last executing test programs: 5.87365741s ago: executing program 2 (id=6453): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x9, 0x4, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@hoplimit={{0x14, 0x29, 0x34, 0x8000}}], 0x18}, 0xc4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000400007012bbd7000fedbdf25047c00000400c280180009801400ff80100046800c00008008000800", @ANYRES32=0x0, @ANYBLOB="040001"], 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 5.143769788s ago: executing program 2 (id=6458): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x8, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0xb, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008848"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) write(r5, &(0x7f0000000380)="db9a942bd33380af01932cba2951c0b03bb48b8a56760341980860e5c769a555c435fd8bdd25", 0x26) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x6, 0x10000, 0xfffffffb, 0x1ff}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6, 0x1b}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x200400d4) 3.368934467s ago: executing program 4 (id=6471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r0}, &(0x7f0000000940), &(0x7f0000000980)=r1}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 3.027458994s ago: executing program 4 (id=6473): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000000204010100c40200000000000000000a080004440000000608000340000000f80500010001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r3) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) 2.649923154s ago: executing program 4 (id=6475): r0 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) r5 = socket$kcm(0xa, 0x3, 0x73) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000dc0)={0x2, 0x4e21, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007301bd000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xd80}, {&(0x7f00000011c0)="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", 0x10e}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0xff00) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x10}, 0x18) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000000000005400001b1d0001006e657464657673696d0000000f0002006e657464657673696d3000000800b80001000000"], 0x3c}}, 0xc084) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r9, &(0x7f0000003380)=[{&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000003c0)="04", 0x1}], 0x1, &(0x7f00000005c0)=[@init={0x18, 0x84, 0x0, {0xa051, 0xe, 0x1, 0xffff}}], 0x18}], 0x1, 0x4000004) getsockname(r9, 0x0, &(0x7f0000000480)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r2, r6, 0x38, 0x18, 0x0, @void, @value=r4}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 2.553597308s ago: executing program 3 (id=6476): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2.546699257s ago: executing program 1 (id=6477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed202811"], 0xfdef) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r2, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) 2.381995495s ago: executing program 3 (id=6478): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd27, 0x25dfdbff, {0x2, 0x20, 0x80, 0x3, 0x2, 0x0, 0x0, 0x4, 0x15}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040021}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @empty}, &(0x7f0000000040)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x18, 0x4016, 0x107, 0x70bd2c, 0x25dfdbfe, {0x1c, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}}, 0x8010) sendmmsg$inet6(r2, &(0x7f0000000d80)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x9, @empty, 0x1000}, 0x1c, 0x0, 0x0, &(0x7f0000000d00)}}], 0x1, 0x855) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdf250100d8b8c1a47a9a0900000e0001006e65342f6c3263617000000008000200050000"], 0x34}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r6, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz1\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x58}}, 0x14040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r9, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) 2.079455547s ago: executing program 2 (id=6479): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000400007012bbd7000fedbdf25047c00000400c280180009801400ff80100046800c00008008000800", @ANYRES32=0x0, @ANYBLOB="040001"], 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 2.052508664s ago: executing program 3 (id=6480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r4, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040880}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0) 1.954794991s ago: executing program 1 (id=6482): socket(0x2a, 0x6, 0xde97) socket$can_bcm(0x1d, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x9, 0x5, 0x0, 0x20, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x9, 0x2, 0x7, 0x8, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x6, 0xfffffffffffffff4, 0x10}, @jmp={0x5, 0x1, 0x3ba60cb969d06e44, 0x7, 0x7, 0xffffffffffffffc0}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xff1, &(0x7f0000002e00)=""/4081, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) pipe(&(0x7f0000000080)) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000) 1.758826091s ago: executing program 3 (id=6483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r0}, &(0x7f0000000940), &(0x7f0000000980)=r1}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 1.743026198s ago: executing program 2 (id=6484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x4802}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001980)=""/4099, 0x1003}, {&(0x7f0000000180)=""/178, 0xb2}], 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc01000019000100fcffffff10000000ffffffff000000000000000000000000e000000100000000000000000000000000000000f7fb20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x800) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000001000000b7050000080000001c02010000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="880000001200000229bd7000fedbdf251f060a034e204e2000000080e40000000600000002000000f3ffffff0100000002000000d6000000", @ANYRES32=r5, @ANYBLOB="02000000080000001e060000020000003a00c0eedec1f851e06378b83b0200f0e406859da1ad0fee285905e4a7aaf32dabe6b5b2e7141de3cb9500"/76], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x40400) socket$kcm(0x2, 0xa, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000040)=0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x21) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r9, 0x0, 0x0}, 0x20) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x70bd2b, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@nested={0x8, 0x9, 0x0, 0x1, [@nested={0x4, 0xac}]}]}, @nested={0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc080) setsockopt(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'geneve0\x00', 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r12, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="02013600002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 1.597197261s ago: executing program 4 (id=6485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd2a4010}, 0xc, &(0x7f0000001d00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1904}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 1.505092546s ago: executing program 0 (id=6486): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x8, 0x0, 0x1000, 0x0, 0x400000, 0x7ff, 0x40004, 0xc0000000, 0x402, 0x9, 0x4, 0x5, 0x3, 0x4006, 0x84, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x5, 0x424f, 0x3}}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r0, 0xaa0f4000) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1.473837339s ago: executing program 3 (id=6487): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1.31064949s ago: executing program 4 (id=6488): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x42) r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) unshare(0x22020600) ppoll(&(0x7f00000003c0)=[{r0, 0x700}], 0x1, 0x0, 0x0, 0x0) 1.260056344s ago: executing program 0 (id=6489): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x8, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0xb, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008848"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) write(r5, &(0x7f0000000380)="db9a942bd33380af01932cba2951c0b03bb48b8a56760341980860e5c769a555c435fd8bdd25", 0x26) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x6, 0x10000, 0xfffffffb, 0x1ff}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6, 0x1b}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x200400d4) 1.072962681s ago: executing program 0 (id=6490): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, &(0x7f0000000340), 0x0}, 0x20) sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{0x0}, {&(0x7f0000000240)="6cb41fbebd4a29533d52", 0xa}], 0x2}}], 0x1, 0x200080c0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc0100001900010000000000fddbdf2500000000000000000000ffff7f000001ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000002020000000044010500fe8000000000000000000000000000aa000000003c00000000000000ffffffff000000000000000000000000ff3400bd93"], 0x1fc}}, 0x4000) 1.032314144s ago: executing program 1 (id=6491): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x4004013) r7 = openat$cgroup_procs(r6, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r9 = openat$cgroup_procs(r6, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000080)=0x6) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r10) pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x80000002) 926.663553ms ago: executing program 0 (id=6492): r0 = socket$kcm(0x10, 0x2, 0x10) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000380)=0xe8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x9, r4, 0x14}, 0x10) r8 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=':\x00'], 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, 0x1, 0x8, 0x204, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xa131}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x200}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xee8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x365e06f150b2947e}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004810}, 0x105) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 765.960463ms ago: executing program 1 (id=6493): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000300feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000004001a"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 741.954371ms ago: executing program 0 (id=6494): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000400007012bbd7000fedbdf25047c00000400c280180009801400ff80100046800c00008008000800", @ANYRES32=0x0, @ANYBLOB="040001"], 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 618.972679ms ago: executing program 1 (id=6495): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) (fail_nth: 9) socket(0x848000000015, 0x805, 0x0) 616.90838ms ago: executing program 2 (id=6496): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1b}, {0x2, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x3e}]}}]}, 0x3c}}, 0x4814) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x4012, 0xffffffffffffffff, 0x80000000000) r3 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r3, 0x0, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r4) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000380), 0xc, &(0x7f0000001880)={&(0x7f0000000400)={0x1474, 0x13, 0x1, 0x70bd2b, 0x25dfdbfe, {0x15, 0x1, 0x8, 0xb, {0x4e24, 0x4e23, [0x3, 0x48000, 0x5, 0xaeab], [0x4, 0x3, 0x1, 0x8400], 0x0, [0x8]}, 0x3, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x15, 0x1, "1110632163c3bd024c8a0c6178ca70bf2b"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "a7001df28101797f70dd14534f19dd9607e68a288e904d6561fb8f82d9306fae2fd3233fac401a69fe2b9ebbfb0f86d99eb89932e8bd58999db4d0fd8cb1d36f5bf89a8a3f4257b38325834935afd82a48c79a4be956320697165395a1667139829e7e51e2387a6bd413df9cae53a05b50778b5f1159b9bac5f4e2802c5039832da9b4393bf6f9b95310b8a57d29166a3fc62ec27fb2f58a750129cbc6747958482c475713fc1557edadaa0edc569c2f9c617701b2d03a"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "35a0e15674e20283a635a05b6855a3c37931cb1964765dfd760e4b3a9e96c9abb9b68117e85679a8062a7648b337ebf6fdce5206e5b5d7395b9dcc0ab33c629550c32e7a29bdd084969698cc380eb21b0a820167130bbaa71d682fe4e0a66da8039461d70472111faa970b59"}, @INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "2301ae254e7074dae07dd00909d5a359ad7012828a7794bd3792bd4f38c1a7d84bc6691699fd09874c9766ec8ea8004f171977044c6c129d50d080fe9d2cc04199ae1880836c9ec6759e6280ce5b6c3cd05efa89f8deab946301bcca06bbf8e8767780ae32cad0f5eb010ba0457708a85e150229ec828a5bd51ba9662e815f2ddc2b4410ba6b2db2ed07b2bfb1e14a2ed62d74431b6ca07010368e319d8bfca48abf30e356aba08e48d8a4650cc10451394cd36603c398e6d7cac42078c84a59fd2ff04e344baa8d"}, @INET_DIAG_REQ_BYTECODE={0x98, 0x1, "22a214779d12782f0ba7179781fa1e88376ec7bfa5e5d3156769213f46b75abd23f971c189c5785b4c84eba4ac5ed72167e9803912da3824900b3d1a5816b489dde103438004c499ee66cdf04f762c13a855b5becda51ca219de4a22820e53a4c75e804ce45b979a7688f82aabb93ba8859656fea39f92ddb977fe4b6002d7cd9b6f716cd1582cc48608c4a03d1d7bdee245db89"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "3118d1b956b78e68446f120aed74228378108555d6f54f32f125af4d1343b590f3ec6f3e0794f298b07ba995f2f2e6998700e74e6d0482a57f4eb8d45574255b3605180f5d"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "691f4da459e158904ae336d76e90ff7a96e6b6b8225bd8f390e7ed41a2a1297647613060027ab3decccf9e31523e75ef9ec54969cfe3f9cb7c67542818c53ba2a8697a4b08c48995e97bd4eeee12d637e7c3ee6a97be8a3b750a90d7e80069908b833f4e0754f052440db15830e8e8f8573e1f"}, @INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "0b7cd6d7cfdf7b9e2ab338b1ab8331352a5d27c8c693579e02b502a66dd8d018623f3ce76d5b71b4bf3c75c4d1efc2d2097495be711f9120c8a19e668595a946f21f3890b5ed0b82a506736ed8ef670a7afd90da2ead85ab07f6fc6f1bdefc13fdd644674b6829fcba25e0056173ea0c6ac8d68b47c8fb2d0191b95b37e981b6aada4152047ad8b1b20108895cf2cf1fca56d73bf752e2a534f042905bedf9d6c2ebdf35849329661970128e3e053f221146"}]}, 0x1474}, 0x1, 0x0, 0x0, 0x24058005}, 0x4000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000844, 0x0, 0x0) 497.550632ms ago: executing program 0 (id=6497): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) unshare(0x8040480) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 114.135679ms ago: executing program 2 (id=6498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a01017f6bfe07365e505f00000000000000000000000a08000b4000000001140005800800014000000084080001400000600308000a400000000308000a400000000208000a40000000020c00064000050000000000032c000000030a0101000000003df20000050000000900010073797a30000000000900030073797a30000000003c000000060a010400000000000000000500000008000a400000000014000580080001400000002c080001400000002f0900010073797a3000000000000000001a00000000000000"], 0xe4}}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x0) 112.178177ms ago: executing program 3 (id=6499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x64f8, 0xe, 0xa, 0x401, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x32e0, 0x3, 0x0, 0x1, [{0x1220, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x104c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x41, 0x1, "2f0ee7e4f1555ae0ffb3209d07811dcbc0f6fa2707fba21441210e3046231859bc14815c172692a51adf797a00e9bbd2e15d07b39f426fbd802940dfaf"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xd4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x64, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc0}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_ELEM_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x40, 0x1, "24a78e6f143a8c629c8a23a7ba99b3425f68212103a3af4901631b9132698c16be9eb03826f542f2678242f879faeb1636e8650405fceec00e055159"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_DATA={0x94, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x84, 0x1, "e4442365b7680afc474db92e00bdbade99f7b0905af0dab7c948ccd2dcb60da5325fd9a66edeb4dc63ae6ad6ddeacda39e6be5dd4b29eeefa7fb9f6f02eb583ef8c930d9bbad89e0fc3c57596e370b632a06b866135735beb4819ecf15f49b8c90f493a60b5fc34f62514f5b11748768cf24d3760e94872de726a171e433b52b"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xb0}]}, {0x28c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5c2}, @NFTA_SET_ELEM_EXPRESSIONS={0x94, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x4c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TUNNEL_MODE={0x8}]}}}]}, @NFTA_SET_ELEM_KEY={0x1e0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x83, 0x1, "21e0af927a73520159e56418f478c3a8369bec069f4f640855e28373bf9b31ae74a39fde7756845e9357a678bf45e410784d424c419ee56e941f5f16d6c9405a6dcff38cbbda7dac9fc327eb84205a558b1cb4f8633424a2223665d4f544ebdb99ab7fc98f88a12f59f0e6a5153c6d773db579510f0143f3580481b43da7ea"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfa69c42d2749646d}]}, @NFTA_DATA_VALUE={0xc0, 0x1, "6cc0c7b7dcc5ffa638e2b67d4be577797702bb4efedbc0070db900cf7531ebf0ff43ece7ed7e60985f8b885607e8a4f3d54c43030b9c67697bd357f827d9053111215a541ac2ace346027a6f73242339b4689e4c4587a183292d211c27c38cef66bf3ebf3163ec247a01a3f97986ed8726ff86fa2a6a1012b164aec94f236599567d0adc9fdce44e893a26a7d877033cabbbf0580d77133e3c2d4e57091936bfc841960f1f1d54f214c67f39bd44a7f436d07e5d6298c54a4f3e2f0d"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x2a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1b4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x348d8313f93ceb9a}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "a3cc6e755f638dbf31df5f66185a735f2ca75c530339fbb6e4f1390df0793e78b606938afede00cede9ba3737d5a74f46f960db1bee15a7abd0241060a5999be9d95e383f2f6c206304196760f98bdd7d451952ef60bf190cdd5dbab27d12b7183583f3f2962ec0ec03b511500f4e8d47ed73c77bccd2d10eaca3b49482064b0a750ced8bf2af15f05ddd096cb09b2705941b1de10a4fa203cf027cf7a0d1885e7a6b1160d8d9905f9fee291d6a38e0bca6c2796a1989e"}, @NFTA_DATA_VALUE={0x48, 0x1, "afc4f49dc65bb16cbe3f97d0a148ba91905f03580f7227f7dce5dd767452f4be435be0fb9517ddae746f2b7b8aacd5211f71d464523e51673d84af46eacaeac95be18d64"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffff0001}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xcb, 0x6, 0x1, 0x0, "b7b1db461d9e4368126d947dcb1f0ad2f842f67724ada6042dc56be81126f85165c266ba3a2c284512a4b9f0844f684e7bce2ae7901251372f85ab9e94df50d89781dab166055fb692afbfcaefa96da8257a0d42274ea8eae4073fcbf8089df1bd1430d1b5ad453db9ac74cc18e7dc2fc9f146caa2797cfb6d167d5c6d33616c43580fd41de8bc187e169fae3e5cbd3177e30655977777f934a5a4ff586e5b9bdc6e0de92bf3d4afc6534064433a2b7fbb5107a9ceef5626805c016d1008c3edec0f924c3298c4"}]}, {0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x40000}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x37, 0x6, 0x1, 0x0, "6278119c5ee94d967a37be2921774758c7e9b9fd3888003590d2f5e6b26ad4fd65b8e0eaa28ad5f2080c5fc6d015471ae241e8"}, @NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_REDIR_FLAGS={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}]}, {0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x74, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0x4b, 0x6, 0x1, 0x0, "e2fb3b6614712df897424190d6412c27d73f6cc23a8461286ad58bff5589d64689b159518048ea29b56c5d3de31b1b02375e558a51d54e13850f0ef4f539ed6625909e1785a430"}]}, {0x1824, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x180, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa8, 0x1, "e4404749d0602ccf7ab7a86625fd7b90779468957fe1c0db4d059eec704fb39f66b0d6c936e73b19f6323f433481ff9ff4080a4a37e98b3209e63639edf24b6c26e570a7fa07da4be8edd28aa6bb05aaedec3ae9dd7ed99b745952f84fd0d06c4903759e773c2c676fac5baf87176f149db226c7eb41b5bed8d0b73483ffcbc218c0a135596c5273d6f18fed5960d394841fc44c6ddae889e3f83392e8f46d22acd75eff"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc, 0x1, "3e641b8ae9cb6cae"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x47, 0x1, "40039a05b2ce67d5d82a82bd99915b508cfc40da41b7c4dd8438e9488e6b4fbe0e7f06f0c16702ee0df236a0678f601311dbf8dabb393f408db0841ebc742a8e53b629"}]}, @NFTA_SET_ELEM_KEY_END={0x2bc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xef, 0x1, "607f74b22431aab17702b0d91ce004daf2cae9db2ad796275857d3e2818ab1788f39113cb4527c18bf3a541819f0c256a3a14ba4f20eaee2a189b1f2a4b5f6bbce1b07c9d419fccdbfda760e91f46b6106c2634069755e0d7e063ca9d42cfd42f28b6b205a470614e9f48611646de120201379326190e563751380d80b667b21f43d38ce703d841e925389aa13a7c4a1c23f4f135cb11700818fc773f455b084c10c05d5ed73ac9608dfe032c03b1faa5433f0b230df24c8a890bdb8b5093fdd2cfe0037bd23240157899d65941c034df11d60cc3429db9a27568db7b9b3ea8d5edf1203de08e7dd7317e9"}, @NFTA_DATA_VALUE={0x58, 0x1, "6d64aff4aa1baa5481b28d7ccbbe49f6205fe1ccc931b109ca4240210c53139ae797e3c6c2e3d07962446697f5b1bb0f76c9b59d4398385cb2c42556577c4165e99ae5d0387240652c143ca2fde9f6e88c95b8c6"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x67e32d7e15443939}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x38, 0x1, "b54905abc2a56ab98ee5002dee9b6eda04ab8e5fc41bad7cb934c5dad58d36d1336d1a91083acaa2e83f6226be4176e147784abd"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x6c, 0x1, "976831ce6e7e906ec64728a16e2dc6f55d7a08aaf741bf7bcc8a0dcc3f55bd2c854c5b6ec7bb0b4bf97a3e1c55f6578468324567112fba3cf1667ccdb7579f0274a4e9ed6aee1ba3dbc7e8abb70b0fb51a11a5aca65d2044ea0f3257143fa31673190d6ba198fbba"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x53, 0x6, 0x1, 0x0, "d868448013b605a3a4e4c09beb33e6c9aead103083281bb540fb7d3afcb7a66ee16118ec28ef87f4f56ee4036566526fc7e2a87b5e3e2975e964d56024419376013c30e599b785733be4acc3f48648"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x1338, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x7}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x12b8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x12a8, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_BITWISE_DATA={0xbc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9d, 0x1, "d23c15f3485b63ded4179f59ffabed17ad66709ad615edb52abebc8926e62fad9a37e21ac1761c3f321bf47555be93119276128d8c6b206c0487eaeaeb54891671b17afb2854cd598077d463ad1d03a7defda19d57cbd575f2f420354b904070fa882f89d1ca2031c441c1ab8f39f57a9446fdd6ae97263d9003ffc01bfe7cbf5b6f43f4946d4641abdb6c19022eaf359c1c4449bc47dac854"}, @NFTA_DATA_VALUE={0x17, 0x1, "4abdae62cc45878bb4f97b96fb60a18f1cfc00"}]}, @NFTA_BITWISE_DATA={0xf8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf2, 0x1, "b0b64a6b159726a7ccc2ed98eac67c10061b18e50180d6c4225d765fb42698d2c0ba4d8b60ed17c21f4a1980f02ab45c0a0dd0dd6c81d515d9d67a7658951fc7f50a6debbf1cda3b336e911dc9f9a6ed951f0c15317b3e6831bf393ef85933d000e71dfd461df50e11f999781f450560faa2342ec61a7411520f544dd2a0b8ca276626f5ffb066ab470a9813059bf287ab5139f593c567457520aa2e378e40ed9e0c28a0988c3e3f4ec3712a0ebca86df605d16bf2e70aaff5e923843f0ddfc1a454b9496985aa9f95ae12513ebf3cfec8629a2518b148060c73df79f5d51e1642a8a7e5ab23dc23405d5774adcb"}]}, @NFTA_BITWISE_DATA={0x109c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x12, 0x1, "b4c1c7e2ea5e503f3e1cea859a5d"}, @NFTA_DATA_VALUE={0x47, 0x1, "c2663abc6bfcd3672efc2940ce1a8ae7a8b14743489ea6ca0fb9f8bbd3788d3178067670cf3460dfe9e2933ecabdbea7d833c3b6dd8d1ef589a093a0aeb8717a481206"}]}, @NFTA_BITWISE_MASK={0x44, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1b, 0x1, "373a97bab7b79bd2d836fe1a8c0e53c5a4c3d9427b66b9"}, @NFTA_DATA_VALUE={0x22, 0x1, "d0f023dc6e18b3c10c99a7cdeb790fc108a315b74c76bd793370dd057318"}]}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x30, 0x6, 0x1, 0x0, "921834ea87928c7548e4fa52fa1daea59d5148ef68fd72bbdd9106709603b8914ccd2981a70be5016035c8a1"}]}, {0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xb1, 0x6, 0x1, 0x0, "7a99e5a8d80a6ef17ca1693526a44ff2dcd0af0da10f55727dc32ae87b264928cc3de33ec07f703057edc22e60a2225c72c3dca0ab3de1e8bbaf8b774ecb9e7b4113993564addc778870b173936d895bfa493375884f96a4feab30264cb5ece6fa9eb7098883ad90efba91ffe02e55e0384dcb496c9d3eac0c2425e09638ba64baccd0d282850cb84d0ab00fe7b0d4c38490140cb0e4358d57739d8e515637b2070a07edfcad325e64c3ad7463"}, @NFTA_SET_ELEM_USERDATA={0x3b, 0x6, 0x1, 0x0, "8817d9b636aded2a0406b9d3e2a1b4012b2e068f76171c76c7ab11729588ba3edab2b229286864b798072e7e562faa59d84e7abe6b979c"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x25c, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x24, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xdd, 0x6, 0x1, 0x0, "85eaa2d574dc8798ab3cba0a840e964411403f44dca9ff2508c611e0107aa91b82430ae93cd3c6dde170bb185c375707a493169c7fb2d3f20f69f07d24a44b5e7155dd41fa0e9212047001c2acf9f832db148c15b25668de31096cecb9e33ccf7b6af3ca97e1b3dcafc7d4ee7661b3358c36ea32c47c51fdeacbdcdabecd9dbbfbd8b049b4121eb4c78d6c614827e8fe7c1b9e8ffd0b23862daaa321440e7b1ec1227e6a00a56f43d18fa57a7922998b8d05ebaa5a4cce8781ca23c2ba34b4c84173bf5507ff8f3470781927fa7b76d115cc48d9e5a8b943fa"}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x12c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "52b6de79633ae3a5161b03ec910f2baf9b5861fdc919af6ddd8cdb7fc1d0b229b6715e95f439a126ad2dcdb0d88c0328ce90eb7da51644c117317ccd092a63fa43889722344588954d"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x96, 0x1, "3fff5dfdaa859b31a0fb59ee8a9c0b81dae0d6d5d5e1b934294b297cfc68611178643b38c1290557d23ef7196f5e181b58d61cce9dcf1d7f210f5386e8f87a1afd1153ef32792ce67da34b23616b3db86cd4ffe110e7eb1e6ca17aef19948ab82e128d569ff8d978b6557acaa5fe8f149dccf561f5ea50a066cfc41cf8f495bbb8605bf897d3f405ade2672a5501dddb974a"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2f8c, 0x3, 0x0, 0x1, [{0x1290, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x123c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "d4461669611e06cdab3071e62d3387f61e01d4b4c284bb8d9b642fb77f141d3f3cd95d86c2cfc6c9b84ff04c3157ddfd5cc6279c72de4c8ae183413d5173b98614018558646fbeb4293a16ef024940b418df1009ffc852874087e166a297bb3a13d204b09173953c1f1c9bd511671cc0e67d4b2782a7135af33437f8186240db4b3d0846af8da412241ea012e64f07d4aaa0a5ca153c86722aba70562a96d5fe22eb84b3c7c07324fabfca199bb85c40617059d47e2030cd4074a07176fc1ae74b7722d3ed562a77de0d6540374ee5f886afbede70fe8747dbb361b95e082e3b818811795b"}, @NFTA_DATA_VALUE={0xe6, 0x1, "8c91d6e87ca98efbdb6ac67e369076397e0eb18ff3c1caba50f9b11c7838e79e08b3ddcc6a2c6d7081dd2f80924745151abf38a27972bf6b0adb66d3ae696c133d598f6a90bd00044601e918ef96f5332e0db0c80d544a8856fc1401a9fca560e2e98f55a141c48dfda72f0e3af53dd44b54b025b73d8990849c6d52ae8289bb56eef12e6038bf022bfd475f7b37bdd3a45d9515adafa10e4b07b1fcf49240ff8064b5a1ece77063e8dce74708ccf1ef73956c5bbf22b551b4b1c61049f7bbce7d070ecb6355968813051ef8262c05c7b81549eabba4241dce370db03be37ce9fef9"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "5da95c500e8fcdc046c42fb6816c04d37523870a8bea1fac3db1a332dbcf5a63410a88c904a0dd3e5ba0bf21896716522728ee2e99c9dde7049ce837a5cf3e747fdbe8e0b730d37bcf913f2edb01f5c13366879af7cf7529e8582dee1baefdb96a6723027fdba644b9113e520858fbee12b1413a6b0c316a3a9645c5fac41117cb270a04fc3b927273d63d8029543bde78d37e51f41e3bb6ee6dc8c7589b9b7143e3e0f1bcd521749f33be517c044e50d1d9217114c248df355a461a869a5a1742c7dbd9203109d138f04ba0754b67a3701a7401613a69200f254014db7c06341dfa93a9b6743aff161468e1712b8f3ab44dba98366a0fdd43e99db48986876015c7c4bbf5c121b2174114a905273267f2fd1bd34c2876193868971d0dace4e3e1db64bf5971e2a55bfc90133062173516a2c4e6d232dc5fc66c1a1a58600e92c70ab4800581468776ff7753fd2406cfebb85af792462494468ae138dff77a2ea9d26f3a77c43aa29758d90b1e9c4144ff8082e23a22551903241c19b9dc06655a26ef9bc9d69cee6a3edc47ae13b4a70dfe5617b5c449e7bcfc2d39952afd3883d9b667e149bf7d7a7b6b70f766d691ae182f34a1e28d5efd2fb75bbeceb2d0da8c3010624223819f38864462e61591d5166c396e35deb972473b53517240f9e4709bd9b703275190720e1cfc2285d3250c6d281512345db467c819a8817586f582cac1a602cd6573cbfda3d281acb466dc80da04e07dc5d635104cb6b56315e3dcfc146121fa94139db66f111daa3e64a442d126aee751432731352f405cf499844259f78e8a414ab2352c7dbeb60b3ee647196056282ec8a1e46fb724a363794708688660066a58754062a5e4cbf05230ddfb24967077543a8ab4db78ff824f874a86821860b1bac245a681cf2e2e8d48548864a7bda08a53758217ed873382f6df0d4889401978fc2a083b8bec319e0a73ae375673a8d6a86a871ff42040f9d21aae10482646703b82c0b3babcc5821cc79b1d93ad5e17e4fe810873fee1b9e01b687400a7528fb0c865a78c50b9cd62c28ff7f2b915bf593a66b89894c8b606fd2afd3686d39073b8451df6d2466017f3df84efe103c0bae6843d2c99ee7c41b5a00b0eb2b6b622d586971e59d33058de5d4ecb4209ba53b291eb1752c738f74df84561adfd65ab09a261be7a1041541c79c4066ccd2ae867beb3051eccd302a13cdb8108406fdc4bea96ea8b9561941b5591fd7a3fd3f0924e0e89c7adcbb6f0366c073ccc73e44eba17f2ae1625146e1db85f78271dd4dd9e079062f63842c95909aa2e34a002a673a71dbc72ebdded72536c1d86a359350a00b6b995030e45eb7272f80a00afb4892360391fc07bb455d16661296a8c553b9db91f17eb71b79171b982179cf42cad95bc1a0bdf0ff8d02dbee8644ebcea5e90a5c5d39284caa3d8b77034912ac932cd8e2a42e0e53b9f0c8b94840248ce7714d0c7add290275621a870813c46fe486a53be6e05e87a24d6eac725fdf27526f8d7183d44cb329560751cd27cc870afb470ea77d3a61f620b79be62642dc5b224d6456f930b15c37b916be099288b393f5fba85a953dca61d5847df75802902a0f9ff6f725da97d778b918ddd8960a46bb9c82b510d8816e453587ff3a5197efb73e6479b686e65ab42a0c2da52015b5cbd9ba0dd7f5c29b032d8f7d584715e984a8135baf44574d35ad776fce4bcdaeecca60bc6e0096a81e2e94c458b648f0123e389a70b02376d31171becb033d70acce7ac6040f91b392f5a0d6b1277439a1cef9d01bf1c40596dd7606079c525e97cd664de063202fa4c5f46ddfcb2e926eecf2314fb944be733d104c084088131d19649c99a2b44eace0688663ac807bb6834774e2051ef247e3d57d5c5571db34990e5a0065b2a881a8bdb2bb62e28474839a17ed1d01d98914c4ed51c73e2a9f61ca58787ea9ab25d952b9b7facc865d94e36c65ff4e8b4cf0efd014a06c020f9cd2fc850bbf748b9954be18f1b4cbbbe8100239e06cd789250be2bfd477b3d7583289bb8e2326c1810caaa4111b4607b896ea37fbc37abb87248d3216f084923dfe2c9d64ad6714d99aa678f32cb64b67972c2b6167571bdaf5d3193467b82b03a089d1528bb96e55834f0ca4e3a676cc220ef299a03c66863fa0f11851e61578fdb7aef3270ad77f47aba9583c6dca212d97223f1a474f25660f69185d649600e909fc95065b2485c3c9115c0a63b50e881ba802b9dfe6ce6a27c92e85dc3d674148646f07ead0ce28b14bf24e8c2781c236a6ba933e1f84f1c06f5e8fcb7718b1a87b971dda82c164f96a39487b370a4ef36aedd0c4223ded17299c8171b2447531e4183cad37cf40cf07771fe98383711fbfae51b6d648b1113513fd0bda63654a74200114736f4b5ecf0af6b5283e51634b17b5dc4d7f8a9f3357a51141a0033c28025d990f298e8c8fd230f02489352407253c16203db7734c7339e842ce1ca804acdfac9ca3ca3024b1241ee69f7d6710c7bd4fe37a83387f125abf7030d9fa04c534a369f5f397f81701d68e28d4ad0c06305ca85eef15e776f729282aed8b97b8d72875d3f9beb5a2187f92de9b59ba101be97c96449edc4edca7223fd49c2b49c64cc587951b5f3d6837ab37476d4a3874aec846d4205d9e50d6598dcfa299c6da380413f2c19b8df0fea8695a0151b0558107a31d6d49f25c55849b96e8a61f3c8da49ab450c3aa18380509b96737030a84811d3cad248942547291ed71856246d35f940b7c8427a8619f647b426786098a39485cad25fd358626f296c9d1e4c2ebb590393299ffee02a6251c792b669daa99ff09a33cfbd4308d0785ba2fb6a9c7af74ebc075013ee5c052d05698618458d1a8968a04ac64fb67291938e533ee7ec0e02527499a686268172b11e5c84fe03a8e8335aee8ab94148c556201a97d452642f55809142d4280cf4708ed0f1ff2f36bb702f31d6a337343687cbc35d98a4f0fe54133bff55373443ed725cb763cc305389633b1137da098fef65061335c2e1fe28d789a0c1b077714f1e1b40e196d6a135be9e8f286ff81634696681b7a16db7c3eb9445601641cb74eeb5fef135c1ec28d7f598655af56422dd64eeddb52b9de78af630569d644d8842c28a0666841647adb13e31f8a411cf6d975509c5b9e41c6e66e786c8075e5f1b7b2b8f519a2b762df1b7190472b5700815813d579dabe011a5cd567c40e274558717d8000509620e4620d095925ad4486a985f7c81cf755850b518d39c88c5450ab103bfe4b7f588eeeabba127b43431443614f19b91b0307dfe8d02d49a05c974dbf9d82edb641cb330c70009d774bb5ccbbbca6cd9bebb4172c40c2f0aa79347975bcf4c23864639e7f65845d4e339c5a7ed022c69d20bd3597a1967545fafc90bdebbb0d25d9f47fb32445e4f2bcaab8dc73fd6728d90df25885659aeb2d66a24198005b7a488d95fb883148a8d288b1acb4aae12a11bad781218ce6b38c564aedb62226da2c1700495ef7a5f7625af650a47a6b12f008cc029b88d4426eb73f06683f78fb8bb932c40d08275e8c10e4406d8fddf38b1ce74376a9f0829e039bdca4e2a687d28a6ca15809b17faca7af54cd241bdd2a588cc39c7dd47814da8023bf4014ca1d52ba81887fc0826e492396c5dc278e19586cf151df3ee46ea9a1fe0b4e135c480eec1075d7b2f3c01341055f126eae2b430a28dcc2d0f40fbd3a258d553d57908829129369ec399fbd22e8469d19f981fecc00e78caf6f340bdc4ab96ea5fc4c1958d9ac2debe757a479d5e43ea0652efe11b233f39cfdefbbcabbdfefb47a1be66835dbd8ce07a753303c8097f59cbe0872e96ecc701fdeae0eee7fb9d3875dc2de5531ca8bed13fd99a71bc604a452b6232b40d60c97d916591fce1e9db70cd8fb53022cec1ae8c6c2a92d43abb7b4d01f442819bf6639ebf0079c7c525b72d4933cf2ccfc1e58dce1772f5eb12f27459fc6879cd245abc55805cd1e8886a83e3bac4ddd8acb518a3b1c8f5d81eba08bcb2711fe65b24a20f218b078939a5d24c9fd487d363f75c6cd7767d60c247694d443e473fef85c4180d115bfb89f929d4003720270257aa93331fdaa5c82dc9be9b65c5bf6308a4acd5ed6821c627860aa862352dfe273777d2b547289b8f42bf22906f5de488e95540768c1f4f23061fa81c2d16ae8a3bc777752ad7b903e3312b908cc73374c10d8ed2152d05a004c77e87dbc1ab3bc392cef0136470434935a8feba70076e9a4ab755218ebeea8d269576135c8c94291f2dd0d353766c4ff3180b89d1809719b185ab978bdf4355acb978570c291fefb98a4a27d9664165a65b4c9e9808874a3ca97995638dd46278efebe2d843490a225fc802831788f6440d725122fe9728090935c08490d94d34fc82f494cf1c33e615fa88e6c1ea7447830a738ffc4331193626a0e6ddebed3463c4da5e3abaffba65df5219cd2e81f50ec71467a84fffadcf272026469d5972d72261cee6479bdd1933b0e1025bad561fc5552474e9c2575787977ced1b7d03c6800b9f9ae5bdf9ab329c76010453a8ac754a3c57a95edd1f4dc8ff51c285755a622e4f612f46f091f7a3b4c5248cc5d5f751d2b4ecf9873d65db722931d9d7d06bdd79e581b538a8fa4028e1adcba949d4b0e23b8850d4dd2bcb1af535d2d351d597694bf6ca1c7a8f2af156bfcb8343a63f58091400dda186e8604f436f4af978f45c694760e5ad66dae0a8b836942cfc4cac56d5af9b1f40b1ddf3e518ac752f4113d18b04539bdd707b00dddb42777e1deaf86ddc335fddc0ae9eef33a816b0d935758912488c2c11b3d85245ea9cdc92feb9f60f801636c8db8351123cbaeca0c01cc1f2b176c4ff3fe04e5a0ce4f609bdf28857bc6820bce987d4a74d2aa698b81bd0569acdd5e75ac45669c2420dbffb245ffeca0a072e26702bd954dfcc9d4c93013d91fdf9f2912d1b8120da2021925805db1cddfa1969db4c2f34270b2450f9ec64cc3c848d76026bf0fc6740c8c201cfd7f6ae3419904be7cd74c576ea5e6d764fc8490703851ed966fe63de9dcbde0d0458ee8fbd30915b87490a1f67eb94cca6cfceb4eb58a399791749b4e8fcca0391173acff599ca36dfcc0b4059d9407ff5dd6bf294284a43d930b7fe01c2aaea3d89ff33684fbe558a95bace8a470ae727677e87b727ef03968ff4b448e1bdbfc6bcc2228f9e883bca34d67fb5d548c3196e4818badf647a951faf0c0f9e5845cafce6364990182e83568ed88bd8d9256e6db7f1077ed3fb1c2b579e3595fb4dea8cc06ebbc545b28acc871c6cf9b5241963aa5d20fb54f120e71cf434469b93af0cb81e1f392f868d58433cee08daf3e3f44f8edb1cc588a24efa7c2f993abc43bb53d3017a927f6eb77c72df62a7bec982294bab1b949e907aea0fb34208cb546f1512075447a44ec060912dfefa24fd9650914482551e205d405cf11cd78d53e434a92714897d704a82272dce7d803b3a127bf7d64796df28a0bb2394619154d209370d895d1c162a054e684db97507b7192a24bf0e8ad9cd3bf927945b0bc5c8ed66e7066a5f4d8f07e911b1281da473229d023857bfd0f730232b0cabf85e39aff9f6adc57c260b4ff01fe02a5c9966d956b2496ef470fad4acc38446b659cd4a779fa56d07a332dc30d4aa1e0e9577b9d12194178a9c27a9191b25f0c4a5309a7239a44d662edbd3bcb551078e4426d1b85d00888993714f4df9e19031"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x1d, 0x6, 0x1, 0x0, "905710913a2ec6d1fb41b1c53b6e04c1a589d48957711b466d"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000001}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, {0x1cc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x1b54, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x1b}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8}]}}}, {0x1a98, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1a84, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DATA={0x278, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "e69555808ec46557e250d859e9987f3889ae3e1d218e911fde9ced998186213c5cf49fe6a35d60c193db81228671d2d8ce5842d6e14c6e7378393cec1fbe61faeba9ea90646e0400f269b7b44a1232bcf6e0b7ec963a013ab83e83451d8ecbbe2df3bcc59d44d28563b7d29d570071da995d8956f2be994d889462253d05529fd5a5f3e7a98404594c9fae54a23b38315dd6c458c1019555fdfed20f26cb567950ce9723bb1922287326a703c5264ad92523f86b596267c2c49771269a75c1ee661485f6fc9e643c20fca76a9120a7cfe426b13a33a7dc9ae527ac13eac4ead669ad69055d9ae15bb21df105a87ba1"}, @NFTA_DATA_VALUE={0x78, 0x1, "c3625109a2efbb271b6bccecd37abb087d752ff18a59c86bf9c24519b766a2c0bfe121abd948e1c76c4a996395d56580caa0db951eb2304f55c391f6a770d19fbd2cf3328f03b0510b377f83c0626e51a0e184504f2242958b3414671311c727afaeaf6dfdb223f9407416e0482cc05f9bf4d05b"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x90, 0x1, "d65dc608aeeaf744a4739c98f9cad1f8982b756e14776aca5bb4b29f5c9bd8b05b97a04a315d832c4b944609934b0659c5f2480c9850786556744d1c642d75b44cbe62629a29c61c68b5f65291213aae6151287a878f85f7f05035d07ec7e350bea3780a57eeae8e1d35f1e3436327d3705818bea831e642c6cd8026f05b0d680b115470d415c76795761687"}]}, @NFTA_IMMEDIATE_DATA={0x2cc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "c43fd2570479ddd180966482f713ab16a51bc27fdda52fb5d0bc50588cb8a4e464804c233282d071896e88b3d9fb2a4c84cd082247537b1baabc949f8c8d07900046579cbb7879fec41f654e4ef1bad36c496378333927d85d9f491f475dec8deca6d84e87c3cad5416562b8aa357c27243330c332fe92e474bc88fd9a7a6f07e0227fa5c7e55b537c909cf1d1a285ea9c0772682311c8c03ec21e63371a92fc084a02ae74bff7fd8bff0b3f7dfbaf23be2842a5bb49f166c62d960bd52dd3d32f344b928b6e01dc9ea7a97fa40d5f54ed809e4301485d9432bef72c713be61b"}, @NFTA_DATA_VALUE={0xce, 0x1, "ff157e06d46473bc3398ac398d30ebd8761107700540c39f932268525dbd9b238eb1951550267a28e219087153bc1bef50477ee99bc11dd96f5e3397206bfb7fc4d8bad05dc41cef09ad87533b733e9e4ebd45042990304e2a1bd7dd96731c099994d2105f545f6daeb36a48271e080512dc939a85e618eecc50f21f7ab2cef6ca1e7fcd70e8dd74501e1cf056295abe424d96a3d3b3588bb9cc764676c64f6612f9f88583b0ad482adc05924578e53bfb3c9ba950fc8dc672e1b493b48a539f7ac722baac1a8e302bb7"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xee, 0x1, "a43e9e8be9fd31e809da8cfa3e49cad66be3813815e54d949463edf8b14039098b5e81af0293a958f875c9cac536c70ee5fab515ee84827df9b0c069c12eba4a2f191959a3928d19eb710253b8c831d11790a825a644a05e53771bef42b37fc50a55a0fa65a191ebdad141c5e1b235f004d1151cca52fbea9138cb892865e731bad60e03581232e979fdaac6e3ab9c934e73f23c9f2c98e6d79272f71d7cfac405726bb49f5758feac9adacf25fda08158b49f681388ab2a2fccbc1e56acaf83d73e9a7e69bd19ca82bdb58d250f3eb4d92a235c2e01f15e3ac05c01f89fed479adf2b170be7c37b77d7"}]}, @NFTA_IMMEDIATE_DATA={0x240, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "54d2260c5ce85bcc0694a9845d7753a0568374d40942"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x6, 0x1, "6aff"}, @NFTA_DATA_VALUE={0x80, 0x1, "cbfe4e0e21319d63cbc41e2eea0f557b8b8a9a196e614945bec138ff60bfc2336f2eb286b1ed182b4ceac832f17b44fcd32dd83cb733b3fef94b97b8b4b0aeb27442246f40b00a1bb0c07e17cb6059801277141ede96aec5785de2d4932d04419dfd22d88a2874c6cad4f438c17c38421b3b60a2d5c67407e3fe4ff5"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_IMMEDIATE_DATA={0x1008, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "5346a8887526a026d7285b13c1713d5d8ca68842704f4844e267c79f65d69fe04382f22f6845e439ccfed8ad15c123f9312c8db3c9f96ab52b7c2cead774842edb1be746ab5291d4ac7067e1edf348609bde5f22cd90f488eddacfae21c40e6ee7705dced108e87aa02ddf7d6896f8863682a3f54317e5011376025a125594e2d169faffdd04ac4a4936289bb055ee219de43317980df4975c6172b09fe1c4a2aabac99b43870ac52e55a15931bca385e74989584a3850dc85c8e550120dd8d91a736978e40a4fc305080e94fdc521449f79cd92fe4c3412bb7fb2b34bf6cc37916138d43eaff193ac5a0cc19e68a185131f6d625b8a4b965ab66af82994191b5b393fd52b9f0c7b9401b88fc3255a4e34cf7dae8cb1f4fb08bf38e9cd59fd3c02578066d00a46ed1c361e3066feb0a893f8fa9829202d718b6c706b6ea68a744990a2c1a3928c78b8c485699b9d6b9bd57232d4257628c18fd1e93e3f1f68e3001ad33793ab07815b14c5e836a47c72785e6e51c98be8cd4b467f4e96862ffe450d7b02d7795b04397664855adf127f1933871109478730a23fd45bdd25fc2b47c99b6f39faed737fafb7302b6444d78825ea7b0049522e627a4605ad94fa6a7f0e18bd7d6df55247844c1c85a77a55a518c2779a16a8b28fca273d7e0c1a9ccf2914e7015f957ad17db8b2140ab9ffa7bf13be852cc71ce097233fb219ac9d5841f8aa1a8e3e4990a54e23add942cc909e5eaf16dca9272c547fd05a237fda61abe49c8d225fba7365a10d7dfa5d3eda007a58f1f97e0db7f02a57f1e337f2c3cf599d6eef95345489bc65d56ed1d22e5808e2785011acacca9b437f7687bfe27dfaa8fac59d00e9ebe4aab07d7cf589885c4486dbf0eae923b32abfd585c0f56a8ed697adc4b5cc24f49510b97f612bd2c044fb412f868065613cf9de0ded9b017933639b1b34a10920c14f2585980aa7ec68002d83da4d4f5ed9f43ad22b47e6f3bb83e9c3f25c42f8ae9ba51a31ec22045bd4626e09c94ade5e721a8a4bbe9f18a07c4661f2e9b765d7926d2eb7800341acf4f6f7f2dc442e5793d8ad64b9705a564690f2f67182f054fb569f94e7e19a42e36a6bc31276f6603085b25c3ff91642b966a0af303ae87c957b681e542f3ee2e8c1351b392519ed044932eea012d4b907e28c2a67c4b2c9c093684b123132b428b986efebbf81e5faef892c0c6e2e338185cba5ad65595f68d9c5bb8f5f2c8659efc0a5bf22d4b204adb97f4d09ef2c4ecdc80c2008531a296f7d19b9ef03b7f7c41e4f223d90633b9b2ec9f1cd9464d687bae74a06cefcda657ae25fcdd59faa8c5cab068a4860e1b80985b2dede7f1308afdfef1338947d71ad4b8ab637bc476cb70f39db908e35cba45f3e6724dbd53067a8802dcf393d859aa37f45b122e704770331bd1342fc8e9975811b737aa7e26976a2937459bbd7af3689a4eb5ba099be5570b8879ee9f6c01fa2ff9e18b0d9bdb2485e937c08aada57750270b15962192f7958776789b0173848681640427e3b0798f1d82df8be49d9aeb3d159e6cfff6dc28a0365e26c31c08c0adb4c436703179539e22ebf3cbb19cb6a1e45102bacf8f92c35b383e7b3266774fcb9a9b8a9330b613052ad61ec937fc761e025ccda80fd4b6045fd606241e9138d71a78df973d8dea365d10c6d5d21f9b00cb5e73367b1e6494e7361255c605a75d064478d4696eb35f8dd5dae920e0e22645b03f39802a23df76a0332a2b6188cce6a0b2183342e70a148b52dcf32ffab201d05b6e80de16ac9184b7235a5f97915bd0238180d517f63688226a31c6d8374a82bbdb7c6006c69948e02f71d7d606f44638b1a98686723440327ac41a75b737b1ee286fd27bc059792f698f78da2edf8ba5402e7de3009d5b767983c8a150b363970174bc7496b06a5220349090a17ead8c570efb2dfffbb820018a2274dbeb7af2b158d8c9a13b37199fb12e1add7abb0dadd32e2a9ca2eeb060855a557e57aded3e359244e359ce0508da6538069c3b2f74145af1420d866ab74721bc8b52a2e7de5325ac39d555a397acb502d3191818de1cc0b45b227381cb4bc8ce1cfbf25ec4d686a9e39a697ddfb9bfd3a7031240f13a155bc6666e81ceb92b9cf8493895b44c1c491ac3c767e1e9dc66382a8d7ed01eedcde442e922ed2037a9923a219ad3ea355b2601b7108d982fbed977d570aaccafe95eadb41d98cad5539a7dcfb73c5f628f69cefe8636613668231a3e3c763b4cc60fa8a313676dea9af89f16fbd85c0fb212d986e2de9b3af04bcee9fb012abc0210443b5dcaca73564aab0a82e36297751c8f57ba2a3184140fd98746273732008a2be8ec90efd83930739c5e05436a949337a46244e706ce69963b6e56cd4315246f3e5b9ff4077ad6739c21fb9cc4914f78d0926387e4e680b1d2e45121e158883da107404e5e9953d5d3e79860e02bec899db5f8329b8458a876859f8ae98bd4b9a932a5cc3fdde603d0ba50c5f019abac7c82906ff1f2a77118dfc3422642a63b9aad3a0184dd3196adb3f9ee7372a51a553ef8e2d794afe6a2f5f432ad84e8fbec90416e7a45f499a70f00c4f08f500ed0de38fa53924a4b3fe7fa8f367ca3e511cb89565bf879f365acbd5451e957845fd67dc7057be6c8c2988cad73f5e8aafbf124a573723ace8ab5776131729b59246acf92908a5a90e3cc3c69e909a95cc1d27e34a74b5bb1c7afb5f9a30269f35b427c19c9f708bc18dc7c73366b31febe2de60d985781cd2d4ce31331d9d58eb16e903084b8f973fff330f6cac48cf7a8d22c960cc0d20ba4843d39fb8283cf4730b87e693c140ee381cab69b7ccedb4a0e3b529809dc0695a4cb21dfccd592beb20d0b04367a213354deabc73217320733c9c22c7d555a58e722f8ee6017fbdf2249ff0457f649af7bc0caa2ce9528ac108ac1b0e480923577cc8aec811f4269cc5a0142214916ea98491610b6e5be80af9754874beb72d0f42406c851306b4d03a555bc9412f77235bbab12362c40b74d06a56097b608639682c2089a07afcb798944545cea104f2582174a90104f66cd3594e63b081a58202b9ef942d897e30833a4acda5599ee3deaf2bfa2ab1d06c2b056a4b2961fb7f1388c354934c8d18cc9210dd4266bc83e779f15422e10ec8c291396df53f406e355c86bd753d4a1c313a0aa0c9a5941cbbb7f3a75be6cbbe82090b7a9afb05ce8c5355b3ea4733d8ef54220f1901774fc720e46f42c13fe5ea61485daba16433ee1a33d06aae7c47acbbea8ad2f283eaa190441769dc9032f709898683dca3147ecb0e68f5832dea4531656199d0727c502a616b13ac8851f8889ef382529d13b6e392fcc636241210f89472eccf452a4364a597e8cdb0877053a22fe3ab0bb6c243f2dc740818fb03fde4a007e68fe67d92046e185f4400ce7f38a58e6811f4fea7296aa9ef12d9fb789372076380252af521b9d37fa636c6e9fad16cdcb36ab823cec17370ae38489b5d28b8b58b8449eac821de430ba06223c9348a2a1213f9fa901b0ab527bac1eb99de16047c0334d3ed2153415b71ff7caec05ce520907b56e71a47919bf27f1ea97b065b89cd95bfb909d2d52a1239c8da9a2cecd54580fa3e81c82ed728e9f3acd7f5eaa198425bc67c9fe43c9e100c88f8aa8d3ac6be40496d545e509cb9de9c4ac67114c0c0e782db56aa24119f6eb10322022bbe2f6d272fc53f98a822a8cc06959687eafe7256b46fe6a961af32bf69c7915eb75ad24ba717a6bfd426619922947da3c8c36d70dc2efec920a71e0c2daa2b3d0cae2b5a16633ffb09a0e2a24d36fd12958560b398c692fa0b4f44ed522a3573c266977b35bf874fe08c22b33b00e4000f246a4630857ee47fa39fa4d8893feff4b06a73699cdafaa434a86897d58e1c6a356ea492200021fa14104e4960bb867ebd24681aabd172deac4a495419fbc9fe3fa75112cb18fec6f7ea6ad2dd01da9c5558134d5560eef6a449a61c01e86fbdbf724f6162d6f79ab92260a2173559d7f5c9183bbaea006ed91bad519d3fa9f67eb1e8a5541f1cd2a5c4583746cc3fa013159a6d238a831365c27dcb049951f2df13dd6af00525830a6a0677a7fac976053243c163eb2d551d9abd925c4b7c00489fe9b483a7d8b7deafe71cff37922193d1d5665f5be80e520c7fa5fd1da78e3610976ec3ec91f4923fd625a0d310c978175c79cfeaa50a03e4b6d9216f5fb6270b2e63026f0fc0342e5196e70b9bc3531646ba389d79e77d8740acbe19266c86b5d98cc8e0dbc9236d4df700e6821b115fd94d8232da1d72a88256ade0e0b074dfdd3b99510738c8a61bb631cd6682210d68c4827950466155122388698624861e7af2906100511a6d7d304713fc69b7508d59168a91b886530176a693398dabe2ea6b7d155c00ea87db0937becf254c65cb2f37ef119cf14e405e92cf9ad560cd1f6d434d9cbcdb3f5daab8dadfd1ed1e94a598c82d0e76b642fb6249920cd1cbaee3a5a08a3d62a592671f96113a40920c3e12d34391957bfaae8e14f8520815ac2c10836c887d040fa1a729dcd6fb5e3f5dad5b94b39c5e456bbb27be0f3ccfcccc5f784c543dc34d7e6a8027ba8973b24509c2443621cd51e5148bd45e30c3f275b902be210689b5ead7fc25d597e0cb3dcbc4ea7cabc6bb83f4137b077bc5f79fe07c3e296160faad8b20a34648ef149dc3e932935a7ce21c9a31dd8aec673eee4367f9f3e6062e9c63775d368ffa8717cd8b0535f9830552bf647e32d85be3ae593884a5c8d59c62322d12f7b113fd963deff3094a34dcf40500bc0fcc9d77964735b609865c211e606d6cf02e741a75cd32444005815c5f9327979e433c7ff77b8f63e731d6595931bb2088d5ea0768cda60e63590ff630a7c98c90ec2937615d2fa6e956eeb2407bceb50c67a383d0b69397d24bfbcf143bf91bbbe9d8c82f62d3de9e1ea2d5ed66849dc4417f902fb78dce69eefa55aac9e7806f59722736ece17923e609e9501da6ac6730062952d1a111112d852eb3087f8a5ce52f4f8e295db87cbb81eb5b5705ddf41fd83ec68a8587420d18391c1debd7cb527652160cd3a966c2ab12ca2836f530a13322778cbd4e767b26b3edb589e3e4eb688650f7a95429a3477a0638427f9091b1a965e13455f74e4b2b494312de86d68f4f96e84527bcaf66ea0dc26b82de1c3562fa10977c185f997fa987e692f30ea966abd6cd835fae83b2a3728f914feed19696820d48e93a324d00ed6a49cc6ac056847d29a7f8eb34192eee76eed9f5b8586f516fcb9737964c451015a315d98710c71d524f7211a8a588ee1acb09da7e7e60f88fe15555609e3836f9916f8fef6236d042cb310e80627540db22c10165b13a0a30730f9fe0b7786415f8b57ddd323ad63e2a8e153d27d6dce45586ba248cfce9be1055da00eda683161419c3eca49e3fd6d9c4055b97a49d44a5603e04bc5cd85109cb3314912755fc9525f494a8db7a4bde54ff30108ae9da5e7bc5b7a55214e22500ef5eca6f19b44afb5589518ae21f5db75849f9b769e6592675ea2c13801ad882389282853f9ff66f455b24a561098b621f8d35e320e51d21ed95c03436dc037de2b4d57107f0c26aabd17ff0ce07b311bed7947f2dff62fbe0675693737132f12dc7291f2eaa85bb766d4f9fa4077951f459b5adb37d06d289f4fcdef9629355f46d0738b086b80f465976faf05b77132caebacff357816659975830dcdea5244105"}]}, @NFTA_IMMEDIATE_DATA={0x244, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xdf, 0x1, "0f69616bcf916616a340b2ab9cc80139e729819b2e4b5dabbc34d097a268d2b062b0800688d27aea6c03c9088a74e5b8dd8a05a6c45dbb0eb38780531b5437602424fe015dea20d7920b85398a2ffe3ed89b2de25817d5eb8ab188a2f1d8686037211fd8ea73023d934570157bf09fd3ac7cc142d9a6117ac841d5a7e0dcf0f8073944b24579aea73a3d23ec26af1bd55983d791595b339f802da661c743a8187e354851604a983249e92efbe869c7cb3b1de0221e2f6d417c9b017abddde34c7eb11eb28f97e8244cbc906a45fb8aec9ef73f4e4821d0463caee0"}, @NFTA_DATA_VALUE={0xdd, 0x1, "b16115d18c95c9c4c7b7e0a25e58bdb7a81a724a0104c0fd5ffbf16737112f8dc02239e06f813e3889106d5677328fb2e92d67c66635035a48a1f0b05924d98bf1f5b4afbf72b3a7515ac52b4b444dfb41057f37995d64c5cb7f8ec030c6fa9a028af5058ecdd5c3fe82d6dc6ddf198082db564b56a18abeec31fb23b7437e59b11d6575da9d158b8120cefe157ec96ac2833e6520572222b0675eaa3b24d5afaff9a4f7ae18196b8aab817860ccbfffba4b0389daf9dca69d3903537d428f468c750459827a624a06e91dcf16e34c1ff7873daa16f74baf4f"}]}, @NFTA_IMMEDIATE_DATA={0x98, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "26671dc735aa48d434d7d4a7f6c54a614a66dc7bcd23ea019d2b66ca441b8154f92b0e13a8bdcbed2c930af6f37b5e67f3bfdce2e52810e14f46262ac71ea4589c64d5b99d9e5a73bb26e1f8eaef1beacec3ad5f13dfa9c172d35e9df2b1ecc2ccc7c1210d477457ec02622b00e1cad2146d41b50b1685e312c4c2d8584ddfae1bb267d9fd0e29a206ff76c7f8e30c"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x55}]}}}]}, @NFTA_SET_ELEM_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xed, 0x1, "dfddc1f8530240745e3fd5473f2eccd6e9a0e217fe148371e1e85726e8ce0ba2a56b4e9f2c3b4228cb1accd5861e1924cdcc88c95d4e6f6f565eb11a2f2a33df9de2d0772d7e3fc7e1fae36977fe5d89e892310fadea9ff731b86e7036773b61f6a6368e0cd4bfd57d10991167b9b188775516d0cc95db65fe2fbca6e9ad34e58983ab283328835b7aedc8c9f8a34550d25ecd6cc282e7b945a7a05db8d2db6373667dad926df2ffb7b0eb290f587d4decbe6631427880d25546b9f82a0fc766d61c741c4ace5cb16909ac5351b3c5b3e4fbc7a7ed658dd68d68d58cf4e4ee9b052b68f0fef47c1179"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_USERDATA={0x20, 0x6, 0x1, 0x0, "f9bd8729d0d14c40311cbb54f7f7086d83b2192a0b262763a8114976"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x655c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 111.836736ms ago: executing program 4 (id=6500): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x8, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0xb, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008848"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) write(r5, &(0x7f0000000380)="db9a942bd33380af01932cba2951c0b03bb48b8a56760341980860e5c769a555c435fd8bdd25", 0x26) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x6, 0x10000, 0xfffffffb, 0x1ff}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6, 0x1b}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x200400d4) 0s ago: executing program 1 (id=6501): socket(0x2a, 0x6, 0xde97) socket$can_bcm(0x1d, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x9, 0x5, 0x0, 0x20, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x9, 0x2, 0x7, 0x8, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x6, 0xfffffffffffffff4, 0x10}, @jmp={0x5, 0x1, 0x3ba60cb969d06e44, 0x7, 0x7, 0xffffffffffffffc0}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xff1, &(0x7f0000002e00)=""/4081, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) pipe(&(0x7f0000000080)) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000) kernel console output (not intermixed with test programs): f_lsm_capable+0x9/0x20 [ 854.056340][T25643] ? security_capable+0x7e/0x2c0 [ 854.056379][T25643] genl_rcv_msg+0x614/0x7a0 [ 854.056417][T25643] ? __pfx_genl_rcv_msg+0x10/0x10 [ 854.056455][T25643] ? __pfx_wg_set_device_doit+0x10/0x10 [ 854.056596][T25643] ? __pfx_ref_tracker_free+0x10/0x10 [ 854.056634][T25643] netlink_rcv_skb+0x226/0x4a0 [ 854.056660][T25643] ? __pfx_genl_rcv_msg+0x10/0x10 [ 854.056693][T25643] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 854.056735][T25643] ? down_read+0x270/0x2e0 [ 854.056761][T25643] ? genl_rcv+0xd/0x40 [ 854.056792][T25643] genl_rcv+0x28/0x40 [ 854.056820][T25643] netlink_unicast+0x7bb/0x940 [ 854.056869][T25643] netlink_sendmsg+0x813/0xb40 [ 854.056906][T25643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.056935][T25643] ? aa_sock_msg_perm+0xf1/0x1b0 [ 854.056970][T25643] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 854.056998][T25643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.057025][T25643] ____sys_sendmsg+0x9b9/0xa20 [ 854.057049][T25643] ? __might_fault+0xaf/0x130 [ 854.057086][T25643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 854.057121][T25643] ? import_iovec+0x73/0xa0 [ 854.057152][T25643] ___sys_sendmsg+0x2a5/0x360 [ 854.057175][T25643] ? __lock_acquire+0x683/0x2cd0 [ 854.057203][T25643] ? __pfx____sys_sendmsg+0x10/0x10 [ 854.057270][T25643] ? __fget_files+0x2a/0x420 [ 854.057296][T25643] ? __fget_files+0x3a2/0x420 [ 854.057336][T25643] __x64_sys_sendmsg+0x1bd/0x2a0 [ 854.057362][T25643] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 854.057398][T25643] ? __pfx_ksys_write+0x10/0x10 [ 854.057440][T25643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.057490][T25643] do_syscall_64+0x174/0x580 [ 854.057514][T25643] ? trace_irq_disable+0x3b/0x140 [ 854.057547][T25643] ? clear_bhb_loop+0x40/0x90 [ 854.057575][T25643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.057597][T25643] RIP: 0033:0x7fa827b9ce59 [ 854.057620][T25643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.057639][T25643] RSP: 002b:00007fa828a13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.057662][T25643] RAX: ffffffffffffffda RBX: 00007fa827e15fa0 RCX: 00007fa827b9ce59 [ 854.057679][T25643] RDX: 0000000020000010 RSI: 0000200000000540 RDI: 0000000000000003 [ 854.057694][T25643] RBP: 00007fa828a13090 R08: 0000000000000000 R09: 0000000000000000 [ 854.057708][T25643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.057721][T25643] R13: 00007fa827e16038 R14: 00007fa827e15fa0 R15: 00007ffdd9f38cb8 [ 854.057759][T25643] [ 854.394520][T25402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 854.396817][ T48] net_ratelimit: 26 callbacks suppressed [ 854.396863][ T48] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 854.443091][ T1353] bond4: (slave bridge9): failed to get link speed/duplex [ 854.551801][ T1175] bond5: (slave bridge14): failed to get link speed/duplex [ 854.563460][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 854.681628][T25655] netlink: 'syz.3.5942': attribute type 21 has an invalid length. [ 854.689623][T25655] netlink: 'syz.3.5942': attribute type 29 has an invalid length. [ 854.739542][T25655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5942'. [ 854.748709][T25655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5942'. [ 854.779864][ T1044] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.784837][T25655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5942'. [ 854.798697][T25655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5942'. [ 854.860492][ T1044] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.900676][ T1044] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.936306][T19252] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 854.965030][ T1044] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.994363][T25664] FAULT_INJECTION: forcing a failure. [ 854.994363][T25664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.054285][T25664] CPU: 0 UID: 0 PID: 25664 Comm: syz.4.5945 Not tainted syzkaller #0 PREEMPT(full) [ 855.054315][T25664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 855.054329][T25664] Call Trace: [ 855.054338][T25664] [ 855.054348][T25664] dump_stack_lvl+0xe8/0x150 [ 855.054378][T25664] should_fail_ex+0x40c/0x560 [ 855.054420][T25664] _copy_to_user+0x31/0xb0 [ 855.054447][T25664] bpf_test_finish+0x53c/0x6b0 [ 855.054479][T25664] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 855.054506][T25664] ? __pfx_bpf_test_finish+0x10/0x10 [ 855.054545][T25664] ? _copy_from_user+0x94/0xb0 [ 855.054570][T25664] ? bpf_test_init+0x113/0x150 [ 855.054595][T25664] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 855.054638][T25664] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 855.054667][T25664] ? __fget_files+0x2a/0x420 [ 855.054700][T25664] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 855.054725][T25664] bpf_prog_test_run+0x2c5/0x340 [ 855.054751][T25664] __sys_bpf+0x643/0x950 [ 855.054791][T25664] ? __pfx___sys_bpf+0x10/0x10 [ 855.054847][T25664] ? ksys_write+0x242/0x270 [ 855.054881][T25664] ? __pfx_ksys_write+0x10/0x10 [ 855.054917][T25664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.054940][T25664] __x64_sys_bpf+0x7c/0x90 [ 855.054971][T25664] do_syscall_64+0x174/0x580 [ 855.054994][T25664] ? trace_irq_disable+0x3b/0x140 [ 855.055025][T25664] ? clear_bhb_loop+0x40/0x90 [ 855.055052][T25664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.055073][T25664] RIP: 0033:0x7f158079ce59 [ 855.055093][T25664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.055111][T25664] RSP: 002b:00007f15815f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 855.055133][T25664] RAX: ffffffffffffffda RBX: 00007f1580a15fa0 RCX: 00007f158079ce59 [ 855.055150][T25664] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 855.055163][T25664] RBP: 00007f15815f1090 R08: 0000000000000000 R09: 0000000000000000 [ 855.055177][T25664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 855.055189][T25664] R13: 00007f1580a16038 R14: 00007f1580a15fa0 R15: 00007ffe68d6a948 [ 855.055223][T25664] [ 855.340730][T25666] bond4: Removing last arp target with arp_interval on [ 855.350861][ T1353] bond4: (slave bridge9): failed to get link speed/duplex [ 855.359928][ T1353] bond5: (slave bridge14): failed to get link speed/duplex [ 855.388376][T25402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.445874][T25402] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.487840][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.495190][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.511442][ T114] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 855.564901][ T13] bond5: (slave bridge14): failed to get link speed/duplex [ 855.645534][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.652878][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.783506][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 856.135731][T25686] netlink: 'syz.0.5953': attribute type 11 has an invalid length. [ 856.432241][T25698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5958'. [ 856.497884][T25697] bond5: Removing last arp target with arp_interval on [ 856.644343][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.656649][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.911483][T25712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5962'. [ 857.115057][T25719] pim6reg1: entered promiscuous mode [ 857.147342][T25719] pim6reg1: entered allmulticast mode [ 857.339023][T25725] netlink: 'syz.0.5965': attribute type 21 has an invalid length. [ 857.368936][T25725] netlink: 'syz.0.5965': attribute type 29 has an invalid length. [ 857.439149][T25725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5965'. [ 857.453413][T25725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5965'. [ 857.498041][T25725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5965'. [ 857.527244][T25725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5965'. [ 857.613531][T25402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.925301][T25736] netlink: 'syz.0.5967': attribute type 1 has an invalid length. [ 857.969460][T25402] veth0_vlan: entered promiscuous mode [ 858.045834][T25402] veth1_vlan: entered promiscuous mode [ 858.226874][T25402] veth0_macvtap: entered promiscuous mode [ 858.296970][T25746] ip6gre1: entered promiscuous mode [ 858.309959][T25741] FAULT_INJECTION: forcing a failure. [ 858.309959][T25741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.324888][T25746] ip6gre1: entered allmulticast mode [ 858.336770][T25741] CPU: 1 UID: 0 PID: 25741 Comm: syz.2.5970 Not tainted syzkaller #0 PREEMPT(full) [ 858.336798][T25741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 858.336813][T25741] Call Trace: [ 858.336822][T25741] [ 858.336832][T25741] dump_stack_lvl+0xe8/0x150 [ 858.336863][T25741] should_fail_ex+0x40c/0x560 [ 858.336905][T25741] _copy_to_user+0x31/0xb0 [ 858.336933][T25741] bpf_test_finish+0x53c/0x6b0 [ 858.336968][T25741] ? __pfx_bpf_test_finish+0x10/0x10 [ 858.337004][T25741] ? _copy_from_user+0x94/0xb0 [ 858.337028][T25741] ? bpf_test_init+0x113/0x150 [ 858.337052][T25741] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 858.337096][T25741] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 858.337125][T25741] ? __fget_files+0x2a/0x420 [ 858.337159][T25741] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 858.337186][T25741] bpf_prog_test_run+0x2c5/0x340 [ 858.337212][T25741] __sys_bpf+0x643/0x950 [ 858.337248][T25741] ? __pfx___sys_bpf+0x10/0x10 [ 858.337298][T25741] ? ksys_write+0x242/0x270 [ 858.337333][T25741] ? __pfx_ksys_write+0x10/0x10 [ 858.337371][T25741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.337395][T25741] __x64_sys_bpf+0x7c/0x90 [ 858.337426][T25741] do_syscall_64+0x174/0x580 [ 858.337450][T25741] ? trace_irq_disable+0x3b/0x140 [ 858.337483][T25741] ? clear_bhb_loop+0x40/0x90 [ 858.337510][T25741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.337532][T25741] RIP: 0033:0x7f528e59ce59 [ 858.337566][T25741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.337585][T25741] RSP: 002b:00007f528f475028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 858.337608][T25741] RAX: ffffffffffffffda RBX: 00007f528e815fa0 RCX: 00007f528e59ce59 [ 858.337624][T25741] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 858.337638][T25741] RBP: 00007f528f475090 R08: 0000000000000000 R09: 0000000000000000 [ 858.337651][T25741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.337664][T25741] R13: 00007f528e816038 R14: 00007f528e815fa0 R15: 00007ffd23b33328 [ 858.337699][T25741] [ 858.362353][T25402] veth1_macvtap: entered promiscuous mode [ 858.743444][T25746] bond2: Removing last arp target with arp_interval on [ 858.782246][ T1175] wlan1: Trigger new scan to find an IBSS to join [ 858.877277][T25402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.915005][T25402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.996062][T19252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.042901][T19252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.080752][T19252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.147528][T19252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.411473][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.439427][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.482669][T19252] net_ratelimit: 48 callbacks suppressed [ 859.482690][T19252] bond5: (slave bridge14): failed to get link speed/duplex [ 859.592158][T19252] bond4: (slave bridge9): failed to get link speed/duplex [ 859.612618][ T114] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 859.655728][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.688276][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.701724][ T114] bond5: (slave bridge14): failed to get link speed/duplex [ 859.762317][ T114] bond4: (slave bridge9): failed to get link speed/duplex [ 859.798580][T25779] netlink: 'syz.0.5981': attribute type 1 has an invalid length. [ 859.942615][ T1175] bond4: (slave bridge9): failed to get link speed/duplex [ 860.001372][ T1175] bond5: (slave bridge14): failed to get link speed/duplex [ 860.129643][T25788] __nla_validate_parse: 5 callbacks suppressed [ 860.129663][T25788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5984'. [ 860.183026][ T1044] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 860.251460][ T201] bond4: (slave bridge9): failed to get link speed/duplex [ 860.293190][ T201] bond5: (slave bridge14): failed to get link speed/duplex [ 860.563190][T25792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5987'. [ 860.778960][T25239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 860.796866][T25239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 860.810298][T25239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 860.823929][T25239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 860.834503][T25239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 860.923745][ T30] audit: type=1804 audit(1781379852.883:2): pid=25801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5988" name="/newroot/533/cgroup.controllers" dev="tmpfs" ino=2717 res=1 errno=0 [ 861.000499][T25807] FAULT_INJECTION: forcing a failure. [ 861.000499][T25807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.027779][ T30] audit: type=1800 audit(1781379852.923:3): pid=25801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5988" name="cgroup.controllers" dev="tmpfs" ino=2717 res=0 errno=0 [ 861.055140][T25801] tipc: Enabling of bearer rejected, already enabled [ 861.056529][T25807] CPU: 0 UID: 0 PID: 25807 Comm: syz.1.5990 Not tainted syzkaller #0 PREEMPT(full) [ 861.056612][T25807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 861.056644][T25807] Call Trace: [ 861.056681][T25807] [ 861.056711][T25807] dump_stack_lvl+0xe8/0x150 [ 861.056824][T25807] should_fail_ex+0x40c/0x560 [ 861.056950][T25807] _copy_from_user+0x2d/0xb0 [ 861.057024][T25807] kstrtouint_from_user+0xd6/0x180 [ 861.057125][T25807] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 861.057265][T25807] proc_fail_nth_write+0x8e/0x210 [ 861.057363][T25807] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 861.057466][T25807] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 861.057541][T25807] vfs_write+0x296/0xba0 [ 861.057658][T25807] ? __pfx_vfs_write+0x10/0x10 [ 861.057751][T25807] ? __fget_files+0x2a/0x420 [ 861.057836][T25807] ? __fget_files+0x3a2/0x420 [ 861.057918][T25807] ? __fget_files+0x2a/0x420 [ 861.058021][T25807] ksys_write+0x150/0x270 [ 861.058135][T25807] ? __pfx_ksys_write+0x10/0x10 [ 861.058300][T25807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.058371][T25807] do_syscall_64+0x174/0x580 [ 861.058423][T25807] ? trace_irq_disable+0x3b/0x140 [ 861.058516][T25807] ? clear_bhb_loop+0x40/0x90 [ 861.058588][T25807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.058649][T25807] RIP: 0033:0x7fc3f815d68e [ 861.058703][T25807] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 861.058763][T25807] RSP: 002b:00007fc3f8f85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 861.058828][T25807] RAX: ffffffffffffffda RBX: 00007fc3f8f866c0 RCX: 00007fc3f815d68e [ 861.058870][T25807] RDX: 0000000000000001 RSI: 00007fc3f8f860a0 RDI: 0000000000000005 [ 861.058911][T25807] RBP: 00007fc3f8f86090 R08: 0000000000000000 R09: 0000000000000000 [ 861.058945][T25807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.058984][T25807] R13: 00007fc3f8416038 R14: 00007fc3f8415fa0 R15: 00007ffd398e8df8 [ 861.059073][T25807] [ 861.595223][T14767] syz_tun (unregistering): left allmulticast mode [ 861.822691][T19252] wlan1: Trigger new scan to find an IBSS to join [ 862.038812][T25831] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.067962][T25831] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.166520][T25832] gre0: left allmulticast mode [ 862.204082][T25832] batadv0: left allmulticast mode [ 862.216176][T25832] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.223492][T25832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.245227][T25832] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.252526][T25832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.425462][T25832] mac80211_hwsim hwsim29 wlan0: left allmulticast mode [ 862.464492][T25832] ip6gre1: left allmulticast mode [ 862.489383][T25832] geneve2: left allmulticast mode [ 862.517432][T25832] ip6gre4: left allmulticast mode [ 862.559967][ T29] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 862.775433][ T1175] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.799469][ T1175] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.857354][T25841] tipc: Enabling of bearer rejected, failed to enable media [ 862.867012][T16159] Bluetooth: hci4: command tx timeout [ 863.114814][ T5777] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 863.196328][ T1175] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.229983][ T1175] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.386200][T25860] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.393847][T25860] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.502436][T25860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.518555][T25860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.662262][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 863.942712][ T1175] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.978356][ T1175] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.042596][ T114] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.066088][ T114] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.103777][ T114] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.117046][T25885] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.6008'. [ 864.142981][ T114] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.304949][T25890] FAULT_INJECTION: forcing a failure. [ 864.304949][T25890] name failslab, interval 1, probability 0, space 0, times 0 [ 864.328020][ T1175] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.340180][ T1175] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.367543][T25890] CPU: 1 UID: 0 PID: 25890 Comm: syz.0.6009 Not tainted syzkaller #0 PREEMPT(full) [ 864.367574][T25890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 864.367588][T25890] Call Trace: [ 864.367597][T25890] [ 864.367608][T25890] dump_stack_lvl+0xe8/0x150 [ 864.367639][T25890] should_fail_ex+0x40c/0x560 [ 864.367681][T25890] should_failslab+0xa8/0x100 [ 864.367719][T25890] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 864.367751][T25890] ? __alloc_skb+0x189/0x7a0 [ 864.367795][T25890] ? __alloc_skb+0x1d7/0x7a0 [ 864.367826][T25890] ? __local_bh_enable_ip+0xd0/0x130 [ 864.367855][T25890] __alloc_skb+0x1d7/0x7a0 [ 864.367894][T25890] netlink_sendmsg+0x5d4/0xb40 [ 864.367930][T25890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.367959][T25890] ? aa_sock_msg_perm+0xf1/0x1b0 [ 864.367995][T25890] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 864.368024][T25890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.368051][T25890] ____sys_sendmsg+0x9b9/0xa20 [ 864.368075][T25890] ? __might_fault+0xaf/0x130 [ 864.368112][T25890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 864.368147][T25890] ? import_iovec+0x73/0xa0 [ 864.368177][T25890] ___sys_sendmsg+0x2a5/0x360 [ 864.368200][T25890] ? __lock_acquire+0x683/0x2cd0 [ 864.368228][T25890] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.368296][T25890] ? __fget_files+0x2a/0x420 [ 864.368323][T25890] ? __fget_files+0x3a2/0x420 [ 864.368363][T25890] __x64_sys_sendmsg+0x1bd/0x2a0 [ 864.368391][T25890] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 864.368425][T25890] ? __pfx_ksys_write+0x10/0x10 [ 864.368468][T25890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.368493][T25890] do_syscall_64+0x174/0x580 [ 864.368517][T25890] ? trace_irq_disable+0x3b/0x140 [ 864.368549][T25890] ? clear_bhb_loop+0x40/0x90 [ 864.368578][T25890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.368600][T25890] RIP: 0033:0x7f53aa79ce59 [ 864.368620][T25890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.368639][T25890] RSP: 002b:00007f53ab6c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.368662][T25890] RAX: ffffffffffffffda RBX: 00007f53aaa15fa0 RCX: 00007f53aa79ce59 [ 864.368679][T25890] RDX: 0000000000004004 RSI: 0000200000000300 RDI: 0000000000000005 [ 864.368694][T25890] RBP: 00007f53ab6c0090 R08: 0000000000000000 R09: 0000000000000000 [ 864.368707][T25890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.368721][T25890] R13: 00007f53aaa16038 R14: 00007f53aaa15fa0 R15: 00007fff9c061378 [ 864.368757][T25890] [ 864.651865][ T1353] net_ratelimit: 29 callbacks suppressed [ 864.651888][ T1353] bond4: (slave bridge9): failed to get link speed/duplex [ 864.718448][ T114] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.753771][ T114] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.765706][ T114] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.774365][ T114] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.783786][ T114] wlan1: Trigger new scan to find an IBSS to join [ 864.792709][T25896] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.6010'. [ 864.834341][ T201] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 864.902184][T19252] bond4: (slave bridge9): failed to get link speed/duplex [ 864.943237][T16159] Bluetooth: hci4: command tx timeout [ 865.424111][ T1353] bond5: (slave bridge14): failed to get link speed/duplex [ 865.480372][ T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 865.664932][ T1353] bond4: (slave bridge9): failed to get link speed/duplex [ 865.743760][ T1353] bond5: (slave bridge14): failed to get link speed/duplex [ 865.769479][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.823094][ T1175] bridge_slave_1: left promiscuous mode [ 865.832391][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.865081][ T1175] bridge_slave_0: left allmulticast mode [ 865.871083][ T1175] bridge_slave_0: left promiscuous mode [ 865.877648][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.052348][ T1044] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 866.591679][ T1044] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 867.022821][T16159] Bluetooth: hci4: command tx timeout [ 867.111687][T19252] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 867.929676][T25928] FAULT_INJECTION: forcing a failure. [ 867.929676][T25928] name failslab, interval 1, probability 0, space 0, times 0 [ 867.943958][T25928] CPU: 0 UID: 0 PID: 25928 Comm: syz.4.6021 Not tainted syzkaller #0 PREEMPT(full) [ 867.943997][T25928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 867.944012][T25928] Call Trace: [ 867.944021][T25928] [ 867.944031][T25928] dump_stack_lvl+0xe8/0x150 [ 867.944063][T25928] should_fail_ex+0x40c/0x560 [ 867.944108][T25928] should_failslab+0xa8/0x100 [ 867.944147][T25928] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 867.944180][T25928] ? __alloc_skb+0x1d7/0x7a0 [ 867.944213][T25928] ? __local_bh_enable_ip+0xd0/0x130 [ 867.944242][T25928] __alloc_skb+0x1d7/0x7a0 [ 867.944281][T25928] netlink_ack+0x136/0xb30 [ 867.944302][T25928] ? __pfx_genl_rcv_msg+0x10/0x10 [ 867.944351][T25928] netlink_rcv_skb+0x2a4/0x4a0 [ 867.944377][T25928] ? __pfx_genl_rcv_msg+0x10/0x10 [ 867.944410][T25928] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 867.944453][T25928] ? down_read+0x270/0x2e0 [ 867.944480][T25928] ? genl_rcv+0xd/0x40 [ 867.944512][T25928] genl_rcv+0x28/0x40 [ 867.944539][T25928] netlink_unicast+0x7bb/0x940 [ 867.944586][T25928] netlink_sendmsg+0x813/0xb40 [ 867.944622][T25928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.944652][T25928] ? aa_sock_msg_perm+0xf1/0x1b0 [ 867.944687][T25928] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 867.944717][T25928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.944745][T25928] ____sys_sendmsg+0x9b9/0xa20 [ 867.944769][T25928] ? __might_fault+0xaf/0x130 [ 867.944805][T25928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 867.944840][T25928] ? import_iovec+0x73/0xa0 [ 867.944871][T25928] ___sys_sendmsg+0x2a5/0x360 [ 867.944893][T25928] ? __lock_acquire+0x683/0x2cd0 [ 867.944922][T25928] ? __pfx____sys_sendmsg+0x10/0x10 [ 867.944995][T25928] ? __fget_files+0x2a/0x420 [ 867.945024][T25928] ? __fget_files+0x3a2/0x420 [ 867.945064][T25928] __x64_sys_sendmsg+0x1bd/0x2a0 [ 867.945092][T25928] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 867.945127][T25928] ? __pfx_ksys_write+0x10/0x10 [ 867.945171][T25928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.945196][T25928] do_syscall_64+0x174/0x580 [ 867.945220][T25928] ? trace_irq_disable+0x3b/0x140 [ 867.945253][T25928] ? clear_bhb_loop+0x40/0x90 [ 867.945282][T25928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.945304][T25928] RIP: 0033:0x7f158079ce59 [ 867.945325][T25928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.945344][T25928] RSP: 002b:00007f15815f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.945368][T25928] RAX: ffffffffffffffda RBX: 00007f1580a15fa0 RCX: 00007f158079ce59 [ 867.945385][T25928] RDX: 0000000000044042 RSI: 0000200000000180 RDI: 0000000000000003 [ 867.945399][T25928] RBP: 00007f15815f1090 R08: 0000000000000000 R09: 0000000000000000 [ 867.945414][T25928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.945427][T25928] R13: 00007f1580a16038 R14: 00007f1580a15fa0 R15: 00007ffe68d6a948 [ 867.945476][T25928] [ 868.335160][ T1175] bond5 (unregistering): (slave bridge14): Removing an active aggregator [ 868.347982][ T1175] bond5 (unregistering): (slave bridge14): Releasing backup interface [ 868.477557][T25933] netlink: 'syz.4.6023': attribute type 3 has an invalid length. [ 868.492318][T25933] netlink: 'syz.4.6023': attribute type 1 has an invalid length. [ 868.500873][T25933] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6023'. [ 868.548501][ T1175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.559934][ T1175] bond0 (unregistering): Released all slaves [ 868.582571][ T1175] bond1 (unregistering): Released all slaves [ 868.603999][ T1175] bond2 (unregistering): Released all slaves [ 868.625189][ T1175] bond3 (unregistering): Released all slaves [ 868.668879][ T1175] bond4 (unregistering): Released all slaves [ 868.716807][ T1175] bond5 (unregistering): Released all slaves [ 868.766746][ T1175] bond6 (unregistering): (slave veth3): Releasing active interface [ 868.795273][ T1175] bond6 (unregistering): (slave veth5): Releasing active interface [ 868.817930][ T1175] bond6 (unregistering): Released all slaves [ 868.850370][ T1175] bond7 (unregistering): Released all slaves [ 868.860102][T25938] Bluetooth: MGMT ver 1.23 [ 868.900594][ T1175] bond8 (unregistering): Released all slaves [ 868.932985][ T1175] bond9 (unregistering): Released all slaves [ 868.972159][ T1175] bond10 (unregistering): Released all slaves [ 869.112798][T16159] Bluetooth: hci4: command tx timeout [ 869.392693][T25949] FAULT_INJECTION: forcing a failure. [ 869.392693][T25949] name failslab, interval 1, probability 0, space 0, times 0 [ 869.470527][T25949] CPU: 1 UID: 0 PID: 25949 Comm: syz.3.6026 Not tainted syzkaller #0 PREEMPT(full) [ 869.470560][T25949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 869.470576][T25949] Call Trace: [ 869.470587][T25949] [ 869.470598][T25949] dump_stack_lvl+0xe8/0x150 [ 869.470632][T25949] should_fail_ex+0x40c/0x560 [ 869.470678][T25949] should_failslab+0xa8/0x100 [ 869.470720][T25949] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 869.470755][T25949] ? __alloc_skb+0x189/0x7a0 [ 869.470791][T25949] ? __alloc_skb+0x1d7/0x7a0 [ 869.470826][T25949] ? __local_bh_enable_ip+0xd0/0x130 [ 869.470858][T25949] __alloc_skb+0x1d7/0x7a0 [ 869.470899][T25949] netlink_sendmsg+0x5d4/0xb40 [ 869.470941][T25949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.470974][T25949] ? aa_sock_msg_perm+0xf1/0x1b0 [ 869.471014][T25949] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 869.471045][T25949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.471075][T25949] ____sys_sendmsg+0x9b9/0xa20 [ 869.471102][T25949] ? __might_fault+0xaf/0x130 [ 869.471141][T25949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 869.471190][T25949] ? import_iovec+0x73/0xa0 [ 869.471223][T25949] ___sys_sendmsg+0x2a5/0x360 [ 869.471254][T25949] ? __lock_acquire+0x683/0x2cd0 [ 869.471286][T25949] ? __pfx____sys_sendmsg+0x10/0x10 [ 869.471358][T25949] ? __fget_files+0x2a/0x420 [ 869.471387][T25949] ? __fget_files+0x3a2/0x420 [ 869.471431][T25949] __x64_sys_sendmsg+0x1bd/0x2a0 [ 869.471461][T25949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 869.471499][T25949] ? __pfx_ksys_write+0x10/0x10 [ 869.471546][T25949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.471574][T25949] do_syscall_64+0x174/0x580 [ 869.471600][T25949] ? trace_irq_disable+0x3b/0x140 [ 869.471637][T25949] ? clear_bhb_loop+0x40/0x90 [ 869.471668][T25949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.471694][T25949] RIP: 0033:0x7fa827b9ce59 [ 869.471717][T25949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.471739][T25949] RSP: 002b:00007fa828a13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.471764][T25949] RAX: ffffffffffffffda RBX: 00007fa827e15fa0 RCX: 00007fa827b9ce59 [ 869.471783][T25949] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 869.471799][T25949] RBP: 00007fa828a13090 R08: 0000000000000000 R09: 0000000000000000 [ 869.471815][T25949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.471830][T25949] R13: 00007fa827e16038 R14: 00007fa827e15fa0 R15: 00007ffdd9f38cb8 [ 869.471868][T25949] [ 869.794155][ T1353] net_ratelimit: 6 callbacks suppressed [ 869.794177][ T1353] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 869.910823][T25946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.063718][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.125684][T25946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.138041][T25946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.217306][T25946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 870.252404][T25946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 870.280633][T25974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6030'. [ 870.310004][T25946] veth1_vlan: left promiscuous mode [ 870.332580][T25946] veth0_vlan: left promiscuous mode [ 870.343780][ T13] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 870.374109][T25946] veth0_vlan: entered promiscuous mode [ 870.427517][T25946] veth1_vlan: entered promiscuous mode [ 870.470884][T25946] veth1_macvtap: left promiscuous mode [ 870.510641][T25946] veth0_macvtap: left promiscuous mode [ 870.540564][T25946] veth0_macvtap: entered promiscuous mode [ 870.559235][T25946] veth1_macvtap: entered promiscuous mode [ 870.634361][T25946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 870.670621][T25946] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 870.696304][ T1175] tipc: Left network mode [ 870.728190][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.735443][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.770342][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.777717][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.914285][ T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 870.950394][T25985] netlink: 'syz.0.6031': attribute type 3 has an invalid length. [ 870.973034][T25985] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6031'. [ 871.035336][ T114] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.046750][ T114] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.218553][ T114] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.252283][ T13] bond4: (slave bridge9): failed to get link speed/duplex [ 871.519218][ T13] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 871.555868][ T114] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.674138][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 871.947643][T25800] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.971820][T25800] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.007702][T25800] bridge_slave_0: entered allmulticast mode [ 872.034325][T25800] bridge_slave_0: entered promiscuous mode [ 872.106836][T19252] bond4: (slave bridge9): failed to get link speed/duplex [ 872.116601][ T114] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 872.146455][T25800] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.180984][T25800] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.218523][T25800] bridge_slave_1: entered allmulticast mode [ 872.239568][T25800] bridge_slave_1: entered promiscuous mode [ 872.673213][ T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 872.708844][T26026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6042'. [ 872.740882][T26029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6043'. [ 872.758242][T26027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6042'. [ 872.804647][T25800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.832789][ T13] bond4: (slave bridge9): failed to get link speed/duplex [ 873.002450][T25800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.014473][T26038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6045'. [ 873.697655][T25800] team0: Port device team_slave_0 added [ 873.838896][T25800] team0: Port device team_slave_1 added [ 874.052391][T26072] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.6054'. [ 874.150321][T25800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.181058][T25800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.275399][T25800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.292033][T25800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.299182][T25800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.349975][T25800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.492277][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 874.554345][ T1175] hsr_slave_0: left promiscuous mode [ 874.562349][ T1175] hsr_slave_1: left promiscuous mode [ 874.602457][ T1175] veth0_macvtap: left promiscuous mode [ 874.623580][ T1175] veth1_vlan: left promiscuous mode [ 874.640113][ T1175] veth0_vlan: left promiscuous mode [ 874.887092][T26086] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6057'. [ 875.281494][ T114] net_ratelimit: 6 callbacks suppressed [ 875.281518][ T114] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 875.503135][ T1175] team0 (unregistering): Port device veth1_to_hsr removed [ 875.604975][ T1175] team0 (unregistering): Port device team_slave_1 removed [ 875.627511][ T1175] team0 (unregistering): Port device team_slave_0 removed [ 875.841784][T19252] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 876.175538][T25800] hsr_slave_0: entered promiscuous mode [ 876.212866][T25800] hsr_slave_1: entered promiscuous mode [ 876.245153][T25800] debugfs: 'hsr0' already exists in 'hsr' [ 876.274286][T25800] Cannot create hsr debugfs directory [ 876.342779][ T12] bond4: (slave bridge9): failed to get link speed/duplex [ 876.353124][T26112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6065'. [ 876.362326][ T114] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 876.537087][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 876.858788][T26105] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.866578][T26105] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.923880][ T48] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 877.323626][T26105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.371138][T26105] batadv_slave_1: left promiscuous mode [ 877.462402][ T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 877.765770][T26105] ip6gre1: left promiscuous mode [ 877.770901][T26105] ip6gre1: left allmulticast mode [ 877.808997][T26117] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 877.840436][T26106] syzkaller1: entered promiscuous mode [ 877.859988][T26106] syzkaller1: entered allmulticast mode [ 877.912271][T10674] bond4: (slave bridge9): failed to get link speed/duplex [ 878.021837][ T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 878.100065][T19252] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.130777][T19252] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.166721][T19252] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.198289][T19252] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.306690][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 878.453414][ T5291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 878.473727][T19252] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.509199][T19252] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.546325][T19252] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.577438][T19252] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.634907][ T1175] IPVS: stop unused estimator thread 0... [ 880.578081][T26200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6082'. [ 880.634372][T19252] net_ratelimit: 8 callbacks suppressed [ 880.634392][T19252] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 881.042276][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 881.186407][ T201] bond4: (slave bridge9): failed to get link speed/duplex [ 881.209604][ T13] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 881.523318][ T12] bond4: (slave bridge9): failed to get link speed/duplex [ 881.650400][T26229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6087'. [ 881.672477][T19252] bond4: (slave bridge9): failed to get link speed/duplex [ 881.803826][ T1044] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 881.952633][T10674] bond4: (slave bridge9): failed to get link speed/duplex [ 882.268907][T25800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 882.303338][T25800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 882.344377][T10674] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 882.359645][T26251] xt_hashlimit: size too large, truncated to 1048576 [ 882.409479][T25800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 882.465902][T25800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 882.490774][T25800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 882.518996][T25800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 882.744274][T25800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 882.792608][T25800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 882.832232][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 883.340030][T25800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.468913][T25800] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.521203][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.528476][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.598039][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.605278][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.727943][T26290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6099'. [ 883.773951][T26290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6099'. [ 884.119395][T26302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 884.165947][T26302] batadv_slave_1: entered promiscuous mode [ 884.629585][T26318] FAULT_INJECTION: forcing a failure. [ 884.629585][T26318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.680770][T26318] CPU: 1 UID: 0 PID: 26318 Comm: syz.3.6103 Not tainted syzkaller #0 PREEMPT(full) [ 884.680800][T26318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 884.680813][T26318] Call Trace: [ 884.680821][T26318] [ 884.680830][T26318] dump_stack_lvl+0xe8/0x150 [ 884.680861][T26318] should_fail_ex+0x40c/0x560 [ 884.680900][T26318] _copy_from_iter+0x1d3/0x1660 [ 884.680925][T26318] ? rcu_is_watching+0x15/0xb0 [ 884.680954][T26318] ? __pfx__copy_from_iter+0x10/0x10 [ 884.680973][T26318] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 884.681016][T26318] ? netlink_sendmsg+0x650/0xb40 [ 884.681041][T26318] ? skb_put+0x112/0x210 [ 884.681066][T26318] netlink_sendmsg+0x6c0/0xb40 [ 884.681101][T26318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 884.681131][T26318] ? aa_sock_msg_perm+0xf1/0x1b0 [ 884.681166][T26318] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 884.681194][T26318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 884.681222][T26318] ____sys_sendmsg+0x9b9/0xa20 [ 884.681247][T26318] ? __might_fault+0xaf/0x130 [ 884.681282][T26318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 884.681315][T26318] ? import_iovec+0x73/0xa0 [ 884.681344][T26318] ___sys_sendmsg+0x2a5/0x360 [ 884.681366][T26318] ? __lock_acquire+0x683/0x2cd0 [ 884.681394][T26318] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.681457][T26318] ? __fget_files+0x2a/0x420 [ 884.681483][T26318] ? __fget_files+0x3a2/0x420 [ 884.681523][T26318] __x64_sys_sendmsg+0x1bd/0x2a0 [ 884.681551][T26318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 884.681586][T26318] ? __pfx_ksys_write+0x10/0x10 [ 884.681637][T26318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.681662][T26318] do_syscall_64+0x174/0x580 [ 884.681686][T26318] ? trace_irq_disable+0x3b/0x140 [ 884.681719][T26318] ? clear_bhb_loop+0x40/0x90 [ 884.681747][T26318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.681770][T26318] RIP: 0033:0x7fa827b9ce59 [ 884.681791][T26318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.681811][T26318] RSP: 002b:00007fa828a13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.681835][T26318] RAX: ffffffffffffffda RBX: 00007fa827e15fa0 RCX: 00007fa827b9ce59 [ 884.681852][T26318] RDX: 0000000004040004 RSI: 0000200000001080 RDI: 0000000000000005 [ 884.681867][T26318] RBP: 00007fa828a13090 R08: 0000000000000000 R09: 0000000000000000 [ 884.681882][T26318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.681895][T26318] R13: 00007fa827e16038 R14: 00007fa827e15fa0 R15: 00007ffdd9f38cb8 [ 884.681932][T26318] [ 885.742732][ T201] net_ratelimit: 21 callbacks suppressed [ 885.742756][ T201] bond4: (slave bridge9): failed to get link speed/duplex [ 885.804959][T26345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6110'. [ 885.927345][T26345] bond4: entered promiscuous mode [ 885.933367][T26345] 8021q: adding VLAN 0 to HW filter on device bond4 [ 885.996522][T26350] 8021q: adding VLAN 0 to HW filter on device bond4 [ 886.004389][T19252] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 886.025246][T26350] bond4: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 886.044797][T26350] bond4: (slave ip6gre3): Error -95 calling set_mac_address [ 886.194471][T25800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.285344][T26357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6112'. [ 886.341596][T19252] bond4: (slave bridge9): failed to get link speed/duplex [ 886.402263][T26357] netlink: 'syz.1.6112': attribute type 1 has an invalid length. [ 886.623779][ T201] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 886.648375][T25800] veth0_vlan: entered promiscuous mode [ 886.722560][T19252] bond4: (slave bridge9): failed to get link speed/duplex [ 886.789514][T25800] veth1_vlan: entered promiscuous mode [ 886.872695][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 887.019452][T26376] team0: Device xfrm0 is of different type [ 887.135116][T19252] bond4: (slave bridge9): failed to get link speed/duplex [ 887.166738][T25800] veth0_macvtap: entered promiscuous mode [ 887.192849][T10674] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 887.247128][T25800] veth1_macvtap: entered promiscuous mode [ 887.322367][ T12] bond4: (slave bridge9): failed to get link speed/duplex [ 887.417203][T25800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.438203][T26389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6119'. [ 887.485063][T25800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.598860][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.644171][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.694753][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.754726][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.774116][ T58] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 887.998526][T26412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6122'. [ 888.205859][T26412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6122'. [ 888.455380][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.518196][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.602461][T26417] IPVS: persistence engine module ip_vs_pe_À not found [ 888.677094][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.687471][T26434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6127'. [ 888.697267][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.793962][T26434] netlink: 'syz.1.6127': attribute type 1 has an invalid length. [ 889.366931][T26456] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6131'. [ 889.386269][T26456] netlink: 'syz.1.6131': attribute type 9 has an invalid length. [ 889.403233][T26456] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6131'. [ 889.438223][T26456] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6131'. [ 889.823802][T26472] netlink: 'syz.4.6136': attribute type 13 has an invalid length. [ 890.415994][T26488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6140'. [ 890.454309][T26491] netlink: 'syz.0.6141': attribute type 1 has an invalid length. [ 890.530220][T26492] Can't find ip_set type hash:ip,por [ 890.808899][T26499] netlink: 'syz.3.6143': attribute type 1 has an invalid length. [ 890.842875][ T36] net_ratelimit: 27 callbacks suppressed [ 890.842897][ T36] bond4: (slave bridge9): failed to get link speed/duplex [ 890.868168][T26499] __nla_validate_parse: 8 callbacks suppressed [ 890.868188][T26499] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6143'. [ 890.955293][T26499] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6143'. [ 890.991400][ T1353] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 891.035098][ T36] bond4: (slave bridge9): failed to get link speed/duplex [ 891.058438][T26508] netlink: 'syz.1.6147': attribute type 7 has an invalid length. [ 891.120849][T26508] x_tables: duplicate entry at hook 1 [ 891.192561][ T1353] bond4: (slave bridge9): failed to get link speed/duplex [ 891.292823][T26518] FAULT_INJECTION: forcing a failure. [ 891.292823][T26518] name failslab, interval 1, probability 0, space 0, times 0 [ 891.307042][T26518] CPU: 1 UID: 0 PID: 26518 Comm: syz.4.6151 Not tainted syzkaller #0 PREEMPT(full) [ 891.307073][T26518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 891.307087][T26518] Call Trace: [ 891.307097][T26518] [ 891.307106][T26518] dump_stack_lvl+0xe8/0x150 [ 891.307137][T26518] should_fail_ex+0x40c/0x560 [ 891.307179][T26518] should_failslab+0xa8/0x100 [ 891.307217][T26518] __kmalloc_cache_noprof+0x88/0x660 [ 891.307249][T26518] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 891.307369][T26518] ? sctp_add_bind_addr+0x8c/0x370 [ 891.307416][T26518] sctp_add_bind_addr+0x8c/0x370 [ 891.307456][T26518] sctp_copy_local_addr_list+0x31a/0x4e0 [ 891.307494][T26518] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 891.307530][T26518] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 891.307569][T26518] ? sctp_v4_is_any+0x35/0x60 [ 891.307589][T26518] ? sctp_copy_one_addr+0x93/0x360 [ 891.307630][T26518] sctp_bind_addr_copy+0xb3/0x3c0 [ 891.307665][T26518] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 891.307700][T26518] sctp_connect_new_asoc+0x2ff/0x6b0 [ 891.307729][T26518] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 891.307763][T26518] ? __local_bh_enable_ip+0xd0/0x130 [ 891.307784][T26518] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 891.307815][T26518] ? security_sctp_bind_connect+0x7e/0x2c0 [ 891.307846][T26518] sctp_sendmsg+0x159b/0x2d00 [ 891.307887][T26518] ? __pfx_sctp_sendmsg+0x10/0x10 [ 891.307915][T26518] ? aa_sk_perm+0x6d5/0x900 [ 891.307954][T26518] ? __pfx_aa_sk_perm+0x10/0x10 [ 891.307988][T26518] ? sock_rps_record_flow+0x19/0x350 [ 891.308022][T26518] ? inet_sendmsg+0x298/0x320 [ 891.308053][T26518] ? __pfx_inet_sendmsg+0x10/0x10 [ 891.308087][T26518] ____sys_sendmsg+0x853/0xa20 [ 891.308122][T26518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 891.308156][T26518] ? import_iovec+0x73/0xa0 [ 891.308185][T26518] ___sys_sendmsg+0x2a5/0x360 [ 891.308207][T26518] ? __lock_acquire+0x683/0x2cd0 [ 891.308236][T26518] ? __pfx____sys_sendmsg+0x10/0x10 [ 891.308266][T26518] ? kstrtouint+0x6e/0xe0 [ 891.308329][T26518] ? __fget_files+0x2a/0x420 [ 891.308355][T26518] ? __fget_files+0x3a2/0x420 [ 891.308402][T26518] __sys_sendmmsg+0x27c/0x4e0 [ 891.308433][T26518] ? __pfx___sys_sendmmsg+0x10/0x10 [ 891.308455][T26518] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 891.308510][T26518] ? ksys_write+0x242/0x270 [ 891.308546][T26518] ? __pfx_ksys_write+0x10/0x10 [ 891.308584][T26518] __x64_sys_sendmmsg+0xa0/0xc0 [ 891.308609][T26518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.308632][T26518] do_syscall_64+0x174/0x580 [ 891.308655][T26518] ? trace_irq_disable+0x3b/0x140 [ 891.308687][T26518] ? clear_bhb_loop+0x40/0x90 [ 891.308714][T26518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.308736][T26518] RIP: 0033:0x7f158079ce59 [ 891.308757][T26518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.308776][T26518] RSP: 002b:00007f15815f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 891.308799][T26518] RAX: ffffffffffffffda RBX: 00007f1580a15fa0 RCX: 00007f158079ce59 [ 891.308815][T26518] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000005 [ 891.308831][T26518] RBP: 00007f15815f1090 R08: 0000000000000000 R09: 0000000000000000 [ 891.308844][T26518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 891.308857][T26518] R13: 00007f1580a16038 R14: 00007f1580a15fa0 R15: 00007ffe68d6a948 [ 891.308895][T26518] [ 891.652319][T26519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6150'. [ 891.745778][T26512] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 891.778454][ T13] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 891.856304][T26512] bond1 (unregistering): Released all slaves [ 892.057217][T26519] bond1: option ad_actor_sys_prio: invalid value (0) [ 892.068193][T26519] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 892.085565][T26519] bond1 (unregistering): Released all slaves [ 892.174712][T26532] mac80211_hwsim hwsim31 syzkaller0: Caught tx_queue_len zero misconfig [ 892.222715][ T12] bond4: (slave bridge9): failed to get link speed/duplex [ 892.256260][T26534] FAULT_INJECTION: forcing a failure. [ 892.256260][T26534] name failslab, interval 1, probability 0, space 0, times 0 [ 892.287279][T26534] CPU: 0 UID: 0 PID: 26534 Comm: syz.1.6155 Not tainted syzkaller #0 PREEMPT(full) [ 892.287311][T26534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 892.287325][T26534] Call Trace: [ 892.287334][T26534] [ 892.287344][T26534] dump_stack_lvl+0xe8/0x150 [ 892.287374][T26534] should_fail_ex+0x40c/0x560 [ 892.287416][T26534] should_failslab+0xa8/0x100 [ 892.287451][T26534] ? skb_clone+0x212/0x3a0 [ 892.287477][T26534] kmem_cache_alloc_noprof+0x87/0x650 [ 892.287517][T26534] skb_clone+0x212/0x3a0 [ 892.287547][T26534] __netlink_deliver_tap+0x413/0x860 [ 892.287586][T26534] ? netlink_deliver_tap+0x2e/0x1b0 [ 892.287613][T26534] netlink_deliver_tap+0x19c/0x1b0 [ 892.287639][T26534] netlink_sendskb+0x68/0x140 [ 892.287678][T26534] ctrl_getfamily+0x4c8/0x5c0 [ 892.287710][T26534] ? __pfx_ctrl_getfamily+0x10/0x10 [ 892.287742][T26534] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 892.287783][T26534] genl_family_rcv_msg_doit+0x233/0x340 [ 892.287831][T26534] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 892.287876][T26534] ? __dev_queue_xmit+0x29b/0x37f0 [ 892.287915][T26534] genl_rcv_msg+0x614/0x7a0 [ 892.287953][T26534] ? __pfx_genl_rcv_msg+0x10/0x10 [ 892.287983][T26534] ? __pfx_ctrl_getfamily+0x10/0x10 [ 892.288013][T26534] ? __pfx_ref_tracker_free+0x10/0x10 [ 892.288051][T26534] netlink_rcv_skb+0x226/0x4a0 [ 892.288076][T26534] ? __pfx_genl_rcv_msg+0x10/0x10 [ 892.288109][T26534] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 892.288152][T26534] ? down_read+0x270/0x2e0 [ 892.288178][T26534] ? genl_rcv+0xd/0x40 [ 892.288210][T26534] genl_rcv+0x28/0x40 [ 892.288237][T26534] netlink_unicast+0x7bb/0x940 [ 892.288285][T26534] netlink_sendmsg+0x813/0xb40 [ 892.288326][T26534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.288355][T26534] ? aa_sock_msg_perm+0xf1/0x1b0 [ 892.288391][T26534] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 892.288420][T26534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.288447][T26534] __sys_sendto+0x672/0x710 [ 892.288486][T26534] ? __pfx___sys_sendto+0x10/0x10 [ 892.288551][T26534] ? exc_page_fault+0x6a/0xc0 [ 892.288580][T26534] ? do_user_addr_fault+0xc4a/0x1340 [ 892.288609][T26534] __x64_sys_sendto+0xde/0x100 [ 892.288646][T26534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.288671][T26534] do_syscall_64+0x174/0x580 [ 892.288695][T26534] ? trace_irq_disable+0x3b/0x140 [ 892.288727][T26534] ? clear_bhb_loop+0x40/0x90 [ 892.288755][T26534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.288778][T26534] RIP: 0033:0x7fc3f815d68e [ 892.288800][T26534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 892.288828][T26534] RSP: 002b:00007fc3f8f84e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 892.288851][T26534] RAX: ffffffffffffffda RBX: 00007fc3f8f866c0 RCX: 00007fc3f815d68e [ 892.288867][T26534] RDX: 0000000000000020 RSI: 00007fc3f8f85000 RDI: 0000000000000003 [ 892.288881][T26534] RBP: 0000000000000000 R08: 00007fc3f8f84f04 R09: 000000000000000c [ 892.288894][T26534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 892.288907][T26534] R13: 00007fc3f8f84f58 R14: 00007fc3f8f85000 R15: 0000000000000000 [ 892.288944][T26534] [ 892.602776][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 892.637579][ T36] bond4: (slave bridge9): failed to get link speed/duplex [ 892.728065][T26536] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6156'. [ 893.062129][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 893.085307][T26548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6159'. [ 893.121869][ T1044] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 893.131675][T26548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6159'. [ 893.158562][T26548] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6159'. [ 893.229000][T26551] batadv0: Caught tx_queue_len zero misconfig [ 893.264545][T26553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6159'. [ 893.316195][T26557] netlink: 'syz.0.6164': attribute type 10 has an invalid length. [ 893.485888][T26557] geneve0: entered promiscuous mode [ 893.525539][T26564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6164'. [ 893.597891][T26557] geneve0: left promiscuous mode [ 893.710634][T26570] netlink: 'syz.2.6168': attribute type 3 has an invalid length. [ 893.723324][T26569] netlink: 'syz.1.6170': attribute type 11 has an invalid length. [ 893.735528][T26572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6169'. [ 893.762752][ T5777] IPVS: starting estimator thread 0... [ 893.775341][T26570] netlink: 'syz.2.6168': attribute type 1 has an invalid length. [ 893.871686][T26573] IPVS: using max 32 ests per chain, 76800 per kthread [ 894.555349][T26600] netlink: 'syz.3.6176': attribute type 1 has an invalid length. [ 895.202746][T26617] FAULT_INJECTION: forcing a failure. [ 895.202746][T26617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.233681][T26617] CPU: 0 UID: 0 PID: 26617 Comm: syz.0.6183 Not tainted syzkaller #0 PREEMPT(full) [ 895.233727][T26617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 895.233747][T26617] Call Trace: [ 895.233756][T26617] [ 895.233766][T26617] dump_stack_lvl+0xe8/0x150 [ 895.233797][T26617] should_fail_ex+0x40c/0x560 [ 895.233840][T26617] _copy_to_user+0x31/0xb0 [ 895.233870][T26617] simple_read_from_buffer+0xe1/0x170 [ 895.233904][T26617] proc_fail_nth_read+0x1bb/0x230 [ 895.233937][T26617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 895.233970][T26617] ? rw_verify_area+0x24a/0x4c0 [ 895.234000][T26617] ? __fget_files+0x2a/0x420 [ 895.234029][T26617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 895.234057][T26617] vfs_read+0x213/0xa80 [ 895.234105][T26617] ? __pfx___mutex_lock+0x10/0x10 [ 895.234133][T26617] ? __pfx_vfs_read+0x10/0x10 [ 895.234171][T26617] ? __fget_files+0x2a/0x420 [ 895.234203][T26617] ? __fget_files+0x3a2/0x420 [ 895.234230][T26617] ? __fget_files+0x2a/0x420 [ 895.234268][T26617] ksys_read+0x150/0x270 [ 895.234301][T26617] ? __pfx_ksys_read+0x10/0x10 [ 895.234342][T26617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.234366][T26617] do_syscall_64+0x174/0x580 [ 895.234389][T26617] ? trace_irq_disable+0x3b/0x140 [ 895.234421][T26617] ? clear_bhb_loop+0x40/0x90 [ 895.234448][T26617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.234470][T26617] RIP: 0033:0x7f53aa75d68e [ 895.234491][T26617] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 895.234510][T26617] RSP: 002b:00007f53ab6bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 895.234532][T26617] RAX: ffffffffffffffda RBX: 00007f53ab6c06c0 RCX: 00007f53aa75d68e [ 895.234549][T26617] RDX: 000000000000000f RSI: 00007f53ab6c00a0 RDI: 0000000000000005 [ 895.234563][T26617] RBP: 00007f53ab6c0090 R08: 0000000000000000 R09: 0000000000000000 [ 895.234577][T26617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 895.234590][T26617] R13: 00007f53aaa16038 R14: 00007f53aaa15fa0 R15: 00007fff9c061378 [ 895.234627][T26617] [ 895.788176][T26633] netlink: 'syz.0.6188': attribute type 3 has an invalid length. [ 895.796256][T26633] netlink: 'syz.0.6188': attribute type 1 has an invalid length. [ 895.911174][T26631] rdma_rxe: rxe_newlink: failed to add bond0 [ 895.931630][T24579] net_ratelimit: 25 callbacks suppressed [ 895.931655][T24579] bond4: (slave bridge9): failed to get link speed/duplex [ 896.122583][ T1353] bond4: (slave bridge9): failed to get link speed/duplex [ 896.139412][T26638] can: request_module (can-proto-0) failed. [ 896.184310][T26641] netlink: 'syz.4.6189': attribute type 1 has an invalid length. [ 896.272725][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 896.293687][ T12] bond4: (slave bridge9): failed to get link speed/duplex [ 896.434013][ T36] bond4: (slave bridge9): failed to get link speed/duplex [ 896.567326][ T36] bond4: (slave bridge9): failed to get link speed/duplex [ 896.633302][T26660] netlink: 'syz.2.6194': attribute type 11 has an invalid length. [ 896.702880][ T13] bond4: (slave bridge9): failed to get link speed/duplex [ 896.832851][ T13] bond4: (slave bridge9): failed to get link speed/duplex [ 896.842278][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 896.982170][ T36] bond4: (slave bridge9): failed to get link speed/duplex [ 897.198597][T26679] __nla_validate_parse: 4 callbacks suppressed [ 897.198617][T26679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6199'. [ 897.272866][T26681] tipc: Enabling of bearer rejected, media not registered [ 897.667905][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 897.687636][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 897.703306][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 897.715714][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 897.730259][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 898.223776][ T1175] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 898.249607][T15794] syz_tun (unregistering): left allmulticast mode [ 898.292334][T26706] netlink: 'syz.3.6207': attribute type 3 has an invalid length. [ 898.334501][T26706] netlink: 'syz.3.6207': attribute type 1 has an invalid length. [ 898.373883][T26706] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6207'. [ 898.427176][T26714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6209'. [ 898.460811][T26716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6208'. [ 899.130983][T26737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6213'. [ 899.382558][T26742] xt_connbytes: Forcing CT accounting to be enabled [ 899.419302][T26745] ieee802154 phy0 wpan0: encryption failed: -22 [ 899.694220][T26756] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6217'. [ 899.822942][ T5640] Bluetooth: hci5: command tx timeout [ 900.026128][T26769] netlink: 'syz.2.6223': attribute type 3 has an invalid length. [ 900.052654][T26769] netlink: 'syz.2.6223': attribute type 1 has an invalid length. [ 900.072822][T26769] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6223'. [ 900.690739][T26794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6227'. [ 900.715460][T26785] syzkaller1: entered promiscuous mode [ 900.743453][T26785] syzkaller1: entered allmulticast mode [ 900.769406][T26796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6226'. [ 900.942318][ T1353] net_ratelimit: 30 callbacks suppressed [ 900.942338][ T1353] bond4: (slave bridge9): failed to get link speed/duplex [ 900.973022][T26688] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.992531][ T48] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 901.025991][T26688] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.050154][T26688] bridge_slave_0: entered allmulticast mode [ 901.084201][T26688] bridge_slave_0: entered promiscuous mode [ 901.127050][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 901.150384][T26688] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.179517][T26688] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.231039][T26688] bridge_slave_1: entered allmulticast mode [ 901.260687][T26688] bridge_slave_1: entered promiscuous mode [ 901.420954][T26688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.439601][T26809] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 901.482817][T26688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.572128][ T1044] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 901.634371][T26688] team0: Port device team_slave_0 added [ 901.644418][T26812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6232'. [ 901.663055][T26688] team0: Port device team_slave_1 added [ 901.796978][T26688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.832993][T26688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.901686][T16159] Bluetooth: hci5: command tx timeout [ 901.953669][T26688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.968727][T26688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.976740][T26688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.012076][T26688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.132979][ T1175] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 902.160721][T26816] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.208556][T26816] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.243181][T26826] netlink: 'syz.4.6237': attribute type 3 has an invalid length. [ 902.261130][T26826] netlink: 'syz.4.6237': attribute type 1 has an invalid length. [ 902.280579][T26826] __nla_validate_parse: 1 callbacks suppressed [ 902.280602][T26826] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6237'. [ 902.404849][T26821] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.412136][T26821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.434567][T26821] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.441963][T26821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.663668][ T1353] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 902.762208][T16159] block nbd9: Receive control failed (result -32) [ 902.820075][T26688] hsr_slave_0: entered promiscuous mode [ 902.830321][T26688] hsr_slave_1: entered promiscuous mode [ 902.837614][T26688] debugfs: 'hsr0' already exists in 'hsr' [ 902.843815][T26688] Cannot create hsr debugfs directory [ 903.051046][T26843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6242'. [ 903.233380][ T48] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 903.254911][ T1353] bond4: (slave bridge9): failed to get link speed/duplex [ 903.300556][T26847] netlink: 'syz.4.6244': attribute type 62 has an invalid length. [ 903.469099][T26688] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.621955][ T36] bond4: (slave bridge9): failed to get link speed/duplex [ 903.705976][T26688] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.803117][ T1353] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 903.870746][T26688] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.983034][T16159] Bluetooth: hci5: command 0x040f tx timeout [ 904.026871][T26688] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.283477][T26872] netlink: 'syz.4.6253': attribute type 3 has an invalid length. [ 904.312629][T26872] netlink: 'syz.4.6253': attribute type 1 has an invalid length. [ 904.340453][T26872] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6253'. [ 904.828882][T26688] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 904.865403][T26688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 904.908809][T26688] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 904.939513][T26688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 904.967810][T26688] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 905.000237][T26688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 905.023278][T26688] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 905.058744][T26688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 905.077037][T26882] netlink: 324 bytes leftover after parsing attributes in process `syz.3.6255'. [ 905.489400][T26688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.594847][T26688] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.651009][T24579] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.658278][T24579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.749588][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.756868][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.911500][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 906.042607][T24579] net_ratelimit: 16 callbacks suppressed [ 906.042629][T24579] bond4: (slave bridge9): failed to get link speed/duplex [ 906.066014][ T5640] Bluetooth: hci5: command 0x040f tx timeout [ 906.181722][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 906.341601][ T13] bond4: (slave bridge9): failed to get link speed/duplex [ 906.402736][ T13] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 906.483243][ T12] bond4: (slave bridge9): failed to get link speed/duplex [ 906.631509][ T12] bond4: (slave bridge9): failed to get link speed/duplex [ 906.783406][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 906.916813][T26915] FAULT_INJECTION: forcing a failure. [ 906.916813][T26915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.932924][ T12] bond4: (slave bridge9): failed to get link speed/duplex [ 906.981459][ T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 907.021100][T26917] netlink: 'syz.2.6265': attribute type 3 has an invalid length. [ 907.030999][T26915] CPU: 0 UID: 0 PID: 26915 Comm: syz.3.6264 Not tainted syzkaller #0 PREEMPT(full) [ 907.031029][T26915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 907.031044][T26915] Call Trace: [ 907.031053][T26915] [ 907.031063][T26915] dump_stack_lvl+0xe8/0x150 [ 907.031095][T26915] should_fail_ex+0x40c/0x560 [ 907.031137][T26915] _copy_from_user+0x2d/0xb0 [ 907.031165][T26915] kstrtouint_from_user+0xd6/0x180 [ 907.031217][T26915] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 907.031272][T26915] proc_fail_nth_write+0x8e/0x210 [ 907.031304][T26915] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 907.031342][T26915] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 907.031370][T26915] vfs_write+0x296/0xba0 [ 907.031413][T26915] ? __pfx_vfs_write+0x10/0x10 [ 907.031447][T26915] ? __fget_files+0x2a/0x420 [ 907.031479][T26915] ? __fget_files+0x3a2/0x420 [ 907.031505][T26915] ? __fget_files+0x2a/0x420 [ 907.031542][T26915] ksys_write+0x150/0x270 [ 907.031577][T26915] ? __pfx_ksys_write+0x10/0x10 [ 907.031619][T26915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.031644][T26915] do_syscall_64+0x174/0x580 [ 907.031667][T26915] ? trace_irq_disable+0x3b/0x140 [ 907.031702][T26915] ? clear_bhb_loop+0x40/0x90 [ 907.031730][T26915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.031752][T26915] RIP: 0033:0x7fa827b5d68e [ 907.031772][T26915] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 907.031790][T26915] RSP: 002b:00007fa828a12fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 907.031813][T26915] RAX: ffffffffffffffda RBX: 00007fa828a136c0 RCX: 00007fa827b5d68e [ 907.031829][T26915] RDX: 0000000000000001 RSI: 00007fa828a130a0 RDI: 0000000000000005 [ 907.031843][T26915] RBP: 00007fa828a13090 R08: 0000000000000000 R09: 0000000000000000 [ 907.031857][T26915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 907.031869][T26915] R13: 00007fa827e16038 R14: 00007fa827e15fa0 R15: 00007ffdd9f38cb8 [ 907.031905][T26915] [ 907.251681][ T1353] bond4: (slave bridge9): failed to get link speed/duplex [ 907.263762][T26917] netlink: 'syz.2.6265': attribute type 1 has an invalid length. [ 907.310498][T26917] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6265'. [ 907.531957][T26924] netlink: 'syz.4.6266': attribute type 1 has an invalid length. [ 907.631682][T26924] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6266'. [ 907.661909][T26924] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6266'. [ 907.680916][T26924] netlink: 658 bytes leftover after parsing attributes in process `syz.4.6266'. [ 908.115593][T26938] netlink: 'syz.4.6269': attribute type 29 has an invalid length. [ 908.142381][ T5640] Bluetooth: hci5: command 0x040f tx timeout [ 908.156923][T26688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.362692][T26688] veth0_vlan: entered promiscuous mode [ 908.428399][T26688] veth1_vlan: entered promiscuous mode [ 908.549110][T26947] netlink: 'syz.2.6273': attribute type 21 has an invalid length. [ 908.583682][T26947] netlink: 'syz.2.6273': attribute type 21 has an invalid length. [ 908.609738][T26688] veth0_macvtap: entered promiscuous mode [ 908.647537][T26688] veth1_macvtap: entered promiscuous mode [ 908.678520][T26947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6273'. [ 908.702883][T26947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6273'. [ 908.769979][T26947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6273'. [ 908.789228][ T1353] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.798689][T26947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6273'. [ 908.805982][ T1353] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.854076][ T1353] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.897361][T26688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.917259][ T1353] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.989326][T26688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.050797][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.092079][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.139441][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.168710][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.529492][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.567714][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.677203][T26963] netlink: 'syz.3.6279': attribute type 3 has an invalid length. [ 909.706579][T26963] netlink: 'syz.3.6279': attribute type 1 has an invalid length. [ 909.728716][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.746781][T26963] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6279'. [ 909.756244][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.735912][T16159] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 910.751949][T16159] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 910.761955][T16159] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 910.772200][T16159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 910.780671][T16159] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 911.041523][T26988] netlink: 'syz.3.6285': attribute type 21 has an invalid length. [ 911.062463][ T48] net_ratelimit: 33 callbacks suppressed [ 911.062485][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 911.095429][T26988] netlink: 'syz.3.6285': attribute type 21 has an invalid length. [ 911.113463][T26988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6285'. [ 911.244957][T16157] syz_tun (unregistering): left allmulticast mode [ 911.333051][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 911.353113][ T1353] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 911.462159][ T1353] bond4: (slave bridge9): failed to get link speed/duplex [ 911.592170][ T1353] bond4: (slave bridge9): failed to get link speed/duplex [ 911.741863][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 911.891654][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 911.932139][ T13] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 912.021988][ T13] bond4: (slave bridge9): failed to get link speed/duplex [ 912.173977][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 912.203255][T27006] netlink: 'syz.3.6289': attribute type 34 has an invalid length. [ 912.571489][T27014] bond1: option arp_all_targets: invalid value (3) [ 912.622458][T27014] bond1 (unregistering): Released all slaves [ 912.862594][T16159] Bluetooth: hci2: command tx timeout [ 913.007422][T27023] netlink: 'syz.0.6296': attribute type 21 has an invalid length. [ 913.047347][T27023] netlink: 'syz.0.6296': attribute type 21 has an invalid length. [ 913.120763][T27023] __nla_validate_parse: 3 callbacks suppressed [ 913.120785][T27023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6296'. [ 913.161470][T27023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6296'. [ 913.233688][T24579] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.234078][T27023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6296'. [ 913.255546][T27023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6296'. [ 913.406798][T24579] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.426234][T24579] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.469807][T24579] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.162567][T27044] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6301'. [ 914.195430][T27051] ipt_REJECT: TCP_RESET invalid for non-tcp [ 914.204664][T27044] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6301'. [ 914.244631][T27044] netlink: 'syz.0.6301': attribute type 3 has an invalid length. [ 914.252947][T27044] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6301'. [ 914.316220][T26982] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.325966][T26982] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.333956][T26982] bridge_slave_0: entered allmulticast mode [ 914.343174][T26982] bridge_slave_0: entered promiscuous mode [ 914.354359][T26982] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.362271][T26982] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.369677][T26982] bridge_slave_1: entered allmulticast mode [ 914.379588][T26982] bridge_slave_1: entered promiscuous mode [ 914.427206][T26982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.440987][T26982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.554472][T27056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6303'. [ 914.592686][T26982] team0: Port device team_slave_0 added [ 914.645402][T26982] team0: Port device team_slave_1 added [ 914.653433][T27056] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6303'. [ 914.810277][T27064] netlink: 'syz.2.6305': attribute type 1 has an invalid length. [ 914.943093][T16159] Bluetooth: hci2: command tx timeout [ 915.017662][T27064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 915.060691][T27062] bond1: (slave geneve2): making interface the new active one [ 915.072950][T27062] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 915.156805][T26982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.177242][T26982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.218807][T27074] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6308'. [ 915.252826][T26982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.268637][T27072] netlink: 'syz.0.6307': attribute type 21 has an invalid length. [ 915.329824][T27072] netlink: 'syz.0.6307': attribute type 21 has an invalid length. [ 915.342356][T26982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.380572][T26982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.478356][T26982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.786757][T26982] hsr_slave_0: entered promiscuous mode [ 915.818191][T26982] hsr_slave_1: entered promiscuous mode [ 915.845032][T26982] debugfs: 'hsr0' already exists in 'hsr' [ 915.874127][T26982] Cannot create hsr debugfs directory [ 916.019386][T27091] netlink: 'syz.0.6314': attribute type 3 has an invalid length. [ 916.047127][T27091] netlink: 'syz.0.6314': attribute type 1 has an invalid length. [ 916.104204][ T12] net_ratelimit: 15 callbacks suppressed [ 916.104224][ T12] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 916.287586][T16159] block nbd10: Receive control failed (result -1) [ 916.593238][ T12] bond4: (slave bridge9): failed to get link speed/duplex [ 916.692268][T24579] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 917.022656][T16159] Bluetooth: hci2: command tx timeout [ 917.123532][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 917.252013][T24579] bond4: (slave bridge9): failed to get link speed/duplex [ 917.272581][ T1353] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 917.377744][T27113] netlink: 'syz.0.6321': attribute type 21 has an invalid length. [ 917.404744][T27113] netlink: 'syz.0.6321': attribute type 21 has an invalid length. [ 917.441923][ T36] bond4: (slave bridge9): failed to get link speed/duplex [ 917.713449][T24579] bond4: (slave bridge9): failed to get link speed/duplex [ 917.832293][T24579] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 917.943415][T27117] netlink: 'syz.3.6322': attribute type 34 has an invalid length. [ 917.982953][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 918.350420][T27132] FAULT_INJECTION: forcing a failure. [ 918.350420][T27132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.398318][T27132] CPU: 0 UID: 0 PID: 27132 Comm: syz.0.6327 Not tainted syzkaller #0 PREEMPT(full) [ 918.398350][T27132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 918.398364][T27132] Call Trace: [ 918.398374][T27132] [ 918.398384][T27132] dump_stack_lvl+0xe8/0x150 [ 918.398414][T27132] should_fail_ex+0x40c/0x560 [ 918.398456][T27132] _copy_from_user+0x2d/0xb0 [ 918.398484][T27132] ___sys_sendmsg+0x1c6/0x360 [ 918.398516][T27132] ? __pfx____sys_sendmsg+0x10/0x10 [ 918.398538][T27132] ? __lock_acquire+0x683/0x2cd0 [ 918.398617][T27132] __sys_sendmmsg+0x27c/0x4e0 [ 918.398647][T27132] ? __pfx___sys_sendmmsg+0x10/0x10 [ 918.398669][T27132] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 918.398733][T27132] ? ksys_write+0x242/0x270 [ 918.398769][T27132] ? __pfx_ksys_write+0x10/0x10 [ 918.398809][T27132] __x64_sys_sendmmsg+0xa0/0xc0 [ 918.398834][T27132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.398857][T27132] do_syscall_64+0x174/0x580 [ 918.398881][T27132] ? trace_irq_disable+0x3b/0x140 [ 918.398914][T27132] ? clear_bhb_loop+0x40/0x90 [ 918.398943][T27132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.398964][T27132] RIP: 0033:0x7f875f19ce59 [ 918.398984][T27132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.399015][T27132] RSP: 002b:00007f8760056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 918.399037][T27132] RAX: ffffffffffffffda RBX: 00007f875f415fa0 RCX: 00007f875f19ce59 [ 918.399052][T27132] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 918.399067][T27132] RBP: 00007f8760056090 R08: 0000000000000000 R09: 0000000000000000 [ 918.399081][T27132] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 918.399094][T27132] R13: 00007f875f416038 R14: 00007f875f415fa0 R15: 00007ffff7ede3d8 [ 918.399128][T27132] [ 918.781546][T26982] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 918.796088][T26982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 918.804357][T26982] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 918.922595][T26982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 918.965437][T26982] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 918.999893][T26982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 919.020193][T26982] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 919.055162][T26982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 919.102716][T16159] Bluetooth: hci2: command tx timeout [ 919.259085][T27151] netlink: 'syz.2.6332': attribute type 21 has an invalid length. [ 919.284523][T27151] netlink: 'syz.2.6332': attribute type 21 has an invalid length. [ 919.368033][T27151] __nla_validate_parse: 11 callbacks suppressed [ 919.368054][T27151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6332'. [ 919.455048][T27151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6332'. [ 919.494869][T26982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.508226][T27151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6332'. [ 919.518194][T27151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6332'. [ 919.593175][T26982] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.638422][T24579] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.645653][T24579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.677640][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.684903][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.138391][T27167] netlink: 'syz.3.6337': attribute type 34 has an invalid length. [ 920.882731][T27185] netlink: 'syz.0.6341': attribute type 3 has an invalid length. [ 920.909592][T27185] netlink: 'syz.0.6341': attribute type 1 has an invalid length. [ 920.958731][T27185] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6341'. [ 921.069481][T27188] netlink: 'syz.2.6342': attribute type 3 has an invalid length. [ 921.133618][T27188] netlink: 'syz.2.6342': attribute type 1 has an invalid length. [ 921.172814][T27188] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6342'. [ 921.202178][ T48] net_ratelimit: 27 callbacks suppressed [ 921.202202][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 921.371737][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 921.455107][T10674] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 921.503187][T24579] bond4: (slave bridge9): failed to get link speed/duplex [ 921.617699][T26982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.662292][ T1353] bond4: (slave bridge9): failed to get link speed/duplex [ 921.792134][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 921.941692][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 922.052052][ T48] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 922.082668][T10674] bond4: (slave bridge9): failed to get link speed/duplex [ 922.094801][T27209] netlink: 'syz.3.6345': attribute type 21 has an invalid length. [ 922.128469][T27209] netlink: 'syz.3.6345': attribute type 21 has an invalid length. [ 922.200190][T27209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6345'. [ 922.222143][T24579] bond4: (slave bridge9): failed to get link speed/duplex [ 922.265389][T27209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6345'. [ 922.293766][T27216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6346'. [ 922.339103][T27209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6345'. [ 922.736731][T26982] veth0_vlan: entered promiscuous mode [ 922.798178][T26982] veth1_vlan: entered promiscuous mode [ 922.956833][T26982] veth0_macvtap: entered promiscuous mode [ 923.007779][T26982] veth1_macvtap: entered promiscuous mode [ 923.066079][T26982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.130976][T26982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.162684][T27232] netlink: 'syz.1.6351': attribute type 3 has an invalid length. [ 923.180117][T27232] netlink: 'syz.1.6351': attribute type 1 has an invalid length. [ 923.189961][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.202285][T24579] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.224505][T24579] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.237463][T24579] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.496748][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.536916][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.630537][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.665353][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.806139][T27243] netlink: 'syz.2.6353': attribute type 9 has an invalid length. [ 924.433244][T27257] __nla_validate_parse: 10 callbacks suppressed [ 924.433288][T27257] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6357'. [ 924.540688][T27257] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6357'. [ 924.628151][T27257] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 924.665442][T27257] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 924.676401][T27257] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 925.510440][T27285] FAULT_INJECTION: forcing a failure. [ 925.510440][T27285] name failslab, interval 1, probability 0, space 0, times 0 [ 925.527931][T27285] CPU: 0 UID: 0 PID: 27285 Comm: syz.1.6364 Not tainted syzkaller #0 PREEMPT(full) [ 925.527963][T27285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 925.527977][T27285] Call Trace: [ 925.527987][T27285] [ 925.527998][T27285] dump_stack_lvl+0xe8/0x150 [ 925.528029][T27285] should_fail_ex+0x40c/0x560 [ 925.528092][T27285] should_failslab+0xa8/0x100 [ 925.528164][T27285] ? skb_clone+0x212/0x3a0 [ 925.528190][T27285] kmem_cache_alloc_noprof+0x87/0x650 [ 925.528230][T27285] skb_clone+0x212/0x3a0 [ 925.528258][T27285] __netlink_deliver_tap+0x413/0x860 [ 925.528295][T27285] ? netlink_deliver_tap+0x2e/0x1b0 [ 925.528320][T27285] netlink_deliver_tap+0x19c/0x1b0 [ 925.528346][T27285] netlink_unicast+0x77f/0x940 [ 925.528398][T27285] netlink_sendmsg+0x813/0xb40 [ 925.528433][T27285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.528463][T27285] ? aa_sock_msg_perm+0xf1/0x1b0 [ 925.528498][T27285] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 925.528526][T27285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.528552][T27285] ____sys_sendmsg+0x9b9/0xa20 [ 925.528576][T27285] ? __might_fault+0xaf/0x130 [ 925.528613][T27285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 925.528648][T27285] ? import_iovec+0x73/0xa0 [ 925.528682][T27285] ___sys_sendmsg+0x2a5/0x360 [ 925.528704][T27285] ? __lock_acquire+0x683/0x2cd0 [ 925.528732][T27285] ? __pfx____sys_sendmsg+0x10/0x10 [ 925.528798][T27285] ? __fget_files+0x2a/0x420 [ 925.528824][T27285] ? __fget_files+0x3a2/0x420 [ 925.528870][T27285] __x64_sys_sendmsg+0x1bd/0x2a0 [ 925.528896][T27285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 925.528932][T27285] ? __pfx_ksys_write+0x10/0x10 [ 925.528974][T27285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.529000][T27285] do_syscall_64+0x174/0x580 [ 925.529029][T27285] ? trace_irq_disable+0x3b/0x140 [ 925.529067][T27285] ? clear_bhb_loop+0x40/0x90 [ 925.529099][T27285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.529133][T27285] RIP: 0033:0x7fc3f819ce59 [ 925.529160][T27285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.529179][T27285] RSP: 002b:00007fc3f63f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.529207][T27285] RAX: ffffffffffffffda RBX: 00007fc3f8416090 RCX: 00007fc3f819ce59 [ 925.529224][T27285] RDX: 0000000004040004 RSI: 0000200000001080 RDI: 0000000000000005 [ 925.529239][T27285] RBP: 00007fc3f63f6090 R08: 0000000000000000 R09: 0000000000000000 [ 925.529253][T27285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.529267][T27285] R13: 00007fc3f8416128 R14: 00007fc3f8416090 R15: 00007ffd398e8df8 [ 925.529306][T27285] [ 925.980177][T27288] netlink: 'syz.4.6365': attribute type 10 has an invalid length. [ 926.037399][T27288] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.069659][T27288] bond0: (slave team0): Enslaving as an active interface with an up link [ 926.212097][ T48] net_ratelimit: 36 callbacks suppressed [ 926.212120][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 926.331784][T10674] bond4: (slave bridge9): failed to get link speed/duplex [ 926.442174][T24579] bond4: (slave bridge9): failed to get link speed/duplex [ 926.552506][T24579] bond4: (slave bridge9): failed to get link speed/duplex [ 926.662979][T24579] bond4: (slave bridge9): failed to get link speed/duplex [ 926.714696][T24579] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 926.772046][ T13] bond4: (slave bridge9): failed to get link speed/duplex [ 926.882263][T24579] bond4: (slave bridge9): failed to get link speed/duplex [ 926.992173][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 927.102587][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 927.463838][T27261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 927.808627][T27298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6369'. [ 927.849222][ T30] audit: type=1800 audit(1781379919.813:4): pid=27301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6370" name=CB dev="tmpfs" ino=34 res=0 errno=0 [ 927.870978][T27298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6369'. [ 928.256274][T27319] FAULT_INJECTION: forcing a failure. [ 928.256274][T27319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.311745][T27319] CPU: 1 UID: 0 PID: 27319 Comm: syz.2.6373 Not tainted syzkaller #0 PREEMPT(full) [ 928.311777][T27319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 928.311791][T27319] Call Trace: [ 928.311800][T27319] [ 928.311810][T27319] dump_stack_lvl+0xe8/0x150 [ 928.311841][T27319] should_fail_ex+0x40c/0x560 [ 928.311884][T27319] _copy_from_user+0x2d/0xb0 [ 928.311910][T27319] __sys_sendto+0x2b0/0x710 [ 928.311949][T27319] ? __pfx___sys_sendto+0x10/0x10 [ 928.312011][T27319] ? exc_page_fault+0x6a/0xc0 [ 928.312040][T27319] ? do_user_addr_fault+0xc4a/0x1340 [ 928.312068][T27319] __x64_sys_sendto+0xde/0x100 [ 928.312102][T27319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.312126][T27319] do_syscall_64+0x174/0x580 [ 928.312149][T27319] ? trace_irq_disable+0x3b/0x140 [ 928.312181][T27319] ? clear_bhb_loop+0x40/0x90 [ 928.312208][T27319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.312230][T27319] RIP: 0033:0x7f915675d68e [ 928.312251][T27319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 928.312270][T27319] RSP: 002b:00007f9157711e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 928.312293][T27319] RAX: ffffffffffffffda RBX: 00007f91577136c0 RCX: 00007f915675d68e [ 928.312310][T27319] RDX: 0000000000000020 RSI: 00007f9157712000 RDI: 0000000000000005 [ 928.312324][T27319] RBP: 0000000000000000 R08: 00007f9157711f04 R09: 000000000000000c [ 928.312345][T27319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 928.312362][T27319] R13: 00007f9157711f58 R14: 00007f9157712000 R15: 0000000000000000 [ 928.312398][T27319] [ 929.017001][T16159] block nbd11: Receive control failed (result -32) [ 929.027463][T16159] block nbd11: Receive control failed (result -32) [ 929.160499][T27327] syzkaller1: entered promiscuous mode [ 929.239534][T27327] syzkaller1: entered allmulticast mode [ 929.274311][T27327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6378'. [ 929.661476][T27345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6383'. [ 929.672202][T27345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6383'. [ 929.847962][T27347] lo: entered allmulticast mode [ 929.877008][T27347] lo: left allmulticast mode [ 929.957907][T27349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6385'. [ 930.061942][T27352] Bluetooth: MGMT ver 1.23 [ 930.125598][T27357] FAULT_INJECTION: forcing a failure. [ 930.125598][T27357] name failslab, interval 1, probability 0, space 0, times 0 [ 930.203757][T27357] CPU: 0 UID: 0 PID: 27357 Comm: syz.0.6388 Not tainted syzkaller #0 PREEMPT(full) [ 930.203789][T27357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 930.203804][T27357] Call Trace: [ 930.203813][T27357] [ 930.203823][T27357] dump_stack_lvl+0xe8/0x150 [ 930.203855][T27357] should_fail_ex+0x40c/0x560 [ 930.203897][T27357] should_failslab+0xa8/0x100 [ 930.203932][T27357] ? skb_clone+0x212/0x3a0 [ 930.203958][T27357] kmem_cache_alloc_noprof+0x87/0x650 [ 930.203998][T27357] skb_clone+0x212/0x3a0 [ 930.204027][T27357] __netlink_deliver_tap+0x413/0x860 [ 930.204066][T27357] ? netlink_deliver_tap+0x2e/0x1b0 [ 930.204093][T27357] netlink_deliver_tap+0x19c/0x1b0 [ 930.204120][T27357] netlink_unicast+0x77f/0x940 [ 930.204168][T27357] netlink_sendmsg+0x813/0xb40 [ 930.204204][T27357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 930.204238][T27357] ? aa_sock_msg_perm+0xf1/0x1b0 [ 930.204275][T27357] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 930.204304][T27357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 930.204332][T27357] ____sys_sendmsg+0x9b9/0xa20 [ 930.204356][T27357] ? __might_fault+0xaf/0x130 [ 930.204392][T27357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 930.204428][T27357] ? import_iovec+0x73/0xa0 [ 930.204458][T27357] ___sys_sendmsg+0x2a5/0x360 [ 930.204481][T27357] ? __lock_acquire+0x683/0x2cd0 [ 930.204510][T27357] ? __pfx____sys_sendmsg+0x10/0x10 [ 930.204576][T27357] ? __fget_files+0x2a/0x420 [ 930.204602][T27357] ? __fget_files+0x3a2/0x420 [ 930.204642][T27357] __x64_sys_sendmsg+0x1bd/0x2a0 [ 930.204670][T27357] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 930.204706][T27357] ? __pfx_ksys_write+0x10/0x10 [ 930.204754][T27357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.204779][T27357] do_syscall_64+0x174/0x580 [ 930.204803][T27357] ? trace_irq_disable+0x3b/0x140 [ 930.204837][T27357] ? clear_bhb_loop+0x40/0x90 [ 930.204865][T27357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.204888][T27357] RIP: 0033:0x7f875f19ce59 [ 930.204909][T27357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.204929][T27357] RSP: 002b:00007f8760056028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 930.204953][T27357] RAX: ffffffffffffffda RBX: 00007f875f415fa0 RCX: 00007f875f19ce59 [ 930.204970][T27357] RDX: 0000000020008004 RSI: 0000200000001200 RDI: 0000000000000004 [ 930.204985][T27357] RBP: 00007f8760056090 R08: 0000000000000000 R09: 0000000000000000 [ 930.204999][T27357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.205013][T27357] R13: 00007f875f416038 R14: 00007f875f415fa0 R15: 00007ffff7ede3d8 [ 930.205048][T27357] [ 930.473186][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 930.634863][T27366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6392'. [ 930.731833][T27366] block nbd12: Unsupported socket: should be TCP or UNIX. [ 930.913546][T27371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6393'. [ 931.253517][T10674] net_ratelimit: 39 callbacks suppressed [ 931.253539][T10674] bond4: (slave bridge9): failed to get link speed/duplex [ 931.352604][T24579] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 931.402579][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 931.506436][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.522690][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 931.641984][T24579] bond4: (slave bridge9): failed to get link speed/duplex [ 931.762940][T10674] bond4: (slave bridge9): failed to get link speed/duplex [ 931.892234][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 931.914927][ T48] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 932.023351][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 932.060220][T27393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6401'. [ 932.109056][T27395] FAULT_INJECTION: forcing a failure. [ 932.109056][T27395] name failslab, interval 1, probability 0, space 0, times 0 [ 932.124130][T27395] CPU: 1 UID: 0 PID: 27395 Comm: syz.3.6402 Not tainted syzkaller #0 PREEMPT(full) [ 932.124163][T27395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 932.124179][T27395] Call Trace: [ 932.124189][T27395] [ 932.124200][T27395] dump_stack_lvl+0xe8/0x150 [ 932.124236][T27395] should_fail_ex+0x40c/0x560 [ 932.124281][T27395] should_failslab+0xa8/0x100 [ 932.124321][T27395] ? __inet_hash_connect+0xe9b/0x25a0 [ 932.124447][T27395] kmem_cache_alloc_noprof+0x87/0x650 [ 932.124494][T27395] __inet_hash_connect+0xe9b/0x25a0 [ 932.124529][T27395] ? __pfx___inet_check_established+0x10/0x10 [ 932.124580][T27395] ? __inet_hash_connect+0x5ce/0x25a0 [ 932.124620][T27395] ? __pfx___inet_hash_connect+0x10/0x10 [ 932.124659][T27395] ? inet_hash_connect+0xf1/0x380 [ 932.124697][T27395] tcp_v4_connect+0xcee/0x1950 [ 932.124745][T27395] ? __pfx_tcp_v4_connect+0x10/0x10 [ 932.124775][T27395] ? __local_bh_enable_ip+0xd0/0x130 [ 932.124807][T27395] mptcp_connect+0x4d3/0x7a0 [ 932.124841][T27395] __inet_stream_connect+0x258/0xe00 [ 932.124892][T27395] ? do_raw_spin_lock+0x12b/0x2f0 [ 932.124926][T27395] ? lock_sock_nested+0x6a/0x100 [ 932.124962][T27395] ? __pfx___inet_stream_connect+0x10/0x10 [ 932.125004][T27395] ? inet_stream_connect+0x51/0xa0 [ 932.125052][T27395] ? __local_bh_enable_ip+0xd0/0x130 [ 932.125085][T27395] inet_stream_connect+0x66/0xa0 [ 932.125125][T27395] __sys_connect+0x323/0x460 [ 932.125167][T27395] ? __pfx___sys_connect+0x10/0x10 [ 932.125226][T27395] ? __pfx_ksys_write+0x10/0x10 [ 932.125271][T27395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.125298][T27395] __x64_sys_connect+0x7a/0x90 [ 932.125338][T27395] do_syscall_64+0x174/0x580 [ 932.125364][T27395] ? trace_irq_disable+0x3b/0x140 [ 932.125401][T27395] ? clear_bhb_loop+0x40/0x90 [ 932.125433][T27395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.125458][T27395] RIP: 0033:0x7fa827b9ce59 [ 932.125482][T27395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.125505][T27395] RSP: 002b:00007fa828a13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 932.125538][T27395] RAX: ffffffffffffffda RBX: 00007fa827e15fa0 RCX: 00007fa827b9ce59 [ 932.125556][T27395] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000003 [ 932.125573][T27395] RBP: 00007fa828a13090 R08: 0000000000000000 R09: 0000000000000000 [ 932.125588][T27395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.125603][T27395] R13: 00007fa827e16038 R14: 00007fa827e15fa0 R15: 00007ffdd9f38cb8 [ 932.125646][T27395] [ 932.391782][T10674] bond4: (slave bridge9): failed to get link speed/duplex [ 932.431842][T16159] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 932.443446][T16159] Bluetooth: hci2: command 0x0401 tx timeout [ 932.699359][T27403] ip6gre1: entered promiscuous mode [ 932.710483][T27403] ip6gre1: entered allmulticast mode [ 932.808647][T27406] bond2: Removing last arp target with arp_interval on [ 933.415761][T27432] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.6413'. [ 933.510375][T27436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6414'. [ 933.916990][T27442] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 934.379129][T27447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6417'. [ 934.458066][T27447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6417'. [ 935.603547][T27477] netlink: 'syz.2.6430': attribute type 13 has an invalid length. [ 935.667382][ T809] IPVS: starting estimator thread 0... [ 935.763201][T27482] IPVS: using max 30 ests per chain, 72000 per kthread [ 935.783440][T27484] tipc: Failed to remove unknown binding: 66,1,1/0:1836891832/1836891834 [ 935.822788][T16159] Bluetooth: hci2: command 0x0401 tx timeout [ 935.829050][ T5640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 935.836291][T27484] tipc: Failed to remove unknown binding: 66,1,1/0:1836891832/1836891834 [ 935.893185][T27484] tipc: Failed to remove unknown binding: 66,1,1/0:1836891832/1836891834 [ 936.321824][T24579] net_ratelimit: 35 callbacks suppressed [ 936.321846][T24579] bond4: (slave bridge9): failed to get link speed/duplex [ 936.517837][T10674] bond4: (slave bridge9): failed to get link speed/duplex [ 936.552043][ T36] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 936.693599][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 937.010543][T27514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6436'. [ 937.097889][T27512] Cannot find add_set index 4 as target [ 937.133146][T10674] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 937.272919][T27512] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6438'. [ 937.483389][T24579] bond4: (slave bridge9): failed to get link speed/duplex [ 937.641757][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 937.763803][ T13] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 937.809144][T27526] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.6442'. [ 937.824703][T24579] bond4: (slave bridge9): failed to get link speed/duplex [ 937.926209][T27533] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6443'. [ 937.977758][T27533] netlink: Conntrack attr has 4 unknown bytes [ 938.139034][T27537] netlink: 'syz.2.6447': attribute type 21 has an invalid length. [ 938.698114][T27553] FAULT_INJECTION: forcing a failure. [ 938.698114][T27553] name failslab, interval 1, probability 0, space 0, times 0 [ 938.712044][ T5640] Bluetooth: hci1: command 0x0405 tx timeout [ 938.800060][T27553] CPU: 0 UID: 0 PID: 27553 Comm: syz.0.6452 Not tainted syzkaller #0 PREEMPT(full) [ 938.800093][T27553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 938.800108][T27553] Call Trace: [ 938.800117][T27553] [ 938.800128][T27553] dump_stack_lvl+0xe8/0x150 [ 938.800168][T27553] should_fail_ex+0x40c/0x560 [ 938.800208][T27553] ? __d_alloc+0x37/0x6e0 [ 938.800239][T27553] should_failslab+0xa8/0x100 [ 938.800279][T27553] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 938.800312][T27553] ? __d_lookup+0x66/0x790 [ 938.800351][T27553] __d_alloc+0x37/0x6e0 [ 938.800388][T27553] d_alloc+0x4b/0x190 [ 938.800415][T27553] ? lookup_one_qstr_excl+0xc4/0x360 [ 938.800449][T27553] lookup_one_qstr_excl+0xd8/0x360 [ 938.800485][T27553] ? lookup_noperm_common+0x245/0x430 [ 938.800518][T27553] start_dirop+0x5c/0x90 [ 938.800546][T27553] simple_start_creating+0xcc/0x110 [ 938.800577][T27553] ? __pfx_simple_start_creating+0x10/0x10 [ 938.800610][T27553] ? mntput+0x65/0xc0 [ 938.800638][T27553] debugfs_start_creating+0xdb/0x1a0 [ 938.800780][T27553] debugfs_create_dir+0x24/0x350 [ 938.800811][T27553] ieee80211_debugfs_key_add+0x17b/0x5a0 [ 938.800872][T27553] ? __pfx_ieee80211_debugfs_key_add+0x10/0x10 [ 938.800927][T27553] ieee80211_key_link+0x1132/0x16e0 [ 938.801003][T27553] ? __pfx_ieee80211_key_link+0x10/0x10 [ 938.801031][T27553] ? __kmalloc_noprof+0x379/0x750 [ 938.801063][T27553] ? ieee80211_key_alloc+0x1bfd/0x2ab0 [ 938.801093][T27553] ? __asan_memcpy+0x40/0x70 [ 938.801123][T27553] ? ieee80211_key_alloc+0x1bfd/0x2ab0 [ 938.801168][T27553] ieee80211_add_key+0x97d/0xc30 [ 938.801247][T27553] rdev_add_key+0x12e/0x300 [ 938.801325][T27553] cfg80211_set_encryption+0x6e3/0x16d0 [ 938.801376][T27553] cfg80211_wext_siwencode+0x45a/0x740 [ 938.801420][T27553] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 938.801471][T27553] ioctl_standard_iw_point+0x84e/0xdc0 [ 938.801505][T27553] ? trace_contention_end+0x3d/0x140 [ 938.801549][T27553] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 938.801579][T27553] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 938.801613][T27553] ? wext_ioctl_dispatch+0xa2/0x410 [ 938.801647][T27553] ? __pfx___mutex_lock+0x10/0x10 [ 938.801688][T27553] ioctl_standard_call+0xa6/0x160 [ 938.801721][T27553] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 938.801750][T27553] ? __pfx_ioctl_standard_call+0x10/0x10 [ 938.801784][T27553] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 938.801812][T27553] wext_ioctl_dispatch+0xee/0x410 [ 938.801843][T27553] ? __pfx_ioctl_standard_call+0x10/0x10 [ 938.801881][T27553] wext_handle_ioctl+0x110/0x1d0 [ 938.801917][T27553] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 938.801946][T27553] ? hook_file_ioctl+0x1f0/0x5c0 [ 938.801997][T27553] sock_ioctl+0x159/0x7e0 [ 938.802029][T27553] ? __pfx_sock_ioctl+0x10/0x10 [ 938.802057][T27553] ? __fget_files+0x2a/0x420 [ 938.802083][T27553] ? __fget_files+0x3a2/0x420 [ 938.802109][T27553] ? __fget_files+0x2a/0x420 [ 938.802140][T27553] ? bpf_lsm_file_ioctl+0x9/0x20 [ 938.802180][T27553] ? __pfx_sock_ioctl+0x10/0x10 [ 938.802207][T27553] __se_sys_ioctl+0xfc/0x170 [ 938.802240][T27553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.802266][T27553] do_syscall_64+0x174/0x580 [ 938.802289][T27553] ? trace_irq_disable+0x3b/0x140 [ 938.802322][T27553] ? clear_bhb_loop+0x40/0x90 [ 938.802350][T27553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.802373][T27553] RIP: 0033:0x7f875f19ce59 [ 938.802394][T27553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.802415][T27553] RSP: 002b:00007f8760056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 938.802438][T27553] RAX: ffffffffffffffda RBX: 00007f875f415fa0 RCX: 00007f875f19ce59 [ 938.802454][T27553] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000003 [ 938.802468][T27553] RBP: 00007f8760056090 R08: 0000000000000000 R09: 0000000000000000 [ 938.802482][T27553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.802494][T27553] R13: 00007f875f416038 R14: 00007f875f415fa0 R15: 00007ffff7ede3d8 [ 938.802532][T27553] [ 939.843306][T27577] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.6458'. [ 940.046461][T27584] netlink: 'syz.4.6462': attribute type 1 has an invalid length. [ 940.098469][T27584] 8021q: VLANs not supported on ipvlan1 [ 940.664192][T27596] netlink: 'syz.4.6467': attribute type 21 has an invalid length. [ 940.695624][T27596] netlink: 'syz.4.6467': attribute type 21 has an invalid length. [ 940.735249][T27599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6467'. [ 940.797627][T27599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6467'. [ 940.925082][T27599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6467'. [ 940.925845][ T1175] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.977114][ T1175] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.988055][T27599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6467'. [ 941.003525][ T1175] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 941.031789][ T1175] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 941.184405][T27605] tipc: Started in network mode [ 941.205500][T27605] tipc: Node identity ea30a815e485, cluster identity 4711 [ 941.227070][T27605] tipc: Enabled bearer , priority 0 [ 941.255209][T27605] syzkaller0: entered promiscuous mode [ 941.280939][T27605] syzkaller0: entered allmulticast mode [ 941.443020][ T48] net_ratelimit: 29 callbacks suppressed [ 941.443044][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 941.552086][T27607] syzkaller0: mtu greater than device maximum [ 941.574905][T27604] tipc: Resetting bearer [ 941.772757][ T1044] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 941.794169][T27604] tipc: Disabling bearer [ 941.893773][T24579] bond4: (slave bridge9): failed to get link speed/duplex [ 941.927100][T27616] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6472'. [ 942.108670][T27616] nbd12: detected capacity change from 0 to 4 [ 942.163363][T10674] bond4: (slave bridge9): failed to get link speed/duplex [ 942.282046][T16159] block nbd12: Receive control failed (result -104) [ 942.292794][T10674] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 942.342661][ T1175] bond4: (slave bridge9): failed to get link speed/duplex [ 942.363317][T27627] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6478'. [ 942.543859][ T1175] bond4: (slave bridge9): failed to get link speed/duplex [ 942.673271][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 942.754389][T27638] netlink: 'syz.0.6481': attribute type 21 has an invalid length. [ 942.777427][T27638] netlink: 'syz.0.6481': attribute type 21 has an invalid length. [ 942.792553][ T1353] bond4: (slave bridge9): failed to get link speed/duplex [ 942.827552][T27638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6481'. [ 942.863853][T27638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6481'. [ 942.914236][T27638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6481'. [ 942.962738][T27638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6481'. [ 943.420523][T27656] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.6489'. [ 943.764581][T27661] netlink: 'syz.1.6491': attribute type 4 has an invalid length. [ 943.788461][T27662] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6492'. [ 944.044393][T27668] netlink: 'syz.2.6496': attribute type 21 has an invalid length. [ 944.060256][T27668] netlink: 'syz.2.6496': attribute type 21 has an invalid length. [ 944.109658][T27668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6496'. [ 944.127075][T27670] FAULT_INJECTION: forcing a failure. [ 944.127075][T27670] name failslab, interval 1, probability 0, space 0, times 0 [ 944.151960][T27668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6496'. [ 944.170568][T27670] CPU: 1 UID: 0 PID: 27670 Comm: syz.1.6495 Not tainted syzkaller #0 PREEMPT(full) [ 944.170598][T27670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 944.170613][T27670] Call Trace: [ 944.170622][T27670] [ 944.170632][T27670] dump_stack_lvl+0xe8/0x150 [ 944.170664][T27670] should_fail_ex+0x40c/0x560 [ 944.170706][T27670] should_failslab+0xa8/0x100 [ 944.170743][T27670] __kmalloc_cache_noprof+0x88/0x660 [ 944.170774][T27670] ? trace_kmalloc+0x2a/0xf0 [ 944.170802][T27670] ? uprobe_register+0x1a8/0x930 [ 944.170839][T27670] uprobe_register+0x1a8/0x930 [ 944.170870][T27670] ? bpf_link_init+0x8d/0x1e0 [ 944.170902][T27670] bpf_uprobe_multi_link_attach+0xcc5/0x1010 [ 944.170956][T27670] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 944.170989][T27670] ? __fget_files+0x2a/0x420 [ 944.171020][T27670] ? __fget_files+0x2a/0x420 [ 944.171059][T27670] ? __fget_files+0x2a/0x420 [ 944.171091][T27670] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 944.171121][T27670] link_create+0x66d/0x820 [ 944.171150][T27670] __sys_bpf+0x468/0x950 [ 944.171186][T27670] ? __pfx___sys_bpf+0x10/0x10 [ 944.171236][T27670] ? ksys_write+0x242/0x270 [ 944.171272][T27670] ? __pfx_ksys_write+0x10/0x10 [ 944.171310][T27670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.171335][T27670] __x64_sys_bpf+0x7c/0x90 [ 944.171366][T27670] do_syscall_64+0x174/0x580 [ 944.171390][T27670] ? trace_irq_disable+0x3b/0x140 [ 944.171422][T27670] ? clear_bhb_loop+0x40/0x90 [ 944.171451][T27670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.171473][T27670] RIP: 0033:0x7fc3f819ce59 [ 944.171494][T27670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.171513][T27670] RSP: 002b:00007fc3f8f86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 944.171536][T27670] RAX: ffffffffffffffda RBX: 00007fc3f8415fa0 RCX: 00007fc3f819ce59 [ 944.171553][T27670] RDX: 0000000000000040 RSI: 0000200000000740 RDI: 000000000000001c [ 944.171567][T27670] RBP: 00007fc3f8f86090 R08: 0000000000000000 R09: 0000000000000000 [ 944.171582][T27670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.171595][T27670] R13: 00007fc3f8416038 R14: 00007fc3f8415fa0 R15: 00007ffd398e8df8 [ 944.171631][T27670] [ 944.435583][T27668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6496'. [ 944.737272][T27685] [ 944.739664][T27685] ====================================================== [ 944.746715][T27685] WARNING: possible circular locking dependency detected [ 944.753780][T27685] syzkaller #0 Not tainted [ 944.758215][T27685] ------------------------------------------------------ [ 944.765245][T27685] syz.2.6498/27685 is trying to acquire lock: [ 944.771322][T27685] ffffffff8ea84d80 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 944.780496][T27685] [ 944.780496][T27685] but task is already holding lock: [ 944.787875][T27685] ffff8880357f27f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 944.797403][T27685] [ 944.797403][T27685] which lock already depends on the new lock. [ 944.797403][T27685] [ 944.807830][T27685] [ 944.807830][T27685] the existing dependency chain (in reverse order) is: [ 944.816856][T27685] [ 944.816856][T27685] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 944.824437][T27685] __might_fault+0xcb/0x130 [ 944.829483][T27685] _copy_from_user+0x28/0xb0 [ 944.834621][T27685] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 944.841142][T27685] ip_generic_getfrag+0x149/0x2d0 [ 944.846803][T27685] __ip6_append_data+0x3aef/0x4080 [ 944.852567][T27685] ip6_append_data+0x108/0x270 [ 944.857880][T27685] rawv6_sendmsg+0x1298/0x18c0 [ 944.863189][T27685] ____sys_sendmsg+0x853/0xa20 [ 944.868494][T27685] ___sys_sendmsg+0x2a5/0x360 [ 944.873707][T27685] __x64_sys_sendmsg+0x1bd/0x2a0 [ 944.879181][T27685] do_syscall_64+0x174/0x580 [ 944.884309][T27685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.890743][T27685] [ 944.890743][T27685] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 944.898512][T27685] lock_sock_nested+0x41/0x100 [ 944.903834][T27685] inet_shutdown+0x6a/0x390 [ 944.908883][T27685] nbd_mark_nsock_dead+0x2cb/0x550 [ 944.914648][T27685] recv_work+0x1cef/0x1e10 [ 944.919615][T27685] process_scheduled_works+0xa8e/0x14e0 [ 944.925697][T27685] worker_thread+0xa47/0xfb0 [ 944.930827][T27685] kthread+0x389/0x470 [ 944.935445][T27685] ret_from_fork+0x514/0xb70 [ 944.940580][T27685] ret_from_fork_asm+0x1a/0x30 [ 944.945886][T27685] [ 944.945886][T27685] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 944.953563][T27685] __mutex_lock+0x19d/0x1590 [ 944.958701][T27685] nbd_queue_rq+0x373/0x1150 [ 944.963840][T27685] blk_mq_dispatch_rq_list+0x499/0x1990 [ 944.970016][T27685] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 944.976956][T27685] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 944.983486][T27685] blk_mq_run_hw_queue+0x348/0x4f0 [ 944.989140][T27685] blk_mq_dispatch_list+0xd11/0xe10 [ 944.994892][T27685] blk_mq_flush_plug_list+0x45f/0x540 [ 945.000822][T27685] __blk_flush_plug+0x3ed/0x4d0 [ 945.006310][T27685] __submit_bio+0x465/0x560 [ 945.011355][T27685] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 945.017531][T27685] block_read_full_folio+0x7b7/0x830 [ 945.023362][T27685] filemap_read_folio+0x12c/0x3a0 [ 945.029108][T27685] do_read_cache_folio+0x354/0x590 [ 945.034773][T27685] read_part_sector+0xb6/0x2b0 [ 945.040076][T27685] adfspart_check_ICS+0xb1/0x960 [ 945.045557][T27685] bdev_disk_changed+0x82b/0x1780 [ 945.051127][T27685] blkdev_get_whole+0x372/0x510 [ 945.056593][T27685] bdev_open+0x324/0xd70 [ 945.061378][T27685] blkdev_open+0x461/0x600 [ 945.066335][T27685] do_dentry_open+0x816/0x1380 [ 945.071638][T27685] vfs_open+0x3b/0x340 [ 945.076247][T27685] path_openat+0x2e3b/0x3890 [ 945.081384][T27685] do_file_open+0x23e/0x4a0 [ 945.086446][T27685] do_sys_openat2+0x113/0x200 [ 945.091672][T27685] __x64_sys_openat+0x138/0x170 [ 945.097078][T27685] do_syscall_64+0x174/0x580 [ 945.102216][T27685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.108660][T27685] [ 945.108660][T27685] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 945.115897][T27685] __mutex_lock+0x19d/0x1590 [ 945.121038][T27685] nbd_queue_rq+0xc1/0x1150 [ 945.126085][T27685] blk_mq_dispatch_rq_list+0x499/0x1990 [ 945.132170][T27685] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 945.139043][T27685] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 945.145564][T27685] blk_mq_run_hw_queue+0x348/0x4f0 [ 945.151213][T27685] blk_mq_dispatch_list+0xd11/0xe10 [ 945.156954][T27685] blk_mq_flush_plug_list+0x45f/0x540 [ 945.162871][T27685] __blk_flush_plug+0x3ed/0x4d0 [ 945.168260][T27685] __submit_bio+0x465/0x560 [ 945.173311][T27685] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 945.179482][T27685] block_read_full_folio+0x7b7/0x830 [ 945.185302][T27685] filemap_read_folio+0x12c/0x3a0 [ 945.190876][T27685] do_read_cache_folio+0x354/0x590 [ 945.196538][T27685] read_part_sector+0xb6/0x2b0 [ 945.201848][T27685] adfspart_check_ICS+0xb1/0x960 [ 945.207343][T27685] bdev_disk_changed+0x82b/0x1780 [ 945.212911][T27685] blkdev_get_whole+0x372/0x510 [ 945.218312][T27685] bdev_open+0x324/0xd70 [ 945.223093][T27685] blkdev_open+0x461/0x600 [ 945.228058][T27685] do_dentry_open+0x816/0x1380 [ 945.233625][T27685] vfs_open+0x3b/0x340 [ 945.238231][T27685] path_openat+0x2e3b/0x3890 [ 945.243370][T27685] do_file_open+0x23e/0x4a0 [ 945.248428][T27685] do_sys_openat2+0x113/0x200 [ 945.253649][T27685] __x64_sys_openat+0x138/0x170 [ 945.259044][T27685] do_syscall_64+0x174/0x580 [ 945.264175][T27685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.270603][T27685] [ 945.270603][T27685] -> #3 (set->srcu){.+.+}-{0:0}: [ 945.277752][T27685] __synchronize_srcu+0xc9/0x2f0 [ 945.283229][T27685] elevator_switch+0x1e8/0x7b0 [ 945.288575][T27685] elevator_change+0x2fa/0x480 [ 945.293884][T27685] elevator_set_default+0x375/0x440 [ 945.299704][T27685] blk_register_queue+0x3f3/0x4e0 [ 945.305288][T27685] __add_disk+0x6cb/0xe30 [ 945.310173][T27685] add_disk_fwnode+0xfb/0x4b0 [ 945.315399][T27685] nbd_dev_add+0x733/0xb60 [ 945.320360][T27685] nbd_init+0x15f/0x1e0 [ 945.325060][T27685] do_one_initcall+0x250/0x870 [ 945.330368][T27685] do_initcall_level+0x10a/0x1a0 [ 945.335909][T27685] do_initcalls+0x59/0xa0 [ 945.340791][T27685] kernel_init_freeable+0x29d/0x3e0 [ 945.346581][T27685] kernel_init+0x1d/0x1d0 [ 945.351472][T27685] ret_from_fork+0x514/0xb70 [ 945.356607][T27685] ret_from_fork_asm+0x1a/0x30 [ 945.361912][T27685] [ 945.361912][T27685] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 945.369755][T27685] __mutex_lock+0x19d/0x1590 [ 945.374890][T27685] elevator_change+0x1af/0x480 [ 945.380195][T27685] elevator_set_none+0xb5/0x140 [ 945.385584][T27685] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 945.391939][T27685] nbd_start_device+0x189/0xb30 [ 945.397349][T27685] nbd_genl_connect+0x1597/0x1c10 [ 945.402923][T27685] genl_family_rcv_msg_doit+0x233/0x340 [ 945.409021][T27685] genl_rcv_msg+0x614/0x7a0 [ 945.414073][T27685] netlink_rcv_skb+0x226/0x4a0 [ 945.419381][T27685] genl_rcv+0x28/0x40 [ 945.423911][T27685] netlink_unicast+0x7bb/0x940 [ 945.429225][T27685] netlink_sendmsg+0x813/0xb40 [ 945.434525][T27685] ____sys_sendmsg+0x9b9/0xa20 [ 945.439824][T27685] ___sys_sendmsg+0x2a5/0x360 [ 945.445040][T27685] __x64_sys_sendmsg+0x1bd/0x2a0 [ 945.450533][T27685] do_syscall_64+0x174/0x580 [ 945.455664][T27685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.462100][T27685] [ 945.462100][T27685] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 945.470742][T27685] blk_alloc_queue+0x544/0x690 [ 945.476045][T27685] __blk_mq_alloc_disk+0x194/0x390 [ 945.481709][T27685] nbd_dev_add+0x494/0xb60 [ 945.486676][T27685] nbd_init+0x15f/0x1e0 [ 945.491373][T27685] do_one_initcall+0x250/0x870 [ 945.496694][T27685] do_initcall_level+0x10a/0x1a0 [ 945.502191][T27685] do_initcalls+0x59/0xa0 [ 945.507134][T27685] kernel_init_freeable+0x29d/0x3e0 [ 945.512899][T27685] kernel_init+0x1d/0x1d0 [ 945.517781][T27685] ret_from_fork+0x514/0xb70 [ 945.522909][T27685] ret_from_fork_asm+0x1a/0x30 [ 945.528219][T27685] [ 945.528219][T27685] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 945.535461][T27685] __lock_acquire+0x1520/0x2cd0 [ 945.540852][T27685] lock_acquire+0x106/0x350 [ 945.545900][T27685] fs_reclaim_acquire+0x71/0x100 [ 945.551389][T27685] prepare_alloc_pages+0x15b/0x650 [ 945.557046][T27685] __alloc_frozen_pages_noprof+0x12f/0x380 [ 945.563405][T27685] alloc_pages_mpol+0x212/0x380 [ 945.568810][T27685] alloc_pages_noprof+0xac/0x2a0 [ 945.574287][T27685] __pud_alloc+0x3a/0x460 [ 945.579158][T27685] handle_mm_fault+0x1f87/0x3080 [ 945.584647][T27685] do_user_addr_fault+0x744/0x1340 [ 945.590295][T27685] exc_page_fault+0x6a/0xc0 [ 945.595523][T27685] asm_exc_page_fault+0x26/0x30 [ 945.600924][T27685] rep_movs_alternative+0x33/0x90 [ 945.606498][T27685] _copy_to_user+0x8a/0xb0 [ 945.611465][T27685] x25_ioctl+0x245/0xff0 [ 945.616355][T27685] sock_do_ioctl+0x101/0x320 [ 945.621503][T27685] sock_ioctl+0x57a/0x7e0 [ 945.626378][T27685] __se_sys_ioctl+0xfc/0x170 [ 945.631546][T27685] do_syscall_64+0x174/0x580 [ 945.636678][T27685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.643120][T27685] [ 945.643120][T27685] other info that might help us debug this: [ 945.643120][T27685] [ 945.653368][T27685] Chain exists of: [ 945.653368][T27685] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 945.653368][T27685] [ 945.665995][T27685] Possible unsafe locking scenario: [ 945.665995][T27685] [ 945.673460][T27685] CPU0 CPU1 [ 945.678835][T27685] ---- ---- [ 945.684210][T27685] rlock(&mm->mmap_lock); [ 945.688647][T27685] lock(sk_lock-AF_INET6); [ 945.695692][T27685] lock(&mm->mmap_lock); [ 945.702577][T27685] lock(fs_reclaim); [ 945.706585][T27685] [ 945.706585][T27685] *** DEADLOCK *** [ 945.706585][T27685] [ 945.714742][T27685] 2 locks held by syz.2.6498/27685: [ 945.719956][T27685] #0: ffff888080cd0260 (sk_lock-AF_X25){+.+.}-{0:0}, at: x25_ioctl+0x22f/0xff0 [ 945.729046][T27685] #1: ffff8880357f27f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 945.739004][T27685] [ 945.739004][T27685] stack backtrace: [ 945.744914][T27685] CPU: 1 UID: 0 PID: 27685 Comm: syz.2.6498 Not tainted syzkaller #0 PREEMPT(full) [ 945.744939][T27685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 945.744950][T27685] Call Trace: [ 945.744958][T27685] [ 945.744967][T27685] dump_stack_lvl+0xe8/0x150 [ 945.744991][T27685] print_circular_bug+0x2e1/0x300 [ 945.745018][T27685] check_noncircular+0x12e/0x150 [ 945.745045][T27685] __lock_acquire+0x1520/0x2cd0 [ 945.745067][T27685] ? ima_match_policy+0x106/0x21c0 [ 945.745127][T27685] ? prepare_alloc_pages+0x15b/0x650 [ 945.745155][T27685] lock_acquire+0x106/0x350 [ 945.745172][T27685] ? prepare_alloc_pages+0x15b/0x650 [ 945.745207][T27685] fs_reclaim_acquire+0x71/0x100 [ 945.745233][T27685] ? prepare_alloc_pages+0x15b/0x650 [ 945.745260][T27685] prepare_alloc_pages+0x15b/0x650 [ 945.745290][T27685] __alloc_frozen_pages_noprof+0x12f/0x380 [ 945.745324][T27685] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 945.745355][T27685] ? __pfx_policy_nodemask+0x10/0x10 [ 945.745385][T27685] ? rcu_is_watching+0x15/0xb0 [ 945.745405][T27685] ? __kasan_check_byte+0x12/0x40 [ 945.745435][T27685] alloc_pages_mpol+0x212/0x380 [ 945.745467][T27685] alloc_pages_noprof+0xac/0x2a0 [ 945.745485][T27685] __pud_alloc+0x3a/0x460 [ 945.745510][T27685] handle_mm_fault+0x1f87/0x3080 [ 945.745537][T27685] ? __pfx_mt_find+0x10/0x10 [ 945.745634][T27685] ? handle_mm_fault+0xec/0x3080 [ 945.745660][T27685] ? __pfx_handle_mm_fault+0x10/0x10 [ 945.745691][T27685] ? lock_mm_and_find_vma+0xa7/0x340 [ 945.745719][T27685] do_user_addr_fault+0x744/0x1340 [ 945.745745][T27685] exc_page_fault+0x6a/0xc0 [ 945.745766][T27685] asm_exc_page_fault+0x26/0x30 [ 945.745784][T27685] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 945.745812][T27685] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 945.745829][T27685] RSP: 0018:ffffc90005017a48 EFLAGS: 00050212 [ 945.745846][T27685] RAX: 0000000000000000 RBX: 0000000000000032 RCX: 0000000000000032 [ 945.745858][T27685] RDX: 0000000000000000 RSI: ffff888080cd07b4 RDI: 0000200000000000 [ 945.745871][T27685] RBP: ffffc90005017cb0 R08: ffff888080cd07e5 R09: 1ffff1101019a0fc [ 945.745885][T27685] R10: dffffc0000000000 R11: ffffed101019a0fd R12: 0000200000000032 [ 945.745899][T27685] R13: 00007ffffffff000 R14: ffff888080cd07b4 R15: 0000200000000000 [ 945.745922][T27685] _copy_to_user+0x8a/0xb0 [ 945.745944][T27685] x25_ioctl+0x245/0xff0 [ 945.745969][T27685] ? __pfx_x25_ioctl+0x10/0x10 [ 945.745996][T27685] ? kasan_quarantine_put+0xbb/0x1f0 [ 945.746025][T27685] ? tomoyo_path_number_perm+0x219/0x5f0 [ 945.746051][T27685] ? tomoyo_path_number_perm+0x219/0x5f0 [ 945.746076][T27685] ? do_vfs_ioctl+0x116f/0x1540 [ 945.746112][T27685] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 945.746143][T27685] sock_do_ioctl+0x101/0x320 [ 945.746169][T27685] ? __pfx_sock_do_ioctl+0x10/0x10 [ 945.746190][T27685] ? hook_file_ioctl+0x1f0/0x5c0 [ 945.746223][T27685] sock_ioctl+0x57a/0x7e0 [ 945.746246][T27685] ? __pfx_sock_ioctl+0x10/0x10 [ 945.746268][T27685] ? __fget_files+0x2a/0x420 [ 945.746289][T27685] ? __fget_files+0x3a2/0x420 [ 945.746310][T27685] ? __fget_files+0x2a/0x420 [ 945.746333][T27685] ? bpf_lsm_file_ioctl+0x9/0x20 [ 945.746361][T27685] ? __pfx_sock_ioctl+0x10/0x10 [ 945.746401][T27685] __se_sys_ioctl+0xfc/0x170 [ 945.746429][T27685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.746448][T27685] do_syscall_64+0x174/0x580 [ 945.746468][T27685] ? trace_irq_disable+0x3b/0x140 [ 945.746496][T27685] ? clear_bhb_loop+0x40/0x90 [ 945.746516][T27685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.746534][T27685] RIP: 0033:0x7f915679ce59 [ 945.746551][T27685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.746567][T27685] RSP: 002b:00007f9157734028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 945.746585][T27685] RAX: ffffffffffffffda RBX: 00007f9156a15fa0 RCX: 00007f915679ce59 [ 945.746600][T27685] RDX: 0000200000000000 RSI: 00000000000089ea RDI: 0000000000000005 [ 945.746612][T27685] RBP: 00007f9156832d6f R08: 0000000000000000 R09: 0000000000000000 [ 945.746624][T27685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.746635][T27685] R13: 00007f9156a16038 R14: 00007f9156a15fa0 R15: 00007ffc9edaea28 [ 945.746657][T27685] [ 946.552947][ T1044] net_ratelimit: 22 callbacks suppressed [ 946.552970][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 946.672518][ T13] bond4: (slave bridge9): failed to get link speed/duplex [ 946.704140][ T1044] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 946.791788][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 946.902121][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 947.011931][ T13] bond4: (slave bridge9): failed to get link speed/duplex [ 947.132154][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 947.243572][ T1175] bond4: (slave bridge9): failed to get link speed/duplex [ 947.268430][ T1175] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 947.351976][ T1353] bond4: (slave bridge9): failed to get link speed/duplex [ 951.602379][ T48] net_ratelimit: 45 callbacks suppressed [ 951.602403][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 951.721563][ T13] bond4: (slave bridge9): failed to get link speed/duplex [ 951.831671][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 951.892093][ T13] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 951.942079][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 952.051427][ T13] bond4: (slave bridge9): failed to get link speed/duplex [ 952.161710][T24579] bond4: (slave bridge9): failed to get link speed/duplex [ 952.272606][ T48] bond4: (slave bridge9): failed to get link speed/duplex [ 952.382819][ T1044] bond4: (slave bridge9): failed to get link speed/duplex [ 952.412879][ T48] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01