last executing test programs: 3.251645561s ago: executing program 3 (id=1811): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xffffffe1}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x10, 0x0, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xffffffe1}]}}}]}, 0x3c}}, 0x0) (async) 2.970992958s ago: executing program 4 (id=1816): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0)='+&\'*\x00', 0x82000, &(0x7f0000000140)={@align=0x8, {0x6, 0x7, 0x8, 0x42f3}}, 0xc, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x3ff}) sendmsg$nl_netfilter(r0, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x16c, 0x8, 0xa, 0x801, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x41, 0x0, 0x0, @ipv4=@local}, @nested={0x147, 0x52, 0x0, 0x1, [@typed={0x14, 0x123, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="c090cf2a1a09be266315e7a6d482f1ab3474ae1e6ec5b2348bd88ea422491c2c6588c53b96d828218bbb42603389e3b42720c5812d5c7e22c1e31cefe0dc165596e8c32feceef3af48b5876f4444de415a44fcc9e7fd098efffaea8ae9b218b4660e0f8f47b41c764a3fd3d67ee0384f294d3fbd04403e378031ed1fd5882c91df6dbb12dea8ca15d6bff9dc98a31df99f2ed49293af21abbed3a7971034a86752836e6c0c2bbac68ae5039bafd1174786a6897501a590b81e8ba71801b9fc5a81e1c51a6b31474b337de7ebf72deb9a9fb3318a65db1c13126cbc931d7021cfbf4b864cf26d8aaa50492f52b15505f7f70cf41fb7e9e9e6", @generic="1c74e19e17bf679fecea2cf4de6e8101f564a82952dcaa99c87ce2f465959a59e22c8e5570baa8288a4c0d", @typed={0x6, 0x23, 0x0, 0x0, @str='+\x00'}, @nested={0x4, 0xef}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x1cc, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "b65898a93d00e02bdcdf438b2e55e0fda0c1c12becc7290850e7ffd50a8fbc6dcc33590c"}}, @TIPC_NLA_NODE_ID={0x9f, 0x3, "7916f26be6cdaa4e4abfa9b880ac1783813ba8344b5955786eeef73e5393e4fcf9ece6cd14ecd010063b9b50b57f3dea6f9a594d0783906138faf3535999d5191848099829b351cc99f7cab40e3e44e267b3538625112eceebe9663c5bc5e4fda2410d5490234cbd2dcc70041ab115286c132965c4d0f6615f41a6e5353058d923c495ed0bbbc40f20cd2c508270166f00d79438f01d6035ec5a91"}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d4e"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.765056867s ago: executing program 0 (id=1819): r0 = socket$inet6_sctp(0xa, 0xd99daeaacff84803, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x7, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r1, 0x4) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'veth0\x00'}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000180)={r1, 0x5f, "dfcf03b7427c753199b07f1b8ada9370b0c5ae46c376db679e5269402fe5ab7d5a8b76c32264e8bb60005994612a35477aafa7331696e7d3826057f47ce62c314f17d41a27b466bd81af1a52278e698a32d36f7a9d2850316a53e8c90012c6"}, &(0x7f0000000200)=0x67) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={r2, 0xeb, "f248e5b9bcca5598711e4b8cea15324323d39a1d032fae14eb9f345ac26adf116c9a4cc362cc0e8c2a4434a8bb4efbcbc2fe8a6d48d4e012f928d216d4fec7031e986f5fc9298ec6c0715085d06f42abf72bfaad5c4c202c2ff4ec6a61ecdef9316cf69e47ec45febabc4b3e04ec92be2f5c2b21441d4cacf9b2b36a2c6899eb8041211409c22b4f4c9212ae838cbea92563de5579afd3d65385bcda6b3bda07969c563e705d160295a1b283f60a0fc3e4de9f074a7ce8ce7306915d01c655198366d923206f68643d937ce15d739c787b4edb558afdf0c247073014dde28968cfdc01441d5b742ebbcc8d"}, &(0x7f0000000340)=0xf3) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000380)=0xf9c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000004c0)={r2, 0x4, 0x9, 0x4}, &(0x7f0000000500)=0x10) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000000540)={'IDLETIMER\x00'}, &(0x7f0000000580)=0x1e) r8 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f00000005c0)={0x1ff, 0x8, 0x6, 0x89f, 0x81}, 0x14) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) ioctl$TUNSETVNETLE(r9, 0x400454dc, &(0x7f0000000640)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000000680)={r6, @in6={{0xa, 0x4e21, 0x4, @local, 0x510}}}, &(0x7f0000000740)=0x84) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000780)={'veth1\x00', 0x200}) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)={0x7ff, {{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}, 0x3}}, 0x1, 0x9, [{{0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, {{0xa, 0x4e20, 0x3d5, @mcast2, 0x8}}, {{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}, {{0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, '\x00', 0x2f}}}, {{0xa, 0x4e21, 0x1, @empty, 0x1}}, {{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x39}, 0x8}}, {{0xa, 0x4e22, 0xc8ff, @ipv4={'\x00', '\xff\xff', @multicast2}}}, {{0xa, 0x4e22, 0x8, @empty, 0xb}}, {{0xa, 0x4e22, 0x4, @private2, 0x6}}]}, 0x510) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000d00)={r1, @in6={{0xa, 0x4e21, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}}, 0x10000, 0x2, 0x2, 0x0, 0x0, 0x0, 0x10}, 0x9c) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000000dc0)={r6, 0x1, 0x5}, &(0x7f0000000e00)=0x8) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x1, 0x2, 0x1, 0x8, 0xb, 0xfffffffffffffff0, 0x1}, @call={0x85, 0x0, 0x0, 0x87}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000f00)='GPL\x00', 0xb, 0x4a, &(0x7f0000000f40)=""/74, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001000)={0x4, 0x7, 0xb1, 0x92bb}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r7, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001080)=[{0x3, 0x3, 0x7, 0x5}, {0x0, 0x1, 0x7, 0x3}, {0x5, 0x3, 0xd, 0xc}], 0x10, 0x11e0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001280)={@ifindex, 0x9, 0x1, 0xffffffff, &(0x7f0000001180)=[0x0], 0x1, 0x0, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r13, 0x0, 0x25, 0x1, @val=@tcx={@void, @value, @void, @void, r14}}, 0x1c) 2.6650823s ago: executing program 4 (id=1821): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) bind$packet(r0, 0x0, 0x0) (fail_nth: 1) 2.533436039s ago: executing program 3 (id=1823): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)=ANY=[@ANYBLOB="140000005600010a00b6dd9370ee000000000000"], 0x14}], 0x1}, 0x0) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x3fffff, @loopback, 0x2}, 0x1c) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "c80b516dda5bee70", "74c289bfa825c781a1f1997da00a3345", "5ceff78f", "5ec36f40cf749574"}, 0x28) sendmsg$nl_netfilter(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x23c, 0x5, 0xb, 0x301, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x6}, [@nested={0xb, 0x82, 0x0, 0x1, [@generic="542f0f", @nested={0x4, 0xc7}]}, @typed={0x7, 0x12a, 0x0, 0x0, @str=':-\x00'}, @typed={0x4, 0xd3}, @nested={0x1a7, 0xe6, 0x0, 0x1, [@nested={0x4, 0x6b}, @generic="780fb2f7ab807f42fa0b28ddb70b5fa2b3c29521f10439cc6dc8a95ba0df31a6797ccf8a", @typed={0x8, 0x16, 0x0, 0x0, @pid=r2}, @typed={0xcf, 0x103, 0x0, 0x0, @binary="d1f3b19610c03760dbeee5e82ca965ccad6735764b3ac450de4646099f0671d1497fa4be9ff40a95056bf385f9b53c7e631ded53915c349987b5f1862f59dd00bd35c64b8aa6d6156703064b361794519952d216fbaea572d7b79472d4461e3be9c80786507c919b894c80755ad9c9d230666765ad5118691c77c79e097fdeea69770aea81185fe127d300c316375d3531b741022b6047494bdc9aed4a262392cb590e289dcd668c780c06a7b1dd6232c509aa887f71949e950ec3e985c0fc7e74c9a5c4614324c044306f"}, @nested={0x4, 0x13a}, @generic="4baa4e16f4c639af4951d6328bcaa344679b0d36c0511db98b2633fb596274e75c4f4c93585219b4eade19ab0df055b3311281da74354afd5c28f980034cefa80214ac7c1224945ce9fa3e7a8fb159de3f3093b7b3adb5d37a0ca16f1727ec998832e420196278255fc3b7d46ba91c00fd0c72b8cfac01e9ecc576d61fd142f75938d74a1c1765", @typed={0x14, 0xa3, 0x0, 0x0, @ipv6=@loopback}, @typed={0x4, 0x23}]}, @nested={0x5f, 0xc5, 0x0, 0x1, [@generic="22721b9cf4389c353246cfaf2d57caeaa773b793dfe5da9a4a879bf8de7c3e722e7035dc3d5754253dba041bef2e98066c324960e8f725144dff7ffb8fc3d09a562e9a89a62692b73e13cebcba5cbd0eb8debf99307762f19615fa"]}, @typed={0x8, 0x119, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, 0x23c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x800) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r5, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0xffffeb76}], 0x1, 0x20000040, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {}, {0x1, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0xfffffffffffffff6, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r8}, 0x14) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='gre0\x00'}) 2.442222674s ago: executing program 0 (id=1825): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c6dc39939e3d6bd00000000000000000000000a20000000120a01010000000000000000000000050900010073797a31000000000000002a654c4a0000000000000080000000000a"], 0x48}}, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000200)=0xffff, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffb1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/20], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0xf3f, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x100, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaaaa86dd615be31400ca2f0000000000000000000000ffff00000000fc02000000000000000000000000000059080404ba400700fe80000000000000000000000000003fff01000000000000000000000000000100000000000000000000000000000001fe800000000000000000000000000015ff00072966000000000404020140ff01fc0100000000000000000000000000004ab4800000000000000000000000000108000ce164000000330300000000000004010905020401c2041fa336187f0a66ca4f0b85ee2e725d7805020800000000897fc20688884fc3327d2eba4e2d8c095ea8bb11a45016ae8e7c31b2c856a75105dc"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYBLOB="00000008000000001c0012800b00010067726574617000000c0082800600020020200000141e8a6c17b1b6b2fc"], 0x50}, 0x1, 0x0, 0x0, 0x8845}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000800002000128008000100677265001400028008000700ac14140006000300bf000000ec247d62514beb0b83e2d157ce7d9d3b2530519077261623d097a9c27b84068cbbfbb9140681b21bd0b5f272a53deb6deee2ac65b92c686330dbb1a75377"], 0x40}}, 0x0) 1.815039892s ago: executing program 0 (id=1828): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000001200)="f8", 0x1}, {&(0x7f0000000240)="608172e786980555e643f0e8c145676fc49086c38bc2df5ccb77358333244a5ca585c33eec5bbbf9b78cb1aa91623f19be8dca5343fb57368ec6afb891ba0206f28081175527878f142ceea36f70070a9a3f356586edcd4224c5f9fd0270ec3770edb74a9a0cdd281005c05636bb37e86d090c658ecf68d6fceb7402cbb96c5b448b4e3ec4d6b607c3b1e51e9378cad5d9c01b7a20ba65dbd36f8501e25625cc967814315821475ef20a285bbe2b3cbe1810c1de82326e8ede7841675ebde60e1e7c520f5e8950ff142a216914e963c0297b80886f", 0xd5}, {&(0x7f0000000340)="a3d10099845fe9c97fdf7a93c9e2b24f20271c2bb68d582c402d6e6b87b78e701dfb961fc16fa4795dd4685dce0ee6a50f0560792af4f1716c83678e9dc0a9526b7cf665e0364756f836", 0x4a}, {&(0x7f00000004c0)="a6595fe21516988bde52894ddaf6c851ba4ba90e5d8e1a3e4137722f0192a0d7657ec7d0180144337d840e9075cabfebb3cc75f6e2b825b1a11771b26847d956ad6199b783061a8bfcda27472dc7d93d28cd71e4ab25470f4722b36feea26587bd9e9f1602f90e81eb659e91dce9034219e7f62b4c4bce6dfad5c79547ec66bf40206bc668122a1a1064156ebaf9cb726273af2ea98a4047e9dbcea166554c977c2ff995287b32c094ff2fcb168d94229503f7667f3e2808b0", 0xb9}], 0x4}}], 0x1, 0x400c800) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r2 = socket(0x10, 0x3, 0x0) vmsplice(r2, &(0x7f0000001e40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}], 0x1c) (async) sendmmsg$inet6(r1, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000001200)="f8", 0x1}, {&(0x7f0000000240)="608172e786980555e643f0e8c145676fc49086c38bc2df5ccb77358333244a5ca585c33eec5bbbf9b78cb1aa91623f19be8dca5343fb57368ec6afb891ba0206f28081175527878f142ceea36f70070a9a3f356586edcd4224c5f9fd0270ec3770edb74a9a0cdd281005c05636bb37e86d090c658ecf68d6fceb7402cbb96c5b448b4e3ec4d6b607c3b1e51e9378cad5d9c01b7a20ba65dbd36f8501e25625cc967814315821475ef20a285bbe2b3cbe1810c1de82326e8ede7841675ebde60e1e7c520f5e8950ff142a216914e963c0297b80886f", 0xd5}, {&(0x7f0000000340)="a3d10099845fe9c97fdf7a93c9e2b24f20271c2bb68d582c402d6e6b87b78e701dfb961fc16fa4795dd4685dce0ee6a50f0560792af4f1716c83678e9dc0a9526b7cf665e0364756f836", 0x4a}, {&(0x7f00000004c0)="a6595fe21516988bde52894ddaf6c851ba4ba90e5d8e1a3e4137722f0192a0d7657ec7d0180144337d840e9075cabfebb3cc75f6e2b825b1a11771b26847d956ad6199b783061a8bfcda27472dc7d93d28cd71e4ab25470f4722b36feea26587bd9e9f1602f90e81eb659e91dce9034219e7f62b4c4bce6dfad5c79547ec66bf40206bc668122a1a1064156ebaf9cb726273af2ea98a4047e9dbcea166554c977c2ff995287b32c094ff2fcb168d94229503f7667f3e2808b0", 0xb9}], 0x4}}], 0x1, 0x400c800) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) (async) socket(0x10, 0x3, 0x0) (async) vmsplice(r2, &(0x7f0000001e40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) (async) setsockopt$rose(r2, 0x104, 0x7, &(0x7f0000000000)=0x7, 0x4) (async) 1.606056312s ago: executing program 0 (id=1830): syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000005400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000053c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a440000000e0a01020000000000000000070000000900010073797a30000000000900020073797a32000000000900020073797a30000000000900020073797a3200000000885100000e0a010300000000000000000200000acc1f038014000080100007800b000100746172676574000018020080e00101807a00010044ff6d1f5f9e3013ecfc947e6912c711a9e19a0f28d26cfd783b08ba51d378baa0c574c5790b86b03008a8143af6d40e35ec994ebb3d43bd7213616497bfccdb1b185e89b4a8af662a541b38100a4b2e69f007e1c5f58e90ec6a9f65d83ab82bc7f25b0bccf1a57ea982f9037ff25af2e0df7a2693a700002200010096094a33d3188ff178888a9c2006c975e64a3bd956f2c186f48bc9deb6b00000480002800800034000000002080003400000000208000180000000000900020073797a30000000000900020073797a310000000008000180fffffffc0900020073797a300000000084000100c09a0ab5c7b3bd4beaadc734565139fdad36c6f5a086794787f6818dd69a6060617f5ea1371983c531ae7c132f7972b496563895fbcb5d3d527bfea0be8da28c01a07877e18ba3ec46a3363cc77a6ade56ea82453aa80157e4233fea20e3be80ed620c1a83290dc5734c1f051191a5d599ec6419a961a34084f3a17f5e4f8c70280002800800034000000004080003400000000408000180fffffffb0900020073797a32000000004800028008000180fffffffc0800034000000003080003400000000108000180ffffffff080003400000000408000340000000030900020073797a320000000008000180000000000c000540000000000000bcd20c00054000000000000000091c000780090001007866726d000000000c0002800500030002000000f8030080e6000640dd3e97de40a321bebc6e5d42d2671c0e08d1b96df581a6a82c1ad777b87a82928f3c1317c32538fa8c9d7f84b50e31036b15dfa5a973fd9a4d7f2322c55de6f450b6cd1355c79c306bc785a9555ca67e97a939d661da5da9cfc2a02223b46b5be40bd9dc595327ae856015054dae659e27faadb7b6fb6dfeba98dd45977c44ee6e47c95b1adc4da8cad3a1a99d09e367a3128b72c664b875fe1930cc70c2a8bce6412bed576f4d82c46141905074ddade3889096a7ebaaa8af9358c6619baa5f7695e097bce1db300755abca7bec330bbcca3c5d876b3832dab81e526d7b833c78e500000c0005400000000000007fff0900090073797a3000000000f4000a80ef0001009c336e2125cb0067c1c5df279132468ae29d65d5f9327a2c8a80a75b458f2b69b1df4ca29e47c3c79015c5d317fa5db428301808c08c771250d61ecc8ad9f645774a47b80b606b00194ca69b4af977e1d575a5af9cf84655b1352bb48de11ff69d7502bc85d619322d00726b5da6bae6213d9ec2e2420ee8e5ab52533adfca9acb044c411528d07d7ee52ffcf0a46e569ebc1c2fb760036e5ca9d6769d065a6d3d20c0afaf9b883d3cfeef8b6fc65bb6820cd24ccf12352cafd36d6b235a9d6ff742f27db3931d0ac7c5d263e0317d0be9a423d94761ddefdbdbaeae78115f1674b0f73ad02ee1fe6fc3c4000900090073797a320000000008000340000000020900090073797a3100000000e0010280dc0001001cc0584f6ffea25c610c24b4da791e615eac9e677ec033de2080c8b90b758f56d13394beafd84db75269c124e50dac35616a30b5b28b7a5452f915b9164453d2c847956d63853c4754e2b86587c12a9d4c39074815f5f8d585ec9076cfd64b9d8d53df4869d993dfebec9af5f31105d2d5bd98f6194575d24afbfc6e788c346b681a50b95b731894e65d248ea2fa8af1ee7ac1817915abb0b93c6fff9e12ce7221f3e6751c562d3232771360cae819951e56a53087b82af640068b2cc192d2dffe84fd90a0e252ba17b77e7bced0dfec15e82e3b9f1e36cfff00010020db33b81d4d011e38d1f389e18929b35909e1dfcbe93c79912dcd824948251d816957e881d45010c28bfb7c209807ec561b6c7487baea1a5e18f241a3e195b5aa26b709771a53b1cbefa85cde4f2444a76a0fef85023a3215c59cc6562e0c5b3902f759ac021802bfa956ad570ed066d53e6efbb6b6932e86a3091ac2e0f6ba08b480e99edc42477024600693ecbb5f01b54f6da081e7b19c5b6f01b26d0ded6fb9fa05d6a0b7a5bd8722211ac9f851827ae2b36108c4bbde19ae3304bfd99c716cc76420711d725c0161ef68248c7f31c40f97f5a3faf36f605f32e97fbd70a300b65cf56712c9c612dcec59df67a05d6cab02d13fa5c9b3d0380078040080dc000a80a80001002bce8fad9391568e195378cdfd9ca6760ef1796df9ef0f0f8ceeb117b84eaebddca1f0b46c7fbbf16199dbfe87e32ecc52c14f847939696204109861024bf74df4cdf05259a715c19a6800b1eb8292ca5f6c21d934300c5668896955d781bf6c218d7c272db151e1f37b35e017bf76aa3347c898bc3c3ef2ffc74b25b5358be7af2dcf9c59151c66611f511c9d762690a529bf9f614bb5d2e8e42c4f5a3468eec53125972f000100bb882b32fa0f8137da300e4b234ac17821c58d000333fb66988c81033abea5cead35661647e2edf26537fa0028020b80080101800b00010064796e7365740000f8000280080002400000000108000540000000000900010073797a320000000008000940000000020800034000000001c8000a80400001800e000100627974656f726465720000002c0002800800014000000004080005400000001c08000540000000a40800014000000004080001400000000e0c000180080001006e617400680001800a0001006c696d69740000005800028008000340000000810800034000006749080004400000000008000540000000010c000140000000000000000408000540000000010c00024000000000000000040c00014000000001000000000800034000000044100001800c000100636f756e746572001c000180090001006d617371000000000c000280080003400000000c100001800a0001007175657565000000100001800b00010064796e7365740000100001800a0001006d617463680000003800018007000100727400002c00028008000240000000030800014000000009080002400000000108000240000000020800014000000000380001800a00010071756f7461000000280002800c000440000000001d4ea1140c00044000000000000100010c00044000000000000000014c000180090001006d617371000000003c000280080001400000000a08000240000000120800024000000011080002400000001808000240000000000800014000000014080003400000000c14000180090001006d61737100000000040002800c00044000000000000000045c010a80a4000100a462ef19d9f8614865a367e0d1a71f406c4cce76515808cbfb7a08ae748196e2f0eed0a269391d1a3cae7a91f50d59b09f4638d8679aae9280ebc4d37264bf9d6860a409f93e05258639b38d042f81b932cbb03f01efd720515aeed72834b332d3f772d18ade6a46b99da803fa37eeb2d35e6933067873508ea22dd933cff4c1a1f3c23efca3cf05dce87bbee1b7c399ba0f1b8a9c6686a9dd6d4f8785c9120460000280080003400000000108000180fffffffc08000180fffffffe08000180fffffffd0900020073797a31000000000900020073797a320000000008000340000000010900020073797a320000000008000180fffffffe08000180fffffffd100002800900020073797a300000000044000100813c10dcc7dcf938fd25a74981aca4e0365ff1149e2fb1cb7255644a8b0349221290e538bf8b3af57fbec9d4b28a97ad09fb74970ca80617ff376a3cb9f0942a0800034000000001580100804c000b80100001800b0001007470726f78790000380001800a0001006d617463680000002800028022000300b1c95bdb2c9d8a11a0ea4ce21d0af95ae165aef90c50331aa7051f540ebb00000c0005400000000000000003e4000a80dd000100c6fd17fb555f912d22b2045b49073a33e2082d8c785d783a66e75cdda995ba1b23c140debe12204670079ae33cfe4767a196ec2d4c2f14a511d1e4df5c56b4229485d814bc7d9decc5114b21fdaaa4acf788dd792f0496bc4ec3c57aa7333bd15fe58b9c3d3bf86149135a7b483f4cb28e1369b673cf7b39c68fe590ad64c1f79ff3a94061bba9f6a6cc161012f10c6195cf2c5ca05b26dc9faa9c2596bedb3ea1c66ab43310ed7b3822a279322eec5a99681639f545afed932564a3b3432d22bc6483378a36ff3db26343e811cb6c735b6c03f29f2a8394240000000c00054000000000000000030900090073797a3200000000100000800c0007800800010066776400c41300801c0007800b0001006e756d67656e00000c0002800800024000000fff0400018008000340000000000800034000000003641201802c00028008000180fffffffe08000180fffffff80800034000000002080003400000000108000180fffffffe260001008c3c1c3c9be1957cc6949e93bc8b808540c9fb7d1d59880e14d254e147a6c40fd8ca000080000100b099ff799f752a09e3de9e5f97b907fdce306cdf76131cc3f58a78a7e201b2e57ef70a0876fe6636372c9a3ccc64c48da276e2553158124acb6e439f3eb8cbdb52d115bc96995cbdc195dc5ddb2517e1c4a10f0575181796d1c39ab606741555f98f8bfcf4604fff1ce889af1b3634f40b078df18d537e9dea2ba92e1400028008000180fffffffc08000180fffffffb2000028008000180ffffffff08000180fffffffe0900020073797a320000000054000280080001800000000008000340000000010900020073797a310000000008000180fffffffd080003400000000108000180fffffffe08000180fffffffb0900020073797a300000000008000180fffffffb240002800900020073797a310000000008000340000000010900020073797a3100000000041001006322a0cc433d4c09646800c60491e51871e7b836eb392bf58bde0caa55ba40008e6844048105923c004f17d48326dd9e184081c855fc8eef938ad39341b6b5096d1fba42366066b442d04a3a64714f68d96b0d4f481f6fd14f6ba176109d87a9523beabf496fa623f7f9546a582d262be00cdbe4abed2526d6d90575cc80c607b148333c355f82bd97ad22949e94e400454b0f1ef201ad4248724173af3ce8128d958210e12788fa15c38c178ed2c8d386f72c0327a781e70f485ae90b50cc9d7293c742573661706186b5ffb0e4b6b1e0de542b63010a2dabca561b8f074491d6c1dcabc55c700f7578877bc6ebe2f08624db74285bf754b2fa5b02d5d8f36f4c71ba54e6a683c2e59c9a570e54f490ea723672202584f3ce7441ca3a75b0ad39ee98513565d9a11f95c2ea49b452fa088c377570617ba658c444a14c2b09df51fdbe78d35d738d56cac2ff2e7d8319cefac131248b91bec78c9bb97d03b00834b4bede6404b6092e0d2c37536e78adc034008bce4ee5bf3a8eca17040e349b4036066b70a8e18675d6f6eefe7b9bfc3ca5543bc926edd63c34974d3ecd4cf242a7f7b341b43885d0dee8e4704e8faf73f39bb57be4fb67751fa050127aee449d12f75bb964f82722ac2d1a550aab94dbc2c1e553b43b1dc22d5c40d07b18893684133e55266e1a8cf8553a8148d0e6520680528148a781e6ce83da222e0db4b4d1262ea6335e8710e209ad503d378cfb869a787163b36f52fcde29e4cf4cb91cad52a92affa409d68be463a8096219b5a51dd6fe9e95ece6c5d86b58cca49617d182a59a868053751e7de0f9dae2fed31045d13f09c28ae6e4de99d564dfe73b6ec7056e7194f527c7529f4a631c22f0ecebaa1890fa41e73ab882f1946e071505388291618be60e52624e3ee2ac4cdbc2fe5b68fe987511496937a5b385091bf7e78a9b30da2fa6866efbbf8e36255e50f740d3b18587f07155f981f8f8e2eb5eb2e5252107f260c989f87d39a5cf5079f6a249de8ace012822f99a1b115ddd0efef645d672d2cae4c2fad5b47c5dd446a205400369b68dce6c0476695a5e7cd517627a0a43bc4472e611adea0294ace1d44dd5281a6dcf6acc14fd1cdba91fc2c8f2afd3d315f607fc8f0d9a812c9871d8b5ab342d4fd32da6746aec9b39da9151e2336eae0b646e419e573bbd2bbbf246aa0192da324dd12153b8ec4a2f6f8d652c78c3cca826813becedcaf4c95971e1e72af365626968928d15fb115510883d200ff1321ad6a9240137438e76944d7ba9e30d07e4aa52f4ae7a47c2fe4a993bd1b8dc8cee40d34898b528cc5304dc280c152ceea1bc413fecfe70966ada1c2e5b4489bab3941da8a867faa5b816ecea81340be042802be18e06b2d4e50556e5664a2b6400a4f816207536184e033149c81c32acae07613100c821a6bf04cbfae4b97988399575b2dd530619cd51178b92467571b8dbe4c3f98c9c2fa0a6a33d8eb2ce4f3d1afd84211fa9b1b66ce1a81ca6eaf195435248cc0a2523b7b1abaf2edc194fb947296728bc3bd3ee3f5be4d22bdbf094d9e74864cd65f072fde120ecdd5f19eb15577e7190ef7845b50906d78f2c321ea505aa1fbc39841176ab1b0ce7cffd3ced4ecb3a977814c6fa2d5e3bbfa5dd19e0ae157dcedbdaa54816f2153064607d022832ed895c45950f8f6b7adb7b6673d21e6c1efc940f08c2cbe2977ea92215680fe1894f1a928657c6c647ec3fcba2ee4d9f9a3cd601bbbe4f6e7be2bff2ee94e37a1f70b3feafa704b24e65e3a076490e2fbbd4fb3f3445eabbe5f8f7625334755df18efe47050ffb0bcd963f0179abeb6e34d54be8042c04fcb1b34d67d18265dc4132316b801a9c46866c3c9d51653cf71f3d31078ec46bd7edf219bdbc79054d1d818783f8fe53b1f03145d0dd87b32ede92169a4fc456bd5edc6e983407c0f9f64ecff99d53d22ff615f8cde955e16c7c8e6b9997077dfbb5aa63412926a194b7ba3d661c824f61c640141ed06994c2362732b1ef584c1092aa6db04287214d6db98b0796988fc0f3a80a97ae4e247bebd9d38bb42374bbe33ea8248df40e0b59e8f15d6979a4b20d8be30c8c7dfa9cf784606fa20f94e7d6381f59a24b134ed6decb4d960839f95288eaa39c418892f46633b14849e3d66b2af2d1e14992a6e5e4a04f43116df7d112e7981e9574625b61256822213e57505750f396965494d62f7a04fff1168530bd948fe8fc63f3e3f3071770d6ff0391b1d13d42497c5d6d55557f0abf0e34f4209fc7c41eab06153f274687c4f8386a6ab97f66523a9082e5abe4eb664fe904d44e277419caba85927d6f9f409060e1c46435e8e7da028c263f220679b09aa2a09bf8847b6e6d9fdddef517c8327d3de090cd66fad1bd7e71fa21f14b3c1e3c6d9a028a29d0851ad2a9fd0578b87c9e53c1f5ac06cd950cdb521840be294b4b1070c6c9929e2dc8926d03d41595b099dc881ffada4935336f99276ad06dd0a67b1638395161901cb2b97095acfa4f29b6e868a6c574751b50acc8c1d8b45eb1e69165a4ffb5b0a379f3a9110ef305757b34fc002e77feb176f3acbfe8e885448f22f2e1e335eed1ac3136c24e5f9168efaf8323cc76836496f1b6bf74894e697451478750793831689489c4f57bf42deb83f3fc3a7b9d9513862d5683cfc5ceaa6b332a51c16f66cdceb010f063019c513c1fa9d9f60becb6fdfd893c8616cd1e61b69a25dff93fbd2dcde771509e8dbb5d58728ac88cee2661d6f36b7923af82b16d551a28b04f950b4ae547099bfbab05cf0a4a22c6d4eacb4651d7a8af919620ab4b8d7349237875ea20beb9dff6ae5199ed6a2756e806f8898623765cf1adfa59898f9d805c6621897fb6e1ff7b142b58bf5b9ece4aa8b94f08256dedf7344d97b7ca405f4fefdc60ec3594989c590a1e59b20a0f9995d75c22b5c000905887c17afbca6e8212e696bb54cfbfbe63e9c43ef5310bcd9cfac73efc47b21952934cc4ac5e6bea97473a00a24af4785b4633911af75e1cd2b7d89a32ec4c061483a188719cd6feba7ca94e94da201c1f9e01c97fe5989ee1d2cda1267693be31e1241c0dcdd9fef3cd6ed4894018c89f5ca3ff17824c4e953d388df5a545be2d8322761e90ddcb166de99aeca3e48d690217c090abaa95fa79f7b135310d6f49d279e8d504a759525a6b87e2378a74f6cc09932690ff6f639a7b63d0585c7f92a6d6155cd8c634c6fb1051b9a1b33c817b61545a4c1cf1578712d4bcd51d6d1517b5828fe1b9a0f4a5bfc7c1a10b40b92afa9d84604c3ba1081c1e1581dfa80c20d4b1f7e0d3a10699ab72b7665adc1978829cc330fede1c3a51672925763ad59b2315a0864dbe860c9073394b716902ba3a1139217abb96600812b400fcdb0ac0ea3246ca9bd7107bc9e68e3761c73b1084cf006f4e4df2673c9237191fb03f1280e4ff6eb645cf17951b01b7de836db405f19391316ff0aa8ce25ed7a98c1ae6e4f4784fb4b5e31f012d08e9d2304120805cf1bb25f15243c36c6ab1718ff89c2d6982ff117863ab89e81436ce5fab697c52dfe0f15d5750e3a70ef904a9d6ac672e721fd0bd9d3081ecb36ee618ddea1960dde8c6ec959def7bcbdd5036eeeed17b7c0a9bb1fda16d5add58d0c872e42100a456b6a46c3bf7966f7032a26165758710cd84c4b08c28dbd8f5778dfaa60e3ed84ec8d99a901fcee8145708d773011139448d65ffa5b9084829a08a662e5b7eb46ed0f578d514b5e12742a5b69971055198716997f74c3ea64c9c56e5281a9d3d556430ae6d9e7ea78ec8ba4ffc8b7f9a6ef2613389239062f6d8829a035075150a3b523f96559163b3d13017b979b14ffe7cc9b72aaa2f2d525005d24d78feecd76b866cbbba341a54f0e7b4e3a9f1f9c8b9e06dfc9257478bce912dfa65ac4f1a9ef24b314cb05ea8f4ff41d0858a1fb8dfe52bc5256de726c1a3057aab7eb1bf6e65fad5bd7792f92d139bff6038f0bbb4dd597e38db1eaf6ab93806af6126279f962bf553a28beac81a9bebcdf6054caf08fed7c2d9cef9e4286e6af89b18103de75f2beff93434750934d0bc6a169e828fd5aae2d96f9b51d88338c75b5d5635e5ec127976dd6696b5a21cb0ea606d0fc49b379dd656ed68fccfb137f6659ed31372b41562bf85f5a976b9da127d10f76bc95adf56e5026ae233d1984eb0994d0e9b84f04db5d831ad1ebd18f0fb63c9c15fcf0a8eddd51cd4eb51cab2d3caba122ac03d5f2f2a2d5ac6bc7fbec987af7c0235a2486c7c1c2bf738b3a9604715ac48aa8eca71663c0da3adde641a055f6d09e04d4d683c2c62b446c1191b5128d08fb8a8834491b2db8ae96e24cd66745185fc03c56065296f331b5b52f315ad06201deba38d903e6355666f316038a00341b5dd67d9594a7383173eacd7f6a90659e27fd0d2d3a2bbd4d5996bbbe8cddb18e018a3681a4c52f34d309953dd8b182dc425adb6c0d23fc755b44466f90833875a6c56cfae2e099ac31c544116117cff93cd0c46898fc961453948c4e963849f9a90ee583613ef5085f8b36046e992fbe928c76a3c0a425534e2d1933efe4db3558c3877556397db793ccc5fcb5941967484ebb6207ad36e5d561c4b4534510976fee3accc801383e05abd142db85ee9a0b449d634366b2782b84d1852a849356b3af0c149e9d611f323f46f55589e045f72b001396d431b2ef81117971adffa3ae7d5d69496842802e75bfc39ede10d3f311d1a514cdd52dd0d541badf51a02b375322e5c216c5dbb12be4bff2aeb348e653c0fcd588b4409a25d65b7dbd5cc7f4f66f79477a83580544b2a294ec8b0d557ab9c952ee8515485215507bae59666a0445d21790b4676b6db6b05903328dafcf84197c8c9f468ba21a0f11f1053c16d9c062bb1fe3459e1515801d1c2af8f94c523cd3f47c00cef0e51e2d6be3ddec39863bb148e7b1c904028c823eb5f2dcc6a9f0e0b05b48b649d3a6f90f578334adad81e1c4a84a553bcba1f58a6061fd9be69a176f7cd5df3d7cd0c9982b8c8f7994c41176a3cbfd168e7666144ce25b9f0c8f2f707942ae41e583816b86d0eee50851d0d5995e6e0ccdcd1aa44a0389917ff03ef5d41a8c1b0e2abb6ef16af889d99367c441606876e9c31593ec4917de6996b6ac4193c1f2dc4ab6c34cb82dbce793c300dd20622bdae8d876b8e740394f8a96f0292a4a522b19f7bd3c5b49bb810c6056204ada67937020edb0282092dd59b85ce71b6a817130b09d2e90641d5518b0b4ce1321591184af779f2d3923f6fa9e686d4cec59c3926dde9a2c832fcdf701f3395f1a642ecddfb0383628c7a5836fbdce32f60f63a30fcaa45cc849b18cd17a5c9d0e0a5b34ceb8f894640916368e77e8fbdee17a61da3f841970e31f47d91c67cc510531eb79f946ce09061d556846c9e1f9164a6e5b315995b5e30462c8ad280d0f744eab179ad2cf2faa47000f17bb6ec032c111023b4bb9e1c45e48017723e9b65d6de9a099f90cbf95fd2d0a1a3c7ce539fc1457a8fa9ff813e3082417bb83d308f831d4970943e32dc08e67f4c3bca183955c96d82a6764ad9298f2e980479ffa15b9e808913f6d1b6095da3573f1102c2262d1d118e77b43889f608e38a8474f3163ef63e614f4251a3aa174f5583907a49f420c4f8423989d4e6511b072819f0c687ee8dbffa73cf920d5871871b12fc4aa6c3916a23a7e99bd14141529a0accfccb64258442c4c532e1970b0e83f28196d35c3f51f6e247750001000e471977e05387d55c31ff34c451d36bd46236f476dc732f79f41deae5ff892f60b92dcad0134265c5fd3e51313e5ee56d31b37aa7f2e177cdd2c28d4a762109a8bd4b6ab62ad4955d85e75a77e4cf317333e3771dc168876445a0e93ade6299373a06228948b463f04a31278ad5a59d5b00000064000280080003400000000308000180ffffffff0900020073797a3100000000080001800000000208000180000000020900020073797a32000000000900020073797a3100000000080001800000000008000180ffffffff0900020073797a300000000008000340000000010c00044000000000000000074800078007000100637400003c00028008000140000000170800024000000009080002400000000f0800014000000016050003000000000005000300000000000500030001000000c4000b80100001800b0001007470726f7879000038000180090001006c6173740000000028000280080001400000000908000140000000030c0002400000000000000004080001400000000038000180080001006f7366002c0002800800014000000013080001400000000d0800014000000003050002008800000005000200ff0000000c0001800700010063740000100001800b000100746172676574000010000180090001006d65746100000000140001800d00010073796e70726f7879000000000900090073797a3100000000a8310380f40200802a0006408dd4cf5c84207d8f89654afa8ff0745576f96703c3621de6e845a36b5919633ab621674e4ff800008c000a802400028008000180fffffffb08000180fffffffe08000340000000020800018000000000620001007fb81bed06258124df085ead2ca8f0cd7a886911d388a8fa58f013ce94c1e2332878774cea8c0462b3ffaaf39413bb59885f095c6ccc41d95a5b80d9808099191aa6c7779c4e756d8b02bfec6c636db6c478d26e7bb75bba1511bbd901cf00008c000a80560001000f4b62bd9717830d46b2ccb218add31cb488a19cb8f7a8030b3d7efe4283f24d76eec0e43be2ff0d1b9c164ece2eaf24d4eaa58d4bcf92043cba29a5907951e2fb3e0ea62f5e9b8b41687ea24d20267f51ae0000180002800900020073797a310000000008000340000000030c00028008000340000000040c00028008000180fffffffe3c000780090001006d617371000000002c000280080001400000004808000140000000040800034000000015080003400000000908000140000000003c000b800c000180080001006f736600100001800b0001007470726f787900001c000180090001006d617371000000000c000280080003400000000240000780080001006677640034000280080003400000000208000240000000160800014000000001080002400000000f0800014000000008080002400000000ff2000640750e1ffc753fd793f756e0cbb2b06c0551add6171c8264c00d17683f04290e843fa054392ee29abbd98decf556ec69c6d010c41691bdf8069f8149d5fb6b6e57bc02dcb55e6b0538e9d62c7c46fd70da6fc7f20a790388bb3caf67a49c288640b70e2e5a21b447bcec2c04a4b074df9662e407a785b1e1788367a690837804ac8d804f61e4a5155f51ccbb06408b85210a589c2a2810283987b346ee295c7a2bd81a5abf8bc55f80397fece227aee293037c9d9725610cdbd700962793e58457ca2c2c45fdf31518c4e8df918d300b56748087c3f67640a7c03a9c1b696281d7cf7cec072245d540394138f1d7800000bc13008054130a8004100100a2f12ffbf7ef39eb4a9311080e70b49fe0e443ee53b3c94e0fef2915b26123a36a1baed5037b50b36a6e2ea090ab73dac981ecd846c20de03d0c31d6e6a5f8588c2f784939e0b490f4fff991ca14a3b6d01804aa8f434162902885f06f41f3127bbdf598df6c197e6d2268148eca24ba51b4c5c2a7d7ef872b4586327ac3ec004a015f0823fe9f015a5a904e88b7e6e6d50dd3a2c919c1e61076678020d4cf0daa2cf31d2caeb515e44c6d52016a96f30caed1060efb8563df8ae7ca2203209435d1d148bb51a143ff8a1680fe8b3dc417b513dd384d84c5c3836204a055a10bc509113139a3d0aaceba8f08e38a2868c131b248f844f8c84c6f7dd561406695a01ddf0c0437147161d4a0dbc8964cd5bf63967e6777f0d6f8702ea163e67cbe851796a94f05a6cb625206575fa013b2086be886fa8cd3451a57ba0fd0747798717025c4b70a139ffe307647e11bab9b111a9a65c338bde434464af173fb7ad09e0456a6b80551605f05675c836697d3de2e6d629e311aef958aa4cdd59ce18dfa56ded347e67843c05a2720ed5451d9f5a1edc9cef30e6418ec178955283830bcd07842f9851c9e9b6ee16cb909abfc8af12964f79c75a81f5e4ff60e3d19fd98a8d75847c609b4be013e2e860f302438e646b0de1d36a9eb853bf7f882f3e4559a2d188ac6ced427a8287863f2225d110694975243fb6dd5f6cbb8426a3d6e57eb8e2d74d15f5388d734dd559ac05278c8ccc2a007b4b1098636acb6a097e2fc53481ad531a31d1cf66444ba27cf5c4f1347a1ffc4862e8e58c946fe20daafcd72cd6a5ec908bf4c3c9d904f0ab6b08a49f122f817a7e5b2b73dfa04b4c84e8d41159255fd240778454f5961289b5ab4e2f3a95a82536050881b1abda70902ef8c0370ddeee4855dc42a35784876ab0ee62e259655c7b550f2300dc5e5acde086eeb27a983830264117de19ef9df0948c07a08863ae8acc6205e50adad1c27b9808909d1101ae3ca8873dec033f86bb25d6b7e2f364d35f94433b9f2730f7b2698ee69af7e1e90037cd4c4aede69c8f1293cf6314cacde4b8e29494c3300cd890523c1450859e0b94249cc22d95d4a1d28f29d29fa353fdd6fa257e0752ef52349108714414ab43c1f063538f465ae970f3181685af767a07efb05995b33946561448144d06f54e91e61acd126899ce180bbc6ae5692542eca12fed1b6a057cd6a55f55a0d8908ba52920691508988b123bf7c0945d31d78a7e7b23fdee620724a8b42ae014db6b356e07abad159126dd813fdfcb134ffdc18d4faaaf0e0e81c33abe62faaf4c6e6c73a12297181bef8a3d3ae606768b849ae03f0dd18c97e0d9e67330dd79b48b22e7ce2b74580fb5527e2273aeb00b06d6f56487aa2c0f2c19131b365a87a0e902065210d434c041d1461bc5dbde2377c1a062aece70e26986a6b367c4deb474d2cfae353f82f8abfb26a1b5dbbb0793e0938580a3cd7f6f3f480396332aef3401c9e2966109a67dc6afaefa44aea36397817feb82bd8ba49c528bc47362e1e10c9f65ef8bcb9449bfaf897c53f3d444bb4d6a4160f95e0876fae2f970ea91a2c63a767989108181f9a2cf5fc0fbf928ff0ff49a6283386dbfa3d94aead62ef14ddeba1da0e3b3534b9eb8b07342fdb0f7c9ddf9a948127843a4271c70570803c79a8240560a06a310d56a3fed68fa77d24c13ec6f1c00eff0e3528ab846fe0fd9808641878737e600048c1b56138ebd1cd483a89c0476f885997bf161e705d7498a4ce91f14dcfd9f0b7c7082c5dcb00c02d2a07b9225572083c0a3fe1c04649fafca424cbf057e61272f17065fab168ab7da890701fe90a48bb3b2c789e7b02b2e7f98b02a78a535f73b070b068a73874d5909c768bc1ffcad3a96dc3dbeeb20e3cc6dd21f3cae386bc5908f31579ac39124392f88a434abebb3e9f1e20f7879481f97d7459b309790cd729cc4d8789ceba88ddc7872c622f22413747c3fcb29626373d0bd6ca960c7ba5eea514026e0fe385fd0da3a096783b305b768818fa70286e06233062a73f01f0c8595a9f4a4e777adaa5b76ed48703b0b187df4af9102a528e50797131be8b3e6e7fa2e787e54b4742fe99e5c8eb43f6c20217eb42b148020ce3d2b4479b5794714a1e4d7648934ebf71d96a0384d6e671fdf344923ad3579c88781af846b79c72a79909f54cebd9bced4afef64e4680c90cadacdfe58e35ee106c7510ec70f5272c280cea58fa619b4bf5691b8513d859eabef8c89d95e3d4e97aa8d56187316750fb5808b83829adec478c344ebc38a7f33b62a6a71d663cc18349f6b5da19f950985f01c0ec8c35546a4da78ab3700ad7c08ea428f82199782f63965d1fc78c227dfc74c994de6316c62090bec8c2dc1dc325cb656ddc41b6523e9b8f0f007099bbd4cdd0143f7d9b04b7d2566e98ff71738602f2b6100ce2bed608017cffc070196e3bf85ad17ac1d7556c6f533aebd06fb6c5728625567e34cd9fb4764b2bf2de2668df91e3978d0a57ef890d1e9ae1cb5ac61f6d98af5fdc0a785928d4bd01a4716854789a485c9777292e6f6321e18897a2fdb104522f6caaff3e10fbe102f77e79282017f53580f4cea8ac8714988a9da48f278b53e91bce5ad34c1c05b6b6beb9f6c89c9df63fedb1126cc71228974453045c5cf49e432e9fa7402d9da1a5a30e2450add65bab8d92b1f0079198cb9a11e8b9788fdcdebeac1b3b2320727ff8027ab89597243a2f2e6a068c8b67102f0bb09072ff57e1a9a64c18d1b6f296705fdea800d5cbfa9dfd57cdaf1f909042684fca91b4d74e0d31df2d98654df9fd55bd7a94d8940f20062a42b447836ccc04613097dd518c6d62e81442df00d2dec5a9f78333fa1fcb46dae4d2c1b40ad997904d9707c7f0b196f07ad577f48016a83e99473e66cdb1927b0ad95c9c4c9e8192a607eac2cec936b46cdde2c3c90f7ced45f303eb1534964335d2fef9ed3930c12a2cfbc8eac890253d1dd232e500e637dde6fd2c541e5231babe19f9fb48f98c4d64251511373368aede6fab318c903ede194a3e9d397ce5270a394a4d85899d593ebe42d0bc7902a71833b9a4b6f30b4a55c48446fa44bff3940ede6b4796985d8d7e12cd1090b59b6edd86c018e743d93d5e47e315f86384bfc4f1543d177c44e4c15815f052d870c600b8ef910255dbffe61f24f697e44f377025db9d254dde130d07f7a67d25f2cfd6c480e195993f94aea3721d2c2baaf15fa3259e433385393a8639ba5a56da546b7d88d8aaacd0cb330b7fc20705897a47eb7a83085f4fa52afc3dd5b30e7aca4a760b8797db6421c9c1173a388aee58ad527a8e8202139c7237b9b4e80d8e60c5dd205519c1a4c2b90520d9529e44d7fe9e8cac1f53d08d45da37cc787b0677c0be6a639c722795c1bc8d3a65a3cbd0bff743d48a42423049b6e99d788ce1090c31c9c6ada9b54f743f379f64268abcb0be5648451a979d3fdf52a0cd91dbf94bc49d243d5e34fa83be007f22fc7cae9674ca131d449fcedca27682bd399022606a956361682a1b406de6a7a143df025ecc53007abcce6bdcc4ded111d30870aaef1dde18dee376384736261084b27d37e6f48b91250b3feb8f4c186944fc61e3f614847deb335a05342336122705fae4fcbff127743d84a28219b1a2359deec741e9d04083f32839391d4300f6c2c24eb7420fe9c7734173562f79224cccce58803040377a8647979103ff8ecddf5015cfb6b7e66658ab89a9b7b6cacc73bccb7fb435ebb99a0ef3128cc947835462140c5cebf6437911578f85c4eed280ae938807bfc2d036461c5eeb7fe0ad5fe003f96bf988d8d5b0175e07c7c4a2435dee95bf3d80230195ca93fda5d1874ff5f3460d96b18ac25a1095f534e7d0daeb5ac8015b52fc5eea0d7adcf268e543ca6dadef1e00baa6e85d112960a9495b13bb0382460cc41192ef23bf22910567174e1636b376756b62890657c6dbacf28f03f7ffdcce6b636a86cfa5457bee03c15238342b01c1d0f5b31a24760f82ee06b2d48ec246037324a4c678b196f26d0e13a3df0f1e1f97002f31e09a69f2c59887ce98d8a9285c22e4e5735ba4cd3e2c717e1f7373bdb3c0cdd04b5d5569214bcd9da86163b6318cb7096cbfbc5346bba74602bd943a5fc40a31e83fd8c24d9fd82093f3c75a6543d36fcabd4edd2a2d010e1789c2d66da87ed512d38c6f0e24bd244f84bb2d9a8eb538385966087942fb7b41de9050b0476f015f7620d7ff0fb45da9aa08d82083169dcf5bd7b3a09ae39d9c8b9d952da7a0f617547f49ef4ffc36749cc7b6091a2794b08e8634060cd1124cc861a362517142c38cb36dffb2dcec3b7312ab70ef20898579c3585a8904ce0b1c216e3a400dfc52637e0c10632be89b95942bdc116399c1c6b9ee844cd205d4087e156e50e982978a849e6218fd3181f7ed0196cf476658f01f1b70fc7f7b592afeb56748b231fedc9fa02e212386029c5fa718b9f5f1075d855b6406488d8ecfd5a13bd30ed0ba0ff45a410efc91164341886399fe2774e9369b849c561a307cbb3a9cd99902e8ec0a1bab82ae324e4f03481d043981d5a1a16cbf23f474dc36eb14d924386cee0226d9c445c2afb12c982a5ea459fbcba7f97539141c1049a0ee82ea78139c61be2d57623423ea5d5f5cd3db49068c76f801df29f2496730fd759d6621792f5c7530ca91f5a1904fcceb62382ce56fe895140362f2f8e982ecfed505818515be6d4a9e44b451052a5d197f5848bae9efba48c1d67e111a069c503b133a228cf96b1015024050554ce1cd90a75e73a8a4288febb6b12e33e5f86d59631fd69f2d349d12ab73f47e582896611fee1757777acba262815957b2045d309dccd3196716e0736116dad64fd5d349c6df9a86815001626854b1dba03562d88993cbdec2dedbfb340b6aeef2d9a5175d80be0d5e8dba48471d00cda5c20cb709ebd484df2b0bc2b78dc19cd53fed1ca0902da52baa556d956c8bc46d4667f8ef69d5423ba36947141234af0410fa53c5bde7dd5ab09c588563433a731f35c97b591f185f03670f04e71699ebec2a102b1b59b188c27eaa0d8c70e36fdf1d9ca9a82e44e6096d14121650a2938bc51e581c1e54719520eb382751ee91c8f24626f93fd23d6f043811d2b486b7ce525a553bced31b80a01621d3539c1ead8430e219a1373557968f9e929d69a7f7a3dd4983a95b19f18cf79baf42ff9b7997d0a22cea6abbf586db068d69f5ec462f3a42006595e0210565c0341cafdfceeb4199af61321106ef647a658632d38e36f8a7d1f923cfe1fa4cf8b387c418f08e0c600fb2bdeafd2de96a6aa30369056a2570fedcdce264866fc9001a506cabe128f0ae61e8b42005977b92fea207aecfca91ed904a2b713eeee36a2c642cc04b962d5fc0d0ca65cb48da3395928a776853ceb5dbf5ba016f2732f95cf2cfd6000434648848b3ae9c42f0cf3c2210080a7b4103a4faecdf7ea7282e279943820daf966cb980139fed83205c11ae4ded9cce8f2c85b5cb3e4f2d2b5a3ae5832d6bb97bcf6a2b484b4a310bc364a3680a10bd5dc7898acc495af882977b2056a6cca95fce9967c9638fd1abedb46d5cb4f8f0195d15da2404b65d5917a870923d814374648d5f00f03607a6108a6890ad5e92a00c57065ba0f2a515a9996b2a40e79a177e7027576cf4a6c0ec31dfedae52aefa77662937b5a0906ac3c15507c73607f1441844f2c3d8e885a3d669263ff4a7088b35e338b5a2000100d86a86585d5ccb5328076d72fa4e591f3ed1d8a817eb6d1e5d84ad1266db013b54972f723ea339ba20c5c327b4f4963232bcf3a0956209b3f3091b32af7c94aa687800f9e41645df9e552693b95dde2baa3ed5d36d7e491330b0f772e6639685ce83b71827af45e5b8324e531541f326d2ae3d97d4d580f3eec6f658be7ca6d48385a6b9668c0c6f93395d6d0fd23a0fab1cc525c67d230bfde94ec8f8fd00001c0002800900020073797a31000000000900020073797a31000000002800028008000180fffffffe0900020073797a3000000000080003400000000108000180ffffffff67000100905502ebcd59847ff5dae5e2221fbd91a61dd4b8ae9c3702780757d9f865f728991da253b63711818d576abd46e9281afdd2725f412d0f622e2a57809a352353652681127110ccde38b7caa8571c8b6e187d0adf6b41bebca0701b7f1c1fa6348c27cf00e80001004ff64abdd4f8a097c4ad1e9c58384291e675617151dd440afde6c10bebf6d502332e4e1378fbf8d2a67cf520fd36d685cd02a4ffe6285a814d7134c2fdd2b271fc5c1e34a28a09e627fb9eb6dc8d01e8bd0a86f84f12e0859c376c7d91b9cb5b917ffe36aaea6c6f240aac2a33d21d8a4b6f0efb91985667226af4218caa9e12a6e96e80f42ad2121b3f9c15b326d23b0835cc10d6b9eab227b3d469e72f787dffb828a2eda7b50f7d0a70488151749852f0bf0626d61aebbec5454beb1d7a76dd95b7d9e99cfecea9a80be36396a3229aae7018e7dbcd30a76cdd8a8115a97aac9a7ed8480002800900020073797a320000000008000180ffffffff08000180fffffffe0900020073797a300000000008000180fffffffc0900020073797a310000000008000340000000027c000100be503e58560600ddc39fedeea04dab98260e5eaea7b84ab72da8152807bdc4c5aa4f0f75e3a3677ff07347d40510113dbebdb962bca5072fdc87e6ff03ea244e75a59ae37b6316bb678c39dadb932ee6a25d53d3bb8f7badeaea453a9155c72edfec6ba91690c6cfca4272e827dd5d47ea82908ec2131f9b500002800900020073797a300000000008000180fffffffe0900020073797a300000000008000340000000020900020073797a32000000000900020073797a31000000000900020073797a31000000000c000540000000000000a8fb0c00078008000100666962004c00018028000280080003400000000208000340000000040900020073797a320000000008000180fffffffb2000028008000180fffffffc0900020073797a320000000008000180fffffffd80130080080107800a00010072616e6765000000f80002806c000380280002800900020073797a31000000000800034000000004080003400000000208000180fffffffb400002800900020073797a300000000008000180fffffffd08000180fffffffd080003400000000208000180fffffffb08000180000000000800034000000001800004804000028008000180fffffffb0900020073797a310000000008000180000000000900020073797a320000000008000340000000030900020073797a30000000000c00028008000180ffffffff1400010018656b0447cb7ddf8531ef1188f4c9931c00028008000180fffffffd08000180fffffffe08000180fffffffd08000240000000017400028023000100e6f8c2c845b1a079bdfba4dcadf68eafe3ba557746542776e074ce226be87a004c00028008000340000000040900020073797a31000000000900020073797a32000000000900020073797a320000000008000180fffffffb08000180fffffffe0900020073797a32000000000c00054000000000000000400c0004400000000000000007641101809d000100bf05a356e73f98d61c8045587e0dca1043e018983da50a33663035a8cc348341a12d735a6a18c69c3f94089abbc68be3c151273f0f6d4d7e504835316f62fa414d23c7acb58df272d746b64e7c71407ec2c086de1c43dd91d22c85075e270444f32a913a44afee4ef47b38aa42c31018684389b54eaf2087917a2c1d237c572a2e8a88c8c98803847e23780f5c0e9265e3a053115b58419f90000000041001004bd7fd974fc80c7ea1b6521c0696d5771f407a0e03bee095f6b1f3dcef88d39d553eb6c015a4888a8daeb8c4937a629e286f2558830a65a711ec2a889fedb04da97111dd4dc491a9693d282c7ec9ea8b0bcb6e2398b91dc89143c39d72200f0336f0581e0a8e70c3a6b0be821c088774cb41e2e10f501eb6778f0301c2bc53cf082f07c52376932671b5bf2e751a3ba2dfa1166875edeabb4641c5e3152b2686f30bb05c511f84701d472cd5e7b5df1a4320de60b73516c7cf50b0d44fd0b8b010841d3f6e2feded69be4c1c32a3a1c54893001f0366fe731f40d3cf72fc4baace12c1b099aff943d94115ffa4d22b39252aad60294f9248b974fdd5a7ddf2aa758e79d2155e5e695a04fcaad02cd7bdf47cc70e1f43929f375adae88bd7b41af783698c4d753918bf7d369ae9e8c07fe4d4d71ca9cd2faa87808e92de2b262f01e50691bbece1a0fc78534290bed4a80f71b6c27dc7828c4e45eb1ebb2eaca4e18212c24a0e9a9296b3afab18b9b6bb78e2685e445b6e8a8e6e2504f4ec2b39175c5ce5b60a04862c8fb32c52fb0e971621d13d0194e1addb242d1e0b462d98c3058c0362c7bec3b6cde62af6c2a97fe7a9de388e895ca71ca65ac18f414f78d948c43447f7cdece4509608525c9ac8f4f09db67c1339205499f4f4e96727e26675065a891c2c9ab2b4486e8b38872e6b203901c006fc78942176466e06cd6c8649f25915b7410520002a4b51191e706c351557ee583bef3c87890308f8311cb11f0d0153cf31e194b292842b4fe7cd823a0d1fdafc96c0a93aa953be663febae6e5ca0e531d1b429aaf89eeeedbd8c12a23918ed132e8031a201b39c6e2d1f800c08068b89452343a162f1b490a5cce45b9115812ba490448a909e34eb570bfa2fa27e03cde5fb384633b87f568a54a83db4dfef1bb215735618531a0248b70927fe1f02933d4bea0351abe7f5d13864322824bd808f4f07796b584a05c5df703fc7e8c7fe4d0257db2877ca17b61ababb29d38466ae447ce75159c5a62ca3f8fbb6c12d103aabd513c8690e240a07847dde7b4874d772dc78975e99b2bf7b3a1c7c8b2045771abfc1f65efc4d20108d64a9aa8e2b7e1056d0d4791b09c92ff58a748386db46a4ae88a3bca7a9bd79afb13e1167514251226881058076f9b6df44eba7ced4407001be394d26e99f64155bce85ef787a8b282680a07ce097331b8c744e774b7c88852d4cd2e0732c229b471b28491e297c7e1d89edc969ab9d504ee8de8bba43640e7b257987f46a3bdfd14c4c4c32776d7cc7d811e3a6868c3aafce70ccd1bbae8ec699a812eeab5828c0e97ce684208b91d5220dd99499b3bb76f5733357122603b625831200c13ec2d99e0c443588db717ce01d63f650cd7716a0dfde89eddbd43014a355d33e42c5c939b8550fbd15cf0332d3af3bbccd0c1080414206378e40c3a28d204331a62419550b157cec94c01a82869f4cc6f9595199f0a25c176261edd927d6b6d2bd209341f197c0fc9a3ea27c8d23cf8c24eeb50cc82d93ecf5056ad60d3e08a565d61945acaecb4cd4917805a754f45625ad07b5e43d317e9a8b5271d1b99a51046830e362a7b23bb9100f3154ca1190de41a9496ef77bffbd2f10a2b43cb1362ed75d6dc2db227bec9fb8cee4e0c6df19aa3b72327e1de6a1187565c7ffa132982e74c8bc83fa51ec50907a35163f0d2c6431c674052ca7632cf3c7d79d7f617e0f4c8c769fd8e856b19455596f690bbb6d6457a1d92a30c122a4346073ed4af90a2cf690fb909e6031ec832ea69e8a4769c4e83b4b925aa71921af1ac9817420ff35353ec1d2563f07ab1ced93e623a2e6ec021c0a627f4370e8924c9d556781b582251d5650a1934ab2469fcd025acab9d6546e01d26cd2ae070b8ab12dd610a1cd31543c0506c86e9cc870bffd83df8153a565f125e50c9588d701f57405e38a57b2440fbc42d46b5fcc8ddb83ca468fdcb46a3eee57e941b4cbd9fe878a3f8f7fbab0bf3acd2126b116222b36671672c3043c971b927dabd805f5cd7f2bf57479c162aaf8a80ec79815e1a896d44e25a3c33f080083d71a9d625aa94362a9737f590f932ea92680b6e19040491cb1ccf72b1831e33cf7d1d70edc4edaa5ea8dbab0a3d35197ad88fbb61806f97985a9d99cc361b63f2d26ca94951c51f6b3075340cfbf6b1eec7d3b2e88af62352f97f4a86996d3f959f52c2f2eed5424e57b84f94652933ef0c05005f542ee23df98556203a7432b75c45e559c720b441f94f28ea97dbee73bd5e0dabbc66efbe221220e745a7493468b102ae9b4f1a3a8f8d75ebae2ddbaa527180f764ebc6e5e34234754a0271ea3c14587a244ad41ead9d0ce4b2b3a89968bbd41efa88aac79f59c47e844ab2fd28cfcbe542bd19b3e2fb76fb307e3f024f6b0805aea23a5d9fd2a5dfe9328933460396acf7cf99b3d7e09066bf243ba93e64bf22c6b3921a352bcee518b93ecd837226b1e427677f40f3ab9073aadd0dbafa0bbeea32ef34f26ffec2ec1b9f2b022eec2b5ba3992a8fa719620bdb3a390bda100abd52a7d5be4cdc845fc67ce4bdf4412cc0810e1447c236b48417f2aabed4a869e98f80f924ad325d27083546095f5b179e38de72e0b8fe65e9445a35d61478cfc3afd53aee47d2ed93cd866015d84fba33d3a8ffb175760cf47b0b39bf2a8fdbecfd7938a95fbf4691d62212a8eb964acccb53d23e159419ea541bb695508e454a59e78fac02e3ecf1d970d379d9748f21d7e9b4d4726f084ed4a749d6f556d7e51afb11d91d41d61d9edf086adcdb276ceef073030af6e6dbbd5fdff942cc74552463f2a193373445a4a2dfb47b125f0b4f679b1230d6dad8b58b412894d459654a98ce9b814765023cd2a7bb4b596896ece2368c9e76196276ac8ba4937cf6a4c8f88b74bbeb19e21408abd2d1ffbaaee37d3f1db3ddd5b74a58d4f01c1d5521524c1ad3ba83c9d2b7e76fb82fb27d4793de39c4cfb77f8230830dd5b4b0db8735d139108a8524715d372ca28f5dda94d30b05b01244ced455ac4e33c8c0daa06726a26f0c0c0f7a3400aa9c822d6eb12f4bd0f0e8e4146fc5b52e17b94aea69bf095d679445de8e2d0b77fc7aba45760eabe0ded4fd7bc8e05d3e21878530f611861bc70559a4bf88191ffae9a3e226ff558aaf4f08fff3e9392179fbc4400323d4d3c5378030f94da78bf441bcf0bf3933019fae87f9f7fe3e0b8b988a1cd7b60706e4d6bf5b259bb2b410f48a17168f0e7bca027c77e3414f2202b350f80ad13a8209226e6f5bfbb9e28f3b3064b63e8cc06c05129a3e1dbd370091f4b67e310db25aec98e69ee607ec4726ddf17c98d19d1e8f5af774afb59259c3deaca026c8d0a9c382938b215b952cc1e01c8f205050d029ec90ffab8642f6b29a0b2d3cb8b9528ca6a485513a5a4274f5815bae8b6e64a5c080176cdebf8f44ec16fe4228607e23361b2c951bce8d62d0d9234831ea0655fa2f12e852e18c654a7de54b398a28a1b291395f4073167131c9049f0147913d125e1fcac1d84a8ac580efa037feda5e859ac6260be21d1036910b670612e959517a8504f43cec7286f74aa6b8ef14739b79c378c1b7e50017bbe4b16aeb7943eefe3fccd599a967dc6f320190d7990be89a06b259a9feeddabde6fb443d9d00193a1cabcba3255bbf85992a312e63a349684ed0fd71b222e10ff5e5dc1fe331b761ac1a3730811b80434c15676d1e55e46d24475770eda32c6589926d556f2fecf51a27acf02899b884e577abd51ccb43ceb4f8476924f67d38feaa6bc66d30625deeee263a765fda26e3a7c96f28f86f9337fecc96df31b233aadc8bfd302592c84bbf92f1834e4e580ef47142649b7a7b7c5a150570ea3fdf50f050e9ac6d6096e6e5ad744bd74bd2303b4170439d3c8c8220655e5a67e986b02b7128e7ce62f5508b5413ab580aa04014b46da72f37df97908ce0a7a6c7fd05e68787c401ff646a20a6f34f6a411dcd7add21e0c2f89e8658ecd0835d59f36e978c3026920bdc834fe3d395c32dede1bbdf09752d410277b437cfe4e25c7ebedc2bd0dceb9d41567cec890a4c3fc8b60cecb0e6929cdcfd5ece48250b3296c24a91317f9acdd7be63696a243e9b3736b4146677dd8f38f0c41a3c3b590e7ec3723817ea2f6571ec623f580b29bceb79fc5cc6b2f616f133f6ca7d51445146cfc544d7ee73efd442fd91165abdee625a73bd25b0c2c92de9a744bfb3736acd786f55517c512c6a27029d0bb80af56d0c19a9b3764301f5e8214feff93168a780bb99b616042d53e950dff4a3468ee7c8d88bff5c1de99f8a7c59d1867c312de8720ecab3a14e5ac7ea820955e214bd484f70a03976a338b3aaa3bd64812345acdeb26e6ef31118694821375b48de39939696669ebc3cc1f28f2200e3dc543944f7ceb862c697d6177bf124327be9971577bb4054686560ba1834c18921f8248a20e855f4d580cca9d2e877bff17a649863123a4d5824d49a081d68480efc82228af1b1769107abe4cc774f97eaee9798f490abbb2387a452d9d3e17afc29b2d1460c3ff87a67c31b7b274b98d1879d6c3722532dd2d1142baa6e7ec9872367f4b7c91c45adc7e35596a77d597bf840451434722cb01fd1626e6bc2022533e40777d016e3e8a0f0d41e5bb64fc3685c5f4a1ac2ae85a76542b5f7bf36557a29b444d5cc24fed6355f2d6ddd1fc4c4402269c463563e2ccaa4dcfff2f395c175ada9391d1daa0d9a1e512eef94b0636370fe4f060bab7fa338cea67baf44cf9e5514cf7e3501a19d4d4692cd58ee7ca44e095575e79aa62f76946c98cb0a68ef8dad0f7f5243dccf91511b743bca3fc59f5752c928fd64072596a37bc509e4d90c24a338cc4934a8148ddbb32b65fcee3df18476deb7938f601c8c5c21e469ad63c4d57d874864ee113f52ee2dbab4efbfbdf6f2c285576511d9c34c46cb6859e80d68a1edfbaa9f87950492bd64be6a2c192e40f9d4d6b8a76fc2d2d667eabbb28d2c1e9182220c4391c676ebbf10ade0643e931d0ae9e4e7ae8bbd0a911a2811942209369e69ea62e3cc427d14c7c49d716a868eee1ccfdc93ed11407a923caf87cb30b482a843cd41e8a80de902dd8f575cbf602f9ff5bb5e411820fd57e41f1aa4550a28ff590418c349b22e2c9866e1041b8c1e913c09a72819499a1c65264cc4192735e56e09f89dc28aefb7b12efe4d38f5f58c807a351e7ff56f1feca451b5b1bc4a05cd5f46cdfec4a343886f928b31e5090b3737368ecf8f8faf31d60cb9e73d668dab0b5140cec81b8b7f152f0529e5eca91f065600ec0025df3f009813fbd85351f1380a51734dc13000bcfa37a5fa12c0449794fd5ca1b9e6e0e51dda94d1f170bb851ebf6acdb50f83b05328d742292684d6277331630561e1f3ec94370d74cdf5501eea148e923e765f43e74fdc17a28594c15295d9907cbc8c668db03446c162567411468d48cad750e3f9e7e0d4640ab23903eadd31dd1a456f6e309801107404171480eb8949b73e39dd42eaa19e321efbd7f9af3c57e0dd4cad290a6243e059678437ee0dda4edeeab02a4743f09a3b09fb91685c55655a681b6ad3038f9ae19914a32058c290dae357c15d2bed3e9c05c27d338431989d2f00c0339696588dda03d7ae0c23ed3b3b829181e385f43f67fa0bc930fb091c24ae577db2bc3a7011ca3cb63ffb7e8663613ce93c6a7797db76268d329a3c25503303ef3ecad4c2634818c29e9824e26994a95340002800900020073797a30000000000900020073797a300000000008000180fffffffe08000180ffffffff08000180fffffffc1c0002800800034000000001080003400000000408000180ffffffff6c0002800900020073797a30000000000900020073797a320000000008000180fffffffb08000340000000020900020073797a300000000008000180ffffffff0900020073797a30000000000900020073797a320000000008000340000000030900020073797a3100000000780001801800028008000340000000010900020073797a32000000002400028008000180fffffffb08000180ffffffff08000340000000040800034000000003380002800900020073797a31000000000900020073797a300000000008000180fffffffd0900020073797a300000000008000180fffffffe0c00044000000000000000088c05008008000340000000016c010280d00001008d60d9db51515c6db5705b9b3e6b7ba1e5611ea2096a8f210079910bb6deff80bcb4ecf17f605d9d168efb6a04f897905c69497818424acbdfbc4e07d5454b49097b6ef2fba12f50befe3aa12baffeff97746270ca452b1607c00af32900f2b83da30b2787107e57b237d5beff80782e8799894a58d061d8d479b6dc0820c5910fa49f6f00e8f3b47756f441ae7af8caaf70d621db39cbeea3f7b1b88c22313788e93ed2f590eb0e340f9e536da450f22c52c0773edd15b5c195034ea299bfdc8018c99e87e92d140e64c821580002800800034000000002080003400000000208000180fffffffd0900020073797a30000000000900020073797a300000000008000180fffffffe080003400000000408000340000000030900020073797a3200000000280002800900020073797a32000000000800034000000002080003400000000208000180ffffffff1700010045ab12d741bcbe85befe4c0a63afa2d8fce897009c00064099d76efb89517db95d2bdf4ca26986b9fe013f927f3677d0292515bb1fb8d2b7e221aac18706bfc2f39d896c2a6efa87d1af4f3f33686132162b3198d363ce59260557acb4eacb377af79a47f2b745765b1d89331c872f15c314359628048a041a5d5effa506ee69b8585fda04be1e8fdfb2592e3999e5ea3a1279e4780b9d23a65301276bb99f7cede6575051f157e6dfbb3f309737c4f940030280ae000100b6516891b0e6e0559f735db3d2ea1102a6611db2bf9e502279c8f62e4b1378d9172522a398e3877cf0dde6453c7ab10f496962aed8b8bbc5784b4ebdee4fed91a64e037e7ba1d59760f8628b776456fadf276c3920a67ca3ce1d98611050a978191ffe743b5413395aaebc376f02b4f94513697ab26750fd751118d1cc02c624d08dfcaa9677ce082d926f8dd461029e979e6fb196cc5209cb6e0b7b67cc9e4a46cfeaf16ae36761ca8b000038000280080003400000000308000340000000010900020073797a3200000000080003400000000208000180fffffffe0800018000000000db0001008cc79d04b9b48eead705d7242a45e2dd661aee5a939d3b87b726fad3ad67780c7e6b4b54b73449a6bcd6b83cfc3abb1726110a2a3fde03a9ceebcb15ee726635febf869c55246f071ebeca3adf536c58a2c6deecf0a5e414a4faa78710af7b5d295697099fc159cc2ff546f8a44ec2fc95781b513144737c1233047f8ee02c05059dcef68f2348545583b98e933be13f6dbe08e2feb5a73a3c2b7eec3945d78b0d453443915e3036bea6977dcfb40296c390abe31bc46d0d0ec8512d0ac8722f4ded1eccd2880258b4ff5ef125c63a5e29bbcfe2999c540034000280080003400000000308000180fffffffd0900020073797a30000000000900020073797a300000000008000180ffffffff5400028008000180fffffffb080003400000000108000180fffffffd08000340000000010900020073797a300000000008000180fffffffc0900020073797a3000000000080003400000000308000180fffffffdf0000100f404161b8cd1aa53375d050f83276adebdb82fd023077926147bbf28b986a1ae6ca252f9ca8f60c5a2f796cd11cf9495f6da2a32caa259061c2abf5b8e73abc444336afeca0eedf089d720b6bab6706cb287793cda883269325c48b3be3234c797b70823f5340bfc76eafce404c14011dc2c60b23e5a71ea496ceb9308279c3cb263bc9560277b33a43c25499401ed51e44cc82737a7f2798cc29a13bce94cb39abbf240ed1f3a5f48e7f435ec6893d2532d287e31eeda20ba536d48e0be6aa0b133686da6d48e726be4a16a206e81043c82d163ed1a172781cb76ed5512192aefa869da7ff5185457baf00438000a803400028008000180fffffffd08000180fffffffc0900020073797a310000000008000180fffffffe0900020073797a3000000000e80100806800018063000100cf765d032d5e8524de4e3386a786d6ad21d5ac14786281c2f018a431d757c5a3c71580fe7aca830f6d4a5136668fb767c3105c9fcb15665a0f8aec56e65cc0c966e87417fe63bcddafad71b730a075913c2e28773e5244e0acef936a5f77870020000b800c000180080001006f736600100001800b0001007470726f787900000c00044000000000000000060c00044000000000000000093c000b80100001800a00010072656469720000000c00018007000100637400001c0001800b0001006e756d67656e00000c000280080001400000001160000b801c0001800c0001007061796c6f6164000c0002800800014000000008100001800c000100636f756e74657200100001800a00010071756f7461000000200001800c000100636f756e74657200100002800c0002400000000000000005a80002805f000100abc9347fb68c72bab81f098cd19f6041e785ad70025c43e6727e13b4bcb3a98552d02343eb6fcf9a2bf91bfc8a9dedbc764738c67e88cd962a3391667dfad77ff21f6e16c66b050fd77a3cd27cd3970b5e4dfdbd0d342d6f13779100440002800800034000000003080003400000000108000180fffffffd0800034000000002080003400000000208000180fffffffb08000340000000030800034000000003140000001100010000000000000000000100000a"], 0x51f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 1.469493081s ago: executing program 1 (id=1832): syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x15}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x18}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008094}, 0x40) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000040) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0xa, 0x4e21, 0x4, @mcast2, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="d33e39f4d26716a8424dbf844ca4f1d3b9f571", 0x13}], 0x1}, 0x4000000) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000500)={r3, &(0x7f0000000400)='\x00', 0x2200, &(0x7f0000000440)={@_ha_fsid={[0x2c8, 0x101]}, {0x3, 0x6, 0xffffffff, 0x3}}, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0x133}) r6 = openat$cgroup_ro(r5, &(0x7f0000000540)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000580)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x43}) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000640)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000680)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000006c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000700)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000740)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000780)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000007c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20008050) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000940)=0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x40) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r5) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x840000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xb8, r16, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa2a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0xffff, 0xffff, 0x9, 0x9, 0x1e, 0x4]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x90b}, @NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, {0x1e}, @broadcast, @broadcast, @initial, {0xe, 0x1}}, 0x35b, @val={0x8c, 0x18, {0x95d, "6e1c3c191450", @long="28bdb2f0c59e7b5b906445cf3bd3f1bc"}}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'gre0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000cc0)={'vxcan0\x00', 0x0}) getpeername$packet(r5, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d40)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000001100)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xdc, r17, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4008010}, 0x484c) 1.465653366s ago: executing program 4 (id=1833): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x12}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x8040) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x154, 0x1a, 0x1, 0x10000000, 0x0, {{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x70bd2d, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e22, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newspdinfo={0x24, 0x24, 0x0, 0x70bd25, 0x25dfdbfe, 0x6, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xa0}, 0x1) 1.360071157s ago: executing program 3 (id=1834): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31007600000900010073797a310000000014000380100000800c0001800600010000000000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) mmap(&(0x7f0000644000/0x1000)=nil, 0x1000, 0x100000b, 0x20050, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r5, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000002b00)='1', 0x1}], 0x1}}], 0x1, 0x48c4) (async) sendmmsg$inet(r5, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000002b00)='1', 0x1}], 0x1}}], 0x1, 0x48c4) sendmmsg$inet_sctp(r5, &(0x7f0000000380)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, &(0x7f0000000300)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x18, 0x4000}], 0x1, 0x20000840) (async) sendmmsg$inet_sctp(r5, &(0x7f0000000380)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, &(0x7f0000000300)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x18, 0x4000}], 0x1, 0x20000840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r6], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) (async) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r6], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f00000001c0)) (async) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) openat$cgroup_procs(r7, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_encap(r8, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) 1.359032299s ago: executing program 2 (id=1835): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\b'], 0x20}}, 0x0) (async) bind$can_raw(r0, &(0x7f0000000040), 0x10) (async, rerun: 64) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) (async, rerun: 64) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000006c0)=[{{0x4}, {0x3, 0x1, 0x1, 0x1}}], 0x8) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[], 0x114}], 0x97, 0x0, 0x0, 0x1}, 0x0) (async) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) sendto$inet(r3, &(0x7f00000000c0)="a2a32ed8f8d8269e02e6396b8fd04db5ef91b9029148ced028f0bf530534863867b21728ea94f92abd4012bbd004ca29909bb4fd34e4e53cb1ef60949b6593d5c0a882bc9cfff54b76b41dbca37140f879b5", 0x52, 0x20000800, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10) (async, rerun: 32) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)={0x46330582, 0xa1, 0x7, 0xfffffffc, 0xa, 0x0, [{0x9, 0xba61, 0xfffffffffffffff7, '\x00', 0x102}, {0x1, 0x5, 0x7, '\x00', 0x805}, {0x634, 0x4, 0x3, '\x00', 0x288}, {0x3, 0x6, 0x8, '\x00', 0x2004}, {0x3, 0x7, 0x7, '\x00', 0x800}, {0x3, 0x8145, 0x7, '\x00', 0x1}, {0x0, 0x5, 0x68, '\x00', 0x1200}, {0x7fffffffffffffff, 0x4, 0x9, '\x00', 0x1000}, {0x1, 0x4, 0x2, '\x00', 0x2000}, {0x3, 0x1, 0xd8, '\x00', 0xc4e490e4eff79a5e}]}) (rerun: 32) 1.346277668s ago: executing program 0 (id=1836): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001000000000000000000ac1ee100000000002000000000000000403403f438bd9e2800000000000000000000000000000000020000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$unix(r2, &(0x7f0000000b80)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000005c0)="8d0c6ff98422a1730cbe1b60630378dfa4029fcc99f87120de0a56f8fc8fac498ebdbe134cbf669966b574abc0476da1f7330db12e39ca36764863352c9aff206356a6e86b8845fb8aa4a7d02cf5951a4b271f2e609fd5cb0098a35dcccf94d40137cd0bd01048fea4faeafdb4da36410dd0fa00f495a8c7392803317ff9f24ebc68a8d102d7c44c4698ec31b0cc9db58c81810461ee81748f5f1cd4ce824e958a5df9de36d20d58acc550b35a059587", 0xb0}, {&(0x7f0000000680)="4b89fb371727d1425f0ca3b19b", 0xd}, {&(0x7f00000006c0)="359e872f06c58c9bea92dc8540ddb0b881783b4b7ebc3b92724778ce4ab2fdcba92e7d5fba22d0de2f5a25e7dc6374cbf62b36811cc5af5354784a8e0c5a1e5cbf080b1d2ccca52b727481459a", 0x4d}, {&(0x7f0000000940)="ef0ddae2a98f7402bb40eb9fe24076348ab24a9ed839c9ee4963ba4bb3e9e737726644a60d2f0b3271b28304934756965a76c206ea8468c1689cf5c6abbdacf275622c5fe49bc921c8500ba97168c9b0187efccb4b513b1e3c9cf2c9aba5bb6ce638eae8c07a0ee84648e6d4b2b7d225401252101b9f2ba744fe1d81c6a1ef8a2711c0a0841597f79a9686d560be3484ff706f386b2cddbbda0e303f7cc67f91978bbb39c15ea92e35", 0xa9}, {&(0x7f0000000a00)="d53172", 0x3}, {&(0x7f0000000a40)="040320091919618eff37a7eba07b85fc426452d063da398308843cd9de9c4b5ceed10ca903f5f86099a3ef8198bff594d63119c781b827877996a08b36b9f00fc0800737cad5622e7eb38fa916b71603b17360c4b8d97e0245c3e837d03d26cd0e67932d5751c4aed9", 0x69}, {&(0x7f0000000ac0)="ca8636ba3feab7b0c5a949b2eb483898272ca9ac5c14a25c3ad44596", 0x1c}], 0x7, 0x0, 0x0, 0x20000000}, 0x4c004) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x28}}, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x1, &(0x7f00000000c0), 0x4) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="2293622d043fe4cae702765ba6fff99ef08d141c61435f3cc1f873a722b1f80a425472bd3d68b03c5f7944d61e82dd4b275ae695d795b1ebb07806cdea5d5d4903fe5e89f56f9a0d1ae924be6d7d2f8a0eaa6ab6dbb1fb4a911f1e7c2f2c82b706a37aca7e55d586e7b8e7c44726f5b20449af386a", @ANYRESDEC=r6, @ANYRESHEX=r7, @ANYRES32=r4, @ANYRES64=r2, @ANYBLOB="79e0875b9d801456c0071b6744a0e0889b6960d231ebe6b0a56618ebe3f36bbdbb079f597ab353f7e7a795a47dfd06c3bd25a55f624cc594cc1f4df1780467c82bab9c489ccf7ac0d69fa03e7d2080deb4dc4e7e88f8509c2c76863b86983e25fa17d1ba34182c19d8787c6aee5c4b31f97b75c55445115e7b73d8f17e41cd9e88d45232227e40bdc8bfc8515eae64d509c309a8037e6c0d4aeab74e5cbe3961bd2d31f4349eac8567b406fc68e453c8fe40aa504e541d7a08e8f1f2471e2ff294f54f868e38c7a3dd23ca9e4d9e9976a7b69901eb92db7596c02b47b965ed522b2037e5c22aeaa7b3ba0d5ee848581f71b9aed245251995", @ANYRES16=r7], 0x24}, 0x1, 0x0, 0x0, 0x28048000}, 0x8000) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81a07e, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}, @IFLA_BRPORT_BACKUP_PORT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) 1.149996361s ago: executing program 1 (id=1837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0xc, 0xc, 0x3, 0x7, 0xa, 0xd, 0x5, 0x3, 0x2, 0x3, 0x2, 0x4, 0x7, 0xc, 0xe, 0x1], 0x0, [0x40, 0x1, 0x0, 0x9, 0x5, 0x3, 0x401, 0x81, 0x1000, 0x152, 0x400, 0x7, 0x2, 0x7151, 0xc409, 0x9], [0x8, 0x5, 0x0, 0x2, 0x8, 0x6, 0xf, 0x9, 0x200, 0x81, 0x9, 0x1, 0xe8, 0xabd8, 0x401, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r5, 0x89e7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.062983208s ago: executing program 4 (id=1838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@remote, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@multicast2, 0xfffffffc, 0x33}, 0x2, @in=@empty, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r2, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x3, [@default, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x120, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT={0x90, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3c}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xc3}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_TIMEOUT={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000800) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400000000e1ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e000000000005000d0010"], 0x44}}, 0x0) 1.057723274s ago: executing program 2 (id=1839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) 870.287444ms ago: executing program 2 (id=1840): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4020) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r2, &(0x7f0000002e80)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4020) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(r2, &(0x7f0000002e80)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}, 0x40) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) 857.952524ms ago: executing program 1 (id=1841): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x4908d13283d17e6b, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2001f}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x82, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 607.198379ms ago: executing program 3 (id=1842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0xfffffff5}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) 605.978332ms ago: executing program 2 (id=1843): r0 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x2c, 0x1, 0x5, 0x0, r2}, &(0x7f00000000c0)=0x10) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x1c, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000180)={r2, 0x5}, 0x8) getpeername$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@func={0xb, 0x0, 0x0, 0xc, 0x1}, @typedef={0xd}]}, {0x0, [0x30, 0x5f, 0x30, 0x0, 0x30, 0x2e, 0x30, 0x5f, 0x61]}}, &(0x7f0000000280)=""/84, 0x3b, 0x54, 0x0, 0xaef, 0x10000}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x1, 0xbf6, 0x9, 0x12, 0x1, 0x7, '\x00', r5, r6, 0x0, 0x4, 0x5}, 0x50) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f00000003c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000540)={@remote, 0x0}, &(0x7f0000000580)=0x14) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x5, &(0x7f00000004c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', r10, @fallback=0x16, r6, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000600)=[{0x5, 0x1, 0x2}, {0x0, 0x2, 0x6, 0xd}, {0x5, 0x4, 0x10, 0x8}, {0x5, 0x3, 0xa, 0x3}, {0x4, 0x2, 0x6, 0x7}, {0x2, 0x2, 0x9, 0x9}, {0x4, 0x2, 0x4}, {0x5, 0x5, 0x6, 0xc}], 0x10, 0xffff892a}, 0x94) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000740)={r3, 0x3fc, 0x6, 0x3, 0x2, 0x8}, 0x14) ioctl$XFS_IOC_OPEN_BY_HANDLE(r9, 0xc038586b, &(0x7f0000000880)={r8, &(0x7f0000000780)='\x00', 0x24801, &(0x7f00000007c0)={@align=0x6, {0x56, 0x0, 0x43, 0x1}}, 0x9c0, &(0x7f0000000800), &(0x7f0000000840)=0x7}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r12, &(0x7f0000000ec0)={&(0x7f00000008c0), 0xc, &(0x7f0000000e80)={&(0x7f0000000980)={0x4c4, r13, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x186, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0x5, 0x5}, @value=@ver_80211n={0x0, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x8, @default, 0x1c01, @val={0x0, 0x1b, @random="58d58edeee2a92de16754c66e32c20894ec71c84883bbfb0b6f238"}, @void, @val={0x3, 0x1, 0xc}, @void, @void, @val={0x5, 0x55, {0x8, 0x78, 0x9, "9e4d40a6cb3b60fdd08e24e63ece9311c2b2d0617c04607bb586bba88d6682578e36a882b755a074362195f2d85788c5b99eb9ba0ac4c94bf62296042c29625159f27c4a56ce1661045ecf27cf1dfc4d84f3"}}, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x1, 0xf6, 0x1}}, @val={0x76, 0x6, {0x6, 0x0, 0x1, 0x5}}, [{0xdd, 0xc5, "6812c3802e15dc52bbc2e338a0e5fa46db095871bdc71bd5d8ee4d0da4e40b612d54bf74113be3a72cfa2ef56d8555f096feb5e3c366bade27f94a07b5e24b9b73fc546421a0e3d5164baabeb4b0833e942714efabe8113ffb21eb02f3e28c2bea219ff99add9322f64512326d995c1ab93bf12ede35958d2119eeab185008750d558e45fa1757094a94f3212969a648691f098cf6afe122ed634ca435832d7a4b194a9e7def91c2ba2ba6b7ab027f7a7edbdfa910b8a012edf9210c7c2d97d7f98eb937bf"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x52, 0x7f, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @preq={0x82, 0x46, {{0x0, 0x1}, 0x0, 0x7f, 0xd54, @device_b, 0x8, @void, 0x5, 0x9, 0x4, [{{0x1, 0x0, 0x1}, @device_b, 0x9}, {{}, @device_a, 0x5a6c}, {{0x1, 0x0, 0x1}, @broadcast, 0xfffffffc}, {{0x1, 0x0, 0x1}, @device_a, 0xfffffff7}]}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x12}, 0x1, 0xc, @broadcast, 0x1, 0x7, 0x4}}, @perr={0x84, 0xb5, {0x1, 0xb, [{{0x0, 0x1}, @device_b, 0x2, @value=@broadcast, 0x3d}, {{}, @device_b, 0x3, @void, 0x7}, {{0x0, 0x1}, @broadcast, 0x5, @value=@broadcast, 0x17}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x3c}, {{0x0, 0x1}, @device_b, 0x80, @value=@device_b, 0x2a}, {{}, @broadcast, 0x7, @void, 0x36}, {{0x0, 0x1}, @device_b, 0x7}, {{0x0, 0x1}, @device_a, 0xb, @value, 0x34}, {{}, @broadcast, 0x7, @void, 0x31}, {{}, @device_a, 0x1ff, @void, 0x13}, {{}, @broadcast, 0x9, @void, 0x2f}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x61}}, @random={0x80}]}, @NL80211_ATTR_FTM_RESPONDER={0x1ec, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x32, 0x2, "632341c3cb1b5b2fa2ce4f0717f5617fba36ca2c1fb604395c6120d5bcf3493cce0d1c4b089452eb613f5d821b2b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x100, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0xb0, 0x2, "ae4b2e510923c40e1086eb8ab4efdf25cc398423ad194a30ece931350167765121c6a30a107c90e1d611a220fd585985e0de07bbd312cadbcd63a2650570c6f47260a566b0e9c71f8dacec6a4e6a81e82e90a5420a89ca1f46e264c42ecd3ffa80594b108eda2ad54bd0e7bb800a266703b50a093af59a150b3c25a32061aa6b4c56473e99de1c74418f099efd3efde64ab92de45ab5178331e914aca97602560b1940992b152cc580878450"}]}]]}, 0x4c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) ioctl$XFS_IOC_DIOINFO(r8, 0x800c581e, &(0x7f0000000f00)) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f40), 0x200040, 0x0) write$tun(r15, &(0x7f0000000f80)={@void, @val={0x2, 0x3, 0x10, 0x2, 0xa, 0x6}, @mpls={[{0x7}, {0xd}, {0x40}, {0x4, 0x0, 0x1}, {0x8}, {0x1}, {0x7ff, 0x0, 0x1}], @llc={@snap={0x1, 0xab, "c8", "2d1d51", 0x8906, "35049719a5176e24c3d5d4e6efc8cbf57d2ee86554d661273f316928f4dd66548f1ab35a8bdec71cccec3900c5f0725a33ef02a371f6d35917e2b6c5d452cd4f4a2a423a9988c2e2d990dc44901d8d64d7ad4234ac3ce1f6a4282883b2060e77ab2338280fc9736b82ef6ae4287cd583f326e05a3aa1f629036a40c6bab3640e26a925adda2433c1f3f39246efd4211c82bff3648211adae8876310ede5f2cd0c2f9dd"}}}}, 0xd1) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000001080)) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x4, [@volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @enum64={0x1, 0x5, 0x0, 0x13, 0x0, 0x8, [{0x3, 0x6231}, {0x8, 0x81, 0x63}, {0x4, 0x0, 0x10001}, {0x1, 0xe, 0x5}, {0x7, 0x8, 0x6}]}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x7a, 0x0, 0x7c, 0x6}, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x7f, [{0x3, 0x1, 0x385b}, {0xd, 0x5}, {0xd, 0x2, 0x2}, {0x8, 0x5, 0x7}, {0x0, 0x5, 0x7fffffff}, {0xb, 0x2, 0x3}]}]}, {0x0, [0x61, 0x30]}}, &(0x7f00000011c0)=""/120, 0xe0, 0x78, 0x0, 0x2, 0x10000}, 0x28) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r16, 0xf507, 0x0) ioctl$SIOCGIFHWADDR(r15, 0x8927, &(0x7f0000001280)={'syz_tun\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r11, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000014c0)=[0x0], &(0x7f0000001500)=[0x0, 0x0], 0x0, 0xc0, &(0x7f0000001540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001580), &(0x7f00000015c0), 0x8, 0xac, 0x8, 0x8, &(0x7f0000001600)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x3, 0x4, &(0x7f00000012c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x7, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x7344}, @ldst={0x1, 0x0, 0x6, 0x0, 0x4, 0x6, 0xfffffffffffffffc}], &(0x7f0000001300)='syzkaller\x00', 0x2, 0xb7, &(0x7f0000001340)=""/183, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001440)={0x5, 0x9, 0x3, 0x13}, 0x10, r17, r11, 0x7, 0x0, &(0x7f0000001780)=[{0x4, 0x4, 0x3}, {0x5, 0x3, 0x7}, {0x1, 0x2, 0x4, 0x5}, {0x3, 0x4, 0x5, 0x6}, {0x0, 0x4, 0x0, 0x4}, {0x0, 0x2, 0x2, 0xa}, {0x1, 0x3, 0x4, 0xa}], 0x10, 0x4}, 0x94) 503.2696ms ago: executing program 1 (id=1844): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) (async) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000080)={0x0, 0xfe, 0x0}, 0x12160) (async) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x3, 0x9}}) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x84, 0x8f, 0x8, 0x2c, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, 0x8000, 0x8000, 0x80000000, 0x4}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000210001000000000000000000fc020000000000200000000000000000fc020000000000002ce5d1590000000004000000000000000a00000000000000772242744c35bf73743949bbb8291bca6ff077fd5b5ecf01af8ba5a36182885e72d7a119177dff939fc0c8d7392a24b303801915915c3493649eeaed5f58e47e34244f57e38a1c292f6e368d43c9d8ec96f19249e717dbddb53308ab68cd05ddaef7171d910e8f952dda1db0f3e73e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) (async, rerun: 32) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}}, 0x0) 474.157597ms ago: executing program 4 (id=1845): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) (async) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x60, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31329eae551326051c0ecba1df0ef9cc9415b343831f26fe"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x60}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0xc1) 407.328134ms ago: executing program 3 (id=1846): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x12, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0x12, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) close(r5) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 406.840951ms ago: executing program 2 (id=1847): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x400000dd, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14, 0x80000) getsockname$packet(r2, &(0x7f0000000a80), &(0x7f0000000ac0)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r5, 0x0) (async) sendmmsg(r4, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000100)="313f7ac12164f7", 0x7}], 0x1}}], 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000002"], 0xb8}}, 0x4040080) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x18, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001fdffffffffffffff00ac1ee100000000002000000000000000403403f438bd9e28000000000000000000000000000000000a0000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaebfd2607eef2", 0x27}, {&(0x7f0000000100)="051ae2ff0d8c60c2730369b7", 0xc}, {&(0x7f0000000040)="37a8a6c41e646a566a4ce01f972bef63842ee3b291da39d1977010", 0x1b}], 0x3) (async, rerun: 32) r8 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 32) recvfrom$rxrpc(r8, 0x0, 0x0, 0x10130, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%ps \x00'}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, r9}, @jmp={0x5, 0x1, 0xe, 0x0, 0xb, 0x8}, @alu={0x7, 0x1, 0x1, 0x6, 0x6, 0xfffffffffffffffc, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}], &(0x7f0000000640)='syzkaller\x00', 0x4, 0xf0, &(0x7f0000000680)=""/240, 0x41000, 0x46, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0xc, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0x1, r9, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000008c0)={0x0, r10}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1811000000000000afe4000000000000630a00ff000000009500684000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xcd, &(0x7f0000000140)=""/205, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r10}, 0x94) syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local, [@hopopts={0x11}], "fafb17c133d11e59bb99c35bdfcf89f5"}}}}}}}, 0x0) 334.512422ms ago: executing program 1 (id=1848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r3, r2, 0x25, 0x8, @void}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xff}}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x44, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}}, 0x4) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r8, 0xffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x144, r7, 0x204, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x38786db}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc4}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xe316}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x344a}, {0x8, 0xb, 0xf}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000094}, 0x1) 210.20638ms ago: executing program 4 (id=1849): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000000)='\xb0-!--%*!\x00', 0x20000, &(0x7f00000000c0)={@_ha_fsid={[0x4, 0x3]}, {0x5, 0x1, 0x1}}, 0x4, &(0x7f0000000400), &(0x7f0000000180)=0x9}, {[0x5, 0x1, 0xb, 0x8]}, 0x1, 0x7c, &(0x7f00000001c0)=""/124}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9ebb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ebf}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 163.858687ms ago: executing program 3 (id=1850): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000190001000000000000000000021800000000ff000000000008000100ac141400040008"], 0x28}}, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x6c}, 0xa, @in=@empty, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=@ringbuf, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x90) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x1403, 0x300, 0x70bd26, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 157.010729ms ago: executing program 0 (id=1851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000001f000009000000f7493987c09e335a00", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 69.999716ms ago: executing program 1 (id=1852): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000600)=""/106, 0x6a}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x11, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x21c, 0x0, 0x0, @TCA_ACT_KIND={0xfffffffffffffebd, 0x1, 'bpf\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x1a, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0x2, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8}]}, 0x5e}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 2 (id=1853): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x3, 0x0, @remote}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', r5, 0x4, 0x0, 0xa, 0x319, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x29, 0x8000, 0x6}}) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x140d, 0x20, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x8040) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) bind$inet(r2, &(0x7f0000000000)={0x3, 0x0, @remote}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', r5, 0x4, 0x0, 0xa, 0x319, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x29, 0x8000, 0x6}}) (async) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x140d, 0x20, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x8040) (async) kernel console output (not intermixed with test programs): 672][ T5825] veth0_vlan: entered promiscuous mode [ 85.032514][ T5822] veth0_vlan: entered promiscuous mode [ 85.060072][ T5825] veth1_vlan: entered promiscuous mode [ 85.129172][ T5822] veth1_vlan: entered promiscuous mode [ 85.163839][ T5825] veth0_macvtap: entered promiscuous mode [ 85.188123][ T5825] veth1_macvtap: entered promiscuous mode [ 85.229237][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.252231][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.264517][ T5822] veth0_macvtap: entered promiscuous mode [ 85.277042][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.295173][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.304447][ T5822] veth1_macvtap: entered promiscuous mode [ 85.316262][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.344698][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.363602][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.372952][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.392489][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.419502][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.470282][ T3559] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.479546][ T3559] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.489705][ T5827] veth0_vlan: entered promiscuous mode [ 85.509221][ T3559] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.519639][ T3559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.571253][ T5824] veth0_vlan: entered promiscuous mode [ 85.614880][ T5827] veth1_vlan: entered promiscuous mode [ 85.629704][ T5823] veth0_vlan: entered promiscuous mode [ 85.630597][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.647929][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.680565][ T5824] veth1_vlan: entered promiscuous mode [ 85.715207][ T5823] veth1_vlan: entered promiscuous mode [ 85.751677][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.761692][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.805403][ T5838] Bluetooth: hci2: command tx timeout [ 85.805697][ T5830] Bluetooth: hci3: command tx timeout [ 85.811301][ T51] Bluetooth: hci1: command tx timeout [ 85.843208][ T5824] veth0_macvtap: entered promiscuous mode [ 85.861561][ T5827] veth0_macvtap: entered promiscuous mode [ 85.867881][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.873624][ T5823] veth0_macvtap: entered promiscuous mode [ 85.875852][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.890244][ T5838] Bluetooth: hci4: command tx timeout [ 85.896963][ T51] Bluetooth: hci0: command tx timeout [ 85.919400][ T5824] veth1_macvtap: entered promiscuous mode [ 85.938322][ T5823] veth1_macvtap: entered promiscuous mode [ 85.956192][ T5827] veth1_macvtap: entered promiscuous mode [ 85.971393][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.993678][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.995195][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.052641][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.068701][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.089689][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.108008][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.129484][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.137814][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.164390][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.172203][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.181419][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.225764][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.264939][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.299728][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.321815][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.390469][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.401204][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.403702][ T5941] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.459136][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.494184][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.576068][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.578565][ T5947] sctp: [Deprecated]: syz.2.7 (pid 5947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.578565][ T5947] Use struct sctp_sack_info instead [ 86.737291][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.756733][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.860808][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.870710][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.950213][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.974809][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.067612][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.099273][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.275876][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.298332][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.344816][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.351487][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.771933][ T5979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.790422][ T5982] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15'. [ 87.886793][ T51] Bluetooth: hci3: command tx timeout [ 87.888078][ T5838] Bluetooth: hci2: command tx timeout [ 87.892307][ T5830] Bluetooth: hci1: command tx timeout [ 87.964065][ T5838] Bluetooth: hci0: command tx timeout [ 87.964183][ T5830] Bluetooth: hci4: command tx timeout [ 88.023989][ T5986] bridge1: entered promiscuous mode [ 88.029262][ T5986] bridge1: entered allmulticast mode [ 88.039992][ T5992] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.497299][ T6010] syzkaller0: entered promiscuous mode [ 88.510731][ T6010] syzkaller0: entered allmulticast mode [ 88.533158][ T6015] netlink: 128 bytes leftover after parsing attributes in process `syz.2.25'. [ 88.551522][ T6015] netlink: 128 bytes leftover after parsing attributes in process `syz.2.25'. [ 89.047526][ T6037] syzkaller0: entered promiscuous mode [ 89.063291][ T6037] syzkaller0: entered allmulticast mode [ 89.077464][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 89.461931][ T6055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.38'. [ 89.711219][ T6067] warning: `syz.1.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.749190][ T6070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.950377][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'. [ 90.138882][ T6082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.296017][ T6090] netlink: 56 bytes leftover after parsing attributes in process `syz.2.52'. [ 90.350180][ T6085] syzkaller0: entered promiscuous mode [ 90.358362][ T6085] syzkaller0: entered allmulticast mode [ 90.389959][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 90.392040][ T6092] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 90.407850][ T6092] netlink: 224 bytes leftover after parsing attributes in process `syz.0.53'. [ 90.459172][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.50'. [ 90.591445][ T6092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.599324][ T6092] bridge0: port 3(bond1) entered blocking state [ 90.607869][ T6092] bridge0: port 3(bond1) entered disabled state [ 90.615401][ T6092] bond1: entered allmulticast mode [ 90.627106][ T6092] bond1: entered promiscuous mode [ 90.632743][ T6092] bridge0: port 3(bond1) entered blocking state [ 90.639308][ T6092] bridge0: port 3(bond1) entered forwarding state [ 90.677691][ T6111] x_tables: duplicate underflow at hook 2 [ 90.747813][ T6092] syz.0.53 uses obsolete (PF_INET,SOCK_PACKET) [ 91.920742][ T13] bridge0: port 3(bond1) entered disabled state [ 92.074759][ T42] cfg80211: failed to load regulatory.db [ 92.275567][ T5882] IPVS: starting estimator thread 0... [ 92.391226][ T6150] IPVS: using max 32 ests per chain, 76800 per kthread [ 92.400852][ T6148] team0: Port device gretap1 added [ 92.464233][ T6152] bond1: invalid ARP target 0.0.0.0 specified for addition [ 92.475981][ T6152] bond1: option arp_ip_target: invalid value (0) [ 92.518529][ T6158] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 92.533333][ T6152] bond1 (unregistering): Released all slaves [ 92.734934][ T6158] macvtap1: entered allmulticast mode [ 92.755221][ T6155] tipc: Enabling of bearer rejected, failed to enable media [ 92.858522][ T6175] __nla_validate_parse: 5 callbacks suppressed [ 92.858543][ T6175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.74'. [ 92.908127][ T6179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.75'. [ 92.946910][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 93.099346][ T6182] netlink: 88 bytes leftover after parsing attributes in process `syz.0.76'. [ 93.124141][ T6182] netlink: 24 bytes leftover after parsing attributes in process `syz.0.76'. [ 93.338456][ T6190] netlink: 68 bytes leftover after parsing attributes in process `syz.0.80'. [ 93.382589][ T6193] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 93.513892][ T6195] netlink: 100 bytes leftover after parsing attributes in process `syz.0.83'. [ 93.782369][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 93.825308][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 94.149467][ T6222] syz.2.91: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 94.167480][ T6222] CPU: 1 UID: 0 PID: 6222 Comm: syz.2.91 Not tainted syzkaller #0 PREEMPT(full) [ 94.167509][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 94.167521][ T6222] Call Trace: [ 94.167529][ T6222] [ 94.167538][ T6222] dump_stack_lvl+0xe8/0x150 [ 94.167575][ T6222] warn_alloc+0x249/0x340 [ 94.167600][ T6222] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 94.167630][ T6222] ? __pfx_warn_alloc+0x10/0x10 [ 94.167663][ T6222] ? kasan_save_track+0x4f/0x80 [ 94.167684][ T6222] ? kasan_save_track+0x3e/0x80 [ 94.167706][ T6222] ? __kasan_kmalloc+0x93/0xb0 [ 94.167728][ T6222] ? __kmalloc_cache_noprof+0x31c/0x660 [ 94.167750][ T6222] ? xskq_create+0x56/0x170 [ 94.167775][ T6222] ? xsk_setsockopt+0x54c/0x990 [ 94.167796][ T6222] ? do_sock_setsockopt+0x17c/0x1b0 [ 94.167821][ T6222] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 94.167846][ T6222] ? do_syscall_64+0x14d/0xf80 [ 94.167878][ T6222] __vmalloc_node_range_noprof+0x132/0x1730 [ 94.167946][ T6222] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 94.167979][ T6222] ? __kasan_kmalloc+0x93/0xb0 [ 94.168011][ T6222] vmalloc_user_noprof+0xad/0xe0 [ 94.168035][ T6222] ? xskq_create+0xbf/0x170 [ 94.168063][ T6222] xskq_create+0xbf/0x170 [ 94.168091][ T6222] xsk_init_queue+0x8a/0xe0 [ 94.168119][ T6222] xsk_setsockopt+0x54c/0x990 [ 94.168147][ T6222] ? __pfx_xsk_setsockopt+0x10/0x10 [ 94.168170][ T6222] ? __pfx_aa_sk_perm+0x10/0x10 [ 94.168204][ T6222] ? aa_sock_opt_perm+0xff/0x1a0 [ 94.168228][ T6222] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 94.168252][ T6222] ? __pfx_xsk_setsockopt+0x10/0x10 [ 94.168279][ T6222] do_sock_setsockopt+0x17c/0x1b0 [ 94.168312][ T6222] __x64_sys_setsockopt+0x13d/0x1b0 [ 94.168345][ T6222] do_syscall_64+0x14d/0xf80 [ 94.168372][ T6222] ? trace_irq_disable+0x3b/0x150 [ 94.168391][ T6222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.168412][ T6222] ? clear_bhb_loop+0x40/0x90 [ 94.168437][ T6222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.168457][ T6222] RIP: 0033:0x7f36fff9c819 [ 94.168478][ T6222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.168496][ T6222] RSP: 002b:00007f3700e70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.168519][ T6222] RAX: ffffffffffffffda RBX: 00007f3700215fa0 RCX: 00007f36fff9c819 [ 94.168534][ T6222] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 94.168546][ T6222] RBP: 00007f3700032c91 R08: 0000000000000004 R09: 0000000000000000 [ 94.168559][ T6222] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.168572][ T6222] R13: 00007f3700216038 R14: 00007f3700215fa0 R15: 00007ffe1d20db18 [ 94.168606][ T6222] [ 94.168614][ T6222] Mem-Info: [ 94.251311][ T6229] netlink: 'syz.1.94': attribute type 23 has an invalid length. [ 94.255733][ T6222] active_anon:5923 inactive_anon:0 isolated_anon:0 [ 94.255733][ T6222] active_file:2508 inactive_file:39929 isolated_file:0 [ 94.255733][ T6222] unevictable:768 dirty:1537 writeback:0 [ 94.255733][ T6222] slab_reclaimable:10621 slab_unreclaimable:94402 [ 94.255733][ T6222] mapped:29048 shmem:1360 pagetables:1134 [ 94.255733][ T6222] sec_pagetables:0 bounce:0 [ 94.255733][ T6222] kernel_misc_reclaimable:0 [ 94.255733][ T6222] free:1327853 free_pcp:18002 free_cma:0 [ 94.447637][ T6241] netlink: 240 bytes leftover after parsing attributes in process `syz.0.93'. [ 94.532121][ T6222] Node 0 active_anon:24192kB inactive_anon:0kB active_file:10032kB inactive_file:159508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120492kB dirty:6132kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12400kB pagetables:4612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 94.554531][ T6242] netlink: 'syz.0.93': attribute type 58 has an invalid length. [ 94.592929][ T6222] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 94.643530][ T6222] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 94.743006][ T6222] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 94.782746][ T6222] Node 0 DMA32 free:1358072kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24092kB inactive_anon:0kB active_file:10032kB inactive_file:159508kB unevictable:1536kB writepending:6132kB zspages:0kB present:3129332kB managed:2552564kB mlocked:0kB bounce:0kB free_pcp:71692kB local_pcp:27644kB free_cma:0kB [ 94.868418][ T6222] lowmem_reserve[]: 0 0 0 0 0 [ 94.873225][ T6222] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 95.002546][ T6222] lowmem_reserve[]: 0 0 0 0 0 [ 95.033876][ T6222] Node 1 Normal free:3937004kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.069392][ T6222] lowmem_reserve[]: 0 0 0 0 0 [ 95.074297][ T6222] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 95.094202][ T6222] Node 0 DMA32: 1304*4kB (U) 270*8kB (UM) 166*16kB (UME) 13*32kB (UME) 4*64kB (ME) 4*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (M) 3*2048kB (UM) 327*4096kB (M) = 1361616kB [ 95.137511][ T6222] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 95.161902][ T6222] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 15*16kB (UM) 10*32kB (UM) 4*64kB (UM) 1*128kB (M) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 960*4096kB (M) = 3937004kB [ 95.199482][ T6222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.200108][ T6268] Zero length message leads to an empty skb [ 95.254565][ T6222] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.263989][ T6222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.280152][ T6271] bond1: option xmit_hash_policy: invalid value (64) [ 95.308280][ T6222] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.321977][ T6271] bond1 (unregistering): Released all slaves [ 95.399637][ T6222] 46791 total pagecache pages [ 95.450158][ T6222] 0 pages in swap cache [ 95.466748][ T6222] Free swap = 124996kB [ 95.471106][ T6222] Total swap = 124996kB [ 95.481584][ T6222] 2097051 pages RAM [ 95.495393][ T6222] 0 pages HighMem/MovableOnly [ 95.507811][ T6222] 427077 pages reserved [ 95.519432][ T6222] 0 pages cma reserved [ 95.771673][ T6285] syzkaller0: entered promiscuous mode [ 95.791761][ T6285] syzkaller0: entered allmulticast mode [ 95.813828][ T6287] tipc: Started in network mode [ 95.829021][ T6287] tipc: Node identity 4, cluster identity 4711 [ 95.860564][ T6287] tipc: Node number set to 4 [ 96.007567][ T6295] netlink: 'syz.1.109': attribute type 2 has an invalid length. [ 96.196500][ T6304] netlink: 'syz.2.112': attribute type 2 has an invalid length. [ 96.244718][ T6295] 9: entered promiscuous mode [ 96.502867][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801eb60400: rx timeout, send abort [ 96.598720][ T6320] Cannot find add_set index 0 as target [ 96.781895][ T6327] netlink: 'syz.3.119': attribute type 1 has an invalid length. [ 97.003408][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801eb62000: rx timeout, send abort [ 97.012542][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801eb60400: abort rx timeout. Force session deactivation [ 97.071900][ T6342] netlink: 'syz.3.122': attribute type 1 has an invalid length. [ 97.094263][ T6342] : renamed from bond0 (while UP) [ 97.511754][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801eb62000: abort rx timeout. Force session deactivation [ 98.532204][ T6406] __nla_validate_parse: 15 callbacks suppressed [ 98.532219][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 98.547994][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 99.586966][ T6413] ip6tnl1: entered allmulticast mode [ 99.596079][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'. [ 100.168833][ T6351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.191780][ T6415] netlink: 'syz.1.142': attribute type 11 has an invalid length. [ 100.225034][ T6416] netlink: 'syz.1.142': attribute type 11 has an invalid length. [ 100.360006][ T6421] netlink: 'syz.3.143': attribute type 1 has an invalid length. [ 100.471370][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 100.481428][ T6433] x_tables: unsorted underflow at hook 1 [ 100.487572][ T6435] netlink: 48 bytes leftover after parsing attributes in process `syz.3.143'. [ 100.589730][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 100.604736][ T6421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.143'. [ 100.860685][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 100.897064][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 101.135416][ T6464] netlink: 'syz.0.155': attribute type 9 has an invalid length. [ 101.536799][ T6483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.161'. [ 102.239294][ T6525] openvswitch: netlink: IP tunnel dst address not specified [ 102.250503][ T6525] openvswitch: netlink: IP tunnel dst address not specified [ 102.410932][ T6534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.551278][ T6545] syzkaller0: create flow: hash 4037269248 index 1 [ 102.747713][ T6542] syzkaller0: delete flow: hash 4037269248 index 1 [ 104.055339][ T6564] tap0: tun_chr_ioctl cmd 2148553947 [ 104.306692][ T6586] __nla_validate_parse: 9 callbacks suppressed [ 104.306724][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 104.375846][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 104.404071][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 104.490875][ T6599] netlink: 'syz.2.192': attribute type 13 has an invalid length. [ 104.541902][ T6602] netlink: 68 bytes leftover after parsing attributes in process `syz.2.192'. [ 104.703644][ T6601] tipc: Enabling of bearer rejected, failed to enable media [ 104.722248][ T6608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.792082][ T6611] netlink: 'syz.1.196': attribute type 10 has an invalid length. [ 104.843215][ T6611] team0: Port device dummy0 added [ 105.250011][ T6630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.202'. [ 105.443525][ T6630] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 105.486611][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 105.495733][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 105.522956][ T6630] bond1 (unregistering): Released all slaves [ 105.629479][ T6614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.755845][ T6651] syzkaller1: entered promiscuous mode [ 105.761478][ T6651] syzkaller1: entered allmulticast mode [ 105.990913][ T42] IPVS: starting estimator thread 0... [ 105.997040][ T6665] IPVS: ip_vs_add_dest(): server weight less than zero [ 106.103573][ T6666] IPVS: using max 25 ests per chain, 60000 per kthread [ 106.224186][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.213'. [ 106.271434][ T6676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.213'. [ 106.350632][ T6681] netlink: 14 bytes leftover after parsing attributes in process `syz.4.215'. [ 106.431706][ T6681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.465018][ T6681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.507491][ T6681] bond0 (unregistering): Released all slaves [ 106.541849][ T6690] syzkaller0: entered promiscuous mode [ 106.547896][ T6690] syzkaller0: entered allmulticast mode [ 106.652808][ T6699] Bluetooth: MGMT ver 1.23 [ 106.835527][ T6705] netlink: 'syz.4.222': attribute type 12 has an invalid length. [ 106.844070][ T6705] netlink: 'syz.4.222': attribute type 29 has an invalid length. [ 106.922579][ T6706] netlink: 'syz.4.222': attribute type 12 has an invalid length. [ 106.933559][ T6706] netlink: 'syz.4.222': attribute type 29 has an invalid length. [ 107.387045][ T6729] bond0: Unable to set down delay as MII monitoring is disabled [ 107.416729][ T6729] bond0 (unregistering): Released all slaves [ 107.448176][ T6728] syzkaller0: entered promiscuous mode [ 107.454091][ T6728] syzkaller0: entered allmulticast mode [ 107.917687][ T6763] netlink: 'syz.2.234': attribute type 10 has an invalid length. [ 108.030743][ T6763] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 108.218749][ T6748] syzkaller0: entered promiscuous mode [ 108.233109][ T6748] syzkaller0: entered allmulticast mode [ 108.264133][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.304130][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.478328][ T6793] __nla_validate_parse: 18 callbacks suppressed [ 109.478348][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.243'. [ 109.745435][ T6809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.249'. [ 109.782998][ T6811] veth0_to_team: entered allmulticast mode [ 109.938466][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 109.952792][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 110.004919][ T6827] netlink: 44 bytes leftover after parsing attributes in process `syz.2.250'. [ 110.158301][ T6833] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 110.374176][ T6835] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 110.383504][ T6835] bond1: option packets_per_slave: allowed values 0 - 65535 [ 110.407498][ T6835] bond1 (unregistering): Released all slaves [ 110.568804][ T6851] nbd: illegal input index 2958377 [ 110.588499][ T6851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.261'. [ 110.598362][ T6851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.261'. [ 110.793806][ T6858] x_tables: duplicate entry at hook 3 [ 111.154773][ T6868] xt_hashlimit: invalid interval [ 111.362481][ T6879] openvswitch: netlink: IP tunnel dst address not specified [ 111.399535][ T6879] openvswitch: netlink: IP tunnel dst address not specified [ 111.703879][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.271'. [ 111.739828][ T6885] ipvlan2: entered allmulticast mode [ 111.761719][ T6885] syz_tun: entered allmulticast mode [ 111.938472][ T6894] veth0_to_bond: entered allmulticast mode [ 112.028913][ T6894] openvswitch: netlink: Missing key (keys=40, expected=100) [ 112.116624][ T6901] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.276'. [ 112.242712][ T6908] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 112.335193][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 112.431067][ T6915] netlink: 'syz.3.280': attribute type 2 has an invalid length. [ 112.543164][ T6912] hsr_slave_0 (unregistering): left promiscuous mode [ 112.614352][ T42] IPVS: starting estimator thread 0... [ 112.743848][ T6928] IPVS: using max 25 ests per chain, 60000 per kthread [ 112.914088][ T6941] sctp: [Deprecated]: syz.1.287 (pid 6941) Use of int in max_burst socket option. [ 112.914088][ T6941] Use struct sctp_assoc_value instead [ 133.007085][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.014002][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.465986][ T6976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.473516][ T6976] IPv6: NLM_F_CREATE should be set when creating new route [ 133.480889][ T6976] IPv6: NLM_F_CREATE should be set when creating new route [ 134.075698][ T6999] __nla_validate_parse: 2 callbacks suppressed [ 134.075718][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'. [ 134.221300][ T6999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.285289][ T6999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.379845][ T7011] netlink: 'syz.2.304': attribute type 4 has an invalid length. [ 134.447678][ T7019] netlink: 'syz.2.304': attribute type 4 has an invalid length. [ 134.509484][ T7023] netlink: 'syz.3.308': attribute type 1 has an invalid length. [ 134.730293][ T7026] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.738904][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.806732][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 134.843591][ T7026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.856665][ T7026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.964059][ T35] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.996467][ T35] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.140283][ T35] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.161980][ T35] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.348511][ T7049] syzkaller0: entered promiscuous mode [ 135.367272][ T7049] syzkaller0: entered allmulticast mode [ 135.492096][ T7057] syzkaller1: entered promiscuous mode [ 135.519518][ T7057] syzkaller1: entered allmulticast mode [ 135.903269][ T7079] netlink: 108 bytes leftover after parsing attributes in process `syz.1.324'. [ 136.129600][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 136.266991][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 136.445345][ T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3c [ 136.663124][ T7115] netlink: 104 bytes leftover after parsing attributes in process `syz.3.333'. [ 137.139106][ T7099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.370115][ T7130] FAULT_INJECTION: forcing a failure. [ 137.370115][ T7130] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 137.414755][ T7130] CPU: 0 UID: 0 PID: 7130 Comm: syz.3.339 Not tainted syzkaller #0 PREEMPT(full) [ 137.414784][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.414796][ T7130] Call Trace: [ 137.414804][ T7130] [ 137.414813][ T7130] dump_stack_lvl+0xe8/0x150 [ 137.414856][ T7130] should_fail_ex+0x412/0x560 [ 137.414893][ T7130] _copy_from_user+0x2d/0xb0 [ 137.414918][ T7130] ___sys_sendmsg+0x1c6/0x360 [ 137.414952][ T7130] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.415015][ T7130] ? __fget_files+0x2a/0x420 [ 137.415033][ T7130] ? __fget_files+0x3a0/0x420 [ 137.415062][ T7130] __x64_sys_sendmsg+0x1bd/0x2a0 [ 137.415092][ T7130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.415129][ T7130] ? __pfx_ksys_write+0x10/0x10 [ 137.415164][ T7130] do_syscall_64+0x14d/0xf80 [ 137.415191][ T7130] ? trace_irq_disable+0x3b/0x150 [ 137.415209][ T7130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.415230][ T7130] ? clear_bhb_loop+0x40/0x90 [ 137.415255][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.415274][ T7130] RIP: 0033:0x7f8927b9c819 [ 137.415294][ T7130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.415311][ T7130] RSP: 002b:00007f8928b11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.415334][ T7130] RAX: ffffffffffffffda RBX: 00007f8927e15fa0 RCX: 00007f8927b9c819 [ 137.415347][ T7130] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000005 [ 137.415360][ T7130] RBP: 00007f8928b11090 R08: 0000000000000000 R09: 0000000000000000 [ 137.415373][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.415385][ T7130] R13: 00007f8927e16038 R14: 00007f8927e15fa0 R15: 00007fffac8ea408 [ 137.415415][ T7130] [ 137.639256][ T7137] netlink: 'syz.0.340': attribute type 1 has an invalid length. [ 137.673612][ T7140] nbd: couldn't find a device at index 1048580 [ 137.728513][ T7136] nbd: must specify a device to reconfigure [ 137.951865][ T7155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.347'. [ 138.128225][ T7162] netlink: 64 bytes leftover after parsing attributes in process `syz.3.349'. [ 138.167963][ T7162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.222035][ T7162] Bluetooth: MGMT ver 1.23 [ 138.268378][ T7164] netlink: 'syz.0.344': attribute type 25 has an invalid length. [ 138.284327][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 138.317606][ T7162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.349'. [ 138.443786][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 138.776083][ T7183] FAULT_INJECTION: forcing a failure. [ 138.776083][ T7183] name failslab, interval 1, probability 0, space 0, times 1 [ 138.854224][ T7183] CPU: 1 UID: 0 PID: 7183 Comm: syz.1.355 Not tainted syzkaller #0 PREEMPT(full) [ 138.854253][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 138.854265][ T7183] Call Trace: [ 138.854272][ T7183] [ 138.854281][ T7183] dump_stack_lvl+0xe8/0x150 [ 138.854316][ T7183] should_fail_ex+0x412/0x560 [ 138.854353][ T7183] should_failslab+0xa8/0x100 [ 138.854382][ T7183] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 138.854405][ T7183] ? __alloc_skb+0x186/0x7d0 [ 138.854429][ T7183] ? __alloc_skb+0x1d0/0x7d0 [ 138.854450][ T7183] ? __local_bh_enable_ip+0xd0/0x130 [ 138.854481][ T7183] __alloc_skb+0x1d0/0x7d0 [ 138.854504][ T7183] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 138.854534][ T7183] netlink_sendmsg+0x5d4/0xb40 [ 138.854568][ T7183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.854594][ T7183] ? aa_sock_msg_perm+0xf1/0x1b0 [ 138.854635][ T7183] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.854661][ T7183] ____sys_sendmsg+0x972/0x9f0 [ 138.854698][ T7183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.854735][ T7183] ? import_iovec+0x73/0xa0 [ 138.854762][ T7183] ___sys_sendmsg+0x2a5/0x360 [ 138.854795][ T7183] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.854857][ T7183] ? __fget_files+0x2a/0x420 [ 138.854875][ T7183] ? __fget_files+0x3a0/0x420 [ 138.854904][ T7183] __x64_sys_sendmsg+0x1bd/0x2a0 [ 138.854933][ T7183] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.854970][ T7183] ? __pfx_ksys_write+0x10/0x10 [ 138.855004][ T7183] do_syscall_64+0x14d/0xf80 [ 138.855031][ T7183] ? trace_irq_disable+0x3b/0x150 [ 138.855049][ T7183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.855068][ T7183] ? clear_bhb_loop+0x40/0x90 [ 138.855092][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.855111][ T7183] RIP: 0033:0x7f261479c819 [ 138.855131][ T7183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.855147][ T7183] RSP: 002b:00007f26155ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.855169][ T7183] RAX: ffffffffffffffda RBX: 00007f2614a15fa0 RCX: 00007f261479c819 [ 138.855183][ T7183] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000005 [ 138.855196][ T7183] RBP: 00007f26155ee090 R08: 0000000000000000 R09: 0000000000000000 [ 138.855207][ T7183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.855218][ T7183] R13: 00007f2614a16038 R14: 00007f2614a15fa0 R15: 00007ffcad7aabf8 [ 138.855256][ T7183] [ 139.144781][ T7192] __nla_validate_parse: 1 callbacks suppressed [ 139.144802][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 139.173508][ T7192] netlink: 32 bytes leftover after parsing attributes in process `syz.0.359'. [ 139.238475][ T7190] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 139.461700][ T7200] netlink: 44 bytes leftover after parsing attributes in process `syz.0.362'. [ 139.532057][ T7205] netlink: 88 bytes leftover after parsing attributes in process `syz.2.363'. [ 139.559736][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.363'. [ 139.587072][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.363'. [ 139.709641][ T7206] bond1: Removing last arp target with arp_interval on [ 140.459623][ T7232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.372'. [ 140.819580][ T7243] netlink: 'syz.2.376': attribute type 1 has an invalid length. [ 141.009725][ T7243] bond1: entered promiscuous mode [ 141.016425][ T7243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.028812][ T7245] bond1: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 141.041405][ T7245] bond1: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 141.051738][ T7245] bond1: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 141.532245][ T7283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.384'. [ 143.907304][ T7255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.104613][ T7305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.390'. [ 144.148363][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.390'. [ 144.340525][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 144.450516][ T7302] delete_channel: no stack [ 144.616077][ T7335] netlink: 'syz.0.397': attribute type 10 has an invalid length. [ 144.629391][ T7335] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 144.660013][ T7335] syzkaller1: entered promiscuous mode [ 144.669037][ T7335] syzkaller1: entered allmulticast mode [ 144.906315][ T7344] x_tables: duplicate underflow at hook 2 [ 144.950238][ T7344] x_tables: duplicate underflow at hook 1 [ 146.138739][ T7408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 146.199499][ T7414] netlink: 'syz.3.421': attribute type 1 has an invalid length. [ 146.215921][ T7412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.421'. [ 146.240827][ T7414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.421'. [ 146.306839][ T7418] x_tables: duplicate underflow at hook 3 [ 146.531772][ T7425] gtp0: entered promiscuous mode [ 146.542431][ T7425] gtp0: entered allmulticast mode [ 146.570958][ T7429] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 146.647703][ T7430] netlink: 'syz.0.426': attribute type 10 has an invalid length. [ 146.647703][ T7429] netlink: 'syz.0.426': attribute type 10 has an invalid length. [ 146.702373][ T7429] netlink: 32 bytes leftover after parsing attributes in process `syz.0.426'. [ 146.751039][ T7435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.080051][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.431'. [ 147.185508][ T7450] netlink: 170936 bytes leftover after parsing attributes in process `syz.3.432'. [ 147.196296][ T7450] netlink: zone id is out of range [ 147.201457][ T7450] netlink: zone id is out of range [ 147.207692][ T7450] netlink: zone id is out of range [ 147.213269][ T7450] netlink: zone id is out of range [ 147.247314][ T7450] netlink: zone id is out of range [ 147.260646][ T7450] netlink: zone id is out of range [ 147.275543][ T7450] netlink: zone id is out of range [ 147.298429][ T7450] netlink: del zone limit has 4 unknown bytes [ 147.553334][ T7466] netlink: 'syz.1.435': attribute type 83 has an invalid length. [ 147.651505][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 147.673540][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 147.756886][ T7482] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.439'. [ 147.795554][ T7482] netlink: 'syz.2.439': attribute type 11 has an invalid length. [ 148.099244][ T7495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.348120][ T7515] F: renamed from gre0 (while UP) [ 148.367044][ T7515] F: entered allmulticast mode [ 148.395631][ T7516] sctp: [Deprecated]: syz.0.450 (pid 7516) Use of int in max_burst socket option. [ 148.395631][ T7516] Use struct sctp_assoc_value instead [ 148.814726][ T7531] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 149.412714][ T7558] __nla_validate_parse: 4 callbacks suppressed [ 149.412735][ T7558] netlink: 232 bytes leftover after parsing attributes in process `syz.4.461'. [ 149.772145][ T7577] syzkaller0: entered promiscuous mode [ 149.803623][ T7577] syzkaller0: entered allmulticast mode [ 149.976334][ T7585] netlink: 'syz.1.466': attribute type 290 has an invalid length. [ 150.128360][ T7590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.468'. [ 150.142384][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'. [ 150.258983][ T7597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.470'. [ 150.435511][ T7599] Bluetooth: MGMT ver 1.23 [ 150.566052][ T7599] bond1: entered allmulticast mode [ 150.585937][ T7614] netlink: 'syz.0.475': attribute type 10 has an invalid length. [ 150.625112][ T7607] bridge1: entered promiscuous mode [ 150.631724][ T7607] bridge1: entered allmulticast mode [ 150.664720][ T7607] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 150.768064][ T7620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.477'. [ 150.839977][ T7618] netlink: 76 bytes leftover after parsing attributes in process `syz.0.476'. [ 150.852804][ T7618] syzkaller0: entered promiscuous mode [ 150.869967][ T7618] syzkaller0: entered allmulticast mode [ 150.877808][ T7624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.477'. [ 151.066865][ T7627] syzkaller0: entered promiscuous mode [ 151.072408][ T7627] syzkaller0: entered allmulticast mode [ 151.104123][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 152.022990][ T7669] netlink: 'syz.2.491': attribute type 21 has an invalid length. [ 152.041500][ T7669] netlink: 128 bytes leftover after parsing attributes in process `syz.2.491'. [ 152.064331][ T7669] netlink: 'syz.2.491': attribute type 4 has an invalid length. [ 152.072054][ T7669] netlink: 'syz.2.491': attribute type 5 has an invalid length. [ 152.122240][ T7678] netlink: 'syz.2.491': attribute type 21 has an invalid length. [ 152.168550][ T7669] netlink: 3 bytes leftover after parsing attributes in process `syz.2.491'. [ 152.239210][ T7678] netlink: 'syz.2.491': attribute type 4 has an invalid length. [ 152.313596][ T7678] netlink: 'syz.2.491': attribute type 5 has an invalid length. [ 152.413466][ T7689] netlink: 'syz.3.494': attribute type 8 has an invalid length. [ 153.530663][ T7743] bond0: entered promiscuous mode [ 153.678337][ T7743] macvlan2: entered promiscuous mode [ 153.694343][ T7743] macvlan2: entered allmulticast mode [ 153.710353][ T7743] bond0: (slave macvlan2): Opening slave failed [ 153.842288][ T7752] ip6gre1: entered allmulticast mode [ 153.889765][ T7764] netlink: 'syz.1.509': attribute type 4 has an invalid length. [ 154.201421][ T7774] Cannot find add_set index 0 as target [ 154.325099][ T7782] sit0: Caught tx_queue_len zero misconfig [ 154.336725][ T7774] syzkaller0: entered promiscuous mode [ 154.355691][ T7774] syzkaller0: entered allmulticast mode [ 154.367388][ T7785] net_ratelimit: 2 callbacks suppressed [ 154.367408][ T7785] openvswitch: netlink: Flow key attr not present in new flow. [ 154.658957][ T7799] __nla_validate_parse: 7 callbacks suppressed [ 154.658977][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'. [ 154.720463][ T7802] netlink: 'syz.0.520': attribute type 21 has an invalid length. [ 154.729576][ T7802] netlink: 132 bytes leftover after parsing attributes in process `syz.0.520'. [ 154.738031][ T7799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.519'. [ 154.829593][ T7799] geneve2: entered promiscuous mode [ 154.848357][ T7799] geneve2: entered allmulticast mode [ 154.925293][ T7811] netlink: 80 bytes leftover after parsing attributes in process `syz.4.521'. [ 155.018897][ T7817] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 155.044805][ T7821] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20265 [ 155.051729][ T5961] IPVS: starting estimator thread 0... [ 155.179192][ T7822] IPVS: using max 25 ests per chain, 60000 per kthread [ 155.343884][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.528'. [ 155.378089][ T7840] vlan1: Caught tx_queue_len zero misconfig [ 155.387910][ T7838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.528'. [ 155.423629][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'. [ 155.547034][ T7852] netlink: 'syz.4.531': attribute type 1 has an invalid length. [ 155.556845][ T7842] bond2: option xmit_hash_policy: invalid value (64) [ 155.577972][ T7852] netlink: 224 bytes leftover after parsing attributes in process `syz.4.531'. [ 155.592213][ T7842] bond2 (unregistering): Released all slaves [ 155.634901][ T7852] netlink: 'syz.4.531': attribute type 11 has an invalid length. [ 155.643242][ T7852] netlink: 199748 bytes leftover after parsing attributes in process `syz.4.531'. [ 155.818963][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.532'. [ 155.882167][ T7862] bridge_slave_1: left allmulticast mode [ 155.888754][ T7862] bridge_slave_1: left promiscuous mode [ 155.917864][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.940959][ T7870] xt_l2tp: v2 doesn't support IP mode [ 155.988919][ T7862] bridge_slave_0: left allmulticast mode [ 155.996645][ T7862] bridge_slave_0: left promiscuous mode [ 156.007231][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.338591][ T7887] FAULT_INJECTION: forcing a failure. [ 156.338591][ T7887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.365466][ T7887] CPU: 1 UID: 0 PID: 7887 Comm: syz.2.538 Not tainted syzkaller #0 PREEMPT(full) [ 156.365496][ T7887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 156.365507][ T7887] Call Trace: [ 156.365515][ T7887] [ 156.365524][ T7887] dump_stack_lvl+0xe8/0x150 [ 156.365568][ T7887] should_fail_ex+0x412/0x560 [ 156.365604][ T7887] _copy_to_user+0x31/0xb0 [ 156.365632][ T7887] simple_read_from_buffer+0xe1/0x170 [ 156.365667][ T7887] proc_fail_nth_read+0x1bb/0x230 [ 156.365699][ T7887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.365732][ T7887] ? rw_verify_area+0x2a6/0x4d0 [ 156.365754][ T7887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.365784][ T7887] vfs_read+0x20c/0xa70 [ 156.365805][ T7887] ? fdget_pos+0x246/0x320 [ 156.365828][ T7887] ? __pfx___mutex_lock+0x10/0x10 [ 156.365858][ T7887] ? __pfx_vfs_read+0x10/0x10 [ 156.365882][ T7887] ? __fget_files+0x2a/0x420 [ 156.365905][ T7887] ? __fget_files+0x3a0/0x420 [ 156.365922][ T7887] ? __fget_files+0x2a/0x420 [ 156.365950][ T7887] ksys_read+0x150/0x270 [ 156.365975][ T7887] ? __pfx_ksys_read+0x10/0x10 [ 156.366010][ T7887] do_syscall_64+0x14d/0xf80 [ 156.366037][ T7887] ? trace_irq_disable+0x3b/0x150 [ 156.366054][ T7887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.366073][ T7887] ? clear_bhb_loop+0x40/0x90 [ 156.366097][ T7887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.366116][ T7887] RIP: 0033:0x7f36fff5d04e [ 156.366134][ T7887] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.366150][ T7887] RSP: 002b:00007f3700e6ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.366172][ T7887] RAX: ffffffffffffffda RBX: 00007f3700e706c0 RCX: 00007f36fff5d04e [ 156.366186][ T7887] RDX: 000000000000000f RSI: 00007f3700e700a0 RDI: 0000000000000006 [ 156.366198][ T7887] RBP: 00007f3700e70090 R08: 0000000000000000 R09: 0000000000000000 [ 156.366210][ T7887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.366221][ T7887] R13: 00007f3700216038 R14: 00007f3700215fa0 R15: 00007ffe1d20db18 [ 156.366255][ T7887] [ 156.730328][ T7893] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 157.735549][ T7951] validate_nla: 8 callbacks suppressed [ 157.735568][ T7951] netlink: 'syz.1.555': attribute type 2 has an invalid length. [ 157.801176][ T7952] pimreg: entered allmulticast mode [ 158.272046][ T7983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.343095][ T7983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.444178][ T7983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.484603][ T7983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.521704][ T7983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.561717][ T7983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.571736][ T7991] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 158.600901][ T7991] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 158.642203][ T7985] openvswitch: netlink: Missing valid actions attribute. [ 158.658945][ T7983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.747758][ T7985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.796497][ T7983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.004037][ T7983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.264368][ T8015] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 159.406750][ T8023] bond2: entered promiscuous mode [ 159.411878][ T8023] bond2: entered allmulticast mode [ 159.460785][ T8023] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.540273][ T8027] bond2 (unregistering): Released all slaves [ 160.130338][ T8072] netlink: 'syz.4.579': attribute type 3 has an invalid length. [ 160.300381][ T8073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.325314][ T8079] __nla_validate_parse: 15 callbacks suppressed [ 160.325337][ T8079] netlink: 40 bytes leftover after parsing attributes in process `syz.0.583'. [ 160.660849][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 160.851015][ T8104] geneve2: entered promiscuous mode [ 160.861150][ T8104] geneve2: entered allmulticast mode [ 160.921606][ T8107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.942992][ T8109] tipc: Enabling of bearer rejected, media not registered [ 160.986148][ T8109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.429397][ T8140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.602'. [ 161.535141][ T8140] netlink: 28 bytes leftover after parsing attributes in process `syz.2.602'. [ 161.673271][ T8144] bond4: Unable to set down delay as MII monitoring is disabled [ 161.707642][ T8144] bond4 (unregistering): Released all slaves [ 161.849168][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 161.899839][ T8149] syzkaller0: entered promiscuous mode [ 161.905636][ T8149] syzkaller0: entered allmulticast mode [ 163.340692][ T8174] kthread_run failed with err -4 [ 163.661539][ T8197] syzkaller0: entered promiscuous mode [ 163.724428][ T8197] syzkaller0: entered allmulticast mode [ 163.732964][ T8197] tc action pedit offset must be on 32 bit boundaries [ 164.007653][ T8208] IPVS: sed: FWM 3 0x00000003 - no destination available [ 164.028232][ T8213] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.618'. [ 164.073642][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 164.106655][ T8208] netlink: 32 bytes leftover after parsing attributes in process `syz.4.615'. [ 164.375223][ T8191] 8021q: VLANs not supported on caif0 [ 164.466918][ T8228] lo: Caught tx_queue_len zero misconfig [ 164.779753][ T8242] ip6t_srh: unknown srh invflags 4000 [ 164.822745][ T8243] xfrm1: entered allmulticast mode [ 165.316981][ T8265] netlink: 'syz.3.628': attribute type 2 has an invalid length. [ 165.373651][ T8265] netlink: 'syz.3.628': attribute type 2 has an invalid length. [ 165.400582][ T8270] netlink: 144 bytes leftover after parsing attributes in process `syz.0.632'. [ 165.420401][ T8265] netlink: 'syz.3.628': attribute type 2 has an invalid length. [ 165.443009][ T8265] netlink: 'syz.3.628': attribute type 2 has an invalid length. [ 165.455809][ T8265] netlink: 'syz.3.628': attribute type 2 has an invalid length. [ 165.465841][ T8265] netlink: 'syz.3.628': attribute type 2 has an invalid length. [ 165.496733][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.634'. [ 165.496837][ T8265] netlink: 'syz.3.628': attribute type 2 has an invalid length. [ 165.534597][ T8265] netlink: 'syz.3.628': attribute type 2 has an invalid length. [ 165.557146][ T8265] netlink: 'syz.3.628': attribute type 2 has an invalid length. [ 165.578908][ T8265] netlink: 'syz.3.628': attribute type 2 has an invalid length. [ 165.596336][ T8283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.633'. [ 165.713766][ T8283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.633'. [ 165.823317][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 166.062507][ T8274] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 166.092683][ T8306] netlink: 52 bytes leftover after parsing attributes in process `syz.1.639'. [ 166.566071][ T8328] Driver unsupported XDP return value 0 on prog (id 111) dev N/A, expect packet loss! [ 166.715337][ T8340] xt_hashlimit: invalid rate [ 166.850044][ T8348] netlink: 128 bytes leftover after parsing attributes in process `syz.1.653'. [ 166.875615][ T8348] netlink: 20 bytes leftover after parsing attributes in process `syz.1.653'. [ 166.951936][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.655'. [ 167.080598][ T8361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.098622][ T8360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.277976][ T8367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.748596][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.665'. [ 167.815267][ T8389] veth1_to_hsr: mtu less than device minimum [ 167.888847][ T8396] wg1: entered promiscuous mode [ 167.894417][ T8396] wg1: entered allmulticast mode [ 169.840857][ T8348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.100066][ T8411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.191143][ T8411] ip6gre1: entered promiscuous mode [ 170.212161][ T8416] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 170.237425][ T8415] openvswitch: netlink: IP tunnel dst address not specified [ 170.257965][ T8411] ip6gre1: entered allmulticast mode [ 170.566896][ T8425] validate_nla: 23 callbacks suppressed [ 170.566917][ T8425] netlink: 'syz.1.678': attribute type 25 has an invalid length. [ 170.589725][ T8425] __nla_validate_parse: 3 callbacks suppressed [ 170.589744][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 170.633313][ T8425] netlink: 'syz.1.678': attribute type 25 has an invalid length. [ 170.674291][ T77] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.685392][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 170.708806][ T77] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.749404][ T8422] tipc: Enabled bearer , priority 0 [ 170.887782][ T8428] syzkaller0: entered promiscuous mode [ 170.893726][ T8428] syzkaller0: entered allmulticast mode [ 170.906133][ T8428] tipc: Resetting bearer [ 170.917159][ T77] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.930608][ T77] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.961119][ T8421] tipc: Resetting bearer [ 171.883827][ T8459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.687'. [ 172.437058][ T8421] tipc: Disabling bearer [ 172.448876][ T77] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.456960][ T77] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.473688][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.687944][ T8469] netlink: 220 bytes leftover after parsing attributes in process `syz.0.688'. [ 172.703668][ T5924] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.733518][ T8468] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 172.979421][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'. [ 173.001836][ T8476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.688'. [ 173.229553][ T8497] syzkaller0: entered promiscuous mode [ 173.237798][ T8497] syzkaller0: entered allmulticast mode [ 173.324876][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 173.523236][ T8505] netlink: 27 bytes leftover after parsing attributes in process `syz.4.699'. [ 173.834388][ T8531] netlink: 'syz.2.705': attribute type 39 has an invalid length. [ 173.867389][ T8533] netlink: 104 bytes leftover after parsing attributes in process `syz.3.707'. [ 173.877363][ T8535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.107556][ T8545] netlink: 'syz.0.711': attribute type 2 has an invalid length. [ 174.279668][ T8549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.660564][ T8571] netlink: 'syz.2.718': attribute type 10 has an invalid length. [ 174.689388][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.717582][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.917043][ T8556] IPv6: addrconf: prefix option has invalid lifetime [ 174.921774][ T8579] netlink: 'syz.2.721': attribute type 10 has an invalid length. [ 174.946721][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 174.976003][ T8579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.005557][ T8585] netlink: 56 bytes leftover after parsing attributes in process `syz.2.721'. [ 175.046167][ T8579] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 175.562905][ T8609] syzkaller0: entered promiscuous mode [ 175.583543][ T8609] syzkaller0: entered allmulticast mode [ 175.589078][ T8612] netlink: 'syz.0.730': attribute type 11 has an invalid length. [ 175.599342][ T8612] __nla_validate_parse: 1 callbacks suppressed [ 175.599359][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.730'. [ 175.640834][ T8612] netlink: 'syz.0.730': attribute type 11 has an invalid length. [ 175.648141][ T35] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.666673][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.730'. [ 175.672453][ T35] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.719258][ T35] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.756133][ T35] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.859613][ T8623] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 175.868156][ T8623] netlink: 224 bytes leftover after parsing attributes in process `syz.3.732'. [ 176.109554][ T8640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.737'. [ 176.185808][ T8642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.738'. [ 176.400936][ T8652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.741'. [ 176.411446][ T8652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.741'. [ 176.431015][ T8654] netlink: 'syz.0.742': attribute type 2 has an invalid length. [ 176.443629][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.498261][ T8661] netlink: 40 bytes leftover after parsing attributes in process `syz.1.743'. [ 176.681893][ T8668] netlink: 'syz.3.745': attribute type 3 has an invalid length. [ 176.690456][ T8668] netlink: 'syz.3.745': attribute type 3 has an invalid length. [ 176.700531][ T8668] netlink: 'syz.3.745': attribute type 3 has an invalid length. [ 176.754169][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 176.772340][ T8678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.749'. [ 176.782266][ T8669] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 176.861461][ T8669] bond1 (unregistering): Released all slaves [ 176.869075][ T8682] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 177.339404][ T8698] syzkaller1: entered promiscuous mode [ 177.363608][ T8698] syzkaller1: entered allmulticast mode [ 177.489477][ T8709] netlink: 'syz.2.759': attribute type 1 has an invalid length. [ 177.587369][ T8716] sctp: [Deprecated]: syz.4.761 (pid 8716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.587369][ T8716] Use struct sctp_sack_info instead [ 177.747692][ T8709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.858200][ T8719] bond2: (slave veth0_to_bond): making interface the new active one [ 177.874539][ T8715] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 177.891990][ T8719] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 177.920055][ T8715] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 177.955817][ T8721] ip6gre1: entered allmulticast mode [ 178.283820][ T8747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.520280][ T8759] syzkaller0: entered promiscuous mode [ 178.527204][ T8759] syzkaller0: entered allmulticast mode [ 179.095758][ T8775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.125110][ T8773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.332329][ T8790] openvswitch: netlink: IP tunnel TTL not specified. [ 179.963147][ T8815] syzkaller0: entered promiscuous mode [ 179.983171][ T8815] syzkaller0: entered allmulticast mode [ 179.993489][ T8818] netlink: 'syz.0.793': attribute type 1 has an invalid length. [ 180.015342][ T8825] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 180.396326][ T8835] syzkaller1: entered promiscuous mode [ 180.418359][ T8835] syzkaller1: entered allmulticast mode [ 180.473597][ T8838] bridge_slave_0 (unregistering): left allmulticast mode [ 180.480722][ T8838] bridge_slave_0 (unregistering): left promiscuous mode [ 180.507875][ T8838] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.542065][ T8836] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 181.363682][ T8886] netlink: 'syz.1.813': attribute type 1 has an invalid length. [ 181.387285][ T8886] __nla_validate_parse: 13 callbacks suppressed [ 181.387304][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.813'. [ 181.410292][ T8888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.814'. [ 181.420351][ T8886] netlink: 658 bytes leftover after parsing attributes in process `syz.1.813'. [ 181.432979][ T8886] netlink: 'syz.1.813': attribute type 1 has an invalid length. [ 181.441408][ T8888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.814'. [ 181.805360][ T8906] netlink: 830 bytes leftover after parsing attributes in process `syz.3.819'. [ 182.104628][ T8925] x_tables: duplicate underflow at hook 2 [ 182.116004][ T8922] netlink: 'syz.2.825': attribute type 16 has an invalid length. [ 182.157605][ T8922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.825'. [ 182.555195][ T8948] netlink: 'syz.3.833': attribute type 10 has an invalid length. [ 182.579191][ T8948] netlink: 396 bytes leftover after parsing attributes in process `syz.3.833'. [ 183.255970][ T8983] netlink: 14 bytes leftover after parsing attributes in process `syz.1.841'. [ 183.389034][ T8983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.420730][ T8983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.436065][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.843'. [ 183.464780][ T8983] bond0 (unregistering): Released all slaves [ 183.888911][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 184.203597][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.621695][ T9039] xt_hashlimit: overflow, try lower: 3/0 [ 184.838825][ T9045] netlink: 'syz.3.855': attribute type 8 has an invalid length. [ 184.905276][ T9045] bond0: entered promiscuous mode [ 184.947011][ T9045] gretap0: entered promiscuous mode [ 184.965332][ T9045] gretap0: left promiscuous mode [ 184.988349][ T9045] bond0: left promiscuous mode [ 185.464622][ T9073] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 185.741192][ T9087] block nbd0: not configured, cannot reconfigure [ 185.988140][ T9094] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 186.021314][ T9101] netlink: 'syz.0.872': attribute type 7 has an invalid length. [ 186.053927][ T9094] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 186.121921][ T9106] openvswitch: netlink: Flow actions attr not present in new flow. [ 186.141039][ T9101] erspan0: entered promiscuous mode [ 186.175919][ T9101] gretap0: entered promiscuous mode [ 186.556524][ T9126] __nla_validate_parse: 11 callbacks suppressed [ 186.556548][ T9126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.877'. [ 186.607148][ T9125] netlink: 108 bytes leftover after parsing attributes in process `syz.0.878'. [ 187.236941][ T9156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.887'. [ 187.306000][ T9159] netlink: 32 bytes leftover after parsing attributes in process `syz.3.888'. [ 187.431240][ T9167] netlink: 'syz.1.889': attribute type 1 has an invalid length. [ 187.528442][ T9167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.659481][ T9170] bond0: (slave veth3): Enslaving as an active interface with a down link [ 187.681848][ T9177] netlink: 'syz.1.889': attribute type 1 has an invalid length. [ 187.734007][ T9177] netlink: 'syz.1.889': attribute type 2 has an invalid length. [ 187.816140][ T9167] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 187.867713][ T9175] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 187.928713][ T9183] ip6tnl0: entered promiscuous mode [ 187.953479][ T9183] ip6tnl0: entered allmulticast mode [ 188.077855][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.895'. [ 188.121660][ T9192] netlink: 36 bytes leftover after parsing attributes in process `syz.1.896'. [ 188.366666][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 188.471695][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'. [ 188.483214][ T9207] netlink: 'syz.4.898': attribute type 1 has an invalid length. [ 188.667411][ T9225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.901'. [ 188.725431][ T9228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.902'. [ 188.983174][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 189.018867][ T5910] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 189.028557][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 189.254609][ T5910] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 189.625928][ T5910] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 189.670978][ T9271] netlink: 'syz.3.916': attribute type 10 has an invalid length. [ 189.727024][ T9271] team0: Device vxcan1 is of different type [ 190.331599][ T9303] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.372730][ T9303] team0: Device macvlan2 is already an upper device of the team interface [ 190.889369][ T9330] tipc: Started in network mode [ 190.912042][ T9330] tipc: Node identity 062399f695b4, cluster identity 4711 [ 190.939760][ T9330] tipc: Enabled bearer , priority 0 [ 191.052090][ T9335] syzkaller0: entered promiscuous mode [ 191.057894][ T9335] syzkaller0: entered allmulticast mode [ 191.064631][ T9335] tipc: Resetting bearer [ 191.108761][ T9328] tipc: Resetting bearer [ 191.807760][ T9374] __nla_validate_parse: 13 callbacks suppressed [ 191.807783][ T9374] netlink: 84 bytes leftover after parsing attributes in process `syz.4.945'. [ 192.548210][ T9328] tipc: Disabling bearer [ 192.570440][ T9350] hsr_slave_0 (unregistering): left promiscuous mode [ 192.610588][ T9365] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 192.696528][ T9380] netlink: 'syz.0.947': attribute type 10 has an invalid length. [ 192.728258][ T9380] netlink: 396 bytes leftover after parsing attributes in process `syz.0.947'. [ 192.737692][ T5910] tipc: Node number set to 2476186102 [ 192.869389][ T9382] netlink: 576 bytes leftover after parsing attributes in process `syz.3.948'. [ 192.912080][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.948'. [ 193.010156][ T9392] trusted_key: syz.1.949 sent an empty control message without MSG_MORE. [ 193.023850][ T9393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.951'. [ 193.163915][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 193.236901][ T9402] netlink: 'syz.3.955': attribute type 10 has an invalid length. [ 193.256297][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.955'. [ 193.785200][ T9427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.792696][ T9427] IPv6: NLM_F_CREATE should be set when creating new route [ 193.865554][ T9427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.964'. [ 193.910104][ T9433] netlink: 11 bytes leftover after parsing attributes in process `syz.4.966'. [ 193.962142][ T9435] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20004 [ 193.995417][ T9438] xt_ipcomp: unknown flags 1D [ 194.052707][ T9436] netlink: 'syz.3.965': attribute type 11 has an invalid length. [ 194.069248][ T9436] netlink: 228 bytes leftover after parsing attributes in process `syz.3.965'. [ 194.453568][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.637735][ T9467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.975'. [ 194.704964][ T9467] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 195.096617][ T9490] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 195.120597][ T9490] bond4 (unregistering): Released all slaves [ 195.293573][ T9494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.518895][ T9519] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20002 [ 195.557755][ T9519] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 195.714692][ T9523] veth1_to_hsr: entered promiscuous mode [ 195.740591][ T9523] veth1_to_hsr: entered allmulticast mode [ 197.012128][ T9580] openvswitch: netlink: IP tunnel dst address not specified [ 197.150973][ T9582] __nla_validate_parse: 4 callbacks suppressed [ 197.150997][ T9582] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1003'. [ 197.188202][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'. [ 197.197890][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'. [ 197.458164][ T9603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1007'. [ 197.563860][ T9611] netlink: 'syz.0.1007': attribute type 9 has an invalid length. [ 197.679361][ T9608] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 197.868922][ T9630] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.878341][ T9622] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 197.950242][ T9625] netlink: 'syz.1.1011': attribute type 2 has an invalid length. [ 197.966697][ T9622] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 198.003263][ T9625] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1011'. [ 198.013044][ T9622] gretap1: entered promiscuous mode [ 198.023510][ T9625] netlink: 320 bytes leftover after parsing attributes in process `syz.1.1011'. [ 198.033067][ T9622] gretap1: entered allmulticast mode [ 198.063782][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 198.214499][ T9643] netlink: 'syz.4.1016': attribute type 10 has an invalid length. [ 198.345778][ T9643] team0 (unregistering): Port device team_slave_0 removed [ 198.398544][ T9643] team0 (unregistering): Port device team_slave_1 removed [ 198.461713][ T9643] team0 (unregistering): Port device gretap1 removed [ 198.568712][ T9660] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 198.791587][ T9664] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 198.908320][ T9672] ipt_REJECT: TCP_RESET invalid for non-tcp [ 199.350318][ T9688] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 199.550119][ T9659] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 199.568921][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.930736][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'. [ 200.171669][ T9726] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 200.179945][ T9726] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1043'. [ 200.420356][ T9736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1046'. [ 200.457579][ T9736] netlink: 'syz.2.1046': attribute type 83 has an invalid length. [ 200.495295][ T9736] netlink: 'syz.2.1046': attribute type 9 has an invalid length. [ 200.603656][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 200.694810][ T9753] netlink: 'syz.2.1051': attribute type 12 has an invalid length. [ 200.770607][ T9756] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 200.790247][ T9756] Cannot find add_set index 0 as target [ 201.317363][ T9786] netlink: Conntrack attr has 4 unknown bytes [ 201.452296][ T35] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 201.472717][ T35] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 201.483172][ T5910] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 201.491065][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 201.638877][ T5910] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 201.897987][ T5910] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 202.130058][ T9835] netlink: 'syz.0.1073': attribute type 4 has an invalid length. [ 202.162605][ T9830] __nla_validate_parse: 8 callbacks suppressed [ 202.162624][ T9830] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1073'. [ 202.233625][ T9840] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1073'. [ 202.482261][ T9856] netlink: 'syz.2.1079': attribute type 51 has an invalid length. [ 202.503283][ T9856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.547096][ T9856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.600373][ T9869] netlink: 212176 bytes leftover after parsing attributes in process `syz.2.1079'. [ 202.624607][ T9856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.624979][ T9869] openvswitch: netlink: Message has 6 unknown bytes. [ 202.632247][ T9856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.679023][ T9856] bond0: (slave batadv0): Releasing backup interface [ 203.225708][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 203.358856][ T9910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1090'. [ 203.377183][ T9910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1090'. [ 203.499154][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1091'. [ 203.732095][ T9919] netdevsim netdevsim3 : renamed from netdevsim0 [ 203.920522][ T9927] netlink: 'syz.4.1095': attribute type 4 has an invalid length. [ 204.095954][ T9935] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1099'. [ 204.426817][ T9947] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.525243][ T9946] nbd0: detected capacity change from 0 to 127 [ 204.594866][ T9953] netlink: 'syz.1.1104': attribute type 10 has an invalid length. [ 204.628902][ T9953] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.649407][ T9953] bridge_slave_1: left allmulticast mode [ 204.658816][ T9953] bridge_slave_1: left promiscuous mode [ 204.665105][ T9953] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.978090][ T9963] syzkaller0: entered promiscuous mode [ 205.005361][ T9963] syzkaller0: entered allmulticast mode [ 205.074002][ T5830] block nbd0: Receive control failed (result -104) [ 205.219536][ T9969] vlan2: entered promiscuous mode [ 205.246817][ T9969] bridge0: entered promiscuous mode [ 205.261353][ T9974] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1110'. [ 205.273318][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1110'. [ 205.323655][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 205.880244][ T9996] netlink: 'syz.3.1118': attribute type 21 has an invalid length. [ 206.121017][T10005] tipc: Started in network mode [ 206.149901][T10005] tipc: Node identity 080211000001, cluster identity 4711 [ 206.157899][T10004] netlink: 'syz.4.1120': attribute type 1 has an invalid length. [ 206.186610][T10005] tipc: Enabled bearer , priority 0 [ 206.687143][T10032] erspan0: entered promiscuous mode [ 206.770063][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 206.776399][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 206.782459][ T5844] Bluetooth: hci2: command 0x0401 tx timeout [ 207.246384][T10055] __nla_validate_parse: 6 callbacks suppressed [ 207.246405][T10055] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1132'. [ 207.326268][T10051] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.380502][T10056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.404350][T10056] bond2: (slave xfrm2): The slave device specified does not support setting the MAC address [ 207.485091][T10056] bond2: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 207.547784][T10056] bond2: (slave xfrm2): making interface the new active one [ 207.569002][T10056] bond2: (slave xfrm2): Enslaving as an active interface with an up link [ 207.587765][ T5924] tipc: Node number set to 134418688 [ 207.703691][T10069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1137'. [ 207.712716][T10069] ipip0: entered allmulticast mode [ 207.798060][T10075] ip6gre1: entered promiscuous mode [ 207.829626][T10075] ip6gre1: entered allmulticast mode [ 207.863292][T10080] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.026996][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.047340][T10085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1142'. [ 208.056845][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.058964][T10088] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1143'. [ 208.065775][ T5910] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.105727][T10079] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 208.113189][T10079] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 208.125599][ T5910] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.516453][T10105] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1151'. [ 208.529087][T10106] netlink: 'syz.0.1150': attribute type 64 has an invalid length. [ 208.569275][T10106] netlink: 'syz.0.1150': attribute type 64 has an invalid length. [ 208.609095][T10114] netlink: 'syz.4.1153': attribute type 10 has an invalid length. [ 208.783052][T10118] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1154'. [ 208.835833][T10119] syzkaller0: entered promiscuous mode [ 208.841853][T10119] syzkaller0: entered allmulticast mode [ 208.847902][ T5910] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.406579][T10146] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1163'. [ 209.420697][T10139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1162'. [ 209.844783][T10166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1170'. [ 210.086783][T10180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1175'. [ 210.820160][T10215] openvswitch: netlink: Duplicate or invalid key (type 0). [ 210.843566][T10215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.214259][T10229] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 211.231380][T10229] bond3: option packets_per_slave: allowed values 0 - 65535 [ 211.287110][T10229] bond3 (unregistering): Released all slaves [ 211.883618][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.241135][T10299] netlink: 'syz.3.1209': attribute type 9 has an invalid length. [ 212.312709][T10302] __nla_validate_parse: 4 callbacks suppressed [ 212.312732][T10302] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1210'. [ 212.445556][T10307] netlink: 'syz.3.1212': attribute type 10 has an invalid length. [ 212.458128][T10309] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 212.466740][T10309] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 212.479117][T10307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.492978][T10307] : (slave batadv0): Enslaving as an active interface with an up link [ 212.881267][T10332] syzkaller0: entered promiscuous mode [ 212.887889][T10332] syzkaller0: entered allmulticast mode [ 212.907216][T10332] netlink: 'syz.0.1219': attribute type 10 has an invalid length. [ 212.927779][T10332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1219'. [ 212.957047][T10332] dummy0: entered promiscuous mode [ 212.969264][T10332] bridge0: port 4(dummy0) entered blocking state [ 213.009506][T10332] bridge0: port 4(dummy0) entered disabled state [ 213.033920][T10332] dummy0: entered allmulticast mode [ 213.042523][T10332] bridge0: port 4(dummy0) entered blocking state [ 213.049138][T10332] bridge0: port 4(dummy0) entered forwarding state [ 213.180357][T10348] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1225'. [ 213.394307][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 213.427490][T10359] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1227'. [ 213.623043][T10364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1230'. [ 213.643605][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 213.913310][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1232'. [ 214.213022][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 214.265703][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 214.303279][T10405] netlink: 64891 bytes leftover after parsing attributes in process `syz.3.1236'. [ 214.437718][T10415] bridge_slave_1: entered promiscuous mode [ 214.483733][ T29] audit: type=1107 audit(1776182871.087:2): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 214.748163][T10432] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 214.976366][T10432] netlink: 'syz.1.1244': attribute type 29 has an invalid length. [ 215.014616][T10432] netlink: 'syz.1.1244': attribute type 29 has an invalid length. [ 215.125113][T10447] xt_bpf: check failed: parse error [ 215.420835][T10462] syzkaller1: entered promiscuous mode [ 215.427063][T10462] syzkaller1: entered allmulticast mode [ 215.582960][T10470] tipc: Started in network mode [ 215.590363][T10470] tipc: Node identity 080211000001, cluster identity 4711 [ 215.598079][T10470] tipc: Enabled bearer , priority 0 [ 215.606868][T10470] mac80211_hwsim hwsim9 +: renamed from syzkaller0 [ 215.622936][T10470] tipc: Disabling bearer [ 215.748803][T10477] bridge: RTM_NEWNEIGH with invalid ether address [ 216.058682][T10492] ip6gre2: entered allmulticast mode [ 216.231476][T10510] netlink: 'syz.4.1269': attribute type 3 has an invalid length. [ 216.257344][T10512] netlink: 'syz.4.1269': attribute type 3 has an invalid length. [ 216.710199][T10537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.843633][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 216.984145][T10544] openvswitch: netlink: Flow key attr not present in new flow. [ 217.004120][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 217.458699][T10560] __nla_validate_parse: 15 callbacks suppressed [ 217.458720][T10560] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1286'. [ 217.669419][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 217.841294][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1291'. [ 217.865176][T10574] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1292'. [ 217.894831][T10572] geneve2: entered promiscuous mode [ 217.906911][T10572] geneve2: entered allmulticast mode [ 217.921930][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 217.945894][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 218.012968][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 218.033534][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 218.070842][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'. [ 218.317830][T10594] netlink: 'syz.1.1297': attribute type 13 has an invalid length. [ 218.386156][T10594] netlink: 'syz.1.1297': attribute type 17 has an invalid length. [ 218.658659][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.936990][T10590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.973170][T10590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.375593][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1302'. [ 219.376116][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1302'. [ 219.403603][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.560304][T10586] syz.3.1295 (10586) used greatest stack depth: 17472 bytes left [ 219.638060][T10594] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.660538][T10594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.717681][ T77] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.745514][ T77] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.768027][ T77] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.798159][ T77] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.864537][ T77] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.895409][ T77] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.929188][ T77] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.964932][ T77] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.001019][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1307'. [ 220.054897][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1307'. [ 220.129213][T10632] pim6reg1: entered promiscuous mode [ 220.135435][T10632] pim6reg1: entered allmulticast mode [ 220.217098][T10639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1307'. [ 220.448268][T10666] netlink: 'syz.2.1314': attribute type 8 has an invalid length. [ 220.982381][T10694] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 221.174640][T10701] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 221.392122][T10717] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 221.427668][T10721] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 221.430973][ T149] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.471841][ T149] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.515732][ T149] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.533745][ T149] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.787289][T10731] netlink: 'syz.4.1330': attribute type 9 has an invalid length. [ 222.146451][T10744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.176042][T10746] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.467788][T10762] netlink: 'syz.0.1340': attribute type 2 has an invalid length. [ 222.555042][T10764] __nla_validate_parse: 8 callbacks suppressed [ 222.555062][T10764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1343'. [ 222.617330][T10770] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 222.832541][T10783] delete_channel: no stack [ 223.138595][T10795] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1351'. [ 223.231136][T10792] tunl0: Caught tx_queue_len zero misconfig [ 223.251545][T10802] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1351'. [ 223.259548][T10799] IPVS: set_ctl: invalid protocol: 103 172.20.20.12:20002 [ 223.517887][T10811] xt_hashlimit: size too large, truncated to 1048576 [ 223.927571][T10792] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 223.936009][T10792] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 223.991271][T10792] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.007206][T10792] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 224.028295][T10792] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.046320][T10792] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 224.115290][T10792] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 224.142895][T10792] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 224.409794][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1368'. [ 224.538022][T10854] tipc: Enabling of bearer rejected, already enabled [ 224.787027][T10863] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.793837][T10863] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 224.840804][T10868] : (slave batadv0): Releasing backup interface [ 224.924526][T10868] bridge_slave_1: left allmulticast mode [ 224.953187][T10868] bridge_slave_1: left promiscuous mode [ 224.978181][T10868] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.005308][T10868] : (slave bond_slave_0): Releasing backup interface [ 225.020123][T10868] : (slave bond_slave_1): Releasing backup interface [ 225.026887][T10881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1380'. [ 225.037729][T10881] netlink: 'syz.1.1380': attribute type 7 has an invalid length. [ 225.047425][T10881] netlink: 'syz.1.1380': attribute type 8 has an invalid length. [ 225.047467][T10868] team0: Port device team_slave_0 removed [ 225.055969][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'. [ 225.072340][T10868] team0: Port device team_slave_1 removed [ 225.080096][T10868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.090418][T10868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.100050][T10868] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 225.117440][T10872] team0: Mode changed to "random" [ 225.292520][T10879] syzkaller0: entered promiscuous mode [ 225.477824][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1382'. [ 225.765864][T10906] xt_hashlimit: size too large, truncated to 1048576 [ 225.957291][T10920] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1388'. [ 225.980740][T10920] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1388'. [ 227.941187][T10949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1400'. [ 228.100494][T10949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 228.325985][T10973] netlink: 'syz.4.1406': attribute type 23 has an invalid length. [ 228.590530][T10976] raw_sendmsg: syz.3.1407 forgot to set AF_INET. Fix it! [ 228.836938][T10995] netlink: 'syz.0.1413': attribute type 1 has an invalid length. [ 228.865149][T11000] --map-set only usable from mangle table [ 228.871343][T10997] IPv6: NLM_F_CREATE should be specified when creating new route [ 228.950703][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1414'. [ 229.003576][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.355357][T11028] vcan0: entered promiscuous mode [ 229.441422][T11028] vcan0: entered allmulticast mode [ 229.504402][T11037] netlink: zone id is out of range [ 229.527361][T11037] netlink: zone id is out of range [ 229.551485][T11037] netlink: zone id is out of range [ 229.565844][T11037] netlink: zone id is out of range [ 229.587487][T11037] netlink: zone id is out of range [ 229.599493][T11037] netlink: zone id is out of range [ 229.628615][T11037] netlink: zone id is out of range [ 229.661985][T11037] netlink: zone id is out of range [ 229.675106][T11037] netlink: zone id is out of range [ 229.684671][T11037] netlink: zone id is out of range [ 229.756129][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 229.768987][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 229.827533][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 229.869988][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 229.999833][T11060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1427'. [ 230.100384][T11060] ipvlan2: entered allmulticast mode [ 230.210766][T11070] netlink: 'syz.4.1430': attribute type 4 has an invalid length. [ 230.604664][T11091] IPv6: Can't replace route, no match found [ 230.892632][T11105] Bluetooth: MGMT ver 1.23 [ 230.959390][T11110] veth0: entered promiscuous mode [ 230.992420][T11109] veth0: left promiscuous mode [ 231.143284][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 231.316045][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 231.582429][T11143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.686721][ T5838] block nbd1: Receive control failed (result -107) [ 231.756110][T11144] nbd1: detected capacity change from 0 to 127 [ 231.799327][ T6980] block nbd1: Dead connection, failed to find a fallback [ 231.821231][T11152] sctp: [Deprecated]: syz.4.1450 (pid 11152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.821231][T11152] Use struct sctp_sack_info instead [ 231.827293][ T6980] block nbd1: shutting down sockets [ 231.845813][T11145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.859333][ T6980] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.871686][ T6980] Buffer I/O error on dev nbd1, logical block 0, async page read [ 231.880156][ T6980] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.904174][ T6980] Buffer I/O error on dev nbd1, logical block 1, async page read [ 231.913005][ T6980] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.924665][ T6980] Buffer I/O error on dev nbd1, logical block 2, async page read [ 231.932630][ T6980] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 231.966123][T11155] tipc: Enabling of bearer rejected, failed to enable media [ 232.023465][ T6980] Buffer I/O error on dev nbd1, logical block 3, async page read [ 232.047342][ T6980] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.076926][ T6980] Buffer I/O error on dev nbd1, logical block 0, async page read [ 232.106655][ T6980] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.134708][ T6980] Buffer I/O error on dev nbd1, logical block 1, async page read [ 232.144897][ T6980] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.186962][ T6980] Buffer I/O error on dev nbd1, logical block 2, async page read [ 232.223839][ T6980] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.251647][ T6980] Buffer I/O error on dev nbd1, logical block 3, async page read [ 232.375231][ T6980] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.395412][ T6980] Buffer I/O error on dev nbd1, logical block 0, async page read [ 232.417161][ T6980] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.429160][ T6980] Buffer I/O error on dev nbd1, logical block 1, async page read [ 232.439763][ T6980] ldm_validate_partition_table(): Disk read failed. [ 232.448044][ T6980] Dev nbd1: unable to read RDB block 0 [ 232.454881][ T6980] nbd1: unable to read partition table [ 232.469070][ T6980] ldm_validate_partition_table(): Disk read failed. [ 232.476579][ T6980] Dev nbd1: unable to read RDB block 0 [ 232.494762][T11175] netlink: 'syz.0.1458': attribute type 4 has an invalid length. [ 232.505744][ T6980] nbd1: unable to read partition table [ 232.805869][T11189] ip6t_srh: unknown srh invflags 4000 [ 232.868804][T11191] sctp: [Deprecated]: syz.0.1461 (pid 11191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.868804][T11191] Use struct sctp_sack_info instead [ 232.890704][T11191] sctp: [Deprecated]: syz.0.1461 (pid 11191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.890704][T11191] Use struct sctp_sack_info instead [ 233.451766][T11226] __nla_validate_parse: 4 callbacks suppressed [ 233.451788][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1473'. [ 233.471008][T11227] netlink: 'syz.4.1472': attribute type 39 has an invalid length. [ 233.484019][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.509865][T11230] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1474'. [ 233.768222][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1477'. [ 233.777786][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1477'. [ 233.847322][T11217] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.855163][T11217] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.622169][T11241] 8021q: adding VLAN 0 to HW filter on device  [ 234.631943][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 234.632114][T11241] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.657203][T11241] net_ratelimit: 136 callbacks suppressed [ 234.657215][T11241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.682807][ T77] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.699612][ T77] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.745311][T11251] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 234.771840][T11256] netlink: 'syz.0.1481': attribute type 1 has an invalid length. [ 234.776451][ T5206] block nbd0: Possible stuck request ffff888026920000: control (read@0,1024B). Runtime 30 seconds [ 234.793267][ T5206] block nbd0: Possible stuck request ffff888026920200: control (read@1024,1024B). Runtime 30 seconds [ 234.805551][ T5206] block nbd0: Possible stuck request ffff888026920400: control (read@2048,1024B). Runtime 30 seconds [ 234.817189][ T5206] block nbd0: Possible stuck request ffff888026920600: control (read@3072,1024B). Runtime 30 seconds [ 234.831909][T11256] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1481'. [ 234.841919][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'. [ 234.843942][T11251] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 234.879159][T11251] gretap1: entered promiscuous mode [ 234.914798][T11251] gretap1: entered allmulticast mode [ 234.949624][ T77] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.001345][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1483'. [ 235.014452][ T77] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.175819][T11274] netlink: 'syz.2.1487': attribute type 10 has an invalid length. [ 235.355648][T11281] netlink: 'syz.0.1490': attribute type 3 has an invalid length. [ 235.386503][T11281] netlink: 'syz.0.1490': attribute type 1 has an invalid length. [ 235.404042][ C1] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 235.408415][T11281] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1490'. [ 235.435446][T11286] netlink: 'syz.0.1490': attribute type 1 has an invalid length. [ 235.515198][T11281] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1490'. [ 235.538210][T11286] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.567549][T11281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.046842][T11315] IPVS: sh: FWM 3 0x00000003 - no destination available [ 236.304626][T11328] tap0: tun_chr_ioctl cmd 1074025672 [ 236.309997][T11328] tap0: ignored: set checksum disabled [ 236.707238][T11351] syzkaller1: entered promiscuous mode [ 236.735993][T11351] syzkaller1: entered allmulticast mode [ 236.858781][T11342] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 236.951188][T11367] netlink: 'syz.2.1518': attribute type 83 has an invalid length. [ 236.985849][T11369] openvswitch: netlink: IP tunnel dst address not specified [ 237.087317][T11371] netlink: 'syz.1.1519': attribute type 1 has an invalid length. [ 237.308716][T11375] bond4: (slave veth5): Enslaving as an active interface with a down link [ 237.356603][T11380] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.390956][T11390] netlink: 'syz.0.1524': attribute type 4 has an invalid length. [ 238.597979][T11447] netlink: 'syz.3.1540': attribute type 1 has an invalid length. [ 238.905218][T11469] ip6gretap0: entered promiscuous mode [ 239.054047][T11474] netlink: 'syz.0.1548': attribute type 15 has an invalid length. [ 239.106285][T11480] __nla_validate_parse: 12 callbacks suppressed [ 239.106307][T11480] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.1548'. [ 239.131529][T11474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1548'. [ 239.445617][T11493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1555'. [ 240.519102][T11547] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1569'. [ 240.861863][T11557] netlink: 'syz.3.1572': attribute type 4 has an invalid length. [ 241.080456][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1575'. [ 241.725846][T11587] netlink: 'syz.1.1580': attribute type 16 has an invalid length. [ 241.734431][T11587] netlink: 'syz.1.1580': attribute type 5 has an invalid length. [ 241.775491][T11590] x_tables: duplicate underflow at hook 4 [ 241.850222][T11596] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1585'. [ 242.006427][T11605] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 242.025502][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1586'. [ 242.061881][T11605] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.111036][T11609] bond5: entered allmulticast mode [ 242.236883][T11605] bond5: (slave ip6gretap1): making interface the new active one [ 242.265189][T11605] ip6gretap1: entered allmulticast mode [ 242.272208][T11605] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 242.339146][T11611] syzkaller0: entered promiscuous mode [ 242.363596][T11611] syzkaller0: entered allmulticast mode [ 242.447157][T11621] netlink: 'syz.1.1589': attribute type 1 has an invalid length. [ 242.455762][T11621] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1589'. [ 243.051880][T11657] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1602'. [ 243.130970][T11661] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1604'. [ 243.832663][T11689] gretap2: entered promiscuous mode [ 244.371682][T11714] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 244.780821][T11731] FAULT_INJECTION: forcing a failure. [ 244.780821][T11731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.838159][T11731] CPU: 1 UID: 0 PID: 11731 Comm: syz.2.1626 Not tainted syzkaller #0 PREEMPT(full) [ 244.838189][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 244.838202][T11731] Call Trace: [ 244.838211][T11731] [ 244.838227][T11731] dump_stack_lvl+0xe8/0x150 [ 244.838264][T11731] should_fail_ex+0x412/0x560 [ 244.838301][T11731] _copy_from_user+0x2d/0xb0 [ 244.838328][T11731] ___sys_sendmsg+0x1c6/0x360 [ 244.838364][T11731] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.838432][T11731] ? __fget_files+0x2a/0x420 [ 244.838451][T11731] ? __fget_files+0x3a0/0x420 [ 244.838481][T11731] __x64_sys_sendmsg+0x1bd/0x2a0 [ 244.838512][T11731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.838551][T11731] ? __pfx_ksys_write+0x10/0x10 [ 244.838588][T11731] do_syscall_64+0x14d/0xf80 [ 244.838616][T11731] ? trace_irq_disable+0x3b/0x150 [ 244.838635][T11731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.838656][T11731] ? clear_bhb_loop+0x40/0x90 [ 244.838682][T11731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.838704][T11731] RIP: 0033:0x7f36fff9c819 [ 244.838724][T11731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.838741][T11731] RSP: 002b:00007f3700e70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.838765][T11731] RAX: ffffffffffffffda RBX: 00007f3700215fa0 RCX: 00007f36fff9c819 [ 244.838780][T11731] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 244.838792][T11731] RBP: 00007f3700e70090 R08: 0000000000000000 R09: 0000000000000000 [ 244.838805][T11731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.838817][T11731] R13: 00007f3700216038 R14: 00007f3700215fa0 R15: 00007ffe1d20db18 [ 244.838848][T11731] [ 244.922383][T11733] __nla_validate_parse: 4 callbacks suppressed [ 244.922402][T11733] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1628'. [ 245.619216][T11762] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1634'. [ 245.662744][T11762] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1634'. [ 245.692214][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1636'. [ 245.728698][T11761] veth7: entered allmulticast mode [ 245.757340][T11771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1638'. [ 245.771314][ T149] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.786941][ T149] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.822624][T11775] veth0: entered promiscuous mode [ 245.839532][ T149] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.875184][ T149] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.912340][T11767] veth0: left promiscuous mode [ 246.245770][T11794] syzkaller0: entered promiscuous mode [ 246.271814][T11794] syzkaller0: entered allmulticast mode [ 246.782470][T11823] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1652'. [ 246.810530][T11824] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 246.836499][T11828] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1652'. [ 247.162918][T11840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1658'. [ 247.235623][T11840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1658'. [ 247.355411][T11849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1656'. [ 247.469109][T10618] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.535341][T10618] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.177538][T11899] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 249.898239][T11951] delete_channel: no stack [ 249.951322][T11975] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20002 [ 250.108711][T11982] netlink: 'syz.3.1697': attribute type 1 has an invalid length. [ 250.136569][T11984] __nla_validate_parse: 3 callbacks suppressed [ 250.136592][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 250.196807][T11932] bond6: entered promiscuous mode [ 250.219596][T11932] bond6: entered allmulticast mode [ 250.227811][T11932] 8021q: adding VLAN 0 to HW filter on device bond6 [ 250.310739][T11982] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1697'. [ 250.376303][T11982] macvlan3: entered promiscuous mode [ 250.386443][T11982] macvlan3: entered allmulticast mode [ 250.425018][T11982] bond6: entered promiscuous mode [ 250.431178][T11982] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 250.487654][T11982] bond6: left promiscuous mode [ 250.657111][T12008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1703'. [ 251.022982][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1709'. [ 251.119646][T12036] batadv_slave_1: entered promiscuous mode [ 251.268883][T12049] batadv1: entered allmulticast mode [ 251.489493][T12059] netlink: 'syz.2.1716': attribute type 1 has an invalid length. [ 251.533851][T12059] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1716'. [ 251.553083][T12059] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1716'. [ 251.574827][T12059] netlink: 'syz.2.1716': attribute type 1 has an invalid length. [ 251.607060][T12059] netlink: 618 bytes leftover after parsing attributes in process `syz.2.1716'. [ 251.914794][T12031] batadv_slave_1: left promiscuous mode [ 252.254777][T12100] syzkaller1: entered promiscuous mode [ 252.260495][T12100] syzkaller1: entered allmulticast mode [ 252.404593][T12110] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1731'. [ 252.461648][T12112] geneve3: entered promiscuous mode [ 252.586691][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 54926 - 0 [ 252.596369][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 54926 - 0 [ 252.606062][T12124] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 252.620944][T12124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.624410][T12130] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1735'. [ 252.651031][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 54926 - 0 [ 252.672554][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 54926 - 0 [ 252.820662][T12135] FAULT_INJECTION: forcing a failure. [ 252.820662][T12135] name failslab, interval 1, probability 0, space 0, times 0 [ 252.851629][T12135] CPU: 1 UID: 0 PID: 12135 Comm: syz.4.1737 Not tainted syzkaller #0 PREEMPT(full) [ 252.851661][T12135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 252.851673][T12135] Call Trace: [ 252.851681][T12135] [ 252.851691][T12135] dump_stack_lvl+0xe8/0x150 [ 252.851725][T12135] should_fail_ex+0x412/0x560 [ 252.851762][T12135] should_failslab+0xa8/0x100 [ 252.851788][T12135] ? skb_clone+0x212/0x3a0 [ 252.851815][T12135] kmem_cache_alloc_noprof+0x87/0x650 [ 252.851847][T12135] skb_clone+0x212/0x3a0 [ 252.851880][T12135] __netlink_deliver_tap+0x404/0x850 [ 252.851917][T12135] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.851942][T12135] netlink_deliver_tap+0x19c/0x1b0 [ 252.851966][T12135] netlink_sendskb+0x68/0x140 [ 252.851989][T12135] netlink_unicast+0x3a3/0x9b0 [ 252.852019][T12135] ? __pfx_netlink_unicast+0x10/0x10 [ 252.852058][T12135] nfnetlink_rcv+0x2517/0x27b0 [ 252.852115][T12135] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 252.852152][T12135] ? ref_tracker_free+0x693/0x840 [ 252.852203][T12135] ? __netlink_deliver_tap+0x807/0x850 [ 252.852225][T12135] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.852273][T12135] netlink_unicast+0x80f/0x9b0 [ 252.852304][T12135] ? __pfx_netlink_unicast+0x10/0x10 [ 252.852326][T12135] ? netlink_sendmsg+0x650/0xb40 [ 252.852347][T12135] ? skb_put+0x11b/0x210 [ 252.852375][T12135] netlink_sendmsg+0x813/0xb40 [ 252.852409][T12135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.852436][T12135] ? aa_sock_msg_perm+0xf1/0x1b0 [ 252.852469][T12135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.852498][T12135] ____sys_sendmsg+0x972/0x9f0 [ 252.852534][T12135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.852572][T12135] ? import_iovec+0x73/0xa0 [ 252.852601][T12135] ___sys_sendmsg+0x2a5/0x360 [ 252.852635][T12135] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.852698][T12135] ? __fget_files+0x2a/0x420 [ 252.852717][T12135] ? __fget_files+0x3a0/0x420 [ 252.852747][T12135] __x64_sys_sendmsg+0x1bd/0x2a0 [ 252.852777][T12135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.852815][T12135] ? __pfx_ksys_write+0x10/0x10 [ 252.852850][T12135] do_syscall_64+0x14d/0xf80 [ 252.852878][T12135] ? trace_irq_disable+0x3b/0x150 [ 252.852896][T12135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.852917][T12135] ? clear_bhb_loop+0x40/0x90 [ 252.852942][T12135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.852963][T12135] RIP: 0033:0x7f07d1f9c819 [ 252.852984][T12135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.853003][T12135] RSP: 002b:00007f07d2da4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.853026][T12135] RAX: ffffffffffffffda RBX: 00007f07d2215fa0 RCX: 00007f07d1f9c819 [ 252.853042][T12135] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 252.853055][T12135] RBP: 00007f07d2da4090 R08: 0000000000000000 R09: 0000000000000000 [ 252.853067][T12135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.853079][T12135] R13: 00007f07d2216038 R14: 00007f07d2215fa0 R15: 00007ffc2a66b3c8 [ 252.853113][T12135] [ 253.509041][T12162] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1746'. [ 253.633920][T12170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.761281][T12177] FAULT_INJECTION: forcing a failure. [ 253.761281][T12177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.826673][T12177] CPU: 1 UID: 0 PID: 12177 Comm: syz.1.1751 Not tainted syzkaller #0 PREEMPT(full) [ 253.826705][T12177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 253.826717][T12177] Call Trace: [ 253.826726][T12177] [ 253.826734][T12177] dump_stack_lvl+0xe8/0x150 [ 253.826769][T12177] should_fail_ex+0x412/0x560 [ 253.826807][T12177] _copy_to_user+0x31/0xb0 [ 253.826835][T12177] simple_read_from_buffer+0xe1/0x170 [ 253.826870][T12177] proc_fail_nth_read+0x1bb/0x230 [ 253.826903][T12177] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.826936][T12177] ? rw_verify_area+0x2a6/0x4d0 [ 253.826958][T12177] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.826988][T12177] vfs_read+0x20c/0xa70 [ 253.827010][T12177] ? fdget_pos+0x246/0x320 [ 253.827034][T12177] ? __pfx___mutex_lock+0x10/0x10 [ 253.827066][T12177] ? __pfx_vfs_read+0x10/0x10 [ 253.827091][T12177] ? __fget_files+0x2a/0x420 [ 253.827114][T12177] ? __fget_files+0x3a0/0x420 [ 253.827132][T12177] ? __fget_files+0x2a/0x420 [ 253.827161][T12177] ksys_read+0x150/0x270 [ 253.827187][T12177] ? __pfx_ksys_read+0x10/0x10 [ 253.827220][T12177] do_syscall_64+0x14d/0xf80 [ 253.827248][T12177] ? trace_irq_disable+0x3b/0x150 [ 253.827265][T12177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.827295][T12177] ? clear_bhb_loop+0x40/0x90 [ 253.827322][T12177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.827342][T12177] RIP: 0033:0x7f261475d04e [ 253.827363][T12177] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 253.827380][T12177] RSP: 002b:00007f26155edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.827403][T12177] RAX: ffffffffffffffda RBX: 00007f26155ee6c0 RCX: 00007f261475d04e [ 253.827418][T12177] RDX: 000000000000000f RSI: 00007f26155ee0a0 RDI: 0000000000000004 [ 253.827431][T12177] RBP: 00007f26155ee090 R08: 0000000000000000 R09: 0000000000000000 [ 253.827443][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.827455][T12177] R13: 00007f2614a16038 R14: 00007f2614a15fa0 R15: 00007ffcad7aabf8 [ 253.827489][T12177] [ 253.839837][T12182] pimreg: entered allmulticast mode [ 253.864987][T12183] netlink: 'syz.3.1750': attribute type 1 has an invalid length. [ 254.093461][T12183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.499691][T12220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.465247][T12237] __nla_validate_parse: 1 callbacks suppressed [ 255.465268][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1768'. [ 255.624626][T12244] netlink: 'syz.4.1769': attribute type 1 has an invalid length. [ 255.639215][T12244] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1769'. [ 255.981315][T12263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1777'. [ 256.167880][T12274] netlink: 'syz.1.1777': attribute type 5 has an invalid length. [ 256.466839][T12290] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1784'. [ 256.628851][T12296] netlink: 'syz.2.1786': attribute type 1 has an invalid length. [ 256.639597][T12298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1788'. [ 256.647134][T12293] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 256.659090][T12293] bond7 (unregistering): Released all slaves [ 256.694525][T12296] bond4: entered promiscuous mode [ 256.700273][T12296] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.712846][T12301] netlink: 752 bytes leftover after parsing attributes in process `syz.2.1786'. [ 256.724397][T12301] ksmbd: Daemon and kernel module version mismatch. ksmbd: 3, kernel module: 1. User-space ksmbd should terminate. [ 256.810949][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'. [ 257.300997][T12320] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 257.486958][T12328] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1799'. [ 257.820459][T12330] syzkaller0: entered promiscuous mode [ 257.838034][T12330] syzkaller0: entered allmulticast mode [ 257.846273][T12328] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1799'. [ 257.867788][T12341] netlink: 'syz.4.1800': attribute type 24 has an invalid length. [ 257.958847][T12346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.152871][T12354] sctp: [Deprecated]: syz.3.1804 (pid 12354) Use of int in maxseg socket option. [ 258.152871][T12354] Use struct sctp_assoc_value instead [ 259.535003][T12348] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1803'. [ 259.567447][T12361] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 259.824189][T12376] syzkaller0: entered promiscuous mode [ 259.831024][T12376] syzkaller0: entered allmulticast mode [ 260.110195][T12385] bond7: option miimon: invalid value (18446744073709551585) [ 260.138786][T12385] bond7: option miimon: allowed values 0 - 2147483647 [ 260.201877][T12385] bond7 (unregistering): Released all slaves [ 260.584551][T12417] FAULT_INJECTION: forcing a failure. [ 260.584551][T12417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.685118][T12417] CPU: 0 UID: 0 PID: 12417 Comm: syz.4.1821 Not tainted syzkaller #0 PREEMPT(full) [ 260.685149][T12417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 260.685161][T12417] Call Trace: [ 260.685169][T12417] [ 260.685179][T12417] dump_stack_lvl+0xe8/0x150 [ 260.685221][T12417] should_fail_ex+0x412/0x560 [ 260.685258][T12417] _copy_to_user+0x31/0xb0 [ 260.685286][T12417] simple_read_from_buffer+0xe1/0x170 [ 260.685321][T12417] proc_fail_nth_read+0x1bb/0x230 [ 260.685354][T12417] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.685387][T12417] ? rw_verify_area+0x2a6/0x4d0 [ 260.685409][T12417] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.685440][T12417] vfs_read+0x20c/0xa70 [ 260.685460][T12417] ? fdget_pos+0x246/0x320 [ 260.685485][T12417] ? __pfx___mutex_lock+0x10/0x10 [ 260.685515][T12417] ? __pfx_vfs_read+0x10/0x10 [ 260.685540][T12417] ? __fget_files+0x2a/0x420 [ 260.685564][T12417] ? __fget_files+0x3a0/0x420 [ 260.685581][T12417] ? __fget_files+0x2a/0x420 [ 260.685609][T12417] ksys_read+0x150/0x270 [ 260.685635][T12417] ? __pfx_ksys_read+0x10/0x10 [ 260.685670][T12417] do_syscall_64+0x14d/0xf80 [ 260.685698][T12417] ? trace_irq_disable+0x3b/0x150 [ 260.685716][T12417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.685737][T12417] ? clear_bhb_loop+0x40/0x90 [ 260.685762][T12417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.685782][T12417] RIP: 0033:0x7f07d1f5d04e [ 260.685801][T12417] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 260.685819][T12417] RSP: 002b:00007f07d2da3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.685842][T12417] RAX: ffffffffffffffda RBX: 00007f07d2da46c0 RCX: 00007f07d1f5d04e [ 260.685857][T12417] RDX: 000000000000000f RSI: 00007f07d2da40a0 RDI: 0000000000000004 [ 260.685869][T12417] RBP: 00007f07d2da4090 R08: 0000000000000000 R09: 0000000000000000 [ 260.685882][T12417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.685894][T12417] R13: 00007f07d2216038 R14: 00007f07d2215fa0 R15: 00007ffc2a66b3c8 [ 260.685928][T12417] [ 260.948348][T12436] __nla_validate_parse: 2 callbacks suppressed [ 260.948368][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1826'. [ 260.965834][T12436] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1826'. [ 261.029548][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 261.249687][T12430] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 261.341152][T12449] Cannot find add_set index 0 as target [ 261.664304][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1833'. [ 262.020152][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1838'. [ 262.257035][T12484] bond4: option fail_over_mac: invalid value (16) [ 262.283543][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 262.285678][T12484] bond4 (unregistering): Released all slaves [ 263.008242][T12528] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 263.020294][T12528] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 263.028808][T12528] CPU: 1 UID: 0 PID: 12528 Comm: syz.1.1852 Not tainted syzkaller #0 PREEMPT(full) [ 263.038182][T12528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 263.048252][T12528] RIP: 0010:memcpy_sglist+0x420/0x730 [ 263.053638][T12528] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 263.073428][T12528] RSP: 0018:ffffc900039e7698 EFLAGS: 00010202 [ 263.079517][T12528] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 263.087496][T12528] RDX: ffffc9000d112000 RSI: 0000000000000237 RDI: 0000000000000238 [ 263.095474][T12528] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.103463][T12528] R10: dffffc0000000000 R11: ffffed100ddf7c9a R12: 0000000000000002 [ 263.111435][T12528] R13: ffff888032c2f400 R14: ffff88802b1b48a0 R15: 0000000000000008 [ 263.119417][T12528] FS: 00007f26155ee6c0(0000) GS:ffff888125551000(0000) knlGS:0000000000000000 [ 263.128352][T12528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.134937][T12528] CR2: 0000200000001d00 CR3: 00000000295dc000 CR4: 00000000003526f0 [ 263.142915][T12528] Call Trace: [ 263.146197][T12528] [ 263.149144][T12528] aead_recvmsg+0x719/0x1030 [ 263.153767][T12528] ? __pfx_aead_recvmsg+0x10/0x10 [ 263.158801][T12528] ? __pfx_aead_recvmsg+0x10/0x10 [ 263.163830][T12528] sock_recvmsg_nosec+0x10c/0x140 [ 263.168863][T12528] ____sys_recvmsg+0x3e3/0x4a0 [ 263.173640][T12528] ? __pfx_____sys_recvmsg+0x10/0x10 [ 263.178945][T12528] ? import_iovec+0x73/0xa0 [ 263.183460][T12528] ___sys_recvmsg+0x215/0x590 [ 263.188145][T12528] ? __lock_acquire+0x6b5/0x2cf0 [ 263.193118][T12528] ? __pfx____sys_recvmsg+0x10/0x10 [ 263.198342][T12528] ? get_futex_key+0x8cd/0x1690 [ 263.203221][T12528] do_recvmmsg+0x334/0x800 [ 263.207649][T12528] ? __pfx_do_recvmmsg+0x10/0x10 [ 263.212605][T12528] ? __pfx_do_futex+0x10/0x10 [ 263.217294][T12528] __x64_sys_recvmmsg+0x198/0x250 [ 263.222355][T12528] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 263.227940][T12528] do_syscall_64+0x14d/0xf80 [ 263.232546][T12528] ? trace_irq_disable+0x3b/0x150 [ 263.237573][T12528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.243647][T12528] ? clear_bhb_loop+0x40/0x90 [ 263.248335][T12528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.254331][T12528] RIP: 0033:0x7f261479c819 [ 263.258783][T12528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.278440][T12528] RSP: 002b:00007f26155ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 263.286881][T12528] RAX: ffffffffffffffda RBX: 00007f2614a15fa0 RCX: 00007f261479c819 [ 263.294890][T12528] RDX: 0000000000000002 RSI: 0000200000001d00 RDI: 0000000000000004 [ 263.302975][T12528] RBP: 00007f2614832c91 R08: 0000000000000000 R09: 0000000000000000 [ 263.310969][T12528] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 263.318957][T12528] R13: 00007f2614a16038 R14: 00007f2614a15fa0 R15: 00007ffcad7aabf8 [ 263.326954][T12528] [ 263.330064][T12528] Modules linked in: [ 263.334894][T12528] ---[ end trace 0000000000000000 ]--- [ 263.354643][T12528] RIP: 0010:memcpy_sglist+0x420/0x730 [ 263.360113][T12528] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 263.394289][T12528] RSP: 0018:ffffc900039e7698 EFLAGS: 00010202 [ 263.400523][T12528] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 263.410963][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1852'. [ 263.421259][T12528] RDX: ffffc9000d112000 RSI: 0000000000000237 RDI: 0000000000000238 [ 263.431705][T12528] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.439902][T12528] R10: dffffc0000000000 R11: ffffed100ddf7c9a R12: 0000000000000002 [ 263.448234][T12528] R13: ffff888032c2f400 R14: ffff88802b1b48a0 R15: 0000000000000008 [ 263.475578][T12528] FS: 00007f26155ee6c0(0000) GS:ffff888125551000(0000) knlGS:0000000000000000 [ 263.483520][T12532] netlink: 'syz.1.1852': attribute type 30 has an invalid length. [ 263.484959][T12528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.492617][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1852'. [ 263.500467][T12528] CR2: 00007f37001e7158 CR3: 00000000295dc000 CR4: 00000000003526f0 [ 263.500500][T12528] Kernel panic - not syncing: Fatal exception [ 263.500918][T12528] Kernel Offset: disabled