 10 has an invalid length. [ 317.220813][T11961] netlink: 'syz.1.1562': attribute type 17 has an invalid length. [ 318.418810][T11961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.468082][T11976] pimreg: entered allmulticast mode [ 318.599605][ T43] lo speed is unknown, defaulting to 1000 [ 318.675622][T11984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1566'. [ 318.937875][T12006] netlink: 'syz.3.1574': attribute type 2 has an invalid length. [ 319.257998][ T8042] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.311253][ T8042] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.341014][ T8042] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.375537][ T8042] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.507868][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1579'. [ 319.527046][T12038] netlink: 'syz.2.1580': attribute type 9 has an invalid length. [ 319.562685][T12042] syzkaller1: entered promiscuous mode [ 319.566718][T12038] netlink: 'syz.2.1580': attribute type 6 has an invalid length. [ 319.568165][T12042] syzkaller1: entered allmulticast mode [ 319.594089][T12038] netlink: 'syz.2.1580': attribute type 7 has an invalid length. [ 319.623106][T12038] netlink: 'syz.2.1580': attribute type 8 has an invalid length. [ 319.717358][T12047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1583'. [ 319.742310][T12047] tc_dump_action: action bad kind [ 319.819399][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'. [ 319.864171][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'. [ 319.993252][T12066] netlink: 'syz.0.1582': attribute type 9 has an invalid length. [ 320.025446][T12066] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1582'. [ 320.355683][T12077] netlink: 'syz.4.1590': attribute type 1 has an invalid length. [ 320.465804][T12077] 8021q: adding VLAN 0 to HW filter on device bond3 [ 320.645812][T12083] bond3: (slave veth7): Enslaving as an active interface with a down link [ 320.680023][T12087] net veth1_virt_wifi .: renamed from virt_wifi0 [ 320.756066][T12088] bond3: (slave veth0_to_bond): making interface the new active one [ 320.778633][T12088] veth0_to_bond: entered promiscuous mode [ 320.790289][T12103] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1595'. [ 320.800258][T12088] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 321.074316][T12112] netlink: 'syz.3.1599': attribute type 11 has an invalid length. [ 321.106195][T12112] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1599'. [ 322.049386][T12164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.738975][T12202] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 322.753474][T12202] bond2 (unregistering): Released all slaves [ 323.337180][T12194] netlink: 'syz.2.1620': attribute type 1 has an invalid length. [ 323.345131][T12194] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1620'. [ 323.357043][T12194] netlink: 'syz.2.1620': attribute type 1 has an invalid length. [ 324.280013][T12272] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1639'. [ 324.628970][T12289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1644'. [ 324.777005][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1647'. [ 324.888695][T12300] bond0: (slave bond_slave_1): Releasing backup interface [ 325.079787][T12315] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1650'. [ 325.145118][T12315] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 325.406458][T12328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'. [ 325.717917][T12341] netlink: 'syz.3.1659': attribute type 3 has an invalid length. [ 325.732285][T12342] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 325.738901][T12341] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1659'. [ 325.799536][T12344] netlink: 'syz.2.1661': attribute type 2 has an invalid length. [ 325.888581][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1660'. [ 325.990525][T12360] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1664'. [ 326.174028][T12371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1666'. [ 326.364957][T12380] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 326.512517][T12385] netlink: 'syz.1.1671': attribute type 4 has an invalid length. [ 326.575615][T12394] netlink: 'syz.3.1674': attribute type 2 has an invalid length. [ 326.617180][T12394] netlink: 'syz.3.1674': attribute type 8 has an invalid length. [ 327.221588][T12432] netlink: 'syz.4.1687': attribute type 1 has an invalid length. [ 327.236546][T12432] netlink: 'syz.4.1687': attribute type 1 has an invalid length. [ 327.553065][T12444] openvswitch: netlink: Duplicate or invalid key (type 0). [ 327.573536][T12444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.273784][T12476] netlink: 'syz.4.1699': attribute type 1 has an invalid length. [ 328.281592][T12476] netlink: 'syz.4.1699': attribute type 10 has an invalid length. [ 328.320091][T12476] netlink: 'syz.4.1699': attribute type 4 has an invalid length. [ 328.403036][T12476] __nla_validate_parse: 10 callbacks suppressed [ 328.403052][T12476] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1699'. [ 328.696849][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1699'. [ 328.697539][T12484] bond2: ARP target 1.0.0.0 is already present [ 328.713268][T12498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1699'. [ 328.735695][T12484] bond2: option arp_ip_target: invalid value (1) [ 328.753550][T12498] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1699'. [ 328.797846][T12500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1704'. [ 328.810756][T12484] bond2 (unregistering): Released all slaves [ 328.951582][T12483] team_slave_0: entered promiscuous mode [ 328.957494][T12483] team_slave_1: entered promiscuous mode [ 328.981911][T12483] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 329.135898][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1707'. [ 329.178106][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1707'. [ 329.478922][T12541] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 329.751697][T12555] tc_dump_action: action bad kind [ 329.884247][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1717'. [ 329.935329][T12573] ip6_vti0: mtu less than device minimum [ 329.978627][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1715'. [ 330.030573][T12575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.361048][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1722'. [ 330.509893][T12594] 8021q: adding VLAN 0 to HW filter on device bond4 [ 330.574274][T12594] bond3: (slave bond4): making interface the new active one [ 330.598751][T12594] bond3: (slave bond4): Enslaving as an active interface with an up link [ 330.730074][T12602] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 330.793756][T12602] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 331.146518][T12634] gretap0: entered promiscuous mode [ 331.175386][T12634] 0{X: renamed from gretap0 [ 331.211985][T12634] 0{X: left promiscuous mode [ 331.239737][T12634] 0{X: entered allmulticast mode [ 331.263553][T12634] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 331.496299][ T30] audit: type=1800 audit(1759414532.422:2): pid=12655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1734" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1894 res=0 errno=0 [ 332.077529][T12676] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 332.122609][T12676] bond2 (unregistering): Released all slaves [ 332.253180][ T49] veth0_to_bond: left promiscuous mode [ 332.499777][T12708] lo speed is unknown, defaulting to 1000 [ 332.537409][T12708] lo speed is unknown, defaulting to 1000 [ 332.551153][T12708] lo speed is unknown, defaulting to 1000 [ 332.791713][T12708] infiniband syz0: set down [ 332.796722][T12708] infiniband syz0: added lo [ 332.808796][ T92] lo speed is unknown, defaulting to 1000 [ 332.971322][T12708] RDS/IB: syz0: added [ 332.978458][T12728] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.002793][T12708] smc: adding ib device syz0 with port count 1 [ 333.061270][T12708] smc: ib device syz0 port 1 has pnetid [ 333.083996][ T92] lo speed is unknown, defaulting to 1000 [ 333.102175][T12708] lo speed is unknown, defaulting to 1000 [ 333.456232][T12728] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.665585][T12728] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.014771][T12708] lo speed is unknown, defaulting to 1000 [ 334.089879][T12728] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.425441][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.515681][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.610575][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.663385][T12796] __nla_validate_parse: 21 callbacks suppressed [ 334.663403][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1768'. [ 334.666305][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.770406][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1768'. [ 334.924968][T12807] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1772'. [ 335.049108][T12708] lo speed is unknown, defaulting to 1000 [ 335.196439][T12823] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.317188][T12828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1780'. [ 335.355675][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1780'. [ 335.445176][T12828] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 335.474469][T12828] bond5 (unregistering): Released all slaves [ 335.560280][T12835] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 336.056992][T12708] lo speed is unknown, defaulting to 1000 [ 336.451658][T12876] syzkaller0: entered promiscuous mode [ 336.462904][T12876] syzkaller0: entered allmulticast mode [ 336.525213][T12886] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1794'. [ 336.546252][T12885] veth0: entered promiscuous mode [ 336.636305][T12877] veth0: left promiscuous mode [ 336.652047][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1793'. [ 336.995131][T12708] lo speed is unknown, defaulting to 1000 [ 337.097112][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1799'. [ 337.194596][T12916] netlink: zone id is out of range [ 337.199746][T12916] netlink: zone id is out of range [ 337.272399][T12916] netlink: zone id is out of range [ 337.278389][T12916] netlink: zone id is out of range [ 337.283734][T12916] netlink: zone id is out of range [ 337.288904][T12916] netlink: zone id is out of range [ 337.302737][T12916] netlink: zone id is out of range [ 337.307923][T12916] netlink: zone id is out of range [ 337.352247][T12916] netlink: zone id is out of range [ 337.839510][T12928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1804'. [ 337.861788][T12928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1804'. [ 337.879566][T12937] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 337.949257][T12928] ifb0: entered promiscuous mode [ 338.031669][T12928] ifb0: left promiscuous mode [ 339.031015][T12996] validate_nla: 3 callbacks suppressed [ 339.031035][T12996] netlink: 'syz.2.1817': attribute type 9 has an invalid length. [ 339.162335][T13003] veth0: entered promiscuous mode [ 339.516225][T13008] ifb0: entered promiscuous mode [ 339.546098][T13008] ifb0: left promiscuous mode [ 339.822626][T13036] netlink: 'syz.0.1829': attribute type 5 has an invalid length. [ 339.901862][T13041] __nla_validate_parse: 6 callbacks suppressed [ 339.901880][T13041] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1830'. [ 339.917839][T13042] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1830'. [ 340.102491][T13041] tipc: Enabling of bearer rejected, failed to enable media [ 340.174141][T13052] netlink: 212288 bytes leftover after parsing attributes in process `syz.1.1832'. [ 340.328454][T13059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1834'. [ 340.506772][T13071] netlink: 'syz.3.1837': attribute type 1 has an invalid length. [ 340.580848][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 340.646783][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 340.901934][T13090] netlink: 212288 bytes leftover after parsing attributes in process `syz.1.1844'. [ 341.048495][T13103] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1848'. [ 341.062934][T13104] FAULT_INJECTION: forcing a failure. [ 341.062934][T13104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.082765][T13104] CPU: 1 UID: 0 PID: 13104 Comm: syz.0.1846 Not tainted syzkaller #0 PREEMPT(full) [ 341.082811][T13104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 341.082833][T13104] Call Trace: [ 341.082848][T13104] [ 341.082863][T13104] dump_stack_lvl+0x189/0x250 [ 341.082893][T13104] ? __pfx____ratelimit+0x10/0x10 [ 341.082915][T13104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.082937][T13104] ? __pfx__printk+0x10/0x10 [ 341.082963][T13104] ? __might_fault+0xb0/0x130 [ 341.083007][T13104] should_fail_ex+0x414/0x560 [ 341.083040][T13104] _copy_from_user+0x2d/0xb0 [ 341.083066][T13104] __sys_sendto+0x25c/0x520 [ 341.083092][T13104] ? __pfx___sys_sendto+0x10/0x10 [ 341.083110][T13104] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 341.083144][T13104] ? __fget_files+0x3a0/0x420 [ 341.083171][T13104] ? ksys_write+0x22a/0x250 [ 341.083200][T13104] ? __pfx_ksys_write+0x10/0x10 [ 341.083223][T13104] ? rcu_is_watching+0x15/0xb0 [ 341.083249][T13104] __x64_sys_sendto+0xde/0x100 [ 341.083275][T13104] do_syscall_64+0xfa/0x3b0 [ 341.083296][T13104] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.083316][T13104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.083335][T13104] ? clear_bhb_loop+0x60/0xb0 [ 341.083355][T13104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.083371][T13104] RIP: 0033:0x7fea4b390d5c [ 341.083387][T13104] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 341.083402][T13104] RSP: 002b:00007fea495f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 341.083421][T13104] RAX: ffffffffffffffda RBX: 00007fea495f4fc0 RCX: 00007fea4b390d5c [ 341.083434][T13104] RDX: 0000000000000020 RSI: 00007fea495f5010 RDI: 0000000000000004 [ 341.083446][T13104] RBP: 0000000000000000 R08: 00007fea495f4f14 R09: 000000000000000c [ 341.083458][T13104] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 341.083468][T13104] R13: 00007fea495f4f68 R14: 00007fea495f5010 R15: 0000000000000000 [ 341.083496][T13104] [ 341.780272][T13131] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1857'. [ 342.188052][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1861'. [ 342.224339][T13159] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 342.257962][T13159] netlink: 'syz.0.1862': attribute type 4 has an invalid length. [ 342.306608][T13159] netlink: 'syz.0.1862': attribute type 4 has an invalid length. [ 343.159251][T13209] netlink: 'syz.3.1871': attribute type 16 has an invalid length. [ 343.194653][T13209] netlink: 'syz.3.1871': attribute type 17 has an invalid length. [ 343.309828][T13202] tipc: Resetting bearer [ 343.395686][T13202] tipc: Resetting bearer [ 343.439277][T13209] 0{X: left allmulticast mode [ 343.456732][T13209] sit0: left promiscuous mode [ 343.501398][T13227] net_ratelimit: 3 callbacks suppressed [ 343.519054][T13227] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 343.585917][T13209] dummy0: left promiscuous mode [ 343.594463][T13209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.015918][T13252] netlink: 'syz.1.1885': attribute type 7 has an invalid length. [ 344.451969][T13283] tipc: Enabling of bearer rejected, failed to enable media [ 344.967394][T13304] netlink: 'syz.3.1895': attribute type 21 has an invalid length. [ 345.166200][T13304] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 345.198023][T13304] bond5 (unregistering): Released all slaves [ 345.688013][T13349] __nla_validate_parse: 5 callbacks suppressed [ 345.688025][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1903'. [ 346.085263][T13371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1910'. [ 346.124717][T13371] bridge0: entered promiscuous mode [ 346.138317][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1909'. [ 346.146736][T13371] macsec1: entered promiscuous mode [ 346.155691][T13371] macsec1: entered allmulticast mode [ 346.183242][T13371] bridge0: entered allmulticast mode [ 346.217940][T13371] bridge0: port 3(macsec1) entered blocking state [ 346.237590][T13371] bridge0: port 3(macsec1) entered disabled state [ 346.257808][T13371] bridge0: left allmulticast mode [ 346.263352][T13371] bridge0: left promiscuous mode [ 346.736344][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1916'. [ 346.825716][T13408] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1917'. [ 347.056260][T13414] openvswitch: netlink: EtherType 0 is less than min 600 [ 347.057307][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1919'. [ 347.226212][T13432] netlink: 'syz.1.1923': attribute type 4 has an invalid length. [ 347.275523][ T92] lo speed is unknown, defaulting to 1000 [ 347.275609][ T9] lo speed is unknown, defaulting to 1000 [ 347.658043][T13461] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1927'. [ 347.783952][T13471] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1930'. [ 347.816366][T13461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.875825][T13461] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 347.902919][T13461] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.915240][T13461] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:3) [ 347.962027][T13461] bond0 (unregistering): Released all slaves [ 348.063891][ T12] bond3: (slave veth0_to_bond): link status definitely down, disabling slave [ 348.107434][ T12] bond3: now running without any active interface! [ 348.357032][T13490] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1935'. [ 349.101355][T13533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1946'. [ 349.825811][T13567] tipc: Resetting bearer [ 349.975593][T13575] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 350.085817][T13580] netlink: 'syz.2.1955': attribute type 10 has an invalid length. [ 350.126602][T13575] vlan2: entered promiscuous mode [ 350.131663][T13575] bridge0: entered promiscuous mode [ 350.159674][T13580] dummy0: entered promiscuous mode [ 350.167403][T13580] bridge0: port 3(dummy0) entered blocking state [ 350.182203][T13580] bridge0: port 3(dummy0) entered disabled state [ 350.192116][T13580] dummy0: entered allmulticast mode [ 350.226556][T13580] bridge0: port 3(dummy0) entered blocking state [ 350.233035][T13580] bridge0: port 3(dummy0) entered forwarding state [ 350.714409][T13607] tipc: Enabling of bearer rejected, failed to enable media [ 350.852850][T13605] lo speed is unknown, defaulting to 1000 [ 350.861863][T13605] lo speed is unknown, defaulting to 1000 [ 351.341894][T13637] __nla_validate_parse: 3 callbacks suppressed [ 351.341912][T13637] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1974'. [ 352.148731][T13677] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1985'. [ 352.359710][T13681] netlink: 'syz.1.1987': attribute type 12 has an invalid length. [ 352.449496][T13684] netlink: 'syz.2.1988': attribute type 23 has an invalid length. [ 352.750105][T13694] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.811228][T13702] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1994'. [ 353.674626][T13747] FAULT_INJECTION: forcing a failure. [ 353.674626][T13747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.711485][T13747] CPU: 1 UID: 0 PID: 13747 Comm: syz.1.2007 Not tainted syzkaller #0 PREEMPT(full) [ 353.711522][T13747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.711535][T13747] Call Trace: [ 353.711543][T13747] [ 353.711552][T13747] dump_stack_lvl+0x189/0x250 [ 353.711581][T13747] ? __pfx____ratelimit+0x10/0x10 [ 353.711602][T13747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.711625][T13747] ? __pfx__printk+0x10/0x10 [ 353.711653][T13747] ? __might_fault+0xb0/0x130 [ 353.711692][T13747] should_fail_ex+0x414/0x560 [ 353.711726][T13747] _copy_from_iter+0x1de/0x1790 [ 353.711762][T13747] ? rcu_is_watching+0x15/0xb0 [ 353.711784][T13747] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 353.711813][T13747] ? __pfx__copy_from_iter+0x10/0x10 [ 353.711838][T13747] ? __build_skb_around+0x257/0x3e0 [ 353.711865][T13747] ? netlink_sendmsg+0x642/0xb30 [ 353.711885][T13747] ? skb_put+0x11b/0x210 [ 353.711911][T13747] netlink_sendmsg+0x6b2/0xb30 [ 353.711943][T13747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.711969][T13747] ? aa_sock_msg_perm+0xf1/0x1d0 [ 353.711991][T13747] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.712013][T13747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.712039][T13747] __sock_sendmsg+0x21c/0x270 [ 353.712073][T13747] ____sys_sendmsg+0x52d/0x830 [ 353.712104][T13747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.712139][T13747] ? import_iovec+0x74/0xa0 [ 353.712169][T13747] ___sys_sendmsg+0x21f/0x2a0 [ 353.712193][T13747] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.712252][T13747] ? __fget_files+0x2a/0x420 [ 353.712269][T13747] ? __fget_files+0x3a0/0x420 [ 353.712296][T13747] __sys_sendmmsg+0x227/0x430 [ 353.712326][T13747] ? __pfx___sys_sendmmsg+0x10/0x10 [ 353.712348][T13747] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 353.712397][T13747] ? ksys_write+0x22a/0x250 [ 353.712426][T13747] ? __pfx_ksys_write+0x10/0x10 [ 353.712459][T13747] __x64_sys_sendmmsg+0xa0/0xc0 [ 353.712487][T13747] do_syscall_64+0xfa/0x3b0 [ 353.712508][T13747] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.712529][T13747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.712548][T13747] ? clear_bhb_loop+0x60/0xb0 [ 353.712572][T13747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.712591][T13747] RIP: 0033:0x7f2c0c58eec9 [ 353.712610][T13747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.712628][T13747] RSP: 002b:00007f2c0a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 353.712649][T13747] RAX: ffffffffffffffda RBX: 00007f2c0c7e5fa0 RCX: 00007f2c0c58eec9 [ 353.712664][T13747] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 353.712678][T13747] RBP: 00007f2c0a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 353.712691][T13747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.712703][T13747] R13: 00007f2c0c7e6038 R14: 00007f2c0c7e5fa0 R15: 00007ffd814e6978 [ 353.712735][T13747] [ 354.025447][T13753] netlink: 'syz.4.2010': attribute type 1 has an invalid length. [ 354.033267][T13753] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2010'. [ 354.042337][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 354.297131][T13776] netlink: 'syz.1.2017': attribute type 29 has an invalid length. [ 354.901164][T13814] netlink: 'syz.0.2027': attribute type 1 has an invalid length. [ 355.022560][T13817] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2029'. [ 355.135070][T13827] netlink: 'syz.1.2032': attribute type 1 has an invalid length. [ 355.163044][T13827] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2032'. [ 355.235708][T13832] netlink: 'syz.3.2035': attribute type 12 has an invalid length. [ 355.269439][T13834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.531190][T13845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2038'. [ 355.536352][T13849] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2041'. [ 355.563812][T13845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2038'. [ 355.676625][T13858] delete_channel: no stack [ 355.836767][T13866] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 355.858044][T13866] bond0 (unregistering): Released all slaves [ 355.877986][ T9] IPVS: starting estimator thread 0... [ 355.983831][T13873] IPVS: using max 29 ests per chain, 69600 per kthread [ 356.009562][T13867] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 356.044120][T13867] bond0 (unregistering): Released all slaves [ 356.361862][T13904] bridge6: entered promiscuous mode [ 356.372561][T13904] bridge6: entered allmulticast mode [ 356.582126][T13919] FAULT_INJECTION: forcing a failure. [ 356.582126][T13919] name failslab, interval 1, probability 0, space 0, times 0 [ 356.599772][T13919] CPU: 1 UID: 0 PID: 13919 Comm: syz.1.2061 Not tainted syzkaller #0 PREEMPT(full) [ 356.599797][T13919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 356.599809][T13919] Call Trace: [ 356.599816][T13919] [ 356.599824][T13919] dump_stack_lvl+0x189/0x250 [ 356.599852][T13919] ? __pfx____ratelimit+0x10/0x10 [ 356.599873][T13919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.599896][T13919] ? __pfx__printk+0x10/0x10 [ 356.599930][T13919] ? __pfx___might_resched+0x10/0x10 [ 356.599949][T13919] ? fs_reclaim_acquire+0x7d/0x100 [ 356.599973][T13919] should_fail_ex+0x414/0x560 [ 356.600008][T13919] should_failslab+0xa8/0x100 [ 356.600037][T13919] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 356.600064][T13919] ? __alloc_skb+0x112/0x2d0 [ 356.600089][T13919] __alloc_skb+0x112/0x2d0 [ 356.600114][T13919] netlink_ack+0x146/0xa50 [ 356.600133][T13919] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 356.600151][T13919] ? ref_tracker_free+0x63a/0x7d0 [ 356.600171][T13919] ? __asan_memcpy+0x40/0x70 [ 356.600191][T13919] ? __pfx_ref_tracker_free+0x10/0x10 [ 356.600241][T13919] netlink_rcv_skb+0x28c/0x470 [ 356.600263][T13919] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 356.600285][T13919] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.600318][T13919] ? netlink_deliver_tap+0x2e/0x1b0 [ 356.600347][T13919] netlink_unicast+0x82c/0x9e0 [ 356.600385][T13919] ? __pfx_netlink_unicast+0x10/0x10 [ 356.600417][T13919] ? netlink_sendmsg+0x642/0xb30 [ 356.600436][T13919] ? skb_put+0x11b/0x210 [ 356.600462][T13919] netlink_sendmsg+0x805/0xb30 [ 356.600491][T13919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.600516][T13919] ? aa_sock_msg_perm+0xf1/0x1d0 [ 356.600538][T13919] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.600558][T13919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.600580][T13919] __sock_sendmsg+0x21c/0x270 [ 356.600612][T13919] ____sys_sendmsg+0x52d/0x830 [ 356.600642][T13919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.600672][T13919] ? import_iovec+0x74/0xa0 [ 356.600701][T13919] ___sys_sendmsg+0x21f/0x2a0 [ 356.600727][T13919] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.600790][T13919] ? __fget_files+0x2a/0x420 [ 356.600806][T13919] ? __fget_files+0x3a0/0x420 [ 356.600834][T13919] __sys_sendmmsg+0x227/0x430 [ 356.600865][T13919] ? __pfx___sys_sendmmsg+0x10/0x10 [ 356.600887][T13919] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 356.600935][T13919] ? ksys_write+0x22a/0x250 [ 356.600964][T13919] ? __pfx_ksys_write+0x10/0x10 [ 356.600988][T13919] ? rcu_is_watching+0x15/0xb0 [ 356.601014][T13919] __x64_sys_sendmmsg+0xa0/0xc0 [ 356.601041][T13919] do_syscall_64+0xfa/0x3b0 [ 356.601062][T13919] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.601083][T13919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.601104][T13919] ? clear_bhb_loop+0x60/0xb0 [ 356.601128][T13919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.601146][T13919] RIP: 0033:0x7f2c0c58eec9 [ 356.601162][T13919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.601180][T13919] RSP: 002b:00007f2c0a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 356.601201][T13919] RAX: ffffffffffffffda RBX: 00007f2c0c7e5fa0 RCX: 00007f2c0c58eec9 [ 356.601223][T13919] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 356.601237][T13919] RBP: 00007f2c0a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 356.601249][T13919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.601261][T13919] R13: 00007f2c0c7e6038 R14: 00007f2c0c7e5fa0 R15: 00007ffd814e6978 [ 356.601294][T13919] [ 356.970121][T13913] __nla_validate_parse: 3 callbacks suppressed [ 356.970140][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2060'. [ 356.971948][T13921] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2062'. [ 357.112937][T13927] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2063'. [ 357.134771][T13927] netlink: 'syz.0.2063': attribute type 21 has an invalid length. [ 357.195524][T13927] netlink: 'syz.0.2063': attribute type 22 has an invalid length. [ 357.220901][T13927] netlink: 'syz.0.2063': attribute type 23 has an invalid length. [ 357.229274][T13927] netlink: 'syz.0.2063': attribute type 25 has an invalid length. [ 357.253223][T13927] netlink: 'syz.0.2063': attribute type 26 has an invalid length. [ 357.261072][T13927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2063'. [ 357.780409][T13959] siw: device registration error -23 [ 357.974114][T13971] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2079'. [ 358.097194][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2081'. [ 358.137162][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2081'. [ 358.314027][T13987] netlink: 'syz.4.2083': attribute type 29 has an invalid length. [ 358.333840][T13987] netlink: 'syz.4.2083': attribute type 29 has an invalid length. [ 358.351059][T13987] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2083'. [ 358.405496][T13991] tipc: Enabled bearer , priority 0 [ 358.512614][T13991] syzkaller0: entered promiscuous mode [ 358.525502][T13991] syzkaller0: entered allmulticast mode [ 358.541983][T13991] tipc: Resetting bearer [ 358.812854][ T36] tipc: Resetting bearer [ 358.820919][T13990] tipc: Resetting bearer [ 358.989160][T14016] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2088'. [ 359.526528][ T43] tipc: Node number set to 542783684 [ 360.317733][T13990] tipc: Disabling bearer [ 360.411769][T14033] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 360.649944][T14052] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2098'. [ 360.675218][T14051] tipc: Enabled bearer , priority 0 [ 360.711805][T14051] syzkaller0: entered promiscuous mode [ 360.730449][T14051] syzkaller0: entered allmulticast mode [ 360.854688][T14051] tipc: Resetting bearer [ 361.177038][T14041] tipc: Resetting bearer [ 361.177858][ T12] [ 361.185104][ T12] ============================================ [ 361.191233][ T12] WARNING: possible recursive locking detected [ 361.197361][ T12] syzkaller #0 Not tainted [ 361.201754][ T12] -------------------------------------------- [ 361.207875][ T12] kworker/u8:0/12 is trying to acquire lock: [ 361.213820][ T12] ffffe8ffffd66fa0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 361.223046][ T12] [ 361.223046][ T12] but task is already holding lock: [ 361.230384][ T12] ffffe8ffffc7e988 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 361.239579][ T12] [ 361.239579][ T12] other info that might help us debug this: [ 361.247618][ T12] Possible unsafe locking scenario: [ 361.247618][ T12] [ 361.255052][ T12] CPU0 [ 361.258306][ T12] ---- [ 361.261557][ T12] lock(&pd_list->lock); [ 361.265861][ T12] lock(&pd_list->lock); [ 361.270197][ T12] [ 361.270197][ T12] *** DEADLOCK *** [ 361.270197][ T12] [ 361.278313][ T12] May be due to missing lock nesting notation [ 361.278313][ T12] [ 361.286604][ T12] 3 locks held by kworker/u8:0/12: [ 361.291685][ T12] #0: ffff888145e9e948 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 361.303567][ T12] #1: ffffc90000117bc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 361.315372][ T12] #2: ffffe8ffffc7e988 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 361.324996][ T12] [ 361.324996][ T12] stack backtrace: [ 361.330876][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 361.330891][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 361.330899][ T12] Workqueue: pencrypt_parallel padata_parallel_worker [ 361.330916][ T12] Call Trace: [ 361.330922][ T12] [ 361.330927][ T12] dump_stack_lvl+0x189/0x250 [ 361.330941][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.330953][ T12] ? __pfx__printk+0x10/0x10 [ 361.330967][ T12] ? print_lock_name+0xde/0x100 [ 361.330981][ T12] print_deadlock_bug+0x28b/0x2a0 [ 361.330992][ T12] validate_chain+0x1a3f/0x2140 [ 361.331005][ T12] ? __queue_work+0x102/0xfb0 [ 361.331015][ T12] ? look_up_lock_class+0x74/0x170 [ 361.331026][ T12] ? register_lock_class+0x51/0x320 [ 361.331039][ T12] ? __queue_work+0xc56/0xfb0 [ 361.331054][ T12] __lock_acquire+0xab9/0xd20 [ 361.331069][ T12] ? padata_do_serial+0x73e/0xb80 [ 361.331081][ T12] lock_acquire+0x120/0x360 [ 361.331094][ T12] ? padata_do_serial+0x73e/0xb80 [ 361.331108][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 361.331121][ T12] _raw_spin_lock+0x2e/0x40 [ 361.331135][ T12] ? padata_do_serial+0x73e/0xb80 [ 361.331148][ T12] padata_do_serial+0x73e/0xb80 [ 361.331162][ T12] ? padata_parallel_worker+0x44/0x1d0 [ 361.331175][ T12] padata_parallel_worker+0x75/0x1d0 [ 361.331187][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 361.331197][ T12] process_scheduled_works+0xae1/0x17b0 [ 361.331212][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 361.331224][ T12] worker_thread+0x8a0/0xda0 [ 361.331240][ T12] kthread+0x70e/0x8a0 [ 361.331252][ T12] ? __pfx_worker_thread+0x10/0x10 [ 361.331261][ T12] ? __pfx_kthread+0x10/0x10 [ 361.331273][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.331281][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.331291][ T12] ? __pfx_kthread+0x10/0x10 [ 361.331303][ T12] ret_from_fork+0x439/0x7d0 [ 361.331313][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 361.331324][ T12] ? __switch_to_asm+0x39/0x70 [ 361.331336][ T12] ? __switch_to_asm+0x33/0x70 [ 361.331347][ T12] ? __pfx_kthread+0x10/0x10 [ 361.331359][ T12] ret_from_fork_asm+0x1a/0x30 [ 361.331375][ T12] [ 361.600535][T14041] tipc: Disabling bearer