last executing test programs:

5.233070603s ago: executing program 1 (id=631):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e26, 0x3, @dev={0xfe, 0x80, '\x00', 0x5}, 0x9}, 0x1c)
bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x400, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9, 0x2}, 0xfffffd23) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc440000000c0a010101010000000000000a0000070900020073797a31000000000900010073797a310000000018000380140000800800034000000002050006420600000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020e00028005000100000000000c000280050001"], 0xc0}}, 0x0)

5.155986845s ago: executing program 2 (id=632):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd28, 0x40, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r3, 0x40, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x59}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5, <r7=>0xffffffffffffffff}, 0x4)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000100000000000000000800"/28], 0x50)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000001040)=@req3={0x40, 0x3, 0x0, 0xc8, 0x0, 0x6, 0xf}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0xc000600)
r10 = socket$packet(0x11, 0x3, 0x300)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @masq={{0x9}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r10, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @default]}, 0x48)
sendmsg(r4, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x40)
r12 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r12, @ANYBLOB="b9f5229a5f02f59747271c3aecace3653b0ce203d7d853402a76999b54a56b5034dc4a15119f4024a061b556a070ba72a20b2900010000a724fb3d60c7e8f49b94916a9842fd69cc3a1e4460f57f4c4d16dcedf7da87b051b235709e580943a0978c7acf726092300a5788dd5857353378ad92322f209d89369a02cb9b74375719a91d03"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)

5.102418638s ago: executing program 1 (id=633):
unshare(0x6a040000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b)
sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c379490e7f67ea4000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006000000"], 0x6c}}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000", @ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="020ae8050200000025bd6fe8fddbdf25"], 0x10}}, 0x810)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r6, 0x0, 0xfdef)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000f80)=[{}], 0x1}}], 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="50000000480011012abd7000fedbdf250a006000", @ANYRES32=0x0, @ANYBLOB="02000000080002000700000008000200070000000800020000000000140001"], 0x50}}, 0x10)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r9)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fcdbdf251400000008400300", @ANYRES32=0x0, @ANYBLOB="0c0006000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040084)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0)

4.702522132s ago: executing program 2 (id=637):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
read$alg(r0, &(0x7f0000000300)=""/74, 0x4a)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00080077617265677561726400000004"], 0x38}, 0x1, 0x0, 0x0, 0x4048884}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x54d800, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
read(r2, &(0x7f0000000140)=""/166, 0xa6)
bind$alg(r0, &(0x7f00000005c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000380)={'ipvlan1\x00'})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x209b, 0xfffffffb, 0x20000003, 0x7ffffff9}, 0x10)
socketpair(0xa, 0x80000, 0x4, &(0x7f0000000580))
write(r6, &(0x7f0000000100)="1800000016005f021dfffffffffffff80700000301000000", 0x18)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0)
socket(0x10, 0x803, 0x0)

3.31571957s ago: executing program 2 (id=646):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x1}, {}, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000, 0xfffffffc}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff0300"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0), &(0x7f0000000000)=""/7, 0x2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0x1}, &(0x7f0000000e80), &(0x7f0000000ec0)}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x12, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x0, 0x1, 0xa, 0x0, 0x6, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, 0x0, 0x40, 0xcc, &(0x7f0000000b00)=""/204, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0x0, 0x8, 0xe}, 0x10, 0xffffffffffffffff, r0, 0x4, 0x0, &(0x7f0000000f80)=[{0x0, 0x3, 0xe, 0x7}, {0x0, 0x3, 0xb, 0x3}, {0x1, 0x2, 0xc, 0x2}, {0x4, 0x1, 0xa, 0x8}], 0x10, 0x9}, 0x94)
getsockopt(0xffffffffffffffff, 0x6, 0x55, &(0x7f0000000cc0)=""/194, &(0x7f0000000dc0)=0xc2)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x0, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0x9, 0xb, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, 0xffff, 0xd4bf, 0x3, 0x4, 0x101, 0x7, 'nr0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@multicast, @local, @empty, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @remote, 0x2}}}, {{@arp={@multicast1, @multicast2, 0xffffffff, 0xffffff00, 0xe, 0x3, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x7, 0x5, 0x2, 0x0, 0xff, 0x7, 'wg0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x0, 0x14}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @mac=@remote, @multicast2, @multicast2, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1)
sendmsg$NL80211_CMD_SET_WIPHY(r1, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x0, 0x4000000)

3.036447454s ago: executing program 3 (id=649):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4)
recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000180)=0x2, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000000)="7c89c7c2", 0x4}], 0x1}}], 0x1, 0x24040040)
shutdown(r5, 0x1)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x5, 0x4, 0x7b}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfff8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0xd4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffd0}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000340), &(0x7f0000000380)=0x8)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000000))

2.764911474s ago: executing program 2 (id=651):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x896e973dde71f4af)
r1 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
socket$inet6(0xa, 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x80800)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xce)
socket(0x1e, 0x5, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
socket$netlink(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @local}, &(0x7f00000002c0)=0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket(0x10, 0x803, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}}, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000340))
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c)

2.521684644s ago: executing program 2 (id=652):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000001c0)=0xc, 0x4)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
socket$kcm(0x29, 0x0, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x3, 0x0, 0x0, 0x7, 0x2100}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x1, 0x1}, 0x28)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x2c00, 0x0, @void}, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
socketpair(0xc, 0x5, 0x5, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockname$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x10)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
bind$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x10)
write$tun(r0, &(0x7f00000000c0)={@void, @val={0x0, 0x80, 0xd, 0x2, 0x6, 0x50ce}, @eth={@remote, @random="3ff52843c1c1", @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x1f, 0x4, 0x0, 0x36, 0x9f, 0x65, 0x0, 0x3, 0x1, 0x0, @broadcast, @private=0xa010101, {[@noop, @cipso={0x86, 0x26, 0x0, [{0x2, 0x4, "6c82"}, {0x7, 0x12, "9900a4626b90ffc076c2d82683032dba"}, {0x5, 0x3, 'F'}, {0x7, 0x7, "10cce4cd65"}]}, @ssrr={0x89, 0xb, 0x6, [@loopback, @multicast2]}, @timestamp={0x44, 0x1c, 0x75, 0x0, 0x6, [0x8, 0x9, 0x7, 0x3, 0x2, 0x7]}, @noop, @ssrr={0x89, 0x17, 0x23, [@broadcast, @local, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3a}, @remote]}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x0, 0xb, 0x6, 0x68, 0xff, 0x1, 0x21, 0x4, @multicast2, @local, {[@noop]}}, "cb9584"}}}}}}, 0xbf)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ASSERT(r6, 0x29, 0xcf, &(0x7f0000000240), 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000001c0)=0xc, 0x4) (async)
socket$unix(0x1, 0x1, 0x0) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
socket$kcm(0x29, 0x0, 0x0) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x3, 0x0, 0x0, 0x7, 0x2100}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x1, 0x1}, 0x28) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x2c00, 0x0, @void}, 0x10) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async)
socketpair(0xc, 0x5, 0x5, &(0x7f0000000040)) (async)
getsockname$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x10) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async)
bind$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async)
write$tun(r0, &(0x7f00000000c0)={@void, @val={0x0, 0x80, 0xd, 0x2, 0x6, 0x50ce}, @eth={@remote, @random="3ff52843c1c1", @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x1f, 0x4, 0x0, 0x36, 0x9f, 0x65, 0x0, 0x3, 0x1, 0x0, @broadcast, @private=0xa010101, {[@noop, @cipso={0x86, 0x26, 0x0, [{0x2, 0x4, "6c82"}, {0x7, 0x12, "9900a4626b90ffc076c2d82683032dba"}, {0x5, 0x3, 'F'}, {0x7, 0x7, "10cce4cd65"}]}, @ssrr={0x89, 0xb, 0x6, [@loopback, @multicast2]}, @timestamp={0x44, 0x1c, 0x75, 0x0, 0x6, [0x8, 0x9, 0x7, 0x3, 0x2, 0x7]}, @noop, @ssrr={0x89, 0x17, 0x23, [@broadcast, @local, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3a}, @remote]}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x0, 0xb, 0x6, 0x68, 0xff, 0x1, 0x21, 0x4, @multicast2, @local, {[@noop]}}, "cb9584"}}}}}}, 0xbf) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$MRT6_ASSERT(r6, 0x29, 0xcf, &(0x7f0000000240), 0x4) (async)

2.086412692s ago: executing program 2 (id=657):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
listen(r1, 0x6)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
r2 = socket(0xa, 0x5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r6)
sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="55ffffff", @ANYRES16=r7, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x8055)
bind$inet(r4, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0)
connect$inet(r4, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x38, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000680))
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r8, 0x1, 0x28, &(0x7f0000000140)=0xec5, 0x4)
socket$kcm(0x2, 0xa, 0x2)

1.904123965s ago: executing program 3 (id=659):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x60}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0xc, 0xa, 0xa}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)

1.733657554s ago: executing program 3 (id=660):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0x201, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b986", 0x0, 0x1, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) (async)
sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0)

1.714478974s ago: executing program 1 (id=661):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x0, 0xffffffffffffff01, 0x9, 0x0, 0xfdfd})
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="4adaca42fa863a65e5c00af63ba8eaacfe2414bf73453c1184e61d87289181f2600fbcba06f2a6c512146f86a0e16f38efaedc4fcda35c08f6498a330fe152b3c875b175bce365330d7cd720d5e14553b151308fe9289416c0e2833b20026176f188f46aaa82bc6dc4e7d90e3bd66174828e319090707f66883f00b62c3a2a", 0x7f}, {&(0x7f0000000200)}, {&(0x7f0000000240)="f2301556d7dfd806f705c0f0817d58b54e47173cb77207d2a3ff035ea322f9f8b6f3df3929d70cea8ea15f2a234afac3167f64e624392e41b8c09c0d25b82ff7dc16b508e629b9355e3d9be180ba2ac0dd2a37ff6c523dabc39759b0e09f4b15603b8ed0d6047e13f07ff40bfcc663af6e85af7425fd818713554877f9dc", 0x7e}, {&(0x7f00000002c0)="e58ab03a665e360f2d2fcbb1a5377a", 0xf}, {&(0x7f0000000300)="a69092fb5db756e982449ab1d253dacf10054eab9fe8b5e468db2bf9ee3480320c4741915e9840ed6e209d30af9a2b967626a364345fef338ece9448149773dd67267cdee5a6a9eefe9fb891993fa6828788b1b89b3a0f961e775e9c73569c9148deeec4a21a9a50417e1ec87f7e5df6d487d0cfb413ffb8c1807f57f33a71f55f5d99eec257de6ad6e6285536b9e772ee84deae544e3c474ae99bff5a513808e1f5f1a3afb891649eb21f6e719e3d172753d2c926250df67c2b8412fc6a9d69b4dc63fe44430616130fc70b139365bbd50decae2f80c57894b76b058c9214d41fef57ba94d7", 0xe6}, {&(0x7f0000000400)="7bd8856c7b8a18e22259fecc6db546e04038ba76a87d1ee76ff99f909eb69b1c9b27720349c3434fa6b5ab921056159216da12feb244ae548e9e7462f8dd967231b894843df4dcdcd21c7aad76165bee9097cd72cd7204dc0d8dd64fffdf390e59108fce4efd599e711db886d053a812125e2bd6d6502a69a510d9491d2d6fa5da31658f1a1baea6b8648fa611528afe1dceeb6cdb8754405f", 0x99}, {&(0x7f00000004c0)="06c6c82d72f63c3a596d7e72367e6fcf08aa8fbc0676127ecbcfa85472bfffb1b6c42dd03e53468216befdf0bb032c79112c14f3cf42b0dff004c5562709fe035114cb87660703042d80f44094b569f64a04f79891687d5a5aaba1734714bf512e83231cb6b063bc80724dfdf7fc41493537e7fee3769c9cebe0703d1c519ab78d0ac26b986f30968d5e860511292ffece39981bd7c5e8502d80c2afa1e4616f2a6a06f63161ef7339401484580db264e1", 0xb1}], 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="1c00000000000000010000f20000000049bb3f3abfcb1910348246c36f48a98d11f6f8143e7723bdbf24a06f50d4c5456685b9dce7d336561ebe79d69f71b100aa0a0d23ecf761306d810e7691facce675d5febce71fe8a3c595056da663d1e0c3242cee4d29df73cb9c", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x40, 0x8800}, 0x20048040)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={<r2=>0x0, @multicast1}, &(0x7f00000000c0)=0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x3e, r0}, 0x10)

1.58557541s ago: executing program 3 (id=662):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
r1 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r1, &(0x7f0000005a00)=[{{&(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x1, 0xc050)
socket$netlink(0x10, 0x3, 0x14)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@const={0x4, 0x0, 0x0, 0xa, 0x4}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}, @struct={0xc, 0x6, 0x0, 0x4, 0x0, 0x4, [{0x8, 0x5, 0x1}, {0xc, 0x5, 0x3}, {0x7, 0x4, 0xfffffffc}, {0xd, 0x2, 0x1}, {0xe, 0x5, 0x2}, {0x9, 0x1, 0xa7}]}, @fwd={0xe}]}, {0x0, [0x0]}}, &(0x7f0000000240)=""/210, 0x93, 0xd2, 0x0, 0x7, 0x10000, @value=r0}, 0x28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000a0000000000001d0d0000026b110400000000001500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0xf, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.430422453s ago: executing program 3 (id=664):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x8084)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r2, &(0x7f0000002a80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x9, @empty, 0x2}, 0x1c, 0x0}}, {{0x0, 0xfffd, 0x0, 0x0, &(0x7f0000001ec0)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x24004000)

1.146483819s ago: executing program 0 (id=667):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x4, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x118)
r2 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r2, &(0x7f0000001440)={&(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10, 0x0}, 0x4000000)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152)

1.145664102s ago: executing program 1 (id=668):
r0 = socket(0x10, 0x803, 0x0)
socket(0x2a, 0x2, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
read(r0, &(0x7f00000000c0)=""/190, 0xbe) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {}, {0xd, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

996.857513ms ago: executing program 4 (id=669):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x64, r3, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x30f6}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x28}}, {0x10, 0x17c1, 0x8}}}}}}, 0x36)

986.24456ms ago: executing program 1 (id=670):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x1010, 0xffffffffffffffff, 0x8871b000)
r0 = socket$inet6(0xa, 0x80000, 0x1c5)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket(0x10, 0x80003, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', <r4=>0x0}) (rerun: 64)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4000, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) (rerun: 64)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2022) (async)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async)
recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000002700)=""/4087, 0xff7}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f00000014c0)=""/23, 0x17}, {&(0x7f0000001780)=""/175, 0xaf}, {&(0x7f0000004700)=""/4103, 0x1007}, {&(0x7f0000000600)=""/9, 0x9}, {&(0x7f0000001840)=""/144, 0x90}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f00000001c0)=""/69, 0x45}, {&(0x7f0000001500)=""/65, 0x41}], 0xb}, 0x40032160) (async, rerun: 32)
r6 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x1, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x388f, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xcc84}, 0x20000000) (async)
openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)

841.519536ms ago: executing program 0 (id=671):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="380000002300010324bd7002fadbdf25010000001800028014001c0000000000000003f86f161ed927187f830000000000ac1414bb00"/66], 0x38}}, 0xc004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x27, &(0x7f0000000900)=@raw=[@call={0x85, 0x0, 0x0, 0x7}, @jmp={0x5, 0x1, 0x9, 0x3, 0x5, 0x18, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@lld}, @alu={0x4, 0x0, 0x6ba9402cfd227b67, 0x2, 0xb, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f0000000a40)='GPL\x00', 0x9, 0x4b, &(0x7f0000000a80)=""/75, 0x41100, 0x17, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x1, 0xe, 0x35, 0xfffffffe}, 0x10, 0x648b, 0xffffffffffffffff, 0x4, &(0x7f0000000b40)=[0xffffffffffffffff], &(0x7f0000000b80)=[{0x3, 0x2, 0x3, 0xa}, {0x5, 0x3, 0x0, 0x9}, {0x1, 0x1, 0xe, 0x1}, {0x0, 0x2, 0xc, 0x1}], 0x10, 0xffff4243}, 0x94) (async)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x27, &(0x7f0000000900)=@raw=[@call={0x85, 0x0, 0x0, 0x7}, @jmp={0x5, 0x1, 0x9, 0x3, 0x5, 0x18, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@lld}, @alu={0x4, 0x0, 0x6ba9402cfd227b67, 0x2, 0xb, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f0000000a40)='GPL\x00', 0x9, 0x4b, &(0x7f0000000a80)=""/75, 0x41100, 0x17, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x1, 0xe, 0x35, 0xfffffffe}, 0x10, 0x648b, 0xffffffffffffffff, 0x4, &(0x7f0000000b40)=[0xffffffffffffffff], &(0x7f0000000b80)=[{0x3, 0x2, 0x3, 0xa}, {0x5, 0x3, 0x0, 0x9}, {0x1, 0x1, 0xe, 0x1}, {0x0, 0x2, 0xc, 0x1}], 0x10, 0xffff4243}, 0x94)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000dc0)={<r4=>r2, &(0x7f0000000cc0)='*\\)]](}^-{,(\'.}]/\x00', 0x240000, &(0x7f0000000d00)={@_ha_fsid={[0x4759]}, {0x21bb, 0x5, 0x7fff, 0x8001}}, 0x6, &(0x7f0000000d40)={@_ha_fsid}, &(0x7f0000000d80)=0x2})
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e40)='./cgroup/syz1\x00', 0x200002, 0x0)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) (async)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e00)={@cgroup=r5, r3, 0x2c, 0x10, r4, @void, @value=r6}, 0x20) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e00)={@cgroup=r5, r3, 0x2c, 0x10, r4, @void, @value=r6}, 0x20)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r9)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r10, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
getpeername$ax25(r9, &(0x7f0000000640)={{0x3, @rose}, [@remote, @null, @null, @bcast, @remote, @bcast, @null, @bcast]}, &(0x7f00000008c0)=0x48) (async)
getpeername$ax25(r9, &(0x7f0000000640)={{0x3, @rose}, [@remote, @null, @null, @bcast, @remote, @bcast, @null, @bcast]}, &(0x7f00000008c0)=0x48)
sendmmsg$inet6(r8, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="474d107a", 0x4}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)}}], 0x2, 0x880)
socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x100, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000)
r12 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14)
getsockname$packet(r12, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
recvmsg(r2, &(0x7f0000000600)={&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)}], 0x1, &(0x7f0000000700)=""/244, 0xf4}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0xb, 0x6, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0xb, 0x6, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

838.691073ms ago: executing program 1 (id=672):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0xfd, 0x4}]}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000001400)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c864) (async)
sendmmsg$inet(r1, &(0x7f0000001400)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c864)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
bind$unix(r4, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x2) (async)
listen(r4, 0x2)
shutdown(r3, 0x0)
connect$unix(r3, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
accept(r4, 0x0, 0x0) (async)
r5 = accept(r4, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac404000000afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'vlan0\x00', 0x100})
sendto$inet(r1, &(0x7f0000000c80)="e8", 0xfdef, 0x12000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)

727.799024ms ago: executing program 0 (id=673):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000240)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, 0x0, 0x0) (async)
setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r3, @ANYRES8=r3], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r3, @ANYRES8=r3], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

694.067411ms ago: executing program 4 (id=674):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x204, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x48}}}}, [@NL80211_ATTR_TESTDATA={0x7f, 0x45, "efc9d976f90daa2c1f983185dd16a890ad88ab628fde1e723647262287b0dc71548663a3b890bcfd8e626ef59827b30d3d7ad32b887ee134531a97a4722857a65c95a01b55297433e2093b3b60d13128031e770ee518a081cde743a55d579ca898748e81557800e35e1beebe9f7e5baf14c42f717bdaeff6e91d45"}, @NL80211_ATTR_TESTDATA={0xc1, 0x45, "f56224a35059d2ace62fce5a688eba0f863cb040eba2f714ae94e13e03ad6f0b0e21b827cf58fb4cf04e80a86b49e5cef5f7bca2e5eb069af716f13a5c13255d85dc8f4fe00325a94f9df7103dba7be96997c8b75ea14c9a62ea43a34b7e1a497361d69b18bfa5dd37d9cc1f58d4e8905db896d24090dd4dd778e8319638f4d98ee99c4afda4f0931097977f50beaf312355c0592e16a59e969889080412a0fefa147c91a0c6dd4e6f70304a6ac4bd4266826cf447b17bf68284fe46d6"}, @NL80211_ATTR_TESTDATA={0x98, 0x45, "5cc6934e44fa7d882438d88b04451f19f117131317235a1f10b73f707d204647eb78541684b647defa8d9808b03b0507c98618a059753992e837e68dde80592c29609b99cafcdf5fdc744a6bca3b0f67810ec517e5b35d8a2192bd983f1bc2732bf41c326cb5df4bbe81e7758afb270222d72dda957b03fe7924b493889e2a3c50aa2f69689965314fd315a9cd94b07b7d6673f4"}]}, 0x204}, 0x1, 0x0, 0x0, 0x80}, 0x24048889)
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044}, 0x20000010)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc8, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xd6ea}, @DEVLINK_ATTR_RATE_NODE_NAME={0x99, 0xa8, @random="eeb362a15288331ba7006a566491f642a82020efbe5c52bbc1b7b729a78ccc76e91aaf5b3da25b2a7fe9187c7d7a22ba8bf6833aa27cd5d4c958b710a61640a11986ad4728aa0e5ed29f30b853ccd73820dbda9e12ff868542949e1482a8073f392bba7a66bd61d2370aca88fa66ed32e697af6986562e2eb0dd184c172389aaa866ede6afb6007599e1e76ecbdabac24e4ec4266c"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r1, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x12f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040881}, 0x8000)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, 0x15, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x28, 0x8, "abef0a0539e8a5d65c3232ccabd193c8c7619bade3ab0bc2b64f08559cc152f21241cc1e"}]}, 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x8054)
openat$cgroup_type(r0, &(0x7f0000000900), 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000940)=0x4)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000980)={0x9, 0x2})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f00000009c0)={0x200a})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r0, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)=@delqdisc={0x124, 0x25, 0x4, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x3, 0xc}, {0x6, 0x4}, {0xb, 0x8}}, [@TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x7, 0x4, 0x3ff, 0x0, 0x6a17, 0x3, 0x3}}, {0xa, 0x2, [0x3, 0x4, 0x1]}}, {{0x1c, 0x1, {0x9, 0x3, 0x6, 0x54, 0x1, 0x2, 0x3, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x3, 0x3, 0x2, 0x5, 0x1, 0x5, 0x94, 0xa}}, {0x18, 0x2, [0x7, 0x1ff, 0x0, 0x7f, 0x401, 0x6a21, 0x0, 0x7, 0x8, 0x6]}}, {{0x1c, 0x1, {0x0, 0xff, 0x3, 0x8, 0x1, 0x250b, 0x400, 0x6}}, {0x10, 0x2, [0x9, 0x9, 0x5, 0x4, 0xe, 0xfff7]}}, {{0x1c, 0x1, {0x9, 0x33, 0x5b, 0x8, 0x0, 0xffffffff, 0xc, 0x3}}, {0xa, 0x2, [0x2, 0xfa, 0x7ff]}}, {{0x1c, 0x1, {0x9, 0xc, 0xa, 0x8, 0x2, 0x9, 0x9, 0x4}}, {0xc, 0x2, [0x0, 0xea59, 0x4, 0x10]}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000041}, 0x40002)
ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000dc0)={<r7=>r0, &(0x7f0000000cc0)='syz1\x00', 0x4000, &(0x7f0000000d00)={@align=0x5, {0xa, 0x400, 0x7, 0x8}}, 0xbf9, &(0x7f0000000d40), &(0x7f0000000d80)=0x9})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000011c0)={r0, 0x20, &(0x7f0000001180)={&(0x7f0000001040)=""/85, 0x55, <r8=>0x0, &(0x7f00000010c0)=""/144, 0x90}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x1a, 0x2e, &(0x7f0000000e00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x0, 0x6, 0x6, 0x0, 0xb4f38b9b92bdb74}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7fff}, @generic={0xb, 0x7, 0x9, 0x6, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18}}, @alu={0x7, 0x1, 0x2, 0x8, 0x9, 0x80, 0xfffffffffffffff0}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2b}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000f80)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', r6, @tracing=0x17, r0, 0x8, &(0x7f0000000fc0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001000)={0x1, 0x0, 0x1, 0x80000000}, 0x10, r8, r0, 0x3, &(0x7f0000001200)=[r0], &(0x7f0000001240)=[{0x1, 0x4, 0x4, 0x7}, {0x2, 0x5, 0x1, 0xb}, {0x3, 0x2, 0x4, 0xb}], 0x10, 0x848}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000001340)={<r9=>r4, 0x2, 0x9, 0x2})
write$cgroup_int(r9, &(0x7f0000001380)=0x7ff, 0x12)
ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f00000013c0))
sendmsg$nl_route_sched(r0, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4}, {0x7, 0x3}, {0x0, 0x2}}, ["", "", "", "", "", ""]}, 0x24}}, 0x40080)
write$tun(r7, &(0x7f0000001500)={@void, @void, @ipv6=@tipc_packet={0x6, 0x6, "359321", 0xbb, 0x6, 0xff, @loopback, @mcast1, {[@srh={0x2f, 0x10, 0x4, 0x8, 0x18, 0x10, 0x4, [@mcast1, @mcast2, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @private0, @private0={0xfc, 0x0, '\x00', 0x1}]}], @payload_mcast={{{{{{0x33, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x2, 0x2, 0x0, 0x1, 0xb, 0x5, 0x1, 0xc3e, 0xfff8, 0x3, 0x4e20, 0x4e21}, 0x1, 0x1}, 0x1, 0x2}, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}, 0xe3)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x48, r1, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x6}}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x14}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r1, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x3}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r9)

496.421028ms ago: executing program 0 (id=675):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000000000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000300)="00000000020001000003a90830332b35", 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010818"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28)

495.780003ms ago: executing program 3 (id=676):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1}, 0x1c)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2)
sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8040)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, 0x0, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'dh\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xf6c12eb8213c0b07, 0xcd, 0x1}}, 0x44)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

495.397688ms ago: executing program 4 (id=677):
unshare(0x400) (async, rerun: 64)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) (rerun: 64)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'geneve0\x00'}) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'macsec0\x00', @broadcast}) (rerun: 64)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@getlink={0x24, 0x12, 0x18efde40b3708357, 0x0, 0x0, {}, [@IFLA_PHYS_SWITCH_ID={0x4}]}, 0x24}}, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}], 0x1)

426.197812ms ago: executing program 0 (id=678):
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
r1 = socket$inet(0x2, 0xa, 0x7fffffff)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000001e80))
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0xffffffff, 0xd7c7, 0x401}, 0x10)
write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000b0000000000000008000ac0b3c60000", 0x24)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'})
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newroute={0x2c, 0x18, 0x400, 0x70bd2b, 0x25dfdbfd, {0xa, 0x20, 0x80, 0xf, 0xff, 0x2, 0xff, 0x3}, [@RTA_PRIORITY={0x8}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x845}, 0x4000000)
pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000380)="00214717a70700000000030600710a5eeb9d0471200000000500000000000000ffff0342844d50e77d0dc450de49c204a803166580ac899c081cb49f1930e7d07fbdf3d8134e72158357ee37fdae", 0x4e}], 0x1, 0xee, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newroute={0x30, 0x18, 0x200, 0x800000, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfe, 0x0, 0xff, 0x9}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x9000)
r8 = socket$inet6(0xa, 0x3, 0xff)
sendmmsg$inet6(r8, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x3ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x700}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0)

246.775888ms ago: executing program 4 (id=679):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x4040000)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1060}, {r0, 0x20}, {r0, 0x20c1}, {r0, 0x2000}, {r0, 0x2240}, {r0, 0x8}, {r0, 0x1000}, {r0, 0x10}, {r0, 0x8000}, {r0, 0x60f}], 0xa, 0x23d94ce1)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000940)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @loopback}, 0x2, 0x3, 0x2}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="1431280225fb3b77d997f73249399ff86aabad4ee81cec707ac14e3a05e0f664728992d49b2d1cf34eddef382d7951a048ee69c4d875246b03fef5ba129295f0ff16d87ecb8605bcb3dd195209593d50f42b026e59803c49f966b7fc641004882bf6bfe812c55e36d458553665b4e7c0d6b3bb7638465a7076e81a", 0x7b}, {&(0x7f0000000300)="95ddfb97ef853d5ab463249302bbd514c84f5d9d53896eb9f80fedcca4b4a056144553c830acc33abb60031c94aa69c877d1787dd362354ceb78d1c9b21f0a46b06ed7d9da39c4b775b5b57f41eaa828367bf7", 0x53}, {&(0x7f0000000380)="184db369a2563d7d427a50184b161b3a3cf1e4", 0x13}, {&(0x7f00000003c0)="665e0270e69eacae2c", 0x9}], 0x4, &(0x7f0000000580)=[{0x100, 0x6, 0x4, "06da222fbdd7363408b647050f3178527b3b059b08ac287b1bef32efadad913c4eb857ec178059a3655ee297904f1acfe38f5e9ca2cd39c5c9947de31a012ec707c5115465904bac3ff32d5f324fa27154143b2096cb5535e5f318571a224e271e543e710c8a0f1601e3f37e18fe5bef52d95d62c1dcfe610692d6d50df6d5c07a5018cb2756356b8438328dd067cbeb137b0d172c5d8b54d8ffea636d58cf4281c94a6925c2508c747c3b1e1f36b0e97e45dbfbbd96d9a7a0f3d6cdf4a1e9249d711e84cd5374a256b58b4fda7bac6fbdb522ec0ea7886681ab1d5e04935496d7403f74fe9083087b32bf56"}, {0xe8, 0x10f, 0x8, "64472b4f494d2df64c0e71a24468a1687d0f2eedd0e2ca48ca6765421ba3e20fba18b7a0f1bf4e44a2b6922a1eb8fb8d4c78b1d7ab894890bac856cb55465a756ef4c5d3f2a183db39e856efd866ac978a78a1f777c58d3ded8a772ebe9db130c01afdb05d63cab6a37d16601cd1432ecddd266190ba1ab9d3cba3268df9fa8ad74f1df95e0f63cd78e4aef98fdecf4d3ff5cb044f5f961dafe414f1414bc239697af245206557cb01ebfad89d32193e32f152f4bcaba8c46e8437a3ea620b49f22c78a02f23bedce03e2dedc11ccdad00"}, {0x38, 0x10c, 0xbc1, "c4ea8b717b81a36f58a806ac3a5f47c20badf98466f273cce3b2342ac9ad2df79f71d41fe75fac83"}, {0xc0, 0x101, 0x8, "eef9f19518c01ea6732070a7ef30e072322f2e38348050a221a4a12afa9058978efb0360c9283b45f230c9aa77d2229ee48af5f352fba194a6d60292bd39ce9f7fd453c843d8402f8a66f144087a7c1a0c50f70bf563b2941710b93505f4d2bae608200ce2d5b645f2a8181f0d444d5e1effccd30e22f669722ab8bba6e79c60e8bae7ae4879df465cd78050c7c9a498e1bdd9e6067d269ee3c03979818cf7022c97d92594c3d7acdf3c0c90a3f268"}, {0x58, 0x10a, 0xfffffff6, "2dfa780d2ce6aa919f8a1310b53ea0efcabf7dd340d6cc3631579ddd0ff0250eae00934822bdff4ce86f5b6c2313c467bdd217e3ace4e7d44b430e657b7e94ef707d8414"}, {0x50, 0x11, 0x8, "6e24f284e325a2c4c6e63601e4bc1891a53dfa63d33727be7f09b4e0f00d574391afd282f7da43ac5a07f41dbe128531a4c83bfadb9dd0a3e164302b97e54f"}, {0x28, 0xff, 0x1, "71ce8d3dfc0836ada9e3f9293b3dc7edc0ab7cfb7d"}], 0x3b0}}], 0x1, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)

50.354792ms ago: executing program 4 (id=680):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000700000000000000fdffffff850000002a00000018010000756c6c2500000000002020207b1af8ff0023c2b2dd000000bfa1000000000085a53156af02dd42ffb702070008000000b70300000200000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b954d0475711e9abc89b6e5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

9.017455ms ago: executing program 0 (id=681):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x4}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f0000004380)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042088a8"], 0xfdef)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="20002abd7000fedbdf252e00000008000300", @ANYRES32, @ANYBLOB="0c009900000800000d0000000a00340001010101010100004000e3803c000000080002000000000004000100060003000a00000004000100040001"], 0x7c}, 0x1, 0x0, 0x0, 0x40802}, 0x4000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000102010100000000000000000a00000006000740000000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c0002"], 0x58}}, 0x0)
sendmmsg$sock(r2, &(0x7f00000027c0)=[{{&(0x7f0000000180)=@rc={0x1f, @any, 0x9f}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)="f34951e7d399026bada1b25abff784a6cfa7daeed7609e0e3e32cffdd0fa21b441", 0x21}], 0x1, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0xb7}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xf95}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="6e52383e657d9d4925730fa0a5d01ac189384d2c16dc214380dacb25e2c2ce82384629ed3d1ad620d5b0fca679f42c90af88c4d952b5d6cd66b72914015bd0889c1966491b2b12ff76c64e5806d26ae6b54fa2e468c0193d7525a5064aecab26e0f8bfae36aaf15dedac1b05f347dd2ec6c2907f809b50d5b8d4fe", 0x7b}, {&(0x7f00000013c0)="aa749af66654d215b362aef369965a0a23a8b94b73eafff162d2d2f0fc8a71747e76f1e9db146dd1bbc3bfea0ae5ddd35aeebc8223e79c09a01fbf9c18b0aa21d6e62190c295d9c7edbfc067ee5c062db0789e1e6d2cabf38a21114d4d7ec1c6506f6f152f5219fc3fe8be2937ae16d9474c943d1edf3d770dd3f55a42203c1f80a55d67fbd9a3fb6080fb4717ea39ea87f47dd24f0d69349e87608181c452aa5819370ef13f1156cc3dc64ea33873eba1013d20fa73895667f3b7f8f7cdd609979dc6fead9c56c46321dbde5b2c5837351ecf72a9c642c5cea837816023a1054519ba934cf95f85a1a9b0e86620564f3f18e00b", 0xf4}, {&(0x7f00000014c0)="5d51e7335f31dcf443cfebfc5e45bafe93163e5aba9a19e69f80e2c0c104773c8fb162ad7e818eda60cdc88ed415eaeeff764f62d48df1833d1a9cb89e63dec5d233a6913996b135879f6f0d9f21fbf005608d7e3d9c5240dbbe6d145d28b19068896b62d091bd62d01a13d4748d9a8cda596f8c47c37801db7811753594b04b100d91a8358da21dd66944d71a8bbd29d829cd68e38e07fd2587d638b1c37986171d519a526cd741e05de8df49e3ea559f0ef620151c0bae36bd588cf8", 0xbd}, {&(0x7f0000001580)="50f2df0a587a73d8d020c81ac638580d9f02e5d2b1c6489863124b72ed2ffed7ae3d17a2684ba4", 0x27}, {&(0x7f00000015c0)="a47107b00f44df0ef41b462105f4bbc7ce5108bf63d680c921837c0e49e224d2775f0af97766947d27983005aad020d47f74c0389770d5617df683ce9c75b7281dfc270a20a34f8f2829fbd787604546831731b97eab073dec7508dad7dd2e63fa95774c9a88b7302153ad3f8af912b666319d1ea19640db19627d3c6047eb4f59637bb1fac644ca385fcb66ebc78578d35f485f8c8ceead2b5f89d135ec7f516afa5149018206d4cc7cb31b6a7677c426c7fa0227c7caf7e86981933928d40ca867fa469d4074d7ddb988af7204f258fb064c758fdddfc11f446e94ddd2fea52c6dbb4b518d6739b1094106914d1f1db50539a576d01a73f84014d20367180970b26dc7d2f9382f395fba53858f39333076c0151a43e2676f759c0a73b04dd4fedc4347d1b9a2bd906f27b48135832510985a7d83cdcd8735208ffedcb368be9a7e225d8e5cd4f63d5c52b026d4aad6f790a5ee4de571f7c6a9891f788da65e0116642a19044cb1eed5db2930271c474306cec30af7da9e6380848933cec9feb2c577581c35ad7f35d3fc962300c7cd101b68f2ee8a78a677b7e159414b954e06a874334d8c033e1000ed7a5572071c09085e2f0fd4b6ad6606136450f215e7d2c5e9f5f22d2757752606d3d315e741210590acd605cadf39ae4a4611431f062c7093e70169374f4e6608e695b84a0f1b62026c96629af9e2e796e42467b764f4d091f7ce4ef9e7dbdbce1cd028efef412176e74eea1789ca8bcc919565ed22127959aa6aba52d9888591a8b9aa6da561f714d46f22ac82c8e8ea9b8d52564c40d6d1b28b23d0b35ae6e6d79640c6b33088ad21343d99ec99a5a7f76264874f47fe40b5322df465130dca8f13335475b00ad6c70099cd6e356ae4250b54f994a64e00452a9e75013694862e5954a2487273fd0ec8f1962b76b9a2990cdb28e5c9382588953d19a0cf738e69ba869218663762f3de55c9f0b318dac45783d502b28155f8b8c604d70013459d5e63a87c196fe48a8c330841b9f263661abe6541a59cb78a731ad0023f0515350d96bcf36575d02073f01763aed7383dd2150ab40a6cab04ee9d3667769502015a9c2cde2cefd2b8be9846e2515c6f0844a43597563c681327c2c1f542533a3f9687bde8285eefe8884a7b721df6196f7ab8509a131c426662d65c5d8b0aee7ce9ac700b527a7b4782a596c8f36eb9e93faf4937669e4f7f1b6c6dd34b53f92d869b97b8c508145af9149463dbb0183e3f60085351f451a881a3575ede5c1f665a8f7a092d01cc8313f826aa21c69263e2c1123dc695d08c6a9de8d387c969c86db6b120756f26736e0635e04a589306f661e5932fca627bf82b07b8c58f420bec74ca1908804560f092656858859c796b27615b4190c800bf3ab33d14b6898667e28c765c0d8ea515ecc148b9205e5681a3e5c39bdaa81dad772f27639b518db0d93214bd689cbbd8a44b9c6d89fa53f37084fea315e5c5e5e6f0bc085730431d2ce6579de6e83e19f2a2fba38d994b82b58dea59bc46f152c099c9d925dcae28c5c76cfc1588d9c8fdd03e4422ef12e4a01165dbe3714a967c8c72a4c28a89122f9e8a59dc859e6a32f6375e18e58e9274bdaa311fb37f154bee1ce86d58d1e9ad06694a66c8c0ca2d252046c8f7acb9b0dcbbe0ffb357a7e3ab8091089e29a3a97543c574b605ca048981792fc0cc2df506f81fb62558a0626c48ee15e7a73a4bd6959d05926315c5993d22aab54d5fe609716809c56fff65949bfcdeb4f5ce0e6fd4cf3f9f91f2566529f6b750956290c755ae829624e22f8c90bc488919dd13bb4bfafecd86737767e3403d60a91185dce49513605481dc7c4cb0b22758b69cec9d6e88a071f9ed27aaae6bbe4a01826d8cf354715b59eaf5e101b9c3a7e23fa8f25f29ddb9e2692348a11263afc4337ad2d8a7197777ff6446d4472349af107e3e54ae9c30e3dc5fddcf14cacf2e47c6f5c6c1f0ad602c28398a99577b15505de60921083bc990bd0b1301dcd38a3a4719868dcc2b97278ab12a3545e15929bc2e355b4636fc3eac9fef4af1ded8ece1dce215f3d17237d7d4d4725c4767c5adcc0033111e6d34c647f906532708429e2889efad13066d247799421010dddaf03672348cd9672510b6628f4196b7e04b366a9fcb0a2eda2aecf26080be4c13b03dc5d4f5042a170fd7e94f4e807ac2a7eb165d7ac5b17a2f2c7282494c1edc9fe464da7450e7e644d4d14c2b938018f82e2e368860abac2b3c6138f2252d8ef8ca9a82f986481b32af02600f444ac80244cc07478a31119086e3f3a01389f647383a7563f21cc29cd1cfce9a17ba330f225339738217d4986735ff57e7fb159f63dcaf000aa00228ccc624e5da31a33ab6a34f125afc635a9731f0b0059852a6432f0f6695286865cfd4194829816b8e9812a7a6ddb389b151617ad3030d76763ab868b35e04686f36ecb900eebb256fdfebb3b2266a5b51aeb452d83dd40eace88e52b078412c8d6a4091eec9c1b995d035268b34bc12a6a1be00b8e4402d2410aa20a5960eb75ba31bb22cadb3530bcff3ea2d95679760feecd1f789cb505845f0a9c08f8b4bb852d728d0a933274d08ed2a4a73b67c8241b38542f9a1f0edc76dcec77bb610d521f4b1ce54b5f5e3a64c30a6dcb6d5aceff78b79ed580613fd429a8eba0298f4d1c4449cb19965dadd4b9bc9e4ce980e4c83f62750b4a7d07daaf3ab6c703f7e47d3f34a596a69a192b84d0b59f495e3298589cbc819d9959ae08009f4c41fabfca9949f743813247feb4986dd948cae3916f763f73a00a9e346aed789b9126780652c49024bd46c3dfba916138a2ca2fad04435163e180c7900f3ef7cb7286765af912562771b2832755b7d489fccdeb89f857348f37de8cb2c7c5d887269b296ebb0df90d1210907269ef217cee68c301677fa9373601f0c0305099bca2dde590440f9ffcb6a78e2359ebdc7fdafc25294e738ad83235ec03c7a03b199c632e4d1f41cfadaec26576639d8f655e0fdc881746f1b676632a97b4135d1f4c6ac963e460bf4b000f12a5abd60403531c567530d91ba8d394a3fb7bfecb1cb136ddf98af8aa769acd5ffb4335356189b7cdf80c61878e762333b15b2d453742744e58995cd15901b1e62a2270b3a0555a68fef49a8296a804b5ff44e3ba3a0315d7e08b10e1e2a4a23fc1cb931ee5d527a9c80bd144517ea3848edfbb3b616b2f8681eb51e66b979cfafc8134eebdf11bf98556096beb41d5f5842dcf0a6b0059bb2d2e8aff4b38216fa72d259101123ba1310bfb4ec07485bc270d9fcf6803e1d79ea1766b5b9e3400ac0b52b73f61cdc92acdd7dcd0e78530734e517fef48b1a03e382b1f96719f493e6c8aec0c43f67f1e589d95c27fffdd1780ccfe6adb184187bad21226e73362693a9d79d6855c4986735cfd7450845e2d31b4dec8bed839c8f23b7c4e2db41386a0232a22d4d552065dba92b98567342cd7cae0a67eebc70914e1bce6dcb09806cbb8e8b2821163b710382261ba41861fc30e20ed2fa266bd38bfa418e455d96fabd330a3bae7de1753002c3c5fbc8cdf0c726a12edc994e8fcb167eafb87df096f855a74bf9db7df1ea7d37404f14af30d107130b8a0e682df5d4cfd1d99c4ba2c8ba85325e3fb2a935dfeaf55c655ca94a5c132379a3203f5ac100c07485576b86ed86222238edbd1f2da5cec55c40feaf32e29b5d818b24d23ff5e937abc862b22db6cad243ba8857caa4774fe420104350212a76d653a1c41aaa7d3106236f6a249dcd39e19a90754195838d7f392b9d44a1ca47afc8d861359b41beea7b8191e34a9c4e3f1884c8d13ae7409b7db36eb3cc685f32261581d58317beaeda7ca57204ea64b73de4006983349f7485c1a18d8351d4b754817df733260dce731e5d70184097617a796446887ad9851556e66efe1ea98e1691ffd86b6f9bfa7c01441e3f3caabc1a14a743fee1e2f492a26b4bcace8fdf6412bfff0d535eb2b6d73c0b0d68b11afdb1d51e3f4f1c389199dd6b5ab790dc4763b854093418598216da39ba659d1524de53a0d8eaf8bc72521e3d03381b8a57a2dc85e71e9d7524534d9b11f45af6d6ebba90f413488feda55358ddbb668516a2384b7e278d4956f269546244e48ae61255b121f2d9f376fd6c60a4dbeab2cbb1f62bfb78c3983fef56103bbea6d95ba6552e431394c51f60988fd7d5b651239a35c13854dcd48246622e770bd05117b0efddfd83149026e64c8c1fb66e7d33eb0623d8f66ac6082f993ef6d8156c1f8a50543d3b6cefa28e6b49fc06c433f19e30292963bc11f01789899c4c74c9f3f23a2a70c2e3dec8f9b04e862ef81a4d682f76b0caeb62604e31f674ebe5cb516895e51bb16cbfaee6ba4ade088f1ded88ac17ac84adb3324ecce8a70934725177657c1904fce64a4a3c7b6796ffeba4eff5d24f9168e8536ba8c688fd14997c412014c637324da5f65b60a79c02c324cbc08a62cdb09331b65fd98b3cfb192e4b812241db8deaf3a14e7d77dbe805c941d355719678305ffdeaf283c714d870ebdf9bfac0d50396ef2139ac993f32fd2de54b187abe5d28d28e4f59aa1971da7a65da398838fce4c5968358eee223f2dcca995b2f8a38ff900be95a5997090da92c9ba66576a4f1a6733a093d88de4580c0ec96fb26e7703371b5e54b46dcb8b96f6a1169ff39c45eca55f2fb7e9adf74c7be422e70be5a6e6bb539ebe536fe4ed2b2aa503e702401dcb44848a23a4cce5fc80b2980dfde0c57d28a766a099652cf3491860ac20a19bdcb0750974b03514fd1ebb4ff79e88e697cb8115319004c33f3b33285fa8bbfb6729518dd79ac3b412d6724e9e924e10268c859b6ff74faeaffda7f06412d0f22ba901b19427ce7a08b5659350f00cdda08e315f10ce41de1ac406a52eb837e3aee2b9e526c7b4c70c7ba9736f957e38b332e0790161eb8beda5e610aac037c2a6b0bbf2f2f1412c6e401c6d18fee4e1af9c73d78c935488dec8c342201356bf1afc5450c63bb04d428146afdb69448b6aff8b017e3849baf03ff2ac1464709c3498b9c9c6a76ed7ba8bfed3d8180268d4261c24d964ace52c54157be96a5a6fb8b6ba76818220471aaa9151647a0bd40d28d5db5c1c49d229c047718236d495554d94eaa5ba7c67bf8984d97fad993a259177b1a8b3d3d7bbf93cf92c77298dcefaab12ba0822fc3e3bd9e95e549bcb52b5e7ae32ee141205ddfd3e498cfde2ce0705876a488211197848733388ffaf8c9c3c58d6bbae263b99053407f5a3d49419fe20096fcd9f0303ea853a6562b44c3eb4037cead9b6037feede4dbf0b24433cf31cab4e2de4320a80ef53c626255b6a706d85d7b953507bf8eb0c5303dcb91d5af43420a099eff82056582fe205e7477da1d7c4e9aa0cee8e96e94a6b682634838e215116ae6c77ebe88e918d5581cf3a50d77e5dcc8b430f7e9224716aae53143e53f731568adf4cc8fbe27b09055e503b176c14fa018101fba07ed14f84910153cfa418589b8982b5e8957dfff3a9f1f2a621517318c6297875c58a4e994559516f9ff05fcbeee038ded36dd4d15db8fe72aef55e26e34fc0fb9e72571fe7301b430fc410a2c8660b2c2a427b1b656da610cf65855a31d8e493d524dc6ff1a5b1191bc0ab44f6e8fcc280ec3b90153f2fc01e330cda362c4a3de650d9edadbc8b9e309efc9c75ce8d609bdf21b0c8c85303faeccde1da0ae4f224c841de6d2c04855451c218c61f49eb192", 0x1000}], 0x6, &(0x7f0000002640)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xf}}, @txtime={{0x18, 0x1, 0x3d, 0xff}}, @mark={{0x14, 0x1, 0x24, 0x65}}, @txtime={{0x18, 0x1, 0x3d, 0x18b}}], 0x78}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000026c0)="28896a8b66434163dc22d5218aabc0ca7b0287d87061107123a90c1b880001f4e217cdc52a185f569af1666c7a9677b4820ed64f50a4c3f1f928f9c095f08889e35972a6", 0x44}, {&(0x7f0000002740)="8bd63c89a14f90bff0799f180783e5e74a57a22c61c752cb3e15ad9a32933169b8bd44a80a2e61008b", 0x29}], 0x2}}], 0x3, 0x4004000)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000002900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000002}, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r5, &(0x7f0000001ff0)={0x1d, r6}, 0x10)
sendto$packet(r4, &(0x7f0000002940)="b74c8d6b8b207cc685b74a785e2a30458230ee6a8dc0a50d86c4b4294fce9f1fa76652858faa04950cb6b22e6f4b38c9ea98797d343d34392fe5399052c5afaebf780a2cdade9d11841f38f4fe2d892cc792353f2bfd62460def8f4f7aadf95225f7e41ebb9768e680f5c3abe4af623f8207a621dfb39228d4213e373f97104bf52f83ce0fca559f1a983803b3349a80d18057cd2e196ad63d3fcd55c08db2a9a163035f652fba74f370f4b55a977f71e56ff9bcff041151bce9c77af8", 0xbd, 0x42010, &(0x7f0000002a00)={0x11, 0x1a, r6, 0x1, 0x7f, 0x6, @broadcast}, 0x14)

0s ago: executing program 4 (id=682):
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000010029bd71000300000000000000", @ANYRES32=0x0, @ANYBLOB="c5af07000f0e0000140003007465616d30000000000000000000000014001680100001800c000700040080951ee60000"], 0x48}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
ioctl$XFS_IOC_FSGETXATTRA(r2, 0x801c582d, &(0x7f00000001c0))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000c10400000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000000}, 0x50)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000140))
unshare(0x6a040000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x8, 0xc, 0xc, 0x383, 0x6, 0x1007f, 0x200000a, 0x33}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000006a00000226bd700c32db5f2502000000000000000400090004000b0008000500", @ANYRES32=r10, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, r8, 0x1, 0x70bd28, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r10}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts.
[   61.700544][ T5807] cgroup: Unknown subsys name 'net'
[   61.836236][ T5807] cgroup: Unknown subsys name 'cpuset'
[   61.844528][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   63.175786][ T5807] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.024319][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.032808][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.041245][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.049978][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.057902][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.206532][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.215274][   T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.223381][   T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.231719][   T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.243472][   T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.278867][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.289216][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   65.298514][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   65.306236][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.313508][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   65.314213][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.321101][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   65.329696][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.336304][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   65.343197][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.350286][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   65.364283][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   65.376608][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   65.377518][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   65.392097][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   65.564709][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   65.778954][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.786391][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.793975][ T5819] bridge_slave_0: entered allmulticast mode
[   65.801021][ T5819] bridge_slave_0: entered promiscuous mode
[   65.832881][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.840112][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.848010][ T5819] bridge_slave_1: entered allmulticast mode
[   65.855023][ T5819] bridge_slave_1: entered promiscuous mode
[   65.934187][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.982934][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.069455][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   66.085453][ T5819] team0: Port device team_slave_0 added
[   66.105815][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   66.131318][ T5819] team0: Port device team_slave_1 added
[   66.179823][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   66.231766][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.238958][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.265112][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.276538][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   66.306435][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.313512][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.339627][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.465099][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.472258][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.479521][ T5826] bridge_slave_0: entered allmulticast mode
[   66.486391][ T5826] bridge_slave_0: entered promiscuous mode
[   66.510526][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.517745][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.525298][ T5825] bridge_slave_0: entered allmulticast mode
[   66.532153][ T5825] bridge_slave_0: entered promiscuous mode
[   66.547323][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.554523][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.562407][ T5826] bridge_slave_1: entered allmulticast mode
[   66.569593][ T5826] bridge_slave_1: entered promiscuous mode
[   66.588780][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.596174][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.603402][ T5825] bridge_slave_1: entered allmulticast mode
[   66.610276][ T5825] bridge_slave_1: entered promiscuous mode
[   66.621299][ T5819] hsr_slave_0: entered promiscuous mode
[   66.627555][ T5819] hsr_slave_1: entered promiscuous mode
[   66.642628][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.649984][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.657700][ T5827] bridge_slave_0: entered allmulticast mode
[   66.664707][ T5827] bridge_slave_0: entered promiscuous mode
[   66.709053][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.716251][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.723547][ T5827] bridge_slave_1: entered allmulticast mode
[   66.730441][ T5827] bridge_slave_1: entered promiscuous mode
[   66.756212][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.769382][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.786757][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.793936][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.801051][ T5822] bridge_slave_0: entered allmulticast mode
[   66.808113][ T5822] bridge_slave_0: entered promiscuous mode
[   66.821914][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.832911][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.849975][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.857112][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.864522][ T5822] bridge_slave_1: entered allmulticast mode
[   66.871330][ T5822] bridge_slave_1: entered promiscuous mode
[   66.905545][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.947395][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.973714][ T5825] team0: Port device team_slave_0 added
[   66.987382][ T5826] team0: Port device team_slave_0 added
[   67.002798][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.014188][ T5825] team0: Port device team_slave_1 added
[   67.027170][ T5826] team0: Port device team_slave_1 added
[   67.042572][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.076131][ T5827] team0: Port device team_slave_0 added
[   67.115500][ T5827] team0: Port device team_slave_1 added
[   67.129900][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.137056][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.163283][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.163863][ T5145] Bluetooth: hci0: command tx timeout
[   67.175566][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.186212][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.212285][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.231648][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.238705][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.264730][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.286192][ T5822] team0: Port device team_slave_0 added
[   67.304350][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.311342][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.338502][ T5145] Bluetooth: hci1: command tx timeout
[   67.344364][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.366375][ T5822] team0: Port device team_slave_1 added
[   67.393339][ T5145] Bluetooth: hci2: command tx timeout
[   67.399480][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.406555][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.432449][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.472300][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.479486][ T5145] Bluetooth: hci4: command tx timeout
[   67.479512][ T5830] Bluetooth: hci3: command tx timeout
[   67.490200][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.516223][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.536579][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.543600][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.569776][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.613289][ T5825] hsr_slave_0: entered promiscuous mode
[   67.619724][ T5825] hsr_slave_1: entered promiscuous mode
[   67.625995][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[   67.631747][ T5825] Cannot create hsr debugfs directory
[   67.643415][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.650355][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.676432][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.699128][ T5826] hsr_slave_0: entered promiscuous mode
[   67.705406][ T5826] hsr_slave_1: entered promiscuous mode
[   67.711376][ T5826] debugfs: 'hsr0' already exists in 'hsr'
[   67.717292][ T5826] Cannot create hsr debugfs directory
[   67.839099][ T5827] hsr_slave_0: entered promiscuous mode
[   67.845378][ T5827] hsr_slave_1: entered promiscuous mode
[   67.851319][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   67.857086][ T5827] Cannot create hsr debugfs directory
[   67.866551][ T5822] hsr_slave_0: entered promiscuous mode
[   67.872849][ T5822] hsr_slave_1: entered promiscuous mode
[   67.879104][ T5822] debugfs: 'hsr0' already exists in 'hsr'
[   67.885011][ T5822] Cannot create hsr debugfs directory
[   67.999171][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.009440][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   68.057938][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.067326][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.097032][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.106067][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.137012][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.145886][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.331935][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.346605][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   68.354701][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.365953][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.374624][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.385932][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.394301][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.403655][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.485090][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.496027][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   68.503990][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.512737][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.520384][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.530194][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.538918][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.548130][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.637847][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   68.647414][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   68.656606][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   68.666008][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.683340][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   68.692041][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.700396][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   68.711041][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.797915][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.815117][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.826712][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   68.836016][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   68.847554][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   68.857061][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.865130][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   68.874365][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.887779][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   68.896677][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.927940][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   68.946735][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   68.957976][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.965456][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.997299][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.004439][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.033063][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.040159][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.057603][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.079460][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.086584][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.127951][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   69.166708][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.173810][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.202070][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.209171][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.233275][ T5830] Bluetooth: hci0: command tx timeout
[   69.266865][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.361000][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   69.386878][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.403228][ T5830] Bluetooth: hci1: command tx timeout
[   69.416034][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.423418][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.467196][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.474353][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.481854][ T5830] Bluetooth: hci2: command tx timeout
[   69.505928][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   69.556331][ T5830] Bluetooth: hci3: command tx timeout
[   69.563565][ T5830] Bluetooth: hci4: command tx timeout
[   69.577655][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.584831][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.619467][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.626637][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.698557][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.761777][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.836771][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.919420][ T5819] veth0_vlan: entered promiscuous mode
[   69.982175][ T5825] veth0_vlan: entered promiscuous mode
[   70.000997][ T5819] veth1_vlan: entered promiscuous mode
[   70.042764][ T5825] veth1_vlan: entered promiscuous mode
[   70.061093][ T5826] veth0_vlan: entered promiscuous mode
[   70.084882][ T5826] veth1_vlan: entered promiscuous mode
[   70.096684][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.140651][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.162131][ T5819] veth0_macvtap: entered promiscuous mode
[   70.187071][ T5819] veth1_macvtap: entered promiscuous mode
[   70.198154][ T5825] veth0_macvtap: entered promiscuous mode
[   70.226874][ T5825] veth1_macvtap: entered promiscuous mode
[   70.259072][ T5826] veth0_macvtap: entered promiscuous mode
[   70.282575][ T5826] veth1_macvtap: entered promiscuous mode
[   70.299793][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.324722][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.335801][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.374568][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.385535][ T5822] veth0_vlan: entered promiscuous mode
[   70.392320][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.413033][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.423042][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.449697][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.458568][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.473982][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.482273][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.499345][ T5822] veth1_vlan: entered promiscuous mode
[   70.505855][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.514881][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.535866][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.566495][   T47] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.577430][   T47] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.601136][   T47] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.610901][   T47] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.669969][   T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.687939][   T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.705163][ T5827] veth0_vlan: entered promiscuous mode
[   70.746280][ T5827] veth1_vlan: entered promiscuous mode
[   70.759263][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.762642][ T5822] veth0_macvtap: entered promiscuous mode
[   70.767163][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.795452][ T5822] veth1_macvtap: entered promiscuous mode
[   70.820959][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.830206][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.860336][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.885327][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.891913][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.900659][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.934249][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.961060][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.966640][ T5827] veth0_macvtap: entered promiscuous mode
[   70.969579][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.980759][ T5827] veth1_macvtap: entered promiscuous mode
[   70.991992][   T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.046623][   T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.068327][   T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.097279][   T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.138142][ T5926] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[   71.152476][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.191247][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.198564][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.216939][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.241546][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[   71.248224][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[   71.286400][ T1110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.304597][ T1110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.313423][ T5830] Bluetooth: hci0: command tx timeout
[   71.319593][ T1110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.350632][ T1110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.421479][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.429337][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.474456][ T5830] Bluetooth: hci1: command tx timeout
[   71.492721][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.510374][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.557416][ T5830] Bluetooth: hci2: command tx timeout
[   71.635680][ T5830] Bluetooth: hci4: command tx timeout
[   71.635692][ T5145] Bluetooth: hci3: command tx timeout
[   71.685171][ T1110] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.719570][ T1110] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.741437][ T1110] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.786301][ T5945] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7'.
[   71.800520][ T1110] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.802114][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.824880][ T5946] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7'.
[   71.858850][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.918433][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.941329][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.069706][ T5955] syzkaller1: entered promiscuous mode
[   72.075779][ T5955] syzkaller1: entered allmulticast mode
[   72.076853][ T5957] xt_hashlimit: size too large, truncated to 1048576
[   72.089165][ T5957] xt_hashlimit: max too large, truncated to 1048576
[   72.097105][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.127598][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.215729][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.232003][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.425451][ T5968] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12'.
[   72.480812][ T5963] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12'.
[   72.496551][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.504229][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.730048][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.746317][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.937716][ T5968] geneve2: entered promiscuous mode
[   72.950421][ T5975] dvmrp1: entered allmulticast mode
[   72.956869][ T5976] dvmrp1: left allmulticast mode
[   72.988472][ T5986] smc: net device hsr0 applied user defined pnetid SYZ2
[   73.201917][ T5994] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   73.219801][ T5996] Driver unsupported XDP return value 0 on prog  (id 6) dev N/A, expect packet loss!
[   73.232045][ T5998] warning: `syz.0.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.294805][ T6001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.344758][ T6000] syz.3.19 uses obsolete (PF_INET,SOCK_PACKET)
[   73.362729][ T5998] netlink: 'syz.0.18': attribute type 1 has an invalid length.
[   73.375908][ T6002] bond0: (slave macvlan2): Error -98 calling set_mac_address
[   73.403484][ T5830] Bluetooth: hci0: command tx timeout
[   73.409971][ T5998] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18'.
[   73.551570][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'.
[   73.553482][ T5830] Bluetooth: hci1: command tx timeout
[   73.633519][ T5830] Bluetooth: hci2: command tx timeout
[   73.716914][ T5830] Bluetooth: hci4: command tx timeout
[   73.717558][ T5145] Bluetooth: hci3: command tx timeout
[   73.724555][ T6023] Zero length message leads to an empty skb
[   73.752674][ T6011] team0: Port device team_slave_0 removed
[   73.799202][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'.
[   73.828433][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'.
[   73.839149][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.24'.
[   73.848851][ T6026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.24'.
[   74.257372][ T6051] syzkaller1: entered promiscuous mode
[   74.277241][ T6051] syzkaller1: entered allmulticast mode
[   74.605222][ T6061] syzkaller1: entered promiscuous mode
[   74.617934][ T6061] syzkaller1: entered allmulticast mode
[   74.938503][ T6095] nbd: nbd64 already in use
[   75.151380][ T5809] udevd[5809]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[   75.247769][   T50] cfg80211: failed to load regulatory.db
[   75.312661][ T6107] Bluetooth: MGMT ver 1.23
[   75.372494][ T6109] netlink: 'syz.4.47': attribute type 10 has an invalid length.
[   75.387759][ T6109] netlink: 'syz.4.47': attribute type 10 has an invalid length.
[   75.518672][ T6103] syz.3.45 (6103) used greatest stack depth: 17560 bytes left
[   75.690018][ T6118] xt_CT: No such helper "syz1"
[   76.535179][ T6156] bridge_slave_0: left allmulticast mode
[   76.562987][ T6156] bridge_slave_0: left promiscuous mode
[   76.574110][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.617586][ T6156] bridge_slave_1: left allmulticast mode
[   76.645362][ T6156] bridge_slave_1: left promiscuous mode
[   76.677087][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.716306][ T6156] bond0: (slave bond_slave_0): Releasing backup interface
[   76.773640][ T6156] bond0: (slave bond_slave_1): Releasing backup interface
[   76.803744][ T6164] Cannot find set identified by id 65534 to match
[   76.832035][ T6156] team0: Port device team_slave_0 removed
[   76.851180][ T6156] team0: Port device team_slave_1 removed
[   76.876367][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.886019][ T6142] infiniband syz1: set active
[   76.907916][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.917601][ T6142] infiniband syz1: added bond0
[   76.929327][ T6171] __nla_validate_parse: 15 callbacks suppressed
[   76.929340][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'.
[   77.039862][ T6142] RDS/IB: syz1: added
[   77.048948][ T6142] smc: adding ib device syz1 with port count 1
[   77.055792][ T6142] smc:    ib device syz1 port 1 has no pnetid
[   77.070119][ T6156] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   77.241996][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'.
[   77.276998][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'.
[   77.491276][ T6185] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.69'.
[   77.495425][ T6186] netlink: 'syz.0.68': attribute type 2 has an invalid length.
[   77.840116][ T6202] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.73'.
[   77.922499][ T6207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.74'.
[   77.947965][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'.
[   77.987630][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.74'.
[   78.063296][ T6215] gre1: entered promiscuous mode
[   78.182725][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'.
[   78.236454][ T6221] netlink: 'syz.0.78': attribute type 5 has an invalid length.
[   78.296585][ T6225] netlink: 'syz.3.80': attribute type 1 has an invalid length.
[   78.340585][ T6227] netlink: 'syz.2.79': attribute type 15 has an invalid length.
[   78.370337][ T6227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.79'.
[   78.599538][ T6237] netlink: 'syz.3.83': attribute type 1 has an invalid length.
[   78.619162][ T6237] netlink: 'syz.3.83': attribute type 2 has an invalid length.
[   80.182632][ T6284] netlink: 'syz.0.96': attribute type 12 has an invalid length.
[   80.361286][ T6287] sctp: [Deprecated]: syz.4.97 (pid 6287) Use of int in max_burst socket option.
[   80.361286][ T6287] Use struct sctp_assoc_value instead
[   80.483883][ T6287] syzkaller0: entered promiscuous mode
[   80.492619][ T6287] syzkaller0: entered allmulticast mode
[   82.084653][ T6308] ip6gre1: entered promiscuous mode
[   82.089904][ T6308] ip6gre1: entered allmulticast mode
[   82.098477][ T6310] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[   82.108241][ T6310] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[   82.122526][ T6310] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   82.319330][ T6322] netlink: 'syz.0.107': attribute type 1 has an invalid length.
[   82.376374][ T6320] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32)
[   82.450723][ T6332] __nla_validate_parse: 11 callbacks suppressed
[   82.450738][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'.
[   82.454992][ T6322] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.527077][ T6322] x_tables: duplicate underflow at hook 3
[   82.540065][ T6335] tipc: Started in network mode
[   82.549977][ T6335] tipc: Node identity 00000000000000004000000000000001, cluster identity 4711
[   82.579601][ T6335] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   82.627983][ T6322] bond1: (slave geneve2): making interface the new active one
[   82.638740][ T6322] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   82.794033][ T6342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.113'.
[   82.909069][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'.
[   82.951410][ T6351] bond1: (slave geneve2): Releasing active interface
[   83.461348][ T6374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.119'.
[   84.351313][ T6411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.132'.
[   84.437434][ T6411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.132'.
[   84.648279][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'.
[   84.849688][ T6426] syzkaller0: entered promiscuous mode
[   84.868082][ T6426] syzkaller0: entered allmulticast mode
[   84.971813][ T6435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.138'.
[   84.992972][ T6435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.138'.
[   85.021926][ T6437] netlink: 32 bytes leftover after parsing attributes in process `syz.0.139'.
[   85.055226][ T6435] ip6gre1: entered promiscuous mode
[   85.060525][ T6435] ip6gre1: entered allmulticast mode
[   85.092283][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.116255][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.206318][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.238456][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.335727][ T6444] tunl0: entered promiscuous mode
[   85.342442][ T6444] tunl0: entered allmulticast mode
[   85.705730][ T6459] netlink: 'syz.0.146': attribute type 1 has an invalid length.
[   85.741066][ T6459] netlink: 'syz.0.146': attribute type 1 has an invalid length.
[   86.075031][ T6479] netlink: 'syz.4.151': attribute type 1 has an invalid length.
[   86.124947][ T6472] veth1: entered promiscuous mode
[   86.401028][ T6487] tipc: Started in network mode
[   86.421333][ T6487] tipc: Node identity aaaaaaaaaa35, cluster identity 4711
[   86.434238][ T6487] tipc: Enabled bearer <eth:macvlan1>, priority 14
[   86.540790][ T6494] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.587866][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.598044][   T10] tipc: Node number set to 10463914
[   87.772241][ T6545] netlink: 'syz.2.167': attribute type 3 has an invalid length.
[   88.098122][ T6553] __nla_validate_parse: 9 callbacks suppressed
[   88.098141][ T6553] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.171'.
[   88.122430][ T6553] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   88.674345][ T6581] netlink: 84 bytes leftover after parsing attributes in process `syz.2.179'.
[   88.711847][ T6584] syzkaller1: tun_chr_ioctl cmd 1074025677
[   88.718353][ T6584] syzkaller1: linktype set to 260
[   88.805185][ T6587] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[   89.154516][ T6612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.187'.
[   89.186533][ T6612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.187'.
[   89.273003][ T6612] ip6gre1: entered promiscuous mode
[   89.305930][ T6612] ip6gre1: entered allmulticast mode
[   89.396950][ T6626] netlink: 'syz.2.190': attribute type 29 has an invalid length.
[   89.420972][ T6616] FAULT_INJECTION: forcing a failure.
[   89.420972][ T6616] name failslab, interval 1, probability 0, space 0, times 1
[   89.453694][ T6616] CPU: 0 UID: 0 PID: 6616 Comm: syz.3.187 Not tainted syzkaller #0 PREEMPT(full) 
[   89.453715][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   89.453732][ T6616] Call Trace:
[   89.453739][ T6616]  <TASK>
[   89.453746][ T6616]  dump_stack_lvl+0xe8/0x150
[   89.453777][ T6616]  should_fail_ex+0x412/0x560
[   89.453807][ T6616]  should_failslab+0xa8/0x100
[   89.453825][ T6616]  ? skb_clone+0x212/0x3a0
[   89.453842][ T6616]  kmem_cache_alloc_noprof+0x87/0x650
[   89.453867][ T6616]  ? __netlink_lookup+0xc6/0x8b0
[   89.453896][ T6616]  skb_clone+0x212/0x3a0
[   89.453916][ T6616]  __netlink_deliver_tap+0x404/0x850
[   89.453952][ T6616]  ? netlink_deliver_tap+0x2e/0x1b0
[   89.453978][ T6616]  netlink_deliver_tap+0x19c/0x1b0
[   89.454002][ T6616]  netlink_unicast+0x730/0x8e0
[   89.454035][ T6616]  netlink_sendmsg+0x813/0xb40
[   89.454067][ T6616]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.454095][ T6616]  ? aa_sock_msg_perm+0xf1/0x1b0
[   89.454119][ T6616]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   89.454154][ T6616]  ____sys_sendmsg+0x972/0x9f0
[   89.454180][ T6616]  ? __might_fault+0xaf/0x130
[   89.454208][ T6616]  ? __pfx_____sys_sendmsg+0x10/0x10
[   89.454242][ T6616]  ? import_iovec+0x73/0xa0
[   89.454264][ T6616]  ___sys_sendmsg+0x2a5/0x360
[   89.454290][ T6616]  ? get_pid_task+0x20/0x1f0
[   89.454311][ T6616]  ? __pfx____sys_sendmsg+0x10/0x10
[   89.454357][ T6616]  ? sb_end_write+0xe9/0x1c0
[   89.454390][ T6616]  ? __pfx_vfs_write+0x10/0x10
[   89.454422][ T6616]  __x64_sys_sendmsg+0x1bd/0x2a0
[   89.454451][ T6616]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   89.454485][ T6616]  ? __pfx_ksys_write+0x10/0x10
[   89.454518][ T6616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.454538][ T6616]  do_syscall_64+0x15f/0xf80
[   89.454558][ T6616]  ? trace_irq_disable+0x3b/0x140
[   89.454577][ T6616]  ? clear_bhb_loop+0x40/0x90
[   89.454598][ T6616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.454615][ T6616] RIP: 0033:0x7f7a3939c819
[   89.454637][ T6616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.454650][ T6616] RSP: 002b:00007f7a3a31e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   89.454670][ T6616] RAX: ffffffffffffffda RBX: 00007f7a39616090 RCX: 00007f7a3939c819
[   89.454683][ T6616] RDX: 0000000020008004 RSI: 00002000000006c0 RDI: 000000000000000d
[   89.454694][ T6616] RBP: 00007f7a3a31e090 R08: 0000000000000000 R09: 0000000000000000
[   89.454705][ T6616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.454715][ T6616] R13: 00007f7a39616128 R14: 00007f7a39616090 R15: 00007ffdf457e878
[   89.454742][ T6616]  </TASK>
[   89.945858][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'.
[   89.971503][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'.
[   90.061932][ T6649] vxcan3: entered promiscuous mode
[   90.244044][ T6660] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[   90.267682][ T6660] openvswitch: netlink: Message has 16 unknown bytes.
[   90.469396][ T6678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.203'.
[   90.479648][ T6678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.203'.
[   90.581275][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.205'.
[   90.605450][ T6678] FAULT_INJECTION: forcing a failure.
[   90.605450][ T6678] name failslab, interval 1, probability 0, space 0, times 0
[   90.628444][ T6678] CPU: 1 UID: 0 PID: 6678 Comm: syz.1.203 Not tainted syzkaller #0 PREEMPT(full) 
[   90.628466][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   90.628477][ T6678] Call Trace:
[   90.628484][ T6678]  <TASK>
[   90.628491][ T6678]  dump_stack_lvl+0xe8/0x150
[   90.628522][ T6678]  should_fail_ex+0x412/0x560
[   90.628551][ T6678]  should_failslab+0xa8/0x100
[   90.628571][ T6678]  __kmalloc_noprof+0xe8/0x760
[   90.628597][ T6678]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[   90.628623][ T6678]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[   90.628652][ T6678]  genl_family_rcv_msg_doit+0xd9/0x330
[   90.628676][ T6678]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   90.628703][ T6678]  ? apparmor_capable+0x126/0x170
[   90.628722][ T6678]  ? bpf_lsm_capable+0x9/0x20
[   90.628740][ T6678]  ? security_capable+0x7e/0x2c0
[   90.628767][ T6678]  genl_rcv_msg+0x61c/0x7a0
[   90.628800][ T6678]  ? __pfx_genl_rcv_msg+0x10/0x10
[   90.628818][ T6678]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   90.628844][ T6678]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[   90.628862][ T6678]  ? __pfx_nl80211_post_doit+0x10/0x10
[   90.628902][ T6678]  netlink_rcv_skb+0x232/0x4b0
[   90.628927][ T6678]  ? __pfx_genl_rcv_msg+0x10/0x10
[   90.628948][ T6678]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   90.628988][ T6678]  ? down_read+0x270/0x2e0
[   90.629009][ T6678]  ? genl_rcv+0xd/0x40
[   90.629029][ T6678]  genl_rcv+0x28/0x40
[   90.629045][ T6678]  netlink_unicast+0x75c/0x8e0
[   90.629078][ T6678]  netlink_sendmsg+0x813/0xb40
[   90.629111][ T6678]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.629139][ T6678]  ? aa_sock_msg_perm+0xf1/0x1b0
[   90.629164][ T6678]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   90.629192][ T6678]  ____sys_sendmsg+0x972/0x9f0
[   90.629218][ T6678]  ? __might_fault+0xaf/0x130
[   90.629247][ T6678]  ? __pfx_____sys_sendmsg+0x10/0x10
[   90.629281][ T6678]  ? import_iovec+0x73/0xa0
[   90.629304][ T6678]  ___sys_sendmsg+0x2a5/0x360
[   90.629327][ T6678]  ? get_pid_task+0x20/0x1f0
[   90.629349][ T6678]  ? __pfx____sys_sendmsg+0x10/0x10
[   90.629395][ T6678]  ? sb_end_write+0xe9/0x1c0
[   90.629428][ T6678]  ? __pfx_vfs_write+0x10/0x10
[   90.629462][ T6678]  __x64_sys_sendmsg+0x1bd/0x2a0
[   90.629490][ T6678]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   90.629525][ T6678]  ? __pfx_ksys_write+0x10/0x10
[   90.629557][ T6678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.629577][ T6678]  do_syscall_64+0x15f/0xf80
[   90.629597][ T6678]  ? trace_irq_disable+0x3b/0x140
[   90.629616][ T6678]  ? clear_bhb_loop+0x40/0x90
[   90.629638][ T6678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.629655][ T6678] RIP: 0033:0x7f248d39c819
[   90.629672][ T6678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.629686][ T6678] RSP: 002b:00007f248e2d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   90.629706][ T6678] RAX: ffffffffffffffda RBX: 00007f248d615fa0 RCX: 00007f248d39c819
[   90.629719][ T6678] RDX: 0000000020008004 RSI: 00002000000006c0 RDI: 000000000000000d
[   90.629730][ T6678] RBP: 00007f248e2d2090 R08: 0000000000000000 R09: 0000000000000000
[   90.629741][ T6678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.629751][ T6678] R13: 00007f248d616038 R14: 00007f248d615fa0 R15: 00007ffd63d0c0d8
[   90.629787][ T6678]  </TASK>
[   90.966382][ T6691] netlink: 72 bytes leftover after parsing attributes in process `syz.3.204'.
[   91.032144][ T6688] netlink: 'syz.4.205': attribute type 4 has an invalid length.
[   91.192383][ T6702] hsr0: entered promiscuous mode
[   91.353311][ T6711] netlink: 'syz.4.210': attribute type 29 has an invalid length.
[   91.385408][ T6711] netlink: 'syz.4.210': attribute type 29 has an invalid length.
[   91.768933][ T6724] tipc: Failed to obtain node identity
[   91.788314][ T6724] tipc: Enabling of bearer <ib:gre0> rejected, failed to enable media
[   91.968963][ T5890] IPVS: starting estimator thread 0...
[   92.074274][ T6740] IPVS: using max 29 ests per chain, 69600 per kthread
[   92.308598][ T6743] syzkaller0: entered promiscuous mode
[   92.314219][ T6743] syzkaller0: entered allmulticast mode
[   94.362925][ T6767] netlink: 'syz.1.225': attribute type 29 has an invalid length.
[   94.641679][ T6774] Bluetooth: MGMT ver 1.23
[   94.771821][ T5890] IPVS: starting estimator thread 0...
[   94.795044][ T6783] netlink: 'syz.2.230': attribute type 1 has an invalid length.
[   94.806952][ T6783] __nla_validate_parse: 8 callbacks suppressed
[   94.806965][ T6783] netlink: 224 bytes leftover after parsing attributes in process `syz.2.230'.
[   94.823894][ T6783] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR
[   94.883454][ T6787] IPVS: using max 33 ests per chain, 79200 per kthread
[   94.930865][ T6791] delete_channel: no stack
[   94.943910][ T6791] delete_channel: no stack
[   95.237962][ T6802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.234'.
[   95.724968][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.242'.
[   95.978852][ T6828] bond1: entered promiscuous mode
[   95.996384][ T6828] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.673406][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout
[   96.679691][ T5145] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   96.764062][ T6857] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.876729][ T6857] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.931566][ T6870] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   97.088500][ T6857] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.302118][ T6857] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.329740][ T6882] netlink: 'syz.2.254': attribute type 1 has an invalid length.
[   97.339769][ T6883] netlink: 'syz.2.254': attribute type 1 has an invalid length.
[   97.348554][ T6883] netlink: 'syz.2.254': attribute type 1 has an invalid length.
[   97.357504][ T6884] netlink: 'syz.2.254': attribute type 1 has an invalid length.
[   97.377563][ T6882] netlink: 'syz.2.254': attribute type 1 has an invalid length.
[   97.390780][ T6882] netlink: 39 bytes leftover after parsing attributes in process `syz.2.254'.
[   97.876997][ T6897] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.908156][ T6897] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.942350][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.001459][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.012778][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.257'.
[   98.279986][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.262'.
[   98.446373][ T6930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.537932][ T6942] netlink: 'syz.2.265': attribute type 10 has an invalid length.
[   98.546389][ T6942] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   99.007122][ T6958] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   99.235941][ T6968] xt_TCPMSS: Only works on TCP SYN packets
[   99.359403][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'.
[   99.382157][ T6966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.274'.
[   99.426239][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'.
[   99.441577][ T6966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.274'.
[   99.620233][ T6985] xt_TCPMSS: Only works on TCP SYN packets
[   99.710036][ T6988] IPVS: set_ctl: invalid protocol: 1 100.1.1.1:20001
[  100.114423][ T6995] bond2: entered promiscuous mode
[  100.120949][ T6995] 8021q: adding VLAN 0 to HW filter on device bond2
[  100.187800][ T7000] bond3 (unregistering): Released all slaves
[  100.326052][ T6997] syzkaller1: entered promiscuous mode
[  100.331588][ T6997] syzkaller1: entered allmulticast mode
[  100.381340][ T6995] netem: unknown loss type 0
[  100.394443][ T6995] netem: change failed
[  100.645627][ T7026] __nla_validate_parse: 3 callbacks suppressed
[  100.645643][ T7026] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.287'.
[  100.761773][ T7026] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  101.154991][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'.
[  101.176781][ T7060] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  101.178331][ T7061] 8021q: VLANs not supported on gre0
[  101.205248][ T7061] x_tables: duplicate underflow at hook 2
[  101.231436][ T7062] x_tables: duplicate underflow at hook 2
[  101.361127][ T7073] tipc: Started in network mode
[  101.373949][ T7073] tipc: Node identity 0e7a07476bd, cluster identity 4711
[  101.386400][ T7073] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.440664][ T7076] netlink: 28 bytes leftover after parsing attributes in process `syz.4.298'.
[  101.448836][ T7067] syzkaller0: entered promiscuous mode
[  101.456833][ T7067] syzkaller0: entered allmulticast mode
[  101.464561][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'.
[  101.474150][ T7067] tipc: Resetting bearer <eth:syzkaller0>
[  101.552845][ T6886] tipc: Resetting bearer <eth:syzkaller0>
[  101.559561][ T7066] tipc: Resetting bearer <eth:syzkaller0>
[  102.877362][ T7066] tipc: Disabling bearer <eth:syzkaller0>
[  102.895181][ T5898] tipc: Node number set to 1705641799
[  103.040643][ T7083] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.049248][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'.
[  103.070773][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'.
[  103.182382][ T7083] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.340469][ T7083] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.620434][ T7083] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.686935][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'.
[  103.718542][ T7137] openvswitch: netlink: Duplicate or invalid key (type 0).
[  103.750138][ T7137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.810615][ T7137] netlink: 'syz.2.313': attribute type 3 has an invalid length.
[  103.842629][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'.
[  103.909605][ T6898] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.971660][ T6897] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.029213][ T7143] 8021q: VLANs not supported on ip6tnl0
[  104.036911][ T6886] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.084651][ T6886] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.281526][ T7163] netlink: 280 bytes leftover after parsing attributes in process `syz.3.321'.
[  104.476225][ T7180] xt_hashlimit: size too large, truncated to 1048576
[  104.477600][ T7181] –: renamed from dummy0 (while UP)
[  107.032393][ T7146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  107.186572][ T7197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.330'.
[  107.197804][ T7196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.329'.
[  107.216665][ T7196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.329'.
[  107.438658][ T7196] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.570562][ T7220] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.608587][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'.
[  107.692370][ T7220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.707491][ T7220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.822063][ T7220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.833612][ T7220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.878187][ T7233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.339'.
[  107.908518][ T7220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.921288][ T7220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.949198][ T7233] nbd: socks must be embedded in a SOCK_ITEM attr
[  107.959897][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.339'.
[  107.969427][ T7235] nbd: nbd64 already in use
[  107.971958][ T5812] block nbd64: NBD_DISCONNECT
[  107.976909][ T7234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.339'.
[  107.988726][ T7234] nbd: device at index 64 is going down
[  108.096882][ T7220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.108718][ T7220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.122258][ T5809] udevd[5809]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  108.296579][ T7243] netlink: 'syz.4.341': attribute type 1 has an invalid length.
[  108.352425][   T35] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.361101][   T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.522556][ T6898] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.545659][ T6898] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.658398][ T6898] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.682076][ T6898] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.750046][ T6898] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.780276][ T6898] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.815775][ T7261] netlink: zone id is out of range
[  108.841509][ T7261] netlink: get zone limit has 4 unknown bytes
[  108.845418][ T7259] syzkaller0: entered promiscuous mode
[  108.857095][ T7259] syzkaller0: entered allmulticast mode
[  108.997581][ T7273] netlink: 48 bytes leftover after parsing attributes in process `syz.2.351'.
[  109.156741][ T7276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.664920][   T35] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.684051][   T35] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.721904][   T35] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.752059][   T35] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.952643][ T7321] netlink: 'syz.4.364': attribute type 15 has an invalid length.
[  109.985629][ T7321] netlink: 666 bytes leftover after parsing attributes in process `syz.4.364'.
[  110.079583][ T7329] netlink: 68 bytes leftover after parsing attributes in process `syz.3.367'.
[  110.236799][ T7332] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  110.350920][ T7339] trusted_key: syz.2.369 sent an empty control message without MSG_MORE.
[  112.814657][ T7314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  113.074323][ T5890] IPVS: starting estimator thread 0...
[  113.102208][ T7374] __nla_validate_parse: 4 callbacks suppressed
[  113.102226][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'.
[  113.133583][ T7377] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.380'.
[  113.155530][ T7374] veth1_to_bridge: entered allmulticast mode
[  113.165712][ T7377] Bluetooth: MGMT ver 1.23
[  113.183748][ T7375] IPVS: using max 30 ests per chain, 72000 per kthread
[  113.207780][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'.
[  113.242482][ T7385] hsr_slave_0: left promiscuous mode
[  113.259288][ T7385] hsr_slave_1: left promiscuous mode
[  113.280499][ T7385] smc: removing net device hsr0 with user defined pnetid SYZ2
[  113.381300][ T7391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.385'.
[  113.391181][ T7389] netlink: 164 bytes leftover after parsing attributes in process `syz.2.384'.
[  113.414464][ T7389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.384'.
[  113.569816][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'.
[  114.237110][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'.
[  114.318615][ T7437] syzkaller1: tun_chr_ioctl cmd 1074025677
[  114.332063][ T7437] syzkaller1: linktype set to 805
[  114.480560][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'.
[  114.650573][ T7464] xt_l2tp: missing protocol rule (udp|l2tpip)
[  114.825625][ T7467] syzkaller0: entered promiscuous mode
[  114.831255][ T7467] syzkaller0: entered allmulticast mode
[  114.976653][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'.
[  116.436039][ T7505] macvtap0: entered promiscuous mode
[  116.747406][ T7523] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  117.747459][ T7576] netlink: 'syz.4.436': attribute type 30 has an invalid length.
[  118.140802][ T7593] __nla_validate_parse: 10 callbacks suppressed
[  118.140819][ T7593] netlink: 68 bytes leftover after parsing attributes in process `syz.4.437'.
[  118.168176][ T7596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.438'.
[  118.519630][ T7613] netlink: 'syz.3.443': attribute type 1 has an invalid length.
[  118.590111][ T7613] 8021q: adding VLAN 0 to HW filter on device bond3
[  118.613013][ T7622] 8021q: adding VLAN 0 to HW filter on device bond3
[  118.620014][ T7622] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  118.631638][ T7622] bond3: (slave vcan1): Error -95 calling set_mac_address
[  118.643941][ T7599] lo speed is unknown, defaulting to 1000
[  118.660853][ T7599] lo speed is unknown, defaulting to 1000
[  118.688959][ T7599] lo speed is unknown, defaulting to 1000
[  119.281808][ T7645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.451'.
[  119.414312][ T7649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.452'.
[  119.649873][ T7599] infiniband sqz0: set down
[  119.657249][ T7599] infiniband sqz0: added lo
[  119.668426][ T7599] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  119.672795][   T24] lo speed is unknown, defaulting to 1000
[  119.688712][ T7599] infiniband sqz0: Couldn't open port 1
[  119.735025][ T7599] RDS/IB: sqz0: added
[  119.742560][ T7599] smc: adding ib device sqz0 with port count 1
[  119.751158][ T7599] smc:    ib device sqz0 port 1 has no pnetid
[  119.758791][   T24] lo speed is unknown, defaulting to 1000
[  119.766741][ T7599] lo speed is unknown, defaulting to 1000
[  120.177973][ T7683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.463'.
[  120.338936][ T7678] bond2 (unregistering): Released all slaves
[  120.418890][ T7686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.462'.
[  120.439688][ T7686] netlink: 40 bytes leftover after parsing attributes in process `syz.3.462'.
[  120.494259][ T7599] lo speed is unknown, defaulting to 1000
[  120.653585][ T7706] netlink: 'syz.0.468': attribute type 10 has an invalid length.
[  120.675727][ T7706] netlink: 2 bytes leftover after parsing attributes in process `syz.0.468'.
[  120.693484][ T7707] sctp: [Deprecated]: syz.3.469 (pid 7707) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.693484][ T7707] Use struct sctp_sack_info instead
[  121.006440][ T7710] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.135043][ T7599] lo speed is unknown, defaulting to 1000
[  121.597861][ T7733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.477'.
[  121.615403][ T7733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.477'.
[  121.663896][ T6900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.673935][ T6900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.698195][ T7736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.741437][ T7599] lo speed is unknown, defaulting to 1000
[  122.078671][ T7599] lo speed is unknown, defaulting to 1000
[  122.333914][ T7760] Cannot find del_set index 4 as target
[  122.827969][ T7785] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  122.841374][ T7785] netlink: zone id is out of range
[  122.847026][ T7785] netlink: zone id is out of range
[  122.852510][ T7785] netlink: zone id is out of range
[  122.858116][ T7785] netlink: zone id is out of range
[  122.863597][ T7785] netlink: zone id is out of range
[  122.868803][ T7785] netlink: zone id is out of range
[  122.937558][ T7758] veth5: entered allmulticast mode
[  123.072080][ T7758] bond1: (slave veth5): Enslaving as an active interface with an up link
[  123.126144][ T7754] bond1 (unregistering): (slave veth5): Releasing backup interface
[  123.145434][ T7754] bond1 (unregistering): Released all slaves
[  123.411277][ T7807] syzkaller1: entered promiscuous mode
[  123.423212][ T7807] syzkaller1: entered allmulticast mode
[  123.432323][ T7811] __nla_validate_parse: 3 callbacks suppressed
[  123.432338][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.499'.
[  123.516124][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'.
[  123.544128][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.500'.
[  123.567594][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'.
[  123.605425][ T6897] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.624068][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'.
[  123.637687][ T6897] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.651738][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.500'.
[  123.666316][ T6897] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.683273][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'.
[  123.698139][ T6897] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.822391][ T7831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.506'.
[  123.920965][ T7829] netlink: 'syz.2.505': attribute type 7 has an invalid length.
[  123.935184][ T7840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.509'.
[  123.949096][ T7842] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  123.950759][ T7829] netlink: 'syz.2.505': attribute type 8 has an invalid length.
[  123.969132][ T7842] netlink: 43 bytes leftover after parsing attributes in process `syz.1.508'.
[  124.000834][ T7829] netlink: 'syz.2.505': attribute type 8 has an invalid length.
[  124.017143][ T7842] IPv6: sit1: Disabled Multicast RS
[  124.017546][ T7829] netlink: 'syz.2.505': attribute type 4 has an invalid length.
[  124.038554][ T7842] sit1: entered allmulticast mode
[  124.044468][ T7829] netlink: 'syz.2.505': attribute type 7 has an invalid length.
[  124.462152][ T7849] netlink: 'syz.4.512': attribute type 1 has an invalid length.
[  124.514833][ T7865] netlink: 'syz.4.512': attribute type 1 has an invalid length.
[  125.306897][ T7862] lo speed is unknown, defaulting to 1000
[  125.454943][ T7899] netlink: get zone limit has 4 unknown bytes
[  125.845980][ T7908] sctp: [Deprecated]: syz.1.522 (pid 7908) Use of int in max_burst socket option deprecated.
[  125.845980][ T7908] Use struct sctp_assoc_value instead
[  126.001656][ T7924] openvswitch: netlink: Duplicate or invalid key (type 0).
[  126.017811][ T7924] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.065623][ T7927] TCP: tcp_parse_options: Illegal window scaling value 64 > 14 received
[  126.259135][ T7932] netlink: 'syz.4.529': attribute type 9 has an invalid length.
[  126.656656][ T7953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.703986][ T7953] gretap0: entered promiscuous mode
[  126.760663][ T7953] 0ªî{X¹¦: renamed from gretap0
[  126.795937][ T7953] 0ªî{X¹¦: left promiscuous mode
[  126.819779][ T7953] 0ªî{X¹¦: entered allmulticast mode
[  126.899104][ T7953] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  127.490760][ T7981] dvmrp1: entered allmulticast mode
[  127.511173][ T7985] dvmrp1: left allmulticast mode
[  127.576051][ T7981] x_tables: duplicate underflow at hook 2
[  128.620251][ T8023] __nla_validate_parse: 16 callbacks suppressed
[  128.620269][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'.
[  129.007809][ T8044] netlink: 'syz.4.558': attribute type 1 has an invalid length.
[  129.098232][ T8044] 8021q: adding VLAN 0 to HW filter on device bond1
[  129.260108][ T8053] syzkaller1: entered promiscuous mode
[  129.265840][ T8053] syzkaller1: entered allmulticast mode
[  129.267042][ T8056] set match dimension is over the limit!
[  129.293602][ T8050] sctp: [Deprecated]: syz.4.560 (pid 8050) Use of struct sctp_assoc_value in delayed_ack socket option.
[  129.293602][ T8050] Use struct sctp_sack_info instead
[  129.508798][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'.
[  129.788192][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.567'.
[  130.108189][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'.
[  130.276025][ T8087] netlink: 44 bytes leftover after parsing attributes in process `syz.3.572'.
[  130.303772][ T8087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'.
[  130.349229][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'.
[  130.664808][ T8095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'.
[  130.848265][ T8079] lo speed is unknown, defaulting to 1000
[  130.917591][ T8103] syzkaller1: entered promiscuous mode
[  130.930692][ T8105] netlink: 9 bytes leftover after parsing attributes in process `syz.3.578'.
[  130.943714][ T8103] syzkaller1: entered allmulticast mode
[  130.966238][ T8105] .70·: renamed from hsr0 (while UP)
[  130.977503][ T8105] .70·: entered allmulticast mode
[  130.993602][ T8105] hsr_slave_0: entered allmulticast mode
[  131.003238][ T8105] hsr_slave_1: entered allmulticast mode
[  131.021529][ T8105] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check.
[  131.059394][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'.
[  131.344459][ T8114] syzkaller1: entered promiscuous mode
[  131.363745][ T8114] syzkaller1: entered allmulticast mode
[  131.405615][ T8114] FAULT_INJECTION: forcing a failure.
[  131.405615][ T8114] name failslab, interval 1, probability 0, space 0, times 0
[  131.452923][ T8114] CPU: 0 UID: 0 PID: 8114 Comm: syz.1.581 Not tainted syzkaller #0 PREEMPT(full) 
[  131.452947][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  131.452957][ T8114] Call Trace:
[  131.452964][ T8114]  <TASK>
[  131.452972][ T8114]  dump_stack_lvl+0xe8/0x150
[  131.453013][ T8114]  should_fail_ex+0x412/0x560
[  131.453043][ T8114]  should_failslab+0xa8/0x100
[  131.453065][ T8114]  __kmalloc_noprof+0xe8/0x760
[  131.453090][ T8114]  ? tomoyo_encode+0x28b/0x550
[  131.453121][ T8114]  tomoyo_encode+0x28b/0x550
[  131.453149][ T8114]  tomoyo_realpath_from_path+0x58d/0x5d0
[  131.453175][ T8114]  ? tomoyo_domain+0xd7/0x130
[  131.453208][ T8114]  ? tomoyo_path_number_perm+0x219/0x630
[  131.453229][ T8114]  tomoyo_path_number_perm+0x246/0x630
[  131.453252][ T8114]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  131.453276][ T8114]  ? __lock_acquire+0x6b5/0x2cf0
[  131.453312][ T8114]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  131.453355][ T8114]  ? __fget_files+0x2a/0x420
[  131.453379][ T8114]  ? __fget_files+0x2a/0x420
[  131.453399][ T8114]  ? __fget_files+0x3a0/0x420
[  131.453418][ T8114]  ? __fget_files+0x2a/0x420
[  131.453443][ T8114]  security_file_ioctl+0xc3/0x2a0
[  131.453465][ T8114]  __se_sys_ioctl+0x47/0x170
[  131.453482][ T8114]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.453501][ T8114]  do_syscall_64+0x15f/0xf80
[  131.453520][ T8114]  ? trace_irq_disable+0x3b/0x140
[  131.453539][ T8114]  ? clear_bhb_loop+0x40/0x90
[  131.453561][ T8114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.453579][ T8114] RIP: 0033:0x7f248d39c819
[  131.453602][ T8114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.453617][ T8114] RSP: 002b:00007f248e2d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  131.453643][ T8114] RAX: ffffffffffffffda RBX: 00007f248d615fa0 RCX: 00007f248d39c819
[  131.453655][ T8114] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000009
[  131.453666][ T8114] RBP: 00007f248e2d2090 R08: 0000000000000000 R09: 0000000000000000
[  131.453677][ T8114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.453687][ T8114] R13: 00007f248d616038 R14: 00007f248d615fa0 R15: 00007ffd63d0c0d8
[  131.453717][ T8114]  </TASK>
[  131.734679][ T8114] ERROR: Out of memory at tomoyo_realpath_from_path.
[  132.681203][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  133.048250][ T8135] netlink: 'syz.2.587': attribute type 1 has an invalid length.
[  133.419346][ T8138] macsec1: entered allmulticast mode
[  133.431691][ T8138] macsec0: entered allmulticast mode
[  133.445732][ T8138] veth1_macvtap: entered allmulticast mode
[  133.694540][ T8150] __nla_validate_parse: 9 callbacks suppressed
[  133.694556][ T8150] netlink: 44 bytes leftover after parsing attributes in process `syz.3.591'.
[  133.765025][ T8154] syzkaller1: entered promiscuous mode
[  133.771769][ T8154] syzkaller1: entered allmulticast mode
[  133.785250][ T8154] FAULT_INJECTION: forcing a failure.
[  133.785250][ T8154] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  133.798733][ T8154] CPU: 0 UID: 0 PID: 8154 Comm: syz.4.593 Not tainted syzkaller #0 PREEMPT(full) 
[  133.798755][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  133.798766][ T8154] Call Trace:
[  133.798773][ T8154]  <TASK>
[  133.798780][ T8154]  dump_stack_lvl+0xe8/0x150
[  133.798810][ T8154]  should_fail_ex+0x412/0x560
[  133.798838][ T8154]  _copy_from_user+0x2d/0xb0
[  133.798857][ T8154]  wext_handle_ioctl+0xc7/0x1d0
[  133.798878][ T8154]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  133.798894][ T8154]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  133.798933][ T8154]  sock_ioctl+0x159/0x7f0
[  133.798954][ T8154]  ? __pfx_sock_ioctl+0x10/0x10
[  133.798973][ T8154]  ? __fget_files+0x2a/0x420
[  133.799000][ T8154]  ? __fget_files+0x3a0/0x420
[  133.799020][ T8154]  ? __fget_files+0x2a/0x420
[  133.799044][ T8154]  ? bpf_lsm_file_ioctl+0x9/0x20
[  133.799063][ T8154]  ? __pfx_sock_ioctl+0x10/0x10
[  133.799082][ T8154]  __se_sys_ioctl+0xfc/0x170
[  133.799099][ T8154]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.799119][ T8154]  do_syscall_64+0x15f/0xf80
[  133.799139][ T8154]  ? trace_irq_disable+0x3b/0x140
[  133.799158][ T8154]  ? clear_bhb_loop+0x40/0x90
[  133.799179][ T8154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.799197][ T8154] RIP: 0033:0x7f608779c819
[  133.799214][ T8154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.799228][ T8154] RSP: 002b:00007f608865b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  133.799248][ T8154] RAX: ffffffffffffffda RBX: 00007f6087a15fa0 RCX: 00007f608779c819
[  133.799261][ T8154] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000009
[  133.799271][ T8154] RBP: 00007f608865b090 R08: 0000000000000000 R09: 0000000000000000
[  133.799282][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.799292][ T8154] R13: 00007f6087a16038 R14: 00007f6087a15fa0 R15: 00007fff70be30a8
[  133.799321][ T8154]  </TASK>
[  134.336586][ T8176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.600'.
[  134.361875][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.603'.
[  134.382021][ T8176] netlink: 20 bytes leftover after parsing attributes in process `syz.4.600'.
[  134.399406][ T8182] bond4: entered promiscuous mode
[  134.405741][ T8182] 8021q: adding VLAN 0 to HW filter on device bond4
[  134.410123][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.602'.
[  134.419274][ T8176] ip6gre1: entered promiscuous mode
[  134.427283][ T8176] ip6gre1: entered allmulticast mode
[  134.437996][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'.
[  134.484540][ T8186] vlan2: entered promiscuous mode
[  134.489750][ T8186] batadv0: entered promiscuous mode
[  134.512287][ T8190] netlink: 76 bytes leftover after parsing attributes in process `syz.0.605'.
[  134.523300][ T8190] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  134.577416][ T8193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.626125][ T8193] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.859480][ T8204] syzkaller1: entered promiscuous mode
[  134.865633][ T8204] syzkaller1: entered allmulticast mode
[  134.884493][ T8207] syzkaller1: entered promiscuous mode
[  134.890245][ T8207] syzkaller1: entered allmulticast mode
[  134.955821][ T8210] sock: sock_set_timeout: `syz.2.612' (pid 8210) tries to set negative timeout
[  134.965580][ T8207] FAULT_INJECTION: forcing a failure.
[  134.965580][ T8207] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.979649][ T8210] netlink: 'syz.2.612': attribute type 3 has an invalid length.
[  134.987520][ T8207] CPU: 1 UID: 0 PID: 8207 Comm: syz.4.610 Not tainted syzkaller #0 PREEMPT(full) 
[  134.987541][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  134.987549][ T8207] Call Trace:
[  134.987556][ T8207]  <TASK>
[  134.987563][ T8207]  dump_stack_lvl+0xe8/0x150
[  134.987593][ T8207]  should_fail_ex+0x412/0x560
[  134.987633][ T8207]  _copy_to_user+0x31/0xb0
[  134.987654][ T8207]  simple_read_from_buffer+0xe1/0x170
[  134.987681][ T8207]  proc_fail_nth_read+0x1bb/0x230
[  134.987707][ T8207]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  134.987732][ T8207]  ? rw_verify_area+0x2a6/0x4d0
[  134.987756][ T8207]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  134.987780][ T8207]  vfs_read+0x20c/0xa70
[  134.987809][ T8207]  ? __pfx___mutex_lock+0x10/0x10
[  134.987832][ T8207]  ? __pfx_vfs_read+0x10/0x10
[  134.987857][ T8207]  ? __fget_files+0x2a/0x420
[  134.987882][ T8207]  ? __fget_files+0x3a0/0x420
[  134.987909][ T8207]  ? __fget_files+0x2a/0x420
[  134.987937][ T8207]  ksys_read+0x150/0x270
[  134.987964][ T8207]  ? __pfx_ksys_read+0x10/0x10
[  134.987987][ T8207]  ? __pfx_sock_ioctl+0x10/0x10
[  134.988014][ T8207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.988035][ T8207]  do_syscall_64+0x15f/0xf80
[  134.988058][ T8207]  ? clear_bhb_loop+0x40/0x90
[  134.988079][ T8207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.988096][ T8207] RIP: 0033:0x7f608775d04e
[  134.988113][ T8207] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  134.988127][ T8207] RSP: 002b:00007f608865afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  134.988146][ T8207] RAX: ffffffffffffffda RBX: 00007f608865b6c0 RCX: 00007f608775d04e
[  134.988158][ T8207] RDX: 000000000000000f RSI: 00007f608865b0a0 RDI: 000000000000000a
[  134.988169][ T8207] RBP: 00007f608865b090 R08: 0000000000000000 R09: 0000000000000000
[  134.988179][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.988189][ T8207] R13: 00007f6087a16038 R14: 00007f6087a15fa0 R15: 00007fff70be30a8
[  134.988219][ T8207]  </TASK>
[  135.042863][ T8210] netlink: 'syz.2.612': attribute type 1 has an invalid length.
[  135.181407][ T8218] sctp: [Deprecated]: syz.3.614 (pid 8218) Use of int in max_burst socket option.
[  135.181407][ T8218] Use struct sctp_assoc_value instead
[  135.234355][ T8210] netlink: 224 bytes leftover after parsing attributes in process `syz.2.612'.
[  135.446205][ T8231] netlink: 32 bytes leftover after parsing attributes in process `syz.4.618'.
[  135.497186][ T8231] netlink: 32 bytes leftover after parsing attributes in process `syz.4.618'.
[  135.757400][ T8247] x_tables: ip6_tables: mh match: only valid for protocol 135
[  136.112219][ T8267] bond3: entered promiscuous mode
[  136.118131][ T8267] 8021q: adding VLAN 0 to HW filter on device bond3
[  136.510530][ T8295] syzkaller0: entered promiscuous mode
[  136.523046][ T8295] syzkaller0: entered allmulticast mode
[  136.894628][ T8289] lo speed is unknown, defaulting to 1000
[  137.067675][ T8314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  137.305680][ T8328] netlink: 'syz.3.643': attribute type 1 has an invalid length.
[  138.093367][ T8334] netlink: 'syz.4.644': attribute type 6 has an invalid length.
[  138.181940][ T8334] netlink: 'syz.4.644': attribute type 6 has an invalid length.
[  138.212409][   T35] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  138.346613][   T35] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  138.358749][ T6886] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  138.381054][ T6886] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  138.772313][ T8355] __nla_validate_parse: 29 callbacks suppressed
[  138.772331][ T8355] netlink: 88 bytes leftover after parsing attributes in process `syz.4.650'.
[  139.058454][ T8364] netlink: 276 bytes leftover after parsing attributes in process `syz.4.653'.
[  139.262925][ T8373] netlink: 'syz.4.656': attribute type 1 has an invalid length.
[  139.314181][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.656'.
[  139.397737][ T8376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.655'.
[  139.427426][ T8376] netlink: 48 bytes leftover after parsing attributes in process `syz.0.655'.
[  139.479668][ T8382] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  139.492184][ T8382] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  140.144256][ T8381] lo speed is unknown, defaulting to 1000
[  140.265578][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'.
[  140.358713][ T8416] syzkaller1: entered promiscuous mode
[  140.378412][ T8416] syzkaller1: entered allmulticast mode
[  140.401401][ T8416] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  140.680114][ T8431] ip6gre1: entered promiscuous mode
[  140.685636][ T8431] ip6gre1: entered allmulticast mode
[  141.500702][ T8464] team0: entered allmulticast mode
[  141.507292][ T8464] team_slave_1: entered allmulticast mode
[  141.550052][    C1] ==================================================================
[  141.558159][    C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f8/0xa30
[  141.566162][    C1] Read of size 2 at addr ffff88815a1ceab4 by task syz.0.681/8466
[  141.573886][    C1] 
[  141.576221][    C1] CPU: 1 UID: 0 PID: 8466 Comm: syz.0.681 Not tainted syzkaller #0 PREEMPT(full) 
[  141.576247][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  141.576260][    C1] Call Trace:
[  141.576268][    C1]  <IRQ>
[  141.576276][    C1]  dump_stack_lvl+0xe8/0x150
[  141.576309][    C1]  print_report+0xba/0x230
[  141.576333][    C1]  ? qdisc_pkt_len_segs_init+0x7f8/0xa30
[  141.576354][    C1]  kasan_report+0x117/0x150
[  141.576373][    C1]  ? __pskb_pull_tail+0x1058/0x1690
[  141.576395][    C1]  ? qdisc_pkt_len_segs_init+0x7f8/0xa30
[  141.576420][    C1]  qdisc_pkt_len_segs_init+0x7f8/0xa30
[  141.576446][    C1]  __netif_receive_skb_core+0x13bd/0x3170
[  141.576471][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  141.576499][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  141.576526][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  141.576552][    C1]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  141.576578][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  141.576612][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  141.576638][    C1]  __netif_receive_skb_list_core+0x24d/0x810
[  141.576664][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  141.576693][    C1]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  141.576722][    C1]  netif_receive_skb_list_internal+0x995/0xcf0
[  141.576745][    C1]  ? lock_acquire+0x106/0x350
[  141.576771][    C1]  ? netif_receive_skb_list_internal+0x501/0xcf0
[  141.576795][    C1]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  141.576818][    C1]  ? dev_gro_receive+0x1108/0x23c0
[  141.576847][    C1]  ? dev_gro_receive+0x1773/0x23c0
[  141.576872][    C1]  ? dev_gro_receive+0x1108/0x23c0
[  141.576903][    C1]  napi_complete_done+0x299/0x730
[  141.576929][    C1]  ? __pfx_napi_complete_done+0x10/0x10
[  141.576953][    C1]  ? gro_cell_poll+0x16c/0x5d0
[  141.576978][    C1]  gro_cell_poll+0x5a9/0x5d0
[  141.577008][    C1]  ? gro_cell_poll+0x16c/0x5d0
[  141.577033][    C1]  __napi_poll+0xae/0x340
[  141.577055][    C1]  ? skb_defer_free_flush+0x233/0x260
[  141.577089][    C1]  net_rx_action+0x627/0xf70
[  141.577114][    C1]  ? lock_acquire+0x106/0x350
[  141.577147][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  141.577181][    C1]  ? sched_clock+0x3f/0x60
[  141.577211][    C1]  handle_softirqs+0x22a/0x840
[  141.577240][    C1]  ? do_softirq+0x76/0xd0
[  141.577267][    C1]  ? tun_rx_batched+0x185/0x790
[  141.577291][    C1]  do_softirq+0x76/0xd0
[  141.577316][    C1]  </IRQ>
[  141.577323][    C1]  <TASK>
[  141.577330][    C1]  __local_bh_enable_ip+0xf8/0x130
[  141.577356][    C1]  ? tun_rx_batched+0x185/0x790
[  141.577379][    C1]  tun_rx_batched+0x617/0x790
[  141.577405][    C1]  ? __pfx_tun_rx_batched+0x10/0x10
[  141.577427][    C1]  ? tun_get_user+0x26dc/0x3ed0
[  141.577451][    C1]  ? tun_get_user+0x26dc/0x3ed0
[  141.577474][    C1]  ? tun_get_user+0x23c7/0x3ed0
[  141.577497][    C1]  ? tun_get_user+0x23c7/0x3ed0
[  141.577524][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  141.577553][    C1]  ? tun_get_user+0x26dc/0x3ed0
[  141.577579][    C1]  tun_get_user+0x2aeb/0x3ed0
[  141.577615][    C1]  ? aa_file_perm+0x50e/0x15e0
[  141.577644][    C1]  ? __pfx_tun_get_user+0x10/0x10
[  141.577667][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  141.577692][    C1]  ? __pfx___futex_wait+0x10/0x10
[  141.577716][    C1]  ? ref_tracker_alloc+0x35c/0x4c0
[  141.577745][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  141.577775][    C1]  ? tun_get+0x1c/0x2f0
[  141.577795][    C1]  ? tun_get+0x1c/0x2f0
[  141.577818][    C1]  ? tun_get+0x1c/0x2f0
[  141.577837][    C1]  ? tun_get+0x1c/0x2f0
[  141.577860][    C1]  tun_chr_write_iter+0x113/0x200
[  141.577883][    C1]  vfs_write+0x61d/0xb90
[  141.577913][    C1]  ? __pfx_vfs_write+0x10/0x10
[  141.577945][    C1]  ? __fget_files+0x2a/0x420
[  141.577974][    C1]  ksys_write+0x150/0x270
[  141.578005][    C1]  ? __pfx_ksys_write+0x10/0x10
[  141.578038][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.578059][    C1]  do_syscall_64+0x15f/0xf80
[  141.578091][    C1]  ? trace_irq_disable+0x3b/0x140
[  141.578111][    C1]  ? clear_bhb_loop+0x40/0x90
[  141.578133][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.578152][    C1] RIP: 0033:0x7fe6c499c819
[  141.578169][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.578185][    C1] RSP: 002b:00007fe6c2bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  141.578207][    C1] RAX: ffffffffffffffda RBX: 00007fe6c4c15fa0 RCX: 00007fe6c499c819
[  141.578220][    C1] RDX: 000000000000fdef RSI: 0000200000004380 RDI: 0000000000000004
[  141.578233][    C1] RBP: 00007fe6c4a32c91 R08: 0000000000000000 R09: 0000000000000000
[  141.578245][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.578256][    C1] R13: 00007fe6c4c16038 R14: 00007fe6c4c15fa0 R15: 00007ffcbeacb4b8
[  141.578279][    C1]  </TASK>
[  141.578286][    C1] 
[  142.039901][    C1] The buggy address belongs to the physical page:
[  142.046311][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x15a1ce
[  142.055148][    C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  142.062347][    C1] raw: 057ff00000000000 ffffea0005687388 ffffea0005687388 0000000000000000
[  142.070913][    C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  142.079472][    C1] page dumped because: kasan: bad access detected
[  142.085879][    C1] page_owner info is not present (never set?)
[  142.091926][    C1] 
[  142.094235][    C1] Memory state around the buggy address:
[  142.099865][    C1]  ffff88815a1ce980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  142.107911][    C1]  ffff88815a1cea00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  142.115960][    C1] >ffff88815a1cea80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  142.124008][    C1]                                      ^
[  142.129623][    C1]  ffff88815a1ceb00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  142.137665][    C1]  ffff88815a1ceb80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  142.145704][    C1] ==================================================================
[  142.153869][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  142.161079][    C1] CPU: 1 UID: 0 PID: 8466 Comm: syz.0.681 Not tainted syzkaller #0 PREEMPT(full) 
[  142.170284][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  142.180339][    C1] Call Trace:
[  142.183617][    C1]  <IRQ>
[  142.186461][    C1]  vpanic+0x56c/0xa60
[  142.190456][    C1]  ? __pfx_vpanic+0x10/0x10
[  142.194971][    C1]  ? irqentry_exit+0x218/0x730
[  142.199748][    C1]  panic+0xc5/0xd0
[  142.203473][    C1]  ? __pfx_panic+0x10/0x10
[  142.207886][    C1]  ? qdisc_pkt_len_segs_init+0x7f8/0xa30
[  142.213512][    C1]  ? qdisc_pkt_len_segs_init+0x7f8/0xa30
[  142.219128][    C1]  check_panic_on_warn+0x89/0xb0
[  142.224058][    C1]  ? qdisc_pkt_len_segs_init+0x7f8/0xa30
[  142.229683][    C1]  end_report+0x73/0x170
[  142.233910][    C1]  ? qdisc_pkt_len_segs_init+0x7f8/0xa30
[  142.239527][    C1]  kasan_report+0x128/0x150
[  142.244015][    C1]  ? __pskb_pull_tail+0x1058/0x1690
[  142.249200][    C1]  ? qdisc_pkt_len_segs_init+0x7f8/0xa30
[  142.254821][    C1]  qdisc_pkt_len_segs_init+0x7f8/0xa30
[  142.260281][    C1]  __netif_receive_skb_core+0x13bd/0x3170
[  142.265994][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  142.270952][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  142.275881][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  142.280810][    C1]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  142.286863][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  142.291804][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  142.296816][    C1]  __netif_receive_skb_list_core+0x24d/0x810
[  142.302813][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  142.307747][    C1]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  142.314253][    C1]  netif_receive_skb_list_internal+0x995/0xcf0
[  142.320396][    C1]  ? lock_acquire+0x106/0x350
[  142.325062][    C1]  ? netif_receive_skb_list_internal+0x501/0xcf0
[  142.331377][    C1]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  142.338039][    C1]  ? dev_gro_receive+0x1108/0x23c0
[  142.343146][    C1]  ? dev_gro_receive+0x1773/0x23c0
[  142.348275][    C1]  ? dev_gro_receive+0x1108/0x23c0
[  142.353380][    C1]  napi_complete_done+0x299/0x730
[  142.358396][    C1]  ? __pfx_napi_complete_done+0x10/0x10
[  142.363938][    C1]  ? gro_cell_poll+0x16c/0x5d0
[  142.368692][    C1]  gro_cell_poll+0x5a9/0x5d0
[  142.373276][    C1]  ? gro_cell_poll+0x16c/0x5d0
[  142.378030][    C1]  __napi_poll+0xae/0x340
[  142.382344][    C1]  ? skb_defer_free_flush+0x233/0x260
[  142.387707][    C1]  net_rx_action+0x627/0xf70
[  142.392296][    C1]  ? lock_acquire+0x106/0x350
[  142.396979][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  142.402094][    C1]  ? sched_clock+0x3f/0x60
[  142.406504][    C1]  handle_softirqs+0x22a/0x840
[  142.411261][    C1]  ? do_softirq+0x76/0xd0
[  142.415587][    C1]  ? tun_rx_batched+0x185/0x790
[  142.420425][    C1]  do_softirq+0x76/0xd0
[  142.424570][    C1]  </IRQ>
[  142.427485][    C1]  <TASK>
[  142.430399][    C1]  __local_bh_enable_ip+0xf8/0x130
[  142.435498][    C1]  ? tun_rx_batched+0x185/0x790
[  142.440333][    C1]  tun_rx_batched+0x617/0x790
[  142.444998][    C1]  ? __pfx_tun_rx_batched+0x10/0x10
[  142.450182][    C1]  ? tun_get_user+0x26dc/0x3ed0
[  142.455019][    C1]  ? tun_get_user+0x26dc/0x3ed0
[  142.459856][    C1]  ? tun_get_user+0x23c7/0x3ed0
[  142.464699][    C1]  ? tun_get_user+0x23c7/0x3ed0
[  142.469570][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  142.474844][    C1]  ? tun_get_user+0x26dc/0x3ed0
[  142.479694][    C1]  tun_get_user+0x2aeb/0x3ed0
[  142.484383][    C1]  ? aa_file_perm+0x50e/0x15e0
[  142.489145][    C1]  ? __pfx_tun_get_user+0x10/0x10
[  142.494175][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  142.499117][    C1]  ? __pfx___futex_wait+0x10/0x10
[  142.504134][    C1]  ? ref_tracker_alloc+0x35c/0x4c0
[  142.509244][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  142.514711][    C1]  ? tun_get+0x1c/0x2f0
[  142.518864][    C1]  ? tun_get+0x1c/0x2f0
[  142.523025][    C1]  ? tun_get+0x1c/0x2f0
[  142.527171][    C1]  ? tun_get+0x1c/0x2f0
[  142.531335][    C1]  tun_chr_write_iter+0x113/0x200
[  142.536367][    C1]  vfs_write+0x61d/0xb90
[  142.540610][    C1]  ? __pfx_vfs_write+0x10/0x10
[  142.545371][    C1]  ? __fget_files+0x2a/0x420
[  142.549999][    C1]  ksys_write+0x150/0x270
[  142.554324][    C1]  ? __pfx_ksys_write+0x10/0x10
[  142.559172][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.565226][    C1]  do_syscall_64+0x15f/0xf80
[  142.569805][    C1]  ? trace_irq_disable+0x3b/0x140
[  142.574814][    C1]  ? clear_bhb_loop+0x40/0x90
[  142.579481][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.585360][    C1] RIP: 0033:0x7fe6c499c819
[  142.589762][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.609352][    C1] RSP: 002b:00007fe6c2bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  142.617759][    C1] RAX: ffffffffffffffda RBX: 00007fe6c4c15fa0 RCX: 00007fe6c499c819
[  142.625719][    C1] RDX: 000000000000fdef RSI: 0000200000004380 RDI: 0000000000000004
[  142.633676][    C1] RBP: 00007fe6c4a32c91 R08: 0000000000000000 R09: 0000000000000000
[  142.641633][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.649587][    C1] R13: 00007fe6c4c16038 R14: 00007fe6c4c15fa0 R15: 00007ffcbeacb4b8
[  142.657553][    C1]  </TASK>
[  142.660900][    C1] Kernel Offset: disabled
[  142.665215][    C1] Rebooting in 86400 seconds..