last executing test programs:

3.092142419s ago: executing program 0 (id=6398):
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2})
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001d00), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001d40)={'wpan0\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e00)={0x1c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}}, 0x0)
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)
socket$can_j1939(0x1d, 0x2, 0x7)
vmsplice(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000007c0)}], 0x1, 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d232000000ac1414bb000000000000000000000000ffffffffffffff7f0200000000000000ffffffffffffff7fffffffffffffff7f000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000020004095b0000000000000048000200656362286369706865725f6e756c6c29000000"], 0x140}}, 0x0)
syz_emit_ethernet(0xd0, &(0x7f00000006c0)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x40, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x4d2, 0xffff, @basic={0x0, 0x0, 0x0, [@ipv6=@gre_packet={0x1, 0x6, "636fce", 0x44, 0x2f, 0x1, @private2, @mcast1, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1}, {}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x7, 0x0, 0x0, 0x1, 0x2, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x2, {{0x4, 0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x2, {0x8000, 0x400, 0x3, 0x4, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}, @ipv4=@tcp={{0x8, 0x4, 0x3, 0x5, 0x34, 0x67, 0x0, 0xfd, 0x6, 0x0, @private=0xa010101, @private=0xa010102, {[@noop, @cipso={0x86, 0x6}, @noop, @noop]}}, {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x3}}}]}}}}}}, 0x0)

2.483714343s ago: executing program 0 (id=6408):
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x10d8)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x898)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1}, 0x14)
syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[], 0x0) (fail_nth: 23)

2.256405887s ago: executing program 4 (id=6410):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000001240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020800000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000f50900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c000380140001006765ff657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x20040000)

2.172764614s ago: executing program 0 (id=6411):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000c80)=@xdp, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000d80)="99c0c8a64944a05e9c346de4d3d3a9bb39a0f78b255ad412db84b364a11507d57ebe76f665aa34319949d11ac4742b1e21768d7255e6fadbe63c5361ffa11811d2b17ec2289c7a18786e0a226f6fe59ee2ffdbf142cf0477b841c9457ee2ea08ae81d4a3", 0x64}, {&(0x7f0000000e00)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8794629edc06d69", 0x54}, {&(0x7f0000000e80)="58eb2c5f4861f02f200c15a24904c3bee774847f569bed51040025a08a0191a5eb14d91b8c8c510d600553f4ed0ee0a928e2ccbd303cff39", 0xffffffd8}, {&(0x7f0000000ec0)="51380ec09bd99ead10314c60dd84ede5853a989a50373ac712415d8507e6932ddee21ea42c5a23ae95e79250499276fccb9664194c8cd6c2fae81193d8b3b9be16f971daedea10580316cb74311dc5554dda3033aef6740c3e40681e462f186b9ea4f4492a52a98681e1b274cf9426a421b972aa87496a4dcde29945", 0x7c}, {&(0x7f0000000f40)="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", 0xfb}], 0x5, &(0x7f0000001040)=[{0x1010, 0x0, 0x0, "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"}, {0x28, 0x0, 0x0, "8192fbea2c061381413fc28cb06b4e988dc486c74cfc"}, {0x18, 0x0, 0x0, "4fdf1ab71595"}, {0x18, 0x0, 0x0, "f47d"}, {0xe0, 0x0, 0x0, "06435d82744e2bd9e2a1fe8560ac7d60b467b377f0399e14a4b82078fbecc311bfb75da80df4176c4561790eae2e1f95dd46a7d7add48146b7b5c82746d8d36469209f1157ef17dbcd007409c3146b57a228d6100cf363fe754e480ace4546319526df51a444b225ac6df534283e28711f46fc77e9fda0596f402ec4c67aa5d0c5e535ca6edfe639e562cb3f41c27b110d3f65ecadd12a490fd27c6eea3f254c1a651207d6a239d3289641254ed028de2cedd5f658793983cea494d38b136b5f72a624ea0975c31041f46ca0"}], 0x1148}, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000021c0), 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="28000000100003040100000000be91939385a6d3ba7e599c850112edffffffff03004e91048347cc39fad8869f7d1cc86970bf98501d25058a0cc15feeb83cdef0b290da0dbcfab666d7e889b55c4c4cf4d5d3cabfe4e8eb18a7e6ee09ca3b4ab27d2b91253a8265d8242bbf7e223478c83c1717eb06ee79ead27b2bb810d5", @ANYRES32=r3, @ANYBLOB="018300000000000008000a00", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x8044)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000000000000000f18477d36decef1db387f8cb0300000a28000000000a0500000000000000000005000003000240000000050900010073797a300000000028000000000a010200000000000000000300008a0900010073797a30000000000800024000000007140000001000010000"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004040)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="660a00000700000061114c0013cb83a799413a46d96ee4080e0d3b0085000000910cec1a46d5035e21c9cbd265d1977046eaea1726586cf259363986372f7c5f25c128cfb1f9d67edf79a697af4f4fc0b9baf64a76b5292878c0946be15d2b0cae0bad4962e4fbf898ec28fc9a33cb2e770f9f7b09ee665558b80d7130a9fc5ebb6731b66a51c2fff74961427734d8b4d7cb5d07a882f60b7ff16b7fe9c2"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'dvmrp1\x00', <r5=>0x0})
pipe(&(0x7f0000000480)={<r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0xc}, @local, 0xff, 0x0, 'ip6erspan0\x00', 'lo\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@unspec=@helper={{0x20}, {0x1, 'amanda\x00'}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfffffffb}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x1, 0x4}, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x1, {0xd}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x2, 0x7}, {0x2, 0x3}, {0x4, 0x4, 0x1}, 0xfffffffe, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8)
r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r4}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a0000002f570000000000000004ecff04010100", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05000000040000000400"/24, @ANYRES32=r8, @ANYBLOB], 0x50)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000a40)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000ac0)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x37, 0x0, "cebd7ceedb7b0ad952e966bae242b92b746b023df2cb59e32e10366456de005a52a40b7161161a8b2749fe184fb01ac8c63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b00"}, 0xd8)
shutdown(r9, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007f8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070403000000ffffb70200f6feffff1f18230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0, 0x8}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000006c0)={'team0\x00', &(0x7f0000000700)=@ethtool_link_settings={0x4c, 0x1, 0x8, 0xa, 0x8, 0x9, 0xe, 0xb, 0xa, 0x4, [0x8, 0x1, 0x2, 0x1269, 0xc6, 0x400, 0x0, 0x3]}})
socket$nl_generic(0x10, 0x3, 0x10)

1.804103673s ago: executing program 4 (id=6413):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="01100000021a01002c00128008000100677470002000028014000800000000000000000000f1ffffff0000000500050000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

1.460293292s ago: executing program 4 (id=6416):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async)
close(r0) (async, rerun: 32)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
r2 = socket$inet6(0xa, 0x805, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000300)=0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000440)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f00000004c0)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000580)="6fe4dd9eeba3271dc700b581440284", 0xf}, {&(0x7f00000005c0)="fe112162c63e6da8bc8432294ef18af53cc330a64c2c7035246635093ba4d30fcf19a90804f04a10939db8f4e1b4acab11d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a51db7555c3b49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55", 0xe2}], 0x4}, 0x20004000) (async, rerun: 32)
getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f00000021c0)=""/4096, &(0x7f00000031c0)=0x1000) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f00000006c0)={<r5=>r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000780)=0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000c00)={r5, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000cc0)=0x84) (async, rerun: 32)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}}, 0x40001) (async)
getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000001180)=""/4060, &(0x7f0000002180)=0xfdc) (async, rerun: 64)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x48241, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000800)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
sendmsg$nl_route(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="800000026800000425bd7000fcdbdf250200040024000000060007000600000054000200000000005f00000000000000000000000100000047000000020000000400000000000000f6000000020000000300000000000000030000000000000000000000010000000900000000000000000000000c0002000100000003000000"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0)
write$tun(r7, &(0x7f0000000840)=ANY=[@ANYBLOB="70000000ffffffffffeeaaaaaaaaaabb080045aab82c00006000002f"], 0xfdef) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES16=r7, @ANYRES32=0xc9], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x309) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@initdev, @remote, <r8=>0x0}, &(0x7f0000000180)=0x22)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x800, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x10, 0xe}, {0xffe0}, {0xa, 0x3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x2000a0d0)

1.386639603s ago: executing program 0 (id=6417):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008b00b0ffffff0000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000002d0a0600000000002500ffffdf070ae91801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0xb, 0x1001, &(0x7f0000000680)=""/4097, 0x41000, 0x24}, 0x94)

1.350307884s ago: executing program 3 (id=6418):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="880000001900010000000000000000001d01000005000d0001000000150003000000000000000000062e346aa0f998570000000015000200000000000002000003ef7506ecbef9700600000015000400000000000000000000000000000000010100000008000900", @ANYRES32=0x0, @ANYBLOB='\f\x00\v\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x88}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_FLOW={0x6}, @GTPA_FAMILY={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004800)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xa4}}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880)
syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f00000006c0)={0x1, 0xffffffffffffffff, 0x80800}, &(0x7f0000000700)=0xc)

1.160099779s ago: executing program 2 (id=6419):
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x10d8)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x898)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000840000007b8af8ff00000000bfa200ffffffb703000008000000b70400000100a9b109ad0000820000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1}, 0x14)
syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[], 0x0)

1.117489355s ago: executing program 0 (id=6420):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r2, &(0x7f0000000300)="5500000011002914001100020004040002000407200000", 0x17)
mmap(&(0x7f0000888000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x30, r1, 0x0)
r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl(r3, 0x1, &(0x7f00000001c0)="58dc98f0")
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r5)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000002c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000240)={&(0x7f00000010c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x40000)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r5)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000002580), r9)
getsockname$packet(r9, &(0x7f00000025c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002600)=0x14)
sendmsg$nl_route(r8, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000026c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x48001)
sendmsg$nl_route_sched(r8, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x38}}, 0x4000800)
sendmsg$nl_route_sched(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002840)=@delchain={0x48, 0x64, 0xf31, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xfffffffffffffcd5}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x100c0000}, 0x4004800)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010171d91f7043ad34b7dfc7b352fd9e2a0329bd7000fcdbdf25240000001800018014000200"], 0x2c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x240488d0)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000580), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x29, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558)
writev(0xffffffffffffffff, &(0x7f0000001040)=[{&(0x7f0000001080)="06c391891fe7", 0x6}], 0x1)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000001140)=0x400000)

1.087292956s ago: executing program 1 (id=6421):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r0, 0x30a, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5bf}, {0x6, 0x16, 0x4}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x7}, {0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xdfb8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x8d1)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000003c80)={{<r2=>r1, &(0x7f0000000340)='netdevsim', 0x301000, &(0x7f0000000380)={@align=0x7fffffff, {0x3, 0x4, 0xfffffff8, 0x6}}, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x6}, 0xa, &(0x7f0000003b40)=[{0x3, 0x0, &(0x7f0000000440)='@[%#\x00', &(0x7f0000000480)="af68e8e7ab38e80951c8fb409ba787b341422970238ddf92e7ee1b42beb292d94350b4181a2b18a2dc79854b4efa2b7c5e732595a55b7f9c93c45f6996", 0x3d, 0x10}, {0x3, 0x80, &(0x7f00000004c0)='0000:00:10.0\x00', &(0x7f0000000500)="f72542ca02", 0x5, 0x22}, {0x1, 0x2, &(0x7f0000000540)='0000:00:10.0\x00', &(0x7f0000000580)="7bcdc3571668db3711fa30e208ef641a6a328495f1bfd6519a9994f604921e65eba2c54ae650ba57e90e6ba12f8ab60f51c74f94761b051f651d80120729d7959691029d078a8e5a589e72e4d2b174a6844f018c057463116420ff5b04534b8b9e0974fd123a2998b8949cf83797", 0x6e, 0x2}, {0x2, 0x4, &(0x7f0000000600)='&]\xe3[]+--\x00', &(0x7f0000000640)="5a7f5f9270c56523596232ac5fa7d503969aced7b8f4459e005f990aa013acad190e82615dd78a19502aa3a22b916d8e24c6ed8873be46237c3cfbe8d63d62a90493d3e156e261f1c8e0d1a6512c29f8e12582e0e0ff29662f5f9e5d136304a310b0bf561f3c679bcc7a932fb87b372758a687c4adfa5c37b853350838c4e6295ebdef2e7439c56595d42d109a6de6771218cf675b72b987da3b19bc58d40f20997aebab5e7dd1d385398d9f5083995cf85d3d939841e0f0d7f44925bced777263a707242ce5083264b07aed82348d75d80e988559bd5d313e1fbf86a20cc6640fd1b28ae711b048b1ab8ade8300626b69", 0xf1, 0x8}, {0x1, 0xfffff0c5, &(0x7f0000000740)=':,\x00', &(0x7f0000000780)="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", 0x1000, 0x20}, {0x1, 0x8001, &(0x7f0000001780)=',%\x00', &(0x7f00000017c0)="4ab1b996902683093d8a8d175906c5d6cedb7f172a9f3265da3c75c2c6cc2a069cc461e85e25cbb633bc0130fb70cf9e9b5668bf50f90696390d177c7340dd79707636cea871f16b0b576fb71cab286b0189977f03f7abd098d7d030c6bbac9bf32c7a292bdf814dfbe2250b9ad70ddf017f6c6a732386cc40e3d7aa753ab3240b8394ef23b28fef06fc1343d3d0b7", 0x8f, 0x10}, {0x1, 0x39, &(0x7f0000001880)='@:++(\x00', &(0x7f00000018c0)="3b15314b5f488b0623e5ad8c8e0a4839f94099b0a641f2aed6675059579da641e8cda152d6fdfbcfe20717c31f6e91aa7e0af60925783aa2de24a81be50e6df474f2fd75d5ba91c452718b358ae3f6eb76ff63e987103a04c20471d869fd0cbfb397b7f7723844971583adf18d0f7a94984d733e75edc6aeb817ce6a907895a960413da7494adef25c5dda491aa4a7661ceaa81ab6810a338cea3ee2faade4732740d7bc047eccc421716b52ad59d53250933d48a7abc9e370fcd40db269e4b633f759e874f9e4afbc0962f248bac380ff9132fc7a5dd0bd523a", 0xda, 0x30}, {0x1, 0x5, &(0x7f00000019c0)='\xcb@,[!,\xc8\x00', &(0x7f0000001a00)="6cb1680a43a1b51ae9ef2031598f3d3cde6918a5e34f8607778ef2e9b8ec35d38bfff4b416cace4be33277aa8814eefee0ebdf7130802453dbcf519d74f1e1e3f64a72fb56470cfb5dc2a762bb0a300c3371d5b0f8a5bdd997198dde81b9412710d27a7ece768aa208e799a118b1751549015bd181c0fbce71750d94b7eb29a2bcf2c3deb50236dc420c422a29ceb1eba88b03b035cde9262732a8ceda11f963b91a6112d784a68d1a1331c74499ee280d2fb395b7fbfd06c7f949d7a63ab20e972b7571baddbcca3167fff06d248d357ad829176235726b9d896c31797ce5be3beb38667e608ab348218ca92deb842590369b6950b35da35706f1f18447dcbfb4710760f1b83101ffcfe9893e15c7e03eef46582ef531a421e50263052a464ce26c04dc1cfd7504e51b410205d3a18eddd08325c59b4a8220a6033966d402d3c91a48e2b14e28c428cd0f556fbf5b326339a039d5915d3d47bd0a3369dfefde98c17c1ee9f1e5568a3e5a808c57219181686f21bfb6442cf5dee49470fab98dd8686fec7c00cbf2d796ed4737950fd1bda20130d229f4335217c6d3ef7c403d20326ef99cabcd4d10af43e2d39d156a3c23176dd28a1c5e848c4c765e591d9c199b3e2e2a504971443ce60f865e51817827a40b1b1a1ffa717ab1dde3c982677f957dd17d7f1f1b86530a7665066724a036991ddaa6a0616f4c9f596d4f5cef773e8f709ba0479aebffb1bad5f443b0cc66dbeb1625af8be973c9ce38fa1f2ad387a90ad82e8763a19b43d3205864a8eec9e86ebbffadbfc05d8371da8e70aaaf1ef457011bf76e4d079073074687f46ebf98dd8de60d14d60796ea6a2bf2c8e3cc44e3da8bac462c67ef63c2a61bce47b1675f6d6ff95de57d27126cc12bad91751c86eb8e01275f6d896da95ff89978b8daa06da153a6c2283462391979061c309e5778de2552f5f97a82de1f8873aff5e2669f598565669d8dc49c14c5263cb7a1e5e45c2d24451e2e6527d36e669d746dc0ef251ebae652d19dfbaf000e743b05590d51f66206b3a5daac94b42af28346b29f67a5474d2e22e5885e6a213e014871a28133ba75a013e4f25c776a1f2bd3476c99a70e9335d758f58802dadc42d895c9d3efe0f2e86437f3c6309a03fd9e0c404b9924ed0dcdbc4f0616a094262f67ce45b3f5e14c06b05c5fb301e14a87440b5ebe4f743ef914bae3053c66751f8a95bfe70ce3c091d400320c31b72a2473d90c30cd2c2fcaf48d08f3fd3b4c8d835de274de79267f2ce50d50097d159be222361022ce62a6ef42ab32c2b3c09a8bef95657b74d27ea421954bdd40bc6974e9d61b6c0f002de361cdfd21352b14cb5885b00fa3c11e1a1cbea5468eacd8619c298823032ab29e60e16047cf0d61e9c0ba18f651d49a09330a81beb0756cd8830284497acd879457ecd1d55c617de25e6cb4b5f79111f5829dc8a644556f1afcbedfb847c217713d10f891055e59fe97b50aec4b7a455db6460a7b02804df4b0e9cd605ba3c64700752db02f80ce1c8c60661f78f78432c2b62ab6d62d44090d6ea7224181a57300b94f2b3f70bb23e452f8aa4e26f9cf08fd94d2a3416135af444ad080ad8ecacf205ce0b96035fda1616fd1696f02eb4df2b1e1c723ba49820aa2343bfc9859bb56b80027716c9cfd19a45e2a5fd5ae36c99fa1814c9d2872fca93c830bbde8cf145d2fa984a044ff961d48d4ff63ef8a7d9c44d29c8a813b51e2958ccbd38bdc486b37bbaa32c3ef9e51e7908c975cfe587ad9ffa9aece8a1361db1f8636d422ac109eee4ecce5b6a8547a42f45065b4df6080cb3ec81c3ce3d11b538455ae0947c3055de63b547629e325d675273f45ac769506721e4924b670f13e1d18400db7547eb708d95b45a74bd414007e72dcb59f203375336e8331a7b44e9add0c912dd768b81e9fe68a41291cc3556598d078236e5613b827bc8c618cdf267eee570bd870147cd72b099e253db9e5e48290ffba5fde576d75483b855cde362c51f263924608f68a888e36ff848142adf5b96f58994bafb578fbbb69199d23738f923b060516a0d633e759098dfc14dfbd1bdc45155acdf87a502f6349779ff4f1f87e7bd7905f20e864b0305bbc0bf8b9992c52e84c578d54f900c0204a377cd907311b2e9999359d64f08fd6ad9d2a58696d8a505b58c2b6bcd215647b70d8b233b10096abdf0a20a2ecf374dc729f726caf8d51b13647d77dfe4ce65089148720a6f346a3675cdf033cadc1c5d9264b4b8f7505f324e05d5ecaf0c5a29b95d65ead8afc82b05891da37e79e455f8f5fa95ad31cbe28389ba56af970dedac6a3a8c80929ccb01150ddc778ac06258334356186daf062708714d6fe80e07f2de5f7beb0e9dfad73f9d6af5bfe546269ef081c1a69744d0097f73658410526b6adae099b970a06d39acaf465b83f97f27c8d270da94777d68577322a8a3b8bdeafdd77bdff768fca99dbc001cdb97a8a41e4aa5f42fa4ba8a3f306e46b585565b310512c7a59b9f48a6e9d5fea7f1fe6b2a3a7d29c7a37c1a7990d2d12e16a86fa6dc79d33d5fb9cc24cd91be963df60632fcff6d2333660457284827f3fb0fd7bbad7e649fce4f93775cfe6dd73e7e512e09b7ff2ef5136e6f36417cc47fcad49f85b2d6454c0099706b24532baf2014ab5bf2e563a4acd9475ab533b239b0d99a66d5f3102fa7dafc58890cfe6051a0c4f1f5e109cebf935074db8b6c91e6691ec8adf3de3cabeb52e60ab12815ff2099a97dee45f131bf72b7d64a998316ffb1ce085d38713348bd921521c966bbe8625d277f1abc22e90262c8045debd864a87659822251ea2df239c6fe46f1f0d6faf98d79b56e30513d4611cdf03e6cc7ca576f0683884d337d9f38a65ae054a1f2368eb78290f31ef46d7b6fc0ef3af78eea9ade83d506aa901a29b2927c128a2d6b3dcf701cd76edf1b023928857d058e1aaa78732531fc4f5a3e03f8b376996a80dc033a18939f33836ef3014efc1ed44fbc9198c25ee9ad7823bc56a715417b682ac88bc1776c6691b17c0a393a434fbb655da35446b6f8068202fadc30e7a4834bf11674ad2fbae116fe059fa8d3ab243650177f9cafd72b40f7e90f06ab121628fd361c4281c801e264dae173550b725936095b7a4f52e121caa0927901955effd44fbc0aed9f5d29131f75d0e664e2ffc44a2bd130c579ed8866b62f2bbac0e40898595a5b7b6221d50639c04052d5f82b748cadcdbc22f5f71426dd5d499bfe064b5381ccb6d3134908c64b2f828befff57efcaafce3ac90f693016f3da0fb53f46014d6e2db2b2dd6b50670061993b25387cb6752aef27ddd0d1399b40340eca2d2dbf612cbda0f3994f1eb7ae8d5871aed9514a79097216e50faa26594169844504dcc87a804951c30f16bc1de54b6828459d9c29f84057b9f03f6d304f2898811968adef403e75fe0aa3ec9522f7dbcf5618248ca94efe3c73e0d6dd532355552aee0bd628a81577a3d39620d4ec6e4936b5b2ecfc651e140b061eb10e67bceab624b19a1814e404517c13786b521ff3e7870736285a2783711695e85ac3f992f9cf21a591055a2a5d1f3de458b4c2354434bd31761349eaf55a69f9c0c43e1ca63c1085926d9f7a3b268f1b51e926778e9c4f5ecc04ecbfb4aead8cba0b0abb8ad8dd12864f26eb3194bf7a2381e791303f3f97f4a109cf5c375209ef02f08368dde3cb3cad281c3d9903e2bf3a92526a512cf055540bd3ede100ee2d34db12a1f855a7f479430610073900e41ffd595bbf6ce2a442ebdde58934274bb4bb74ffb47cb73c3178dd3705cd87eac79bbdc305a7f81d54273974a40e6d612631f452f54ba7eb9c403d3892b52699f4bc17a4049b7409d4fecc8cf54f0e5bad782fb0931c44ae686f475e4e45da166c0b11317d2cc82c1b1fb035391096b46c6894a10731e85d265fb73c44c1ca1ebadb792fa9965cf698fe5930f831541d55faee77c5fccf23eafe3b6e5a65dc5306dd8986e59f01b75d0e21f34cbbde1b2638e2826c3b9c87ef146290ab13907c7e45368ccb9e47001ea5dd1a5d5f705e2c1a30eb9baaa1b9c9a7339fac8a27f21a777d31368a16b123c15ee98ae29fd0b585e5e4371800139e5cc21f1d738cde2c9ccaed41c6906103e2731d13d138c623660e96b9dd1fa571ae3c34f5eadd6270ed282b74df5bef0a024a16c255f186a4e4b96d242255a900ed76482c428bc5d2d50b45ad6e552a02814fd75eec06901e39c0f47c8f2bcd6ba80dd349133449b3c5cdcd4ccd1494f6226f76bb8e94f2aefd2479df5c6d06a2191a6411ce439e902bcebcd593eb274b52d3a8132214ed740006672b8fcef50c00a23cc71916407b9f21942ab2e92431fef9317d1b74341fe183be488fa7269b616f9e06b517302b2a107989a263f6af62858926937e6476014ef5be613f5c5a4902fc5841a83520616e65a8cd20c503b4ac9df9a65aec30271db951bc2c8450adfc7568963489073d04822395d404f05e1170cc9a2d87d8d82793ba545cdf87ef1417dc8df4caadb4a63dd641d1c0af410a7386ffd9d0530456061f300c0917163fe31ab5053c28f75f1a9a1477b9a4d4cb67591a6fc090f576f3ab4562de6d08a147105fd0268d778580516f236ea9398d8717706ef90528c5723a03f9460dd359653433696c9e6cb02a21d769c12ddb8dbe728f2f79c0848eb3f87d7f7767888b666d39bc09a99bb40af2af8993f3c89d977bd574b3b8ab4fc4b07f515193794d47875731d04f2122f0db10abb2465b9698aead798398cfcb27ab620f9a56669eda4af0b2294fef30e89c0b67c84ab379fb2dac5efe300ed9246267f10bb34f130703d5f951b9b9be03486363899272a1392146a15ab1f9cf70cdc01db32962eebc945d16abdd1f54e32201647b85650971675cec20e4eea031e8880b9b67e2d0b6fdaee1e457d0359c8035f13fca65ffbac5aa95cab20eeb86329a38161676f3d8dad5e88c5d5bd2c8ca3bb666b0e025b5284925f38c9c1e3f5d7104a50ce56e8371e4e2dfe63d543a4185e3034857ea2bcb35ca1e4157c9d45c87807aaea423aa010e45024ecbda2c225da77208b76fea4263c9ca436a80308a1e6cf53bf1abe6aab01f287976689c91c5045773f2f008d62c49e0cd739af24d48174ddb60bfb866f23c19af677c90bb86995afd2a0ea1fc5fee263946465c685b0063c8ece0411443ecda9d519303e74b9c22fabc709012881a09434d780682ef8a0eeaf200b7fe4876dc74d263592331b6cd25aeec154002c18cad1c051354615dbeb4885151c31f920c82435448ff094d1f400470da5d489b221b75899748bcba41edc6eb6850fa239d07c6910f2c06af387427f7b063086dc15474ff9d2d170b4e55d4f7f2432d03d3b822d9f4812f31a3f60758e5734bc535d44c33736a5d8efa19883af4d0d061e315907253f8d431355f6a0b7cc460cee607c5cf7561852c048aaa0e704a128a5741c8fae19fbd7d062ec988b35719a914513ef892909b1b122acd68344c4f88e84d7d9dccd9b7094529592f2237966bfcae2e1b751e3b0df0d388906beba86997c1fd4148fbf1ef043c66846c1688f79575dd265383389d2fac480407e74458693a663e43173ea1d05a719abf5567cc1fac300a0ebb22cc0d23c4792716023c016bde04a12ebc29a8723e738efe220dc20b6b77b6b0f005005e630b84a0469a44dbd988d1fabc364cb48f001caf0244e586c7475ecf39c9c89b52d48c1d89a44ad0b96", 0x1000}, {0x1, 0x7fffffff, &(0x7f0000002a00)='%\x00', &(0x7f0000002a40)="986c6ce469465302d1609d8c3a96b9d49601932f0af669b23f1f126a4fe20fa47ac4342e652bced2c41da8e89b117fbece4a06f26c9601616e350084862a46289fb8d5cfaa839e99f51a5793a18739e537a14e9236a065dca301751fa445a31a7e94d0320208ca8aac8885a3dc2b5bd16b84362d2dfa572ad02522ddb5768e72b05e84d3f2c35a1711bde79b828879011129c40ea24313525dcd5588b9b2e8c7d310a2a01a181817b771", 0xaa, 0x28}, {0x3, 0x3, &(0x7f0000002b00)='\x00', &(0x7f0000002b40)="295628f97d2dafc9b23ae6f5f024d130fccdef32e0cca5fed8253d01bc184bb114ec536fe6525eeb9c7ea106a8085f6ef777768249edf065156e5dcbc82ec40471904a1197ee14bd03c06a163bbb9ac1aae07a11b9f2f874b929fa1217063ad7b004b7193fad303a2fa92f042ab9d596e6fa403b5eeb08e41a13177aba0bc5641b1eca2b243cd33ce49bd449977944858914472c0466d7fbddb8528d397977da7dbb519b9f3dbf9736aa27b4ace758f8111f4b9c780ff72a06087fdbbc2feca37b0b6b3acf55a0cb465fd33cd98d46f15f48e9b9448d55a02b014710a4333a9bade8ac08d29bd1972a36a923242a463a5d6503c61980d8e2fa9828deef0a3455131c79e521de08bfa5298fb367eeb335c5919de9610ca70727849f1e297af6cbf47c0d6ea7265238a43c0a6e74a63551592d9848c6621358af9c1f8db9d5c832aa3f0ae7e26cad0723f5b86fb68bc84b2759c939f3b8cb3573ba3cd5253c0ba0a7db99c5152396463152b71abdda6a061fa106820963fb88a6a31e1cf8c6565e4b14430213f92fb6f0b0953063d234d09a1184bf1f191b5f616ae6fb126423ddf2f5f9b0735768a85c7a448c23f24e0ddb11ea5b9209efffb648147697bb8cd3bd454db0c847e2bb48aff11aed3bedbaee82fed7d1d1b70e0047e4596620b5e5aa3418943de2264abb8294e898dd18723cfc7ae3a9387774989f564d68c744c5ce2d9706cfe30b846a7f3c040a4adba0d94949a6e07808d8e4c8064529f66163944a6490adbc24b9c50f2021a7a27b08f5b88ab0b1ba79af05fac4c3215c6e0961fccdb361de7acbc93ca879e301b05ba4d1a6625726f20282469d8832a88af1a24f524667a3827d6f59b02cfaf66c076d970e7991bb216f6b6f537332098c7ef37310ecd5674e970748aac72457354dd6c2978cf0035e45244d7b5d5e27d6a660e4221cad33d61e20cb8022b7ac25cebd6d06b2a26ccc22d2568c5b935ec9ff12932a2908c2431fa8e64d3e306c5173cefd81ac9cd02cfcce5f2aab26b3a009d9b8ae2214a50d9caad5907cd3aba63efaf1611cfa14de04020d0fce6210b8962d8d981a2069cfae1ebf540235c1bf56e419ca1016c60e118dea5bf933f6ee57ab458419fc80434f37b805e0d270e7c1ac7d03a91d025c4fba0c1fc555e23e29f0a1c15d4b8251a3e6af1de8ed6897cb6e65c3e7343ac17463f11b98831756c4771eb7c74060e5982b11fa0477e5de50834039b4530faaaa020f78d9a6f1c260847b05b5a0e3f4c5ab75dec819685ae6ac8bbcd64fe8bffe3427d6639ded89e08ce0aa7af89d0a813bddbc32e82773feff2a1e16d4786849d95ca1a55ec24dcdaa56321cd539b2fe7589704a36fd64e9a01915348d044aeac2c703450586cb9d8711ff94a5cc861cad638f8d7e5b843b1a5e77cd3b30046f0691d0a2e0f7889834f3a2d57463bd3a7e479a33c0b11d94a818e92a23106885f63236ebbec1957d9c31ca9257f88256c17f05493421b1dcd9aa1d56eab38e44961c116c00885691f6c512418b444d17d14ff5b8a26d547b256b856b95c3f7ea433cfc86b0322d65f9066b92ca3fbe2bf3a0f626e35eb8300dc1c497404939c961325723fad849729ae8d0e67177c870b922311f7c22f9b7190f2cb76f1992f9bf7039ff258871bce2793e1eb5c9b3893bdca0b9644d492eb2324302a0eb9f8cc8d866efdb7319164d527086ba57f6d7a389889b9ccacaba65b8d0c4d7f7a91e6ec8fca354c37c585db005ea9bdc9c52336c8e279d3bd3a15f1f9df0970411aa6a29c1eeb55501e41f3d7a2500124f243b87b3874f06c646053aa6454141868f910ba22d928ab03027d242f2ec672f106c447166581034637a1dde666283f550b6eb2b2cfcd52b8a9488cd31fbf85039192798e517a6c7508358e20c556a484f25e11d58c85b048108bd85a6d4647116a9983f31487088117ec3168159d9514c164f992a1cd1b5647692dbc0178498718266122a93e19af6f09e91ede9cdc6827cd9e78602ba4bea59db6c783ac1bd78a9dd592767bc53e021a5607258763e177a567423d1bb11c04c69fa84628583cb9ec2ddddd5bac49d568706c3956501f8e71b632f8d5e2b4e366b6e71a7cbbd54944c91160caea928e3198755d35bdad1790ad02b15271b5f820a99958da2854d88265ba9162853010f3e534f9e695b2881dd2d124a9cd3719c38567c7ff440fb180255d92bf77451493c06cff73752f2d76f8977ec23adbc757ab18332e8a0a2b44678a987801045e90c550862006856caeaca78dda03ffb43252d577012a4c796bf15de09e6efac99f2e7a9b63dea6849e083fdf3dded254348566e79db3012cc1b98ce4bceae8f0e93e8c674a6c82e8d94d313b2e97390bb02df1d3236e597d272918af456357055de46023b31ac00b5a563095995214de68c382bb217a232b7717d57828aec1f8211003acd9c4fe5fdf6e6d7b61f2c5e85266e773a5dd5ba1b193be0518615455e6222de8b3ac57cc5ce4cb69e7d6a8ca222373d1f87e415ad1ac434795e56cd92c50c3a812d2f4e25ef16371c303fa1537fc40da69441feb20a79c9dc1557392a6dfc2e732812aec415a6a99ca74fd1024f27a2ab9489855e669727b2c0c40ddb126a498744930acb75342dff896530826431561ab125a4de7e71197ea3e64536e96a6e98f7a236d239eca769b916167fdbe4d411e54d57acba46db0d2741684221afb8f26f2ce6fdf74794a376594318dbc4e4bec4e0e2562579ebba7a3af6e89e0f35877a860a79f0ca5ae5f9d73e2edb841b67ad485698f4d7ac7ae2a7a011fd0e91050363b881519b9a2938ee62b25dd218be650dd14c10207ab951151dfd1614574501e05193029f3d9a9d706e20cbda5da048b36e5a1ef5b372f25e8c32039590b45d9f5f6c223d96f08b1fa3368c496ec004f9ce1102cdebf1e0cd95285a435a73a88d281a1639062708648ea498dea4fa307da7fa552bb25846d032ea8aa4fbfd866503902f92ac4fce1f471775a8f8eb0d911c31271f4b56528a746fd6b3cfbf76daa6810b90bcb65214837e8d65e962d8f2bb392812179edd0b605386abdb0b63d725c6363233febbe4b6e2f3a5e1a19211e02c76a1cf15b4bc424f6de427e4271baacc209e568bfa757d1c16f580482c421dca8eced340d5a5713115843a58511691361cf1cb8a6708ebe9676c886c35152fd4191fe768d7c8fcf59a2347bf87949a661f24d2642de1d120dd33468e2b99b2c3258d9493d00dc64d66cd168f4c496814be284f49943f45196a2f47a7569057d0e97ac020dcaaa1b437c6170a0feaf6c4f7da830a1e3f53bc97d27eb74862a84155f68b8d3c4dc2f0c6776adebfad4275460cc92fc3d2725422c7c483e29c121d54630c0ba59bb20d23af29261b5bb70b475f3c7c95f4def434e45a6400748db0fad56dd10e8b3ef17abbd9127587b7d0dfd2afbfedae0daf7b29566f95e9368c5e5ee5f3c3c8bfc94d3d2d25349cdd5661a4a0587be53fa680c4ffd90acbfa293e3a1cfa7240ac6787848d77ea621556b636378d57eb254d15ea9520a6a8c34c7cf8fff3cbcf4a0d981f5ef7981c13271baec35ec21ae0d8ba7ee20b9f69eac0df0ade4c9e24ca6f3012bbc1153512a28e7f738d6b0f3ba1d18134c4d7a2e25cec6aa232f034504327fc344a0b0f11a86b84a3f90e3e5dff8650857c18e13606e47193d4203b3d6ad0ef177f989af6aae1929028feab6d8dcb2317b2922e07616afa7fbc8e4f0576e9b27b22224108355beb53972a48d23e57926f2e1fe96db9d832501d4a2b1d39378e5702f1298ea3ea01fc76359c2fd7d01eb6098f1c820dfb912bf58f209997547626ddd49979651f0badb3130bdf357145293ab751ce0575adfbf2e3f054165a508475b3b04d05bafaf06f0ff5be39cd71e7666aa59b3d69ced51598b73facf8f1f5f9f8cb6ffa7eaff7bad782b23eb27ac1f10979488ac8eac3771a046a4ebce1630a274a350a5e3696d9c21c40e064b05ae70332ffa17161c04833dd4051260cda86da68d8ff4eb7f40a3adc1eb7afb06869603be32bc753ec7bc10b33f723cd0f0c10b347552ab7d6c1b6f15c1a9e177d43194b5e1b3875266136c4f8d45be2b264fcfa43c689b94413fbd3696fa5315ad2b27911f2af1c0b3042ccfc0a056e9d7f1815ad64945c3d6e5c9de7b40bb646a065996be499768e39c3f88df64f3afd75b7d291c919c5c1eec80275bc5e18f90979e7b6cec92b16524fc51803e49b6c44966e5c1564b12991e7c1e488fbb5b584ea416148db27ccfffa4ee739f5a7835cee22767b10188dc2c4a567bad54f618be32f58cd5864a3ba82974bff7bdfa0f68ee6cfaa2e68423f5c5aabeb12bcba6dd5227373447b3108196f84c865f228454a1889b6d7a9ee1734582a563bbc2d802f9eb455f74dabc0d984e9b6d70da701857462fed98ab1ae96a1e3ed7606d9af75fb732760090474e580618c2c59d992782cedec9bab0291717265ca568fa78a06de5730302cec35484c16906bd97b65e1c4227d7653151a6e9fcb835a8aeab5614f1c92d628315daa9908b8a32336de3a5b444c762a9f8ce53185591a66ec8fa4be33fbc498814f3ecd785f6eda3b1c4a821c12b91dc3409a21046f9554c98b2d03283548b4ce73bc04fa1c1752b7a6ae79e44c49d79e029c2a26b758abb01379702f720c3b0e1de35d3dbb31fc2c35245c9577d90517b6c662ccbc45a51a57475ceb4557295b252fb170063b96326e1e23282e6d35ea40fed7a851394c5993ebe556f385acbe87cf7304234731b5264b9e983305ee0882428cc39b3098feb07acefe2be99c02ccb300efa0cfda1001f9aa06d25ef6e3c7902661c53d8740ddc578cd5f4d5bf3366fb1c38cd6301681f2dfdda5e7253626116604c541d442dca0c4efe9d063ced625a197ee506a97fb69a9a44749ace9e84e06b4a6d021664f2998777cc29d8cd551dd06e13bcdcae88ae785bcb508ac7d23a73c1d90c8aced965b75cc2fc54d060d972b09de33d3e2a1db68bc9285232b11a4b805d35df31d40195e7dc2d81161fa292075f1552167e50a394938ce2ad61f59199cd42b05a61ddb2b5fa3ef58667bde65b158b2e9b0c5a47150f780ba42e714396bbbf11b1daf7f6b03563a35e58ee5109ef9bda947b56161670b126f822d362eda73a8bc9855a46cf097a8a98b198d8c3e7bd08f8c974a782c942cdc5f265feb025d8948e6236d1e4b4d8ffffc3615eec6b865cd8bf64e2fa5083c72288f9a08ff4803b0451fa734d4f393e510abfa1ddcd3e9d5c85003c3c87481126478098f0ef52a190df7ddd005504d21ce68b093e1ffa9b4df7b17841228c42ffd48b7a75c70e357d1c7e117b5e9a13df4ca3938a8f60c2e8db1b8d8eb1f44dfbca6d81a8594c8e93431be6d3fe4c4e2cec5195d5c29093b2d788566d4a86165f69280833bdbdee5c5261806fde1b91e69a398b888760f484f283aeee57d6730f2877f4efb05213e17b4eedab905c5f47746e13150be7397c99693cbb5daf43cd10fb49c6849a9d023b7e4d46da2193053e06af260d69fdee1f5eb1c45f5af5e6fede64ad1e49528d6e8838fd056f0520b10976527988ff866094b9b8c8038cffdd4de67281311f9b8704c41b452c7c3419b94bd4f30fe2afce4b7da3ac3fb15289c6e964d75d29a50964e2eac65764dc56568aa5ee9052c12b8fdaf2efc3314b2f5ca76d068408779584977d26d1bfb9eaf0b437e8d87644ab0a586ffdb1fc84e5bceff", 0x1000, 0x8}]})
sendmsg$nl_crypto(r2, &(0x7f0000003e80)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003e40)={&(0x7f0000003d40)=@upd={0xe8, 0x12, 0x0, 0x70bd2a, 0x25dfdbff, {{'cbc(anubis-generic)\x00'}, '\x00', '\x00', 0x0, 0x400}, [{0x8, 0x1, 0x7ff}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44085}, 0x80)
syz_genetlink_get_family_id$devlink(&(0x7f0000003ec0), r2)
openat$tun(0xffffffffffffff9c, &(0x7f0000003f00), 0x10080, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003f80), r1)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000004040)={'syztnl2\x00', &(0x7f0000003fc0)={'syztnl0\x00', <r4=>0x0, 0x29, 0x0, 0x3, 0x5, 0x0, @loopback, @private1, 0x20, 0x7, 0xfffffffa, 0x722}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000004080)={'wg2\x00', <r5=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000004100)={'syztnl0\x00', &(0x7f00000040c0)={'syztnl0\x00', <r6=>0x0, 0x700, 0x700, 0x8, 0x4, {{0x7, 0x4, 0x0, 0x8, 0x1c, 0x68, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}, {[@end, @lsrr={0x83, 0x7, 0x4e, [@multicast1]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000041c0)={'syztnl2\x00', &(0x7f0000004140)={'ip_vti0\x00', <r7=>0x0, 0x20, 0x7800, 0x1, 0x7fff, {{0x10, 0x4, 0x1, 0x15, 0x40, 0x67, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x18, 0x3, [{0x7, 0x12, "005faac61df41c7045e83fe18bb0f983"}]}, @timestamp={0x44, 0x14, 0xf7, 0x0, 0x2, [0x2, 0x2, 0x9, 0x20000000]}]}}}}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000004300)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004200)={0xb0, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8081}, 0x34040084)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000004480)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004440)={&(0x7f0000004380)={0xb4, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040)
sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000049c0)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004980)={&(0x7f0000004500)={0x46c, 0x3f4, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x1, 0x29, [0x8, 0x9, 0xf423, 0x4, 0x89, 0x8, 0x6, 0x4, 0x7, 0x5, 0x3f9, 0x9c4, 0x6, 0x5, 0x5, 0xffffff01, 0x7fff, 0x400, 0xfffffffd, 0xa, 0x5, 0x7, 0x8000, 0xff, 0x5, 0x40, 0x9, 0x5, 0xc1, 0x8, 0x0, 0xffff7fff, 0x15, 0x7, 0x4a4, 0x2, 0x2, 0x1, 0x10001, 0xc, 0xc340, 0x80, 0x9, 0x8, 0xfffffff9, 0x7, 0x6, 0x7, 0x40, 0x5, 0xf, 0xa, 0xfffffc00, 0x615, 0x7, 0x10, 0x2, 0x7fffffff, 0x8, 0xf9, 0x5, 0x7, 0x3, 0x8], [0x4, 0x3, 0x0, 0x8, 0xeb, 0x8, 0x87, 0xa33, 0x7, 0x1, 0x81, 0xeaaa, 0x9, 0x10001, 0x8931, 0xfff, 0x0, 0x9, 0xbd, 0x5, 0x7f, 0x1, 0x63b, 0xbc29, 0x6, 0x6, 0x1, 0x3, 0xb, 0x2562, 0xb6, 0x0, 0x9, 0x10, 0x5481, 0x774, 0x8, 0xfffffff8, 0xb, 0x5, 0x8, 0x7ff, 0x4, 0x6, 0x4, 0x4, 0x8, 0x9, 0x4, 0x83f, 0x7fffffff, 0x80, 0x0, 0x401, 0x3, 0x5, 0xda0, 0xff, 0x1, 0xe928, 0x8, 0x6, 0x2b185a5b, 0x8], [0x3, 0x4, 0x5, 0x8, 0x80, 0x47f8, 0x200000, 0x7fffffff, 0x40, 0x4, 0x5, 0x5, 0x7f, 0x3, 0xa, 0x4, 0x7, 0x8, 0x81, 0x0, 0x61380000, 0x0, 0x3, 0x9, 0x8, 0x8, 0x1, 0x4, 0x0, 0x7, 0x400, 0xc32c, 0x42957687, 0x6, 0x0, 0xfff, 0x1, 0x5, 0x2, 0x0, 0xfffffffd, 0x6, 0x4, 0xdb, 0x9, 0x100, 0x1, 0x0, 0xfffffff9, 0x100, 0x6, 0xffff0001, 0x9, 0x3ff, 0x1, 0x80000001, 0x7, 0x0, 0x7, 0x0, 0xa4eb, 0x0, 0x200, 0x10000], [0x7, 0xd58, 0x4, 0x800, 0xc7a4, 0x1, 0x6, 0x3, 0x49, 0x7, 0x7f, 0x7fffffff, 0x3, 0xfffffffa, 0xcfd, 0x0, 0x7ff, 0x7, 0x7, 0xb, 0x2, 0x401, 0x8, 0x6, 0x9, 0x1, 0xfffffff2, 0x0, 0x5, 0xfffffffe, 0x200, 0x5, 0xe07, 0x0, 0x3, 0x152, 0x3, 0x0, 0x1, 0x6, 0x21e, 0x9, 0x4, 0x80000001, 0x7, 0x4, 0x7, 0xbc6f, 0x0, 0x6358, 0xf, 0x6, 0x7, 0x1, 0xb, 0xffff8001, 0x5, 0x2, 0x8, 0xff, 0x8, 0x8, 0x10001, 0xffff4ad6], 0x49, ['\x00', 'netdevsim0\x00', '#\'[\x00', '[-,#@\x00', 'netdevsim', '/\'),\xaf\x00', 'cbc(anubis-generic)\x00', 'devlink\x00', 'syztnl2\x00']}, ["", ""]}, 0x46c}}, 0x20048000)
socket$inet6(0xa, 0x6, 0x6)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000004a00)={0x9, [0x0, 0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000004a40)=0x28)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000004a80)={r9, 0x8}, 0x8)
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000004ac0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000004b00)=0x2c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000004bc0)={'syztnl1\x00', &(0x7f0000004b40)={'syztnl2\x00', r7, 0x29, 0x6, 0x8, 0x6, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x10, 0x8000, 0x6, 0xed09}})
socket$nl_route(0x10, 0x3, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004c40), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000004d00)={&(0x7f0000004c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004c80)={0x28, r10, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1c}, @void, @val={0xc, 0x99, {0x7, 0x60}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4081)
bind$bt_hci(r2, &(0x7f0000004d40)={0x1f, 0x3, 0x2}, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000004dc0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000004ec0)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004e80)={&(0x7f0000004e00)={0x58, r10, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x78}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fb}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x91}, @NL80211_ATTR_DURATION={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0xdcd95ea7ec3dd26e}, 0x4044001)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000005040)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005000)={&(0x7f0000004f40)={0x94, 0x13, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x29, 0x8, "e0ada6d942b36eefcd360f508f861ecafebf1d7abd7d390aabc6e996df5a5ddabcc2e336cb"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x48800}, 0x26b0a8764b03544)
readv(0xffffffffffffffff, &(0x7f0000005240)=[{&(0x7f0000005080)=""/73, 0x49}, {&(0x7f0000005100)=""/198, 0xc6}, {&(0x7f0000005200)=""/29, 0x1d}], 0x3)

1.03667046s ago: executing program 3 (id=6422):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r0], 0x54}}, 0x0)

948.161335ms ago: executing program 2 (id=6423):
getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', <r3=>0x0})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f00000003c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000400)="4c00000011000f140011000200000a0002000000200000", 0x17)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

872.243608ms ago: executing program 3 (id=6424):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x3, 0x7, 0x4, 0x2, 0x1, 0x202a9, 0x8a10, 0x71, 0x2, 0x8, 0xfffffff6, 0x0, 0x800, 0x8, 0x400c, 0x4, 0x9, 0x3, 0x8, 0xff, 0x5, 0x1}})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000006000075ce31530a7d6290916556b6f973550000080000000000000000000000c21a00000000000000a0127b6de0e125049a9282fd790b10c7333ca73a9c0650db9924e6deabb83eba005365d1e6cd1ec74a74824a5734e75056c8ec8e613a87af76e8bea172842046d0426d0a6c1dff32d546095ec5ecf05ebb61fc959ad06f0c79890bcd4818233c952a7eb6c1a60a50f83caf0700bcf8f7715dc6187dd8856fb6708d737178e5903f"], 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r3 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000680)={'ah\x00'}, &(0x7f00000006c0)=0x1e)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]})
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', <r8=>0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000180)={<r10=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=r1, @ANYBLOB="000400005a6dfaf43497c09d7800000200"/29, @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="010000000100"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfffe}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

861.933417ms ago: executing program 0 (id=6425):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000008000000000000000900000073110a000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000200)=0x1, 0x4)
bind$rds(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/98, 0x62}], 0x1, &(0x7f0000000440)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x9}}], 0x30}, 0x4000000)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000480)={<r3=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)="77690addcfbe1f", 0x1}], 0x1, 0xa)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000540)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000580)="0f0000000401666f6f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006261720000000000000000", 0x10a)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
splice(r3, 0x0, r5, 0x0, 0x2, 0x8)
write(0xffffffffffffffff, &(0x7f0000000680)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000480001002abd7007ffdbdf250a008000669e0fe4ea", @ANYRES32=0x0, @ANYBLOB='\r\x00\x00\x00', @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4048491}, 0x24004810)
r6 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$phonet(r6, &(0x7f0000000800)="b1c4fe10b04ff1df49c8b024a0c12a51ed1df7895ca5a31104bee4338c94ff6461c04ae9b348a7d1f642fe8c8d08e4248d251b801d264fd1d7f10db18550bae2fc85900ae9c96928ec9067f2fc0fa5f31970aa0c3ff16a6da7bae0f4344c973e89a5d8f9507967584fd302dd6d69e9fbe6b8b1f29adc3a7f49871aef8b40130ac24a2d944b5a0b17353da4aea439e830f4f27f05294f6071fa1e1abff0a81d845882d60502103d721421ffd1508b14ee35bc155d40d45b", 0xb7, 0x10, &(0x7f0000001a00)={0x23, 0x8, 0xf5, 0x45}, 0x10)
sendmmsg$inet6(r7, &(0x7f0000000000)=[{{&(0x7f0000001900)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000001980)="7f", 0x1}], 0x1}}], 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="1c000000220004f12cbd70cf7f00fcdbdf250a1014fd00"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
listen(r7, 0xfff)
accept(r7, 0xfffffffffffffffd, &(0x7f00000019c0)=0x3c)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000007c0)={'ip6gre0\x00'})
readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206056fd30000000000000000000000140007800800114000000000050015000c0000000500010006000000050005000200000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20004080)

723.996723ms ago: executing program 1 (id=6426):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
unshare(0x28000600)
close(0x3)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x288840, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300008a000000b704000000000000850000003300000095"], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)

675.962236ms ago: executing program 2 (id=6427):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

610.191718ms ago: executing program 1 (id=6428):
bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x3, 0x6, &(0x7f0000001dc0)=ANY=[@ANYBLOB="b700000000000000bf16b000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f0000001e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

606.66835ms ago: executing program 3 (id=6429):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x218, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {0x0, 0x48000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x50]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x310)

451.968109ms ago: executing program 2 (id=6430):
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

451.604811ms ago: executing program 4 (id=6431):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x764}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c}, 0x94)

401.908605ms ago: executing program 1 (id=6432):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030428bd780000f8ffffff000000", @ANYBLOB="4606090000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0)

375.875688ms ago: executing program 3 (id=6433):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e20, 0x1, @mcast2, 0xffffffff}, 0x1c)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000700002ff0500000000000000000000000000014f194e20"], 0x9e)

311.702597ms ago: executing program 4 (id=6434):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x0, 0xc8, r2}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010100}, @IFA_RT_PRIORITY={0x8, 0x9, 0x43}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

227.007468ms ago: executing program 2 (id=6435):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

205.650782ms ago: executing program 1 (id=6436):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff0f000000000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100005ff0000ffa1000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x45844}, 0x0)

32.699682ms ago: executing program 3 (id=6437):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0)={0x0, 0x4, 0x48, 0x6, 0x0, 0x0, 0x3, 0x20, 0x1, 0x1, 0x0, 0x10, 0x0, 0x4}, 0xe)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000980)={<r3=>0x0, 0x10, &(0x7f00000009c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000a00)=0x10)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000a40)={r3, 0x4}, 0x8)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd700000000000010000000400078008000100004a89c8d2bc049d512d9c9f43f538cf6e625592dc4d5ef00000008d4d3e8f037d5c5f536ca327c23bc8395999c0b8b8837914f0f31debb764da9dbb3bc1c10905b77652b6f064840aabe6dadb17b2356fdca2337a5aadc780ddc2fe1da8ff87b570228b6390b43e4572ba782de682dcd8927e8fa568d4ed2339c1e5c56b70cf69ad087d744162cb191b02e2fe2cca843d7baf1c9ea18d8104e75b89048d0a79eb1266bd8c6e0c1d5d751c27ef191c346b63cf26c03aeb91569558b5ddfa21d88e43390cb5967fc609893167907889b6f43a52d8c93ae5a6b68fb300a7c0730b2fa634c751bd311e33f701ccdd902f1e0735700f17598a9e8af0d5ca"], 0x2c}}, 0x20000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008002000800000000800", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090)
r7 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000005c0)={<r8=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0)
splice(r8, 0x0, r10, 0x0, 0x80, 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000900)=0x1, 0x4)
sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c200000680001000400020004000b000400040002000000000500002a8a8e38f0c57bb3accc7405623973"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000500)=0x5, 0x4)
socket$packet(0x11, 0x2, 0x300)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000740)={'dummy0\x00', <r13=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c000000240005040200"/20, @ANYRES32=r13, @ANYBLOB="00000100ffffffff000000000c00010063616b655f6d71000c0002"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newtaction={0x94, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x80, 0x1, [@m_mirred={0x7c, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}, 0x0, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x1, 0x0, 0x1}, 0x3}}]}, {0x10, 0x6, "a66f088968b9d6a14d550b07"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008880}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

31.884434ms ago: executing program 2 (id=6438):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x8004)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)='7', 0x1}], 0x0, &(0x7f0000000200)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}], 0x3}, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffbf, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x4, 0x2, 0x1000, 0xc, 0x5}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
accept4(r4, 0x0, &(0x7f0000000240), 0x800)

2.137133ms ago: executing program 4 (id=6439):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000002000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010)

0s ago: executing program 1 (id=6440):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@empty, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@private=0xa010100, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x32}, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40800}, 0x300)

kernel console output (not intermixed with test programs):

410/0x560
[  805.293686][T24596]  prepare_alloc_pages+0x21e/0x5f0
[  805.293722][T24596]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  805.293755][T24596]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  805.293787][T24596]  ? __pfx_policy_nodemask+0x10/0x10
[  805.293829][T24596]  alloc_pages_mpol+0x21e/0x390
[  805.293866][T24596]  alloc_pages_noprof+0xb1/0x2b0
[  805.293890][T24596]  bpf_prog_test_run_xdp+0xc97/0x11d0
[  805.293938][T24596]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  805.293970][T24596]  ? __fget_files+0x2a/0x420
[  805.294000][T24596]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  805.294028][T24596]  bpf_prog_test_run+0x2c5/0x340
[  805.294061][T24596]  __sys_bpf+0xa22/0xd90
[  805.294098][T24596]  ? __pfx___sys_bpf+0x10/0x10
[  805.294138][T24596]  ? __fget_files+0x2a/0x420
[  805.294179][T24596]  ? ksys_write+0x242/0x270
[  805.294208][T24596]  ? __pfx_ksys_write+0x10/0x10
[  805.294239][T24596]  __x64_sys_bpf+0xba/0xd0
[  805.294268][T24596]  do_syscall_64+0x166/0x520
[  805.294288][T24596]  ? trace_irq_disable+0x3b/0x140
[  805.294312][T24596]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  805.294334][T24596]  ? clear_bhb_loop+0x70/0xc0
[  805.294359][T24596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  805.294380][T24596] RIP: 0033:0x7f580c39f559
[  805.294400][T24596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  805.294418][T24596] RSP: 002b:00007f580d1d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  805.294451][T24596] RAX: ffffffffffffffda RBX: 00007f580c625fa0 RCX: 00007f580c39f559
[  805.294467][T24596] RDX: 0000000000000050 RSI: 0000200000001500 RDI: 000000000000000a
[  805.294481][T24596] RBP: 00007f580d1d2090 R08: 0000000000000000 R09: 0000000000000000
[  805.294494][T24596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  805.294507][T24596] R13: 00007f580c626038 R14: 00007f580c625fa0 R15: 00007ffc2d7e15c8
[  805.294542][T24596]  </TASK>
[  805.755228][T17507] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  805.773411][T17507] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  805.775442][T17507] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  805.783314][T17507] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  805.808258][T17507] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  806.068397][T24609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5730'.
[  806.592759][T24619] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5733'.
[  806.592797][T24619] tc_dump_action: action bad kind
[  806.978753][T24624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  807.485503][T24638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5738'.
[  807.508411][T24601] rxe_eth0 speed is unknown, defaulting to 1000
[  807.527841][T24601] rxe_eth0 speed is unknown, defaulting to 1000
[  807.533110][T24601] rxe_eth0 speed is unknown, defaulting to 1000
[  807.648888][T24643] sctp: [Deprecated]: syz.1.5741 (pid 24643) Use of int in max_burst socket option.
[  807.648888][T24643] Use struct sctp_assoc_value instead
[  807.650841][T24643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5741'.
[  807.737780][T15735] tipc: Resetting bearer <eth:syz_tun>
[  807.831531][T15735] tipc: Disabling bearer <eth:syz_tun>
[  807.868039][T24599] sit0: entered promiscuous mode
[  807.868565][T24599] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5727'.
[  807.887248][ T4951] Bluetooth: hci0: command tx timeout
[  808.283200][T24655] ip6t_REJECT: ECHOREPLY is not supported
[  808.404676][  T981] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.404715][  T981] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  808.484926][T24657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5747'.
[  808.712593][T24657] bridge0: port 6(batadv2) entered blocking state
[  808.714697][T24657] bridge0: port 6(batadv2) entered disabled state
[  808.714871][T24657] batadv2: entered allmulticast mode
[  808.763620][T24657] batadv2: entered promiscuous mode
[  808.908649][  T981] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.908688][  T981] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  809.143731][T18417] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  809.143756][T18417] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  809.175333][  T981] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  809.175371][  T981] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  809.370524][T24664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.370712][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.517703][T24676] FAULT_INJECTION: forcing a failure.
[  809.517703][T24676] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  809.517767][T24676] CPU: 1 UID: 0 PID: 24676 Comm: syz.3.5754 Not tainted syzkaller #0 PREEMPT(full) 
[  809.517796][T24676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  809.517810][T24676] Call Trace:
[  809.517820][T24676]  <TASK>
[  809.517829][T24676]  dump_stack_lvl+0xe8/0x150
[  809.517868][T24676]  should_fail_ex+0x410/0x560
[  809.517914][T24676]  _copy_to_user+0x31/0xb0
[  809.517949][T24676]  simple_read_from_buffer+0xe1/0x170
[  809.517981][T24676]  proc_fail_nth_read+0x1bb/0x230
[  809.518018][T24676]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  809.518052][T24676]  ? rw_verify_area+0x24a/0x4c0
[  809.518079][T24676]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  809.518109][T24676]  vfs_read+0x213/0xa80
[  809.518140][T24676]  ? __pfx___mutex_lock+0x10/0x10
[  809.518164][T24676]  ? __pfx_vfs_read+0x10/0x10
[  809.518191][T24676]  ? __fget_files+0x2a/0x420
[  809.518212][T24676]  ? __fget_files+0x3a2/0x420
[  809.518234][T24676]  ? __fget_files+0x2a/0x420
[  809.518261][T24676]  ? fdget+0x1ac/0x250
[  809.518293][T24676]  ksys_read+0x150/0x270
[  809.518321][T24676]  ? __pfx_ksys_read+0x10/0x10
[  809.518344][T24676]  ? handle_softirqs+0x6d0/0x8d0
[  809.518384][T24676]  do_syscall_64+0x166/0x520
[  809.518405][T24676]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  809.518426][T24676]  ? clear_bhb_loop+0x70/0xc0
[  809.518453][T24676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  809.518474][T24676] RIP: 0033:0x7f2d4eb5fd8e
[  809.518496][T24676] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  809.518514][T24676] RSP: 002b:00007f2d4fa01fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  809.518537][T24676] RAX: ffffffffffffffda RBX: 00007f2d4fa026c0 RCX: 00007f2d4eb5fd8e
[  809.518553][T24676] RDX: 000000000000000f RSI: 00007f2d4fa020a0 RDI: 0000000000000004
[  809.518566][T24676] RBP: 00007f2d4fa02090 R08: 0000000000000000 R09: 0000000000000000
[  809.518580][T24676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  809.518594][T24676] R13: 00007f2d4ee26038 R14: 00007f2d4ee25fa0 R15: 00007ffcb90e4518
[  809.518631][T24676]  </TASK>
[  809.855768][T24601] infiniband rxe0: set active
[  809.855848][T24601] infiniband rxe0: added rxe_eth0
[  809.890959][T24601] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  809.891000][T24601] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  809.891038][T24601] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  809.961449][ T4951] Bluetooth: hci0: command tx timeout
[  810.102066][T20122] rxe_eth0 speed is unknown, defaulting to 1000
[  810.104224][T24684] tc_dump_action: action bad kind
[  810.191131][T24682] FAULT_INJECTION: forcing a failure.
[  810.191131][T24682] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  810.191203][T24682] CPU: 1 UID: 0 PID: 24682 Comm: syz.4.5757 Not tainted syzkaller #0 PREEMPT(full) 
[  810.191230][T24682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  810.191242][T24682] Call Trace:
[  810.191251][T24682]  <TASK>
[  810.191260][T24682]  dump_stack_lvl+0xe8/0x150
[  810.191297][T24682]  should_fail_ex+0x410/0x560
[  810.191333][T24682]  _copy_to_user+0x31/0xb0
[  810.191367][T24682]  bpf_verifier_vlog+0x3a2/0x900
[  810.191407][T24682]  bpf_verifier_log_write+0x11d/0x1a0
[  810.191440][T24682]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  810.191472][T24682]  ? analyze_subprog+0x5da8/0x9df0
[  810.191509][T24682]  analyze_subprog+0x5d93/0x9df0
[  810.191545][T24682]  ? bpf_prog_kallsyms_add+0x61f/0x640
[  810.191635][T24682]  ? __pfx_analyze_subprog+0x10/0x10
[  810.191660][T24682]  ? __x64_sys_bpf+0xba/0xd0
[  810.191683][T24682]  ? xs_reset_transport+0x172/0x630
[  810.191714][T24682]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.191777][T24682]  ? call_instance+0x263/0x560
[  810.191803][T24682]  ? rcu_is_watching+0x16/0xb0
[  810.191830][T24682]  ? call_instance+0x263/0x560
[  810.191855][T24682]  ? trace_kmalloc+0x2a/0xf0
[  810.191883][T24682]  ? call_instance+0x263/0x560
[  810.191907][T24682]  ? __kvmalloc_node_noprof+0x52a/0x820
[  810.191938][T24682]  ? __kvmalloc_node_noprof+0x340/0x820
[  810.191965][T24682]  ? call_instance+0x263/0x560
[  810.191991][T24682]  ? call_instance+0x263/0x560
[  810.192034][T24682]  bpf_compute_subprog_arg_access+0x2c9/0x14d0
[  810.192064][T24682]  ? bpf_tracing_func_proto+0x72/0x180
[  810.192125][T24682]  ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10
[  810.192159][T24682]  ? __kvmalloc_node_noprof+0x340/0x820
[  810.192185][T24682]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  810.192212][T24682]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  810.192249][T24682]  bpf_compute_live_registers+0x8d3/0x1ff0
[  810.192301][T24682]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  810.192342][T24682]  bpf_check+0x2744/0x2ef0
[  810.192391][T24682]  ? __pfx_bpf_check+0x10/0x10
[  810.192422][T24682]  ? bpf_obj_name_cpy+0x194/0x1e0
[  810.192449][T24682]  bpf_prog_load+0x14d1/0x1c20
[  810.192492][T24682]  ? __pfx_bpf_prog_load+0x10/0x10
[  810.192558][T24682]  __sys_bpf+0xd0d/0xd90
[  810.192596][T24682]  ? __pfx___sys_bpf+0x10/0x10
[  810.192621][T24682]  ? kasan_check_range+0x59/0x2c0
[  810.192666][T24682]  ? __fget_files+0x2a/0x420
[  810.192711][T24682]  ? ksys_write+0x242/0x270
[  810.192739][T24682]  ? __pfx_ksys_write+0x10/0x10
[  810.192764][T24682]  ? handle_softirqs+0x6d0/0x8d0
[  810.192794][T24682]  __x64_sys_bpf+0xba/0xd0
[  810.192824][T24682]  do_syscall_64+0x166/0x520
[  810.192845][T24682]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.192867][T24682]  ? clear_bhb_loop+0x70/0xc0
[  810.192893][T24682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.192914][T24682] RIP: 0033:0x7f580c39f559
[  810.192935][T24682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  810.192955][T24682] RSP: 002b:00007f580d1d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  810.192980][T24682] RAX: ffffffffffffffda RBX: 00007f580c625fa0 RCX: 00007f580c39f559
[  810.192996][T24682] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005
[  810.193011][T24682] RBP: 00007f580d1d2090 R08: 0000000000000000 R09: 0000000000000000
[  810.193024][T24682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  810.193037][T24682] R13: 00007f580c626038 R14: 00007f580c625fa0 R15: 00007ffc2d7e15c8
[  810.193073][T24682]  </TASK>
[  810.570639][T24601] RDS/IB: rxe0: added
[  810.570700][T24601] smc: adding ib device rxe0 with port count 1
[  810.570722][T24601] smc:    ib device rxe0 port 1 has no pnetid
[  810.648636][T20122] rxe_eth0 speed is unknown, defaulting to 1000
[  810.662549][T24601] rxe_eth0 speed is unknown, defaulting to 1000
[  810.957943][T24695] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  811.002108][T18414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.002375][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.542350][  T981] bond13: left allmulticast mode
[  811.549799][  T981] bond13: left promiscuous mode
[  811.562947][  T981] bridge0: port 7(bond13) entered disabled state
[  811.619346][  T981] bond12: left allmulticast mode
[  811.619565][  T981] bond12: left promiscuous mode
[  811.620378][  T981] bridge0: port 6(bond12) entered disabled state
[  811.698416][T24714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5766'.
[  811.737406][  T981] bond9: left allmulticast mode
[  811.737635][  T981] bond9: left promiscuous mode
[  811.760177][  T981] bridge0: port 5(bond9) entered disabled state
[  811.865240][  T981] batadv1: left allmulticast mode
[  811.865303][  T981] batadv1: left promiscuous mode
[  811.881032][  T981] bridge0: port 4(batadv1) entered disabled state
[  811.993948][  T981] batadv0: left allmulticast mode
[  811.994047][  T981] batadv0: left promiscuous mode
[  812.014563][  T981] bridge0: port 3(batadv0) entered disabled state
[  812.041942][ T4951] Bluetooth: hci0: command tx timeout
[  812.125266][  T981] bond2: left allmulticast mode
[  812.125495][  T981] bond2: left promiscuous mode
[  812.148892][  T981] bridge0: port 2(bond2) entered disabled state
[  812.280285][  T981] bond1: left allmulticast mode
[  812.287365][  T981] bond1: left promiscuous mode
[  812.288013][  T981] bridge0: port 1(bond1) entered disabled state
[  813.346129][  T981] bond0 (unregistering): (slave bridge1): Releasing backup interface
[  813.415704][  T981] bond7 (unregistering): (slave bridge4): Releasing backup interface
[  813.415762][  T981] bridge4 (unregistering): left promiscuous mode
[  813.415790][  T981] bridge4 (unregistering): left allmulticast mode
[  813.446278][  T981] bond8 (unregistering): (slave bridge5): Releasing backup interface
[  813.446338][  T981] bridge5 (unregistering): left promiscuous mode
[  813.446373][  T981] bridge5 (unregistering): left allmulticast mode
[  813.478849][  T981] bond10 (unregistering): (slave bridge6): Releasing backup interface
[  813.496185][  T981] bond0 (unregistering): Released all slaves
[  813.519143][  T981] bond1 (unregistering): Released all slaves
[  813.561548][  T981] bond2 (unregistering): Released all slaves
[  813.587274][  T981] bond3 (unregistering): Released all slaves
[  813.617732][  T981] bond4 (unregistering): Released all slaves
[  813.652280][  T981] bond5 (unregistering): Released all slaves
[  813.705067][  T981] bond6 (unregistering): Released all slaves
[  813.734042][  T981] bond7 (unregistering): Released all slaves
[  813.759000][  T981] bond8 (unregistering): Released all slaves
[  813.789949][  T981] bond9 (unregistering): Released all slaves
[  813.815900][  T981] bond10 (unregistering): Released all slaves
[  813.837471][  T981] bond11 (unregistering): Released all slaves
[  813.864805][  T981] bond12 (unregistering): Released all slaves
[  813.885785][  T981] bond13 (unregistering): Released all slaves
[  813.965823][T24601] rxe_eth0 speed is unknown, defaulting to 1000
[  814.133040][ T4951] Bluetooth: hci0: command tx timeout
[  814.220298][  T981] tipc: Left network mode
[  814.760397][T24747] netlink: 320 bytes leftover after parsing attributes in process `syz.3.5777'.
[  814.807936][T24752] Bluetooth: MGMT ver 1.23
[  815.244277][T24759] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  815.965080][T24601] rxe_eth0 speed is unknown, defaulting to 1000
[  816.626811][T24783] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  816.776132][ T4224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.776776][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.841507][ T4951] Bluetooth: hci0: Opcode 0x0c13 failed: -110
[  816.841952][T17507] Bluetooth: hci0: command 0x0c13 tx timeout
[  817.555583][T24601] rxe_eth0 speed is unknown, defaulting to 1000
[  817.569898][T24795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.570282][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.570547][T24795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.571324][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.581357][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.641011][T24795] netlink: 'syz.4.5790': attribute type 10 has an invalid length.
[  817.641040][T24795] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5790'.
[  817.801956][T24794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.802258][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.446918][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1
[  818.487602][T24803] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  818.777648][T24601] rxe_eth0 speed is unknown, defaulting to 1000
[  818.909903][T24819] xt_TCPMSS: Only works on TCP SYN packets
[  818.922042][T24819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5795'.
[  818.996980][T24819] ip6gretap2: entered allmulticast mode
[  819.028089][T24819] batman_adv: batadv0: Adding interface: ip6gretap2
[  819.028111][T24819] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  819.028144][T24819] batman_adv: batadv0: Interface activated: ip6gretap2
[  819.051978][T24822] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  819.978470][T24841] block nbd0: not configured, cannot reconfigure
[  819.980094][T24841] netlink: 'syz.3.5802': attribute type 9 has an invalid length.
[  820.212299][T24845] bond0: (slave gretap0): Opening slave failed
[  820.250729][T24601] rxe_eth0 speed is unknown, defaulting to 1000
[  822.532888][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.533955][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.143412][T18414] IPVS: starting estimator thread 0...
[  823.145662][T24897] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  823.242232][T24898] IPVS: using max 27 ests per chain, 64800 per kthread
[  823.281100][T24904] netlink: 'syz.1.5814': attribute type 1 has an invalid length.
[  823.294710][T24906] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  823.413855][T24909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.414167][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.477552][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3
[  824.558289][  T981] hsr_slave_0: left promiscuous mode
[  824.566842][  T981] hsr_slave_1: left promiscuous mode
[  824.607468][  T981] veth1_vlan: left promiscuous mode
[  824.607565][  T981] veth0_vlan: left promiscuous mode
[  824.870568][T24924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5818'.
[  825.239162][T24904] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  825.908279][  T981] IPVS: stop unused estimator thread 0...
[  826.226314][T24953] syzkaller1: entered promiscuous mode
[  826.226343][T24953] syzkaller1: entered allmulticast mode
[  826.354592][T24601] rxe_eth0 speed is unknown, defaulting to 1000
[  826.465110][T24962] FAULT_INJECTION: forcing a failure.
[  826.465110][T24962] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  826.465147][T24962] CPU: 1 UID: 0 PID: 24962 Comm: syz.3.5829 Not tainted syzkaller #0 PREEMPT(full) 
[  826.465168][T24962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  826.465180][T24962] Call Trace:
[  826.465189][T24962]  <TASK>
[  826.465198][T24962]  dump_stack_lvl+0xe8/0x150
[  826.465233][T24962]  should_fail_ex+0x410/0x560
[  826.465271][T24962]  _copy_to_user+0x31/0xb0
[  826.465304][T24962]  bpf_verifier_vlog+0x3a2/0x900
[  826.465345][T24962]  bpf_verifier_log_write+0x11d/0x1a0
[  826.465371][T24962]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  826.465400][T24962]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  826.465433][T24962]  ? verbose_arg_track+0x40b/0x610
[  826.465469][T24962]  analyze_subprog+0x2cdc/0x9df0
[  826.465497][T24962]  ? bpf_prog_kallsyms_add+0x61f/0x640
[  826.465586][T24962]  ? __pfx_analyze_subprog+0x10/0x10
[  826.465611][T24962]  ? __x64_sys_bpf+0xba/0xd0
[  826.465633][T24962]  ? do_syscall_64+0x166/0x520
[  826.465653][T24962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  826.465719][T24962]  ? call_instance+0x263/0x560
[  826.465745][T24962]  ? rcu_is_watching+0x16/0xb0
[  826.465772][T24962]  ? call_instance+0x263/0x560
[  826.465797][T24962]  ? trace_kmalloc+0x2a/0xf0
[  826.465823][T24962]  ? call_instance+0x263/0x560
[  826.465847][T24962]  ? __kvmalloc_node_noprof+0x52a/0x820
[  826.465875][T24962]  ? __kvmalloc_node_noprof+0x340/0x820
[  826.465910][T24962]  ? call_instance+0x263/0x560
[  826.465935][T24962]  ? call_instance+0x263/0x560
[  826.465981][T24962]  bpf_compute_subprog_arg_access+0x2c9/0x14d0
[  826.466010][T24962]  ? bpf_tracing_func_proto+0x72/0x180
[  826.466070][T24962]  ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10
[  826.466105][T24962]  ? __kvmalloc_node_noprof+0x340/0x820
[  826.466133][T24962]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  826.466160][T24962]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  826.466197][T24962]  bpf_compute_live_registers+0x8d3/0x1ff0
[  826.466246][T24962]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  826.466288][T24962]  bpf_check+0x2744/0x2ef0
[  826.466337][T24962]  ? __pfx_bpf_check+0x10/0x10
[  826.466367][T24962]  ? bpf_obj_name_cpy+0x194/0x1e0
[  826.466397][T24962]  bpf_prog_load+0x14d1/0x1c20
[  826.466440][T24962]  ? __pfx_bpf_prog_load+0x10/0x10
[  826.466498][T24962]  __sys_bpf+0xd0d/0xd90
[  826.466537][T24962]  ? __pfx___sys_bpf+0x10/0x10
[  826.466577][T24962]  ? __fget_files+0x2a/0x420
[  826.466621][T24962]  ? ksys_write+0x242/0x270
[  826.466649][T24962]  ? __pfx_ksys_write+0x10/0x10
[  826.466681][T24962]  __x64_sys_bpf+0xba/0xd0
[  826.466710][T24962]  do_syscall_64+0x166/0x520
[  826.466730][T24962]  ? trace_irq_disable+0x3b/0x140
[  826.466754][T24962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  826.466775][T24962]  ? clear_bhb_loop+0x70/0xc0
[  826.466803][T24962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  826.466823][T24962] RIP: 0033:0x7f2d4eb9f559
[  826.466845][T24962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  826.466863][T24962] RSP: 002b:00007f2d4fa02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  826.466896][T24962] RAX: ffffffffffffffda RBX: 00007f2d4ee25fa0 RCX: 00007f2d4eb9f559
[  826.466912][T24962] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005
[  826.466927][T24962] RBP: 00007f2d4fa02090 R08: 0000000000000000 R09: 0000000000000000
[  826.466940][T24962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  826.466953][T24962] R13: 00007f2d4ee26038 R14: 00007f2d4ee25fa0 R15: 00007ffcb90e4518
[  826.466989][T24962]  </TASK>
[  826.957008][T24973] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5832'.
[  827.813747][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2
[  828.847267][T24601] bridge0: port 1(bridge_slave_0) entered blocking state
[  828.849840][T24601] bridge0: port 1(bridge_slave_0) entered disabled state
[  828.850031][T24601] bridge_slave_0: entered allmulticast mode
[  828.881138][T24601] bridge_slave_0: entered promiscuous mode
[  828.905512][T24601] bridge0: port 2(bridge_slave_1) entered blocking state
[  828.909194][T24601] bridge0: port 2(bridge_slave_1) entered disabled state
[  828.909379][T24601] bridge_slave_1: entered allmulticast mode
[  828.920145][T24601] bridge_slave_1: entered promiscuous mode
[  829.088370][T24601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  829.105098][T24601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  829.269288][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4
[  829.283100][T24601] team0: Port device team_slave_0 added
[  829.302045][T24601] team0: Port device team_slave_1 added
[  829.393877][T25045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5843'.
[  829.400551][T25045] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  829.440040][T25045] batman_adv: batadv0: Removing interface: batadv_slave_1
[  829.523178][T24601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  829.523200][T24601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  829.523229][T24601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  829.545181][T24601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  829.545203][T24601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  829.545231][T24601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  829.799636][T25051] xt_recent: Unsupported userspace flags (000000c5)
[  829.874023][T24601] hsr_slave_0: entered promiscuous mode
[  829.875267][T24601] hsr_slave_1: entered promiscuous mode
[  830.733037][T25078] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5854'.
[  830.816523][T25086] netlink: 'syz.1.5855': attribute type 1 has an invalid length.
[  830.927277][T25082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5855'.
[  830.989304][T25086] 8021q: adding VLAN 0 to HW filter on device bond15
[  831.189441][T25096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5857'.
[  832.019724][T24601] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  832.046573][T24601] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  832.048887][T24601] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  832.087059][T24601] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  832.090798][T24601] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  832.125418][T24601] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  832.137721][T24601] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  832.165913][T24601] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  832.239786][T25126] tipc: Resetting bearer <eth:syz_tun>
[  832.569905][T24601] 8021q: adding VLAN 0 to HW filter on device bond0
[  832.610168][T24601] 8021q: adding VLAN 0 to HW filter on device team0
[  832.629260][T18411] bridge0: port 1(bridge_slave_0) entered blocking state
[  832.629394][T18411] bridge0: port 1(bridge_slave_0) entered forwarding state
[  832.662512][ T1301] bridge0: port 2(bridge_slave_1) entered blocking state
[  832.662608][ T1301] bridge0: port 2(bridge_slave_1) entered forwarding state
[  833.588033][T25186] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  833.879918][T25197] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5882'.
[  834.167394][T25204] netlink: 292 bytes leftover after parsing attributes in process `syz.4.5883'.
[  834.167428][T25204] netlink: 292 bytes leftover after parsing attributes in process `syz.4.5883'.
[  834.388930][T24601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  834.493470][T24601] veth0_vlan: entered promiscuous mode
[  834.526498][T24601] veth1_vlan: entered promiscuous mode
[  834.580406][T25221] FAULT_INJECTION: forcing a failure.
[  834.580406][T25221] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  834.580444][T25221] CPU: 1 UID: 0 PID: 25221 Comm: syz.1.5887 Not tainted syzkaller #0 PREEMPT(full) 
[  834.580468][T25221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  834.580480][T25221] Call Trace:
[  834.580489][T25221]  <TASK>
[  834.580520][T25221]  dump_stack_lvl+0xe8/0x150
[  834.580557][T25221]  should_fail_ex+0x410/0x560
[  834.580591][T25221]  _copy_to_user+0x31/0xb0
[  834.580624][T25221]  bpf_verifier_vlog+0x3a2/0x900
[  834.580659][T25221]  bpf_verifier_log_write+0x11d/0x1a0
[  834.580689][T25221]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  834.580708][T25221]  ? __kvmalloc_node_noprof+0x52a/0x820
[  834.580738][T25221]  ? record_arg_access+0x148/0x970
[  834.580774][T25221]  analyze_subprog+0x5d93/0x9df0
[  834.580814][T25221]  ? bpf_prog_kallsyms_add+0x61f/0x640
[  834.580899][T25221]  ? __pfx_analyze_subprog+0x10/0x10
[  834.580939][T25221]  ? __x64_sys_bpf+0xba/0xd0
[  834.580961][T25221]  ? xs_reset_transport+0x172/0x630
[  834.580988][T25221]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.581051][T25221]  ? call_instance+0x263/0x560
[  834.581075][T25221]  ? rcu_is_watching+0x16/0xb0
[  834.581101][T25221]  ? call_instance+0x263/0x560
[  834.581123][T25221]  ? trace_kmalloc+0x2a/0xf0
[  834.581150][T25221]  ? call_instance+0x263/0x560
[  834.581173][T25221]  ? __kvmalloc_node_noprof+0x52a/0x820
[  834.581201][T25221]  ? __kvmalloc_node_noprof+0x340/0x820
[  834.581229][T25221]  ? call_instance+0x263/0x560
[  834.581252][T25221]  ? call_instance+0x263/0x560
[  834.581295][T25221]  bpf_compute_subprog_arg_access+0x2c9/0x14d0
[  834.581324][T25221]  ? bpf_tracing_func_proto+0x72/0x180
[  834.581392][T25221]  ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10
[  834.581427][T25221]  ? __kvmalloc_node_noprof+0x340/0x820
[  834.581454][T25221]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  834.581479][T25221]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  834.581514][T25221]  bpf_compute_live_registers+0x8d3/0x1ff0
[  834.581564][T25221]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  834.581606][T25221]  bpf_check+0x2744/0x2ef0
[  834.581655][T25221]  ? __pfx_bpf_check+0x10/0x10
[  834.581686][T25221]  ? bpf_obj_name_cpy+0x194/0x1e0
[  834.581712][T25221]  bpf_prog_load+0x14d1/0x1c20
[  834.581752][T25221]  ? __pfx_bpf_prog_load+0x10/0x10
[  834.581807][T25221]  __sys_bpf+0xd0d/0xd90
[  834.581843][T25221]  ? __pfx___sys_bpf+0x10/0x10
[  834.581879][T25221]  ? __fget_files+0x2a/0x420
[  834.581921][T25221]  ? ksys_write+0x242/0x270
[  834.581976][T25221]  ? __pfx_ksys_write+0x10/0x10
[  834.582014][T25221]  __x64_sys_bpf+0xba/0xd0
[  834.582042][T25221]  do_syscall_64+0x166/0x520
[  834.582075][T25221]  ? trace_irq_disable+0x3b/0x140
[  834.582098][T25221]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.582129][T25221]  ? clear_bhb_loop+0x70/0xc0
[  834.582154][T25221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.582174][T25221] RIP: 0033:0x7fd82639f559
[  834.582195][T25221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  834.582214][T25221] RSP: 002b:00007fd827219028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  834.582238][T25221] RAX: ffffffffffffffda RBX: 00007fd826625fa0 RCX: 00007fd82639f559
[  834.582252][T25221] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005
[  834.582266][T25221] RBP: 00007fd827219090 R08: 0000000000000000 R09: 0000000000000000
[  834.582279][T25221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  834.582292][T25221] R13: 00007fd826626038 R14: 00007fd826625fa0 R15: 00007ffda32b9d18
[  834.582326][T25221]  </TASK>
[  834.700973][T24601] veth0_macvtap: entered promiscuous mode
[  834.767816][T24601] veth1_macvtap: entered promiscuous mode
[  834.879265][T24601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  834.925287][T24601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  834.981635][  T981] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  834.981714][  T981] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  834.981774][  T981] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  834.981825][  T981] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  835.217231][T25226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5888'.
[  835.648815][T18415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  835.648840][T18415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  835.824916][T25240] FAULT_INJECTION: forcing a failure.
[  835.824916][T25240] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  835.824954][T25240] CPU: 0 UID: 0 PID: 25240 Comm: syz.4.5889 Not tainted syzkaller #0 PREEMPT(full) 
[  835.824977][T25240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  835.824990][T25240] Call Trace:
[  835.824999][T25240]  <TASK>
[  835.825008][T25240]  dump_stack_lvl+0xe8/0x150
[  835.825045][T25240]  should_fail_ex+0x410/0x560
[  835.825081][T25240]  _copy_from_iter+0x1d3/0x1660
[  835.825117][T25240]  ? _copy_from_iter+0x21b/0x1660
[  835.825142][T25240]  ? sock_alloc_send_pskb+0xc87/0xd90
[  835.825167][T25240]  ? __pfx__copy_from_iter+0x10/0x10
[  835.825197][T25240]  ? __pfx_process_measurement+0x10/0x10
[  835.825279][T25240]  ? __pfx__copy_from_iter+0x10/0x10
[  835.825313][T25240]  copy_page_from_iter+0x219/0x2d0
[  835.825347][T25240]  skb_copy_datagram_from_iter+0x2f4/0x720
[  835.825386][T25240]  tun_get_user+0x1510/0x4470
[  835.825433][T25240]  ? aa_file_perm+0x4ed/0x15f0
[  835.825462][T25240]  ? __pfx_tun_get_user+0x10/0x10
[  835.825496][T25240]  ? __lock_acquire+0x747/0x2de0
[  835.825523][T25240]  ? kstrtoull+0x137/0x1d0
[  835.825556][T25240]  ? ref_tracker_alloc+0x172/0x530
[  835.825588][T25240]  ? lock_acquire+0x115/0x350
[  835.825612][T25240]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  835.825645][T25240]  ? lock_acquire+0x115/0x350
[  835.825671][T25240]  ? tun_get+0x1c/0x2f0
[  835.825708][T25240]  ? tun_get+0x1c/0x2f0
[  835.825735][T25240]  ? tun_get+0x1c/0x2f0
[  835.825769][T25240]  tun_chr_write_iter+0x113/0x200
[  835.825809][T25240]  vfs_write+0x612/0xba0
[  835.825845][T25240]  ? __pfx_vfs_write+0x10/0x10
[  835.825874][T25240]  ? __fget_files+0x3a2/0x420
[  835.825896][T25240]  ? __fget_files+0x2a/0x420
[  835.825924][T25240]  ? fdget+0x1ac/0x250
[  835.825954][T25240]  ksys_write+0x150/0x270
[  835.825981][T25240]  ? __pfx_ksys_write+0x10/0x10
[  835.826019][T25240]  do_syscall_64+0x166/0x520
[  835.826040][T25240]  ? trace_irq_disable+0x3b/0x140
[  835.826064][T25240]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.826087][T25240]  ? clear_bhb_loop+0x70/0xc0
[  835.826132][T25240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.826153][T25240] RIP: 0033:0x7f580c35fd8e
[  835.826174][T25240] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  835.826193][T25240] RSP: 002b:00007f580d1d1fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  835.826218][T25240] RAX: ffffffffffffffda RBX: 00007f580d1d26c0 RCX: 00007f580c35fd8e
[  835.826234][T25240] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8
[  835.826249][T25240] RBP: 00007f580d1d2090 R08: 0000000000000000 R09: 0000000000000000
[  835.826263][T25240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  835.826277][T25240] R13: 00007f580c626038 R14: 00007f580c625fa0 R15: 00007ffc2d7e15c8
[  835.826311][T25240]  </TASK>
[  836.017052][T25245] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  836.021884][  T981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  836.021906][  T981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  836.177578][T25256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5893'.
[  836.744376][T25277] netlink: 'syz.1.5898': attribute type 10 has an invalid length.
[  836.744403][T25277] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5898'.
[  836.854729][T25280] netlink: 'syz.3.5899': attribute type 10 has an invalid length.
[  836.854756][T25280] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5899'.
[  837.329504][T25293] netlink: 'syz.3.5904': attribute type 1 has an invalid length.
[  837.700233][T25305] ip_tables: iptables: counters copy to user failed while replacing table
[  837.747155][T17507] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  837.758492][T17507] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  837.776931][T17507] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  837.796066][T17507] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  837.800034][T17507] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  837.837778][T25320] ip_tables: iptables: counters copy to user failed while replacing table
[  838.319835][T15151] tipc: Resetting bearer <eth:syz_tun>
[  838.439959][T15151] tipc: Disabling bearer <eth:syz_tun>
[  838.534787][T25342] FAULT_INJECTION: forcing a failure.
[  838.534787][T25342] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  838.534823][T25342] CPU: 1 UID: 0 PID: 25342 Comm: syz.1.5914 Not tainted syzkaller #0 PREEMPT(full) 
[  838.534847][T25342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  838.534861][T25342] Call Trace:
[  838.534870][T25342]  <TASK>
[  838.534889][T25342]  dump_stack_lvl+0xe8/0x150
[  838.534927][T25342]  should_fail_ex+0x410/0x560
[  838.534966][T25342]  _copy_to_user+0x31/0xb0
[  838.535000][T25342]  bpf_verifier_vlog+0x3a2/0x900
[  838.535040][T25342]  bpf_verifier_log_write+0x11d/0x1a0
[  838.535073][T25342]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  838.535097][T25342]  ? __kvmalloc_node_noprof+0x52a/0x820
[  838.535130][T25342]  ? record_arg_access+0x148/0x970
[  838.535169][T25342]  analyze_subprog+0x5d77/0x9df0
[  838.535196][T25342]  ? bpf_prog_kallsyms_add+0x61f/0x640
[  838.535285][T25342]  ? __pfx_analyze_subprog+0x10/0x10
[  838.535310][T25342]  ? __x64_sys_bpf+0xba/0xd0
[  838.535332][T25342]  ? xs_reset_transport+0x172/0x630
[  838.535359][T25342]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.535417][T25342]  ? call_instance+0x263/0x560
[  838.535441][T25342]  ? rcu_is_watching+0x16/0xb0
[  838.535465][T25342]  ? call_instance+0x263/0x560
[  838.535487][T25342]  ? trace_kmalloc+0x2a/0xf0
[  838.535511][T25342]  ? call_instance+0x263/0x560
[  838.535534][T25342]  ? __kvmalloc_node_noprof+0x52a/0x820
[  838.535561][T25342]  ? __kvmalloc_node_noprof+0x340/0x820
[  838.535586][T25342]  ? call_instance+0x263/0x560
[  838.535607][T25342]  ? call_instance+0x263/0x560
[  838.535651][T25342]  bpf_compute_subprog_arg_access+0x2c9/0x14d0
[  838.535676][T25342]  ? bpf_tracing_func_proto+0x72/0x180
[  838.535728][T25342]  ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10
[  838.535761][T25342]  ? __kvmalloc_node_noprof+0x340/0x820
[  838.535786][T25342]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  838.535810][T25342]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  838.535845][T25342]  bpf_compute_live_registers+0x8d3/0x1ff0
[  838.535954][T25342]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  838.535993][T25342]  bpf_check+0x2744/0x2ef0
[  838.536041][T25342]  ? __pfx_bpf_check+0x10/0x10
[  838.536071][T25342]  ? bpf_obj_name_cpy+0x194/0x1e0
[  838.536097][T25342]  bpf_prog_load+0x14d1/0x1c20
[  838.536138][T25342]  ? __pfx_bpf_prog_load+0x10/0x10
[  838.536194][T25342]  __sys_bpf+0xd0d/0xd90
[  838.536231][T25342]  ? __pfx___sys_bpf+0x10/0x10
[  838.536269][T25342]  ? __fget_files+0x2a/0x420
[  838.536312][T25342]  ? ksys_write+0x242/0x270
[  838.536340][T25342]  ? __pfx_ksys_write+0x10/0x10
[  838.536371][T25342]  __x64_sys_bpf+0xba/0xd0
[  838.536397][T25342]  do_syscall_64+0x166/0x520
[  838.536416][T25342]  ? trace_irq_disable+0x3b/0x140
[  838.536439][T25342]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.536460][T25342]  ? clear_bhb_loop+0x70/0xc0
[  838.536486][T25342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.536506][T25342] RIP: 0033:0x7fd82639f559
[  838.536526][T25342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  838.536544][T25342] RSP: 002b:00007fd827219028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  838.536569][T25342] RAX: ffffffffffffffda RBX: 00007fd826625fa0 RCX: 00007fd82639f559
[  838.536584][T25342] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005
[  838.536599][T25342] RBP: 00007fd827219090 R08: 0000000000000000 R09: 0000000000000000
[  838.536613][T25342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  838.536626][T25342] R13: 00007fd826626038 R14: 00007fd826625fa0 R15: 00007ffda32b9d18
[  838.536663][T25342]  </TASK>
[  839.337458][   T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  839.346290][   T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  839.346326][   T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  839.493569][T25363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5918'.
[  839.663867][T25376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5920'.
[  839.882065][ T4951] Bluetooth: hci4: command tx timeout
[  839.993199][   T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  839.993239][   T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  839.993265][   T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  840.310654][   T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  840.310695][   T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.310722][   T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  840.310893][T25394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5922'.
[  840.499321][T25394] 8021q: adding VLAN 0 to HW filter on device bond13
[  840.505895][T25407] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  840.617064][T25404] bond13 (unregistering): Released all slaves
[  840.744349][T25412] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  840.917346][   T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  840.917387][   T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.917415][   T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  841.605630][T25307] rxe_eth0 speed is unknown, defaulting to 1000
[  841.731910][T18411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.732225][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.961977][ T4951] Bluetooth: hci4: command tx timeout
[  842.021762][T25451] bond1: peer notification delay (37) is not a multiple of miimon (100), value rounded to 0 ms
[  842.026371][T25414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5929'.
[  842.032639][T25451] bond1 (unregistering): Released all slaves
[  842.327977][T25466] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5941'.
[  843.271195][   T51] bond9 (unregistering): (slave bridge8): Releasing backup interface
[  843.272870][   T51] bridge8 (unregistering): left promiscuous mode
[  843.300822][   T51] bond10 (unregistering): (slave bridge0): Releasing backup interface
[  843.300854][   T51] bridge0 (unregistering): left promiscuous mode
[  843.300876][   T51] bridge0 (unregistering): left allmulticast mode
[  843.356100][   T51] bond0 (unregistering): Released all slaves
[  843.373221][   T51] bond1 (unregistering): Released all slaves
[  843.398694][   T51] bond2 (unregistering): Released all slaves
[  843.423195][   T51] bond3 (unregistering): Released all slaves
[  843.448386][   T51] bond4 (unregistering): Released all slaves
[  843.488051][   T51] bond5 (unregistering): Released all slaves
[  843.510121][   T51] bond6 (unregistering): Released all slaves
[  843.543599][   T51] bond7 (unregistering): Released all slaves
[  843.566215][   T51] bond8 (unregistering): Released all slaves
[  843.605293][   T51] bond9 (unregistering): Released all slaves
[  843.615622][   T51] bond10 (unregistering): Released all slaves
[  843.842581][T25497] ip_tables: iptables: counters copy to user failed while replacing table
[  843.899999][   T51] tipc: Left network mode
[  844.054785][ T4951] Bluetooth: hci4: command tx timeout
[  844.217118][T25505] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  844.755612][ T6715] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  844.805141][T25529] netlink: 320 bytes leftover after parsing attributes in process `syz.4.5953'.
[  845.756141][T25568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.756836][T25568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.808375][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1
[  845.865461][T25307] bridge0: port 1(bridge_slave_0) entered blocking state
[  845.865680][T25307] bridge0: port 1(bridge_slave_0) entered disabled state
[  845.865861][T25307] bridge_slave_0: entered allmulticast mode
[  845.869190][T25307] bridge_slave_0: entered promiscuous mode
[  845.877453][T25570] netlink: 'syz.1.5960': attribute type 49 has an invalid length.
[  845.913724][T25307] bridge0: port 2(bridge_slave_1) entered blocking state
[  845.915584][T25307] bridge0: port 2(bridge_slave_1) entered disabled state
[  845.917733][T25307] bridge_slave_1: entered allmulticast mode
[  845.923957][T25307] bridge_slave_1: entered promiscuous mode
[  845.995136][T25571] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5959'.
[  845.995165][T25571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5959'.
[  845.995181][T25571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5959'.
[  846.087692][T25307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  846.093344][T25307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  846.121358][ T4951] Bluetooth: hci4: command tx timeout
[  846.148140][T25307] team0: Port device team_slave_0 added
[  846.152907][T25307] team0: Port device team_slave_1 added
[  846.240654][T25307] batman_adv: batadv0: Adding interface: batadv_slave_0
[  846.240676][T25307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  846.240703][T25307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  846.247530][T25307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  846.247548][T25307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  846.247574][T25307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  846.349229][T25307] hsr_slave_0: entered promiscuous mode
[  846.350650][T25307] hsr_slave_1: entered promiscuous mode
[  846.358229][T25307] debugfs: 'hsr0' already exists in 'hsr'
[  846.358262][T25307] Cannot create hsr debugfs directory
[  846.838552][   T51] veth1_macvtap: left promiscuous mode
[  846.838636][   T51] veth1_vlan: left promiscuous mode
[  846.838765][   T51] veth0_vlan: left promiscuous mode
[  846.842497][ T4224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.842721][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  847.565844][T25518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  847.896264][T25579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5963'.
[  848.433094][T25599] FAULT_INJECTION: forcing a failure.
[  848.433094][T25599] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  848.433133][T25599] CPU: 0 UID: 0 PID: 25599 Comm: syz.3.5968 Not tainted syzkaller #0 PREEMPT(full) 
[  848.433157][T25599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  848.433171][T25599] Call Trace:
[  848.433181][T25599]  <TASK>
[  848.433192][T25599]  dump_stack_lvl+0xe8/0x150
[  848.433228][T25599]  should_fail_ex+0x410/0x560
[  848.433265][T25599]  _copy_from_user+0x2d/0xb0
[  848.433298][T25599]  ___sys_sendmsg+0x1c6/0x360
[  848.433344][T25599]  ? __lock_acquire+0x747/0x2de0
[  848.433374][T25599]  ? __pfx____sys_sendmsg+0x10/0x10
[  848.433444][T25599]  ? __fget_files+0x3a2/0x420
[  848.433467][T25599]  ? __fget_files+0x2a/0x420
[  848.433500][T25599]  __x64_sys_sendmsg+0x1b1/0x290
[  848.433523][T25599]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  848.433575][T25599]  do_syscall_64+0x166/0x520
[  848.433595][T25599]  ? trace_irq_disable+0x3b/0x140
[  848.433614][T25599]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.433632][T25599]  ? clear_bhb_loop+0x70/0xc0
[  848.433654][T25599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.433672][T25599] RIP: 0033:0x7f2d4eb9f559
[  848.433689][T25599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  848.433705][T25599] RSP: 002b:00007f2d4fa02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  848.433725][T25599] RAX: ffffffffffffffda RBX: 00007f2d4ee25fa0 RCX: 00007f2d4eb9f559
[  848.433738][T25599] RDX: 0000000004000080 RSI: 0000200000000240 RDI: 0000000000000003
[  848.433750][T25599] RBP: 00007f2d4fa02090 R08: 0000000000000000 R09: 0000000000000000
[  848.433761][T25599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  848.433771][T25599] R13: 00007f2d4ee26038 R14: 00007f2d4ee25fa0 R15: 00007ffcb90e4518
[  848.433800][T25599]  </TASK>
[  848.557648][T25598] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  848.882019][T25307] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  848.904692][T25307] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  848.908331][T25307] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  848.933453][T25307] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  848.939711][T25307] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  849.280348][T25307] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  849.286673][T25307] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  849.353968][T25307] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  849.406189][T25616] lo: entered promiscuous mode
[  849.730256][T25661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5977'.
[  849.730283][T25661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5977'.
[  849.827207][T25307] 8021q: adding VLAN 0 to HW filter on device bond0
[  849.938110][T25307] 8021q: adding VLAN 0 to HW filter on device team0
[  849.971063][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  849.971323][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  850.028201][T18416] bridge0: port 2(bridge_slave_1) entered blocking state
[  850.028339][T18416] bridge0: port 2(bridge_slave_1) entered forwarding state
[  850.399370][T25672] nbd: must specify at least one socket
[  850.750132][T25686] tipc: Started in network mode
[  850.750169][T25686] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  850.750380][T25686] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  851.074629][T25707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5990'.
[  851.183297][T25711] netlink: 'syz.0.5990': attribute type 2 has an invalid length.
[  851.300052][T25708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5990'.
[  851.544894][T25721] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  851.754754][T25727] netlink: 'syz.1.5993': attribute type 11 has an invalid length.
[  851.775245][T25730] netlink: 'syz.0.5994': attribute type 11 has an invalid length.
[  851.871646][T20113] tipc: Node number set to 43690
[  852.025170][T25734] block nbd0: not configured, cannot reconfigure
[  852.039776][T25307] 8021q: adding VLAN 0 to HW filter on device batadv0
[  852.040946][T25738] FAULT_INJECTION: forcing a failure.
[  852.040946][T25738] name failslab, interval 1, probability 0, space 0, times 0
[  852.040980][T25738] CPU: 1 UID: 0 PID: 25738 Comm: syz.3.5996 Not tainted syzkaller #0 PREEMPT(full) 
[  852.041005][T25738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  852.041018][T25738] Call Trace:
[  852.041028][T25738]  <TASK>
[  852.041037][T25738]  dump_stack_lvl+0xe8/0x150
[  852.041075][T25738]  should_fail_ex+0x410/0x560
[  852.041117][T25738]  ? __alloc_skb+0x1db/0x7a0
[  852.041146][T25738]  should_failslab+0xa8/0x100
[  852.041179][T25738]  ? __alloc_skb+0x1db/0x7a0
[  852.041204][T25738]  kmem_cache_alloc_node_noprof+0x9c/0x600
[  852.041228][T25738]  ? __alloc_skb+0x18d/0x7a0
[  852.041255][T25738]  ? __alloc_skb+0x1db/0x7a0
[  852.041289][T25738]  __alloc_skb+0x1db/0x7a0
[  852.041323][T25738]  netlink_sendmsg+0x5cd/0xb20
[  852.041359][T25738]  ? __pfx_netlink_sendmsg+0x10/0x10
[  852.041388][T25738]  ? aa_sock_msg_perm+0x144/0x210
[  852.041421][T25738]  ? apparmor_socket_sendmsg+0x98/0x360
[  852.041447][T25738]  ? __pfx_netlink_sendmsg+0x10/0x10
[  852.041472][T25738]  sock_sendmsg_nosec+0x14e/0x190
[  852.041500][T25738]  ____sys_sendmsg+0x54e/0x850
[  852.041537][T25738]  ? __pfx_____sys_sendmsg+0x10/0x10
[  852.041578][T25738]  ? import_iovec+0x73/0xa0
[  852.041613][T25738]  ___sys_sendmsg+0x2a5/0x360
[  852.041642][T25738]  ? __lock_acquire+0x747/0x2de0
[  852.041672][T25738]  ? __pfx____sys_sendmsg+0x10/0x10
[  852.041750][T25738]  ? __fget_files+0x3a2/0x420
[  852.041774][T25738]  ? __fget_files+0x2a/0x420
[  852.041808][T25738]  __x64_sys_sendmsg+0x1b1/0x290
[  852.041833][T25738]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  852.041889][T25738]  do_syscall_64+0x166/0x520
[  852.041911][T25738]  ? trace_irq_disable+0x3b/0x140
[  852.041935][T25738]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  852.041957][T25738]  ? clear_bhb_loop+0x70/0xc0
[  852.041984][T25738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  852.042005][T25738] RIP: 0033:0x7f2d4eb9f559
[  852.042025][T25738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  852.042043][T25738] RSP: 002b:00007f2d4fa02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  852.042066][T25738] RAX: ffffffffffffffda RBX: 00007f2d4ee25fa0 RCX: 00007f2d4eb9f559
[  852.042082][T25738] RDX: 0000000004000080 RSI: 0000200000000240 RDI: 0000000000000003
[  852.042096][T25738] RBP: 00007f2d4fa02090 R08: 0000000000000000 R09: 0000000000000000
[  852.042109][T25738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  852.042123][T25738] R13: 00007f2d4ee26038 R14: 00007f2d4ee25fa0 R15: 00007ffcb90e4518
[  852.042158][T25738]  </TASK>
[  852.349186][T25307] veth0_vlan: entered promiscuous mode
[  852.405564][T25307] veth1_vlan: entered promiscuous mode
[  852.502712][T25748] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  852.613396][T18416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.613659][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.656310][T25307] veth0_macvtap: entered promiscuous mode
[  852.693982][T25307] veth1_macvtap: entered promiscuous mode
[  852.711832][T25753] netlink: 320 bytes leftover after parsing attributes in process `syz.1.6002'.
[  852.796301][T25756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6000'.
[  852.810919][T25750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6002'.
[  852.924956][T25756] 8021q: adding VLAN 0 to HW filter on device bond13
[  852.938128][T25307] batman_adv: batadv0: Interface activated: batadv_slave_0
[  853.048296][T25756] bond13 (unregistering): Released all slaves
[  853.114066][T25307] batman_adv: batadv0: Interface activated: batadv_slave_1
[  853.143282][ T4224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  853.143364][ T4224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  853.143516][ T4224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  853.143655][ T4224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  853.276745][T25773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6006'.
[  853.350775][T25773] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6006'.
[  853.487997][T25789] netlink: 'syz.4.6009': attribute type 39 has an invalid length.
[  853.515617][T25782] bond11: option packets_per_slave: invalid value (134217728)
[  853.515643][T25782] bond11: option packets_per_slave: allowed values 0 - 65535
[  853.519471][T25782] bond11 (unregistering): Released all slaves
[  853.608870][T25785] netlink: 'syz.4.6009': attribute type 5 has an invalid length.
[  853.621306][T18416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  853.621330][T18416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  853.740115][T18416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  853.740142][T18416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  853.744003][T25795] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  854.110670][T25811] netlink: 'syz.4.6016': attribute type 3 has an invalid length.
[  854.110698][T25811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6016'.
[  854.185534][T25815] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  854.243139][T25814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6016'.
[  854.300416][T25815] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  854.476175][T25819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6017'.
[  854.709473][T25825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6019'.
[  854.797867][T25825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6019'.
[  855.200998][T25830] 8021q: adding VLAN 0 to HW filter on device bond1
[  855.211669][T25830] bridge0: port 3(bond1) entered blocking state
[  855.211785][T25830] bridge0: port 3(bond1) entered disabled state
[  855.211942][T25830] bond1: entered allmulticast mode
[  855.232411][T25830] bond1: entered promiscuous mode
[  855.233132][T25830] bridge0: port 3(bond1) entered blocking state
[  855.233306][T25830] bridge0: port 3(bond1) entered forwarding state
[  855.267806][T25833] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  855.623552][T17507] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  855.630183][T17507] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  855.631137][T17507] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  855.663768][T17507] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  855.664503][T17507] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  855.700738][  T981] bridge0: port 3(bond1) entered disabled state
[  856.089320][T25848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6025'.
[  856.286366][T25850] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  856.299107][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  856.299353][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  856.452342][T16050] tipc: Disabling bearer <eth:syz_tun>
[  856.767991][T25860] FAULT_INJECTION: forcing a failure.
[  856.767991][T25860] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  856.768027][T25860] CPU: 1 UID: 0 PID: 25860 Comm: syz.0.6029 Not tainted syzkaller #0 PREEMPT(full) 
[  856.768051][T25860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  856.768064][T25860] Call Trace:
[  856.768074][T25860]  <TASK>
[  856.768084][T25860]  dump_stack_lvl+0xe8/0x150
[  856.768122][T25860]  should_fail_ex+0x410/0x560
[  856.768159][T25860]  _copy_to_user+0x31/0xb0
[  856.768193][T25860]  bpf_verifier_vlog+0x3a2/0x900
[  856.768233][T25860]  verbose+0x11d/0x1a0
[  856.768264][T25860]  ? __pfx_verbose+0x10/0x10
[  856.768299][T25860]  ? lock_acquire+0x115/0x350
[  856.768334][T25860]  print_bpf_insn+0x14f7/0x2930
[  856.768368][T25860]  ? __pfx_verbose+0x10/0x10
[  856.768394][T25860]  ? __pfx_print_bpf_insn+0x10/0x10
[  856.768425][T25860]  ? _copy_to_user+0x8a/0xb0
[  856.768457][T25860]  ? bpf_verifier_vlog+0x55a/0x900
[  856.768495][T25860]  ? bpf_verifier_log_write+0x11d/0x1a0
[  856.768525][T25860]  bpf_verbose_insn+0xcb/0x130
[  856.768551][T25860]  ? __pfx_bpf_verbose_insn+0x10/0x10
[  856.768574][T25860]  ? __kvmalloc_node_noprof+0x52a/0x820
[  856.768603][T25860]  ? __pfx_verbose+0x10/0x10
[  856.768625][T25860]  ? __pfx_bpf_disasm_kfunc_name+0x10/0x10
[  856.768651][T25860]  ? record_arg_access+0x148/0x970
[  856.768690][T25860]  analyze_subprog+0x5d84/0x9df0
[  856.768718][T25860]  ? bpf_prog_kallsyms_add+0x61f/0x640
[  856.768803][T25860]  ? __pfx_analyze_subprog+0x10/0x10
[  856.768829][T25860]  ? __x64_sys_bpf+0xba/0xd0
[  856.768852][T25860]  ? xs_reset_transport+0x172/0x630
[  856.768881][T25860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.768946][T25860]  ? call_instance+0x263/0x560
[  856.768973][T25860]  ? rcu_is_watching+0x16/0xb0
[  856.769001][T25860]  ? call_instance+0x263/0x560
[  856.769026][T25860]  ? trace_kmalloc+0x2a/0xf0
[  856.769054][T25860]  ? call_instance+0x263/0x560
[  856.769080][T25860]  ? __kvmalloc_node_noprof+0x52a/0x820
[  856.769111][T25860]  ? __kvmalloc_node_noprof+0x340/0x820
[  856.769138][T25860]  ? call_instance+0x263/0x560
[  856.769164][T25860]  ? call_instance+0x263/0x560
[  856.769210][T25860]  bpf_compute_subprog_arg_access+0x2c9/0x14d0
[  856.769240][T25860]  ? bpf_tracing_func_proto+0x72/0x180
[  856.769313][T25860]  ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10
[  856.769348][T25860]  ? __kvmalloc_node_noprof+0x340/0x820
[  856.769374][T25860]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  856.769400][T25860]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  856.769437][T25860]  bpf_compute_live_registers+0x8d3/0x1ff0
[  856.769488][T25860]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  856.769530][T25860]  bpf_check+0x2744/0x2ef0
[  856.769578][T25860]  ? __pfx_bpf_check+0x10/0x10
[  856.769609][T25860]  ? bpf_obj_name_cpy+0x194/0x1e0
[  856.769636][T25860]  bpf_prog_load+0x14d1/0x1c20
[  856.769680][T25860]  ? __pfx_bpf_prog_load+0x10/0x10
[  856.769737][T25860]  __sys_bpf+0xd0d/0xd90
[  856.769774][T25860]  ? __pfx___sys_bpf+0x10/0x10
[  856.769814][T25860]  ? __fget_files+0x2a/0x420
[  856.769858][T25860]  ? ksys_write+0x242/0x270
[  856.769890][T25860]  ? __pfx_ksys_write+0x10/0x10
[  856.769922][T25860]  __x64_sys_bpf+0xba/0xd0
[  856.769952][T25860]  do_syscall_64+0x166/0x520
[  856.769973][T25860]  ? trace_irq_disable+0x3b/0x140
[  856.769997][T25860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.770018][T25860]  ? clear_bhb_loop+0x70/0xc0
[  856.770045][T25860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.770066][T25860] RIP: 0033:0x7f6e7659f559
[  856.770087][T25860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  856.770107][T25860] RSP: 002b:00007f6e77515028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  856.770131][T25860] RAX: ffffffffffffffda RBX: 00007f6e76825fa0 RCX: 00007f6e7659f559
[  856.770147][T25860] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005
[  856.770161][T25860] RBP: 00007f6e77515090 R08: 0000000000000000 R09: 0000000000000000
[  856.770175][T25860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  856.770189][T25860] R13: 00007f6e76826038 R14: 00007f6e76825fa0 R15: 00007ffd64e5c998
[  856.770224][T25860]  </TASK>
[  857.217554][T25873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6034'.
[  857.236910][T25873] bridge0: port 4(batadv3) entered blocking state
[  857.238519][T25873] bridge0: port 4(batadv3) entered disabled state
[  857.238796][T25873] batadv3: entered allmulticast mode
[  857.248497][T25873] batadv3: entered promiscuous mode
[  857.368845][T25878] netlink: 'syz.2.6033': attribute type 1 has an invalid length.
[  857.368872][T25878] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.6033'.
[  857.725966][ T4951] Bluetooth: hci5: command tx timeout
[  857.737448][T18416] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  857.737469][T18416] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  858.209021][T25837] rxe_eth0 speed is unknown, defaulting to 1000
[  858.366424][ T6715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.366680][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  858.667860][T25915] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  858.842551][T25923] ip_tables: iptables: counters copy to user failed while replacing table
[  859.439858][T25939] __nla_validate_parse: 2 callbacks suppressed
[  859.439881][T25939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6057'.
[  859.572893][T25947] sctp: [Deprecated]: syz.2.6058 (pid 25947) Use of int in max_burst socket option.
[  859.572893][T25947] Use struct sctp_assoc_value instead
[  859.601630][T25950] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6057'.
[  859.801377][ T4951] Bluetooth: hci5: command tx timeout
[  859.944998][T25837] bridge0: port 1(bridge_slave_0) entered blocking state
[  859.945197][T25837] bridge0: port 1(bridge_slave_0) entered disabled state
[  859.945766][T25837] bridge_slave_0: entered allmulticast mode
[  859.947803][T25837] bridge_slave_0: entered promiscuous mode
[  859.952242][T25837] bridge0: port 2(bridge_slave_1) entered blocking state
[  859.952415][T25837] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.952606][T25837] bridge_slave_1: entered allmulticast mode
[  859.954322][T25837] bridge_slave_1: entered promiscuous mode
[  859.991687][T25837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  859.995670][T25837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  860.030645][T25837] team0: Port device team_slave_0 added
[  860.035316][T25837] team0: Port device team_slave_1 added
[  860.145045][T25957] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  860.148372][T25837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  860.148393][T25837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  860.148422][T25837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  860.159316][T25837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  860.159335][T25837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  860.159390][T25837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  860.462324][T25960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6060'.
[  860.511765][T25837] hsr_slave_0: entered promiscuous mode
[  860.514037][T25837] hsr_slave_1: entered promiscuous mode
[  860.515094][T25837] debugfs: 'hsr0' already exists in 'hsr'
[  860.515117][T25837] Cannot create hsr debugfs directory
[  860.807763][T25967] FAULT_INJECTION: forcing a failure.
[  860.807763][T25967] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  860.807810][T25967] CPU: 0 UID: 0 PID: 25967 Comm: syz.1.6064 Not tainted syzkaller #0 PREEMPT(full) 
[  860.807835][T25967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  860.807848][T25967] Call Trace:
[  860.807858][T25967]  <TASK>
[  860.807868][T25967]  dump_stack_lvl+0xe8/0x150
[  860.807907][T25967]  should_fail_ex+0x410/0x560
[  860.807944][T25967]  _copy_from_iter+0x1d3/0x1660
[  860.807981][T25967]  ? _copy_from_iter+0x21b/0x1660
[  860.808009][T25967]  ? sock_alloc_send_pskb+0xc87/0xd90
[  860.808033][T25967]  ? __pfx__copy_from_iter+0x10/0x10
[  860.808065][T25967]  ? __pfx_process_measurement+0x10/0x10
[  860.808088][T25967]  ? __pfx__copy_from_iter+0x10/0x10
[  860.808124][T25967]  copy_page_from_iter+0x219/0x2d0
[  860.808158][T25967]  skb_copy_datagram_from_iter+0x2f4/0x720
[  860.808194][T25967]  tun_get_user+0x1510/0x4470
[  860.808240][T25967]  ? aa_file_perm+0x4ed/0x15f0
[  860.808268][T25967]  ? __pfx_tun_get_user+0x10/0x10
[  860.808302][T25967]  ? __lock_acquire+0x747/0x2de0
[  860.808329][T25967]  ? kstrtoull+0x137/0x1d0
[  860.808362][T25967]  ? ref_tracker_alloc+0x172/0x530
[  860.808393][T25967]  ? lock_acquire+0x115/0x350
[  860.808417][T25967]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  860.808454][T25967]  ? lock_acquire+0x115/0x350
[  860.808476][T25967]  ? tun_get+0x1c/0x2f0
[  860.808513][T25967]  ? tun_get+0x1c/0x2f0
[  860.808543][T25967]  ? tun_get+0x1c/0x2f0
[  860.808578][T25967]  tun_chr_write_iter+0x113/0x200
[  860.808613][T25967]  vfs_write+0x612/0xba0
[  860.808649][T25967]  ? __pfx_vfs_write+0x10/0x10
[  860.808677][T25967]  ? __fget_files+0x3a2/0x420
[  860.808700][T25967]  ? __fget_files+0x2a/0x420
[  860.808728][T25967]  ? fdget+0x1ac/0x250
[  860.808759][T25967]  ksys_write+0x150/0x270
[  860.808788][T25967]  ? __pfx_ksys_write+0x10/0x10
[  860.808836][T25967]  do_syscall_64+0x166/0x520
[  860.808858][T25967]  ? trace_irq_disable+0x3b/0x140
[  860.808884][T25967]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  860.808906][T25967]  ? clear_bhb_loop+0x70/0xc0
[  860.808932][T25967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  860.808953][T25967] RIP: 0033:0x7fd82635fd8e
[  860.808974][T25967] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  860.808994][T25967] RSP: 002b:00007fd827218fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  860.809019][T25967] RAX: ffffffffffffffda RBX: 00007fd8272196c0 RCX: 00007fd82635fd8e
[  860.809035][T25967] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8
[  860.809050][T25967] RBP: 00007fd827219090 R08: 0000000000000000 R09: 0000000000000000
[  860.809064][T25967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  860.809078][T25967] R13: 00007fd826626038 R14: 00007fd826625fa0 R15: 00007ffda32b9d18
[  860.809113][T25967]  </TASK>
[  861.346840][T25981] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  861.881894][ T4951] Bluetooth: hci5: command tx timeout
[  862.502070][T25962] rxe_eth0 speed is unknown, defaulting to 1000
[  862.766537][T25837] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  862.805327][T25837] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  862.913106][T25837] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  862.930340][T25837] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  863.002832][T25837] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  863.011932][T25837] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  863.062491][T25837] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  863.084419][T25837] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  863.234167][T26027] netlink: 'syz.1.6077': attribute type 1 has an invalid length.
[  863.419655][T26039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6079'.
[  863.489835][T26041] FAULT_INJECTION: forcing a failure.
[  863.489835][T26041] name failslab, interval 1, probability 0, space 0, times 0
[  863.489872][T26041] CPU: 1 UID: 0 PID: 26041 Comm: syz.4.6081 Not tainted syzkaller #0 PREEMPT(full) 
[  863.489897][T26041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  863.489910][T26041] Call Trace:
[  863.489920][T26041]  <TASK>
[  863.489930][T26041]  dump_stack_lvl+0xe8/0x150
[  863.489968][T26041]  should_fail_ex+0x410/0x560
[  863.490005][T26041]  should_failslab+0xa8/0x100
[  863.490040][T26041]  __kmalloc_cache_noprof+0x9e/0x600
[  863.490070][T26041]  ? rtm_new_nexthop+0x1b7d/0x8310
[  863.490183][T26041]  ? rtm_new_nexthop+0x1b7d/0x8310
[  863.490222][T26041]  rtm_new_nexthop+0x1b7d/0x8310
[  863.490249][T26041]  ? kasan_save_track+0x3e/0x80
[  863.490283][T26041]  ? netlink_deliver_tap+0x19c/0x1b0
[  863.490313][T26041]  ? sock_sendmsg_nosec+0x14e/0x190
[  863.490337][T26041]  ? ____sys_sendmsg+0x54e/0x850
[  863.490368][T26041]  ? ___sys_sendmsg+0x2a5/0x360
[  863.490402][T26041]  ? __x64_sys_sendmsg+0x1b1/0x290
[  863.490422][T26041]  ? do_syscall_64+0x166/0x520
[  863.490453][T26041]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.490484][T26041]  ? __pfx_rtm_new_nexthop+0x10/0x10
[  863.490544][T26041]  ? kasan_quarantine_put+0xbb/0x1f0
[  863.490572][T26041]  ? lockdep_hardirqs_on+0x7b/0x110
[  863.490599][T26041]  ? nlmon_xmit+0xb0/0x100
[  863.490620][T26041]  ? kmem_cache_free+0x182/0x650
[  863.490658][T26041]  ? __lock_acquire+0x747/0x2de0
[  863.490701][T26041]  ? lockdep_hardirqs_on+0x7b/0x110
[  863.490753][T26041]  ? __pfx_rtm_new_nexthop+0x10/0x10
[  863.490780][T26041]  rtnetlink_rcv_msg+0x802/0xc00
[  863.490820][T26041]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  863.490851][T26041]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  863.490887][T26041]  ? __copy_skb_header+0xa3/0x4a0
[  863.490923][T26041]  netlink_rcv_skb+0x226/0x4a0
[  863.490951][T26041]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  863.490986][T26041]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  863.491029][T26041]  ? netlink_deliver_tap+0x2e/0x1b0
[  863.491056][T26041]  ? netlink_deliver_tap+0x2e/0x1b0
[  863.491091][T26041]  netlink_unicast+0x8ef/0xa80
[  863.491137][T26041]  netlink_sendmsg+0x7f0/0xb20
[  863.491173][T26041]  ? __pfx_netlink_sendmsg+0x10/0x10
[  863.491204][T26041]  ? aa_sock_msg_perm+0x144/0x210
[  863.491236][T26041]  ? apparmor_socket_sendmsg+0x98/0x360
[  863.491263][T26041]  ? __pfx_netlink_sendmsg+0x10/0x10
[  863.491290][T26041]  sock_sendmsg_nosec+0x14e/0x190
[  863.491319][T26041]  ____sys_sendmsg+0x54e/0x850
[  863.491356][T26041]  ? __pfx_____sys_sendmsg+0x10/0x10
[  863.491400][T26041]  ? import_iovec+0x73/0xa0
[  863.491444][T26041]  ___sys_sendmsg+0x2a5/0x360
[  863.491475][T26041]  ? __lock_acquire+0x747/0x2de0
[  863.491505][T26041]  ? __pfx____sys_sendmsg+0x10/0x10
[  863.491577][T26041]  ? __fget_files+0x3a2/0x420
[  863.491600][T26041]  ? __fget_files+0x2a/0x420
[  863.491634][T26041]  __x64_sys_sendmsg+0x1b1/0x290
[  863.491660][T26041]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  863.491719][T26041]  do_syscall_64+0x166/0x520
[  863.491741][T26041]  ? trace_irq_disable+0x3b/0x140
[  863.491767][T26041]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.491789][T26041]  ? clear_bhb_loop+0x70/0xc0
[  863.491817][T26041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.491840][T26041] RIP: 0033:0x7f580c39f559
[  863.491864][T26041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  863.491883][T26041] RSP: 002b:00007f580d1d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  863.491908][T26041] RAX: ffffffffffffffda RBX: 00007f580c625fa0 RCX: 00007f580c39f559
[  863.491925][T26041] RDX: 0000000004000080 RSI: 0000200000000240 RDI: 0000000000000003
[  863.491939][T26041] RBP: 00007f580d1d2090 R08: 0000000000000000 R09: 0000000000000000
[  863.491954][T26041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  863.491969][T26041] R13: 00007f580c626038 R14: 00007f580c625fa0 R15: 00007ffc2d7e15c8
[  863.492007][T26041]  </TASK>
[  863.511673][ T4224] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  863.511753][ T4224] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  863.511804][ T4224] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  863.511838][ T4224] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  863.537594][T26043] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6080'.
[  863.557798][T26043] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6080'.
[  863.598556][T26043] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6080'.
[  863.639725][T26043] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6080'.
[  863.650049][T26043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6080'.
[  863.941014][T25837] 8021q: adding VLAN 0 to HW filter on device bond0
[  863.964894][ T4951] Bluetooth: hci5: command tx timeout
[  864.050177][T25837] 8021q: adding VLAN 0 to HW filter on device team0
[  864.077866][T18416] bridge0: port 1(bridge_slave_0) entered blocking state
[  864.078000][T18416] bridge0: port 1(bridge_slave_0) entered forwarding state
[  864.106251][ T6715] bridge0: port 2(bridge_slave_1) entered blocking state
[  864.106379][ T6715] bridge0: port 2(bridge_slave_1) entered forwarding state
[  864.123779][ T4224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.124009][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  864.436793][T26051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6085'.
[  864.476460][T26051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6085'.
[  864.593906][T26055] netlink: 'syz.4.6086': attribute type 11 has an invalid length.
[  864.773504][T26061] block nbd0: not configured, cannot reconfigure
[  864.875123][T26065] ip_tables: iptables: counters copy to user failed while replacing table
[  864.987159][T26068] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6090'.
[  865.146253][T26082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6093'.
[  865.163924][T26081] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6095'.
[  865.282691][T26087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6096'.
[  865.288202][T26087] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6096'.
[  865.402013][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  865.452524][T26095] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6099'.
[  865.529937][T26100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6100'.
[  865.546963][T26100] bridge0: port 5(batadv4) entered blocking state
[  865.547185][T26100] bridge0: port 5(batadv4) entered disabled state
[  865.547355][T26100] batadv4: entered allmulticast mode
[  865.549390][T26100] batadv4: entered promiscuous mode
[  865.650061][T26103] ip_tables: iptables: counters copy to user failed while replacing table
[  865.745027][T25837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  865.827033][T25837] veth0_vlan: entered promiscuous mode
[  865.849865][T25837] veth1_vlan: entered promiscuous mode
[  865.930995][T26113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6106'.
[  865.970985][T26113] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6106'.
[  865.997752][T25837] veth0_macvtap: entered promiscuous mode
[  866.015115][T25837] veth1_macvtap: entered promiscuous mode
[  866.045896][ T6715] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled
[  866.045921][ T6715] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled
[  866.100694][T25837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  866.125649][T25837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  866.192227][ T1301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  866.192278][ T1301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  866.192313][ T1301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  866.192347][ T1301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  866.469599][ T6715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  866.469628][ T6715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  866.474754][T26125] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  866.589337][T26129] gretap0: entered promiscuous mode
[  866.628923][T26131] FAULT_INJECTION: forcing a failure.
[  866.628923][T26131] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  866.628958][T26131] CPU: 1 UID: 0 PID: 26131 Comm: syz.1.6115 Not tainted syzkaller #0 PREEMPT(full) 
[  866.628982][T26131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  866.628995][T26131] Call Trace:
[  866.629005][T26131]  <TASK>
[  866.629015][T26131]  dump_stack_lvl+0xe8/0x150
[  866.629051][T26131]  should_fail_ex+0x410/0x560
[  866.629089][T26131]  _copy_to_user+0x31/0xb0
[  866.629123][T26131]  simple_read_from_buffer+0xe1/0x170
[  866.629155][T26131]  proc_fail_nth_read+0x1bb/0x230
[  866.629189][T26131]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  866.629223][T26131]  ? rw_verify_area+0x24a/0x4c0
[  866.629249][T26131]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  866.629278][T26131]  vfs_read+0x213/0xa80
[  866.629309][T26131]  ? __pfx___mutex_lock+0x10/0x10
[  866.629332][T26131]  ? __pfx_vfs_read+0x10/0x10
[  866.629359][T26131]  ? __fget_files+0x2a/0x420
[  866.629380][T26131]  ? __fget_files+0x3a2/0x420
[  866.629400][T26131]  ? __fget_files+0x2a/0x420
[  866.629438][T26131]  ? fdget+0x1ac/0x250
[  866.629470][T26131]  ksys_read+0x150/0x270
[  866.629497][T26131]  ? __pfx_ksys_read+0x10/0x10
[  866.629540][T26131]  do_syscall_64+0x166/0x520
[  866.629560][T26131]  ? trace_irq_disable+0x3b/0x140
[  866.629584][T26131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.629606][T26131]  ? clear_bhb_loop+0x70/0xc0
[  866.629632][T26131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.629653][T26131] RIP: 0033:0x7fd82635fd8e
[  866.629674][T26131] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  866.629693][T26131] RSP: 002b:00007fd827218fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  866.629718][T26131] RAX: ffffffffffffffda RBX: 00007fd8272196c0 RCX: 00007fd82635fd8e
[  866.629734][T26131] RDX: 000000000000000f RSI: 00007fd8272190a0 RDI: 0000000000000004
[  866.629747][T26131] RBP: 00007fd827219090 R08: 0000000000000000 R09: 0000000000000000
[  866.629760][T26131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  866.629772][T26131] R13: 00007fd826626038 R14: 00007fd826625fa0 R15: 00007ffda32b9d18
[  866.629808][T26131]  </TASK>
[  866.687755][T18416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  866.687777][T18416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  867.134262][T26151] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  867.481177][T26168] netlink: 'syz.3.6128': attribute type 1 has an invalid length.
[  867.498857][T26168] erspan0: entered promiscuous mode
[  867.498881][T26168] erspan0: entered allmulticast mode
[  867.845165][T17507] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  867.852486][T17507] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  867.860802][T17507] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  867.876240][T17507] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  867.876943][T17507] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  868.059002][T16287] bond0: (slave syz_tun): Releasing backup interface
[  868.079283][T16287] tipc: Resetting bearer <eth:syz_tun>
[  868.079585][T16287] tipc: Disabling bearer <eth:syz_tun>
[  868.665849][T26206] FAULT_INJECTION: forcing a failure.
[  868.665849][T26206] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  868.665885][T26206] CPU: 1 UID: 0 PID: 26206 Comm: syz.2.6138 Not tainted syzkaller #0 PREEMPT(full) 
[  868.665909][T26206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  868.665923][T26206] Call Trace:
[  868.665931][T26206]  <TASK>
[  868.665941][T26206]  dump_stack_lvl+0xe8/0x150
[  868.665980][T26206]  should_fail_ex+0x410/0x560
[  868.666021][T26206]  _copy_to_user+0x31/0xb0
[  868.666053][T26206]  bpf_verifier_vlog+0x3a2/0x900
[  868.666090][T26206]  verbose+0x11d/0x1a0
[  868.666120][T26206]  ? __pfx_verbose+0x10/0x10
[  868.666145][T26206]  ? lock_acquire+0x115/0x350
[  868.666172][T26206]  ? print_bpf_insn+0xdf6/0x2930
[  868.666201][T26206]  ? __func_get_name+0x90/0x260
[  868.666234][T26206]  print_bpf_insn+0xe78/0x2930
[  868.666265][T26206]  ? __pfx_verbose+0x10/0x10
[  868.666291][T26206]  ? __pfx_print_bpf_insn+0x10/0x10
[  868.666322][T26206]  ? _copy_to_user+0x8a/0xb0
[  868.666354][T26206]  ? bpf_verifier_vlog+0x55a/0x900
[  868.666392][T26206]  ? bpf_verifier_log_write+0x11d/0x1a0
[  868.666422][T26206]  bpf_verbose_insn+0xcb/0x130
[  868.666447][T26206]  ? __pfx_bpf_verbose_insn+0x10/0x10
[  868.666470][T26206]  ? __kvmalloc_node_noprof+0x52a/0x820
[  868.666498][T26206]  ? __pfx_verbose+0x10/0x10
[  868.666518][T26206]  ? __pfx_bpf_disasm_kfunc_name+0x10/0x10
[  868.666542][T26206]  ? record_arg_access+0x148/0x970
[  868.666576][T26206]  analyze_subprog+0x5d84/0x9df0
[  868.666602][T26206]  ? bpf_prog_kallsyms_add+0x61f/0x640
[  868.666683][T26206]  ? __pfx_analyze_subprog+0x10/0x10
[  868.666709][T26206]  ? __x64_sys_bpf+0xba/0xd0
[  868.666741][T26206]  ? xs_reset_transport+0x172/0x630
[  868.666771][T26206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.666836][T26206]  ? call_instance+0x263/0x560
[  868.666864][T26206]  ? rcu_is_watching+0x16/0xb0
[  868.666891][T26206]  ? call_instance+0x263/0x560
[  868.666917][T26206]  ? trace_kmalloc+0x2a/0xf0
[  868.666944][T26206]  ? call_instance+0x263/0x560
[  868.666971][T26206]  ? __kvmalloc_node_noprof+0x52a/0x820
[  868.667001][T26206]  ? __kvmalloc_node_noprof+0x340/0x820
[  868.667029][T26206]  ? call_instance+0x263/0x560
[  868.667053][T26206]  ? call_instance+0x263/0x560
[  868.667100][T26206]  bpf_compute_subprog_arg_access+0x2c9/0x14d0
[  868.667130][T26206]  ? bpf_tracing_func_proto+0x72/0x180
[  868.667190][T26206]  ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10
[  868.667226][T26206]  ? __kvmalloc_node_noprof+0x340/0x820
[  868.667252][T26206]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  868.667279][T26206]  ? bpf_compute_live_registers+0x14f/0x1ff0
[  868.667316][T26206]  bpf_compute_live_registers+0x8d3/0x1ff0
[  868.667367][T26206]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[  868.667410][T26206]  bpf_check+0x2744/0x2ef0
[  868.667457][T26206]  ? __pfx_bpf_check+0x10/0x10
[  868.667489][T26206]  ? bpf_obj_name_cpy+0x194/0x1e0
[  868.667516][T26206]  bpf_prog_load+0x14d1/0x1c20
[  868.667560][T26206]  ? __pfx_bpf_prog_load+0x10/0x10
[  868.667617][T26206]  __sys_bpf+0xd0d/0xd90
[  868.667656][T26206]  ? __pfx___sys_bpf+0x10/0x10
[  868.667696][T26206]  ? __fget_files+0x2a/0x420
[  868.667749][T26206]  ? ksys_write+0x242/0x270
[  868.667777][T26206]  ? __pfx_ksys_write+0x10/0x10
[  868.667808][T26206]  __x64_sys_bpf+0xba/0xd0
[  868.667839][T26206]  do_syscall_64+0x166/0x520
[  868.667860][T26206]  ? trace_irq_disable+0x3b/0x140
[  868.667885][T26206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.667907][T26206]  ? clear_bhb_loop+0x70/0xc0
[  868.667934][T26206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.667954][T26206] RIP: 0033:0x7fd7b439f559
[  868.667976][T26206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  868.667993][T26206] RSP: 002b:00007fd7b51f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  868.668016][T26206] RAX: ffffffffffffffda RBX: 00007fd7b4625fa0 RCX: 00007fd7b439f559
[  868.668031][T26206] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005
[  868.668046][T26206] RBP: 00007fd7b51f7090 R08: 0000000000000000 R09: 0000000000000000
[  868.668059][T26206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  868.668073][T26206] R13: 00007fd7b4626038 R14: 00007fd7b4625fa0 R15: 00007fffdc66e368
[  868.668109][T26206]  </TASK>
[  869.255550][T18416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  869.255838][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  869.515243][T26172] rxe_eth0 speed is unknown, defaulting to 1000
[  869.556425][T26222] __nla_validate_parse: 9 callbacks suppressed
[  869.556448][T26222] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6143'.
[  869.577526][T26222] netlink: 'syz.3.6143': attribute type 7 has an invalid length.
[  869.813959][T26224] netlink: 'syz.3.6144': attribute type 2 has an invalid length.
[  869.813987][T26224] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6144'.
[  869.814006][T26224] netlink: 'syz.3.6144': attribute type 2 has an invalid length.
[  869.814021][T26224] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6144'.
[  869.962162][ T4951] Bluetooth: hci1: command tx timeout
[  870.010026][T26228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6148'.
[  870.027767][T26228] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6148'.
[  870.134754][T26236] Cannot find add_set index 0 as target
[  870.138382][T26232] Cannot find add_set index 0 as target
[  870.364171][T26239] Cannot find del_set index 1 as target
[  870.457764][T26239] bond2: Removing last arp target with arp_interval on
[  870.644712][T26256] block nbd0: not configured, cannot reconfigure
[  870.772688][T26172] bridge0: port 1(bridge_slave_0) entered blocking state
[  870.772896][T26172] bridge0: port 1(bridge_slave_0) entered disabled state
[  870.773050][T26172] bridge_slave_0: entered allmulticast mode
[  870.774902][T26172] bridge_slave_0: entered promiscuous mode
[  870.805361][T26172] bridge0: port 2(bridge_slave_1) entered blocking state
[  870.805577][T26172] bridge0: port 2(bridge_slave_1) entered disabled state
[  870.805752][T26172] bridge_slave_1: entered allmulticast mode
[  870.807876][T26172] bridge_slave_1: entered promiscuous mode
[  870.976515][T26172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  870.987565][T26172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  871.002725][T26271] FAULT_INJECTION: forcing a failure.
[  871.002725][T26271] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  871.002762][T26271] CPU: 1 UID: 0 PID: 26271 Comm: syz.0.6160 Not tainted syzkaller #0 PREEMPT(full) 
[  871.002786][T26271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  871.002800][T26271] Call Trace:
[  871.002809][T26271]  <TASK>
[  871.002818][T26271]  dump_stack_lvl+0xe8/0x150
[  871.002867][T26271]  should_fail_ex+0x410/0x560
[  871.002903][T26271]  _copy_from_iter+0x1d3/0x1660
[  871.002940][T26271]  ? _copy_from_iter+0x21b/0x1660
[  871.002968][T26271]  ? sock_alloc_send_pskb+0xc87/0xd90
[  871.002991][T26271]  ? __pfx__copy_from_iter+0x10/0x10
[  871.003020][T26271]  ? __pfx_process_measurement+0x10/0x10
[  871.003043][T26271]  ? __pfx__copy_from_iter+0x10/0x10
[  871.003078][T26271]  copy_page_from_iter+0x219/0x2d0
[  871.003115][T26271]  skb_copy_datagram_from_iter+0x2f4/0x720
[  871.003152][T26271]  tun_get_user+0x1510/0x4470
[  871.003196][T26271]  ? aa_file_perm+0x4ed/0x15f0
[  871.003223][T26271]  ? __pfx_tun_get_user+0x10/0x10
[  871.003256][T26271]  ? __lock_acquire+0x747/0x2de0
[  871.003284][T26271]  ? kstrtoull+0x137/0x1d0
[  871.003316][T26271]  ? ref_tracker_alloc+0x172/0x530
[  871.003344][T26271]  ? lock_acquire+0x115/0x350
[  871.003368][T26271]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  871.003400][T26271]  ? lock_acquire+0x115/0x350
[  871.003422][T26271]  ? tun_get+0x1c/0x2f0
[  871.003457][T26271]  ? tun_get+0x1c/0x2f0
[  871.003485][T26271]  ? tun_get+0x1c/0x2f0
[  871.003519][T26271]  tun_chr_write_iter+0x113/0x200
[  871.003551][T26271]  vfs_write+0x612/0xba0
[  871.003588][T26271]  ? __pfx_vfs_write+0x10/0x10
[  871.003617][T26271]  ? __fget_files+0x3a2/0x420
[  871.003637][T26271]  ? __fget_files+0x2a/0x420
[  871.003670][T26271]  ? fdget+0x1ac/0x250
[  871.003699][T26271]  ksys_write+0x150/0x270
[  871.003725][T26271]  ? __pfx_ksys_write+0x10/0x10
[  871.003762][T26271]  do_syscall_64+0x166/0x520
[  871.003783][T26271]  ? trace_irq_disable+0x3b/0x140
[  871.003807][T26271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  871.003828][T26271]  ? clear_bhb_loop+0x70/0xc0
[  871.003863][T26271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  871.003883][T26271] RIP: 0033:0x7f6e7655fd8e
[  871.003905][T26271] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  871.003923][T26271] RSP: 002b:00007f6e77514fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  871.003946][T26271] RAX: ffffffffffffffda RBX: 00007f6e775156c0 RCX: 00007f6e7655fd8e
[  871.003962][T26271] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8
[  871.003976][T26271] RBP: 00007f6e77515090 R08: 0000000000000000 R09: 0000000000000000
[  871.003989][T26271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  871.004001][T26271] R13: 00007f6e76826038 R14: 00007f6e76825fa0 R15: 00007ffd64e5c998
[  871.004036][T26271]  </TASK>
[  871.217013][T26172] team0: Port device team_slave_0 added
[  871.231053][T26172] team0: Port device team_slave_1 added
[  871.394828][T26172] batman_adv: batadv0: Adding interface: batadv_slave_0
[  871.394850][T26172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  871.394879][T26172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  871.403389][T26172] batman_adv: batadv0: Adding interface: batadv_slave_1
[  871.403406][T26172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  871.403432][T26172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  871.548127][T26277] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6162'.
[  871.715181][T26172] hsr_slave_0: entered promiscuous mode
[  871.727931][T26172] hsr_slave_1: entered promiscuous mode
[  871.728764][T26172] debugfs: 'hsr0' already exists in 'hsr'
[  871.728787][T26172] Cannot create hsr debugfs directory
[  871.858859][T26285] netlink: 'syz.4.6165': attribute type 6 has an invalid length.
[  872.041379][ T4951] Bluetooth: hci1: command tx timeout
[  872.557197][T26315] Cannot find set identified by id 0 to match
[  872.730437][T26172] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode
[  872.848239][T26323] 8021q: adding VLAN 0 to HW filter on device bond1
[  872.849130][T26323] bridge0: port 3(bond1) entered blocking state
[  872.849694][T26323] bridge0: port 3(bond1) entered disabled state
[  872.849876][T26323] bond1: entered allmulticast mode
[  872.886677][T26323] bond1: entered promiscuous mode
[  872.887660][T26323] bridge0: port 3(bond1) entered blocking state
[  872.887791][T26323] bridge0: port 3(bond1) entered forwarding state
[  873.266631][T26336] block nbd0: not configured, cannot reconfigure
[  873.495770][ T6715] bridge0: port 3(bond1) entered disabled state
[  873.618290][T26358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6184'.
[  873.672167][T26354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6187'.
[  873.692255][T26354] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6187'.
[  873.788459][T26172] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  873.816829][T26172] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  873.817883][T26172] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  873.852915][T26172] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  873.858874][T26172] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  873.887284][T26172] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  873.892735][T26172] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  873.920966][T26172] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  873.945737][T26372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6191'.
[  874.121425][ T4951] Bluetooth: hci1: command tx timeout
[  874.355357][T26172] 8021q: adding VLAN 0 to HW filter on device bond0
[  874.369625][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.370040][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  874.434927][T26172] 8021q: adding VLAN 0 to HW filter on device team0
[  874.481881][T18417] bridge0: port 1(bridge_slave_0) entered blocking state
[  874.482029][T18417] bridge0: port 1(bridge_slave_0) entered forwarding state
[  874.504480][T26386] veth1_to_bond: entered promiscuous mode
[  874.515234][T18417] bridge0: port 2(bridge_slave_1) entered blocking state
[  874.515343][T18417] bridge0: port 2(bridge_slave_1) entered forwarding state
[  874.608746][T26392] __nla_validate_parse: 2 callbacks suppressed
[  874.608770][T26392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6198'.
[  874.635896][T26386] veth1_to_bond (unregistering): left promiscuous mode
[  874.653058][T26394] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  874.653592][T26386] bond0: (slave bond_slave_1): Releasing backup interface
[  874.654506][T26386] bond_slave_1 (unregistering): left promiscuous mode
[  874.654530][T26386] bond_slave_1 (unregistering): left allmulticast mode
[  874.690601][T26395] Cannot find set identified by id 0 to match
[  875.309446][T26420] xt_hashlimit: size too large, truncated to 1048576
[  875.403844][T26422] xt_hashlimit: size too large, truncated to 1048576
[  875.739117][T26435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6210'.
[  875.776618][T26434] ip_tables: iptables: counters copy to user failed while replacing table
[  875.795022][T26435] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6210'.
[  876.107941][T26445] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  876.199153][T26437] 8021q: adding VLAN 0 to HW filter on device bond4
[  876.201174][T26437] bridge0: port 4(bond4) entered blocking state
[  876.201942][ T4951] Bluetooth: hci1: command tx timeout
[  876.204749][T26437] bridge0: port 4(bond4) entered disabled state
[  876.204925][T26437] bond4: entered allmulticast mode
[  876.210491][T26437] bond4: entered promiscuous mode
[  876.214492][T26437] bridge0: port 4(bond4) entered blocking state
[  876.214623][T26437] bridge0: port 4(bond4) entered forwarding state
[  876.318375][T26452] netlink: 'syz.2.6214': attribute type 11 has an invalid length.
[  876.425013][T26457] tipc: Started in network mode
[  876.425050][T26457] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  876.425223][T26457] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  876.589822][T18420] bridge0: port 4(bond4) entered disabled state
[  876.657009][T26172] 8021q: adding VLAN 0 to HW filter on device batadv0
[  876.852728][T26454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6215'.
[  877.016166][T26172] veth0_vlan: entered promiscuous mode
[  877.044115][T26172] veth1_vlan: entered promiscuous mode
[  877.175094][T26172] veth0_macvtap: entered promiscuous mode
[  877.219411][T26172] veth1_macvtap: entered promiscuous mode
[  877.272209][T26172] batman_adv: batadv0: Interface activated: batadv_slave_0
[  877.294663][T26172] batman_adv: batadv0: Interface activated: batadv_slave_1
[  877.334356][T26477] xt_hashlimit: size too large, truncated to 1048576
[  877.385840][T18417] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  877.431764][   T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  877.433195][   T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  877.435406][ T1301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  877.437207][T20125] tipc: Node number set to 43690
[  877.471170][T26479] xt_hashlimit: size too large, truncated to 1048576
[  877.705466][T18420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  877.705492][T18420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  877.870319][T18420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  877.870344][T18420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  878.017469][T26492] team0 (unregistering): Port device team_slave_0 removed
[  878.044689][T26492] team0 (unregistering): Port device team_slave_1 removed
[  878.227027][T26502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6232'.
[  878.298517][T26507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6233'.
[  878.394236][T26510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6235'.
[  878.433855][T26512] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6234'.
[  878.558165][T26517] geneve2: entered allmulticast mode
[  878.573623][T26517] netlink: 'syz.2.6238': attribute type 2 has an invalid length.
[  878.573657][T26517] netlink: 'syz.2.6238': attribute type 1 has an invalid length.
[  878.675826][T26519] FAULT_INJECTION: forcing a failure.
[  878.675826][T26519] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  878.675870][T26519] CPU: 0 UID: 0 PID: 26519 Comm: syz.4.6237 Not tainted syzkaller #0 PREEMPT(full) 
[  878.675895][T26519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  878.675908][T26519] Call Trace:
[  878.675918][T26519]  <TASK>
[  878.675928][T26519]  dump_stack_lvl+0xe8/0x150
[  878.675966][T26519]  should_fail_ex+0x410/0x560
[  878.676004][T26519]  _copy_from_iter+0x1d3/0x1660
[  878.676040][T26519]  ? _copy_from_iter+0x21b/0x1660
[  878.676066][T26519]  ? sock_alloc_send_pskb+0xc87/0xd90
[  878.676090][T26519]  ? __pfx__copy_from_iter+0x10/0x10
[  878.676125][T26519]  ? __pfx_process_measurement+0x10/0x10
[  878.676149][T26519]  ? __pfx__copy_from_iter+0x10/0x10
[  878.676187][T26519]  copy_page_from_iter+0x219/0x2d0
[  878.676231][T26519]  skb_copy_datagram_from_iter+0x2f4/0x720
[  878.676269][T26519]  tun_get_user+0x1510/0x4470
[  878.676314][T26519]  ? aa_file_perm+0x4ed/0x15f0
[  878.676342][T26519]  ? __pfx_tun_get_user+0x10/0x10
[  878.676378][T26519]  ? __lock_acquire+0x747/0x2de0
[  878.676405][T26519]  ? kstrtoull+0x137/0x1d0
[  878.676439][T26519]  ? ref_tracker_alloc+0x172/0x530
[  878.676470][T26519]  ? lock_acquire+0x115/0x350
[  878.676495][T26519]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  878.676530][T26519]  ? lock_acquire+0x115/0x350
[  878.676553][T26519]  ? tun_get+0x1c/0x2f0
[  878.676591][T26519]  ? tun_get+0x1c/0x2f0
[  878.676622][T26519]  ? tun_get+0x1c/0x2f0
[  878.676659][T26519]  tun_chr_write_iter+0x113/0x200
[  878.676693][T26519]  vfs_write+0x612/0xba0
[  878.676727][T26519]  ? __pfx_vfs_write+0x10/0x10
[  878.676755][T26519]  ? __fget_files+0x3a2/0x420
[  878.676778][T26519]  ? __fget_files+0x2a/0x420
[  878.676806][T26519]  ? fdget+0x1ac/0x250
[  878.676837][T26519]  ksys_write+0x150/0x270
[  878.676865][T26519]  ? __pfx_ksys_write+0x10/0x10
[  878.676904][T26519]  do_syscall_64+0x166/0x520
[  878.676925][T26519]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.676948][T26519]  ? clear_bhb_loop+0x70/0xc0
[  878.676974][T26519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.676996][T26519] RIP: 0033:0x7f580c35fd8e
[  878.677018][T26519] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  878.677037][T26519] RSP: 002b:00007f580d1d1fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  878.677063][T26519] RAX: ffffffffffffffda RBX: 00007f580d1d26c0 RCX: 00007f580c35fd8e
[  878.677080][T26519] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8
[  878.677094][T26519] RBP: 00007f580d1d2090 R08: 0000000000000000 R09: 0000000000000000
[  878.677108][T26519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  878.677122][T26519] R13: 00007f580c626038 R14: 00007f580c625fa0 R15: 00007ffc2d7e15c8
[  878.677158][T26519]  </TASK>
[  879.108644][T26533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6244'.
[  879.109759][T26531] xt_TPROXY: Can be used only with -p tcp or -p udp
[  879.278951][T26533] netlink: 'syz.1.6244': attribute type 1 has an invalid length.
[  879.379028][T26542] netlink: 320 bytes leftover after parsing attributes in process `syz.2.6247'.
[  879.448185][T26542] vlan0: entered promiscuous mode
[  879.448215][T26542] hsr0: entered promiscuous mode
[  879.448511][T26542] vlan0: entered allmulticast mode
[  879.448528][T26542] hsr0: entered allmulticast mode
[  879.448542][T26542] hsr_slave_0: entered allmulticast mode
[  879.448558][T26542] hsr_slave_1: entered allmulticast mode
[  879.636807][T26542] __nla_validate_parse: 1 callbacks suppressed
[  879.636830][T26542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6247'.
[  879.686472][T26542] hsr_slave_0: left promiscuous mode
[  879.689011][T26542] hsr_slave_1: left promiscuous mode
[  879.705462][T26558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6253'.
[  880.024846][T26566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6255'.
[  880.029210][T26566] bridge0: port 2(bridge_slave_1) entered disabled state
[  880.125519][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.125765][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  880.246859][T26577] netlink: 'syz.1.6261': attribute type 15 has an invalid length.
[  880.246886][T26577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6261'.
[  880.304664][T26577] netlink: 'syz.1.6261': attribute type 1 has an invalid length.
[  880.304693][T26577] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6261'.
[  880.366097][T26583] netlink: 'syz.1.6261': attribute type 1 has an invalid length.
[  881.114362][T26598] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun!
[  881.739812][T26595] virtio_blk virtio4: 1/0/0 default/read/poll queues
[  881.746530][T26595] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[  881.863787][T26619] netlink: 'syz.1.6270': attribute type 10 has an invalid length.
[  881.863813][T26619] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6270'.
[  881.891887][T26621] batman_adv: batadv0: Adding interface: syz_tun
[  881.891907][T26621] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  881.891940][T26621] batman_adv: batadv0: Interface activated: syz_tun
[  881.944426][T26621] syzkaller1: entered promiscuous mode
[  881.944450][T26621] syzkaller1: entered allmulticast mode
[  881.949981][T26621] 0: reclassify loop, rule prio 0, protocol 03
[  881.969629][T26595] Dev vda: unable to read RDB block 8
[  881.970042][T26595]  vda: unable to read partition table
[  882.139515][T26623] FAULT_INJECTION: forcing a failure.
[  882.139515][T26623] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  882.139552][T26623] CPU: 0 UID: 0 PID: 26623 Comm: syz.1.6273 Not tainted syzkaller #0 PREEMPT(full) 
[  882.139576][T26623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  882.139590][T26623] Call Trace:
[  882.139600][T26623]  <TASK>
[  882.139610][T26623]  dump_stack_lvl+0xe8/0x150
[  882.139647][T26623]  should_fail_ex+0x410/0x560
[  882.139685][T26623]  _copy_from_user+0x2d/0xb0
[  882.139718][T26623]  ___sys_sendmsg+0x1c6/0x360
[  882.139750][T26623]  ? __lock_acquire+0x747/0x2de0
[  882.139780][T26623]  ? __pfx____sys_sendmsg+0x10/0x10
[  882.139853][T26623]  ? __fget_files+0x3a2/0x420
[  882.139876][T26623]  ? __fget_files+0x2a/0x420
[  882.139910][T26623]  __x64_sys_sendmsg+0x1b1/0x290
[  882.139935][T26623]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  882.139992][T26623]  do_syscall_64+0x166/0x520
[  882.140012][T26623]  ? trace_irq_disable+0x3b/0x140
[  882.140037][T26623]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  882.140059][T26623]  ? clear_bhb_loop+0x70/0xc0
[  882.140086][T26623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  882.140107][T26623] RIP: 0033:0x7f35def9f559
[  882.140128][T26623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  882.140147][T26623] RSP: 002b:00007f35dd1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  882.140171][T26623] RAX: ffffffffffffffda RBX: 00007f35df225fa0 RCX: 00007f35def9f559
[  882.140187][T26623] RDX: 0000000004000080 RSI: 0000200000000240 RDI: 0000000000000003
[  882.140201][T26623] RBP: 00007f35dd1f6090 R08: 0000000000000000 R09: 0000000000000000
[  882.140216][T26623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  882.140230][T26623] R13: 00007f35df226038 R14: 00007f35df225fa0 R15: 00007fffb043f5c8
[  882.140265][T26623]  </TASK>
[  882.852924][T26646] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6277'.
[  882.922410][T26647] syzkaller1: entered promiscuous mode
[  882.922437][T26647] syzkaller1: entered allmulticast mode
[  883.126263][T26653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6283'.
[  883.311831][T26667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6287'.
[  883.418705][T26666] veth0_to_bridge: entered promiscuous mode
[  883.420101][T26666] macvtap1: entered allmulticast mode
[  883.420122][T26666] veth0_to_bridge: entered allmulticast mode
[  883.489672][T26666] veth0_to_bridge: left allmulticast mode
[  883.489707][T26666] veth0_to_bridge: left promiscuous mode
[  883.833032][T26682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6290'.
[  884.649365][T26699] __nla_validate_parse: 3 callbacks suppressed
[  884.649390][T26699] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6295'.
[  884.672533][T26699] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6295'.
[  885.076434][T26717] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6297'.
[  885.883043][T18415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  885.883283][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  885.930831][T26744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6312'.
[  886.063412][T20126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  886.231168][T26762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6315'.
[  886.231415][T26762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6315'.
[  886.289311][T26766] FAULT_INJECTION: forcing a failure.
[  886.289311][T26766] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  886.289349][T26766] CPU: 0 UID: 0 PID: 26766 Comm: syz.3.6320 Not tainted syzkaller #0 PREEMPT(full) 
[  886.289372][T26766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  886.289385][T26766] Call Trace:
[  886.289394][T26766]  <TASK>
[  886.289405][T26766]  dump_stack_lvl+0xe8/0x150
[  886.289443][T26766]  should_fail_ex+0x410/0x560
[  886.289482][T26766]  _copy_from_user+0x2d/0xb0
[  886.289515][T26766]  kstrtouint_from_user+0xd6/0x180
[  886.289547][T26766]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  886.289586][T26766]  ? lock_acquire+0x115/0x350
[  886.289616][T26766]  proc_fail_nth_write+0x8e/0x210
[  886.289648][T26766]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  886.289689][T26766]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  886.289719][T26766]  vfs_write+0x296/0xba0
[  886.289755][T26766]  ? __pfx_vfs_write+0x10/0x10
[  886.289788][T26766]  ? __fget_files+0x2a/0x420
[  886.289810][T26766]  ? __fget_files+0x3a2/0x420
[  886.289831][T26766]  ? __fget_files+0x2a/0x420
[  886.289860][T26766]  ? fdget+0x1ac/0x250
[  886.289893][T26766]  ksys_write+0x150/0x270
[  886.289922][T26766]  ? __pfx_ksys_write+0x10/0x10
[  886.289963][T26766]  do_syscall_64+0x166/0x520
[  886.289986][T26766]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.290008][T26766]  ? clear_bhb_loop+0x70/0xc0
[  886.290036][T26766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.290057][T26766] RIP: 0033:0x7f18db95fd8e
[  886.290079][T26766] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  886.290098][T26766] RSP: 002b:00007f18dc7ebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  886.290123][T26766] RAX: ffffffffffffffda RBX: 00007f18dc7ec6c0 RCX: 00007f18db95fd8e
[  886.290139][T26766] RDX: 0000000000000001 RSI: 00007f18dc7ec0a0 RDI: 0000000000000006
[  886.290153][T26766] RBP: 00007f18dc7ec090 R08: 0000000000000000 R09: 0000000000000000
[  886.290167][T26766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  886.290181][T26766] R13: 00007f18dbc26038 R14: 00007f18dbc25fa0 R15: 00007fff5c54e588
[  886.290219][T26766]  </TASK>
[  886.332395][T26767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6318'.
[  886.357625][T26767] bridge0: port 3(batadv1) entered blocking state
[  886.358556][T26767] bridge0: port 3(batadv1) entered disabled state
[  886.358720][T26767] batadv1: entered allmulticast mode
[  886.374518][T26767] batadv1: entered promiscuous mode
[  886.668939][T26776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6322'.
[  886.701634][T20124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  886.784524][T26778] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  886.854671][   T51] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  886.854697][   T51] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  887.555425][T26808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6336'.
[  887.555458][T26808] block nbd0: Unsupported socket: should be TCP or UNIX.
[  887.760985][T26821] block nbd0: not configured, cannot reconfigure
[  887.846231][T26823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6341'.
[  888.248466][T26833] bridge0: port 2(bridge_slave_1) entered disabled state
[  888.249299][T26833] bridge0: port 1(bridge_slave_0) entered disabled state
[  888.373477][T26833] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  888.381043][T26833] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  888.713236][T26856] netlink: 'syz.0.6349': attribute type 10 has an invalid length.
[  888.813334][T18420] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  888.813374][T18420] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  888.814042][ T1301] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  888.814071][ T1301] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  888.814124][ T1301] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  888.814150][ T1301] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  888.814185][ T1301] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  888.814218][ T1301] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  889.370766][ T4224] IPVS: starting estimator thread 0...
[  889.440361][ T4951] Bluetooth: hci5: unexpected cc 0x2060 length: 3 < 7
[  889.462827][T26881] IPVS: using max 30 ests per chain, 72000 per kthread
[  889.726491][T26899] __nla_validate_parse: 139 callbacks suppressed
[  889.726517][T26899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6365'.
[  890.309074][T26934] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  890.382302][T26932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  890.478852][T26932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  890.479678][T26939] xt_NFQUEUE: number of total queues is 0
[  890.524345][T26932] bond0 (unregistering): Released all slaves
[  890.617283][T26943] ip_tables: iptables: counters copy to user failed while replacing table
[  890.866557][T26957] block nbd0: not configured, cannot reconfigure
[  890.925525][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  890.925767][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  891.183838][T26967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6385'.
[  891.440111][T26976] openvswitch: netlink: EtherType 0 is less than min 600
[  891.452610][T26976] netlink: 'syz.4.6389': attribute type 1 has an invalid length.
[  891.486964][T26985] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6391'.
[  891.590279][T26985] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  891.604933][T26985] tipc: Can't bind to reserved service type 1
[  891.880372][T26999] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6396'.
[  891.914340][T26999] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úéiÆâxà?ZøË_½á†˜ow¾Äº|
[  892.041644][T27004] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6400'.
[  892.063896][T27004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6400'.
[  892.150989][T27011] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  892.316087][T27021] FAULT_INJECTION: forcing a failure.
[  892.316087][T27021] name failslab, interval 1, probability 0, space 0, times 0
[  892.316123][T27021] CPU: 1 UID: 0 PID: 27021 Comm: syz.1.6406 Not tainted syzkaller #0 PREEMPT(full) 
[  892.316149][T27021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  892.316161][T27021] Call Trace:
[  892.316171][T27021]  <TASK>
[  892.316181][T27021]  dump_stack_lvl+0xe8/0x150
[  892.316218][T27021]  should_fail_ex+0x410/0x560
[  892.316254][T27021]  should_failslab+0xa8/0x100
[  892.316294][T27021]  ? skb_clone+0x212/0x3a0
[  892.316317][T27021]  kmem_cache_alloc_noprof+0x9c/0x600
[  892.316346][T27021]  ? skb_clone+0x212/0x3a0
[  892.316375][T27021]  skb_clone+0x212/0x3a0
[  892.316401][T27021]  __netlink_deliver_tap+0x355/0x6e0
[  892.316441][T27021]  ? netlink_deliver_tap+0x2e/0x1b0
[  892.316471][T27021]  netlink_deliver_tap+0x19c/0x1b0
[  892.316498][T27021]  netlink_unicast+0x8c1/0xa80
[  892.316544][T27021]  netlink_sendmsg+0x7f0/0xb20
[  892.316578][T27021]  ? __pfx_netlink_sendmsg+0x10/0x10
[  892.316610][T27021]  ? aa_sock_msg_perm+0x144/0x210
[  892.316644][T27021]  ? apparmor_socket_sendmsg+0x98/0x360
[  892.316671][T27021]  ? __pfx_netlink_sendmsg+0x10/0x10
[  892.316696][T27021]  sock_sendmsg_nosec+0x14e/0x190
[  892.316727][T27021]  ____sys_sendmsg+0x54e/0x850
[  892.316767][T27021]  ? __pfx_____sys_sendmsg+0x10/0x10
[  892.316809][T27021]  ? import_iovec+0x73/0xa0
[  892.316845][T27021]  ___sys_sendmsg+0x2a5/0x360
[  892.316874][T27021]  ? __lock_acquire+0x747/0x2de0
[  892.316902][T27021]  ? __pfx____sys_sendmsg+0x10/0x10
[  892.316976][T27021]  ? __fget_files+0x3a2/0x420
[  892.316999][T27021]  ? __fget_files+0x2a/0x420
[  892.317033][T27021]  __x64_sys_sendmsg+0x1b1/0x290
[  892.317058][T27021]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  892.317114][T27021]  do_syscall_64+0x166/0x520
[  892.317134][T27021]  ? trace_irq_disable+0x3b/0x140
[  892.317158][T27021]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  892.317179][T27021]  ? clear_bhb_loop+0x70/0xc0
[  892.317204][T27021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  892.317225][T27021] RIP: 0033:0x7f35def9f559
[  892.317247][T27021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  892.317266][T27021] RSP: 002b:00007f35dd1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  892.317300][T27021] RAX: ffffffffffffffda RBX: 00007f35df225fa0 RCX: 00007f35def9f559
[  892.317316][T27021] RDX: 0000000004000080 RSI: 0000200000000240 RDI: 0000000000000003
[  892.317330][T27021] RBP: 00007f35dd1f6090 R08: 0000000000000000 R09: 0000000000000000
[  892.317344][T27021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  892.317356][T27021] R13: 00007f35df226038 R14: 00007f35df225fa0 R15: 00007fffb043f5c8
[  892.317390][T27021]  </TASK>
[  892.473261][T27025] FAULT_INJECTION: forcing a failure.
[  892.473261][T27025] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  892.473306][T27025] CPU: 1 UID: 0 PID: 27025 Comm: syz.0.6408 Not tainted syzkaller #0 PREEMPT(full) 
[  892.473330][T27025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  892.473343][T27025] Call Trace:
[  892.473352][T27025]  <TASK>
[  892.473361][T27025]  dump_stack_lvl+0xe8/0x150
[  892.473400][T27025]  should_fail_ex+0x410/0x560
[  892.473437][T27025]  _copy_to_user+0x31/0xb0
[  892.473471][T27025]  simple_read_from_buffer+0xe1/0x170
[  892.473500][T27025]  proc_fail_nth_read+0x1bb/0x230
[  892.473535][T27025]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  892.473567][T27025]  ? rw_verify_area+0x24a/0x4c0
[  892.473594][T27025]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  892.473623][T27025]  vfs_read+0x213/0xa80
[  892.473658][T27025]  ? __pfx___mutex_lock+0x10/0x10
[  892.473683][T27025]  ? __pfx_vfs_read+0x10/0x10
[  892.473709][T27025]  ? __fget_files+0x2a/0x420
[  892.473732][T27025]  ? __fget_files+0x3a2/0x420
[  892.473754][T27025]  ? __fget_files+0x2a/0x420
[  892.473780][T27025]  ? fdget+0x1ac/0x250
[  892.473811][T27025]  ksys_read+0x150/0x270
[  892.473839][T27025]  ? __pfx_ksys_read+0x10/0x10
[  892.473896][T27025]  do_syscall_64+0x166/0x520
[  892.473917][T27025]  ? trace_irq_disable+0x3b/0x140
[  892.473941][T27025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  892.473961][T27025]  ? clear_bhb_loop+0x70/0xc0
[  892.473985][T27025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  892.474003][T27025] RIP: 0033:0x7f6e7655fd8e
[  892.474023][T27025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  892.474039][T27025] RSP: 002b:00007f6e77514fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  892.474061][T27025] RAX: ffffffffffffffda RBX: 00007f6e775156c0 RCX: 00007f6e7655fd8e
[  892.474075][T27025] RDX: 000000000000000f RSI: 00007f6e775150a0 RDI: 0000000000000007
[  892.474087][T27025] RBP: 00007f6e77515090 R08: 0000000000000000 R09: 0000000000000000
[  892.474100][T27025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  892.474111][T27025] R13: 00007f6e76826038 R14: 00007f6e76825fa0 R15: 00007ffd64e5c998
[  892.474144][T27025]  </TASK>
[  893.001025][T27036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6411'.
[  893.599161][T27073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6418'.
[  893.648912][T27073] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6418'.
[  893.815432][T27080] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6420'.
[  893.822605][T27080] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  893.874759][T27085] gretap0: entered promiscuous mode
[  893.945811][T27087] Bluetooth: hci0: unsupported parameter 5135
[  893.945841][T27087] Bluetooth: hci0: unsupported parameter 8192
[  893.945856][T27087] Bluetooth: hci0: unsupported parameter 5135
[  893.945870][T27087] Bluetooth: hci0: unsupported parameter 8192
[  894.248573][T27095] 8021q: adding VLAN 0 to HW filter on device bond2
[  894.249224][T27095] bridge0: port 4(bond2) entered blocking state
[  894.249380][T27095] bridge0: port 4(bond2) entered disabled state
[  894.249536][T27095] bond2: entered allmulticast mode
[  894.253750][T27095] bond2: entered promiscuous mode
[  894.325320][T27102] ip_tables: iptables: counters copy to user failed while replacing table
[  894.659277][T27116] bridge0: port 4(batadv2) entered blocking state
[  894.659405][T27116] bridge0: port 4(batadv2) entered disabled state
[  894.662786][T27116] batadv2: entered allmulticast mode
[  894.668591][T27116] batadv2: entered promiscuous mode
[  894.809902][T27122] syzkaller0: entered promiscuous mode
[  894.809930][T27122] syzkaller0: entered allmulticast mode
[  894.824728][T18420] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  894.824777][T18420] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  894.824815][T18420] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  894.826386][T27122] tipc: Started in network mode
[  894.826418][T27122] tipc: Node identity d65f4a0bfb22, cluster identity 4711
[  894.826704][T27122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  894.881411][T27122] tipc: Resetting bearer <eth:syzkaller0>
[  894.893034][ T4224] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  894.903762][T27123] __nla_validate_parse: 6 callbacks suppressed
[  894.903785][T27123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6437'.
[  894.903803][T27123] nbd: illegal input index -930526720
[  894.962798][    C1] ==================================================================
[  894.962877][    C1] BUG: KASAN: double-free in rcu_free_sheaf+0x31/0x200
[  894.962915][    C1] Free of addr ffff88801c119e80 by task syz.4.6439/27124
[  894.962931][    C1] 
[  894.962969][    C1] CPU: 1 UID: 0 PID: 27124 Comm: syz.4.6439 Not tainted syzkaller #0 PREEMPT(full) 
[  894.963005][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  894.963021][    C1] Call Trace:
[  894.963031][    C1]  <IRQ>
[  894.963042][    C1]  dump_stack_lvl+0xe8/0x150
[  894.963079][    C1]  print_address_description+0x55/0x1e0
[  894.963130][    C1]  print_report+0x58/0x70
[  894.963166][    C1]  ? rcu_free_sheaf+0x31/0x200
[  894.963195][    C1]  kasan_report_invalid_free+0xea/0x110
[  894.963231][    C1]  ? rcu_free_sheaf+0x31/0x200
[  894.963263][    C1]  ? rcu_free_sheaf+0x31/0x200
[  894.963292][    C1]  __kasan_slab_pre_free+0x104/0x120
[  894.963327][    C1]  __rcu_free_sheaf_prepare+0x10a/0x2a0
[  894.963364][    C1]  ? rcu_core+0x8b0/0x1230
[  894.963393][    C1]  rcu_free_sheaf+0x31/0x200
[  894.963423][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  894.963455][    C1]  ? __pfx_rcu_free_sheaf+0x10/0x10
[  894.963485][    C1]  ? rcu_core+0x8b0/0x1230
[  894.963512][    C1]  rcu_core+0x92e/0x1230
[  894.963548][    C1]  ? __pfx_rcu_core+0x10/0x10
[  894.963578][    C1]  ? clockevents_program_event+0x491/0x630
[  894.963618][    C1]  handle_softirqs+0x265/0x8d0
[  894.963654][    C1]  __irq_exit_rcu+0xc6/0x220
[  894.963680][    C1]  irq_exit_rcu+0x9/0x30
[  894.963707][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  894.963742][    C1]  </IRQ>
[  894.963751][    C1]  <TASK>
[  894.963760][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  894.963786][    C1] RIP: 0010:filemap_map_pages+0x1a2a/0x2170
[  894.963823][    C1] Code: e9 a5 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c af fe ff ff 48 89 df e8 f3 1e 2e 00 e9 a2 fe ff ff 48 8b 84 24 10 01 00 00 <42> 80 3c 20 00 48 8b 9c 24 d0 00 00 00 74 08 48 89 df e8 ff 1e 2e
[  894.963845][    C1] RSP: 0000:ffffc90003fa7920 EFLAGS: 00000246
[  894.963868][    C1] RAX: 1ffff1100b700c7a RBX: ffffea0001d01340 RCX: ffff88802ceeddc0
[  894.963886][    C1] RDX: 0000000000000000 RSI: 000000000000008f RDI: 0000000000000090
[  894.963901][    C1] RBP: ffffc90003fa7b38 R08: ffff88802ceeddc0 R09: 0000000000000002
[  894.963917][    C1] R10: 0000000000000003 R11: 0000000000000000 R12: dffffc0000000000
[  894.963931][    C1] R13: 0000000000000000 R14: ffff8880771a1678 R15: 000000000000008f
[  894.963967][    C1]  ? filemap_map_pages+0x1d1/0x2170
[  894.963994][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[  894.964016][    C1]  ? lock_acquire+0x115/0x350
[  894.964041][    C1]  ? lock_acquire+0x115/0x350
[  894.964065][    C1]  ? do_pte_missing+0x140c/0x34b0
[  894.964090][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[  894.964112][    C1]  ? do_pte_missing+0x140c/0x34b0
[  894.964140][    C1]  do_pte_missing+0x20ae/0x34b0
[  894.964184][    C1]  ? handle_mm_fault+0xf1/0x3750
[  894.964210][    C1]  handle_mm_fault+0x1a53/0x3750
[  894.964238][    C1]  ? handle_mm_fault+0xf1/0x3750
[  894.964266][    C1]  ? __pfx_handle_mm_fault+0x10/0x10
[  894.964287][    C1]  ? lock_vma_under_rcu+0x45a/0x500
[  894.964312][    C1]  ? __pfx_do_futex+0x10/0x10
[  894.964355][    C1]  do_user_addr_fault+0xb35/0x1480
[  894.964386][    C1]  ? trace_page_fault_user+0x84/0x1e0
[  894.964412][    C1]  exc_page_fault+0x6a/0xc0
[  894.964446][    C1]  asm_exc_page_fault+0x26/0x30
[  894.964468][    C1] RIP: 0033:0x7f580c273d80
[  894.964488][    C1] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 40 40 00 00 0f 85 1f fe ff ff e9 d3 fd ff ff 0f 1f 44
[  894.964508][    C1] RSP: 002b:00007ffc2d7e1610 EFLAGS: 00010202
[  894.964528][    C1] RAX: 000000110c2b4000 RBX: ffffffff8a21dc1a RCX: 0000000000000003
[  894.964545][    C1] RDX: 0000000000001c1a RSI: 0000000000000770 RDI: 0000000000000008
[  894.964560][    C1] RBP: 0000000000000000 R08: 00007f580c610000 R09: 00007f580c612000
[  894.964577][    C1] R10: 000000008a21dc1e R11: 0000000000000001 R12: 00007f580c626038
[  894.964593][    C1] R13: 00000000000003ca R14: ffffffff8a21d374 R15: 00007f580d155720
[  894.964610][    C1]  ? nft_flow_rule_offload_commit+0xf4/0x1d40
[  894.964704][    C1]  ? nft_flow_rule_offload_commit+0x99a/0x1d40
[  894.964742][    C1]  </TASK>
[  894.964751][    C1] 
[  894.964758][    C1] Allocated by task 4224:
[  894.964790][    C1]  kasan_save_track+0x3e/0x80
[  894.964818][    C1]  __kasan_kmalloc+0x93/0xb0
[  894.964856][    C1]  __kmalloc_cache_noprof+0x31c/0x600
[  894.964882][    C1]  hwsim_update_pib+0x7e/0x400
[  894.964973][    C1]  hwsim_set_promiscuous_mode+0x196/0x2e0
[  894.965001][    C1]  drv_set_promiscuous_mode+0x154/0x2d0
[  894.965071][    C1]  drv_start+0x4db/0x1000
[  894.965100][    C1]  mac802154_scan_worker+0x8e6/0xe60
[  894.965129][    C1]  process_scheduled_works+0xc3d/0x1630
[  894.965156][    C1]  worker_thread+0xa47/0xfb0
[  894.965192][    C1]  kthread+0x38b/0x480
[  894.965210][    C1]  ret_from_fork+0x514/0xb70
[  894.965232][    C1]  ret_from_fork_asm+0x1a/0x30
[  894.965251][    C1] 
[  894.965257][    C1] Freed by task 27124:
[  894.965268][    C1]  kasan_save_track+0x3e/0x80
[  894.965294][    C1]  kasan_save_free_info+0x40/0x50
[  894.965317][    C1]  __kasan_slab_free+0x5c/0x80
[  894.965344][    C1]  __rcu_free_sheaf_prepare+0x12d/0x2a0
[  894.965375][    C1]  rcu_free_sheaf+0x31/0x200
[  894.965401][    C1]  rcu_core+0x92e/0x1230
[  894.965426][    C1]  handle_softirqs+0x265/0x8d0
[  894.965449][    C1]  __irq_exit_rcu+0xc6/0x220
[  894.965474][    C1]  irq_exit_rcu+0x9/0x30
[  894.965497][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  894.965529][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  894.965551][    C1] 
[  894.965557][    C1] The buggy address belongs to the object at ffff88801c119e80
[  894.965557][    C1]  which belongs to the cache kmalloc-64 of size 64
[  894.965601][    C1] The buggy address is located 0 bytes inside of
[  894.965601][    C1]  64-byte region [ffff88801c119e80, ffff88801c119ec0)
[  894.965625][    C1] 
[  894.965632][    C1] The buggy address belongs to the physical page:
[  894.965644][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c119
[  894.965664][    C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  894.965683][    C1] page_type: f5(slab)
[  894.965704][    C1] raw: 00fff00000000000 ffff88801c0418c0 dead000000000100 dead000000000122
[  894.965724][    C1] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000
[  894.965737][    C1] page dumped because: kasan: bad access detected
[  894.965749][    C1] page_owner tracks the page as allocated
[  894.965758][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4739714182
[  894.965794][    C1]  post_alloc_hook+0x1f9/0x250
[  894.965818][    C1]  get_page_from_freelist+0x2209/0x2280
[  894.965846][    C1]  __alloc_frozen_pages_noprof+0x217/0x5a0
[  894.965876][    C1]  allocate_slab+0x7d/0x620
[  894.965895][    C1]  refill_objects+0x2d5/0x350
[  894.965914][    C1]  __pcs_replace_empty_main+0x2c8/0x6c0
[  894.965946][    C1]  __kmalloc_cache_noprof+0x396/0x600
[  894.965972][    C1]  __rtnl_register_many+0x323/0x720
[  894.965997][    C1]  neigh_init+0x15/0x20
[  894.966106][    C1]  do_one_initcall+0x250/0x870
[  894.966136][    C1]  do_initcall_level+0x10a/0x1a0
[  894.966226][    C1]  do_initcalls+0x59/0xa0
[  894.966247][    C1]  kernel_init_freeable+0x29d/0x3e0
[  894.966268][    C1]  kernel_init+0x22/0x1d0
[  894.966291][    C1]  ret_from_fork+0x514/0xb70
[  894.966309][    C1]  ret_from_fork_asm+0x1a/0x30
[  894.966327][    C1] page last free pid 1 tgid 1 ts 3021164792 stack trace:
[  894.966341][    C1]  __free_pages_ok+0xb6c/0xc60
[  894.966361][    C1]  btf_check_all_metas+0x5e7/0xa30
[  894.966379][    C1]  btf_parse_vmlinux+0x51d/0x8c0
[  894.966401][    C1]  bpf_get_btf_vmlinux+0x48/0x70
[  894.966426][    C1]  __register_btf_kfunc_id_set+0x62/0x14c0
[  894.966456][    C1]  wakeup_sources_bpf_init+0x11/0x60
[  894.966548][    C1]  wakeup_sources_init+0x28/0x30
[  894.966578][    C1]  do_one_initcall+0x250/0x870
[  894.966609][    C1]  do_initcall_level+0x10a/0x1a0
[  894.966632][    C1]  do_initcalls+0x59/0xa0
[  894.966655][    C1]  kernel_init_freeable+0x29d/0x3e0
[  894.966676][    C1]  kernel_init+0x22/0x1d0
[  894.966700][    C1]  ret_from_fork+0x514/0xb70
[  894.966719][    C1]  ret_from_fork_asm+0x1a/0x30
[  894.966739][    C1] 
[  894.966745][    C1] Memory state around the buggy address:
[  894.966758][    C1]  ffff88801c119d80: 00 00 00 00 03 fc fc fc fc fc fc fc fc fc fc fc
[  894.966774][    C1]  ffff88801c119e00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  894.966789][    C1] >ffff88801c119e80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  894.966801][    C1]                    ^
[  894.966813][    C1]  ffff88801c119f00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  894.966828][    C1]  ffff88801c119f80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  894.966840][    C1] ==================================================================
[  894.966893][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  895.840321][    C1] CPU: 1 UID: 0 PID: 27124 Comm: syz.4.6439 Not tainted syzkaller #0 PREEMPT(full) 
[  895.849743][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  895.859903][    C1] Call Trace:
[  895.863200][    C1]  <IRQ>
[  895.866133][    C1]  vpanic+0x56d/0xa60
[  895.870162][    C1]  ? rcu_is_watching+0x16/0xb0
[  895.874961][    C1]  ? __pfx_vpanic+0x10/0x10
[  895.879479][    C1]  panic+0xc5/0xd0
[  895.883233][    C1]  ? __pfx_panic+0x10/0x10
[  895.887665][    C1]  check_panic_on_warn+0x89/0xb0
[  895.892618][    C1]  end_report+0x73/0x170
[  895.896877][    C1]  ? rcu_free_sheaf+0x31/0x200
[  895.901675][    C1]  kasan_report_invalid_free+0xfa/0x110
[  895.907239][    C1]  ? rcu_free_sheaf+0x31/0x200
[  895.912013][    C1]  ? rcu_free_sheaf+0x31/0x200
[  895.916788][    C1]  __kasan_slab_pre_free+0x104/0x120
[  895.922095][    C1]  __rcu_free_sheaf_prepare+0x10a/0x2a0
[  895.927849][    C1]  ? rcu_core+0x8b0/0x1230
[  895.932272][    C1]  rcu_free_sheaf+0x31/0x200
[  895.936869][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  895.942697][    C1]  ? __pfx_rcu_free_sheaf+0x10/0x10
[  895.947907][    C1]  ? rcu_core+0x8b0/0x1230
[  895.952353][    C1]  rcu_core+0x92e/0x1230
[  895.956611][    C1]  ? __pfx_rcu_core+0x10/0x10
[  895.961297][    C1]  ? clockevents_program_event+0x491/0x630
[  895.967119][    C1]  handle_softirqs+0x265/0x8d0
[  895.971896][    C1]  __irq_exit_rcu+0xc6/0x220
[  895.976603][    C1]  irq_exit_rcu+0x9/0x30
[  895.981083][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  895.986743][    C1]  </IRQ>
[  895.989682][    C1]  <TASK>
[  895.992615][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  895.998606][    C1] RIP: 0010:filemap_map_pages+0x1a2a/0x2170
[  896.004521][    C1] Code: e9 a5 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c af fe ff ff 48 89 df e8 f3 1e 2e 00 e9 a2 fe ff ff 48 8b 84 24 10 01 00 00 <42> 80 3c 20 00 48 8b 9c 24 d0 00 00 00 74 08 48 89 df e8 ff 1e 2e
[  896.024222][    C1] RSP: 0000:ffffc90003fa7920 EFLAGS: 00000246
[  896.030300][    C1] RAX: 1ffff1100b700c7a RBX: ffffea0001d01340 RCX: ffff88802ceeddc0
[  896.038275][    C1] RDX: 0000000000000000 RSI: 000000000000008f RDI: 0000000000000090
[  896.046251][    C1] RBP: ffffc90003fa7b38 R08: ffff88802ceeddc0 R09: 0000000000000002
[  896.054228][    C1] R10: 0000000000000003 R11: 0000000000000000 R12: dffffc0000000000
[  896.062226][    C1] R13: 0000000000000000 R14: ffff8880771a1678 R15: 000000000000008f
[  896.070222][    C1]  ? filemap_map_pages+0x1d1/0x2170
[  896.075435][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[  896.081014][    C1]  ? lock_acquire+0x115/0x350
[  896.085788][    C1]  ? lock_acquire+0x115/0x350
[  896.090471][    C1]  ? do_pte_missing+0x140c/0x34b0
[  896.095761][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[  896.101586][    C1]  ? do_pte_missing+0x140c/0x34b0
[  896.106676][    C1]  do_pte_missing+0x20ae/0x34b0
[  896.111640][    C1]  ? handle_mm_fault+0xf1/0x3750
[  896.116687][    C1]  handle_mm_fault+0x1a53/0x3750
[  896.121726][    C1]  ? handle_mm_fault+0xf1/0x3750
[  896.126691][    C1]  ? __pfx_handle_mm_fault+0x10/0x10
[  896.132164][    C1]  ? lock_vma_under_rcu+0x45a/0x500
[  896.137458][    C1]  ? __pfx_do_futex+0x10/0x10
[  896.142205][    C1]  do_user_addr_fault+0xb35/0x1480
[  896.147335][    C1]  ? trace_page_fault_user+0x84/0x1e0
[  896.152714][    C1]  exc_page_fault+0x6a/0xc0
[  896.157333][    C1]  asm_exc_page_fault+0x26/0x30
[  896.162191][    C1] RIP: 0033:0x7f580c273d80
[  896.166625][    C1] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 40 40 00 00 0f 85 1f fe ff ff e9 d3 fd ff ff 0f 1f 44
[  896.186259][    C1] RSP: 002b:00007ffc2d7e1610 EFLAGS: 00010202
[  896.192361][    C1] RAX: 000000110c2b4000 RBX: ffffffff8a21dc1a RCX: 0000000000000003
[  896.200339][    C1] RDX: 0000000000001c1a RSI: 0000000000000770 RDI: 0000000000000008
[  896.208312][    C1] RBP: 0000000000000000 R08: 00007f580c610000 R09: 00007f580c612000
[  896.216289][    C1] R10: 000000008a21dc1e R11: 0000000000000001 R12: 00007f580c626038
[  896.224267][    C1] R13: 00000000000003ca R14: ffffffff8a21d374 R15: 00007f580d155720
[  896.232267][    C1]  ? nft_flow_rule_offload_commit+0xf4/0x1d40
[  896.238454][    C1]  ? nft_flow_rule_offload_commit+0x99a/0x1d40
[  896.244658][    C1]  </TASK>
[  896.248016][    C1] Kernel Offset: disabled
[  896.252339][    C1] Rebooting in 86400 seconds..