last executing test programs:

12.923785002s ago: executing program 4 (id=1939):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000"], 0x50)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendto$inet6(r1, &(0x7f00000005c0)='X', 0xfee4, 0x0, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet6(0xffffffffffffffff, &(0x7f0000000b80)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080))

11.307833415s ago: executing program 4 (id=1944):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x62a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'macvtap0\x00', 0x1})
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff05"], 0x9e)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r6=>0x0})
r7 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000400)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="0a001800037f030303ee"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000001300000008000300", @ANYRES32=r6, @ANYBLOB="0a000600080211000000001004001300000000000000000000000000000000005a5da91db7d796659a2402d1fd3051ce8afde87a05e5dc2c394745326bf0b4e50d87da5116df63560c70751a0566a9879f6581d7607a9e5fafcb9bdd1b175cae82497c7b394dccade14f37dfbf1ca23280ea7baaa3641a82658c22d18a5adcd3f829d5c17648cb08e043ca7bcb208cdea4c2725c3b54e500a18e498b09414ac08f06533df4438fd2d1e05bba9f02000000000000e1a0b8f18b49442774a204ea68acdce5a4d2e31b579b2e315a74b71e5651748c8af1e9bd00000000"], 0x3c}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="0a001a000100000a000600080211000000ffffe4000000009bf1319ad2609518488563e44720fc5817fbc5d9f3e86f2b9e63a6253f9718b2159e47941f45d1a4f70cc6a5036e6004a1c4fe3a095b33b11a3ecd9481f307587b5a37247e1abcad1238f710fcedd457c945043dfa73de843aee0dfb501028df62fe05c491f1"], 0x34}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r8, 0x8914, &(0x7f0000000780)='dummy0\x00'/40)
ioctl(r8, 0x8914, &(0x7f00000007c0)="64756d6d7930000000000000000000000100"/40)
ioctl(r8, 0x8914, &(0x7f0000000800)="6c6170623000000000000000000000000100"/40)
ioctl(r8, 0x890b, &(0x7f0000000840)="000000010000000000000000020000000f0000006c6170623000000000000000000000000000000000000000000000000000000000000000e000000000000000")

5.863617431s ago: executing program 0 (id=1963):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x48, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "e7ffff7f00000000"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0)

5.5951458s ago: executing program 2 (id=1964):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
unshare(0x20400)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)

5.59485042s ago: executing program 1 (id=1965):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='nv', 0x2)
sendto$inet(r0, &(0x7f00000001c0)='F', 0x1, 0x4000, 0x0, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x443}], 0x1)
sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000001000)=@pptp={0x18, 0x2, {0x3, @local}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001080)="5e6e7334020071212de849fe7e76b91209633e4250ebe29244", 0x19}, {&(0x7f00000010c0)="25814aadae6eae995e358f94a593c858d45b1a67f83edfffba45f3138843e1a6797f7f67aad9464bc001da2e9da658fcc13c406a5401a7c9ae19e710332248f8f047a558674bfeae077e0280449ae0ad40e0907342f84ff6ce2eed9044699bd205844d93b4b4611aeb9a7a0f4780a3673d1cbcef4a0af20e23d31f5effbc0ea885e7c67ece7f81a8513c0ae4fbf670a66b93f4dc75284aee", 0x98}, {&(0x7f0000001180)="f6d92035189e5ef9284cf3488855ac1dc5b4f33b6c43a07788ad4cf1db3941eb22203d99f38c3693e4336e6ea07abb5104476523cf84526a9db85e8592b601e92b7f926fd6d8a149c96b785cd22746352d1bd9c074a97efbac18dbd2150aa2e0d239ca6bb78144e421ee73a7c2b2476171ca4f3a13b15a3fc0a5b7d1302db0067d83f0ce5439a1843f429f83f869619952ac441d7301e45469e05bdc7f", 0x9d}, {&(0x7f0000001240)="be88c116d86bdd783268413ec4778eeab5e4d44fc911d42450ba6fc742362f", 0x1f}], 0x4, &(0x7f00000012c0)=[{0x38, 0x10c, 0x773, "e717d5150a7ea2871d88589e6a9e9ad84dc24f42ae9d0cdd30783c1c9a5c093615d85fe1fb"}, {0x98, 0x10a, 0x0, "8b97b4b45dd8afa17c49e4e8ca72e26032f32ecccd8673e5479f60326bf749c06984a0bfcb083edbc0531396d69c8cb8b95f8621f534038dc5d841a276964877f28d1d84f7b2fc5885a91820c045fb0e72afacd8a699851397bc51cd14a0dad7158eee0055d1042b54612fa1095bd229e164ecf724d154aac3b1288c9e016e2274a2b6eb866e"}], 0xd0}}, {{&(0x7f00000013c0)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, 0x0, 0x0, 0x0, 0x1418}}], 0x2, 0x8095)

5.545807404s ago: executing program 3 (id=1966):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8a5423e", 0x27}, {&(0x7f0000000500)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b301183a8867463de2a0fae686630b7db109ed37404eadf39e858bee704a9d000bc1aae96b1b4d529573e38241eed0ecb1a9498", 0xe1}, {&(0x7f0000000600)="20b946e4ffc923", 0x7}, {&(0x7f0000000640)="e705ba567be6127d85d39375b1096053", 0x10}], 0x4}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4)
writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x335}], 0x1)

5.444609354s ago: executing program 0 (id=1967):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000010c30000000003110000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000001000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000"], &(0x7f0000000440)='GPL\x00', 0xa, 0xde, &(0x7f0000000480)=""/222, 0x0, 0x8}, 0x94)

5.134852332s ago: executing program 0 (id=1968):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e25, 0x31e, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}, 0x1c)
shutdown(r0, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}, 0x3000000}, 0x1c)

4.90103933s ago: executing program 0 (id=1969):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000400)=0x4)
ioctl$PPPIOCSMAXCID(r2, 0x541b, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000017c0)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)={0x4c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x9}}, 0xfffd, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x54, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xf}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x4d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa, 0x6b}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x149, 0x6b}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x41)
setsockopt(r0, 0x84, 0x81, &(0x7f00000001c0)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000240)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={<r7=>0x0}, &(0x7f00000002c0)=0x8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="5cf806004c11122067ec3ab10000090000000800", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x14, &(0x7f00000014c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=<r10=>r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000015c0)={r9}, 0xc)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYBLOB="22010100fa"], 0x9)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
recvmmsg(r12, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0)
setsockopt$SO_TIMESTAMP(r12, 0x1, 0x40, 0x0, 0x0)
clock_gettime(0xfffffffffffffffc, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYRESDEC=r10], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001380), 0x8, 0x10, &(0x7f00000013c0), 0x10}, 0x94)
connect$inet(r11, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10)

4.887567618s ago: executing program 1 (id=1970):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x28040680) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r1, 0x400000000000003a, 0x1, 0x0, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1], 0x28}, 0x1, 0x0, 0x0, 0x34000005}, 0x4008030)
r2 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710, @hyper}, 0x10)
listen(r3, 0x0) (async)
accept4$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x0, 0x80000) (async)
r4 = socket(0x1f, 0x0, 0x0)
bind$l2tp6(r4, &(0x7f0000000b00)={0xa, 0x0, 0xc2db, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8001, 0x4}, 0x20) (async)
r5 = socket$vsock_stream(0x28, 0x1, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="660a00000000000069114e0000000000850000001a0000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80)
connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) (async)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000c1401002abd7000ffdbdf25080003000200000008000100010400000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x40854) (async)
r6 = socket(0x2, 0x80805, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000004c0)={<r8=>0x0, 0x5c, &(0x7f0000000580)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4e21, @private=0xa010101}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x1}]}, &(0x7f0000000640)=0x10) (async)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000300)=0x7, 0x4) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x40241, 0x0) (async)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000d00)={'syzkaller1\x00', <r12=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r10, r12, 0x25, 0x0, @void}, 0x10) (async)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000d80)={'syzkaller1\x00', 0x1})
write$tun(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="016f08000100270002002700000045b061b6bcfd691143c81b005800660000062f90780000234e4d10283cfd53880b000000030c0008000c0086dd0800a2be00000003931a07bd80010000000000000e080022eb000000012809830002000000000000000b2b07402bf6110800655800b14aed3229b7a40bf3f6ce37fa6b45552e6bda0194a2c16522dd8e7df524effbd28ec0b887c8c860815b9f1ec491fef634313d1093dfded20db3585f46944e342274b01baa85490909153c42251cc352691805e87988f61c"], 0x66)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f00000003c0)={r8, @in={{0x2, 0x5e28, @empty}}}, &(0x7f0000000380)=0x84)
sendmmsg$inet_sctp(r6, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4d382401717e115a}], 0x49, 0x40)

4.813542308s ago: executing program 4 (id=1971):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x80)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00')
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x8, &(0x7f0000101ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000103000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
socket$igmp(0x2, 0x3, 0x2)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000103040)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x800000e}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000103080)={0x0, 0x0, &(0x7f00001030c0)={&(0x7f0000103100)=ANY=[@ANYBLOB="1c00000003060102a018645100000000070c000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
bpf$TOKEN_CREATE(0x24, &(0x7f0000103140)={0x0, r3}, 0x8)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r4, &(0x7f0000103180)={0x1f, 0x0, @none, 0x7ff, 0x1}, 0xe)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00001031c0)={r4, r4, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000103280)={@any, 0xff, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"})
bpf$PROG_LOAD(0x5, &(0x7f0000103340)={0x4, 0xe, &(0x7f0000103400)=ANY=[@ANYBLOB], &(0x7f0000103440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000103480)={0x0, 0xffffffff, 0x7}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00001034c0)={0x0, 0x0, &(0x7f0000103500)}, 0x811)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000103540)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f00001035c0), &(0x7f0000103600), 0x2000000}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000103640)='./cgroup/syz0\x00', 0x1ff)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000103680)={0x0, 0x0, &(0x7f00001036c0)={&(0x7f0000103700)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000103780)={'wpan0\x00'})

4.677097162s ago: executing program 2 (id=1972):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x180800)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=<r1=>0x0)
bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, r1, 0xffffffffffffffff, 0x1, 0x82, 0x8, "423664cf02990bca432b6af994531f7619760866f2fdab472b0cbe45ee2302d881880ad2aa8fba29b6aa7e328aa64536ca0a42203f40583c284259c1da786f", 0x1e}, 0x60)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300), 0x318, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040080000000001300020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c00020000002d"], 0xbc}, 0x1, 0x0, 0x0, 0x44000055}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32], 0x1c}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000003a00010000000000000000000a0008000000010018000000"], 0x1c}}, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000440)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f8, &(0x7f0000000480))
close(0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000880), 0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000940)=""/96, 0xffffffffffffffdc}], 0x3}, 0x400002e1)
sendmsg$FOU_CMD_ADD(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=<r8=>r7, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="ff08", @ANYBLOB="8a317eb14415fab892e03cf9bec0a9cac2d6986e338a3743fcc41fa4276465569c6a3e6d6afe8d372189d8b16bdae704e0cc5bbacd8326f1a4e261e41ee78f1fc7985cb0b363f74faa5c7c36ad1265eabc273856c309e0da228ad7d6ffb6d29c2bd28103b97d133bb13be39f83d991e601e8503b5e650898f29d7205c02a3dba9196da97af040fdbdcadce1c124206c1a59568962dee85f6efb1c6e26cfa1eac6f0ec6757ae78fb9dd1087ca6fd1e97ff7378ba0074effcf727b7b8e02d55c0c", @ANYRES64=r8, @ANYRES32=r10, @ANYRES64=r5], 0x34}, 0x1, 0x0, 0x0, 0x24008085}, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r11, 0x0, 0x8008000000010, &(0x7f0000000640)="00000000020001000003a90830332b35", 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, 0x6e)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000480)={0x2, @in={{0x2, 0x4e24, @multicast1}}, 0x4e24}, &(0x7f0000000540)=0x90)

4.417389224s ago: executing program 3 (id=1973):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000"], 0x50)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendto$inet6(r1, &(0x7f00000005c0)='X', 0xfee4, 0x0, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet6(0xffffffffffffffff, &(0x7f0000000b80)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080))

4.13170792s ago: executing program 2 (id=1974):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001400)}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x10, 0x180800)
ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000300)=0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000010c30000000003110000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000001000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000480)=""/222, 0x0, 0x8}, 0x78)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x35, 0xff, 0x0, 0x10001}]}, 0x10)

3.819194815s ago: executing program 4 (id=1975):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac47037fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5ed838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f", 0x134}], 0x1}}], 0x1, 0x2090)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00'})
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000200"/28], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000104000000000000", @ANYRES32, @ANYBLOB="093940dc0d9e9aca483b3e211e9d590000000000000000080000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1d00000006003800000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000200"/28], 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x4, 0x8}, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000cc0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6866f59e08000000000000000000000000000000000000aa4e224e"], 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000d00)=0x474c, 0x4)
bind$inet(r2, &(0x7f0000000d40)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
connect$inet(r2, &(0x7f0000000d80)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000000dc0), 0x800001d, 0x300)
setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000e00)=0x80, 0x4)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000e40)=0x10, 0x4)
recvmmsg(r2, &(0x7f0000000e80), 0x291962b, 0x45833af92e4b39ff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1}, &(0x7f0000000700), &(0x7f0000000740)='%-5lx  \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r1}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000b40)={0xa, 0x4e23, 0x1, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000b80)=0x2, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000bc0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000c00)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
shutdown(r3, 0x1)

3.801932s ago: executing program 2 (id=1976):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000240)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%pB    \x00'}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @loopback, @loopback}, &(0x7f0000000100)=0xc)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/uts\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000600)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$rds(r4, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x5}, {0x0}, &(0x7f0000000740)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/247, 0xf7}], 0x2}}], 0x48}, 0x0)
connect$inet(r3, &(0x7f0000001880)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f00000018c0)="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", 0xffffff5d, 0x12, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, 0x0, 0x0, 0x4000840)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001a80)='bic', 0x3)
recvfrom$inet(r3, &(0x7f0000001ac0), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24000801)

3.312958122s ago: executing program 1 (id=1977):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in, @in=@broadcast}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000180)=0xe8)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x35, 0xff, 0x0, 0x10001}]}, 0x10)

3.109744701s ago: executing program 1 (id=1978):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000010c30000000003110000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000001000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000"], &(0x7f0000000440)='GPL\x00', 0xa, 0xde, &(0x7f0000000480)=""/222, 0x0, 0x8}, 0x94)

3.082538721s ago: executing program 0 (id=1979):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000080))
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x400})
ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0)
ioctl$sock_bt_hci(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448c9, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001180)='syzkaller\x00'}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001240)="b9ff03030018698cb89e40f086dd6000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000001280), &(0x7f00000012c0), 0x4}, 0x50)

2.787796842s ago: executing program 3 (id=1980):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='nv', 0x2)
sendto$inet(r0, &(0x7f00000001c0)='F', 0x1, 0x4000, 0x0, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="fb7ef3f08d8f0d64c4636b96073c171a2926f00a2baa2c2752e6ba348df7c6cb64a0a5dbc368e6e57135b7c7f20a1e4ca2d0c293b9df5480df71d6dcdd9beb4fa3247b3b7e38346fa0436ee2d9c57c41af42a71188cbd6b252eb449052ef2d76f3c0ab72b88db15921409f4efe9fe517430ec288238072967546e6a834ac62fec1df765d0147d8d2993dceb59f5b66b848a8f1d09a0d8108e7ef271311ea18df574e3e0b9242dd27f45258cb3bb762582f5737efdc15dabfa031673c84696ab886bdd35bb35a5346cf472e001e71c5384fc353b3181775acb185307d6f762e564b7fd4f06f875fc919c3ebb015f673a3cb380b03abbbfe30c781bd8b17292a1e2b748107e60e568c1e1f86a0cf01e30772b6b2146cd4d1f2e9fc7b5bcefded909fe7bf723490ced2d106004e3a0cd7b9c3519b05741751325fe8538085cc1f902fa544dcc929f10469fe39c3cf61f786254a373316923186fa08ef3c8917d4c2df0d3e41c32b6948177e71b23c3a9eb9c30db62011da02d48da9318c20a438f6ba2962ce066b8793e16831c350a379f8c54c5de2eab0b0117e3dc30f5c27c87b2eb33b43215bdcabb7185b1ca317dc967cfdfdcbf92a4e196bcf0d6ba1cea19dd296b4de3625a95ea0ee82efc84379be3125e84d8183ebce42f98654f44f86d49b13529b6cec5acbe93af52987080df30eed17685881b67777877226704091bd1f07b76c3af968b6afc17751d27756d8df673ee1cc756cbc9ef90ee5477c529105548e84a9fa4cba55b8fe48ef33e206952e5be378ef8df0c7c024080b8961d49a6b863cd8f4e29dd1c66fd9f93ea18010b541133f792fde35c33b0bd8ef50f205193ac4c223f6f5e9659ff679a132fee9cf1769ecef53bc2ed1b3feaa0306025a68e87a88f7bf740a457024963ef1dac67dbd1bae5aec6604b8440e5f3cf21d1c4187db1a1f205054ec1f9dd4d86977bdd6c4c30ef70e2f96fca9ad0cd08dd057286fb658aa836f5a0b1e0c0b86e5e4ab951fd85fa9bc1fa58696b69b2a423a9da883ea945955840c11ae26af5a08cf7d8ce3eda8eef541ba114e0614a0e864424df8aaab36a8abcacf52adddd298c11557f6948215b809e817fefbba3c2fdd96b2c3f23c20bb3c04ccf92c570db4a1555907a79c1ea7fe4085356dbf1d892d86691fcb6ad8b9a7b4b3703afe7e2c2d0da56e31f7d724aa1ece518602235cccf491bc282195054dfebb630b0cbbf7c2a9b82ea6999316dff165c06df46731d1e6a8424cfabac225c32e1fee0a82bcc954f56e5c92da2a1f5d5dc6f6f0b6cf207f0b5986459f5f56643e7b147056c3186753749e6d4ba51a594429a9b4a99b4885fc1888ef784025ad07afe5e7aa8a50dd0d4981905b7f11198b983eb0437ca00e0e642644e63d9d87d64ae75915230887fa8a6e9b446bd4c1d0200a4d77d63782b8d00448849aac5a152df21ef03665613f18f2d4f94f147bd73bf37c7f706a57c9352db92b7359f76a06c63e34fa61037e00457527effd358a21ee7cdee24fb5a8f5", 0x443}], 0x1)
sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000001000)=@pptp={0x18, 0x2, {0x3, @local}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001080)="5e6e7334020071212de849fe7e76b91209633e4250ebe29244", 0x19}, {&(0x7f00000010c0)="25814aadae6eae995e358f94a593c858d45b1a67f83edfffba45f3138843e1a6797f7f67aad9464bc001da2e9da658fcc13c406a5401a7c9ae19e710332248f8f047a558674bfeae077e0280449ae0ad40e0907342f84ff6ce2eed9044699bd205844d93b4b4611aeb9a7a0f4780a3673d1cbcef4a0af20e23d31f5effbc0ea885e7c67ece7f81a8513c0ae4fbf670a66b93f4dc75284aee", 0x98}, {&(0x7f0000001180)="f6d92035189e5ef9284cf3488855ac1dc5b4f33b6c43a07788ad4cf1db3941eb22203d99f38c3693e4336e6ea07abb5104476523cf84526a9db85e8592b601e92b7f926fd6d8a149c96b785cd22746352d1bd9c074a97efbac18dbd2150aa2e0d239ca6bb78144e421ee73a7c2b2476171ca4f3a13b15a3fc0a5b7d1302db0067d83f0ce5439a1843f429f83f869619952ac441d7301e45469e05bdc7f", 0x9d}, {&(0x7f0000001240)="be88c116d86bdd783268413ec4778eeab5e4d44fc911d42450ba6fc742362f", 0x1f}], 0x4, &(0x7f00000012c0)=[{0x38, 0x10c, 0x773, "e717d5150a7ea2871d88589e6a9e9ad84dc24f42ae9d0cdd30783c1c9a5c093615d85fe1fb"}, {0x98, 0x10a, 0x0, "8b97b4b45dd8afa17c49e4e8ca72e26032f32ecccd8673e5479f60326bf749c06984a0bfcb083edbc0531396d69c8cb8b95f8621f534038dc5d841a276964877f28d1d84f7b2fc5885a91820c045fb0e72afacd8a699851397bc51cd14a0dad7158eee0055d1042b54612fa1095bd229e164ecf724d154aac3b1288c9e016e2274a2b6eb866e"}], 0xd0}}, {{&(0x7f00000013c0)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, 0x0, 0x0, 0x0, 0x1418}}], 0x2, 0x8095)

2.719989879s ago: executing program 1 (id=1981):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b40)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x10, 0x7, 0x0, 0x99, 0x200, 0x1, 0x3ff, 0x2, 0x8, 0x1839, 0x8, 0x5, 0x1, 0xa, 0x4, 0x868, 0x7ff, 0xfffffff9, 0x6, 0x8, 0x8, 0x5, 0x3, 0x7, 0x2, 0x6, 0x9, 0x6, 0x3, 0x7, 0x800, 0x4, 0x5, 0x7, 0x6, 0xac8, 0x1, 0x7, 0x8bb1, 0x8, 0x9, 0xf312, 0x3, 0x6, 0x4, 0x8001, 0x4, 0x6, 0x90000, 0x8, 0x4, 0x5, 0x1, 0x3, 0x7, 0x5, 0x0, 0x55, 0x1000, 0x8, 0x1, 0x8ab, 0x2, 0x8001, 0x7, 0x9, 0x24, 0x1, 0xf, 0x3ff, 0x80000001, 0x8, 0xff, 0x3e, 0x7, 0x8287, 0xff, 0x0, 0x3ff, 0x0, 0x8, 0xcdf, 0xc9, 0x6, 0xe3d6, 0x100, 0xbd79, 0x9, 0x8, 0x7119, 0x5, 0xffffffff, 0xfffffff4, 0x6, 0xb, 0x1, 0x200, 0x3, 0x6, 0x7ff, 0x4, 0x6, 0x2, 0x400, 0x3, 0xd, 0x0, 0x100f9, 0x0, 0xdbb, 0x1, 0x91, 0xcae, 0x7, 0x7, 0x7f, 0x101, 0x3b2, 0xa9, 0x8, 0xfffffffb, 0x3ff, 0xff, 0xf48, 0x0, 0xe, 0x3, 0x7, 0x7fff, 0x1, 0x1, 0x1, 0xa63, 0x9, 0xc2, 0x4, 0x100, 0xfffffff8, 0xe, 0x9da5, 0x9f, 0x4, 0xf1, 0x6, 0xaf, 0xf7, 0x1, 0x0, 0x2, 0x7, 0x6, 0x401, 0xffffffff, 0x2, 0x3ff, 0x4, 0x2, 0x721b, 0xbb9, 0x1, 0x3ff, 0x5, 0x4, 0x7, 0x7fffffff, 0x8000, 0xf, 0x740e, 0x1, 0x10, 0x8, 0x5, 0x0, 0xfffffffd, 0x7, 0x1, 0x61, 0x8, 0x6, 0x7, 0x1, 0xfffffff8, 0x1000000, 0x5, 0x8, 0x7, 0x0, 0x7, 0x3, 0x400, 0x9, 0x1ff, 0x80000000, 0x3, 0x8, 0x1, 0xff, 0x8, 0x7, 0x3, 0x9, 0x3, 0x3391, 0x3, 0x1000, 0x1, 0x6, 0x8b3, 0x5, 0x2, 0x1, 0x2, 0x4, 0x2, 0x2, 0xd505, 0xffff0000, 0xfffffbff, 0x1, 0x3, 0x600000, 0xfda, 0x12b, 0x7, 0x3, 0x2, 0x8001, 0xf, 0x800, 0xcd, 0x0, 0x5, 0x1ff, 0x81, 0x8000, 0x6, 0x3763, 0x4, 0x7, 0xd317, 0x6, 0xfffffffb, 0x1, 0xffffffff, 0x2, 0x5, 0x3, 0x0, 0x2, 0x1, 0xfffffb06, 0x101, 0x9, 0x3, 0x2, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x880)

2.133853191s ago: executing program 0 (id=1982):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}]}}}]}, 0x48}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1810000087000000000000000600008018", @ANYRES32], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x4d}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000d0000000000010005000093737b8662ff010000006868f8ff0000000018110000", @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103], &(0x7f0000000200)='GPL\x00', 0xd, 0x1000, &(0x7f0000001ac0)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0xa}, 0x2, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x999, 0xfffffffd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x95)

1.534567216s ago: executing program 3 (id=1983):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000700), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x400000, &(0x7f0000000080)={@align=0x4, {0x2, 0x1000, 0x80, 0xfff}}, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x8})
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="cd7722c7d1be0c7361dc309369aba00ce4c6c06a68c9184f0bec5d54fef56c7d6457fb199bd5d17d873877927120bcc98730d24c972eb8432393ec6c5365bbab9e42e47526e7846ea695", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fddbdf2500000000080009000200000008000700", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x20004810)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x34, 0x1040, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xa5, 0x0, 0x0, @ipv4=@broadcast}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r3 = socket(0xa, 0x3, 0xff)
bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1, 0x4, &(0x7f0000001c00)=ANY=[@ANYBLOB="1800000029ffffff00000000f9ffffff91115e000000000095"], &(0x7f0000001c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001c80)={'ip6tnl0\x00', &(0x7f0000001cc0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xf5, 0x7, 0x1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x8000, 0x20, 0x7, 0x4}})
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d40), 0xffffffffffffffff)
r8 = socket$inet(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f0000001d80)={'nat\x00', 0x0, 0x0, 0x4, [0x2, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000001e00)=0x108)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001ec0)={0x14, r7, 0x313, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000)
connect$bt_l2cap(r5, &(0x7f0000001f00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002000)=@bpf_lsm={0xd, 0x5, &(0x7f00000020c0)=ANY=[@ANYBLOB="750a00000000000061111400000000001800000000000000000000000000000095"], &(0x7f0000002100)='GPL\x00'}, 0x94)
ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000002140)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1})
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000002180)='cdg', 0x3)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000021c0)={'batadv0\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000002200), r10)
sendmsg$BATADV_CMD_SET_HARDIF(r10, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000022c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010027bd7002fbdbdf251000000008000300", @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002380)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb3}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000002400), r2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)

1.394090817s ago: executing program 4 (id=1984):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x180800)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=<r1=>0x0)
bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, r1, 0xffffffffffffffff, 0x1, 0x82, 0x8, "423664cf02990bca432b6af994531f7619760866f2fdab472b0cbe45ee2302d881880ad2aa8fba29b6aa7e328aa64536ca0a42203f40583c284259c1da786f", 0x1e}, 0x60)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300), 0x318, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040080000000001300020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c00020000002d"], 0xbc}, 0x1, 0x0, 0x0, 0x44000055}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32], 0x1c}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000003a00010000000000000000000a0008000000010018000000"], 0x1c}}, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000440)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f8, &(0x7f0000000480))
close(0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000880), 0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000940)=""/96, 0xffffffffffffffdc}], 0x3}, 0x400002e1)
sendmsg$FOU_CMD_ADD(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=<r8=>r7, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="ff08", @ANYBLOB="8a317eb14415fab892e03cf9bec0a9cac2d6986e338a3743fcc41fa4276465569c6a3e6d6afe8d372189d8b16bdae704e0cc5bbacd8326f1a4e261e41ee78f1fc7985cb0b363f74faa5c7c36ad1265eabc273856c309e0da228ad7d6ffb6d29c2bd28103b97d133bb13be39f83d991e601e8503b5e650898f29d7205c02a3dba9196da97af040fdbdcadce1c124206c1a59568962dee85f6efb1c6e26cfa1eac6f0ec6757ae78fb9dd1087ca6fd1e97ff7378ba0074effcf727b7b8e02d55c0c", @ANYRES64=r8, @ANYRES32=r10, @ANYRES64=r5], 0x34}, 0x1, 0x0, 0x0, 0x24008085}, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r11, 0x0, 0x8008000000010, &(0x7f0000000640)="00000000020001000003a90830332b35", 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, 0x6e)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000480)={0x2, @in={{0x2, 0x4e24, @multicast1}}, 0x4e24}, &(0x7f0000000540)=0x90)

1.193274848s ago: executing program 2 (id=1985):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000100)=ANY=[], 0x0, 0x6}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000880000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, <r3=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000023000000bf0920000000000035090100000000009500000000000000bf080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

568.342115ms ago: executing program 2 (id=1986):
socket$unix(0x1, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xa, &(0x7f00000006c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000740)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f00000008c0)}}, 0x10)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4048890)
bind$tipc(0xffffffffffffffff, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x11, &(0x7f0000000a00)=ANY=[@ANYBLOB="183000000000000000000000030000001830000000000000000000000000000018000000000000000000000000000000000000000000000000000000080000001800000000000000000000000000000018100000", @ANYRES32, @ANYBLOB="414bd7d90000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000ac0)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000b00)=""/153, 0x0, 0x44}, 0x94)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000003c0)={0x42, 0x1}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000480)={0x800042, 0x1}, 0x10)
close(0x3)
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004051}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r7}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x8, 0x6, 0xf76}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0)

419.939244ms ago: executing program 3 (id=1987):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000cc0)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000e00)={0x2, 0x4e22, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="180800002d98afeb00000000003f000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000004080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000280)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000300)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead47196", 0x23}, {&(0x7f0000000340)="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", 0x2ef}], 0x3, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x82, 0xc, "3a047e2aae56e4b9eab8"}]}}}], 0x48}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x0, 0x0, 0x240, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2fff, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x3c, 0xd3, 0x4, 0x8}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab2592af06d2a594bd55044f3f8f4a6ee143d88640808cb5319e5982093b0f1e78cdb4585cb8822e00d4b509e74d3ebb43b153f2481c6e300"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8)

273.251625ms ago: executing program 1 (id=1988):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000000c0)="7cf13307000020000008000081001aac1a88", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

199.545384ms ago: executing program 4 (id=1989):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000400)=0x4)
ioctl$PPPIOCSMAXCID(r2, 0x541b, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000017c0)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)={0x4c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x9}}, 0xfffd, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x54, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xf}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x4d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa, 0x6b}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x149, 0x6b}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x41)
setsockopt(r0, 0x84, 0x81, &(0x7f00000001c0)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000240)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={<r7=>0x0}, &(0x7f00000002c0)=0x8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="5cf806004c11122067ec3ab10000090000000800", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x14, &(0x7f00000014c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=<r10=>r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000015c0)={r9}, 0xc)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={r7, 0x2}, 0x8)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
recvmmsg(r12, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0)
setsockopt$SO_TIMESTAMP(r12, 0x1, 0x40, 0x0, 0x0)
clock_gettime(0xfffffffffffffffc, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYRESDEC=r10], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001380), 0x8, 0x10, &(0x7f00000013c0), 0x10}, 0x94)
connect$inet(r11, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10)

0s ago: executing program 3 (id=1990):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8a5423e", 0x27}, {&(0x7f0000000500)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b301183a8867463de2a0fae686630b7db109ed37404eadf39e858bee704a9d000bc1aae96b1b4d529573e38241eed0ecb1a9498", 0xe1}, {&(0x7f0000000600)="20b946e4ffc923", 0x7}, {&(0x7f0000000640)="e705ba567be6127d85d39375b1096053", 0x10}], 0x4}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4)
writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x335}], 0x1)

kernel console output (not intermixed with test programs):

5] RBP: 00007f96398c1090 R08: 0000000000000000 R09: 0000000000000000
[  229.914392][ T9055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  229.914406][ T9055] R13: 00007f9638c26128 R14: 00007f9638c26090 R15: 00007fff8a499ca8
[  229.914445][ T9055]  </TASK>
[  231.153195][ T9058] syzkaller0: entered promiscuous mode
[  231.153224][ T9058] syzkaller0: entered allmulticast mode
[  231.401570][ T9079] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  231.471736][ T9079] netlink: 'syz.0.872': attribute type 3 has an invalid length.
[  231.471762][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'.
[  231.471782][ T9079] netlink: 'syz.0.872': attribute type 3 has an invalid length.
[  231.471797][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'.
[  231.539986][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'.
[  235.915522][ T9072] netlink: 'syz.1.870': attribute type 7 has an invalid length.
[  237.106486][ T9123] syzkaller0: entered promiscuous mode
[  237.106535][ T9123] syzkaller0: entered allmulticast mode
[  237.170889][ T9126] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  237.217600][ T9126] netlink: 'syz.1.883': attribute type 3 has an invalid length.
[  237.217626][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.883'.
[  237.217646][ T9126] netlink: 'syz.1.883': attribute type 3 has an invalid length.
[  237.217661][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.883'.
[  237.289932][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'.
[  237.402812][ T9127] sctp: [Deprecated]: syz.2.881 (pid 9127) Use of int in max_burst socket option.
[  237.402812][ T9127] Use struct sctp_assoc_value instead
[  237.434397][ T9127] siw: device registration error -23
[  238.012148][ T9134] xt_connbytes: Forcing CT accounting to be enabled
[  238.322265][ T9153] netlink: 24 bytes leftover after parsing attributes in process `syz.4.884'.
[  238.800185][ T9160] netlink: 64 bytes leftover after parsing attributes in process `syz.1.888'.
[  238.923179][ T9165] netlink: 64 bytes leftover after parsing attributes in process `syz.3.887'.
[  239.792276][ T9151] syzkaller0: entered promiscuous mode
[  239.792304][ T9151] syzkaller0: entered allmulticast mode
[  240.704892][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  243.904167][ T9168] syzkaller1: entered promiscuous mode
[  243.904193][ T9168] syzkaller1: entered allmulticast mode
[  244.424029][ T9194] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  244.460142][ T9194] netlink: 'syz.2.896': attribute type 3 has an invalid length.
[  244.460168][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'.
[  244.460189][ T9194] netlink: 'syz.2.896': attribute type 3 has an invalid length.
[  244.460204][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'.
[  244.582740][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'.
[  245.170350][ T9200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.897'.
[  245.837695][ T9220] netlink: 64 bytes leftover after parsing attributes in process `syz.1.904'.
[  245.912519][ T9218] syzkaller1: entered promiscuous mode
[  245.912545][ T9218] syzkaller1: entered allmulticast mode
[  246.246676][ T9232] netlink: 56 bytes leftover after parsing attributes in process `syz.4.908'.
[  246.246703][ T9232] netlink: 52 bytes leftover after parsing attributes in process `syz.4.908'.
[  246.246721][ T9232] netlink: 56 bytes leftover after parsing attributes in process `syz.4.908'.
[  246.476751][    C1] Dead loop on virtual device lo (net 40), fix it urgently!
[  246.732391][ T9235] netlink: 'syz.4.908': attribute type 1 has an invalid length.
[  246.732416][ T9235] netlink: 'syz.4.908': attribute type 2 has an invalid length.
[  247.102719][ T9241] xt_IDLETIMER: label is empty or not nul-terminated
[  247.220669][ T9235] rxe_eth0 speed is unknown, defaulting to 1000
[  247.431812][ T9244] FAULT_INJECTION: forcing a failure.
[  247.431812][ T9244] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  247.431846][ T9244] CPU: 0 UID: 0 PID: 9244 Comm: syz.1.910 Not tainted syzkaller #0 PREEMPT(full) 
[  247.431872][ T9244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  247.431885][ T9244] Call Trace:
[  247.431894][ T9244]  <TASK>
[  247.431904][ T9244]  dump_stack_lvl+0xe8/0x150
[  247.431945][ T9244]  should_fail_ex+0x3eb/0x540
[  247.431979][ T9244]  _copy_from_user+0x2d/0xb0
[  247.432008][ T9244]  ___sys_sendmsg+0x1c6/0x360
[  247.432032][ T9244]  ? __lock_acquire+0x747/0x2de0
[  247.432066][ T9244]  ? __pfx____sys_sendmsg+0x10/0x10
[  247.432134][ T9244]  ? __fget_files+0x3a2/0x420
[  247.432161][ T9244]  ? __fget_files+0x2a/0x420
[  247.432208][ T9244]  __x64_sys_sendmsg+0x1b1/0x290
[  247.432236][ T9244]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  247.432286][ T9244]  do_syscall_64+0x166/0x520
[  247.432312][ T9244]  ? trace_irq_disable+0x3b/0x140
[  247.432342][ T9244]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.432366][ T9244]  ? clear_bhb_loop+0x70/0xc0
[  247.432394][ T9244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.432417][ T9244] RIP: 0033:0x7f7e4a99fb19
[  247.432438][ T9244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.432457][ T9244] RSP: 002b:00007f7e4b86c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  247.432481][ T9244] RAX: ffffffffffffffda RBX: 00007f7e4ac25fa0 RCX: 00007f7e4a99fb19
[  247.432498][ T9244] RDX: 0000000000000884 RSI: 00002000000005c0 RDI: 0000000000000003
[  247.432513][ T9244] RBP: 00007f7e4b86c090 R08: 0000000000000000 R09: 0000000000000000
[  247.432527][ T9244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  247.432540][ T9244] R13: 00007f7e4ac26038 R14: 00007f7e4ac25fa0 R15: 00007ffee6370348
[  247.432577][ T9244]  </TASK>
[  248.499220][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.911'.
[  248.592787][ T9253] netlink: 64 bytes leftover after parsing attributes in process `syz.1.915'.
[  248.839750][ T9256] 8021q: adding VLAN 0 to HW filter on device bond4
[  248.905394][ T9261] syzkaller1: entered promiscuous mode
[  248.905420][ T9261] syzkaller1: entered allmulticast mode
[  248.909139][ T9259] bond4: entered promiscuous mode
[  248.909163][ T9259] bond4: entered allmulticast mode
[  249.006493][ T9265] netlink: 'syz.3.911': attribute type 10 has an invalid length.
[  249.798903][ T9274] FAULT_INJECTION: forcing a failure.
[  249.798903][ T9274] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  249.798938][ T9274] CPU: 0 UID: 0 PID: 9274 Comm: syz.0.918 Not tainted syzkaller #0 PREEMPT(full) 
[  249.798964][ T9274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  249.798984][ T9274] Call Trace:
[  249.798993][ T9274]  <TASK>
[  249.799003][ T9274]  dump_stack_lvl+0xe8/0x150
[  249.799044][ T9274]  should_fail_ex+0x3eb/0x540
[  249.799078][ T9274]  prepare_alloc_pages+0x21e/0x5f0
[  249.799115][ T9274]  __alloc_frozen_pages_noprof+0x17c/0x410
[  249.799150][ T9274]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  249.799180][ T9274]  ? __alloc_frozen_pages_noprof+0x24c/0x410
[  249.799225][ T9274]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  249.799268][ T9274]  __alloc_pages_noprof+0x10/0x100
[  249.799299][ T9274]  alloc_pages_bulk_noprof+0x67a/0x8a0
[  249.799340][ T9274]  ? alloc_pages_noprof+0x140/0x2b0
[  249.799383][ T9274]  __kasan_populate_vmalloc+0xb7/0x1c0
[  249.799419][ T9274]  alloc_vmap_area+0xd10/0x1410
[  249.799459][ T9274]  ? __pfx_alloc_vmap_area+0x10/0x10
[  249.799486][ T9274]  ? __kmalloc_cache_node_noprof+0x3cc/0x620
[  249.799516][ T9274]  ? __kmalloc_cache_node_noprof+0x1f2/0x620
[  249.799544][ T9274]  ? __get_vm_area_node+0x155/0x2f0
[  249.799573][ T9274]  __get_vm_area_node+0x200/0x2f0
[  249.799604][ T9274]  __vmalloc_node_range_noprof+0x36e/0x16f0
[  249.799636][ T9274]  ? bpf_prog_calc_tag+0x51/0x370
[  249.799666][ T9274]  ? __sys_bpf+0xd81/0xe00
[  249.799684][ T9274]  ? __x64_sys_bpf+0xba/0xd0
[  249.799713][ T9274]  ? do_syscall_64+0x166/0x520
[  249.799744][ T9274]  ? kasan_save_track+0x4f/0x80
[  249.799771][ T9274]  ? kasan_save_track+0x3e/0x80
[  249.799799][ T9274]  ? __kvmalloc_node_noprof+0x50a/0x820
[  249.799831][ T9274]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.799870][ T9274]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  249.799929][ T9274]  ? bpf_prog_calc_tag+0x51/0x370
[  249.799949][ T9274]  __vmalloc_noprof+0xd2/0x120
[  249.799974][ T9274]  ? bpf_prog_calc_tag+0x51/0x370
[  249.799999][ T9274]  bpf_prog_calc_tag+0x51/0x370
[  249.800027][ T9274]  check_and_resolve_insns+0xc0/0x28e0
[  249.800053][ T9274]  ? __asan_memset+0x22/0x50
[  249.800079][ T9274]  ? add_subprog+0x40b/0x550
[  249.800106][ T9274]  ? bpf_check+0x1934/0x34e0
[  249.800130][ T9274]  ? __pfx_check_and_resolve_insns+0x10/0x10
[  249.800153][ T9274]  ? check_subprogs+0x413/0x540
[  249.800189][ T9274]  bpf_check+0x1c12/0x34e0
[  249.800226][ T9274]  ? ktime_get_with_offset+0x93/0x2d0
[  249.800257][ T9274]  ? ktime_get_with_offset+0x93/0x2d0
[  249.800288][ T9274]  ? __pfx_bpf_check+0x10/0x10
[  249.800315][ T9274]  ? bpf_obj_name_cpy+0x194/0x1e0
[  249.800348][ T9274]  bpf_prog_load+0x14da/0x1c60
[  249.800391][ T9274]  ? __pfx_bpf_prog_load+0x10/0x10
[  249.800432][ T9274]  ? __might_fault+0xaf/0x130
[  249.800464][ T9274]  __sys_bpf+0xd86/0xe00
[  249.800502][ T9274]  ? __pfx___sys_bpf+0x10/0x10
[  249.800537][ T9274]  ? __fget_files+0x2a/0x420
[  249.800585][ T9274]  ? ksys_write+0x242/0x270
[  249.800618][ T9274]  ? __pfx_ksys_write+0x10/0x10
[  249.800654][ T9274]  __x64_sys_bpf+0xba/0xd0
[  249.800689][ T9274]  do_syscall_64+0x166/0x520
[  249.800714][ T9274]  ? trace_irq_disable+0x3b/0x140
[  249.800745][ T9274]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.800768][ T9274]  ? clear_bhb_loop+0x70/0xc0
[  249.800796][ T9274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.800818][ T9274] RIP: 0033:0x7f74cbb9fb19
[  249.800839][ T9274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  249.800858][ T9274] RSP: 002b:00007f74cca64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  249.800882][ T9274] RAX: ffffffffffffffda RBX: 00007f74cbe25fa0 RCX: 00007f74cbb9fb19
[  249.800899][ T9274] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[  249.800914][ T9274] RBP: 00007f74cca64090 R08: 0000000000000000 R09: 0000000000000000
[  249.800928][ T9274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  249.800941][ T9274] R13: 00007f74cbe26038 R14: 00007f74cbe25fa0 R15: 00007ffc18e97328
[  249.800978][ T9274]  </TASK>
[  250.092607][ T9274] syz.0.918: vmalloc error: size 32, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  250.092699][ T9274] CPU: 0 UID: 0 PID: 9274 Comm: syz.0.918 Not tainted syzkaller #0 PREEMPT(full) 
[  250.092724][ T9274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  250.092738][ T9274] Call Trace:
[  250.092747][ T9274]  <TASK>
[  250.092755][ T9274]  dump_stack_lvl+0xe8/0x150
[  250.092797][ T9274]  warn_alloc+0x24d/0x270
[  250.092826][ T9274]  ? lockdep_hardirqs_on+0x7b/0x110
[  250.092855][ T9274]  ? __pfx_warn_alloc+0x10/0x10
[  250.092880][ T9274]  ? kfree+0x1c5/0x650
[  250.092911][ T9274]  ? __get_vm_area_node+0x219/0x2f0
[  250.092949][ T9274]  __vmalloc_node_range_noprof+0x396/0x16f0
[  250.092984][ T9274]  ? __sys_bpf+0xd81/0xe00
[  250.093003][ T9274]  ? __x64_sys_bpf+0xba/0xd0
[  250.093032][ T9274]  ? do_syscall_64+0x166/0x520
[  250.093062][ T9274]  ? kasan_save_track+0x4f/0x80
[  250.093089][ T9274]  ? kasan_save_track+0x3e/0x80
[  250.093117][ T9274]  ? __kvmalloc_node_noprof+0x50a/0x820
[  250.093149][ T9274]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.093187][ T9274]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  250.093225][ T9274]  ? bpf_prog_calc_tag+0x51/0x370
[  250.093246][ T9274]  __vmalloc_noprof+0xd2/0x120
[  250.093270][ T9274]  ? bpf_prog_calc_tag+0x51/0x370
[  250.093295][ T9274]  bpf_prog_calc_tag+0x51/0x370
[  250.093322][ T9274]  check_and_resolve_insns+0xc0/0x28e0
[  250.093349][ T9274]  ? __asan_memset+0x22/0x50
[  250.093375][ T9274]  ? add_subprog+0x40b/0x550
[  250.093402][ T9274]  ? bpf_check+0x1934/0x34e0
[  250.093426][ T9274]  ? __pfx_check_and_resolve_insns+0x10/0x10
[  250.093449][ T9274]  ? check_subprogs+0x413/0x540
[  250.093493][ T9274]  bpf_check+0x1c12/0x34e0
[  250.093529][ T9274]  ? ktime_get_with_offset+0x93/0x2d0
[  250.093560][ T9274]  ? ktime_get_with_offset+0x93/0x2d0
[  250.093591][ T9274]  ? __pfx_bpf_check+0x10/0x10
[  250.093618][ T9274]  ? bpf_obj_name_cpy+0x194/0x1e0
[  250.093651][ T9274]  bpf_prog_load+0x14da/0x1c60
[  250.093688][ T9274]  ? __pfx_bpf_prog_load+0x10/0x10
[  250.093729][ T9274]  ? __might_fault+0xaf/0x130
[  250.093765][ T9274]  __sys_bpf+0xd86/0xe00
[  250.093798][ T9274]  ? __pfx___sys_bpf+0x10/0x10
[  250.093833][ T9274]  ? __fget_files+0x2a/0x420
[  250.093881][ T9274]  ? ksys_write+0x242/0x270
[  250.093912][ T9274]  ? __pfx_ksys_write+0x10/0x10
[  250.093953][ T9274]  __x64_sys_bpf+0xba/0xd0
[  250.093989][ T9274]  do_syscall_64+0x166/0x520
[  250.094013][ T9274]  ? trace_irq_disable+0x3b/0x140
[  250.094044][ T9274]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.094068][ T9274]  ? clear_bhb_loop+0x70/0xc0
[  250.094095][ T9274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.094118][ T9274] RIP: 0033:0x7f74cbb9fb19
[  250.094139][ T9274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.094158][ T9274] RSP: 002b:00007f74cca64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  250.094181][ T9274] RAX: ffffffffffffffda RBX: 00007f74cbe25fa0 RCX: 00007f74cbb9fb19
[  250.094197][ T9274] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[  250.094212][ T9274] RBP: 00007f74cca64090 R08: 0000000000000000 R09: 0000000000000000
[  250.094226][ T9274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  250.094239][ T9274] R13: 00007f74cbe26038 R14: 00007f74cbe25fa0 R15: 00007ffc18e97328
[  250.094276][ T9274]  </TASK>
[  250.479370][ T9274] Mem-Info:
[  250.479386][ T9274] active_anon:5778 inactive_anon:0 isolated_anon:0
[  250.479386][ T9274]  active_file:0 inactive_file:43547 isolated_file:0
[  250.479386][ T9274]  unevictable:0 dirty:214 writeback:0
[  250.479386][ T9274]  slab_reclaimable:10646 slab_unreclaimable:104560
[  250.479386][ T9274]  mapped:31648 shmem:526 pagetables:1418
[  250.479386][ T9274]  sec_pagetables:0 bounce:0
[  250.479386][ T9274]  kernel_misc_reclaimable:0
[  250.479386][ T9274]  free:1316279 free_pcp:9720 free_cma:0
[  250.479456][ T9274] Node 0 active_anon:23112kB inactive_anon:0kB active_file:0kB inactive_file:173988kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126592kB dirty:852kB writeback:0kB shmem:2104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13056kB pagetables:5548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  250.479519][ T9274] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  250.479575][ T9274] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  250.479638][ T9274] lowmem_reserve[]: 0 2463 2465 2465 2465
[  250.479679][ T9274] Node 0 DMA32 free:1308392kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23112kB inactive_anon:0kB active_file:0kB inactive_file:173988kB unevictable:0kB writepending:852kB zspages:0kB present:3129332kB managed:2523116kB mlocked:0kB bounce:0kB free_pcp:38876kB local_pcp:24792kB free_cma:0kB
[  250.479746][ T9274] lowmem_reserve[]: 0 0 1 1 1
[  250.479784][ T9274] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  250.479861][ T9274] lowmem_reserve[]: 0 0 0 0 0
[  250.479899][ T9274] Node 1 Normal free:3941364kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  250.479965][ T9274] lowmem_reserve[]: 0 0 0 0 0
[  250.480004][ T9274] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  250.480131][ T9274] Node 0 DMA32: 478*4kB (UME) 858*8kB (UME) 244*16kB (UME) 563*32kB (UME) 188*64kB (UME) 34*128kB (UME) 21*256kB (UME) 9*512kB (UME) 8*1024kB (ME) 11*2048kB (UME) 298*4096kB (UM) = 1308392kB
[  250.480306][ T9274] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  250.480424][ T9274] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 7*16kB (UM) 9*32kB (UM) 3*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941364kB
[  250.480630][ T9274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  250.480649][ T9274] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  250.480667][ T9274] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  250.480685][ T9274] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  250.480703][ T9274] 44069 total pagecache pages
[  250.480711][ T9274] 0 pages in swap cache
[  250.480719][ T9274] Free swap  = 124996kB
[  250.480727][ T9274] Total swap = 124996kB
[  250.480737][ T9274] 2097051 pages RAM
[  250.480744][ T9274] 0 pages HighMem/MovableOnly
[  250.480752][ T9274] 434241 pages reserved
[  250.480760][ T9274] 0 pages cma reserved
[  251.791512][ T9235] hsr0 speed is unknown, defaulting to 1000
[  251.863176][ T9278] batman_adv: batadv0: Adding interface: syzkaller0
[  251.863196][ T9278] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  251.863229][ T9278] batman_adv: batadv0: Interface activated: syzkaller0
[  252.102538][ T9286] __nla_validate_parse: 2 callbacks suppressed
[  252.102561][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'.
[  252.129860][ T9276] batman_adv: batadv0: Interface deactivated: syzkaller0
[  252.160756][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'.
[  252.243860][ T9276] batman_adv: batadv0: Removing interface: syzkaller0
[  252.791615][ T9302] FAULT_INJECTION: forcing a failure.
[  252.791615][ T9302] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  252.791649][ T9302] CPU: 0 UID: 0 PID: 9302 Comm: syz.0.925 Not tainted syzkaller #0 PREEMPT(full) 
[  252.791674][ T9302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  252.791688][ T9302] Call Trace:
[  252.791697][ T9302]  <TASK>
[  252.791706][ T9302]  dump_stack_lvl+0xe8/0x150
[  252.791748][ T9302]  should_fail_ex+0x3eb/0x540
[  252.791782][ T9302]  _copy_to_user+0x31/0xb0
[  252.791813][ T9302]  put_user_ifreq+0x6a/0xc0
[  252.791840][ T9302]  sock_do_ioctl+0x26d/0x320
[  252.791872][ T9302]  ? __pfx_sock_do_ioctl+0x10/0x10
[  252.791920][ T9302]  sock_ioctl+0x57a/0x7e0
[  252.791947][ T9302]  ? __fget_files+0x2a/0x420
[  252.791974][ T9302]  ? __pfx_sock_ioctl+0x10/0x10
[  252.792002][ T9302]  ? __fget_files+0x2a/0x420
[  252.792028][ T9302]  ? __fget_files+0x2a/0x420
[  252.792059][ T9302]  ? bpf_lsm_file_ioctl+0x9/0x20
[  252.792092][ T9302]  ? __pfx_sock_ioctl+0x10/0x10
[  252.792119][ T9302]  __se_sys_ioctl+0xfc/0x170
[  252.792156][ T9302]  do_syscall_64+0x166/0x520
[  252.792180][ T9302]  ? trace_irq_disable+0x3b/0x140
[  252.792211][ T9302]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.792234][ T9302]  ? clear_bhb_loop+0x70/0xc0
[  252.792275][ T9302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.792299][ T9302] RIP: 0033:0x7f74cbb9fb19
[  252.792320][ T9302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.792340][ T9302] RSP: 002b:00007f74cca64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  252.792363][ T9302] RAX: ffffffffffffffda RBX: 00007f74cbe25fa0 RCX: 00007f74cbb9fb19
[  252.792380][ T9302] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000003
[  252.792394][ T9302] RBP: 00007f74cca64090 R08: 0000000000000000 R09: 0000000000000000
[  252.792408][ T9302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.792421][ T9302] R13: 00007f74cbe26038 R14: 00007f74cbe25fa0 R15: 00007ffc18e97328
[  252.792458][ T9302]  </TASK>
[  253.907107][ T9316] FAULT_INJECTION: forcing a failure.
[  253.907107][ T9316] name failslab, interval 1, probability 0, space 0, times 0
[  253.907140][ T9316] CPU: 0 UID: 0 PID: 9316 Comm: syz.0.928 Not tainted syzkaller #0 PREEMPT(full) 
[  253.907178][ T9316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  253.907192][ T9316] Call Trace:
[  253.907201][ T9316]  <TASK>
[  253.907211][ T9316]  dump_stack_lvl+0xe8/0x150
[  253.907252][ T9316]  should_fail_ex+0x3eb/0x540
[  253.907287][ T9316]  should_failslab+0xa8/0x100
[  253.907322][ T9316]  __kmalloc_noprof+0xf9/0x710
[  253.907351][ T9316]  ? kernfs_fop_write_iter+0x157/0x540
[  253.907377][ T9316]  ? kernfs_fop_write_iter+0x157/0x540
[  253.907413][ T9316]  kernfs_fop_write_iter+0x157/0x540
[  253.907448][ T9316]  vfs_write+0x612/0xba0
[  253.907488][ T9316]  ? __pfx_vfs_write+0x10/0x10
[  253.907522][ T9316]  ? __fget_files+0x3a2/0x420
[  253.907548][ T9316]  ? __fget_files+0x2a/0x420
[  253.907580][ T9316]  ? fdget+0x1ac/0x250
[  253.907615][ T9316]  ksys_write+0x150/0x270
[  253.907647][ T9316]  ? __pfx_ksys_write+0x10/0x10
[  253.907691][ T9316]  do_syscall_64+0x166/0x520
[  253.907717][ T9316]  ? trace_irq_disable+0x3b/0x140
[  253.907749][ T9316]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.907772][ T9316]  ? clear_bhb_loop+0x70/0xc0
[  253.907801][ T9316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.907823][ T9316] RIP: 0033:0x7f74cbb9fb19
[  253.907844][ T9316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  253.907864][ T9316] RSP: 002b:00007f74cca64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  253.907888][ T9316] RAX: ffffffffffffffda RBX: 00007f74cbe25fa0 RCX: 00007f74cbb9fb19
[  253.907904][ T9316] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000004
[  253.907919][ T9316] RBP: 00007f74cca64090 R08: 0000000000000000 R09: 0000000000000000
[  253.907934][ T9316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.907947][ T9316] R13: 00007f74cbe26038 R14: 00007f74cbe25fa0 R15: 00007ffc18e97328
[  253.907984][ T9316]  </TASK>
[  254.943681][ T9331] netlink: 40 bytes leftover after parsing attributes in process `syz.2.933'.
[  255.316415][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'.
[  255.352251][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'.
[  255.584316][ T9336] team0: Device vxcan3 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port
[  255.847538][ T9344] syzkaller1: entered promiscuous mode
[  255.847565][ T9344] syzkaller1: entered allmulticast mode
[  256.073345][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  256.073408][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  256.242315][ T9359] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:65532
[  256.301057][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'.
[  256.689140][ T9372] netlink: 40 bytes leftover after parsing attributes in process `syz.0.946'.
[  256.987274][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.950'.
[  257.085673][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'.
[  257.150907][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'.
[  257.208619][ T9395] block nbd17: server does not support multiple connections per device.
[  257.209248][ T9395] block nbd17: shutting down sockets
[  258.458801][ T9410] FAULT_INJECTION: forcing a failure.
[  258.458801][ T9410] name failslab, interval 1, probability 0, space 0, times 0
[  258.458839][ T9410] CPU: 1 UID: 0 PID: 9410 Comm: syz.4.956 Not tainted syzkaller #0 PREEMPT(full) 
[  258.458865][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  258.458882][ T9410] Call Trace:
[  258.458891][ T9410]  <TASK>
[  258.458900][ T9410]  dump_stack_lvl+0xe8/0x150
[  258.458942][ T9410]  should_fail_ex+0x3eb/0x540
[  258.458977][ T9410]  should_failslab+0xa8/0x100
[  258.459012][ T9410]  __kmalloc_cache_noprof+0x9e/0x600
[  258.459042][ T9410]  ? u32_init+0x198/0x710
[  258.459063][ T9410]  ? u32_init+0x198/0x710
[  258.459090][ T9410]  u32_init+0x198/0x710
[  258.459111][ T9410]  ? __raw_spin_lock_init+0x45/0x100
[  258.459137][ T9410]  tcf_proto_create+0x248/0x330
[  258.459200][ T9410]  tc_new_tfilter+0x1495/0x1900
[  258.459246][ T9410]  ? __lock_acquire+0x747/0x2de0
[  258.459283][ T9410]  ? __pfx_tc_new_tfilter+0x10/0x10
[  258.459313][ T9410]  ? __dev_queue_xmit+0x29b/0x3920
[  258.459358][ T9410]  ? lock_acquire+0x115/0x350
[  258.459402][ T9410]  ? __pfx_tc_new_tfilter+0x10/0x10
[  258.459433][ T9410]  rtnetlink_rcv_msg+0x802/0xc00
[  258.459459][ T9410]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  258.459480][ T9410]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  258.459506][ T9410]  ? __copy_skb_header+0xa3/0x4a0
[  258.459532][ T9410]  ? __asan_memcpy+0x40/0x70
[  258.459565][ T9410]  netlink_rcv_skb+0x226/0x4a0
[  258.459599][ T9410]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  258.459624][ T9410]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  258.459677][ T9410]  ? netlink_deliver_tap+0x2e/0x1b0
[  258.459714][ T9410]  ? netlink_deliver_tap+0x2e/0x1b0
[  258.459751][ T9410]  netlink_unicast+0x8ef/0xa80
[  258.459809][ T9410]  netlink_sendmsg+0x7f0/0xb20
[  258.459849][ T9410]  ? __pfx_netlink_sendmsg+0x10/0x10
[  258.459886][ T9410]  ? aa_sock_msg_perm+0x144/0x210
[  258.459914][ T9410]  ? apparmor_socket_sendmsg+0x18b/0x360
[  258.459949][ T9410]  ? __pfx_netlink_sendmsg+0x10/0x10
[  258.459982][ T9410]  sock_sendmsg_nosec+0x14e/0x190
[  258.460014][ T9410]  ____sys_sendmsg+0x54e/0x850
[  258.460045][ T9410]  ? __pfx_____sys_sendmsg+0x10/0x10
[  258.460079][ T9410]  ? import_iovec+0x73/0xa0
[  258.460112][ T9410]  ___sys_sendmsg+0x2a5/0x360
[  258.460134][ T9410]  ? __lock_acquire+0x747/0x2de0
[  258.460168][ T9410]  ? __pfx____sys_sendmsg+0x10/0x10
[  258.460236][ T9410]  ? __fget_files+0x3a2/0x420
[  258.460262][ T9410]  ? __fget_files+0x2a/0x420
[  258.460299][ T9410]  __x64_sys_sendmsg+0x1b1/0x290
[  258.460326][ T9410]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  258.460376][ T9410]  do_syscall_64+0x166/0x520
[  258.460402][ T9410]  ? trace_irq_disable+0x3b/0x140
[  258.460431][ T9410]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.460454][ T9410]  ? clear_bhb_loop+0x70/0xc0
[  258.460481][ T9410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.460503][ T9410] RIP: 0033:0x7f7e8579fb19
[  258.460524][ T9410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.460544][ T9410] RSP: 002b:00007f7e86589028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  258.460568][ T9410] RAX: ffffffffffffffda RBX: 00007f7e85a26090 RCX: 00007f7e8579fb19
[  258.460586][ T9410] RDX: 0000000020000000 RSI: 00002000000008c0 RDI: 0000000000000009
[  258.460601][ T9410] RBP: 00007f7e86589090 R08: 0000000000000000 R09: 0000000000000000
[  258.460615][ T9410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  258.460628][ T9410] R13: 00007f7e85a26128 R14: 00007f7e85a26090 R15: 00007ffc87500008
[  258.460664][ T9410]  </TASK>
[  258.870757][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'.
[  258.870793][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'.
[  259.084362][ T9420] netlink: 96 bytes leftover after parsing attributes in process `syz.2.961'.
[  259.303765][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'.
[  262.218869][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'.
[  262.281282][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'.
[  262.598432][ T9462] netlink: 64 bytes leftover after parsing attributes in process `syz.1.971'.
[  265.571499][ T9473] netlink: 'syz.0.973': attribute type 3 has an invalid length.
[  265.571524][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'.
[  265.572434][ T9473] netlink: 'syz.0.973': attribute type 21 has an invalid length.
[  265.572453][ T9473] netlink: 128 bytes leftover after parsing attributes in process `syz.0.973'.
[  265.572532][ T9473] netlink: 'syz.0.973': attribute type 5 has an invalid length.
[  265.572547][ T9473] netlink: 3 bytes leftover after parsing attributes in process `syz.0.973'.
[  268.898966][ T9489] FAULT_INJECTION: forcing a failure.
[  268.898966][ T9489] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  268.899002][ T9489] CPU: 0 UID: 0 PID: 9489 Comm: syz.1.979 Not tainted syzkaller #0 PREEMPT(full) 
[  268.899027][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  268.899041][ T9489] Call Trace:
[  268.899050][ T9489]  <TASK>
[  268.899060][ T9489]  dump_stack_lvl+0xe8/0x150
[  268.899101][ T9489]  should_fail_ex+0x3eb/0x540
[  268.899134][ T9489]  _copy_from_user+0x2d/0xb0
[  268.899163][ T9489]  ___sys_sendmsg+0x1c6/0x360
[  268.899185][ T9489]  ? __lock_acquire+0x747/0x2de0
[  268.899219][ T9489]  ? __pfx____sys_sendmsg+0x10/0x10
[  268.899291][ T9489]  ? __fget_files+0x3a2/0x420
[  268.899316][ T9489]  ? __fget_files+0x2a/0x420
[  268.899350][ T9489]  __x64_sys_sendmsg+0x1b1/0x290
[  268.899379][ T9489]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  268.899423][ T9489]  do_syscall_64+0x166/0x520
[  268.899447][ T9489]  ? trace_irq_disable+0x3b/0x140
[  268.899479][ T9489]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.899502][ T9489]  ? clear_bhb_loop+0x70/0xc0
[  268.899530][ T9489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.899550][ T9489] RIP: 0033:0x7f7e4a99fb19
[  268.899567][ T9489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  268.899583][ T9489] RSP: 002b:00007f7e4b86c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  268.899603][ T9489] RAX: ffffffffffffffda RBX: 00007f7e4ac25fa0 RCX: 00007f7e4a99fb19
[  268.899616][ T9489] RDX: 0000000000000010 RSI: 0000200000000580 RDI: 0000000000000003
[  268.899628][ T9489] RBP: 00007f7e4b86c090 R08: 0000000000000000 R09: 0000000000000000
[  268.899639][ T9489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  268.899651][ T9489] R13: 00007f7e4ac26038 R14: 00007f7e4ac25fa0 R15: 00007ffee6370348
[  268.899682][ T9489]  </TASK>
[  269.131983][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'.
[  269.161913][ T9494] erspan0: entered promiscuous mode
[  269.309655][   T62] IPVS: starting estimator thread 0...
[  269.394679][ T9504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.985'.
[  269.406209][ T9500] IPVS: using max 26 ests per chain, 62400 per kthread
[  269.514212][ T9510] netlink: 'syz.4.987': attribute type 3 has an invalid length.
[  269.514247][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.987'.
[  269.514268][ T9510] netlink: 'syz.4.987': attribute type 3 has an invalid length.
[  269.514369][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.987'.
[  269.573932][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'.
[  269.591496][ T9505] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  269.660732][ T9508] syzkaller0: entered promiscuous mode
[  269.660760][ T9508] syzkaller0: entered allmulticast mode
[  269.661412][ T9508] tipc: Resetting bearer <eth:syzkaller0>
[  269.898910][ T9515] netlink: 'syz.0.988': attribute type 21 has an invalid length.
[  269.898937][ T9515] netlink: 128 bytes leftover after parsing attributes in process `syz.0.988'.
[  270.051007][ T9518] netlink: 88 bytes leftover after parsing attributes in process `syz.0.988'.
[  272.278338][ T9508] tipc: Resetting bearer <eth:syzkaller0>
[  272.513160][ T9524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.989'.
[  272.593822][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'.
[  272.716160][ T9530] netlink: 64 bytes leftover after parsing attributes in process `syz.4.991'.
[  274.407732][ T9508] tipc: Disabling bearer <eth:syzkaller0>
[  274.422677][ T9515] netlink: 'syz.0.988': attribute type 4 has an invalid length.
[  274.422700][ T9515] netlink: 'syz.0.988': attribute type 3 has an invalid length.
[  274.422715][ T9515] netlink: 3 bytes leftover after parsing attributes in process `syz.0.988'.
[  274.438311][ T9519] pimreg: entered allmulticast mode
[  274.451145][ T9524] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  274.530449][ T9531] netlink: 324 bytes leftover after parsing attributes in process `syz.2.990'.
[  274.544336][ T9529] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  274.788957][ T9549] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  274.818986][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.996'.
[  274.922499][ T9557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.935728][ T9557] netlink: 'syz.2.998': attribute type 11 has an invalid length.
[  275.129878][ T9565] netlink: 'syz.4.1001': attribute type 10 has an invalid length.
[  275.129901][ T9565] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1001'.
[  275.211270][ T9567] syzkaller0: entered promiscuous mode
[  275.211307][ T9567] syzkaller0: entered allmulticast mode
[  275.582434][ T9586] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1007'.
[  277.415096][ T9577] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  277.523225][ T9605] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1009'.
[  277.648808][ T9610] bridge: RTM_NEWNEIGH with invalid ether address
[  277.653903][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'.
[  277.831337][ T9621] FAULT_INJECTION: forcing a failure.
[  277.831337][ T9621] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  277.831371][ T9621] CPU: 0 UID: 0 PID: 9621 Comm: syz.2.1018 Not tainted syzkaller #0 PREEMPT(full) 
[  277.831396][ T9621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  277.831411][ T9621] Call Trace:
[  277.831419][ T9621]  <TASK>
[  277.831429][ T9621]  dump_stack_lvl+0xe8/0x150
[  277.831471][ T9621]  should_fail_ex+0x3eb/0x540
[  277.831503][ T9621]  _copy_from_user+0x2d/0xb0
[  277.831535][ T9621]  generic_map_update_batch+0x6b1/0xad0
[  277.831580][ T9621]  ? __pfx_generic_map_update_batch+0x10/0x10
[  277.831608][ T9621]  ? __fget_files+0x3a2/0x420
[  277.831633][ T9621]  ? __fget_files+0x2a/0x420
[  277.831665][ T9621]  ? fdget+0x1ac/0x250
[  277.831692][ T9621]  ? __pfx_generic_map_update_batch+0x10/0x10
[  277.831722][ T9621]  bpf_map_do_batch+0x391/0x630
[  277.831753][ T9621]  __sys_bpf+0x977/0xe00
[  277.831784][ T9621]  ? __pfx___sys_bpf+0x10/0x10
[  277.831819][ T9621]  ? __fget_files+0x2a/0x420
[  277.831866][ T9621]  ? ksys_write+0x242/0x270
[  277.831900][ T9621]  ? __pfx_ksys_write+0x10/0x10
[  277.831936][ T9621]  __x64_sys_bpf+0xba/0xd0
[  277.831971][ T9621]  do_syscall_64+0x166/0x520
[  277.831997][ T9621]  ? trace_irq_disable+0x3b/0x140
[  277.832036][ T9621]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.832059][ T9621]  ? clear_bhb_loop+0x70/0xc0
[  277.832087][ T9621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.832109][ T9621] RIP: 0033:0x7f00f819fb19
[  277.832130][ T9621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  277.832150][ T9621] RSP: 002b:00007f00f90af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  277.832174][ T9621] RAX: ffffffffffffffda RBX: 00007f00f8425fa0 RCX: 00007f00f819fb19
[  277.832191][ T9621] RDX: 0000000000000038 RSI: 0000200000000080 RDI: 000000000000001a
[  277.832206][ T9621] RBP: 00007f00f90af090 R08: 0000000000000000 R09: 0000000000000000
[  277.832220][ T9621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  277.832234][ T9621] R13: 00007f00f8426038 R14: 00007f00f8425fa0 R15: 00007ffd46bfdfe8
[  277.832270][ T9621]  </TASK>
[  278.250131][ T9636] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1022'.
[  278.265779][ T9636] syzkaller1: entered promiscuous mode
[  278.265804][ T9636] syzkaller1: entered allmulticast mode
[  278.359325][ T9640] netlink: 'syz.4.1024': attribute type 4 has an invalid length.
[  278.359349][ T9640] netlink: 3581 bytes leftover after parsing attributes in process `syz.4.1024'.
[  278.549841][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'.
[  279.504053][ T9685] __nla_validate_parse: 2 callbacks suppressed
[  279.504077][ T9685] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1041'.
[  279.532723][ T9685] syzkaller1: entered promiscuous mode
[  279.532748][ T9685] syzkaller1: entered allmulticast mode
[  279.808664][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'.
[  279.866906][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'.
[  280.090936][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1047'.
[  282.719305][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'.
[  285.801078][ T9703] IPv6: sit1: Disabled Multicast RS
[  285.922617][ T9717] NFSD: Failed to start, no listeners configured.
[  286.581824][ T9732] batman_adv: batadv0: Adding interface: syzkaller0
[  286.581845][ T9732] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.581980][ T9732] batman_adv: batadv0: Interface activated: syzkaller0
[  286.635926][ T9732] batman_adv: batadv0: Interface deactivated: syzkaller0
[  286.720306][ T9732] batman_adv: batadv0: Removing interface: syzkaller0
[  287.215848][ T9749] batadv_slave_1: entered promiscuous mode
[  287.220485][ T9747] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1063'.
[  287.263132][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1060'.
[  287.290804][ T9747] syzkaller1: entered promiscuous mode
[  287.290831][ T9747] syzkaller1: entered allmulticast mode
[  287.331164][ T9748] batadv_slave_1: left promiscuous mode
[  287.509420][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'.
[  287.560668][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'.
[  288.044174][ T9777] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1072'.
[  288.079104][ T9777] syzkaller1: entered promiscuous mode
[  288.079138][ T9777] syzkaller1: entered allmulticast mode
[  288.083558][ T9779] netlink: 'syz.0.1073': attribute type 12 has an invalid length.
[  288.083581][ T9779] netlink: 'syz.0.1073': attribute type 29 has an invalid length.
[  288.083596][ T9779] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1073'.
[  288.083616][ T9779] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1073'.
[  288.160886][ T9781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1074'.
[  288.212090][ T9776] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1071'.
[  288.212119][ T9776] nbd: must specify a size in bytes for the device
[  288.353044][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'.
[  288.449489][ T9790] netlink: 'syz.2.1077': attribute type 1 has an invalid length.
[  291.788253][ T9826] batman_adv: batadv0: Adding interface: syzkaller0
[  291.788304][ T9826] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  291.788350][ T9826] batman_adv: batadv0: Interface activated: syzkaller0
[  292.368440][ T9835] __nla_validate_parse: 4 callbacks suppressed
[  292.368463][ T9835] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1090'.
[  292.388413][ T9835] syzkaller1: entered promiscuous mode
[  292.388486][ T9835] syzkaller1: entered allmulticast mode
[  292.482361][ T9825] batman_adv: batadv0: Interface deactivated: syzkaller0
[  292.579632][ T9825] batman_adv: batadv0: Removing interface: syzkaller0
[  292.753502][ T9837] bond0: Device is already in use.
[  292.896601][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'.
[  292.896638][ T9842] netlink: 'syz.1.1095': attribute type 5 has an invalid length.
[  292.896655][ T9842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1095'.
[  292.939843][ T9842] geneve2: entered promiscuous mode
[  292.939871][ T9842] geneve2: entered allmulticast mode
[  292.957867][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'.
[  292.966958][   T62] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  292.973680][  T149] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  292.973883][  T149] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  292.973983][  T149] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  293.016836][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'.
[  293.176501][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1096'.
[  293.203807][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1096'.
[  293.229547][ T9856] ip_tables: iptables: counters copy to user failed while replacing table
[  293.332069][ T9861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1097'.
[  293.352463][ T9859] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1101'.
[  293.383419][ T9865] FAULT_INJECTION: forcing a failure.
[  293.383419][ T9865] name failslab, interval 1, probability 0, space 0, times 0
[  293.383452][ T9865] CPU: 1 UID: 0 PID: 9865 Comm: syz.1.1102 Not tainted syzkaller #0 PREEMPT(full) 
[  293.383476][ T9865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  293.383489][ T9865] Call Trace:
[  293.383497][ T9865]  <TASK>
[  293.383507][ T9865]  dump_stack_lvl+0xe8/0x150
[  293.383548][ T9865]  should_fail_ex+0x3eb/0x540
[  293.383580][ T9865]  should_failslab+0xa8/0x100
[  293.383615][ T9865]  __kmalloc_noprof+0xf9/0x710
[  293.383643][ T9865]  ? tomoyo_encode+0x2ad/0x570
[  293.383665][ T9865]  ? tomoyo_encode+0x2ad/0x570
[  293.383694][ T9865]  tomoyo_encode+0x2ad/0x570
[  293.383724][ T9865]  tomoyo_realpath_from_path+0x5fa/0x640
[  293.383761][ T9865]  ? tomoyo_path_number_perm+0x219/0x5f0
[  293.383793][ T9865]  tomoyo_path_number_perm+0x246/0x5f0
[  293.383829][ T9865]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  293.383859][ T9865]  ? __lock_acquire+0x747/0x2de0
[  293.383932][ T9865]  ? __fget_files+0x2a/0x420
[  293.383962][ T9865]  ? __fget_files+0x2a/0x420
[  293.383989][ T9865]  ? __fget_files+0x2a/0x420
[  293.384021][ T9865]  security_file_ioctl+0xc3/0x2a0
[  293.384054][ T9865]  __se_sys_ioctl+0x47/0x170
[  293.384090][ T9865]  do_syscall_64+0x166/0x520
[  293.384116][ T9865]  ? trace_irq_disable+0x3b/0x140
[  293.384147][ T9865]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.384170][ T9865]  ? clear_bhb_loop+0x70/0xc0
[  293.384203][ T9865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.384234][ T9865] RIP: 0033:0x7f7e4a99fb19
[  293.384255][ T9865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  293.384273][ T9865] RSP: 002b:00007f7e4b86c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  293.384296][ T9865] RAX: ffffffffffffffda RBX: 00007f7e4ac25fa0 RCX: 00007f7e4a99fb19
[  293.384313][ T9865] RDX: 00002000000000c0 RSI: 0000000000008924 RDI: 0000000000000004
[  293.384328][ T9865] RBP: 00007f7e4b86c090 R08: 0000000000000000 R09: 0000000000000000
[  293.384341][ T9865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.384354][ T9865] R13: 00007f7e4ac26038 R14: 00007f7e4ac25fa0 R15: 00007ffee6370348
[  293.384389][ T9865]  </TASK>
[  293.398351][ T9865] ERROR: Out of memory at tomoyo_realpath_from_path.
[  293.530108][ T9862] veth10: entered allmulticast mode
[  293.661934][ T9866] syzkaller1: entered promiscuous mode
[  293.661953][ T9866] syzkaller1: entered allmulticast mode
[  293.967207][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1105'.
[  294.673991][ T9909] syzkaller1: entered promiscuous mode
[  294.674017][ T9909] syzkaller1: entered allmulticast mode
[  294.927714][ T9918] batman_adv: batadv0: Adding interface: syzkaller0
[  294.927735][ T9918] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  294.927766][ T9918] batman_adv: batadv0: Interface activated: syzkaller0
[  295.222417][ T9924] smc: removing ib device rxe0
[  295.497856][ T9917] batman_adv: batadv0: Interface deactivated: syzkaller0
[  295.595271][ T9917] batman_adv: batadv0: Removing interface: syzkaller0
[  295.619415][ T9924] smbdirect: ib_dev[rxe0] removed
[  295.792812][ T9941] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  296.002279][ T9947] netlink: 'syz.1.1129': attribute type 4 has an invalid length.
[  296.735820][ T9956] syzkaller1: entered promiscuous mode
[  296.735878][ T9956] syzkaller1: entered allmulticast mode
[  297.980818][ T9973] __nla_validate_parse: 15 callbacks suppressed
[  297.980842][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'.
[  298.080301][ T9972] ip6gretap1: entered allmulticast mode
[  298.101720][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'.
[  298.442392][ T9972] batman_adv: batadv0: Adding interface: ip6gretap1
[  298.442415][ T9972] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  298.442450][ T9972] batman_adv: batadv0: Interface activated: ip6gretap1
[  298.775498][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1139'.
[  317.514461][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  317.518111][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  341.538401][ T9997] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1142'.
[  341.789130][T10005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1143'.
[  342.415550][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1149'.
[  342.452709][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1149'.
[  342.673934][T10034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.894534][   T30] audit: type=1800 audit(1793945587.252:4): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1153" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1123 res=0 errno=-22
[  342.965799][T10031] syzkaller0: entered promiscuous mode
[  342.966324][T10031] syzkaller0: entered allmulticast mode
[  342.967970][T10031] tipc: Resetting bearer <eth:syzkaller0>
[  343.084111][T10039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1154'.
[  343.084150][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'.
[  343.113691][T10028] tipc: Resetting bearer <eth:syzkaller0>
[  343.496406][T10047] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1156'.
[  344.020372][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'.
[  344.101136][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'.
[  348.720336][T10028] tipc: Disabling bearer <eth:syzkaller0>
[  348.802852][T10048] syzkaller1: entered promiscuous mode
[  348.818417][T10048] syzkaller1: entered allmulticast mode
[  348.847908][T10068] block nbd17: Unsupported socket: should be TCP or UNIX.
[  349.672220][T10077] netlink: 'syz.1.1163': attribute type 10 has an invalid length.
[  349.672247][T10077] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1163'.
[  349.817360][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'.
[  350.072814][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1166'.
[  350.072864][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'.
[  351.392094][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'.
[  352.799275][T10101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1171'.
[  352.905874][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'.
[  352.978831][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'.
[  353.292481][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'.
[  353.348603][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  353.522907][T10123] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0
[  354.290440][T10135] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1183'.
[  354.438933][T10137] syzkaller1: entered promiscuous mode
[  354.438971][T10137] syzkaller1: entered allmulticast mode
[  354.767507][T10142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1182'.
[  354.767556][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'.
[  355.522981][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'.
[  358.386078][T10165] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1190'.
[  358.386117][T10165] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  358.750584][T10169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1192'.
[  358.750613][T10169] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1192'.
[  358.750648][T10169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1192'.
[  358.751670][T10169] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1192'.
[  358.884940][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'.
[  358.928246][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'.
[  360.341984][T10205] __nla_validate_parse: 2 callbacks suppressed
[  360.342009][T10205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1204'.
[  360.782990][T10211] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1206'.
[  360.842534][T10211] syzkaller1: entered promiscuous mode
[  360.842564][T10211] syzkaller1: entered allmulticast mode
[  363.320618][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'.
[  363.499678][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'.
[  364.011272][T10238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1213'.
[  364.011311][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'.
[  364.647132][T10255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1219'.
[  365.550872][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1224'.
[  365.634054][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1224'.
[  365.712558][T10272] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1226'.
[  365.755104][T10272] syzkaller1: entered promiscuous mode
[  365.755131][T10272] syzkaller1: entered allmulticast mode
[  368.932123][T10297] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1232'.
[  368.932154][T10297] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1232'.
[  368.932172][T10297] netlink: 'syz.0.1232': attribute type 5 has an invalid length.
[  368.932186][T10297] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1232'.
[  368.985408][T10298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1230'.
[  368.985449][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'.
[  369.236400][T10304] sch_fq: defrate 4294967293 ignored.
[  369.324184][T10312] sch_fq: defrate 4294967293 ignored.
[  370.246711][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1242'.
[  370.251150][T10331] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.291171][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1242'.
[  370.660545][T10343] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1244'.
[  374.251738][T10362] netlink: 'syz.0.1250': attribute type 29 has an invalid length.
[  374.251765][T10362] netlink: 'syz.0.1250': attribute type 10 has an invalid length.
[  375.096599][T10382] netlink: 'syz.0.1257': attribute type 3 has an invalid length.
[  375.096626][T10382] netlink: 'syz.0.1257': attribute type 1 has an invalid length.
[  375.096641][T10382] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1257'.
[  375.152881][T10384] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  375.466116][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'.
[  375.568544][T10391] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1260'.
[  375.663682][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'.
[  375.722150][T10395] syzkaller1: entered promiscuous mode
[  375.722178][T10395] syzkaller1: entered allmulticast mode
[  375.912463][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1261'.
[  377.178804][T10427] x_tables: duplicate underflow at hook 2
[  378.770074][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'.
[  378.950987][    C0] ip6_tunnel: L xmit: Local address not yet configured!
[  378.954118][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  378.954182][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  380.323952][T10471] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1282'.
[  381.768083][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1284'.
[  381.901540][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1284'.
[  384.087918][T10498] netlink: 'syz.3.1288': attribute type 12 has an invalid length.
[  384.087945][T10498] netlink: 'syz.3.1288': attribute type 29 has an invalid length.
[  384.087960][T10498] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1288'.
[  384.087979][T10498] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1288'.
[  384.768000][T10513] FAULT_INJECTION: forcing a failure.
[  384.768000][T10513] name failslab, interval 1, probability 0, space 0, times 0
[  384.768039][T10513] CPU: 1 UID: 0 PID: 10513 Comm: syz.4.1293 Not tainted syzkaller #0 PREEMPT(full) 
[  384.768064][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  384.768092][T10513] Call Trace:
[  384.768101][T10513]  <TASK>
[  384.768111][T10513]  dump_stack_lvl+0xe8/0x150
[  384.768153][T10513]  should_fail_ex+0x3eb/0x540
[  384.768187][T10513]  should_failslab+0xa8/0x100
[  384.768248][T10513]  __kmalloc_cache_noprof+0x9e/0x600
[  384.768277][T10513]  ? bpf_copy_verifier_state+0xc39/0x1300
[  384.768307][T10513]  ? bpf_copy_verifier_state+0xc39/0x1300
[  384.768346][T10513]  bpf_copy_verifier_state+0xc39/0x1300
[  384.768389][T10513]  push_stack+0x1b9/0x380
[  384.768427][T10513]  do_check_insn+0x6684/0xb800
[  384.768477][T10513]  ? __pfx_do_check_insn+0x10/0x10
[  384.768512][T10513]  ? cnum32_from_urange+0xf/0x30
[  384.768559][T10513]  do_check_common+0x557a/0x7590
[  384.768646][T10513]  ? __pfx_do_check_common+0x10/0x10
[  384.768688][T10513]  ? mark_fastcall_patterns+0x10e1/0x1140
[  384.768741][T10513]  do_check_main+0x95/0x1f0
[  384.768776][T10513]  bpf_check+0x302b/0x34e0
[  384.768812][T10513]  ? ktime_get_with_offset+0x93/0x2d0
[  384.768842][T10513]  ? ktime_get_with_offset+0x93/0x2d0
[  384.768874][T10513]  ? __pfx_bpf_check+0x10/0x10
[  384.768901][T10513]  ? bpf_obj_name_cpy+0x194/0x1e0
[  384.768933][T10513]  bpf_prog_load+0x14da/0x1c60
[  384.768968][T10513]  ? __pfx_bpf_prog_load+0x10/0x10
[  384.769007][T10513]  ? __might_fault+0xaf/0x130
[  384.769038][T10513]  __sys_bpf+0xd86/0xe00
[  384.769069][T10513]  ? __pfx___sys_bpf+0x10/0x10
[  384.769103][T10513]  ? __fget_files+0x2a/0x420
[  384.769151][T10513]  ? ksys_write+0x242/0x270
[  384.769184][T10513]  ? __pfx_ksys_write+0x10/0x10
[  384.769220][T10513]  __x64_sys_bpf+0xba/0xd0
[  384.769256][T10513]  do_syscall_64+0x166/0x520
[  384.769282][T10513]  ? trace_irq_disable+0x3b/0x140
[  384.769313][T10513]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.769337][T10513]  ? clear_bhb_loop+0x70/0xc0
[  384.769366][T10513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.769389][T10513] RIP: 0033:0x7f7e8579fb19
[  384.769412][T10513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  384.769433][T10513] RSP: 002b:00007f7e865aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  384.769458][T10513] RAX: ffffffffffffffda RBX: 00007f7e85a25fa0 RCX: 00007f7e8579fb19
[  384.769475][T10513] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005
[  384.769489][T10513] RBP: 00007f7e865aa090 R08: 0000000000000000 R09: 0000000000000000
[  384.769504][T10513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  384.769517][T10513] R13: 00007f7e85a26038 R14: 00007f7e85a25fa0 R15: 00007ffc87500008
[  384.769553][T10513]  </TASK>
[  385.864998][T10526] FAULT_INJECTION: forcing a failure.
[  385.864998][T10526] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  385.865093][T10526] CPU: 1 UID: 0 PID: 10526 Comm: syz.4.1300 Not tainted syzkaller #0 PREEMPT(full) 
[  385.865125][T10526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  385.865140][T10526] Call Trace:
[  385.865148][T10526]  <TASK>
[  385.865164][T10526]  dump_stack_lvl+0xe8/0x150
[  385.865206][T10526]  should_fail_ex+0x3eb/0x540
[  385.865245][T10526]  _copy_from_user+0x2d/0xb0
[  385.865275][T10526]  sock_do_ioctl+0x195/0x320
[  385.865309][T10526]  ? __pfx_sock_do_ioctl+0x10/0x10
[  385.865357][T10526]  sock_ioctl+0x57a/0x7e0
[  385.865386][T10526]  ? __fget_files+0x2a/0x420
[  385.865413][T10526]  ? __pfx_sock_ioctl+0x10/0x10
[  385.865440][T10526]  ? __fget_files+0x2a/0x420
[  385.865468][T10526]  ? __fget_files+0x2a/0x420
[  385.865503][T10526]  ? bpf_lsm_file_ioctl+0x9/0x20
[  385.865536][T10526]  ? __pfx_sock_ioctl+0x10/0x10
[  385.865563][T10526]  __se_sys_ioctl+0xfc/0x170
[  385.865600][T10526]  do_syscall_64+0x166/0x520
[  385.865625][T10526]  ? trace_irq_disable+0x3b/0x140
[  385.865657][T10526]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.865680][T10526]  ? clear_bhb_loop+0x70/0xc0
[  385.865708][T10526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.865752][T10526] RIP: 0033:0x7f7e8579fb19
[  385.865774][T10526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  385.865794][T10526] RSP: 002b:00007f7e865aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  385.865818][T10526] RAX: ffffffffffffffda RBX: 00007f7e85a25fa0 RCX: 00007f7e8579fb19
[  385.865835][T10526] RDX: 00002000000000c0 RSI: 0000000000008924 RDI: 0000000000000004
[  385.865850][T10526] RBP: 00007f7e865aa090 R08: 0000000000000000 R09: 0000000000000000
[  385.865864][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  385.865877][T10526] R13: 00007f7e85a26038 R14: 00007f7e85a25fa0 R15: 00007ffc87500008
[  385.865914][T10526]  </TASK>
[  386.177720][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'.
[  386.405348][T10534] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1301'.
[  386.473910][T10534] syzkaller1: entered promiscuous mode
[  386.473936][T10534] syzkaller1: entered allmulticast mode
[  387.264048][T10558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1308'.
[  387.382915][T10558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1308'.
[  387.454038][T10561] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  388.001615][T10574] batman_adv: batadv0: Adding interface: syzkaller0
[  388.001635][T10574] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  388.001670][T10574] batman_adv: batadv0: Interface activated: syzkaller0
[  389.819340][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'.
[  389.885410][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'.
[  390.065339][T10601] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  391.158410][T10574] batman_adv: batadv0: Interface deactivated: syzkaller0
[  391.240196][T10574] batman_adv: batadv0: Removing interface: syzkaller0
[  391.307156][T10608] netlink: 'syz.2.1318': attribute type 1 has an invalid length.
[  391.819213][T10624] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1321'.
[  392.021588][T10608] 8021q: adding VLAN 0 to HW filter on device bond2
[  392.170263][T10611] bond2: (slave gretap1): making interface the new active one
[  392.190262][T10611] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  392.481639][T10615] syzkaller0: entered promiscuous mode
[  392.481667][T10615] syzkaller0: entered allmulticast mode
[  392.537285][T10625] syzkaller1: entered promiscuous mode
[  392.537313][T10625] syzkaller1: entered allmulticast mode
[  392.933453][T10646] FAULT_INJECTION: forcing a failure.
[  392.933453][T10646] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  392.933488][T10646] CPU: 1 UID: 0 PID: 10646 Comm: syz.4.1324 Not tainted syzkaller #0 PREEMPT(full) 
[  392.933513][T10646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  392.933527][T10646] Call Trace:
[  392.933536][T10646]  <TASK>
[  392.933546][T10646]  dump_stack_lvl+0xe8/0x150
[  392.933599][T10646]  should_fail_ex+0x3eb/0x540
[  392.933633][T10646]  _copy_from_iter+0x1d3/0x1680
[  392.933672][T10646]  ? __pfx__copy_from_iter+0x10/0x10
[  392.933705][T10646]  ? aa_file_perm+0x18b/0x15f0
[  392.933735][T10646]  ? skb_put+0x112/0x210
[  392.933761][T10646]  hci_sock_sendmsg+0x426/0xfd0
[  392.933796][T10646]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  392.933828][T10646]  ? apparmor_socket_sendmsg+0x98/0x360
[  392.933858][T10646]  ? lock_acquire+0x115/0x350
[  392.933888][T10646]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  392.933912][T10646]  sock_sendmsg_nosec+0x14e/0x190
[  392.933945][T10646]  sock_write_iter+0x2de/0x3e0
[  392.933977][T10646]  ? __pfx_sock_write_iter+0x10/0x10
[  392.934014][T10646]  ? bpf_lsm_file_permission+0x9/0x20
[  392.934045][T10646]  ? security_file_permission+0x75/0x260
[  392.934084][T10646]  vfs_write+0x612/0xba0
[  392.934130][T10646]  ? __pfx_vfs_write+0x10/0x10
[  392.934164][T10646]  ? __fget_files+0x3a2/0x420
[  392.934190][T10646]  ? __fget_files+0x2a/0x420
[  392.934218][T10646]  ? fdget+0x1ac/0x250
[  392.934252][T10646]  ksys_write+0x150/0x270
[  392.934283][T10646]  ? __pfx_ksys_write+0x10/0x10
[  392.934325][T10646]  do_syscall_64+0x166/0x520
[  392.934350][T10646]  ? trace_irq_disable+0x3b/0x140
[  392.934380][T10646]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.934401][T10646]  ? clear_bhb_loop+0x70/0xc0
[  392.934427][T10646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.934449][T10646] RIP: 0033:0x7f7e8579fb19
[  392.934470][T10646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  392.934489][T10646] RSP: 002b:00007f7e865aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  392.934512][T10646] RAX: ffffffffffffffda RBX: 00007f7e85a25fa0 RCX: 00007f7e8579fb19
[  392.934529][T10646] RDX: 0000000000000007 RSI: 0000200000000700 RDI: 0000000000000004
[  392.934542][T10646] RBP: 00007f7e865aa090 R08: 0000000000000000 R09: 0000000000000000
[  392.934556][T10646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  392.934569][T10646] R13: 00007f7e85a26038 R14: 00007f7e85a25fa0 R15: 00007ffc87500008
[  392.934614][T10646]  </TASK>
[  398.643853][T10641] netlink: 'syz.1.1322': attribute type 29 has an invalid length.
[  398.643882][T10641] netlink: 'syz.1.1322': attribute type 31 has an invalid length.
[  398.643898][T10641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1322'.
[  399.652767][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1330'.
[  403.102765][T10673] bond3: entered allmulticast mode
[  403.110557][T10673] 8021q: adding VLAN 0 to HW filter on device bond3
[  403.227990][T10680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1335'.
[  405.033909][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1343'.
[  405.033946][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'.
[  408.675200][T10721] nbd0: detected capacity change from 0 to 2
[  408.787930][ T1182] block nbd0: Dead connection, failed to find a fallback
[  409.399871][T10732] FAULT_INJECTION: forcing a failure.
[  409.399871][T10732] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  409.399904][T10732] CPU: 0 UID: 0 PID: 10732 Comm: syz.0.1354 Not tainted syzkaller #0 PREEMPT(full) 
[  409.399929][T10732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  409.399943][T10732] Call Trace:
[  409.399952][T10732]  <TASK>
[  409.399962][T10732]  dump_stack_lvl+0xe8/0x150
[  409.400004][T10732]  should_fail_ex+0x3eb/0x540
[  409.400039][T10732]  _copy_to_user+0x31/0xb0
[  409.400070][T10732]  simple_read_from_buffer+0xe1/0x170
[  409.400105][T10732]  proc_fail_nth_read+0x1bb/0x230
[  409.400145][T10732]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  409.400196][T10732]  ? rw_verify_area+0x24a/0x4c0
[  409.400226][T10732]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  409.400262][T10732]  vfs_read+0x213/0xa80
[  409.400297][T10732]  ? __pfx___mutex_lock+0x10/0x10
[  409.400326][T10732]  ? __pfx_vfs_read+0x10/0x10
[  409.400358][T10732]  ? __fget_files+0x2a/0x420
[  409.400383][T10732]  ? __fget_files+0x3a2/0x420
[  409.400410][T10732]  ? __fget_files+0x2a/0x420
[  409.400442][T10732]  ? fdget+0x1ac/0x250
[  409.400478][T10732]  ksys_read+0x150/0x270
[  409.400511][T10732]  ? __pfx_ksys_read+0x10/0x10
[  409.400555][T10732]  do_syscall_64+0x166/0x520
[  409.400580][T10732]  ? trace_irq_disable+0x3b/0x140
[  409.400611][T10732]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.400634][T10732]  ? clear_bhb_loop+0x70/0xc0
[  409.400663][T10732]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.400686][T10732] RIP: 0033:0x7f74cbb6034e
[  409.400708][T10732] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  409.400727][T10732] RSP: 002b:00007f74cca63fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  409.400752][T10732] RAX: ffffffffffffffda RBX: 00007f74cca646c0 RCX: 00007f74cbb6034e
[  409.400769][T10732] RDX: 000000000000000f RSI: 00007f74cca640a0 RDI: 0000000000000004
[  409.400782][T10732] RBP: 00007f74cca64090 R08: 0000000000000000 R09: 0000000000000000
[  409.400797][T10732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  409.400810][T10732] R13: 00007f74cbe26038 R14: 00007f74cbe25fa0 R15: 00007ffc18e97328
[  409.400848][T10732]  </TASK>
[  410.035281][T10742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1358'.
[  410.035320][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1358'.
[  410.541259][T10745] syzkaller1: entered promiscuous mode
[  410.541286][T10745] syzkaller1: entered allmulticast mode
[  410.573787][T10748] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1360'.
[  410.604172][T10748] syzkaller1: entered promiscuous mode
[  410.604200][T10748] syzkaller1: entered allmulticast mode
[  411.155275][T10758] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  411.285193][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1363'.
[  411.376089][T10760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1363'.
[  411.405731][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'.
[  411.854888][T10770] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1366'.
[  411.899772][T10770] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1366'.
[  412.093102][T10784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1369'.
[  412.093140][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1369'.
[  412.231313][T10787] xt_hashlimit: size too large, truncated to 1048576
[  412.923395][T10797] syzkaller1: entered promiscuous mode
[  412.923421][T10797] syzkaller1: entered allmulticast mode
[  413.958819][   T30] audit: type=1800 audit(1793945658.322:5): pid=10819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1379" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1391 res=0 errno=-22
[  414.007290][T10819] FAULT_INJECTION: forcing a failure.
[  414.007290][T10819] name failslab, interval 1, probability 0, space 0, times 0
[  414.007325][T10819] CPU: 1 UID: 0 PID: 10819 Comm: syz.0.1379 Not tainted syzkaller #0 PREEMPT(full) 
[  414.007363][T10819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  414.007377][T10819] Call Trace:
[  414.007394][T10819]  <TASK>
[  414.007404][T10819]  dump_stack_lvl+0xe8/0x150
[  414.007446][T10819]  should_fail_ex+0x3eb/0x540
[  414.007479][T10819]  should_failslab+0xa8/0x100
[  414.007513][T10819]  ? sctp_chunkify+0x5a/0x260
[  414.007542][T10819]  kmem_cache_alloc_noprof+0x9c/0x600
[  414.007567][T10819]  ? kmem_cache_alloc_node_noprof+0x1f4/0x600
[  414.007593][T10819]  ? __alloc_skb+0x1db/0x7a0
[  414.007627][T10819]  ? sctp_chunkify+0x5a/0x260
[  414.007663][T10819]  sctp_chunkify+0x5a/0x260
[  414.007695][T10819]  _sctp_make_chunk+0x122/0x290
[  414.007728][T10819]  sctp_make_abort_user+0x99/0x7f0
[  414.007757][T10819]  ? sctp_transport_put+0xd2/0x150
[  414.007782][T10819]  ? __pfx_sctp_make_abort_user+0x10/0x10
[  414.007808][T10819]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  414.007854][T10819]  sctp_sendmsg_check_sflags+0x1cb/0x330
[  414.007893][T10819]  sctp_sendmsg+0xc24/0x2d00
[  414.007943][T10819]  ? __pfx_sctp_sendmsg+0x10/0x10
[  414.008000][T10819]  ? aa_sock_msg_perm+0xfc/0x210
[  414.008021][T10819]  ? sock_rps_record_flow+0x19/0x350
[  414.008055][T10819]  ? inet_sendmsg+0x298/0x320
[  414.008075][T10819]  ? apparmor_socket_sendmsg+0x98/0x360
[  414.008111][T10819]  ? __pfx_inet_sendmsg+0x10/0x10
[  414.008134][T10819]  sock_sendmsg_nosec+0x10f/0x190
[  414.008167][T10819]  ____sys_sendmsg+0x54e/0x850
[  414.008198][T10819]  ? __pfx_____sys_sendmsg+0x10/0x10
[  414.008258][T10819]  ? import_iovec+0x73/0xa0
[  414.008293][T10819]  ___sys_sendmsg+0x2a5/0x360
[  414.008315][T10819]  ? __lock_acquire+0x747/0x2de0
[  414.008350][T10819]  ? __pfx____sys_sendmsg+0x10/0x10
[  414.008388][T10819]  ? kstrtouint+0x6e/0xe0
[  414.008457][T10819]  ? __fget_files+0x3a2/0x420
[  414.008484][T10819]  ? __fget_files+0x2a/0x420
[  414.008523][T10819]  __sys_sendmmsg+0x273/0x4e0
[  414.008555][T10819]  ? __pfx___sys_sendmmsg+0x10/0x10
[  414.008591][T10819]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  414.008637][T10819]  ? ksys_write+0x242/0x270
[  414.008670][T10819]  ? __pfx_ksys_write+0x10/0x10
[  414.008707][T10819]  __x64_sys_sendmmsg+0xa0/0xc0
[  414.008752][T10819]  do_syscall_64+0x166/0x520
[  414.008776][T10819]  ? trace_irq_disable+0x3b/0x140
[  414.008807][T10819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.008830][T10819]  ? clear_bhb_loop+0x70/0xc0
[  414.008858][T10819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.008881][T10819] RIP: 0033:0x7f74cbb9fb19
[  414.008908][T10819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  414.008928][T10819] RSP: 002b:00007f74cca64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  414.008953][T10819] RAX: ffffffffffffffda RBX: 00007f74cbe25fa0 RCX: 00007f74cbb9fb19
[  414.008970][T10819] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004
[  414.008984][T10819] RBP: 00007f74cca64090 R08: 0000000000000000 R09: 0000000000000000
[  414.008998][T10819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.009012][T10819] R13: 00007f74cbe26038 R14: 00007f74cbe25fa0 R15: 00007ffc18e97328
[  414.009049][T10819]  </TASK>
[  414.592690][T10820] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  414.616736][T10820] bond3 (unregistering): Released all slaves
[  415.212303][T10831] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  415.224753][T10831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  415.298534][T10837] __nla_validate_parse: 1 callbacks suppressed
[  415.298558][T10837] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1384'.
[  415.637691][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'.
[  416.430299][T10861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1389'.
[  416.430338][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'.
[  416.844998][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1391'.
[  416.888399][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1391'.
[  417.853415][T10887] netlink: 'syz.3.1399': attribute type 10 has an invalid length.
[  417.853440][T10887] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1399'.
[  418.601892][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1402'.
[  418.738508][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1405'.
[  418.738548][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'.
[  419.420797][T10918] syzkaller1: entered promiscuous mode
[  419.420833][T10918] syzkaller1: entered allmulticast mode
[  420.907627][T10921] __nla_validate_parse: 5 callbacks suppressed
[  420.907654][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'.
[  420.907683][T10921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1411'.
[  421.009108][T10921] bridge1: entered promiscuous mode
[  421.009134][T10921] bridge1: entered allmulticast mode
[  421.451601][T10950] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  421.451836][T10950] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  421.452016][T10950] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  421.452195][T10950] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  421.452383][T10950] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  421.452561][T10950] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  421.452746][T10950] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  421.471339][T10950] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  421.471613][T10950] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  421.471793][T10950] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  422.105229][T10962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1418'.
[  422.105269][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'.
[  422.771630][T10971] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  422.966513][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1420'.
[  423.115314][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1420'.
[  423.244349][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'.
[  423.480078][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1423'.
[  423.568497][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1423'.
[  424.553502][T11016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1430'.
[  426.066173][T11036] __nla_validate_parse: 3 callbacks suppressed
[  426.066198][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'.
[  426.135494][T11037] syzkaller1: entered promiscuous mode
[  426.135523][T11037] syzkaller1: entered allmulticast mode
[  426.189243][T11036] IPv6: sit1: Disabled Multicast RS
[  426.815808][T11046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1438'.
[  429.768298][T11050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1439'.
[  429.768337][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1439'.
[  430.360611][T11054] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1440'.
[  430.412975][T11054] syzkaller1: entered promiscuous mode
[  430.413001][T11054] syzkaller1: entered allmulticast mode
[  431.050984][T11062] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  431.170595][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'.
[  431.170624][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'.
[  431.229528][T11065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  432.001253][T11081] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  432.088935][T11069] syzkaller0: entered promiscuous mode
[  432.088964][T11069] syzkaller0: entered allmulticast mode
[  432.285654][T11084] netlink: 'syz.2.1448': attribute type 1 has an invalid length.
[  432.285683][T11084] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1448'.
[  432.618694][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'.
[  432.652828][T11093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1449'.
[  432.652865][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'.
[  433.514414][    C1] sched: DL replenish lagged too much
[  433.515706][   T62] IPVS: starting estimator thread 0...
[  433.900531][T11115] IPVS: using max 24 ests per chain, 57600 per kthread
[  440.167602][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'.
[  440.410614][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  440.410681][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  441.407177][T11135] tun0: tun_chr_ioctl cmd 1074025673
[  441.959725][T11139] sctp: [Deprecated]: syz.4.1459 (pid 11139) Use of int in maxseg socket option.
[  441.959725][T11139] Use struct sctp_assoc_value instead
[  441.959860][T11138] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004
[  444.331758][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1465'.
[  444.331798][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1465'.
[  444.393829][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'.
[  444.437256][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'.
[  445.649385][T11188] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1472'.
[  445.808360][T11190] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1473'.
[  445.875838][T11190] syzkaller1: entered promiscuous mode
[  445.875864][T11190] syzkaller1: entered allmulticast mode
[  446.764573][T11200] block nbd17: Unsupported socket: should be TCP or UNIX.
[  446.800762][T11200] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1476'.
[  446.880237][T11202] netlink: 'syz.0.1476': attribute type 9 has an invalid length.
[  449.000638][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'.
[  449.027797][T11222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1479'.
[  449.027835][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1479'.
[  449.115399][T11225] xt_IDLETIMER: label is empty or not nul-terminated
[  449.145684][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'.
[  449.732293][T11234] bond0: (slave syz_tun): Releasing backup interface
[  449.779593][T11234] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.780954][T11234] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.848719][T11238] block nbd17: server does not support multiple connections per device.
[  449.849130][T11238] block nbd17: shutting down sockets
[  449.892017][T11234] bond0: (slave batadv0): Releasing backup interface
[  450.092993][T11234] bridge_slave_0: left allmulticast mode
[  450.093023][T11234] bridge_slave_0: left promiscuous mode
[  450.095460][T11234] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.205556][T11234] bridge_slave_1: left allmulticast mode
[  450.205588][T11234] bridge_slave_1: left promiscuous mode
[  450.205814][T11234] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.272271][T11234] bond0: (slave bond_slave_0): Releasing backup interface
[  450.305061][T11234] bond0: (slave bond_slave_1): Releasing backup interface
[  450.326211][T11234] team0: Port device team_slave_0 removed
[  450.349149][T11234] team0: Port device team_slave_1 removed
[  450.353284][T11234] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  450.376380][T11234] batman_adv: batadv0: Removing interface: batadv_slave_0
[  450.489447][T11234] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  450.492890][T11234] batman_adv: batadv0: Removing interface: batadv_slave_1
[  450.521547][T11234] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  450.800188][T11247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1486'.
[  450.977437][T11253] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  451.098299][T11257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1489'.
[  451.098406][T11257] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  451.281719][T11260] netlink: 'syz.2.1490': attribute type 62 has an invalid length.
[  451.470528][T11266] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1492'.
[  451.833283][T11271] netlink: 'syz.2.1493': attribute type 3 has an invalid length.
[  451.833312][T11271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'.
[  451.833333][T11271] netlink: 'syz.2.1493': attribute type 3 has an invalid length.
[  451.833347][T11271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'.
[  451.927083][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'.
[  453.488506][T11292] Bluetooth: hci0: invalid length 0, exp 2 for type 21
[  453.525288][T11294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1499'.
[  453.588380][T11298] netlink: 'syz.0.1501': attribute type 7 has an invalid length.
[  453.588439][T11298] netlink: 'syz.0.1501': attribute type 8 has an invalid length.
[  453.719705][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'.
[  454.081830][T11315] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1505'.
[  455.581844][T11331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1512'.
[  456.307258][T11343] netlink: 'syz.0.1516': attribute type 14 has an invalid length.
[  456.307282][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'.
[  456.958641][T11357] netlink: 'syz.1.1521': attribute type 1 has an invalid length.
[  456.991777][T11357] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  457.394320][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1523'.
[  457.557821][T11369] FAULT_INJECTION: forcing a failure.
[  457.557821][T11369] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  457.557879][T11369] CPU: 1 UID: 0 PID: 11369 Comm: syz.0.1525 Not tainted syzkaller #0 PREEMPT(full) 
[  457.557917][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  457.557939][T11369] Call Trace:
[  457.557948][T11369]  <TASK>
[  457.557958][T11369]  dump_stack_lvl+0xe8/0x150
[  457.558000][T11369]  should_fail_ex+0x3eb/0x540
[  457.558034][T11369]  _copy_to_user+0x31/0xb0
[  457.558066][T11369]  simple_read_from_buffer+0xe1/0x170
[  457.558100][T11369]  proc_fail_nth_read+0x1bb/0x230
[  457.558143][T11369]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  457.558183][T11369]  ? rw_verify_area+0x24a/0x4c0
[  457.558215][T11369]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  457.558249][T11369]  vfs_read+0x213/0xa80
[  457.558284][T11369]  ? __pfx___mutex_lock+0x10/0x10
[  457.558314][T11369]  ? __pfx_vfs_read+0x10/0x10
[  457.558344][T11369]  ? __fget_files+0x2a/0x420
[  457.558370][T11369]  ? __fget_files+0x3a2/0x420
[  457.558395][T11369]  ? __fget_files+0x2a/0x420
[  457.558427][T11369]  ? fdget+0x1ac/0x250
[  457.558474][T11369]  ksys_read+0x150/0x270
[  457.558506][T11369]  ? __pfx_ksys_read+0x10/0x10
[  457.558549][T11369]  do_syscall_64+0x166/0x520
[  457.558590][T11369]  ? trace_irq_disable+0x3b/0x140
[  457.558621][T11369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.558644][T11369]  ? clear_bhb_loop+0x70/0xc0
[  457.558673][T11369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.558705][T11369] RIP: 0033:0x7f74cbb6034e
[  457.558726][T11369] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  457.558746][T11369] RSP: 002b:00007f74cca63fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  457.558769][T11369] RAX: ffffffffffffffda RBX: 00007f74cca646c0 RCX: 00007f74cbb6034e
[  457.558786][T11369] RDX: 000000000000000f RSI: 00007f74cca640a0 RDI: 0000000000000005
[  457.558800][T11369] RBP: 00007f74cca64090 R08: 0000000000000000 R09: 0000000000000000
[  457.558814][T11369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  457.558826][T11369] R13: 00007f74cbe26038 R14: 00007f74cbe25fa0 R15: 00007ffc18e97328
[  457.558863][T11369]  </TASK>
[  458.121483][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1527'.
[  458.839606][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1534'.
[  458.931032][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'.
[  459.116105][T11393] batman_adv: batadv0: Adding interface: syzkaller0
[  459.116126][T11393] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.116160][T11393] batman_adv: batadv0: Interface activated: syzkaller0
[  460.596595][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1540'.
[  460.619026][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1540'.
[  461.020988][T11393] batman_adv: batadv0: Interface deactivated: syzkaller0
[  461.515902][T11417] sctp: [Deprecated]: syz.4.1544 (pid 11417) Use of int in max_burst socket option.
[  461.515902][T11417] Use struct sctp_assoc_value instead
[  461.832256][T11393] batman_adv: batadv0: Removing interface: syzkaller0
[  461.893716][T11422] sctp: [Deprecated]: syz.2.1545 (pid 11422) Use of int in max_burst socket option.
[  461.893716][T11422] Use struct sctp_assoc_value instead
[  462.349673][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'.
[  462.478334][T11435] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1549'.
[  462.497755][T11435] syzkaller1: entered promiscuous mode
[  462.497779][T11435] syzkaller1: entered allmulticast mode
[  462.656839][T11437] netlink: 'syz.1.1550': attribute type 1 has an invalid length.
[  462.682445][T11438] ip_tables: iptables: counters copy to user failed while replacing table
[  462.717017][T11437] bond4: entered promiscuous mode
[  462.717633][T11437] 8021q: adding VLAN 0 to HW filter on device bond4
[  463.129976][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'.
[  463.230381][T11450] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1555'.
[  463.313612][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'.
[  463.336568][T11452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1556'.
[  463.489632][T11456] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  464.888300][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1565'.
[  465.235729][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'.
[  465.293275][T11488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1567'.
[  465.358024][T11492] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  465.863283][T11500] sctp: [Deprecated]: syz.1.1573 (pid 11500) Use of int in max_burst socket option.
[  465.863283][T11500] Use struct sctp_assoc_value instead
[  466.290239][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'.
[  466.939041][T11531] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  467.579586][T11548] __nla_validate_parse: 1 callbacks suppressed
[  467.579609][T11548] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1590'.
[  468.298033][T11561] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  469.063942][ T5002] udevd[5002]: worker [10723] /devices/virtual/block/nbd0 is taking a long time
[  469.650436][T11595] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  470.361432][T11608] sctp: [Deprecated]: syz.1.1609 (pid 11608) Use of int in max_burst socket option.
[  470.361432][T11608] Use struct sctp_assoc_value instead
[  470.483060][T11610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  470.560087][T11611] syzkaller0: entered promiscuous mode
[  470.560117][T11611] syzkaller0: entered allmulticast mode
[  470.561040][T11611] tipc: Resetting bearer <eth:syzkaller0>
[  470.608026][T11609] tipc: Resetting bearer <eth:syzkaller0>
[  473.024257][T11631] netlink: 'syz.1.1613': attribute type 13 has an invalid length.
[  473.024285][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1613'.
[  475.731900][T11609] tipc: Disabling bearer <eth:syzkaller0>
[  475.792557][T11615] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  475.882345][T11616] syzkaller0: entered promiscuous mode
[  475.882385][T11616] syzkaller0: entered allmulticast mode
[  475.883131][T11616] tipc: Resetting bearer <eth:syzkaller0>
[  476.099005][ T2224] tipc: Resetting bearer <eth:syzkaller0>
[  476.103109][ T5782] tipc: Node number set to 837513751
[  476.104051][T11631] bond0: option fail_over_mac: invalid value (39)
[  476.156396][T11613] tipc: Resetting bearer <eth:syzkaller0>
[  476.251743][T11644] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  476.598508][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1622'.
[  476.629674][T11653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1622'.
[  481.890323][T11613] tipc: Disabling bearer <eth:syzkaller0>
[  482.250592][T11678] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1628'.
[  482.250628][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1628'.
[  482.675015][T11684] netlink: 'syz.4.1629': attribute type 13 has an invalid length.
[  482.675040][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'.
[  482.675067][T11684] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  483.163833][T11686] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  483.660295][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1633'.
[  483.687858][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1633'.
[  484.794646][T11717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1639'.
[  484.794683][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'.
[  484.973619][T11723] netlink: 'syz.4.1640': attribute type 1 has an invalid length.
[  484.973651][T11723] nbd: nbd296 already in use
[  484.992942][T11723] sctp: [Deprecated]: syz.4.1640 (pid 11723) Use of int in max_burst socket option.
[  484.992942][T11723] Use struct sctp_assoc_value instead
[  485.012281][T11723] siw: device registration error -23
[  485.156840][T11729] netlink: 'syz.4.1643': attribute type 1 has an invalid length.
[  485.156876][T11729] nbd: nbd296 already in use
[  485.158302][T11729] sctp: [Deprecated]: syz.4.1643 (pid 11729) Use of int in max_burst socket option.
[  485.158302][T11729] Use struct sctp_assoc_value instead
[  485.160234][T11729] siw: device registration error -23
[  485.670624][T11733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1645'.
[  486.261264][T11744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1650'.
[  486.261303][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'.
[  486.694773][T11763] FAULT_INJECTION: forcing a failure.
[  486.694773][T11763] name failslab, interval 1, probability 0, space 0, times 0
[  486.694811][T11763] CPU: 1 UID: 0 PID: 11763 Comm: syz.4.1654 Not tainted syzkaller #0 PREEMPT(full) 
[  486.694837][T11763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  486.694852][T11763] Call Trace:
[  486.694861][T11763]  <TASK>
[  486.694871][T11763]  dump_stack_lvl+0xe8/0x150
[  486.694916][T11763]  should_fail_ex+0x3eb/0x540
[  486.694950][T11763]  should_failslab+0xa8/0x100
[  486.694986][T11763]  __kmalloc_cache_noprof+0x9e/0x600
[  486.695016][T11763]  ? nft_trans_rule_add+0x59/0x440
[  486.695050][T11763]  ? nft_trans_rule_add+0x59/0x440
[  486.695084][T11763]  ? __pfx_nft_immediate_init+0x10/0x10
[  486.695121][T11763]  nft_trans_rule_add+0x59/0x440
[  486.695162][T11763]  nf_tables_newrule+0x1b50/0x28a0
[  486.695212][T11763]  ? __pfx_nf_tables_newrule+0x10/0x10
[  486.695246][T11763]  ? lock_acquire+0x115/0x350
[  486.695275][T11763]  ? nfnl_pernet+0x23/0x240
[  486.695316][T11763]  ? __nla_parse+0x40/0x60
[  486.695354][T11763]  nfnetlink_rcv+0x1288/0x28c0
[  486.695426][T11763]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  486.695510][T11763]  ? skb_clone+0x246/0x3a0
[  486.695553][T11763]  ? netlink_deliver_tap+0x2e/0x1b0
[  486.695586][T11763]  ? netlink_deliver_tap+0x2e/0x1b0
[  486.695632][T11763]  netlink_unicast+0x8ef/0xa80
[  486.695683][T11763]  netlink_sendmsg+0x7f0/0xb20
[  486.695723][T11763]  ? __pfx_netlink_sendmsg+0x10/0x10
[  486.695760][T11763]  ? aa_sock_msg_perm+0x144/0x210
[  486.695790][T11763]  ? apparmor_socket_sendmsg+0x98/0x360
[  486.695825][T11763]  ? __pfx_netlink_sendmsg+0x10/0x10
[  486.695857][T11763]  sock_sendmsg_nosec+0x14e/0x190
[  486.695889][T11763]  ____sys_sendmsg+0x54e/0x850
[  486.695920][T11763]  ? __pfx_____sys_sendmsg+0x10/0x10
[  486.695956][T11763]  ? import_iovec+0x73/0xa0
[  486.695988][T11763]  ___sys_sendmsg+0x2a5/0x360
[  486.696011][T11763]  ? __lock_acquire+0x747/0x2de0
[  486.696046][T11763]  ? __pfx____sys_sendmsg+0x10/0x10
[  486.696114][T11763]  ? __fget_files+0x3a2/0x420
[  486.696141][T11763]  ? __fget_files+0x2a/0x420
[  486.696180][T11763]  __x64_sys_sendmsg+0x1b1/0x290
[  486.696208][T11763]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  486.696259][T11763]  do_syscall_64+0x166/0x520
[  486.696285][T11763]  ? trace_irq_disable+0x3b/0x140
[  486.696316][T11763]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.696339][T11763]  ? clear_bhb_loop+0x70/0xc0
[  486.696368][T11763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.696391][T11763] RIP: 0033:0x7f7e8579fb19
[  486.696413][T11763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  486.696433][T11763] RSP: 002b:00007f7e865aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  486.696457][T11763] RAX: ffffffffffffffda RBX: 00007f7e85a25fa0 RCX: 00007f7e8579fb19
[  486.696474][T11763] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000005
[  486.696489][T11763] RBP: 00007f7e865aa090 R08: 0000000000000000 R09: 0000000000000000
[  486.696502][T11763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  486.696516][T11763] R13: 00007f7e85a26038 R14: 00007f7e85a25fa0 R15: 00007ffc87500008
[  486.696554][T11763]  </TASK>
[  487.949458][T11780] __nla_validate_parse: 3 callbacks suppressed
[  487.949484][T11780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1661'.
[  487.949512][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'.
[  487.992787][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'.
[  488.303479][T11785] netlink: 'syz.2.1663': attribute type 1 has an invalid length.
[  488.303516][T11785] nbd: nbd296 already in use
[  488.335112][T11785] sctp: [Deprecated]: syz.2.1663 (pid 11785) Use of int in max_burst socket option.
[  488.335112][T11785] Use struct sctp_assoc_value instead
[  488.365284][T11785] siw: device registration error -23
[  488.771615][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1664'.
[  488.844632][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1664'.
[  489.006668][T11797] openvswitch: netlink: Actions may not be safe on all matching packets
[  490.119131][T11824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1673'.
[  490.119179][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'.
[  490.755475][T11837] netlink: 'syz.3.1676': attribute type 13 has an invalid length.
[  490.755500][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1676'.
[  490.755527][T11837] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  491.422006][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'.
[  491.455578][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'.
[  491.750940][T11854] sctp: [Deprecated]: syz.4.1681 (pid 11854) Use of int in max_burst socket option.
[  491.750940][T11854] Use struct sctp_assoc_value instead
[  493.161330][T11889] __nla_validate_parse: 2 callbacks suppressed
[  493.161354][T11889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1690'.
[  493.637746][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'.
[  493.879634][T11903] netlink: 'syz.1.1692': attribute type 1 has an invalid length.
[  493.951988][T11903] bond5: (slave geneve3): making interface the new active one
[  493.952815][T11903] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  493.976933][T10550] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0
[  493.978476][ T2224] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0
[  493.978524][ T2224] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0
[  493.978563][ T2224] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0
[  494.036854][T11903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1692'.
[  494.042794][T11903] 8021q: adding VLAN 0 to HW filter on device bond5
[  494.366046][T11908] FAULT_INJECTION: forcing a failure.
[  494.366046][T11908] name failslab, interval 1, probability 0, space 0, times 0
[  494.366083][T11908] CPU: 0 UID: 0 PID: 11908 Comm: syz.1.1694 Not tainted syzkaller #0 PREEMPT(full) 
[  494.366110][T11908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  494.366123][T11908] Call Trace:
[  494.366132][T11908]  <TASK>
[  494.366141][T11908]  dump_stack_lvl+0xe8/0x150
[  494.366184][T11908]  should_fail_ex+0x3eb/0x540
[  494.366218][T11908]  should_failslab+0xa8/0x100
[  494.366253][T11908]  __kmalloc_cache_noprof+0x9e/0x600
[  494.366283][T11908]  ? do_check_common+0x28d/0x7590
[  494.366311][T11908]  ? do_check_common+0x28d/0x7590
[  494.366348][T11908]  do_check_common+0x28d/0x7590
[  494.366394][T11908]  ? bpf_base_func_proto+0xaa/0xb00
[  494.366429][T11908]  ? bpf_get_call_summary+0xb92/0x1130
[  494.366450][T11908]  ? kasan_save_track+0x3e/0x80
[  494.366485][T11908]  ? __pfx_bpf_get_call_summary+0x10/0x10
[  494.366542][T11908]  ? __pfx_do_check_common+0x10/0x10
[  494.366585][T11908]  ? mark_fastcall_patterns+0x10e1/0x1140
[  494.366634][T11908]  do_check_main+0x95/0x1f0
[  494.366662][T11908]  bpf_check+0x302b/0x34e0
[  494.366699][T11908]  ? ktime_get_with_offset+0x93/0x2d0
[  494.366732][T11908]  ? ktime_get_with_offset+0x93/0x2d0
[  494.366764][T11908]  ? __pfx_bpf_check+0x10/0x10
[  494.366790][T11908]  ? bpf_obj_name_cpy+0x194/0x1e0
[  494.366824][T11908]  bpf_prog_load+0x14da/0x1c60
[  494.366862][T11908]  ? __pfx_bpf_prog_load+0x10/0x10
[  494.366906][T11908]  ? __might_fault+0xaf/0x130
[  494.366937][T11908]  __sys_bpf+0xd86/0xe00
[  494.366969][T11908]  ? __pfx___sys_bpf+0x10/0x10
[  494.367005][T11908]  ? __fget_files+0x2a/0x420
[  494.367053][T11908]  ? ksys_write+0x242/0x270
[  494.367085][T11908]  ? __pfx_ksys_write+0x10/0x10
[  494.367121][T11908]  __x64_sys_bpf+0xba/0xd0
[  494.367157][T11908]  do_syscall_64+0x166/0x520
[  494.367183][T11908]  ? trace_irq_disable+0x3b/0x140
[  494.367214][T11908]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.367237][T11908]  ? clear_bhb_loop+0x70/0xc0
[  494.367264][T11908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.367287][T11908] RIP: 0033:0x7f7e4a99fb19
[  494.367309][T11908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  494.367329][T11908] RSP: 002b:00007f7e4b86c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  494.367354][T11908] RAX: ffffffffffffffda RBX: 00007f7e4ac25fa0 RCX: 00007f7e4a99fb19
[  494.367371][T11908] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005
[  494.367393][T11908] RBP: 00007f7e4b86c090 R08: 0000000000000000 R09: 0000000000000000
[  494.367407][T11908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  494.367421][T11908] R13: 00007f7e4ac26038 R14: 00007f7e4ac25fa0 R15: 00007ffee6370348
[  494.367457][T11908]  </TASK>
[  494.833556][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1695'.
[  495.060089][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'.
[  495.282910][T11918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1698'.
[  495.282945][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'.
[  495.850192][T11929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  495.885744][T11927] tipc: Resetting bearer <eth:syzkaller0>
[  495.998076][T11927] tipc: Disabling bearer <eth:syzkaller0>
[  496.201342][T11934] netlink: 'syz.0.1702': attribute type 13 has an invalid length.
[  496.201367][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'.
[  496.201393][T11934] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  496.669274][T11936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1704'.
[  497.418674][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1706'.
[  498.213621][T11963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1709'.
[  498.213659][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'.
[  499.595577][T11975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1715'.
[  499.948617][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'.
[  500.062569][T11986] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  500.083710][T11986] team0: Mode changed to "broadcast"
[  500.093747][T11986] vlan0: entered promiscuous mode
[  500.093773][T11986] geneve0: entered promiscuous mode
[  500.111764][T11986] tipc: Enabled bearer <eth:team0>, priority 0
[  500.276301][T11990] batman_adv: batadv0: Adding interface: syzkaller0
[  500.276322][T11990] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  500.276699][T11990] batman_adv: batadv0: Interface activated: syzkaller0
[  500.281707][T11990] FAULT_INJECTION: forcing a failure.
[  500.281707][T11990] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  500.281740][T11990] CPU: 0 UID: 0 PID: 11990 Comm: syz.1.1720 Not tainted syzkaller #0 PREEMPT(full) 
[  500.281765][T11990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  500.281779][T11990] Call Trace:
[  500.281788][T11990]  <TASK>
[  500.281798][T11990]  dump_stack_lvl+0xe8/0x150
[  500.281851][T11990]  should_fail_ex+0x3eb/0x540
[  500.281885][T11990]  prepare_alloc_pages+0x21e/0x5f0
[  500.281923][T11990]  __alloc_frozen_pages_noprof+0x17c/0x410
[  500.281963][T11990]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  500.282000][T11990]  ? trace_kmalloc+0x2a/0xf0
[  500.282028][T11990]  ? policy_nodemask+0x31b/0x980
[  500.282059][T11990]  ? __kmalloc_node_track_caller_noprof+0x4cd/0x720
[  500.282095][T11990]  alloc_pages_mpol+0x21e/0x390
[  500.282135][T11990]  alloc_pages_noprof+0xb1/0x2b0
[  500.282172][T11990]  alloc_skb_with_frags+0x264/0x760
[  500.282210][T11990]  sock_alloc_send_pskb+0xc69/0xd90
[  500.282245][T11990]  ? __pfx_process_measurement+0x10/0x10
[  500.282287][T11990]  ? __lock_acquire+0x747/0x2de0
[  500.282316][T11990]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  500.282363][T11990]  tun_get_user+0x9c8/0x4470
[  500.282416][T11990]  ? aa_file_perm+0x4ed/0x15f0
[  500.282441][T11990]  ? __pfx_tun_get_user+0x10/0x10
[  500.282470][T11990]  ? __lock_acquire+0x747/0x2de0
[  500.282501][T11990]  ? kstrtoull+0x137/0x1d0
[  500.282545][T11990]  ? ref_tracker_alloc+0x172/0x530
[  500.282574][T11990]  ? lock_acquire+0x115/0x350
[  500.282602][T11990]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  500.282635][T11990]  ? lock_acquire+0x115/0x350
[  500.282663][T11990]  ? tun_get+0x1c/0x2f0
[  500.282695][T11990]  ? tun_get+0x1c/0x2f0
[  500.282721][T11990]  ? tun_get+0x1c/0x2f0
[  500.282752][T11990]  tun_chr_write_iter+0x113/0x200
[  500.282782][T11990]  vfs_write+0x612/0xba0
[  500.282822][T11990]  ? __pfx_vfs_write+0x10/0x10
[  500.282862][T11990]  ? __fget_files+0x3a2/0x420
[  500.282888][T11990]  ? __fget_files+0x2a/0x420
[  500.282920][T11990]  ? fdget+0x1ac/0x250
[  500.282955][T11990]  ksys_write+0x150/0x270
[  500.282988][T11990]  ? __pfx_ksys_write+0x10/0x10
[  500.283029][T11990]  do_syscall_64+0x166/0x520
[  500.283056][T11990]  ? trace_irq_disable+0x3b/0x140
[  500.283086][T11990]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.283109][T11990]  ? clear_bhb_loop+0x70/0xc0
[  500.283138][T11990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.283161][T11990] RIP: 0033:0x7f7e4a99fb19
[  500.283183][T11990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.283203][T11990] RSP: 002b:00007f7e4b86c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  500.283227][T11990] RAX: ffffffffffffffda RBX: 00007f7e4ac25fa0 RCX: 00007f7e4a99fb19
[  500.283244][T11990] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003
[  500.283259][T11990] RBP: 00007f7e4b86c090 R08: 0000000000000000 R09: 0000000000000000
[  500.283273][T11990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  500.283287][T11990] R13: 00007f7e4ac26038 R14: 00007f7e4ac25fa0 R15: 00007ffee6370348
[  500.283324][T11990]  </TASK>
[  500.373421][T11989] batman_adv: batadv0: Interface deactivated: syzkaller0
[  501.168124][T11989] batman_adv: batadv0: Removing interface: syzkaller0
[  501.321887][T11992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1721'.
[  501.321923][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1721'.
[  501.440850][T11994] sctp: [Deprecated]: syz.0.1722 (pid 11994) Use of int in max_burst socket option.
[  501.440850][T11994] Use struct sctp_assoc_value instead
[  501.720866][T12002] ip_tables: iptables: counters copy to user failed while replacing table
[  501.752211][T12002] veth12: entered allmulticast mode
[  501.827800][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  501.827867][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  502.821444][T12019] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1730'.
[  503.751956][   T30] audit: type=1800 audit(1793945748.092:6): pid=12034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1734" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1695 res=0 errno=-22
[  505.770297][T12069] netlink: 'syz.4.1743': attribute type 1 has an invalid length.
[  505.770329][T12069] nbd: illegal input index 393236
[  505.830924][T12069] IPVS: stopping backup sync thread 12070 ...
[  505.851822][T12069] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1743'.
[  506.423147][T12077] netlink: 'syz.4.1745': attribute type 13 has an invalid length.
[  506.423175][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1745'.
[  506.478215][T12081] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  506.567718][T12077] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  506.917993][T12090] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  507.760564][T12103] x_tables: duplicate underflow at hook 2
[  507.870306][T12106] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20002
[  508.221400][T12114] sctp: [Deprecated]: syz.0.1758 (pid 12114) Use of int in max_burst socket option.
[  508.221400][T12114] Use struct sctp_assoc_value instead
[  510.313774][T12147] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1772'.
[  510.333382][T12147] syzkaller1: entered promiscuous mode
[  510.333406][T12147] syzkaller1: entered allmulticast mode
[  510.350087][T12147] FAULT_INJECTION: forcing a failure.
[  510.350087][T12147] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  510.350119][T12147] CPU: 0 UID: 0 PID: 12147 Comm: syz.2.1772 Not tainted syzkaller #0 PREEMPT(full) 
[  510.350144][T12147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  510.350158][T12147] Call Trace:
[  510.350166][T12147]  <TASK>
[  510.350176][T12147]  dump_stack_lvl+0xe8/0x150
[  510.350218][T12147]  should_fail_ex+0x3eb/0x540
[  510.350256][T12147]  _copy_from_user+0x2d/0xb0
[  510.350286][T12147]  __sys_sendto+0x2a9/0x5a0
[  510.350320][T12147]  ? ksys_write+0x1e6/0x270
[  510.350355][T12147]  ? __pfx___sys_sendto+0x10/0x10
[  510.350387][T12147]  ? __mutex_unlock_slowpath+0x731/0x900
[  510.350429][T12147]  ? fdget+0x1ac/0x250
[  510.350471][T12147]  ? __pfx_ksys_write+0x10/0x10
[  510.350508][T12147]  __x64_sys_sendto+0xde/0x100
[  510.350554][T12147]  do_syscall_64+0x166/0x520
[  510.350579][T12147]  ? trace_irq_disable+0x3b/0x140
[  510.350610][T12147]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.350632][T12147]  ? clear_bhb_loop+0x70/0xc0
[  510.350661][T12147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.350684][T12147] RIP: 0033:0x7f00f819fb19
[  510.350705][T12147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  510.350724][T12147] RSP: 002b:00007f00f90af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  510.350746][T12147] RAX: ffffffffffffffda RBX: 00007f00f8425fa0 RCX: 00007f00f819fb19
[  510.350761][T12147] RDX: 0000000000034000 RSI: 0000200000000e00 RDI: 0000000000000006
[  510.350775][T12147] RBP: 00007f00f90af090 R08: 0000200000000e40 R09: 000000000000001c
[  510.350789][T12147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  510.350801][T12147] R13: 00007f00f8426038 R14: 00007f00f8425fa0 R15: 00007ffd46bfdfe8
[  510.350836][T12147]  </TASK>
[  511.077505][T12155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1773'.
[  511.077544][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1773'.
[  511.360706][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1775'.
[  511.870068][T12174] netlink: 'syz.1.1781': attribute type 10 has an invalid length.
[  511.870095][T12174] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1781'.
[  514.046840][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'.
[  514.355561][T12214] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1795'.
[  515.343885][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'.
[  515.438869][T12233] sctp: [Deprecated]: syz.2.1803 (pid 12233) Use of int in max_burst socket option.
[  515.438869][T12233] Use struct sctp_assoc_value instead
[  516.232363][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'.
[  516.256448][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'.
[  519.462854][T12294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1818'.
[  520.253217][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'.
[  520.458644][T12303] sctp: [Deprecated]: syz.3.1820 (pid 12303) Use of int in maxseg socket option.
[  520.458644][T12303] Use struct sctp_assoc_value instead
[  520.919299][T12324] bond5: option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  521.009393][T12324] bond5 (unregistering): Released all slaves
[  521.389933][T12331] tc_dump_action: action bad kind
[  521.434135][T12336] ip_tables: iptables: counters copy to user failed while replacing table
[  521.581377][T12338] veth4: entered allmulticast mode
[  522.266776][T12350] pim6reg1: entered promiscuous mode
[  522.266803][T12350] pim6reg1: entered allmulticast mode
[  523.592538][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'.
[  524.293770][T12379] netlink: 'syz.1.1837': attribute type 10 has an invalid length.
[  524.293799][T12379] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1837'.
[  524.423018][T12383] ip_tables: iptables: counters copy to user failed while replacing table
[  524.446888][T12383] syzkaller1: entered promiscuous mode
[  524.446913][T12383] syzkaller1: entered allmulticast mode
[  524.450681][T12383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1839'.
[  524.450712][T12383] netlink: 'syz.1.1839': attribute type 3 has an invalid length.
[  524.842047][T12387] sctp: [Deprecated]: syz.0.1841 (pid 12387) Use of int in max_burst socket option.
[  524.842047][T12387] Use struct sctp_assoc_value instead
[  524.917707][T12389] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  525.408196][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1847'.
[  525.810347][T12406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1846'.
[  526.208918][T12416] ip_tables: iptables: counters copy to user failed while replacing table
[  526.261732][T12416] syzkaller1: entered promiscuous mode
[  526.261757][T12416] syzkaller1: entered allmulticast mode
[  526.299783][T12416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1853'.
[  526.299816][T12416] netlink: 'syz.2.1853': attribute type 3 has an invalid length.
[  526.560275][T12427] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  526.617789][T12427] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  526.777209][T12427] syzkaller1: entered promiscuous mode
[  526.777235][T12427] syzkaller1: entered allmulticast mode
[  527.313333][T12438] sctp: [Deprecated]: syz.2.1860 (pid 12438) Use of int in max_burst socket option.
[  527.313333][T12438] Use struct sctp_assoc_value instead
[  528.024204][T12456] FAULT_INJECTION: forcing a failure.
[  528.024204][T12456] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  528.024239][T12456] CPU: 0 UID: 0 PID: 12456 Comm: syz.1.1866 Not tainted syzkaller #0 PREEMPT(full) 
[  528.024265][T12456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  528.024277][T12456] Call Trace:
[  528.024286][T12456]  <TASK>
[  528.024295][T12456]  dump_stack_lvl+0xe8/0x150
[  528.024341][T12456]  should_fail_ex+0x3eb/0x540
[  528.024372][T12456]  _copy_to_user+0x31/0xb0
[  528.024405][T12456]  simple_read_from_buffer+0xe1/0x170
[  528.024440][T12456]  proc_fail_nth_read+0x1bb/0x230
[  528.024479][T12456]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  528.024519][T12456]  ? rw_verify_area+0x24a/0x4c0
[  528.024550][T12456]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  528.024583][T12456]  vfs_read+0x213/0xa80
[  528.024619][T12456]  ? __pfx___mutex_lock+0x10/0x10
[  528.024648][T12456]  ? __pfx_vfs_read+0x10/0x10
[  528.024679][T12456]  ? __fget_files+0x2a/0x420
[  528.024705][T12456]  ? __fget_files+0x3a2/0x420
[  528.024731][T12456]  ? __fget_files+0x2a/0x420
[  528.024763][T12456]  ? fdget+0x1ac/0x250
[  528.024799][T12456]  ksys_read+0x150/0x270
[  528.024831][T12456]  ? __pfx_ksys_read+0x10/0x10
[  528.024884][T12456]  do_syscall_64+0x166/0x520
[  528.024909][T12456]  ? trace_irq_disable+0x3b/0x140
[  528.024941][T12456]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.024965][T12456]  ? clear_bhb_loop+0x70/0xc0
[  528.024994][T12456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.025017][T12456] RIP: 0033:0x7f7e4a96034e
[  528.025038][T12456] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  528.025058][T12456] RSP: 002b:00007f7e4b86bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  528.025081][T12456] RAX: ffffffffffffffda RBX: 00007f7e4b86c6c0 RCX: 00007f7e4a96034e
[  528.025098][T12456] RDX: 000000000000000f RSI: 00007f7e4b86c0a0 RDI: 0000000000000003
[  528.025112][T12456] RBP: 00007f7e4b86c090 R08: 0000000000000000 R09: 0000000000000000
[  528.025127][T12456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  528.025140][T12456] R13: 00007f7e4ac26038 R14: 00007f7e4ac25fa0 R15: 00007ffee6370348
[  528.025178][T12456]  </TASK>
[  528.347721][T12448] hsr0 speed is unknown, defaulting to 1000
[  530.275439][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1873'.
[  530.351582][T12486] sctp: [Deprecated]: syz.3.1874 (pid 12486) Use of int in maxseg socket option.
[  530.351582][T12486] Use struct sctp_assoc_value instead
[  530.698599][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'.
[  530.729692][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1876'.
[  530.814165][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1876'.
[  531.375539][T12504] syzkaller1: entered promiscuous mode
[  531.375564][T12504] syzkaller1: entered allmulticast mode
[  531.871118][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1884'.
[  532.520458][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'.
[  532.770621][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'.
[  532.815670][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'.
[  533.125799][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1893'.
[  533.551105][T12564] netlink: 'syz.4.1896': attribute type 1 has an invalid length.
[  533.888548][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'.
[  533.926182][T12564] 8021q: adding VLAN 0 to HW filter on device bond2
[  534.810615][T12589] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  535.288793][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1907'.
[  535.325824][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1907'.
[  535.423142][T12607] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  535.681429][T12610] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1910'.
[  535.708709][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'.
[  535.830229][T12610] veth15: entered allmulticast mode
[  536.085733][T12619] netlink: 'syz.0.1910': attribute type 1 has an invalid length.
[  536.085759][T12619] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1910'.
[  536.763002][T12627] netlink: 'syz.1.1916': attribute type 33 has an invalid length.
[  536.763029][T12627] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1916'.
[  537.325796][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'.
[  537.399631][T12644] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  537.441141][T12610] smc: net device lo applied user defined pnetid SYZ2
[  537.473968][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'.
[  538.049470][T12656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1925'.
[  539.950144][T12669] batadv_slave_1: entered promiscuous mode
[  539.950369][T12669] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  540.204037][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1933'.
[  540.204073][T12695] openvswitch: netlink: EtherType 520 is less than min 600
[  540.572130][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'.
[  540.609358][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'.
[  543.454887][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1944'.
[  543.455493][T12726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1944'.
[  543.455858][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1944'.
[  546.122220][T12756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1951'.
[  547.225407][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'.
[  547.287474][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'.
[  547.871274][T12791] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1959'.
[  547.871314][T12791] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  547.913903][T12793] x_tables: unsorted underflow at hook 1
[  549.170143][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1972'.
[  549.229557][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1972'.
[  552.541024][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'.
[  552.618030][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'.
[  552.654235][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'.
[  553.666811][   T33] INFO: task kworker/1:1H:1182 blocked for more than 143 seconds.
[  553.666842][   T33]       Not tainted syzkaller #0
[  553.666854][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  553.666865][   T33] task:kworker/1:1H    state:D stack:26976 pid:1182  tgid:1182  ppid:2      task_flags:0x4208060 flags:0x00080000
[  553.666938][   T33] Workqueue: kblockd blk_mq_run_work_fn
[  553.666974][   T33] Call Trace:
[  553.666982][   T33]  <TASK>
[  553.666998][   T33]  __schedule+0x17dd/0x5830
[  553.667064][   T33]  ? __pfx___schedule+0x10/0x10
[  553.667102][   T33]  ? schedule+0x90/0x2b0
[  553.667130][   T33]  schedule+0x164/0x2b0
[  553.667156][   T33]  schedule_timeout+0x152/0x2c0
[  553.667200][   T33]  ? __pfx_schedule_timeout+0x10/0x10
[  553.667236][   T33]  ? __pfx_process_timeout+0x10/0x10
[  553.667271][   T33]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  553.667294][   T33]  ? prepare_to_wait_event+0x3e4/0x4d0
[  553.667318][   T33]  ? prepare_to_wait_event+0x440/0x4d0
[  553.667350][   T33]  nbd_queue_rq+0x96a/0xff0
[  553.667388][   T33]  ? __pfx_nbd_queue_rq+0x10/0x10
[  553.667414][   T33]  ? __pfx_autoremove_wake_function+0x10/0x10
[  553.667464][   T33]  blk_mq_dispatch_rq_list+0x499/0x1990
[  553.667518][   T33]  ? sbitmap_get+0x229/0x390
[  553.667558][   T33]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  553.667594][   T33]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  553.667641][   T33]  __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  553.667691][   T33]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  553.667727][   T33]  ? lock_acquire+0x115/0x350
[  553.667761][   T33]  ? process_scheduled_works+0x97a/0x1630
[  553.667801][   T33]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  553.667830][   T33]  ? blk_mq_run_work_fn+0x13f/0x2f0
[  553.667858][   T33]  blk_mq_run_work_fn+0x167/0x2f0
[  553.667888][   T33]  ? process_scheduled_works+0x97a/0x1630
[  553.667923][   T33]  process_scheduled_works+0xc3d/0x1630
[  553.667994][   T33]  ? __pfx_process_scheduled_works+0x10/0x10
[  553.668038][   T33]  ? assign_work+0x3cf/0x5d0
[  553.668078][   T33]  worker_thread+0xa47/0xfb0
[  553.668130][   T33]  ? __kthread_parkme+0x71/0x1f0
[  553.668174][   T33]  kthread+0x38b/0x480
[  553.668202][   T33]  ? __pfx_worker_thread+0x10/0x10
[  553.668234][   T33]  ? __pfx_kthread+0x10/0x10
[  553.668263][   T33]  ret_from_fork+0x514/0xb70
[  553.668293][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  553.668320][   T33]  ? __switch_to+0xc78/0x1410
[  553.668360][   T33]  ? __pfx_kthread+0x10/0x10
[  553.670069][   T33]  ret_from_fork_asm+0x1a/0x30
[  553.670124][   T33]  </TASK>
[  553.670279][   T33] 
[  553.670279][   T33] Showing all locks held in the system:
[  553.670295][   T33] locks held by khungtaskd/33: 1, last CPU#0:
[  553.670312][   T33]  #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  553.670393][   T33] locks held by kworker/1:1H/1182: 4, on CPU#1:
[  553.670410][   T33]  #0: ffff88801d2ae148 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  553.670477][   T33]  #1: ffffc90005467c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  553.670544][   T33]  #2: ffff888028b4e118 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x13f/0x2f0
[  553.670605][   T33]  #3: ffff888029230178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0
[  553.670672][   T33] locks held by dhcpcd/5296: 2, last CPU#1:
[  553.670689][   T33]  #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0
[  553.670755][   T33]  #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[  553.670818][   T33] locks held by getty/5392: 2, on CPU#1:
[  553.670835][   T33]  #0: ffff888037c120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  553.670895][   T33]  #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  553.670963][   T33] locks held by syz-executor/5635: 2, last CPU#0:
[  553.670980][   T33]  #0: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560
[  553.671044][   T33]  #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  553.671116][   T33] locks held by udevd/10723: 1, on CPU#1:
[  553.671132][   T33]  #0: ffff888029149350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  553.671206][   T33] locks held by syz.0.1982/12873: 2, on CPU#0:
[  553.671222][   T33]  #0: ffffffff919f1e68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  553.671284][   T33]  #1: ffffffff8ff60878 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x175/0x610
[  553.671339][   T33] locks held by syz.2.1986/12892: 2, last CPU#0:
[  553.671356][   T33]  #0: ffff88802574e540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40
[  553.671410][   T33]  #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  553.671476][   T33] locks held by syz.1.1988/12898: 1, last CPU#0:
[  553.671492][   T33]  #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260
[  553.671557][   T33] 
[  553.671563][   T33] =============================================
[  553.671563][   T33] 
[  553.671582][   T33] NMI backtrace for cpu 0
[  553.671596][   T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  553.671620][   T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  553.671636][   T33] Call Trace:
[  553.671645][   T33]  <TASK>
[  553.671653][   T33]  dump_stack_lvl+0xe8/0x150
[  553.671691][   T33]  nmi_cpu_backtrace+0x274/0x2d0
[  553.671727][   T33]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  553.671757][   T33]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  553.671797][   T33]  sys_info+0x135/0x170
[  553.671828][   T33]  watchdog+0x1073/0x10f0
[  553.671868][   T33]  ? watchdog+0x209/0x10f0
[  553.671906][   T33]  kthread+0x38b/0x480
[  553.671933][   T33]  ? __pfx_watchdog+0x10/0x10
[  553.671961][   T33]  ? __pfx_kthread+0x10/0x10
[  553.671989][   T33]  ret_from_fork+0x514/0xb70
[  553.672019][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  553.672045][   T33]  ? __switch_to+0xc78/0x1410
[  553.672083][   T33]  ? __pfx_kthread+0x10/0x10
[  553.672110][   T33]  ret_from_fork_asm+0x1a/0x30
[  553.672152][   T33]  </TASK>
[  553.672189][   T33] Sending NMI from CPU 0 to CPUs 1:
[  553.672226][    C1] NMI backtrace for cpu 1
[  553.672240][    C1] CPU: 1 UID: 101 PID: 5296 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) 
[  553.672262][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  553.672273][    C1] RIP: 0010:unwind_next_frame+0x1b9b/0x2550
[  553.672304][    C1] Code: 74 28 80 3d eb 1b 0e 10 00 75 1f c6 05 e2 1b 0e 10 01 48 c7 c7 c0 d4 29 8c be 6f 03 00 00 48 c7 c2 60 d5 29 8c e8 45 d3 2b 00 <48> c7 c7 20 a3 f5 8f 4c 89 ee e8 d6 b7 2b 00 e8 51 8d 35 00 89 e8
[  553.672322][    C1] RSP: 0018:ffffc90000a07fa0 EFLAGS: 00000202
[  553.672339][    C1] RAX: 0000000000000001 RBX: ffffc90000a08058 RCX: 0000000000000102
[  553.672352][    C1] RDX: ffffc90000a08001 RSI: ffffffff8c8e8c60 RDI: ffffffff8c8e8c20
[  553.672367][    C1] RBP: 1ffffffff258d801 R08: ffffc90000a089f0 R09: 0000000000000000
[  553.672381][    C1] R10: ffffc90000a08098 R11: fffff52000141015 R12: ffffc90000a01000
[  553.672396][    C1] R13: ffffffff817879cf R14: ffffc90000a08048 R15: ffffc90000a08a00
[  553.672411][    C1] FS:  00007f7033c22780(0000) GS:ffff88812371f000(0000) knlGS:0000000000000000
[  553.672427][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  553.672441][    C1] CR2: 0000200000001640 CR3: 00000000387e2000 CR4: 00000000003526f0
[  553.672458][    C1] Call Trace:
[  553.672465][    C1]  <IRQ>
[  553.672476][    C1]  ? nf_hook_slow+0xc5/0x220
[  553.672495][    C1]  ? unwind_next_frame+0x8f/0x2550
[  553.672523][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  553.672549][    C1]  arch_stack_walk+0x11b/0x150
[  553.672579][    C1]  ? NF_HOOK+0x21f/0x3c0
[  553.672606][    C1]  stack_trace_save+0xa9/0x100
[  553.672630][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  553.672657][    C1]  ? __lock_acquire+0x747/0x2de0
[  553.672691][    C1]  kasan_save_track+0x3e/0x80
[  553.672715][    C1]  ? kasan_save_track+0x3e/0x80
[  553.672738][    C1]  ? kasan_save_free_info+0x40/0x50
[  553.672757][    C1]  ? __kasan_slab_free+0x5c/0x80
[  553.672782][    C1]  ? kmem_cache_free+0x182/0x650
[  553.672805][    C1]  ? nft_synproxy_eval_v4+0x36a/0x4e0
[  553.672829][    C1]  ? nft_synproxy_do_eval+0x389/0x5d0
[  553.672854][    C1]  ? nft_do_chain+0x48d/0x1b10
[  553.672879][    C1]  ? nft_do_chain_ipv4+0x195/0x290
[  553.672903][    C1]  ? nf_hook_slow+0xc5/0x220
[  553.672949][    C1]  ? nft_synproxy_eval_v4+0x36a/0x4e0
[  553.672974][    C1]  kasan_save_free_info+0x40/0x50
[  553.672994][    C1]  __kasan_slab_free+0x5c/0x80
[  553.673020][    C1]  kmem_cache_free+0x182/0x650
[  553.673048][    C1]  nft_synproxy_eval_v4+0x36a/0x4e0
[  553.673078][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  553.673105][    C1]  ? nf_ip_checksum+0x13c/0x510
[  553.673131][    C1]  nft_synproxy_do_eval+0x389/0x5d0
[  553.673161][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  553.673198][    C1]  nft_do_chain+0x48d/0x1b10
[  553.673233][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  553.673263][    C1]  ? __local_bh_enable_ip+0xd6/0x140
[  553.673290][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  553.673328][    C1]  nft_do_chain_ipv4+0x195/0x290
[  553.673353][    C1]  ? ipt_do_table+0x2b9/0x15d0
[  553.673377][    C1]  ? __pfx_nft_do_chain_ipv4+0x10/0x10
[  553.673404][    C1]  ? iptable_mangle_hook+0x18a/0x4c0
[  553.673433][    C1]  ? __pfx_nft_do_chain_ipv4+0x10/0x10
[  553.673459][    C1]  nf_hook_slow+0xc5/0x220
[  553.673481][    C1]  NF_HOOK+0x21f/0x3c0
[  553.673507][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  553.673534][    C1]  ? NF_HOOK+0x9e/0x3c0
[  553.673579][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  553.673606][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  553.673637][    C1]  ? ip_local_deliver+0x113/0x190
[  553.673670][    C1]  NF_HOOK+0x336/0x3c0
[  553.673696][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  553.673722][    C1]  ? NF_HOOK+0x9e/0x3c0
[  553.673746][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  553.673772][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  553.673797][    C1]  ? ip_rcv_core+0x88d/0xd50
[  553.673825][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  553.673849][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  553.673875][    C1]  process_backlog+0xa6b/0x18b0
[  553.673907][    C1]  ? process_backlog+0x3de/0x18b0
[  553.673944][    C1]  __napi_poll+0xaa/0x330
[  553.673972][    C1]  net_rx_action+0x61d/0xf50
[  553.674008][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  553.674055][    C1]  handle_softirqs+0x265/0x8d0
[  553.674086][    C1]  ? __alloc_skb+0x18d/0x7a0
[  553.674114][    C1]  ? __alloc_skb+0x18d/0x7a0
[  553.674142][    C1]  do_softirq+0x77/0xd0
[  553.674166][    C1]  </IRQ>
[  553.674173][    C1]  <TASK>
[  553.674180][    C1]  __local_bh_enable_ip+0x100/0x140
[  553.674207][    C1]  __alloc_skb+0x1b1/0x7a0
[  553.674238][    C1]  alloc_skb_with_frags+0xc6/0x760
[  553.674265][    C1]  sock_alloc_send_pskb+0xc69/0xd90
[  553.674301][    C1]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  553.674330][    C1]  ? __lock_acquire+0x747/0x2de0
[  553.674359][    C1]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  553.674392][    C1]  unix_stream_sendmsg+0x4c0/0xe00
[  553.674429][    C1]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  553.674454][    C1]  ? aa_sock_msg_perm+0x129/0x210
[  553.674480][    C1]  ? apparmor_socket_sendmsg+0x98/0x360
[  553.674516][    C1]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  553.674538][    C1]  sock_sendmsg_nosec+0x14e/0x190
[  553.674571][    C1]  sock_write_iter+0x2de/0x3e0
[  553.674600][    C1]  ? __pfx_sock_write_iter+0x10/0x10
[  553.674642][    C1]  do_iter_readv_writev+0x612/0x8c0
[  553.674686][    C1]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  553.674722][    C1]  ? bpf_lsm_file_permission+0x9/0x20
[  553.674753][    C1]  ? security_file_permission+0x75/0x260
[  553.674785][    C1]  ? rw_verify_area+0x203/0x4c0
[  553.674817][    C1]  vfs_writev+0x343/0x990
[  553.674844][    C1]  ? __pfx_vfs_writev+0x10/0x10
[  553.674876][    C1]  ? set_user_sigmask+0x208/0x230
[  553.674908][    C1]  ? __pfx_set_user_sigmask+0x10/0x10
[  553.674945][    C1]  ? fdget+0x16b/0x250
[  553.674978][    C1]  do_writev+0x154/0x2e0
[  553.675000][    C1]  ? __pfx_do_writev+0x10/0x10
[  553.675025][    C1]  ? __seccomp_permit_syscall+0xe7/0x2b0
[  553.675051][    C1]  do_syscall_64+0x166/0x520
[  553.675076][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.675098][    C1]  ? clear_bhb_loop+0x70/0xc0
[  553.675124][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.675147][    C1] RIP: 0033:0x7f7033cac407
[  553.675169][    C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  553.675191][    C1] RSP: 002b:00007ffffdda6660 EFLAGS: 00000202 ORIG_RAX: 0000000000000014
[  553.675214][    C1] RAX: ffffffffffffffda RBX: 00007f7033c22780 RCX: 00007f7033cac407
[  553.675230][    C1] RDX: 0000000000000002 RSI: 00007ffffdda66b0 RDI: 000000000000000b
[  553.675244][    C1] RBP: 0000564bb8f4e7c0 R08: 0000000000000000 R09: 0000000000000000
[  553.675256][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000564bb9009a40
[  553.675269][    C1] R13: 0000564bb8f48d40 R14: 0000000000000001 R15: 00007ffffdda6790
[  553.675293][    C1]  </TASK>
[  554.212778][   T33] Kernel panic - not syncing: hung_task: blocked tasks
[  555.045145][   T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  555.054297][   T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  555.064392][   T33] Call Trace:
[  555.067716][   T33]  <TASK>
[  555.070685][   T33]  vpanic+0x26f/0x710
[  555.074717][   T33]  panic+0xc5/0xd0
[  555.078492][   T33]  ? __pfx_panic+0x10/0x10
[  555.082967][   T33]  ? preempt_schedule_common+0x7f/0xd0
[  555.088480][   T33]  ? preempt_schedule_thunk+0x16/0x40
[  555.093955][   T33]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  555.100174][   T33]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  555.106395][   T33]  watchdog+0x10e7/0x10f0
[  555.110798][   T33]  ? watchdog+0x209/0x10f0
[  555.115285][   T33]  kthread+0x38b/0x480
[  555.119416][   T33]  ? __pfx_watchdog+0x10/0x10
[  555.124140][   T33]  ? __pfx_kthread+0x10/0x10
[  555.128784][   T33]  ret_from_fork+0x514/0xb70
[  555.133430][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[  555.138617][   T33]  ? __switch_to+0xc78/0x1410
[  555.143367][   T33]  ? __pfx_kthread+0x10/0x10
[  555.148010][   T33]  ret_from_fork_asm+0x1a/0x30
[  555.152847][   T33]  </TASK>
[  555.156095][   T33] Kernel Offset: disabled
[  555.160448][   T33] Rebooting in 86400 seconds..