last executing test programs:

4.693167454s ago: executing program 3 (id=265):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff5c, &(0x7f00000004c0)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

4.465242172s ago: executing program 3 (id=269):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0xac, @buffer={0x0, 0x0, 0x0}, &(0x7f00000006c0)="bc57ce2fb2b6", 0xfffffffffffffffd, 0xfeffffff, 0x6, 0x0, 0x0})

4.289856664s ago: executing program 3 (id=270):
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4004011}, 0x4880)
fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1, 0x4, 0xb8d4, 0x5, r2})
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = fcntl$dupfd(r4, 0x406, r4)
read$FUSE(r5, 0x0, 0x0)
write$tun(r5, &(0x7f0000000400)=ANY=[], 0xa2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'veth0_to_team\x00', 0x0})
syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x9, 0x100000, 0x1cc5, 0x8001, 0x4, 0x4, 0x0, 0x0, 0x1, 0x759}}, 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3)
syz_usb_connect(0x6, 0x36, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

3.683904172s ago: executing program 2 (id=273):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000180)="27031c00160014000200", 0xa}, {0x0}, {&(0x7f00000007c0)="43f8d35075f3da60f330f94c842e4f5a081a2412f81853dbf7a1e6dfdf3c", 0x1e}], 0x3}, 0x400c0c8)

3.539964974s ago: executing program 2 (id=275):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000016c0)=ANY=[@ANYBLOB="f82186dd0000110000000000000060ec970000382c00fe8000000000000000000000000000aaff0200000000000000000000000000010400000000080000718681d8f1805a50498e27de0350f2e1ac"], 0xfdef)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)

3.186033318s ago: executing program 2 (id=277):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d80)=@newtfilter={0x234, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x204, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0xe0, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xdd13}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2f}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa44a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7ff}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xec, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4000086}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x64b52d5aa67c4fd5, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x75}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xf5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfff}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}]}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x234}}, 0x0)

2.98206374s ago: executing program 2 (id=280):
r0 = syz_io_uring_setup(0x4b4, &(0x7f0000000440)={0x0, 0x86e1, 0x1, 0x0, 0xa0}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000340))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
r2 = io_uring_setup(0x35e9, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18)
getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000000040)=""/100, &(0x7f00000000c0)=0x64)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYBLOB="010001"])
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14)
syz_emit_ethernet(0x0, 0x0, &(0x7f0000000500)={0x0, 0x2, [0x640, 0x7a5, 0x891, 0x1bb]})
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x7, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000200)=""/11, 0xb}], &(0x7f0000000380)=[0xffffffff, 0x9, 0xc32, 0x5, 0x5, 0x5a5], 0x2}, 0x20)

2.744021558s ago: executing program 1 (id=281):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff5c, &(0x7f00000004c0)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2.590541929s ago: executing program 1 (id=282):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1027}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x4, 0x5, {0x5, 0x9}}]}, 0x40}}, 0x4800)

2.345515837s ago: executing program 1 (id=284):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0x6, @loopback, 0x5}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e23, 0x6, @remote, 0x200}, @in={0x2, 0x4e21, @loopback}], 0x78)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="0c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000380)={0x7, 0x7, 0x1}, &(0x7f00000003c0)=0x28)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440), 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = accept4$unix(r3, 0x0, 0x0, 0x0)
recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc2003c3)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_DESTROY$stdev(r6, 0x3b80, &(0x7f00000002c0)={0x8, r7})
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x54}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f00000000c0)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeeb}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

2.314080039s ago: executing program 2 (id=285):
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000900)=ANY=[@ANYBLOB="1201010200000040"], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xda, 0x45, 0xa1, 0x40, 0x424, 0x12c, 0x4e40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xd, "", [{{0x9, 0x4, 0x8a, 0x0, 0x0, 0xf5, 0x81, 0x89, 0x2c}}]}}]}}, 0x0)
syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x20, 0x0, {0x8, 0xb, 0x3, 0x1, 0x1, 0x5, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xb2e, 0x6, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xf, 0xab, {0x8, 0x25, 0x1, 0x81, 0x33, 0xfa, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x81, 0x0, {0x8, 0x25, 0x1, 0x3, 0x3, 0xe, 0x8}}}}}}}}]}}, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x40, 0x20001, 0x154}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0xfffff000, 0x0}}, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4)
pipe(&(0x7f0000000340))
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, 0x0, 0x4048000)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS2(r9, 0x402c542b, 0x0)
dup(r9)

2.12879468s ago: executing program 1 (id=287):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x40, r2, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4060850}, 0x400d4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc00c6211, &(0x7f0000001780))
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x34, r2, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket$unix(0x1, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000140)={r7, 0x4}, &(0x7f0000000180)=0x8)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, r6, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x207, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x48050)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r12, 0x2180}, [@IFLA_TXQLEN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

2.022262248s ago: executing program 0 (id=288):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'\x00', 0x8000})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0xaf51, 0x1e1502)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, &(0x7f0000000600)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000780)={r2, 0x0, 0x4, 0x101, 0x81})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001340)={{0x1000, 0x0, 0x1, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x100, 0x0, 0x2, 0x0, 'syz0\x00', &(0x7f0000000180)=['/dev/snd/controlC#\x00', '&!:\x00'], 0x17})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000001180)='cgroup.clone_children\x00', 0x2, 0x0)
r9 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0)
sendfile(r8, r9, 0x0, 0x38)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
setsockopt$MRT_DEL_VIF(r9, 0x0, 0xcb, &(0x7f00000001c0)={0xffffffffffffffff, 0x4, 0x8, 0xfff, @vifc_lcl_addr=@empty, @remote}, 0x10)
r10 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r10, 0x976be000)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
fcntl$lock(r3, 0x6, &(0x7f0000000080)={0x1, 0x2, 0x3, 0x1c, 0xffffffffffffffff})
ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]})
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
write(r12, 0x0, 0x0)
pread64(r10, &(0x7f0000000040)=""/21, 0x15, 0x9)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, 0x0, 0x850)
syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12010003000000406621aff7c5b804020240000102030109021b00010101d0090904000802070101dc09050102200001f6079c425e87ad07e41a336f588214fbfcaaced4aacbe292adb9be2fa3bde95054e24b907e18e205b36572dd2c6f673483b3b2de68a2b46af7afe9567deb2467f0a37b936d3946c44753f8f2fa1f6b"], &(0x7f0000000400)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x4, 0x7f, 0x4a, 0x8, 0x9}, 0x41, &(0x7f0000000300)={0x5, 0xf, 0x41, 0x1, [@generic={0x3c, 0x10, 0x2, "f67184c68117eb1a3c987bff86ed02b27c6434ede9fdb1eba1c9c67fe39aeb5173be0bfb767789457af4a36d5915137a09e7a68294ab28bea1"}]}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x402}}]})

1.515227499s ago: executing program 4 (id=290):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d80)=@newtfilter={0x234, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x204, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0xe0, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xdd13}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2f}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa44a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7ff}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xec, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4000086}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x64b52d5aa67c4fd5, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x75}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xf5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfff}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}]}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x234}}, 0x0)

1.33343971s ago: executing program 0 (id=291):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000100)={0x1, "bb59e5a4a94522d3d3f206fed1bf7761d839ac1f26c31347f597973e01faad5d", 0x3, 0x7, 0x8, 0xc000c, 0x2})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b040000000000000000020000fc00000000000000090b000100746172676589aad2e029ce880fa42394e0740000240002c00c2097e182d721929701004e4651d5455545000a000300fff550e82400000008000240000000030900010073050000000000000000020073797a3244b4043c2fcbdc"], 0x8c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000001c0)={'syztnl1\x00', <r2=>0x0, 0x7880, 0x7800, 0x19, 0x4, {{0x15, 0x4, 0x3, 0x8, 0x54, 0x64, 0x0, 0x6, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x82, 0x20, "d7fe2deb6f9492f8757e"}, @rr={0x7, 0x3, 0x75}, @lsrr={0x83, 0x7, 0x2d, [@multicast2]}, @timestamp_prespec={0x44, 0x1c, 0x36, 0x3, 0x7, [{@rand_addr=0x64010102, 0x6}, {@private=0xa010102, 0x152}, {@private=0xa010101, 0x2995}]}, @cipso={0x86, 0xe, 0x3, [{0x2, 0x8, "a92c329068bb"}]}]}}}}})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
memfd_create(&(0x7f0000000080)='%\x00', 0x3)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2b, &(0x7f0000000000)=0x3, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x1, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@deltfilter={0x39d0, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0x10}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x395c, 0x2, [@TCA_BPF_ACT={0x1584, 0x1, [@m_skbmod={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="9fee821354ab"}]}, {0xc7, 0x6, "107e3d47b7379e60575f7a3f3ccfd96fbeb6f012e7b654aec9be079acd62f0d93d13cbbbc17927f43741f1a5afa0bb41d9de7dc3b6eea4cb216177d22f25d4b46adfbb92b03154dc1a11036c965e0b3c45bc9e926eeeddfbfa55b0ffa90a41dae374d4f7a7edcc3e40cf7d4c5f51d09da11d999d3c551a13c5d19fbbe2107205ac1bd083f8ecc064ccdb2fcdafd3aa9a8f4e89c3fbca9bf2401ecfdc9cb93c13d065cbc3296d91b48af9d6c76f82e3e64f2d13ba0ab91159e0b198d462b7ec86b20b05"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x11c, 0x19, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0x1ff, 0x2, 0xf, 0x7fffffff}, {0xffff, 0xc, 0x0, 0x4}, {0x3, 0xfa, 0x6, 0x7fffffff}, {0x8, 0x9, 0x9, 0x7f}, {0x4, 0x9, 0x10, 0x9}, {0x7, 0x3, 0x1, 0x1}, {0x800, 0xe6, 0x6e, 0x7}, {0x3, 0x8, 0x49, 0x1}]}]}, {0xad, 0x6, "1d9f18e0c4d95998f976a2d5f056dce1727e2fe761fdd0d25b3efe280ba9c08a4ff94ab252b075b2b36e72ef8f4e81b3f161f7b293b969af9a25cf74dc1364bdd8d31025e761a8d2dd59cec9f862f717f362441a204783978d67ecc786b27e0facebef63d4c118c29b31ef523bd6b7402f5eaed0bfde5f81c562067d23c8f1065721f7988bf852ae3096c7e3bafaddbf85e022910e9843f656f64c7f31765f41d53371baf327404090"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x13c, 0xd, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x22, 0xb, 0x0, 0x5, 0x8}}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xa}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7c5b}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x44fd}]}, {0xd6, 0x6, "6027b63ddc593698981925f9cb8224e9a110e9adbdede49ffb46a56d1ec4bc567bf13836574ab03e39f3c00f62cdc59c7a69aa975adbf777d3b98b58bfbe330afe1d3350dd588649dab7452789dd478317a334ae105c5aa7e553e4b11af6588d5db09d3896259b80574894c5a377387d760a46dd1c52345ac6fe27ebd5d0069da69d5d2d10bcc931c00bf21c0b0af237b1c6a20877bb672c57d9c672957b8e8ffde29bb6e3e85c2adf3bae73f5b6fa0bd8c837442979a5f88ce164665863fbbdddca05586bf8c180442f40c455ff49cdbe29"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x1060, 0x9, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x1, 0x1, 0x9, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfff, 0x5, 0x10000000, 0x6, 0x7}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xf8, 0x1d, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x611, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0xdbe, 0x10000000, 0x3, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x401, 0x6, 0x20000000, 0x5, 0x9ec}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1137, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x141a, 0x5}}]}, {0x76, 0x6, "52cec30655d7758fc4cd5d9a84a96adb0a79bbaad14b35e6f0fcab037596de8747c20ac64096727b6e3c015cdd2095dea90b385f92ea6659cbb1bff0d9d0f73378017620cb16f66905c8b5ff465e52a4ae395061bbe127f1c61200860cbc6f640f2a2651993b65bce15591335d6144075aaf"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0xd0, 0x1b, 0x0, 0x0, {{0x7}, {0x4}, {0xa7, 0x6, "fc8d3f8ee67f9cfa6728b570fe60d32daa49bc5d0bc0f36c9806c1f14ac183c0b0debf2fdc2bdaefeed029e939128b773a4ba3f93bc4cfee096e008c2d2d2279b9af786c34673cb7da21e0756e26a6d1758d92f6df9ea22afc490aed7943a0d13b9ba35db568fa6404f86f0887ee014bfc76fd3a1a0dfcb0ceea0510b504ae0b96e5a93fa5f5a64f53fb914fb2f39ae22ca26ee82685174c98998d292b0fca48eaff42"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xee}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_ACT={0x2398, 0x1, [@m_xt={0x121c, 0xd, 0x0, 0x0, {{0x7}, {0x1134, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x102a, 0x6, {0x6, 'raw\x00', 0x6, 0x8, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xb3, 0x6, {0x7ff, 'security\x00', 0x5, 0x400, "02fd273ee4c1077a76ec70d922213860cee88c90c69eecc1741763cfed9bd50c5f86b74512830a8aefc2b73e0ffb7c4d9c5c0217f398c73a3dc83085787ab4c4cf9c6a38bd0f26c2a1e38a064ae66f69ead62ee7f406388d22a3d1555763e9eaecfd7da238248a5d5fe6210baf686f5032e992822a208acfd6250fcf60f1a01890867d651633327923"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0xc2, 0x6, "03d0b5d8d5390d6ceb08e9ed88e2630ec8a838b952e20c5f4664f8015e2ea85f96c1de0b5aaa94c9347499ae870a6f25af7f23c49a3af8fe6c5d30d1c7318fdcbcf18f5672a175785afd3f26420250e12efa7e3bbf87b6c32fb2f093c9f9e73a61129b9abb91bc9eab406d57626717515259a7eaa6bebc49afef4c5c03bc9d3c2a0772e8c4a8baf440b7c79d69cef187ad048392c0075ce42e26e9ad5d069fe5949646ff0ef7a6df8e138cbfad4cf0d208d3f5270eff3b39c3e0dc0c5e37"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_xt={0x1034, 0x17, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x9f90ac9fb935c9a3}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x144, 0x11, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xc0, 0x7, 0x10000000, 0x3, 0x8}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7ff}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x75df}]}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xd}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x10001}, @IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xff95}]}]}, {0x89, 0x6, "39943f9a46b8c37a6dc1eeeae2e7b80ad1da3a9e8b05163ba8b4bfc47f3e742c302b98bd71e02441aa0a87bcb11e51aab2ebe311065c84a21186f5ba86065a2918cfb5b99d2757f5d02c6e2580a10fba4c642b844498425c058d46095456fb7a358abadd9b11a2a941e37aba0c091941a0bffd9ef83d8f5dfb1634d62af30d0bba77b24617"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x21}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x393e}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x9}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}]}, 0x39d0}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r8 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
symlinkat(0x0, 0xffffffffffffffff, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc5000001)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000005000)=ANY=[@ANYBLOB="1d0000000a00000006000000ff0180e1fc425d81043670ccdade57d36cc2ba54bef91e2747560b0000e885eb18aa97", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000500"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000005080)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0xe4, 0x63, &(0x7f0000000140)=""/99, 0x41100, 0x34, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r4, r9, 0xffffffffffffffff], &(0x7f0000000580)=[{0x2, 0x3, 0x9, 0xc}, {0x5, 0x1, 0x2, 0xb}, {0x1, 0x5, 0xf, 0xa}, {0x0, 0x5, 0xb, 0x1}], 0x10, 0x6}, 0x94)

1.323964721s ago: executing program 1 (id=292):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv4=@multicast1, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x140, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xd8010000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3e0)

1.258215292s ago: executing program 4 (id=293):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d00000000002010400000000000000000a000000440001800c00028005400100210000002c0001801400030020010000000000000000000000000001140004002f000000000000000000ffffac1414aa06000340000200003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400"], 0xd0}}, 0x0)

969.988804ms ago: executing program 4 (id=294):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c0, 0x98, 0x138, 0x138, 0x98, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1100000000000000}}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x9}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0xffffffff, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x32}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3, 0x8}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x2, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520)

898.29537ms ago: executing program 1 (id=295):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x5, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="40050b00000020891ab2"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="20d98604b700"], 0x0, 0x0, 0x0, 0x0})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x45, 0x2142, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101840)
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000080)={0x2, 0x0, 0x9, {0xe7ff, 0x0, 0x406, 0xadd7}})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r5, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000})
ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r6, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)})
socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e20, 0xfffffffd, @local}, 0x0, {[0x6, 0x0, 0x1, 0x2, 0x0, 0x9]}}, 0x5c)
r8 = socket$inet6(0xa, 0x400000000001, 0x100)
sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e1d, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]})
fsopen(0x0, 0x1)
close_range(r9, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)

744.617472ms ago: executing program 4 (id=296):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x20, 0x0)

658.559277ms ago: executing program 4 (id=297):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff5c, &(0x7f00000004c0)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

566.119615ms ago: executing program 3 (id=298):
socket$kcm(0x10, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
renameat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file4\x00', r0, &(0x7f0000000a40)='./file2\x00', 0x4)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x403}, 0x8, 0x10, 0x0, 0x0, 0x20715, 0xffffffffffffffff, 0xfffffffffffffe76, 0x0, 0x0, 0x10, 0x9}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c)
listen(r4, 0xc323)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9})
ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405668, &(0x7f00000000c0)={0x0, 0xfdfd, 0x1, "0000087aba0f75501eb6d1f14fa30000000000000016d2f0ffff00", 0x32315241})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x28}}]}}]}, 0x48}}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newtfilter={0x44, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x7}, {0xfff1, 0x4}}, [@filter_kind_options=@f_route={{0xff21}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_TO={0x8, 0x2, 0xfa}]}}]}, 0x44}}, 0x8080)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x7ff)
ioctl$RTC_ALM_READ(r9, 0x40187013, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x149a82, 0x0)

563.378701ms ago: executing program 4 (id=299):
socket$inet6_sctp(0xa, 0x1, 0x84)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10)
write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}})
getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r5, 0x0, 0xc080)
r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004)
ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000280)={0x57, 0x7ff, 0x8000, {0xd, 0x3}, {0x12, 0x3}, @cond=[{0x2, 0x4, 0xfff9, 0x6, 0x2}, {0x3e, 0x6, 0xf, 0x0, 0x1, 0x8593}]})
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r9, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
shutdown(r9, 0x1)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x1c}}, 0xc0)
sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840)

389.906315ms ago: executing program 0 (id=300):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b4}, 0x8, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb})
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00')
socket$inet_tcp(0x2, 0x1, 0x0)
write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0x8, 0x200}, @val={0x0, 0x4, 0x6, 0x1, 0x6, 0x43}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x5c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @empty}, {0x4e26, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "b47233e19f10929b698cc6876071b37f37d06232afe3700d", "0dcc0f9b403a187fd0ea12d6db7ed3b59a831af9887dc7a7eb90392c61dd8f00"}}}}, 0x6a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x1, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})

389.659186ms ago: executing program 3 (id=301):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="280000000000000029ff9700040000002b011000300004000413"], 0x28}, 0x4004004)

290.023001ms ago: executing program 2 (id=302):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="16000000246837f7", 0x8}], 0x1)
r1 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x61c500, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000280)) (async)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000280)={<r4=>0x0})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000400)={r4, &(0x7f00000002c0)=""/231})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xc0, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x94, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_virt_wifi\x00'}, @TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x9, 0x7, 0x3e, 0x800}, {0x7, 0x10, 0x5, 0x7}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x1, 0x5, 0x5127, 0x10001}]}}]}}]}, 0xc0}}, 0x20044004)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e22, @multicast2}}, [0x1, 0x2, 0x8, 0x80000001, 0xca, 0xc, 0xfffffffffffffff9, 0xffff, 0x8, 0x5, 0x5, 0x9, 0x6b, 0x3, 0x101]}, &(0x7f00000001c0)=0x100)
r9 = userfaultfd(0x801)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
syz_usb_connect(0x2, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES16], 0x0) (async)
syz_usb_connect(0x2, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES16], 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000200)=0x3, 0x4)

268.334181ms ago: executing program 0 (id=303):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000007000000020000000300000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000400000000000000000000000000000000000000000000000001000"], 0x50)

137.782842ms ago: executing program 0 (id=304):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2f000000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x54}}, 0x0)

110.002331ms ago: executing program 3 (id=305):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef)

0s ago: executing program 0 (id=306):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00)
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
close(r5)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0)
keyctl$update(0x2, 0x0, 0x0, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts.
[   71.122870][ T5612] cgroup: Unknown subsys name 'net'
[   71.253853][ T5612] cgroup: Unknown subsys name 'cpuset'
[   71.262947][ T5612] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   72.667990][ T5612] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   74.805022][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   74.824849][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   74.834846][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   74.844344][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.846063][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   74.855424][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   74.862517][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   74.868945][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   74.884496][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   74.884975][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.892846][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.908157][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   74.909195][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.916057][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   74.925822][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   74.930747][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.938288][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   74.947695][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.952457][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   74.958975][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.967636][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   74.980962][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   74.988382][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   74.997515][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.997725][ T4940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   75.805286][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.813659][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.821438][ T5640] bridge_slave_0: entered allmulticast mode
[   75.830642][ T5640] bridge_slave_0: entered promiscuous mode
[   75.884515][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.891750][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.898891][ T5640] bridge_slave_1: entered allmulticast mode
[   75.908801][ T5640] bridge_slave_1: entered promiscuous mode
[   76.002948][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.037797][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.154103][ T5640] team0: Port device team_slave_0 added
[   76.165215][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.172558][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.179851][ T5643] bridge_slave_0: entered allmulticast mode
[   76.187199][ T5643] bridge_slave_0: entered promiscuous mode
[   76.211240][ T5640] team0: Port device team_slave_1 added
[   76.234797][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.242158][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.249306][ T5643] bridge_slave_1: entered allmulticast mode
[   76.256728][ T5643] bridge_slave_1: entered promiscuous mode
[   76.269203][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.276344][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.283622][ T5642] bridge_slave_0: entered allmulticast mode
[   76.290712][ T5642] bridge_slave_0: entered promiscuous mode
[   76.315152][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.322453][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.329682][ T5644] bridge_slave_0: entered allmulticast mode
[   76.336930][ T5644] bridge_slave_0: entered promiscuous mode
[   76.362224][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.369409][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.376760][ T5642] bridge_slave_1: entered allmulticast mode
[   76.383740][ T5642] bridge_slave_1: entered promiscuous mode
[   76.400504][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.407477][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.433464][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.445517][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.453527][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.460863][ T5644] bridge_slave_1: entered allmulticast mode
[   76.468064][ T5644] bridge_slave_1: entered promiscuous mode
[   76.502608][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.509665][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.535913][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.557962][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.567524][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.574911][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.582933][ T5645] bridge_slave_0: entered allmulticast mode
[   76.590034][ T5645] bridge_slave_0: entered promiscuous mode
[   76.602733][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.630623][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.648489][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.655881][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.663309][ T5645] bridge_slave_1: entered allmulticast mode
[   76.670423][ T5645] bridge_slave_1: entered promiscuous mode
[   76.678983][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.709774][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.747265][ T5642] team0: Port device team_slave_0 added
[   76.756904][ T5642] team0: Port device team_slave_1 added
[   76.764815][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.776105][ T5643] team0: Port device team_slave_0 added
[   76.793684][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.821268][ T5643] team0: Port device team_slave_1 added
[   76.838460][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.882215][ T5640] hsr_slave_0: entered promiscuous mode
[   76.889106][ T5640] hsr_slave_1: entered promiscuous mode
[   76.907309][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.914474][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.940966][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.954873][ T5644] team0: Port device team_slave_0 added
[   76.970922][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.977917][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.003888][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.024930][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.032221][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.058269][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.061206][ T5628] Bluetooth: hci2: command tx timeout
[   77.069840][ T5639] Bluetooth: hci4: command tx timeout
[   77.075375][ T5630] Bluetooth: hci3: command tx timeout
[   77.080877][   T50] Bluetooth: hci0: command tx timeout
[   77.086751][ T4940] Bluetooth: hci1: command tx timeout
[   77.104103][ T5644] team0: Port device team_slave_1 added
[   77.111364][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.118336][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.144753][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.157536][ T5645] team0: Port device team_slave_0 added
[   77.166944][ T5645] team0: Port device team_slave_1 added
[   77.264000][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.271158][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.297733][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.327332][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.334569][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.360893][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.379640][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.386906][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.414021][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.432385][ T5643] hsr_slave_0: entered promiscuous mode
[   77.438680][ T5643] hsr_slave_1: entered promiscuous mode
[   77.445278][ T5643] debugfs: 'hsr0' already exists in 'hsr'
[   77.451310][ T5643] Cannot create hsr debugfs directory
[   77.463550][ T5642] hsr_slave_0: entered promiscuous mode
[   77.469858][ T5642] hsr_slave_1: entered promiscuous mode
[   77.476532][ T5642] debugfs: 'hsr0' already exists in 'hsr'
[   77.482393][ T5642] Cannot create hsr debugfs directory
[   77.488676][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.495685][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.521591][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.624234][ T5644] hsr_slave_0: entered promiscuous mode
[   77.631204][ T5644] hsr_slave_1: entered promiscuous mode
[   77.637406][ T5644] debugfs: 'hsr0' already exists in 'hsr'
[   77.643415][ T5644] Cannot create hsr debugfs directory
[   77.722169][ T5645] hsr_slave_0: entered promiscuous mode
[   77.728474][ T5645] hsr_slave_1: entered promiscuous mode
[   77.734934][ T5645] debugfs: 'hsr0' already exists in 'hsr'
[   77.740867][ T5645] Cannot create hsr debugfs directory
[   78.139041][ T5640] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.151316][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   78.159461][ T5640] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.169459][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   78.177275][ T5640] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.187039][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   78.195026][ T5640] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.205768][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   78.284678][ T5643] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   78.294592][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   78.308561][ T5643] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   78.321097][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   78.329007][ T5643] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   78.338755][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   78.347090][ T5643] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   78.357125][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   78.453844][ T5644] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.464486][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   78.478744][ T5644] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.490363][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   78.498519][ T5644] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.508236][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   78.521009][ T5644] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.531841][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   78.617551][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.642848][ T5645] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.653643][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   78.662514][ T5645] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.672911][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   78.691363][ T5645] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.702287][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   78.721375][ T5645] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.731325][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   78.752710][ T5640] 8021q: adding VLAN 0 to HW filter on device team0
[   78.792727][  T974] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.800438][  T974] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.862490][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.869609][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.884857][ T5642] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   78.895095][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   78.903386][ T5642] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.913285][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   78.921754][ T5642] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.932386][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   78.953618][ T5642] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.964598][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   78.998923][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.083920][ T5643] 8021q: adding VLAN 0 to HW filter on device team0
[   79.095496][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.121710][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.128837][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.141579][ T5630] Bluetooth: hci3: command tx timeout
[   79.147423][ T5628] Bluetooth: hci2: command tx timeout
[   79.147445][   T50] Bluetooth: hci0: command tx timeout
[   79.153493][ T5630] Bluetooth: hci4: command tx timeout
[   79.160412][  T974] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.165551][ T4940] Bluetooth: hci1: command tx timeout
[   79.171562][  T974] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.226005][ T5644] 8021q: adding VLAN 0 to HW filter on device team0
[   79.259690][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.266832][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.276187][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.283325][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.346575][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.395126][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.429627][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.489069][ T5645] 8021q: adding VLAN 0 to HW filter on device team0
[   79.505962][ T5642] 8021q: adding VLAN 0 to HW filter on device team0
[   79.523927][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.531079][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.556873][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.564020][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.579517][ T5640] veth0_vlan: entered promiscuous mode
[   79.590020][  T974] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.597292][  T974] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.611866][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.647450][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.654767][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.671609][ T5640] veth1_vlan: entered promiscuous mode
[   79.688674][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.771439][ T5643] veth0_vlan: entered promiscuous mode
[   79.804144][ T5640] veth0_macvtap: entered promiscuous mode
[   79.817641][ T5643] veth1_vlan: entered promiscuous mode
[   79.837708][ T5640] veth1_macvtap: entered promiscuous mode
[   79.891001][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.911054][ T5644] veth0_vlan: entered promiscuous mode
[   79.926353][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.936869][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.955105][ T5644] veth1_vlan: entered promiscuous mode
[   79.982590][   T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.993706][   T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.011488][ T5643] veth0_macvtap: entered promiscuous mode
[   80.021781][   T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.032827][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.047591][   T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.063679][ T5643] veth1_macvtap: entered promiscuous mode
[   80.144196][ T5644] veth0_macvtap: entered promiscuous mode
[   80.179798][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.193113][ T5644] veth1_macvtap: entered promiscuous mode
[   80.235634][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.246165][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.248547][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.296196][ T5645] veth0_vlan: entered promiscuous mode
[   80.318040][   T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.327825][   T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.349062][   T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.358782][   T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.376104][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.385193][ T5642] veth0_vlan: entered promiscuous mode
[   80.394315][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.406630][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.414145][ T5645] veth1_vlan: entered promiscuous mode
[   80.425471][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.447268][ T5642] veth1_vlan: entered promiscuous mode
[   80.458352][   T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.469808][   T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.501797][   T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.536620][ T5640] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   80.547425][   T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.614784][  T974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.636835][  T974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.745628][ T5719] bond1: (slave veth0_macvtap): Device is not bonding slave
[   80.753489][ T5719] bond1: option active_slave: invalid value (veth0_macvtap)
[   80.764861][ T5719] bond1 (unregistering): Released all slaves
[   80.791256][ T5642] veth0_macvtap: entered promiscuous mode
[   80.809492][  T974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.821277][  T974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.832576][ T5642] veth1_macvtap: entered promiscuous mode
[   80.846788][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.862344][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.879448][ T5645] veth0_macvtap: entered promiscuous mode
[   80.975533][ T5645] veth1_macvtap: entered promiscuous mode
[   80.994263][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.999316][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.025302][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.057562][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.137770][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.157975][   T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.182728][   T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.213055][   T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.230503][ T4940] Bluetooth: hci1: command tx timeout
[   81.236292][ T4940] Bluetooth: hci4: command tx timeout
[   81.241981][ T5630] Bluetooth: hci2: command tx timeout
[   81.248409][ T5628] Bluetooth: hci0: command tx timeout
[   81.250105][   T50] Bluetooth: hci3: command tx timeout
[   81.266759][   T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.308681][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.333202][ T5727] Zero length message leads to an empty skb
[   81.375556][ T5732] netlink: 'syz.2.3': attribute type 18 has an invalid length.
[   81.384399][ T5732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   81.498121][   T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.528054][   T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.579473][   T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.596481][   T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.627715][   T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.675452][   T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.696444][   T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.713873][ T5710] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   81.727981][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.750381][   T59] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.756749][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.831287][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.849825][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.870370][   T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   81.883385][ T5710] usb 2-1: Using ep0 maxpacket: 32
[   81.904898][ T5710] usb 2-1: config 8 has an invalid interface number: 97 but max is 0
[   81.932272][ T5710] usb 2-1: config 8 has no interface number 0
[   81.945525][ T5710] usb 2-1: config 8 interface 97 altsetting 9 endpoint 0xA has an invalid bInterval 0, changing to 7
[   81.965224][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.002158][ T5710] usb 2-1: config 8 interface 97 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64
[   82.002611][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.024834][ T5710] usb 2-1: config 8 interface 97 has no altsetting 0
[   82.043371][ T5710] usb 2-1: New USB device found, idVendor=1199, idProduct=68ab, bcdDevice=10.61
[   82.054684][   T24] usb 5-1: Using ep0 maxpacket: 16
[   82.073038][   T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[   82.092748][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.108034][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   82.123489][ T5710] usb 2-1: Product: syz
[   82.134027][ T5710] usb 2-1: Manufacturer: syz
[   82.138956][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.141868][ T5710] usb 2-1: SerialNumber: syz
[   82.156509][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00
[   82.175330][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.204288][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.258169][   T24] usb 5-1: config 0 descriptor??
[   82.482105][ T5710] hub 2-1:8.97: bad descriptor, ignoring hub
[   82.506822][ T5710] hub 2-1:8.97: probe with driver hub failed with error -5
[   82.523377][ T5710] sierra 2-1:8.97: Sierra USB modem converter detected
[   82.561902][ T5710] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[   82.601831][ T5725] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   82.637614][ T5710] usb 2-1: Sierra USB modem converter now attached to ttyUSB1
[   82.695135][   T24] apple 0003:05AC:027C.0001: reserved main item tag 0xd
[   82.699570][ T5766] netlink: 'syz.3.16': attribute type 1 has an invalid length.
[   82.718969][   T24] apple 0003:05AC:027C.0001: unexpected long global item
[   82.737365][   T24] apple 0003:05AC:027C.0001: parse failed
[   82.749801][ T5710] usb 2-1: USB disconnect, device number 2
[   82.750302][ T5725] usb 3-1: device descriptor read/64, error -71
[   82.760056][   T24] apple 0003:05AC:027C.0001: probe with driver apple failed with error -22
[   82.851142][ T5710] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[   82.863314][ T5768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.907225][   T24] usb 5-1: USB disconnect, device number 2
[   82.916009][ T5710] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[   82.947044][ T5710] sierra 2-1:8.97: device disconnected
[   82.948408][ T5770] netlink: 5 bytes leftover after parsing attributes in process `syz.3.18'.
[   83.009928][ T5768] loop8: detected capacity change from 0 to 7
[   83.020300][ T5725] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   83.124783][ T5768] Dev loop8: unable to read RDB block 7
[   83.131581][ T5768]  loop8: unable to read partition table
[   83.138152][ T5768] loop8: partition table beyond EOD, truncated
[   83.155806][ T5768] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[   83.170858][ T5725] usb 3-1: device descriptor read/64, error -71
[   83.290431][ T5725] usb usb3-port1: attempt power cycle
[   83.300453][   T50] Bluetooth: hci3: command tx timeout
[   83.305970][ T4940] Bluetooth: hci4: command tx timeout
[   83.306021][ T5630] Bluetooth: hci0: command tx timeout
[   83.311732][ T4940] Bluetooth: hci1: command tx timeout
[   83.317404][ T5639] Bluetooth: hci2: command tx timeout
[   83.340073][  T808] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   83.504458][  T808] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[   83.529282][ T5780] input: syz0 as /devices/virtual/input/input5
[   83.546246][  T808] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   83.577000][  T808] usb 4-1: Product: syz
[   83.588565][  T808] usb 4-1: SerialNumber: syz
[   83.610514][  T808] usb 4-1: config 0 descriptor??
[   83.662071][ T5725] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   83.707736][ T5725] usb 3-1: device descriptor read/8, error -71
[   83.748745][ T5785] bond1: (slave veth0_macvtap): Device is not bonding slave
[   83.774414][ T5785] bond1: option active_slave: invalid value (veth0_macvtap)
[   83.818787][ T5785] bond1 (unregistering): Released all slaves
[   83.960288][ T5725] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   83.992055][ T5725] usb 3-1: device descriptor read/8, error -71
[   84.039727][ T5788] netlink: 'syz.4.25': attribute type 10 has an invalid length.
[   84.053047][ T5773] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   84.058257][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.081566][ T5788] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   84.113241][ T5725] usb usb3-port1: unable to enumerate USB device
[   84.151571][ T5773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19'.
[   84.328361][ T5793] input: syz0 as /devices/virtual/input/input6
[   84.457500][ T5797] netlink: 'syz.4.28': attribute type 1 has an invalid length.
[   84.770375][ T5710] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   84.943731][ T5710] usb 1-1: not running at top speed; connect to a high speed hub
[   84.978287][ T5710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   85.009478][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.018573][ T5710] usb 1-1: Product: syz
[   85.027831][ T5710] usb 1-1: Manufacturer: syz
[   85.039519][ T5710] usb 1-1: SerialNumber: syz
[   85.140108][   T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   85.348564][ T5803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.376437][ T5803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.391551][ T5798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.422861][ T5803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.433480][ T5798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.473463][ T5803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.498675][ T5814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'.
[   85.595497][ T5818] netlink: 'syz.2.36': attribute type 10 has an invalid length.
[   85.637405][ T5818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.36'.
[   85.727519][ T5710] cdc_ncm 1-1:1.0: bind() failure
[   85.778389][ T5710] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   85.783325][ T5822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'.
[   85.799722][ T5710] cdc_ncm 1-1:1.1: bind() failure
[   85.828766][ T5710] usb 1-1: USB disconnect, device number 2
[   85.965297][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[   85.977395][   T24] usb 5-1: no configurations
[   85.982751][   T24] usb 5-1: can't read configurations, error -22
[   86.214956][ T5710] usb 4-1: USB disconnect, device number 2
[   86.296916][ T5833] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   86.384515][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'.
[   86.403031][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.411105][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.418739][ T5840] netlink: 'syz.3.44': attribute type 10 has an invalid length.
[   86.443670][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.455383][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.530871][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.542027][ T5840] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   86.732598][ T5847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'.
[   86.750486][   T11] cfg80211: failed to load regulatory.db
[   87.301797][ T5710] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   87.500983][ T5710] usb 4-1: Using ep0 maxpacket: 16
[   87.520122][ T5716] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   87.536036][ T5710] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.570252][ T5710] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[   87.623748][ T5710] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   87.660669][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   87.693795][ T5710] usb 4-1: SerialNumber: syz
[   87.722294][ T5716] usb 5-1: not running at top speed; connect to a high speed hub
[   87.749890][ T5716] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   87.783139][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.825943][ T5716] usb 5-1: Product: syz
[   87.842614][ T5716] usb 5-1: Manufacturer: syz
[   87.859406][ T5716] usb 5-1: SerialNumber: syz
[   87.986921][   T29] audit: type=1326 audit(1782934063.696:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.3.48" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402bb9de59 code=0x7ffc0000
[   88.069013][   T29] audit: type=1326 audit(1782934063.736:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.3.48" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f402bb9de59 code=0x7ffc0000
[   88.159535][   T29] audit: type=1326 audit(1782934063.736:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.3.48" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402bb9de59 code=0x7ffc0000
[   88.229439][ T5874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.240352][   T29] audit: type=1326 audit(1782934063.736:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.3.48" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f402bb9de59 code=0x7ffc0000
[   88.265311][ T5874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.307139][   T29] audit: type=1326 audit(1782934063.736:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.3.48" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402bb9de59 code=0x7ffc0000
[   88.346115][   T29] audit: type=1326 audit(1782934063.736:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.3.48" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f402bb9de59 code=0x7ffc0000
[   88.373625][ T5876] netlink: 'syz.2.56': attribute type 1 has an invalid length.
[   88.430129][   T29] audit: type=1326 audit(1782934063.736:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.3.48" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402bb9de59 code=0x7ffc0000
[   88.507055][   T29] audit: type=1326 audit(1782934063.736:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.3.48" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402bb9de59 code=0x7ffc0000
[   88.545811][   T29] audit: type=1326 audit(1782934063.736:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.3.48" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f402bb9de59 code=0x7ffc0000
[   88.631409][ T5716] cdc_ncm 5-1:1.0: bind() failure
[   88.646665][   T29] audit: type=1326 audit(1782934063.736:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.3.48" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402bb9de59 code=0x7ffc0000
[   88.683562][ T5716] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[   88.700028][ T5716] cdc_ncm 5-1:1.1: bind() failure
[   88.738943][ T5716] usb 5-1: USB disconnect, device number 5
[   89.072562][ T5896] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   89.095791][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'.
[   89.451263][ T5904] FAULT_INJECTION: forcing a failure.
[   89.451263][ T5904] name failslab, interval 1, probability 0, space 0, times 1
[   89.480993][ T5904] CPU: 0 UID: 0 PID: 5904 Comm: syz.4.68 Not tainted syzkaller #0 PREEMPT(full) 
[   89.481019][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   89.481036][ T5904] Call Trace:
[   89.481044][ T5904]  <TASK>
[   89.481052][ T5904]  dump_stack_lvl+0xe8/0x150
[   89.481080][ T5904]  should_fail_ex+0x40c/0x560
[   89.481114][ T5904]  should_failslab+0xa8/0x100
[   89.481137][ T5904]  kmem_cache_alloc_node_noprof+0xb3/0x610
[   89.481164][ T5904]  ? local_lock_release+0x9c/0x160
[   89.481186][ T5904]  ? __alloc_skb+0x1d7/0x7a0
[   89.481205][ T5904]  ? __alloc_skb+0x1d7/0x7a0
[   89.481237][ T5904]  __alloc_skb+0x1d7/0x7a0
[   89.481263][ T5904]  netlink_sendmsg+0x5d4/0xb40
[   89.481297][ T5904]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.481327][ T5904]  ? aa_sock_msg_perm+0xf1/0x1b0
[   89.481358][ T5904]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.481382][ T5904]  sock_sendmsg_nosec+0x13a/0x180
[   89.481414][ T5904]  ____sys_sendmsg+0x54e/0x850
[   89.481443][ T5904]  ? __pfx_____sys_sendmsg+0x10/0x10
[   89.481476][ T5904]  ? import_iovec+0x73/0xa0
[   89.481502][ T5904]  ___sys_sendmsg+0x2a5/0x360
[   89.481525][ T5904]  ? __lock_acquire+0x683/0x2cf0
[   89.481548][ T5904]  ? __pfx____sys_sendmsg+0x10/0x10
[   89.481601][ T5904]  ? __fget_files+0x2a/0x420
[   89.481620][ T5904]  ? __fget_files+0x3a2/0x420
[   89.481647][ T5904]  __x64_sys_sendmsg+0x1b1/0x290
[   89.481674][ T5904]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   89.481714][ T5904]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.481734][ T5904]  do_syscall_64+0x174/0x580
[   89.481756][ T5904]  ? trace_irq_disable+0x3b/0x140
[   89.481780][ T5904]  ? clear_bhb_loop+0x40/0x90
[   89.481800][ T5904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.481817][ T5904] RIP: 0033:0x7f45b1f9de59
[   89.481837][ T5904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.481849][ T5904] RSP: 002b:00007f45b2de1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   89.481863][ T5904] RAX: ffffffffffffffda RBX: 00007f45b2225fa0 RCX: 00007f45b1f9de59
[   89.481873][ T5904] RDX: 0000000000004800 RSI: 0000200000001200 RDI: 0000000000000003
[   89.481882][ T5904] RBP: 00007f45b2de1090 R08: 0000000000000000 R09: 0000000000000000
[   89.481890][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.481898][ T5904] R13: 00007f45b2226038 R14: 00007f45b2225fa0 R15: 00007f45b234fa48
[   89.481919][ T5904]  </TASK>
[   89.840740][ T5725] usb 4-1: USB disconnect, device number 3
[   89.865794][ T5906] netlink: 5 bytes leftover after parsing attributes in process `syz.3.69'.
[   89.979601][ T5908] syz.4.70 uses obsolete (PF_INET,SOCK_PACKET)
[   90.771003][ T5934] vlan0: entered promiscuous mode
[   90.807201][ T5936] netlink: 'syz.4.81': attribute type 10 has an invalid length.
[   91.059041][ T5938] gre0: entered promiscuous mode
[   91.083431][ T5938] gre0: entered allmulticast mode
[   91.240599][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'.
[   91.250304][ T5944] capability: warning: `syz.3.83' uses deprecated v2 capabilities in a way that may be insecure
[   91.369821][ T5951] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   91.419886][ T5955] iommufd_mock iommufd_mock1: Adding to iommu group 1
[   92.137645][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'.
[   92.579580][ T5987] netlink: 48 bytes leftover after parsing attributes in process `syz.3.94'.
[   92.680699][ T5986] netlink: 48 bytes leftover after parsing attributes in process `syz.3.94'.
[   92.887969][ T5993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.96'.
[   93.075879][ T5998] vlan0: entered promiscuous mode
[   93.155339][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'.
[   93.587119][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'.
[   94.041085][ T6034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.113'.
[   94.141739][ T5357] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   94.161279][ T6038] input: syz0 as /devices/virtual/input/input7
[   94.312922][ T5357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.331685][ T5357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.373297][ T5357] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   94.449602][ T5357] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   94.474786][ T5357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.513532][ T5357] usb 5-1: config 0 descriptor??
[   94.648179][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'.
[   94.951779][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'.
[   95.040054][ T5725] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   95.073110][ T5357] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   95.240488][ T5725] usb 2-1: Using ep0 maxpacket: 16
[   95.258490][ T5725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.280225][ T5357] usb 5-1: USB disconnect, device number 6
[   95.312534][ T5725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.346158][ T5725] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   95.377177][ T5725] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   95.403883][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.462719][ T5725] usb 2-1: config 0 descriptor??
[   95.947420][ T6071] process 'syz.0.126' launched './file0' with NULL argv: empty string added
[   96.279909][ T6082] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   96.450152][  T807] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   96.560262][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'.
[   96.600878][  T807] usb 5-1: Using ep0 maxpacket: 8
[   96.616693][  T807] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[   96.634711][  T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.647727][  T807] usb 5-1: Product: syz
[   96.654619][  T807] usb 5-1: Manufacturer: syz
[   96.662355][  T807] usb 5-1: SerialNumber: syz
[   96.677649][  T807] usb 5-1: config 0 descriptor??
[   96.897911][  T807] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   97.190569][ T6091] input: syz0 as /devices/virtual/input/input8
[   97.324325][  T807] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[   97.361682][  T807] usb 5-1: USB disconnect, device number 7
[   97.893035][ T5725] usbhid 2-1:0.0: can't add hid device: -71
[   97.930602][ T5725] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   98.004171][ T5725] usb 2-1: USB disconnect, device number 3
[   98.023106][ T6100] loop2: detected capacity change from 0 to 7
[   98.083167][ T6100] Dev loop2: unable to read RDB block 7
[   98.126164][ T6100]  loop2: unable to read partition table
[   98.155797][ T6100] loop2: partition table beyond EOD, truncated
[   98.190539][ T6100] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   98.259943][ T6112] input: syz0 as /devices/virtual/input/input9
[   98.392087][ T6115] input: syz0 as /devices/virtual/input/input10
[   98.509762][ T6108] bond1: (slave veth0_macvtap): Device is not bonding slave
[   98.600104][ T6108] bond1: option active_slave: invalid value (veth0_macvtap)
[   98.637694][ T6108] bond1 (unregistering): Released all slaves
[   99.498820][ T6139] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  100.114421][ T6149] netlink: 344 bytes leftover after parsing attributes in process `syz.0.153'.
[  100.197248][ T6143] macsec0: entered allmulticast mode
[  100.204852][ T6143] veth1_macvtap: entered allmulticast mode
[  100.220293][ T5725] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  100.231211][ T6149] unsupported nla_type 13850
[  100.403104][ T5725] usb 5-1: not running at top speed; connect to a high speed hub
[  100.436842][ T5725] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  100.455700][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.473934][ T5725] usb 5-1: Product: syz
[  100.494299][ T5725] usb 5-1: Manufacturer: syz
[  100.520875][ T5725] usb 5-1: SerialNumber: syz
[  100.711311][ T6160] input: syz0 as /devices/virtual/input/input11
[  100.838965][ T6145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.911100][ T6145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.969150][ T6164] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  101.057719][ T6164] xt_SECMARK: invalid mode: 9
[  101.668252][ T6173] bond1: (slave veth0_macvtap): Device is not bonding slave
[  101.725893][ T6173] bond1: option active_slave: invalid value (veth0_macvtap)
[  101.790251][ T6173] bond1 (unregistering): Released all slaves
[  102.677422][ T6187] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  102.690000][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  102.760051][ T5710] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  102.941813][ T5710] usb 4-1: Using ep0 maxpacket: 32
[  102.961658][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  102.982854][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  103.009791][ T5725] cdc_ncm 5-1:1.0: bind() failure
[  103.039383][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  103.066841][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  103.068910][ T5725] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  103.091420][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  103.118264][ T5725] cdc_ncm 5-1:1.1: bind() failure
[  103.128326][ T5710] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  103.149751][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.158688][ T5725] usb 5-1: USB disconnect, device number 8
[  103.170063][ T5710] usb 4-1: Product: syz
[  103.176077][ T5710] usb 4-1: Manufacturer: syz
[  103.188800][ T5710] usb 4-1: SerialNumber: syz
[  103.208106][ T5710] usb 4-1: config 0 descriptor??
[  103.369650][ T6194] input: syz0 as /devices/virtual/input/input13
[  103.434477][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'.
[  103.462108][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.167'.
[  103.487582][ T6200] netlink: 'syz.3.167': attribute type 4 has an invalid length.
[  103.527412][ T6200] netlink: 152 bytes leftover after parsing attributes in process `syz.3.167'.
[  103.572540][ T6204] netlink: 'syz.4.173': attribute type 1 has an invalid length.
[  103.598867][ T6200] .`: renamed from bond0
[  103.735118][ T6204] bond1: entered promiscuous mode
[  103.769841][ T6204] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.890174][ T5357] IPVS: starting estimator thread 0...
[  104.001268][ T6211] IPVS: using max 33 ests per chain, 79200 per kthread
[  104.163684][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.186479][ T6215] netlink: 344 bytes leftover after parsing attributes in process `syz.2.177'.
[  104.189539][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.245403][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.279000][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.340377][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.364446][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.400192][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.420165][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.450852][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.479516][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.530414][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.556759][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.584397][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.627087][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.640936][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.671532][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.695397][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.734763][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.764372][ T5725] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  104.765134][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.799785][ T5710] iforce 4-1:0.0: usb_submit_urb failed: -71
[  104.814408][ T5710] input input12: Timeout waiting for response from device.
[  104.884577][ T5710] usb 4-1: USB disconnect, device number 4
[  104.969680][ T5725] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  105.008562][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  105.092619][ T5725] usb 3-1: Product: syz
[  105.128736][ T5725] usb 3-1: SerialNumber: syz
[  105.161839][ T5725] usb 3-1: config 0 descriptor??
[  105.476500][ T5725] usb 3-1: USB disconnect, device number 6
[  105.801243][ T6245] netlink: 9 bytes leftover after parsing attributes in process `syz.2.186'.
[  105.864981][ T6245] netlink: 9 bytes leftover after parsing attributes in process `syz.2.186'.
[  106.535675][ T6263] xt_SECMARK: invalid mode: 9
[  107.605472][ T6290] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.678501][ T6290] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.298652][ T6305] netlink: 9 bytes leftover after parsing attributes in process `syz.4.208'.
[  108.333015][ T6305] netlink: 9 bytes leftover after parsing attributes in process `syz.4.208'.
[  108.566434][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.211'.
[  108.926540][ T6316] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  109.202698][ T5756] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  109.400474][ T5756] usb 4-1: Using ep0 maxpacket: 16
[  109.427206][ T5756] usb 4-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config
[  109.484108][ T5756] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  109.544396][ T5756] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  109.570694][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.589597][ T5756] usb 4-1: Product: syz
[  109.601328][ T5756] usb 4-1: Manufacturer: syz
[  109.628953][ T5756] usb 4-1: SerialNumber: syz
[  109.726414][ T5756] usb 4-1: 0:2 : does not exist
[  109.901325][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.922025][ T5357] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  109.928300][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.013758][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.027623][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.045509][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.056313][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.105854][ T5756] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  110.123586][ T5357] usb 1-1: Using ep0 maxpacket: 8
[  110.156060][ T5357] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  110.187760][ T5357] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  110.216297][ T5357] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  110.252785][ T5357] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  110.288122][ T5357] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  110.303462][ T5756] usb 4-1: USB disconnect, device number 5
[  110.320483][ T5357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.483807][ T5646] udevd[5646]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  110.634038][ T5357] usb 1-1: GET_CAPABILITIES returned 0
[  110.642982][ T5357] usbtmc 1-1:16.0: can't read capabilities
[  110.867818][ T6332] usb 1-1: usbtmc_ioctl_clear_out_halt returned -32
[  110.947517][ T5708] usb 1-1: USB disconnect, device number 3
[  110.974160][ T6343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.223'.
[  111.569390][ T6349] bond1: (slave veth0_macvtap): Device is not bonding slave
[  111.577205][ T5708] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  111.587089][ T6349] bond1: option active_slave: invalid value (veth0_macvtap)
[  111.644456][ T6349] bond1 (unregistering): Released all slaves
[  111.805686][ T6353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.907659][ T6353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.229812][ T5708] usb 4-1: unable to get BOS descriptor or descriptor too short
[  112.240325][ T5708] usb 4-1: no configurations
[  112.254694][ T5708] usb 4-1: can't read configurations, error -22
[  112.282860][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  112.282878][   T29] audit: type=1800 audit(1782934087.966:17): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.226" name="bus" dev="tmpfs" ino=212 res=0 errno=0
[  112.567359][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.585298][ T6368] netlink: 344 bytes leftover after parsing attributes in process `syz.4.232'.
[  112.603144][ T6369] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.780076][ T5756] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  112.795684][ T6372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.234'.
[  112.870156][ T6374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.235'.
[  112.935843][ T6377] netlink: 40 bytes leftover after parsing attributes in process `syz.4.235'.
[  113.007643][ T5756] usb 3-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config
[  113.062226][ T5756] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  113.077881][ T5756] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  113.087249][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.109316][ T5756] usb 3-1: config 0 descriptor??
[  113.148650][ T5756] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  113.165341][ T6374] 8021q: adding VLAN 0 to HW filter on device bond2
[  113.231562][ T6377] dummy0: entered promiscuous mode
[  113.490627][ T5708] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  113.544617][ T5756] IPVS: starting estimator thread 0...
[  113.650805][ T5708] usb 4-1: Using ep0 maxpacket: 8
[  113.660155][ T6385] IPVS: using max 32 ests per chain, 76800 per kthread
[  113.695953][ T5708] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  113.752959][ T5708] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  113.782238][ T5708] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  113.795081][ T6309] Set syz1 is full, maxelem 65536 reached
[  113.816052][ T5708] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  113.893276][ T5708] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  113.932401][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.046189][ T6388] kvm: faulting far call emulation tainted memory
[  114.180541][ T5708] usb 4-1: GET_CAPABILITIES returned 0
[  114.189211][ T5708] usbtmc 4-1:16.0: can't read capabilities
[  114.310107][ T5725] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  114.388382][ T6381] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32
[  114.397103][ T5708] usb 4-1: USB disconnect, device number 8
[  114.472691][ T5725] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  114.484959][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.497044][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.540764][ T5725] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  114.589539][ T5725] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  114.602806][ T6403] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  114.604900][ T5725] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  114.639320][ T5725] usb 5-1: Manufacturer: syz
[  114.678906][ T5725] usb 5-1: config 0 descriptor??
[  114.798710][ T5357] usb 3-1: USB disconnect, device number 7
[  115.185495][ T6410] kvm: pic: non byte read
[  115.195591][ T6410] kvm: pic: non byte read
[  115.284068][ T6388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.299607][ T6388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.316345][ T6419] mmap: syz.2.248 (6419) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  115.453116][ T5725] usbhid 5-1:0.0: can't add hid device: -71
[  115.469407][ T5725] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  115.515113][ T5725] usb 5-1: USB disconnect, device number 9
[  115.521080][ T5708] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  115.680135][ T5357] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  115.691981][ T5708] usb 4-1: Using ep0 maxpacket: 16
[  115.704453][ T5708] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  115.717041][ T5708] usb 4-1: config 0 has no interface number 0
[  115.731106][ T5708] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  115.742926][ T5708] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  115.768175][ T5708] usb 4-1: config 0 interface 255 has no altsetting 0
[  115.776548][ T5708] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  115.786521][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222
[  115.794886][ T5708] usb 4-1: SerialNumber: syz
[  115.808445][ T5708] usb 4-1: config 0 descriptor??
[  115.872584][ T5357] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  115.883556][ T5357] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  115.893191][ T5357] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  115.906204][ T5357] usb 3-1: config 220 has no interface number 2
[  115.914235][ T5357] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  115.927878][ T5357] usb 3-1: config 220 interface 0 has no altsetting 0
[  115.935373][ T5357] usb 3-1: config 220 interface 76 has no altsetting 0
[  115.946309][ T5357] usb 3-1: config 220 interface 1 has no altsetting 0
[  115.970285][ T5357] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  115.993243][ T5357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.012519][ T5357] usb 3-1: Product: syz
[  116.027921][ T5708] ftdi_sio 4-1:0.255: FTDI USB Serial Device converter detected
[  116.040233][ T5357] usb 3-1: Manufacturer: syz
[  116.053701][ T5708] usb 4-1: Detected FT232A
[  116.062883][ T5357] usb 3-1: SerialNumber: syz
[  116.082881][ T5708] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  116.106682][ T5708] usb 4-1: USB disconnect, device number 9
[  116.149919][ T5708] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  116.163544][ T5708] ftdi_sio 4-1:0.255: device disconnected
[  116.363243][ T5357] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  116.389199][ T5357] uvcvideo 3-1:220.0: No valid video chain found.
[  116.417078][ T5357] usb 3-1: selecting invalid altsetting 0
[  116.462984][ T5357] usb 3-1: selecting invalid altsetting 0
[  116.487333][ T5357] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  116.539521][ T5357] usb 3-1: USB disconnect, device number 8
[  116.760145][ T6449] netlink: 64 bytes leftover after parsing attributes in process `syz.3.260'.
[  116.763263][ T6451] binder: BINDER_SET_CONTEXT_MGR already set
[  116.834005][ T6451] binder: 6444:6451 ioctl 4018620d 200000000040 returned -16
[  116.853165][ T5708] IPVS: starting estimator thread 0...
[  116.960680][ T6457] IPVS: using max 37 ests per chain, 88800 per kthread
[  117.129576][   T29] audit: type=1800 audit(1782934092.836:18): pid=6441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.256" name="bus" dev="tmpfs" ino=260 res=0 errno=0
[  117.285196][ T6470] netlink: 'syz.3.265': attribute type 29 has an invalid length.
[  117.425578][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'.
[  117.492119][ T6474] 8021q: adding VLAN 0 to HW filter on device bond1
[  117.520169][  T807] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  117.529871][ T6474] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  117.575227][ T6480] netlink: 'syz.2.268': attribute type 10 has an invalid length.
[  117.604646][ T6480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.268'.
[  117.628521][ T6480] dummy0: entered promiscuous mode
[  117.641963][ T6480] bond1: (slave dummy0): Releasing backup interface
[  117.670669][  T807] usb 1-1: Using ep0 maxpacket: 8
[  117.680073][ T5710] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  117.701893][  T807] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  117.738336][  T807] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  117.784979][  T807] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  117.799123][  T807] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  117.817078][  T807] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  117.828718][  T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.876508][ T5710] usb 5-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config
[  117.904054][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  117.917560][ T5710] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  117.927827][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.983070][ T5710] usb 5-1: config 0 descriptor??
[  117.991616][ T6487] sg_write: data in/out 211/120 bytes for SCSI command 0x0-- guessing data in;
[  117.991616][ T6487]    program syz.3.270 not setting count and/or reply_len properly
[  118.053715][ T5710] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  118.076831][  T807] usb 1-1: GET_CAPABILITIES returned 0
[  118.084710][  T807] usbtmc 1-1:16.0: can't read capabilities
[  118.112569][ T5357] IPVS: starting estimator thread 0...
[  118.230986][ T6490] IPVS: using max 30 ests per chain, 72000 per kthread
[  118.351463][ T6467] usb 1-1: usbtmc_ioctl_clear_out_halt returned -32
[  118.595062][  T807] usb 1-1: USB disconnect, device number 4
[  119.100484][ T6509] tipc: Started in network mode
[  119.113649][ T6509] tipc: Node identity 8add14a778ec, cluster identity 4711
[  119.126069][ T6509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.166005][ T6509] syzkaller0: entered promiscuous mode
[  119.205002][ T6509] syzkaller0: entered allmulticast mode
[  119.238796][ T6510] tipc: Resetting bearer <eth:syzkaller0>
[  119.247888][ T6512] netlink: 'syz.1.281': attribute type 29 has an invalid length.
[  119.266214][ T6508] tipc: Resetting bearer <eth:syzkaller0>
[  119.333454][ T6508] tipc: Disabling bearer <eth:syzkaller0>
[  119.430503][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'.
[  119.890950][ T6524] loop5: detected capacity change from 0 to 7
[  119.941099][ T6524] Dev loop5: unable to read RDB block 7
[  119.971546][ T5357] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  119.985663][ T6524]  loop5: AHDI p1
[  120.005059][ T6524] loop5: partition table partially beyond EOD, truncated
[  120.021634][ T5756] usb 5-1: USB disconnect, device number 10
[  120.190776][ T6520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.206720][ T6527] syzkaller0: entered promiscuous mode
[  120.225838][ T6520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.335527][ T6520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.438419][ T6520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.593266][ T6534] netlink: 80 bytes leftover after parsing attributes in process `syz.0.291'.
[  120.755667][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'.
[  120.982467][ T5357] usb 3-1: unable to get BOS descriptor or descriptor too short
[  121.003383][ T5357] usb 3-1: no configurations
[  121.017343][ T5357] usb 3-1: can't read configurations, error -22
[  121.018145][ T6545] xt_SECMARK: invalid mode: 9
[  121.277800][ T6551] netlink: 'syz.4.297': attribute type 29 has an invalid length.
[  121.360065][ T5725] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  121.383042][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'.
[  121.406186][ T6555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.298'.
[  121.521780][ T5725] usb 2-1: Using ep0 maxpacket: 32
[  121.553116][ T5725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.586885][ T5725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.627024][ T5725] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  121.655953][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.689065][ T5725] usb 2-1: config 0 descriptor??
[  121.721790][ T5725] hub 2-1:0.0: USB hub found
[  121.782799][ T6567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.854615][ T6567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.924710][ T5725] hub 2-1:0.0: 26 ports detected
[  121.939098][    C0] ==================================================================
[  121.947288][    C0] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30
[  121.955489][    C0] Read of size 2 at addr ffff888154ba50b4 by task syz.3.305/6573
[  121.963313][    C0] 
[  121.965648][    C0] CPU: 0 UID: 0 PID: 6573 Comm: syz.3.305 Not tainted syzkaller #0 PREEMPT(full) 
[  121.965664][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  121.965670][    C0] Call Trace:
[  121.965682][    C0]  <IRQ>
[  121.965687][    C0]  dump_stack_lvl+0xe8/0x150
[  121.965704][    C0]  print_address_description+0x55/0x1e0
[  121.965716][    C0]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  121.965738][    C0]  print_report+0x58/0x70
[  121.965756][    C0]  kasan_report+0x117/0x150
[  121.965772][    C0]  ? __pskb_pull_tail+0x1235/0x1890
[  121.965787][    C0]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  121.965802][    C0]  qdisc_pkt_len_segs_init+0x7f7/0xa30
[  121.965820][    C0]  __netif_receive_skb_core+0x13aa/0x30b0
[  121.965833][    C0]  ? unwind_next_frame+0x8f/0x2550
[  121.965845][    C0]  ? lock_acquire+0x106/0x350
[  121.965857][    C0]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  121.965867][    C0]  ? unwind_next_frame+0x8f/0x2550
[  121.965879][    C0]  ? lock_acquire+0x106/0x350
[  121.965894][    C0]  __netif_receive_skb_list_core+0x24d/0x830
[  121.965907][    C0]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  121.965920][    C0]  netif_receive_skb_list_internal+0x995/0xcf0
[  121.965939][    C0]  ? netif_receive_skb_list_internal+0x501/0xcf0
[  121.965955][    C0]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  121.965971][    C0]  ? dev_gro_receive+0x1097/0x2380
[  121.965985][    C0]  napi_complete_done+0x299/0x730
[  121.966001][    C0]  ? __pfx_napi_complete_done+0x10/0x10
[  121.966017][    C0]  ? gro_cell_poll+0x175/0x5d0
[  121.966029][    C0]  gro_cell_poll+0x5ab/0x5d0
[  121.966042][    C0]  ? gro_cell_poll+0x175/0x5d0
[  121.966053][    C0]  __napi_poll+0xaa/0x330
[  121.966063][    C0]  net_rx_action+0x61d/0xf50
[  121.966076][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  121.966086][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  121.966100][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  121.966110][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  121.966120][    C0]  ? sched_clock+0x3f/0x60
[  121.966137][    C0]  handle_softirqs+0x225/0x840
[  121.966153][    C0]  ? do_softirq+0x76/0xd0
[  121.966167][    C0]  ? tun_rx_batched+0x185/0x790
[  121.966179][    C0]  do_softirq+0x76/0xd0
[  121.966192][    C0]  </IRQ>
[  121.966195][    C0]  <TASK>
[  121.966199][    C0]  __local_bh_enable_ip+0xf8/0x130
[  121.966212][    C0]  ? tun_rx_batched+0x185/0x790
[  121.966223][    C0]  tun_rx_batched+0x616/0x790
[  121.966235][    C0]  ? __pfx_tun_rx_batched+0x10/0x10
[  121.966246][    C0]  ? tun_get_user+0x2717/0x4370
[  121.966257][    C0]  ? tun_get_user+0x2717/0x4370
[  121.966268][    C0]  ? tun_get_user+0x23cb/0x4370
[  121.966278][    C0]  ? tun_get_user+0x23cb/0x4370
[  121.966288][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  121.966302][    C0]  ? tun_get_user+0x2717/0x4370
[  121.966312][    C0]  ? tun_get_user+0x2717/0x4370
[  121.966322][    C0]  tun_get_user+0x2b44/0x4370
[  121.966346][    C0]  ? aa_file_perm+0x18b/0x15f0
[  121.966372][    C0]  ? aa_file_perm+0x4ed/0x15f0
[  121.966397][    C0]  ? __pfx_tun_get_user+0x10/0x10
[  121.966416][    C0]  ? __lock_acquire+0x683/0x2cf0
[  121.966443][    C0]  ? __pfx___futex_wait+0x10/0x10
[  121.966460][    C0]  ? ref_tracker_alloc+0x341/0x4b0
[  121.966471][    C0]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  121.966482][    C0]  ? tun_get+0x1c/0x2f0
[  121.966492][    C0]  ? tun_get+0x1c/0x2f0
[  121.966503][    C0]  ? tun_get+0x1c/0x2f0
[  121.966513][    C0]  ? tun_get+0x1c/0x2f0
[  121.966524][    C0]  tun_chr_write_iter+0x113/0x200
[  121.966536][    C0]  vfs_write+0x612/0xba0
[  121.966549][    C0]  ? __pfx_vfs_write+0x10/0x10
[  121.966562][    C0]  ? __fget_files+0x2a/0x420
[  121.966574][    C0]  ksys_write+0x150/0x270
[  121.966586][    C0]  ? __pfx_ksys_write+0x10/0x10
[  121.966598][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.966609][    C0]  do_syscall_64+0x174/0x580
[  121.966622][    C0]  ? clear_bhb_loop+0x40/0x90
[  121.966633][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.966644][    C0] RIP: 0033:0x7f402bb9de59
[  121.966663][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.966671][    C0] RSP: 002b:00007f402ca3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  121.966683][    C0] RAX: ffffffffffffffda RBX: 00007f402be25fa0 RCX: 00007f402bb9de59
[  121.966690][    C0] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000004
[  121.966697][    C0] RBP: 00007f402bc33e6f R08: 0000000000000000 R09: 0000000000000000
[  121.966703][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  121.966709][    C0] R13: 00007f402be26038 R14: 00007f402be25fa0 R15: 00007f402bf4fa48
[  121.966719][    C0]  </TASK>
[  121.966723][    C0] 
[  122.423618][    C0] The buggy address belongs to the physical page:
[  122.430047][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x154ba5
[  122.438997][    C0] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  122.446755][    C0] raw: 057ff00000000000 ffffea000552e948 ffffea000552e948 0000000000000000
[  122.455541][    C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  122.464217][    C0] page dumped because: kasan: bad access detected
[  122.470745][    C0] page_owner info is not present (never set?)
[  122.476805][    C0] 
[  122.479118][    C0] Memory state around the buggy address:
[  122.484819][    C0]  ffff888154ba4f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  122.492870][    C0]  ffff888154ba5000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  122.500923][    C0] >ffff888154ba5080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  122.508967][    C0]                                      ^
[  122.514587][    C0]  ffff888154ba5100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  122.522650][    C0]  ffff888154ba5180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  122.530703][    C0] ==================================================================
[  122.538981][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  122.546189][    C0] CPU: 0 UID: 0 PID: 6573 Comm: syz.3.305 Not tainted syzkaller #0 PREEMPT(full) 
[  122.555394][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  122.565463][    C0] Call Trace:
[  122.568752][    C0]  <IRQ>
[  122.571591][    C0]  vpanic+0x56c/0xa60
[  122.575576][    C0]  ? rcu_is_watching+0x15/0xb0
[  122.580423][    C0]  ? __pfx_vpanic+0x10/0x10
[  122.585097][    C0]  panic+0xc5/0xd0
[  122.588810][    C0]  ? __pfx_panic+0x10/0x10
[  122.593236][    C0]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  122.598875][    C0]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  122.604638][    C0]  check_panic_on_warn+0x89/0xb0
[  122.609696][    C0]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  122.615626][    C0]  end_report+0x73/0x170
[  122.619975][    C0]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  122.625911][    C0]  kasan_report+0x128/0x150
[  122.630423][    C0]  ? __pskb_pull_tail+0x1235/0x1890
[  122.635751][    C0]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  122.641666][    C0]  qdisc_pkt_len_segs_init+0x7f7/0xa30
[  122.647323][    C0]  __netif_receive_skb_core+0x13aa/0x30b0
[  122.653067][    C0]  ? unwind_next_frame+0x8f/0x2550
[  122.658190][    C0]  ? lock_acquire+0x106/0x350
[  122.662869][    C0]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  122.668955][    C0]  ? unwind_next_frame+0x8f/0x2550
[  122.674366][    C0]  ? lock_acquire+0x106/0x350
[  122.679250][    C0]  __netif_receive_skb_list_core+0x24d/0x830
[  122.685253][    C0]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  122.691761][    C0]  netif_receive_skb_list_internal+0x995/0xcf0
[  122.697931][    C0]  ? netif_receive_skb_list_internal+0x501/0xcf0
[  122.704347][    C0]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  122.711030][    C0]  ? dev_gro_receive+0x1097/0x2380
[  122.716143][    C0]  napi_complete_done+0x299/0x730
[  122.721186][    C0]  ? __pfx_napi_complete_done+0x10/0x10
[  122.726788][    C0]  ? gro_cell_poll+0x175/0x5d0
[  122.731845][    C0]  gro_cell_poll+0x5ab/0x5d0
[  122.736470][    C0]  ? gro_cell_poll+0x175/0x5d0
[  122.741337][    C0]  __napi_poll+0xaa/0x330
[  122.745680][    C0]  net_rx_action+0x61d/0xf50
[  122.750297][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  122.755408][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  122.760618][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  122.765919][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  122.771121][    C0]  ? sched_clock+0x3f/0x60
[  122.775561][    C0]  handle_softirqs+0x225/0x840
[  122.780432][    C0]  ? do_softirq+0x76/0xd0
[  122.784860][    C0]  ? tun_rx_batched+0x185/0x790
[  122.789797][    C0]  do_softirq+0x76/0xd0
[  122.794070][    C0]  </IRQ>
[  122.797132][    C0]  <TASK>
[  122.800073][    C0]  __local_bh_enable_ip+0xf8/0x130
[  122.805656][    C0]  ? tun_rx_batched+0x185/0x790
[  122.810505][    C0]  tun_rx_batched+0x616/0x790
[  122.815265][    C0]  ? __pfx_tun_rx_batched+0x10/0x10
[  122.820545][    C0]  ? tun_get_user+0x2717/0x4370
[  122.825397][    C0]  ? tun_get_user+0x2717/0x4370
[  122.830244][    C0]  ? tun_get_user+0x23cb/0x4370
[  122.835085][    C0]  ? tun_get_user+0x23cb/0x4370
[  122.839926][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  122.845228][    C0]  ? tun_get_user+0x2717/0x4370
[  122.850156][    C0]  ? tun_get_user+0x2717/0x4370
[  122.855006][    C0]  tun_get_user+0x2b44/0x4370
[  122.859680][    C0]  ? aa_file_perm+0x18b/0x15f0
[  122.864534][    C0]  ? aa_file_perm+0x4ed/0x15f0
[  122.869290][    C0]  ? __pfx_tun_get_user+0x10/0x10
[  122.874314][    C0]  ? __lock_acquire+0x683/0x2cf0
[  122.879436][    C0]  ? __pfx___futex_wait+0x10/0x10
[  122.884459][    C0]  ? ref_tracker_alloc+0x341/0x4b0
[  122.889564][    C0]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  122.895012][    C0]  ? tun_get+0x1c/0x2f0
[  122.899156][    C0]  ? tun_get+0x1c/0x2f0
[  122.903302][    C0]  ? tun_get+0x1c/0x2f0
[  122.907450][    C0]  ? tun_get+0x1c/0x2f0
[  122.911599][    C0]  tun_chr_write_iter+0x113/0x200
[  122.916617][    C0]  vfs_write+0x612/0xba0
[  122.920865][    C0]  ? __pfx_vfs_write+0x10/0x10
[  122.925621][    C0]  ? __fget_files+0x2a/0x420
[  122.930204][    C0]  ksys_write+0x150/0x270
[  122.934540][    C0]  ? __pfx_ksys_write+0x10/0x10
[  122.939386][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.945494][    C0]  do_syscall_64+0x174/0x580
[  122.950079][    C0]  ? clear_bhb_loop+0x40/0x90
[  122.954748][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.960629][    C0] RIP: 0033:0x7f402bb9de59
[  122.965032][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.984628][    C0] RSP: 002b:00007f402ca3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  122.993038][    C0] RAX: ffffffffffffffda RBX: 00007f402be25fa0 RCX: 00007f402bb9de59
[  123.001087][    C0] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000004
[  123.009135][    C0] RBP: 00007f402bc33e6f R08: 0000000000000000 R09: 0000000000000000
[  123.017183][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.025143][    C0] R13: 00007f402be26038 R14: 00007f402be25fa0 R15: 00007f402bf4fa48
[  123.033208][    C0]  </TASK>
[  123.036369][    C0] Kernel Offset: disabled
[  123.040777][    C0] Rebooting in 86400 seconds..